@openparachute/agent 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (501) hide show
  1. package/.claude/scheduled_tasks.lock +1 -0
  2. package/.claude/settings.json +5 -0
  3. package/.claude/skills/add-atomic-chat-tool/SKILL.md +243 -0
  4. package/.claude/skills/add-atomic-chat-tool/atomic-chat-mcp-stdio.ts +229 -0
  5. package/.claude/skills/add-codex/SKILL.md +161 -0
  6. package/.claude/skills/add-dashboard/SKILL.md +138 -0
  7. package/.claude/skills/add-dashboard/resources/dashboard-pusher.ts +495 -0
  8. package/.claude/skills/add-emacs/SKILL.md +296 -0
  9. package/.claude/skills/add-gcal-tool/SKILL.md +210 -0
  10. package/.claude/skills/add-gchat/REMOVE.md +6 -0
  11. package/.claude/skills/add-gchat/SKILL.md +92 -0
  12. package/.claude/skills/add-gchat/VERIFY.md +3 -0
  13. package/.claude/skills/add-github/REMOVE.md +6 -0
  14. package/.claude/skills/add-github/SKILL.md +148 -0
  15. package/.claude/skills/add-github/VERIFY.md +3 -0
  16. package/.claude/skills/add-gmail-tool/SKILL.md +229 -0
  17. package/.claude/skills/add-imessage/REMOVE.md +6 -0
  18. package/.claude/skills/add-imessage/SKILL.md +113 -0
  19. package/.claude/skills/add-imessage/VERIFY.md +3 -0
  20. package/.claude/skills/add-karpathy-llm-wiki/SKILL.md +110 -0
  21. package/.claude/skills/add-karpathy-llm-wiki/llm-wiki.md +75 -0
  22. package/.claude/skills/add-linear/REMOVE.md +6 -0
  23. package/.claude/skills/add-linear/SKILL.md +168 -0
  24. package/.claude/skills/add-linear/VERIFY.md +3 -0
  25. package/.claude/skills/add-macos-statusbar/SKILL.md +133 -0
  26. package/.claude/skills/add-macos-statusbar/add/src/statusbar.swift +147 -0
  27. package/.claude/skills/add-matrix/REMOVE.md +6 -0
  28. package/.claude/skills/add-matrix/SKILL.md +148 -0
  29. package/.claude/skills/add-matrix/VERIFY.md +3 -0
  30. package/.claude/skills/add-ollama-provider/SKILL.md +179 -0
  31. package/.claude/skills/add-ollama-tool/SKILL.md +193 -0
  32. package/.claude/skills/add-opencode/SKILL.md +229 -0
  33. package/.claude/skills/add-parallel/SKILL.md +290 -0
  34. package/.claude/skills/add-resend/REMOVE.md +6 -0
  35. package/.claude/skills/add-resend/SKILL.md +93 -0
  36. package/.claude/skills/add-resend/VERIFY.md +3 -0
  37. package/.claude/skills/add-signal/REMOVE.md +13 -0
  38. package/.claude/skills/add-signal/SKILL.md +318 -0
  39. package/.claude/skills/add-signal/VERIFY.md +5 -0
  40. package/.claude/skills/add-slack/REMOVE.md +6 -0
  41. package/.claude/skills/add-slack/SKILL.md +112 -0
  42. package/.claude/skills/add-slack/VERIFY.md +3 -0
  43. package/.claude/skills/add-teams/REMOVE.md +6 -0
  44. package/.claude/skills/add-teams/SKILL.md +207 -0
  45. package/.claude/skills/add-teams/VERIFY.md +3 -0
  46. package/.claude/skills/add-vercel/SKILL.md +147 -0
  47. package/.claude/skills/add-vercel/container-skills/vercel-cli/SKILL.md +103 -0
  48. package/.claude/skills/add-webex/REMOVE.md +6 -0
  49. package/.claude/skills/add-webex/SKILL.md +88 -0
  50. package/.claude/skills/add-webex/VERIFY.md +3 -0
  51. package/.claude/skills/add-wechat/REMOVE.md +49 -0
  52. package/.claude/skills/add-wechat/SKILL.md +170 -0
  53. package/.claude/skills/add-wechat/scripts/wire-dm.ts +172 -0
  54. package/.claude/skills/add-whatsapp/SKILL.md +264 -0
  55. package/.claude/skills/add-whatsapp-cloud/REMOVE.md +6 -0
  56. package/.claude/skills/add-whatsapp-cloud/SKILL.md +95 -0
  57. package/.claude/skills/add-whatsapp-cloud/VERIFY.md +3 -0
  58. package/.claude/skills/claw/SKILL.md +131 -0
  59. package/.claude/skills/claw/scripts/claw +374 -0
  60. package/.claude/skills/convert-to-apple-container/SKILL.md +212 -0
  61. package/.claude/skills/customize/SKILL.md +110 -0
  62. package/.claude/skills/debug/SKILL.md +349 -0
  63. package/.claude/skills/get-qodo-rules/SKILL.md +122 -0
  64. package/.claude/skills/get-qodo-rules/references/output-format.md +41 -0
  65. package/.claude/skills/get-qodo-rules/references/pagination.md +33 -0
  66. package/.claude/skills/get-qodo-rules/references/repository-scope.md +26 -0
  67. package/.claude/skills/init-first-agent/SKILL.md +120 -0
  68. package/.claude/skills/init-onecli/SKILL.md +270 -0
  69. package/.claude/skills/manage-channels/SKILL.md +87 -0
  70. package/.claude/skills/manage-mounts/SKILL.md +47 -0
  71. package/.claude/skills/migrate-from-openclaw/MIGRATE_CRONS.md +100 -0
  72. package/.claude/skills/migrate-from-openclaw/SKILL.md +447 -0
  73. package/.claude/skills/migrate-from-openclaw/scripts/discover-openclaw.ts +734 -0
  74. package/.claude/skills/migrate-from-openclaw/scripts/extract-channel-credentials.ts +476 -0
  75. package/.claude/skills/migrate-nanoclaw/SKILL.md +484 -0
  76. package/.claude/skills/migrate-nanoclaw/diagnostics.md +51 -0
  77. package/.claude/skills/qodo-pr-resolver/SKILL.md +326 -0
  78. package/.claude/skills/qodo-pr-resolver/resources/providers.md +329 -0
  79. package/.claude/skills/update-nanoclaw/SKILL.md +243 -0
  80. package/.claude/skills/update-nanoclaw/diagnostics.md +48 -0
  81. package/.claude/skills/update-skills/SKILL.md +130 -0
  82. package/.claude/skills/use-native-credential-proxy/SKILL.md +167 -0
  83. package/.claude/skills/x-integration/SKILL.md +417 -0
  84. package/.claude/skills/x-integration/agent.ts +243 -0
  85. package/.claude/skills/x-integration/host.ts +155 -0
  86. package/.claude/skills/x-integration/lib/browser.ts +148 -0
  87. package/.claude/skills/x-integration/lib/config.ts +62 -0
  88. package/.claude/skills/x-integration/scripts/like.ts +56 -0
  89. package/.claude/skills/x-integration/scripts/post.ts +66 -0
  90. package/.claude/skills/x-integration/scripts/quote.ts +80 -0
  91. package/.claude/skills/x-integration/scripts/reply.ts +74 -0
  92. package/.claude/skills/x-integration/scripts/retweet.ts +62 -0
  93. package/.claude/skills/x-integration/scripts/setup.ts +87 -0
  94. package/.github/CODEOWNERS +10 -0
  95. package/.github/PULL_REQUEST_TEMPLATE.md +18 -0
  96. package/.github/workflows/bump-version.yml +35 -0
  97. package/.github/workflows/ci.yml +39 -0
  98. package/.github/workflows/label-pr.yml +40 -0
  99. package/.github/workflows/update-tokens.yml +43 -0
  100. package/.husky/pre-commit +1 -0
  101. package/.mcp.json +3 -0
  102. package/.nvmrc +1 -0
  103. package/.parachute/module.json +14 -0
  104. package/.prettierrc +4 -0
  105. package/CHANGELOG.md +215 -0
  106. package/CLAUDE.md +307 -0
  107. package/CODE_OF_CONDUCT.md +128 -0
  108. package/CONTRIBUTING.md +159 -0
  109. package/CONTRIBUTORS.md +26 -0
  110. package/LICENSE +21 -0
  111. package/README.md +190 -0
  112. package/README_ja.md +194 -0
  113. package/README_zh.md +194 -0
  114. package/assets/nanoclaw-favicon.png +0 -0
  115. package/assets/nanoclaw-icon.png +0 -0
  116. package/assets/nanoclaw-logo-dark.png +0 -0
  117. package/assets/nanoclaw-logo.png +0 -0
  118. package/assets/nanoclaw-profile.jpeg +0 -0
  119. package/assets/nanoclaw-sales.png +0 -0
  120. package/assets/social-preview.jpg +0 -0
  121. package/config-examples/mount-allowlist.json +25 -0
  122. package/container/.dockerignore +2 -0
  123. package/container/CLAUDE.md +21 -0
  124. package/container/Dockerfile +121 -0
  125. package/container/agent-runner/bun.lock +243 -0
  126. package/container/agent-runner/package.json +22 -0
  127. package/container/agent-runner/scripts/sdk-signal-probe.ts +169 -0
  128. package/container/agent-runner/src/config.ts +55 -0
  129. package/container/agent-runner/src/db/connection.ts +267 -0
  130. package/container/agent-runner/src/db/index.ts +20 -0
  131. package/container/agent-runner/src/db/messages-in.ts +138 -0
  132. package/container/agent-runner/src/db/messages-out.ts +143 -0
  133. package/container/agent-runner/src/db/session-routing.ts +30 -0
  134. package/container/agent-runner/src/db/session-state.test.ts +100 -0
  135. package/container/agent-runner/src/db/session-state.ts +79 -0
  136. package/container/agent-runner/src/destinations.ts +135 -0
  137. package/container/agent-runner/src/formatter.test.ts +167 -0
  138. package/container/agent-runner/src/formatter.ts +260 -0
  139. package/container/agent-runner/src/index.ts +110 -0
  140. package/container/agent-runner/src/integration.test.ts +121 -0
  141. package/container/agent-runner/src/mcp-tools/agents.instructions.md +26 -0
  142. package/container/agent-runner/src/mcp-tools/agents.ts +66 -0
  143. package/container/agent-runner/src/mcp-tools/core.instructions.md +27 -0
  144. package/container/agent-runner/src/mcp-tools/core.ts +262 -0
  145. package/container/agent-runner/src/mcp-tools/index.ts +22 -0
  146. package/container/agent-runner/src/mcp-tools/interactive.instructions.md +22 -0
  147. package/container/agent-runner/src/mcp-tools/interactive.ts +169 -0
  148. package/container/agent-runner/src/mcp-tools/scheduling.instructions.md +40 -0
  149. package/container/agent-runner/src/mcp-tools/scheduling.ts +299 -0
  150. package/container/agent-runner/src/mcp-tools/self-mod.instructions.md +25 -0
  151. package/container/agent-runner/src/mcp-tools/self-mod.ts +120 -0
  152. package/container/agent-runner/src/mcp-tools/server.ts +54 -0
  153. package/container/agent-runner/src/mcp-tools/types.ts +6 -0
  154. package/container/agent-runner/src/poll-loop.test.ts +248 -0
  155. package/container/agent-runner/src/poll-loop.ts +437 -0
  156. package/container/agent-runner/src/providers/claude.ts +379 -0
  157. package/container/agent-runner/src/providers/factory.test.ts +19 -0
  158. package/container/agent-runner/src/providers/factory.ts +13 -0
  159. package/container/agent-runner/src/providers/index.ts +6 -0
  160. package/container/agent-runner/src/providers/mock.ts +77 -0
  161. package/container/agent-runner/src/providers/provider-registry.ts +33 -0
  162. package/container/agent-runner/src/providers/types.ts +82 -0
  163. package/container/agent-runner/src/scheduling/task-script.ts +121 -0
  164. package/container/agent-runner/src/timezone.test.ts +93 -0
  165. package/container/agent-runner/src/timezone.ts +107 -0
  166. package/container/agent-runner/tsconfig.json +14 -0
  167. package/container/build.sh +48 -0
  168. package/container/entrypoint.sh +16 -0
  169. package/container/skills/agent-browser/SKILL.md +159 -0
  170. package/container/skills/frontend-engineer/SKILL.md +157 -0
  171. package/container/skills/self-customize/SKILL.md +87 -0
  172. package/container/skills/slack-formatting/SKILL.md +94 -0
  173. package/container/skills/vercel-cli/SKILL.md +111 -0
  174. package/container/skills/welcome/SKILL.md +85 -0
  175. package/docs/APPLE-CONTAINER-NETWORKING.md +90 -0
  176. package/docs/BRANCH-FORK-MAINTENANCE.md +81 -0
  177. package/docs/README.md +25 -0
  178. package/docs/SDK_DEEP_DIVE.md +643 -0
  179. package/docs/SECURITY.md +162 -0
  180. package/docs/agent-runner-details.md +749 -0
  181. package/docs/api-details.md +365 -0
  182. package/docs/architecture-diagram.html +422 -0
  183. package/docs/architecture-diagram.md +215 -0
  184. package/docs/architecture.md +751 -0
  185. package/docs/audit/2026-04-30-channel-endpoint-audit.md +36 -0
  186. package/docs/build-and-runtime.md +80 -0
  187. package/docs/cross-mount-stress/README.md +112 -0
  188. package/docs/cross-mount-stress/container-writer-retry.mjs +55 -0
  189. package/docs/cross-mount-stress/container-writer-slow.mjs +42 -0
  190. package/docs/cross-mount-stress/container-writer.mjs +47 -0
  191. package/docs/cross-mount-stress/host-writer-retry.mjs +55 -0
  192. package/docs/cross-mount-stress/host-writer-slow.mjs +43 -0
  193. package/docs/cross-mount-stress/host-writer.mjs +47 -0
  194. package/docs/db-central.md +316 -0
  195. package/docs/db-session.md +183 -0
  196. package/docs/db.md +119 -0
  197. package/docs/design/2026-04-29-vault-management-ui.md +231 -0
  198. package/docs/design/2026-04-30-channel-wiring-rework.md +234 -0
  199. package/docs/design/2026-05-01-channel-wiring-approvals-deep-dive.md +272 -0
  200. package/docs/design/2026-05-02-channel-policy-and-approval-routing.md +250 -0
  201. package/docs/docker-sandboxes.md +359 -0
  202. package/docs/isolation-model.md +88 -0
  203. package/docs/ollama.md +79 -0
  204. package/docs/parachute-integration.md +109 -0
  205. package/docs/post-night-rebirth-reflections.md +151 -0
  206. package/eslint.config.js +32 -0
  207. package/package.json +54 -0
  208. package/pnpm-workspace.yaml +8 -0
  209. package/repo-tokens/README.md +113 -0
  210. package/repo-tokens/action.yml +186 -0
  211. package/repo-tokens/badge.svg +23 -0
  212. package/repo-tokens/examples/green.svg +14 -0
  213. package/repo-tokens/examples/red.svg +14 -0
  214. package/repo-tokens/examples/yellow-green.svg +14 -0
  215. package/repo-tokens/examples/yellow.svg +14 -0
  216. package/scripts/chat.ts +101 -0
  217. package/scripts/cleanup-sessions.sh +150 -0
  218. package/scripts/init-cli-agent.ts +171 -0
  219. package/scripts/init-first-agent.ts +377 -0
  220. package/scripts/parachute.ts +158 -0
  221. package/scripts/run-migrations.ts +105 -0
  222. package/scripts/sanity-live-poll.ts +95 -0
  223. package/scripts/seed-discord.ts +79 -0
  224. package/scripts/test-v2-agent.ts +106 -0
  225. package/scripts/test-v2-channel-e2e.ts +265 -0
  226. package/scripts/test-v2-host.ts +184 -0
  227. package/src/channels/adapter.ts +214 -0
  228. package/src/channels/ask-question.ts +46 -0
  229. package/src/channels/channel-registry.test.ts +421 -0
  230. package/src/channels/channel-registry.ts +313 -0
  231. package/src/channels/chat-sdk-bridge.test.ts +84 -0
  232. package/src/channels/chat-sdk-bridge.ts +652 -0
  233. package/src/channels/cli.ts +276 -0
  234. package/src/channels/discord.ts +90 -0
  235. package/src/channels/index.ts +17 -0
  236. package/src/channels/telegram-markdown-sanitize.test.ts +78 -0
  237. package/src/channels/telegram-markdown-sanitize.ts +55 -0
  238. package/src/channels/telegram-pairing.test.ts +254 -0
  239. package/src/channels/telegram-pairing.ts +339 -0
  240. package/src/channels/telegram.ts +279 -0
  241. package/src/channels/trust-hint.test.ts +48 -0
  242. package/src/channels/trust-hint.ts +75 -0
  243. package/src/claude-md-compose.migrate.test.ts +64 -0
  244. package/src/claude-md-compose.ts +205 -0
  245. package/src/command-gate.ts +63 -0
  246. package/src/config.test.ts +93 -0
  247. package/src/config.ts +108 -0
  248. package/src/container-config.ts +167 -0
  249. package/src/container-runner.test.ts +32 -0
  250. package/src/container-runner.ts +576 -0
  251. package/src/container-runtime.test.ts +169 -0
  252. package/src/container-runtime.ts +92 -0
  253. package/src/db/_bun-sqlite-shim.ts +88 -0
  254. package/src/db/agent-activity.test.ts +155 -0
  255. package/src/db/agent-activity.ts +121 -0
  256. package/src/db/agent-groups.ts +77 -0
  257. package/src/db/connection.migrate.test.ts +143 -0
  258. package/src/db/connection.ts +224 -0
  259. package/src/db/db-v2.test.ts +440 -0
  260. package/src/db/dropped-messages.ts +44 -0
  261. package/src/db/index.ts +40 -0
  262. package/src/db/messaging-groups.ts +252 -0
  263. package/src/db/migrations/001-initial.ts +112 -0
  264. package/src/db/migrations/002-chat-sdk-state.ts +36 -0
  265. package/src/db/migrations/008-dropped-messages.ts +27 -0
  266. package/src/db/migrations/009-drop-pending-credentials.ts +13 -0
  267. package/src/db/migrations/010-engage-modes.ts +103 -0
  268. package/src/db/migrations/011-pending-sender-approvals.ts +40 -0
  269. package/src/db/migrations/012-channel-registration.ts +48 -0
  270. package/src/db/migrations/013-approval-render-metadata.ts +27 -0
  271. package/src/db/migrations/014-secrets.ts +44 -0
  272. package/src/db/migrations/015-secrets-drop-host-pattern.ts +18 -0
  273. package/src/db/migrations/016-secret-assignments.ts +30 -0
  274. package/src/db/migrations/017-agent-activity.ts +40 -0
  275. package/src/db/migrations/018-oauth-app-configs.ts +34 -0
  276. package/src/db/migrations/019-oauth-app-connections.ts +48 -0
  277. package/src/db/migrations/020-agent-app-connections.ts +28 -0
  278. package/src/db/migrations/021-pending-oauth-states.ts +35 -0
  279. package/src/db/migrations/022-app-connections-provider.ts +25 -0
  280. package/src/db/migrations/023-agent-group-secret-mode.test.ts +124 -0
  281. package/src/db/migrations/023-agent-group-secret-mode.ts +65 -0
  282. package/src/db/migrations/024-collapse-approvals.test.ts +249 -0
  283. package/src/db/migrations/024-collapse-approvals.ts +182 -0
  284. package/src/db/migrations/025-secret-mode-check.test.ts +155 -0
  285. package/src/db/migrations/025-secret-mode-check.ts +49 -0
  286. package/src/db/migrations/026-user-dms-bot-id.test.ts +116 -0
  287. package/src/db/migrations/026-user-dms-bot-id.ts +54 -0
  288. package/src/db/migrations/027-provider-credentials.ts +41 -0
  289. package/src/db/migrations/_test-helpers.ts +41 -0
  290. package/src/db/migrations/index.ts +127 -0
  291. package/src/db/migrations/module-agent-to-agent-destinations.ts +84 -0
  292. package/src/db/migrations/module-approvals-pending-approvals.ts +42 -0
  293. package/src/db/migrations/module-approvals-title-options.ts +40 -0
  294. package/src/db/schema.ts +258 -0
  295. package/src/db/session-db.test.ts +93 -0
  296. package/src/db/session-db.ts +325 -0
  297. package/src/db/sessions.ts +241 -0
  298. package/src/delivery.test.ts +148 -0
  299. package/src/delivery.ts +445 -0
  300. package/src/env.ts +74 -0
  301. package/src/group-folder.test.ts +35 -0
  302. package/src/group-folder.ts +44 -0
  303. package/src/group-init.ts +92 -0
  304. package/src/host-core.test.ts +456 -0
  305. package/src/host-sweep.test.ts +146 -0
  306. package/src/host-sweep.ts +287 -0
  307. package/src/index.ts +227 -0
  308. package/src/install-slug.ts +33 -0
  309. package/src/log.test.ts +81 -0
  310. package/src/log.ts +117 -0
  311. package/src/mcp/http.ts +72 -0
  312. package/src/mcp/server.ts +92 -0
  313. package/src/mcp/stdio.ts +51 -0
  314. package/src/mcp/tools/activity.ts +88 -0
  315. package/src/mcp/tools/agent-groups.ts +183 -0
  316. package/src/mcp/tools/approvals.ts +122 -0
  317. package/src/mcp/tools/channels.ts +199 -0
  318. package/src/mcp/tools/index.ts +27 -0
  319. package/src/mcp/tools/oauth.ts +48 -0
  320. package/src/mcp/tools/secrets.ts +169 -0
  321. package/src/mcp/tools/sessions.ts +135 -0
  322. package/src/mcp/types.ts +51 -0
  323. package/src/modules/agent-to-agent/agent-route.test.ts +46 -0
  324. package/src/modules/agent-to-agent/agent-route.ts +223 -0
  325. package/src/modules/agent-to-agent/create-agent.ts +127 -0
  326. package/src/modules/agent-to-agent/db/agent-destinations.ts +135 -0
  327. package/src/modules/agent-to-agent/index.ts +22 -0
  328. package/src/modules/agent-to-agent/write-destinations.ts +59 -0
  329. package/src/modules/approvals/agent.md +45 -0
  330. package/src/modules/approvals/index.ts +21 -0
  331. package/src/modules/approvals/picks.test.ts +291 -0
  332. package/src/modules/approvals/primitive.ts +279 -0
  333. package/src/modules/approvals/project.md +27 -0
  334. package/src/modules/approvals/response-handler.ts +87 -0
  335. package/src/modules/index.ts +24 -0
  336. package/src/modules/interactive/agent.md +21 -0
  337. package/src/modules/interactive/index.ts +69 -0
  338. package/src/modules/interactive/project.md +12 -0
  339. package/src/modules/mount-security/index.ts +448 -0
  340. package/src/modules/mount-security/migrate.test.ts +91 -0
  341. package/src/modules/permissions/access.ts +28 -0
  342. package/src/modules/permissions/channel-approval.test.ts +389 -0
  343. package/src/modules/permissions/channel-approval.ts +188 -0
  344. package/src/modules/permissions/db/agent-group-members.ts +44 -0
  345. package/src/modules/permissions/db/pending-channel-approvals.test.ts +86 -0
  346. package/src/modules/permissions/db/pending-channel-approvals.ts +66 -0
  347. package/src/modules/permissions/db/pending-sender-approvals.ts +60 -0
  348. package/src/modules/permissions/db/user-dms.ts +58 -0
  349. package/src/modules/permissions/db/user-roles.ts +85 -0
  350. package/src/modules/permissions/db/users.ts +38 -0
  351. package/src/modules/permissions/index.ts +421 -0
  352. package/src/modules/permissions/permissions.test.ts +358 -0
  353. package/src/modules/permissions/sender-approval.test.ts +470 -0
  354. package/src/modules/permissions/sender-approval.ts +165 -0
  355. package/src/modules/permissions/user-dm.ts +200 -0
  356. package/src/modules/provider-credentials/db.ts +121 -0
  357. package/src/modules/provider-credentials/index.ts +12 -0
  358. package/src/modules/provider-credentials/spawn.test.ts +206 -0
  359. package/src/modules/provider-credentials/spawn.ts +114 -0
  360. package/src/modules/scheduling/actions.ts +113 -0
  361. package/src/modules/scheduling/db.test.ts +282 -0
  362. package/src/modules/scheduling/db.ts +148 -0
  363. package/src/modules/scheduling/index.ts +34 -0
  364. package/src/modules/scheduling/recurrence.test.ts +98 -0
  365. package/src/modules/scheduling/recurrence.ts +54 -0
  366. package/src/modules/self-mod/agent.md +30 -0
  367. package/src/modules/self-mod/apply.ts +85 -0
  368. package/src/modules/self-mod/index.ts +30 -0
  369. package/src/modules/self-mod/project.md +39 -0
  370. package/src/modules/self-mod/request.ts +91 -0
  371. package/src/modules/typing/index.ts +165 -0
  372. package/src/oauth/agent-app-connections.ts +103 -0
  373. package/src/oauth/app-configs.test.ts +64 -0
  374. package/src/oauth/app-configs.ts +114 -0
  375. package/src/oauth/app-connections.test.ts +109 -0
  376. package/src/oauth/app-connections.ts +178 -0
  377. package/src/oauth/crypto.ts +56 -0
  378. package/src/oauth/flow.ts +104 -0
  379. package/src/oauth/providers/google.test.ts +38 -0
  380. package/src/oauth/providers/google.ts +46 -0
  381. package/src/oauth/providers/index.ts +48 -0
  382. package/src/oauth/state-store.test.ts +54 -0
  383. package/src/oauth/state-store.ts +93 -0
  384. package/src/parachute/README.md +27 -0
  385. package/src/parachute/create-agent.test.ts +83 -0
  386. package/src/parachute/create-agent.ts +122 -0
  387. package/src/parachute/group-status.test.ts +165 -0
  388. package/src/parachute/group-status.ts +136 -0
  389. package/src/parachute/types.ts +41 -0
  390. package/src/parachute/vault-mcp.test.ts +251 -0
  391. package/src/parachute/vault-mcp.ts +232 -0
  392. package/src/platform-id.test.ts +104 -0
  393. package/src/platform-id.ts +109 -0
  394. package/src/providers/index.ts +6 -0
  395. package/src/providers/provider-container-registry.ts +58 -0
  396. package/src/response-registry.ts +45 -0
  397. package/src/router.ts +530 -0
  398. package/src/secrets/crypto.test.ts +45 -0
  399. package/src/secrets/crypto.ts +55 -0
  400. package/src/secrets/index.ts +355 -0
  401. package/src/secrets/master-key.ts +70 -0
  402. package/src/secrets/secrets.test.ts +354 -0
  403. package/src/session-manager.migrate.test.ts +59 -0
  404. package/src/session-manager.ts +433 -0
  405. package/src/startup-bootstrap.test.ts +226 -0
  406. package/src/startup-bootstrap.ts +207 -0
  407. package/src/state-sqlite.ts +182 -0
  408. package/src/timezone.test.ts +64 -0
  409. package/src/timezone.ts +37 -0
  410. package/src/types.ts +230 -0
  411. package/src/web/auth.test.ts +335 -0
  412. package/src/web/auth.ts +214 -0
  413. package/src/web/discord-validate.test.ts +77 -0
  414. package/src/web/discord-validate.ts +88 -0
  415. package/src/web/hub-discovery.test.ts +98 -0
  416. package/src/web/hub-discovery.ts +69 -0
  417. package/src/web/routes/activity.ts +106 -0
  418. package/src/web/routes/agent-provider.test.ts +282 -0
  419. package/src/web/routes/agent-provider.ts +309 -0
  420. package/src/web/routes/approvals.ts +185 -0
  421. package/src/web/routes/apps.ts +434 -0
  422. package/src/web/routes/channels-mg-detail.test.ts +324 -0
  423. package/src/web/routes/channels-mga-detail.test.ts +425 -0
  424. package/src/web/routes/channels.ts +489 -0
  425. package/src/web/routes/oauth-providers.ts +42 -0
  426. package/src/web/routes/secrets.test.ts +175 -0
  427. package/src/web/routes/secrets.ts +282 -0
  428. package/src/web/routes/sessions.ts +123 -0
  429. package/src/web/routes/settings.test.ts +106 -0
  430. package/src/web/routes/settings.ts +247 -0
  431. package/src/web/routes/setup-status.ts +205 -0
  432. package/src/web/routes/vaults.test.ts +389 -0
  433. package/src/web/routes/vaults.ts +225 -0
  434. package/src/web/server-version.test.ts +16 -0
  435. package/src/web/server.ts +1003 -0
  436. package/src/web/services-manifest.test.ts +120 -0
  437. package/src/web/services-manifest.ts +61 -0
  438. package/src/web/static-serve.test.ts +255 -0
  439. package/src/web/static-serve.ts +104 -0
  440. package/src/web/telegram-validate.test.ts +116 -0
  441. package/src/web/telegram-validate.ts +107 -0
  442. package/src/web/vault-proxy.test.ts +214 -0
  443. package/src/web/vault-proxy.ts +120 -0
  444. package/src/web/wire-channel.ts +181 -0
  445. package/src/webhook-server.ts +134 -0
  446. package/tsconfig.json +21 -0
  447. package/vitest.config.ts +18 -0
  448. package/web/README.md +63 -0
  449. package/web/ui/index.html +13 -0
  450. package/web/ui/package.json +35 -0
  451. package/web/ui/pnpm-lock.yaml +2164 -0
  452. package/web/ui/scripts/verify-base.mjs +31 -0
  453. package/web/ui/src/App.tsx +88 -0
  454. package/web/ui/src/components/ActivityFeed.tsx +444 -0
  455. package/web/ui/src/components/AgentGroupPicker.tsx +263 -0
  456. package/web/ui/src/components/AgentProviderCards.tsx +220 -0
  457. package/web/ui/src/components/CredentialForm.tsx +214 -0
  458. package/web/ui/src/components/ScopeGrants.tsx +74 -0
  459. package/web/ui/src/components/StatusDot.tsx +43 -0
  460. package/web/ui/src/components/VaultPicker.tsx +127 -0
  461. package/web/ui/src/components/setup/AdapterInstallStep.tsx +178 -0
  462. package/web/ui/src/components/setup/AgentGroupStep.tsx +43 -0
  463. package/web/ui/src/components/setup/ChannelPickStep.tsx +74 -0
  464. package/web/ui/src/components/setup/DoneStep.tsx +49 -0
  465. package/web/ui/src/components/setup/PrereqStep.tsx +129 -0
  466. package/web/ui/src/components/setup/TestConnectionStep.tsx +108 -0
  467. package/web/ui/src/components/setup/TestMessageStep.tsx +104 -0
  468. package/web/ui/src/components/setup/WireChannelStep.tsx +166 -0
  469. package/web/ui/src/components/setup/types.ts +105 -0
  470. package/web/ui/src/lib/api.test.ts +410 -0
  471. package/web/ui/src/lib/api.ts +1210 -0
  472. package/web/ui/src/lib/auth.test.ts +139 -0
  473. package/web/ui/src/lib/auth.ts +348 -0
  474. package/web/ui/src/lib/channel-adapters.ts +136 -0
  475. package/web/ui/src/main.tsx +19 -0
  476. package/web/ui/src/routes/ApprovalsList.tsx +294 -0
  477. package/web/ui/src/routes/Apps.tsx +613 -0
  478. package/web/ui/src/routes/ChannelWireDetail.test.tsx +233 -0
  479. package/web/ui/src/routes/ChannelWireDetail.tsx +403 -0
  480. package/web/ui/src/routes/ChannelsList.tsx +158 -0
  481. package/web/ui/src/routes/GroupDetail.tsx +755 -0
  482. package/web/ui/src/routes/GroupList.tsx +187 -0
  483. package/web/ui/src/routes/MessagingGroupDetail.test.tsx +233 -0
  484. package/web/ui/src/routes/MessagingGroupDetail.tsx +306 -0
  485. package/web/ui/src/routes/NewGroupWizard.tsx +390 -0
  486. package/web/ui/src/routes/OAuthCallback.tsx +56 -0
  487. package/web/ui/src/routes/SecretsList.tsx +921 -0
  488. package/web/ui/src/routes/SessionsList.tsx +220 -0
  489. package/web/ui/src/routes/SettingsAgentProvider.tsx +109 -0
  490. package/web/ui/src/routes/SettingsApprovals.tsx +234 -0
  491. package/web/ui/src/routes/SetupWizard.tsx +219 -0
  492. package/web/ui/src/routes/VaultDetail.test.tsx +361 -0
  493. package/web/ui/src/routes/VaultDetail.tsx +960 -0
  494. package/web/ui/src/routes/VaultsList.tsx +295 -0
  495. package/web/ui/src/routes/WireChannelPage.tsx +413 -0
  496. package/web/ui/src/styles.css +608 -0
  497. package/web/ui/src/test/setup.ts +23 -0
  498. package/web/ui/src/vite-env.d.ts +10 -0
  499. package/web/ui/tsconfig.json +20 -0
  500. package/web/ui/vite.config.ts +34 -0
  501. package/web/ui/vitest.config.ts +25 -0
@@ -0,0 +1,413 @@
1
+ /**
2
+ * /channels/new — wire a new channel to an agent group on a single page.
3
+ *
4
+ * The setup wizard's eight-step march is the right shape for *first* boot
5
+ * (prereqs / install / hub / vault / agent group / wire / test). It's the
6
+ * wrong shape for the operator's *second* channel: by then prereqs are
7
+ * met, the adapter is installed, an agent group exists, and the only
8
+ * unknown is the bot token + (for telegram) the operator's user id.
9
+ *
10
+ * This page is intentionally one form, three sections:
11
+ * 1. Pick adapter (discord / telegram, plus disabled "coming soon" rows)
12
+ * 2. Bot identity (paste token → validate → show identity)
13
+ * 3. Agent group (existing or create, via shared <AgentGroupPicker />)
14
+ *
15
+ * Wiring is the final action button, enabled only when all three are
16
+ * satisfied. After a successful wire we render a confirmation panel with
17
+ * the platform_id and a link back to /channels.
18
+ *
19
+ * State is local-only — no localStorage, no /api/setup/status involvement.
20
+ * If the user navigates away mid-flow, they restart cleanly. The setup
21
+ * wizard remains the resumable surface; this page is the "fast path".
22
+ */
23
+ import { useEffect, useMemo, useState } from 'react';
24
+ import { Link } from 'react-router-dom';
25
+
26
+ import { AgentGroupPicker, type PickedGroup } from '../components/AgentGroupPicker.tsx';
27
+ import {
28
+ COMING_SOON_ADAPTERS,
29
+ SUPPORTED_ADAPTERS,
30
+ type ChannelAdapter,
31
+ type ResolvedIdentity,
32
+ } from '../lib/channel-adapters.ts';
33
+ import {
34
+ listOperatorIdentities,
35
+ registerChannelBot,
36
+ wireChannelToGroup,
37
+ type WireChannelResult,
38
+ } from '../lib/api.ts';
39
+
40
+ export function WireChannelPage() {
41
+ const [adapterKey, setAdapterKey] = useState<ChannelAdapter | null>(null);
42
+ const adapter = useMemo(
43
+ () => SUPPORTED_ADAPTERS.find((a) => a.key === adapterKey) ?? null,
44
+ [adapterKey],
45
+ );
46
+
47
+ const [token, setToken] = useState('');
48
+ const [validating, setValidating] = useState(false);
49
+ const [validateError, setValidateError] = useState<string | null>(null);
50
+ const [identity, setIdentity] = useState<ResolvedIdentity | null>(null);
51
+
52
+ const [operatorUserId, setOperatorUserId] = useState('');
53
+ // Per-channel default for the "bot admin user" field, derived from the
54
+ // install's owner row in user_roles. Pre-fills the input when the
55
+ // operator picks an adapter that captures one (telegram). Loaded once
56
+ // on mount; null until resolved.
57
+ const [operatorDefaults, setOperatorDefaults] = useState<Record<string, string> | null>(null);
58
+ const [operatorPrefilled, setOperatorPrefilled] = useState(false);
59
+
60
+ useEffect(() => {
61
+ listOperatorIdentities().then(setOperatorDefaults).catch(() => setOperatorDefaults({}));
62
+ }, []);
63
+
64
+ const [picked, setPicked] = useState<PickedGroup | null>(null);
65
+
66
+ const [wiring, setWiring] = useState(false);
67
+ const [wireResult, setWireResult] = useState<WireChannelResult | null>(null);
68
+ const [wireError, setWireError] = useState<string | null>(null);
69
+
70
+ const onPickAdapter = (key: ChannelAdapter) => {
71
+ if (key === adapterKey) return;
72
+ setAdapterKey(key);
73
+ setToken('');
74
+ setIdentity(null);
75
+ setValidateError(null);
76
+ // Pre-fill operatorUserId from the install's owner identity for this
77
+ // channel, if any. Operator can still edit; the prefilled flag drives
78
+ // the "(auto-filled)" hint so they know it came from prior setup.
79
+ const prefill = operatorDefaults?.[key] ?? '';
80
+ setOperatorUserId(prefill);
81
+ setOperatorPrefilled(prefill.length > 0);
82
+ };
83
+
84
+ const onValidate = async () => {
85
+ if (!adapter || !token.trim()) return;
86
+ setValidating(true);
87
+ setValidateError(null);
88
+ try {
89
+ const trimmed = token.trim();
90
+ // Single hop: register-bot validates upstream, persists to /secrets,
91
+ // and brings the adapter live in one server round-trip. The server
92
+ // surfaces the upstream platform's rejection message via the standard
93
+ // `{ error }` shape on bad tokens, so we don't need a separate /test
94
+ // pre-call.
95
+ //
96
+ // Re-posting the same bot's secret with a new token persists the
97
+ // rotation immediately but the live polling loop keeps the old token
98
+ // until the next host restart — same as a `.env` rotation. Operators
99
+ // doing a forced rotation should restart paraclaw.
100
+ const registered = await registerChannelBot(adapter.key, trimmed);
101
+ setIdentity({ id: registered.botId, username: registered.username });
102
+ setToken('');
103
+ } catch (err) {
104
+ setValidateError(err instanceof Error ? err.message : String(err));
105
+ } finally {
106
+ setValidating(false);
107
+ }
108
+ };
109
+
110
+ const operatorFieldOk =
111
+ !adapter ||
112
+ adapter.operatorFields.every((f) => {
113
+ if (f.key === 'operatorUserId') return f.pattern.test(operatorUserId.trim());
114
+ return false;
115
+ });
116
+
117
+ const wireId = adapter
118
+ ? adapter.wireIdFor({
119
+ botUserId: identity?.id ?? null,
120
+ operatorUserId: operatorUserId.trim() || null,
121
+ })
122
+ : null;
123
+
124
+ const platformIdPreview = adapter
125
+ ? adapter.platformIdPreview({
126
+ botUserId: identity?.id ?? null,
127
+ operatorUserId: operatorUserId.trim() || null,
128
+ })
129
+ : null;
130
+
131
+ const canWire = !!adapter && !!identity && operatorFieldOk && !!picked && !!wireId && !wiring;
132
+
133
+ const onWire = async () => {
134
+ if (!canWire || !adapter || !picked || !wireId) return;
135
+ setWiring(true);
136
+ setWireError(null);
137
+ try {
138
+ const r = await wireChannelToGroup(picked.folder, {
139
+ channel: adapter.key,
140
+ botId: identity.id,
141
+ botUserId: wireId,
142
+ operatorUserId: operatorUserId.trim() || undefined,
143
+ displayName: `${picked.name} DM`,
144
+ });
145
+ setWireResult(r);
146
+ } catch (err) {
147
+ setWireError(err instanceof Error ? err.message : String(err));
148
+ } finally {
149
+ setWiring(false);
150
+ }
151
+ };
152
+
153
+ if (wireResult) {
154
+ return (
155
+ <div>
156
+ <h2>Channel wired</h2>
157
+ <p className="muted">
158
+ {adapter?.label} DM is now routed to <code>{picked?.name}</code>. Send a DM to{' '}
159
+ <code>@{identity?.username}</code> to test.
160
+ </p>
161
+ <div className="empty empty-rich" style={{ marginTop: '0.75rem' }}>
162
+ <p className="empty-headline" style={{ margin: 0 }}>
163
+ {wireResult.created.wiring ? 'Wired.' : 'Already wired — kept existing rows.'}
164
+ </p>
165
+ <p className="muted" style={{ marginTop: '0.4rem', fontSize: '0.85rem' }}>
166
+ messaging_group_id: <code>{wireResult.messagingGroupId}</code>
167
+ <br />
168
+ messaging_group_agent_id: <code>{wireResult.messagingGroupAgentId}</code>
169
+ <br />
170
+ platform_id: <code>{wireResult.platformId}</code>
171
+ </p>
172
+ </div>
173
+ <div className="actions" style={{ marginTop: '1rem' }}>
174
+ <Link to="/channels">
175
+ <button>Back to channels</button>
176
+ </Link>
177
+ <Link to={`/groups/${encodeURIComponent(picked?.folder ?? '')}`}>
178
+ <button className="secondary">Open agent group</button>
179
+ </Link>
180
+ </div>
181
+ </div>
182
+ );
183
+ }
184
+
185
+ return (
186
+ <div>
187
+ <div className="list-header">
188
+ <h2>Wire a new channel</h2>
189
+ <Link to="/channels">
190
+ <button className="secondary">Cancel</button>
191
+ </Link>
192
+ </div>
193
+ <p className="muted">
194
+ Pick an adapter, validate the bot token, choose an agent group. The setup wizard is for
195
+ first-boot only — this is the fast path for adding a second (or third…) channel.
196
+ </p>
197
+
198
+ <Section step={1} title="Pick adapter">
199
+ <div
200
+ style={{
201
+ display: 'grid',
202
+ gridTemplateColumns: 'repeat(auto-fit, minmax(220px, 1fr))',
203
+ gap: '0.75rem',
204
+ marginTop: '0.5rem',
205
+ }}
206
+ >
207
+ {SUPPORTED_ADAPTERS.map((a) => (
208
+ <AdapterCard
209
+ key={a.key}
210
+ label={a.label}
211
+ blurb={a.blurb}
212
+ available
213
+ selected={a.key === adapterKey}
214
+ onPick={() => onPickAdapter(a.key)}
215
+ />
216
+ ))}
217
+ {COMING_SOON_ADAPTERS.map((a) => (
218
+ <AdapterCard key={a.key} label={a.label} blurb={a.blurb} available={false} />
219
+ ))}
220
+ </div>
221
+ </Section>
222
+
223
+ {adapter && (
224
+ <Section step={2} title={`Bot identity — ${adapter.label}`}>
225
+ <p className="dim" style={{ marginTop: 0 }}>
226
+ We hit <code>{adapter.upstreamProbePath}</code> to confirm the token authenticates and the account
227
+ is a bot, then encrypt-and-store it under <code>secrets</code> and bring up the adapter so
228
+ the bot is live across host restarts. Get a token from{' '}
229
+ <a href={adapter.tokenHelp.href} target="_blank" rel="noreferrer">
230
+ {adapter.tokenHelp.title}
231
+ </a>
232
+ .
233
+ </p>
234
+
235
+ {identity ? (
236
+ <div className="empty empty-rich" style={{ marginTop: '0.5rem' }}>
237
+ <p className="empty-headline" style={{ margin: 0 }}>
238
+ Bot registered: <code>@{identity.username}</code>{' '}
239
+ <span className="dim">
240
+ (id <code>{identity.id}</code>)
241
+ </span>
242
+ </p>
243
+ <button
244
+ className="secondary"
245
+ style={{ marginTop: '0.5rem' }}
246
+ onClick={() => {
247
+ setIdentity(null);
248
+ setToken('');
249
+ }}
250
+ >
251
+ Use a different token
252
+ </button>
253
+ </div>
254
+ ) : (
255
+ <>
256
+ <div className="row" style={{ marginTop: '0.5rem' }}>
257
+ <label htmlFor="botToken">Bot token</label>
258
+ <input
259
+ id="botToken"
260
+ type="password"
261
+ autoComplete="off"
262
+ value={token}
263
+ onChange={(e) => setToken(e.target.value)}
264
+ placeholder="paste bot token"
265
+ />
266
+ </div>
267
+ {validateError && <div className="error-banner">{validateError}</div>}
268
+ <div className="actions" style={{ marginTop: '0.5rem' }}>
269
+ <button onClick={onValidate} disabled={!token.trim() || validating}>
270
+ {validating ? 'Validating + registering…' : 'Validate & register bot'}
271
+ </button>
272
+ </div>
273
+ </>
274
+ )}
275
+
276
+ {identity &&
277
+ adapter.operatorFields.map((f) => (
278
+ <div key={f.key} className="row" style={{ marginTop: '0.75rem' }}>
279
+ <label htmlFor={f.key}>{f.label}</label>
280
+ <input
281
+ id={f.key}
282
+ type="text"
283
+ inputMode="numeric"
284
+ value={operatorUserId}
285
+ onChange={(e) => {
286
+ setOperatorUserId(e.target.value);
287
+ setOperatorPrefilled(false);
288
+ }}
289
+ placeholder="123456789"
290
+ />
291
+ <p className="dim" style={{ marginTop: '0.25rem', fontSize: '0.8rem' }}>
292
+ {operatorPrefilled && (
293
+ <>
294
+ <em>Auto-filled from your prior setup. Edit only if wiring on behalf of someone else.</em>
295
+ <br />
296
+ </>
297
+ )}
298
+ {f.hint}
299
+ {f.helpHref && (
300
+ <>
301
+ {' '}
302
+ <a href={f.helpHref} target="_blank" rel="noreferrer">
303
+ Help
304
+ </a>
305
+ </>
306
+ )}
307
+ </p>
308
+ </div>
309
+ ))}
310
+ </Section>
311
+ )}
312
+
313
+ {adapter && identity && operatorFieldOk && (
314
+ <Section step={3} title="Agent group">
315
+ {picked ? (
316
+ <div className="empty empty-rich" style={{ marginTop: '0.5rem' }}>
317
+ <p className="empty-headline" style={{ margin: 0 }}>
318
+ <strong>{picked.name}</strong>{' '}
319
+ <code className="dim">{picked.folder}</code>
320
+ </p>
321
+ <button
322
+ className="secondary"
323
+ style={{ marginTop: '0.5rem' }}
324
+ onClick={() => setPicked(null)}
325
+ >
326
+ Change group
327
+ </button>
328
+ </div>
329
+ ) : (
330
+ <AgentGroupPicker onPicked={setPicked} />
331
+ )}
332
+ </Section>
333
+ )}
334
+
335
+ {adapter && identity && operatorFieldOk && picked && (
336
+ <Section step={4} title="Wire">
337
+ <p className="muted">
338
+ Synthesizes the DM platform id <code>{platformIdPreview}</code> and inserts the
339
+ messaging_groups + messaging_group_agents rows. After wiring, the first DM lands in your
340
+ group instead of being silently dropped by the unwired-channel guard.
341
+ </p>
342
+ {wireError && <div className="error-banner">{wireError}</div>}
343
+ <div className="actions" style={{ marginTop: '0.5rem' }}>
344
+ <button onClick={onWire} disabled={!canWire}>
345
+ {wiring ? 'Wiring…' : `Wire ${adapter.label} DM to ${picked.name}`}
346
+ </button>
347
+ </div>
348
+ </Section>
349
+ )}
350
+ </div>
351
+ );
352
+ }
353
+
354
+ function Section({
355
+ step,
356
+ title,
357
+ children,
358
+ }: {
359
+ step: number;
360
+ title: string;
361
+ children: React.ReactNode;
362
+ }) {
363
+ return (
364
+ <section style={{ marginTop: '1.5rem' }}>
365
+ <h3 style={{ margin: 0 }}>
366
+ <span className="dim" style={{ marginRight: '0.5rem' }}>
367
+ {step}.
368
+ </span>
369
+ {title}
370
+ </h3>
371
+ {children}
372
+ </section>
373
+ );
374
+ }
375
+
376
+ function AdapterCard({
377
+ label,
378
+ blurb,
379
+ available,
380
+ selected = false,
381
+ onPick,
382
+ }: {
383
+ label: string;
384
+ blurb: string;
385
+ available: boolean;
386
+ selected?: boolean;
387
+ onPick?: () => void;
388
+ }) {
389
+ return (
390
+ <button
391
+ type="button"
392
+ disabled={!available}
393
+ onClick={() => available && onPick?.()}
394
+ className="secondary"
395
+ style={{
396
+ textAlign: 'left',
397
+ padding: '1rem',
398
+ border: selected ? '2px solid var(--accent)' : '1px solid var(--border)',
399
+ background: selected ? 'var(--accent-soft)' : 'white',
400
+ opacity: available ? 1 : 0.5,
401
+ cursor: available ? 'pointer' : 'not-allowed',
402
+ }}
403
+ >
404
+ <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between' }}>
405
+ <strong>{label}</strong>
406
+ {!available && <span className="tag muted">coming soon</span>}
407
+ </div>
408
+ <p className="dim" style={{ margin: '0.4rem 0 0', fontSize: '0.85rem' }}>
409
+ {blurb}
410
+ </p>
411
+ </button>
412
+ );
413
+ }