@openparachute/agent 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (501) hide show
  1. package/.claude/scheduled_tasks.lock +1 -0
  2. package/.claude/settings.json +5 -0
  3. package/.claude/skills/add-atomic-chat-tool/SKILL.md +243 -0
  4. package/.claude/skills/add-atomic-chat-tool/atomic-chat-mcp-stdio.ts +229 -0
  5. package/.claude/skills/add-codex/SKILL.md +161 -0
  6. package/.claude/skills/add-dashboard/SKILL.md +138 -0
  7. package/.claude/skills/add-dashboard/resources/dashboard-pusher.ts +495 -0
  8. package/.claude/skills/add-emacs/SKILL.md +296 -0
  9. package/.claude/skills/add-gcal-tool/SKILL.md +210 -0
  10. package/.claude/skills/add-gchat/REMOVE.md +6 -0
  11. package/.claude/skills/add-gchat/SKILL.md +92 -0
  12. package/.claude/skills/add-gchat/VERIFY.md +3 -0
  13. package/.claude/skills/add-github/REMOVE.md +6 -0
  14. package/.claude/skills/add-github/SKILL.md +148 -0
  15. package/.claude/skills/add-github/VERIFY.md +3 -0
  16. package/.claude/skills/add-gmail-tool/SKILL.md +229 -0
  17. package/.claude/skills/add-imessage/REMOVE.md +6 -0
  18. package/.claude/skills/add-imessage/SKILL.md +113 -0
  19. package/.claude/skills/add-imessage/VERIFY.md +3 -0
  20. package/.claude/skills/add-karpathy-llm-wiki/SKILL.md +110 -0
  21. package/.claude/skills/add-karpathy-llm-wiki/llm-wiki.md +75 -0
  22. package/.claude/skills/add-linear/REMOVE.md +6 -0
  23. package/.claude/skills/add-linear/SKILL.md +168 -0
  24. package/.claude/skills/add-linear/VERIFY.md +3 -0
  25. package/.claude/skills/add-macos-statusbar/SKILL.md +133 -0
  26. package/.claude/skills/add-macos-statusbar/add/src/statusbar.swift +147 -0
  27. package/.claude/skills/add-matrix/REMOVE.md +6 -0
  28. package/.claude/skills/add-matrix/SKILL.md +148 -0
  29. package/.claude/skills/add-matrix/VERIFY.md +3 -0
  30. package/.claude/skills/add-ollama-provider/SKILL.md +179 -0
  31. package/.claude/skills/add-ollama-tool/SKILL.md +193 -0
  32. package/.claude/skills/add-opencode/SKILL.md +229 -0
  33. package/.claude/skills/add-parallel/SKILL.md +290 -0
  34. package/.claude/skills/add-resend/REMOVE.md +6 -0
  35. package/.claude/skills/add-resend/SKILL.md +93 -0
  36. package/.claude/skills/add-resend/VERIFY.md +3 -0
  37. package/.claude/skills/add-signal/REMOVE.md +13 -0
  38. package/.claude/skills/add-signal/SKILL.md +318 -0
  39. package/.claude/skills/add-signal/VERIFY.md +5 -0
  40. package/.claude/skills/add-slack/REMOVE.md +6 -0
  41. package/.claude/skills/add-slack/SKILL.md +112 -0
  42. package/.claude/skills/add-slack/VERIFY.md +3 -0
  43. package/.claude/skills/add-teams/REMOVE.md +6 -0
  44. package/.claude/skills/add-teams/SKILL.md +207 -0
  45. package/.claude/skills/add-teams/VERIFY.md +3 -0
  46. package/.claude/skills/add-vercel/SKILL.md +147 -0
  47. package/.claude/skills/add-vercel/container-skills/vercel-cli/SKILL.md +103 -0
  48. package/.claude/skills/add-webex/REMOVE.md +6 -0
  49. package/.claude/skills/add-webex/SKILL.md +88 -0
  50. package/.claude/skills/add-webex/VERIFY.md +3 -0
  51. package/.claude/skills/add-wechat/REMOVE.md +49 -0
  52. package/.claude/skills/add-wechat/SKILL.md +170 -0
  53. package/.claude/skills/add-wechat/scripts/wire-dm.ts +172 -0
  54. package/.claude/skills/add-whatsapp/SKILL.md +264 -0
  55. package/.claude/skills/add-whatsapp-cloud/REMOVE.md +6 -0
  56. package/.claude/skills/add-whatsapp-cloud/SKILL.md +95 -0
  57. package/.claude/skills/add-whatsapp-cloud/VERIFY.md +3 -0
  58. package/.claude/skills/claw/SKILL.md +131 -0
  59. package/.claude/skills/claw/scripts/claw +374 -0
  60. package/.claude/skills/convert-to-apple-container/SKILL.md +212 -0
  61. package/.claude/skills/customize/SKILL.md +110 -0
  62. package/.claude/skills/debug/SKILL.md +349 -0
  63. package/.claude/skills/get-qodo-rules/SKILL.md +122 -0
  64. package/.claude/skills/get-qodo-rules/references/output-format.md +41 -0
  65. package/.claude/skills/get-qodo-rules/references/pagination.md +33 -0
  66. package/.claude/skills/get-qodo-rules/references/repository-scope.md +26 -0
  67. package/.claude/skills/init-first-agent/SKILL.md +120 -0
  68. package/.claude/skills/init-onecli/SKILL.md +270 -0
  69. package/.claude/skills/manage-channels/SKILL.md +87 -0
  70. package/.claude/skills/manage-mounts/SKILL.md +47 -0
  71. package/.claude/skills/migrate-from-openclaw/MIGRATE_CRONS.md +100 -0
  72. package/.claude/skills/migrate-from-openclaw/SKILL.md +447 -0
  73. package/.claude/skills/migrate-from-openclaw/scripts/discover-openclaw.ts +734 -0
  74. package/.claude/skills/migrate-from-openclaw/scripts/extract-channel-credentials.ts +476 -0
  75. package/.claude/skills/migrate-nanoclaw/SKILL.md +484 -0
  76. package/.claude/skills/migrate-nanoclaw/diagnostics.md +51 -0
  77. package/.claude/skills/qodo-pr-resolver/SKILL.md +326 -0
  78. package/.claude/skills/qodo-pr-resolver/resources/providers.md +329 -0
  79. package/.claude/skills/update-nanoclaw/SKILL.md +243 -0
  80. package/.claude/skills/update-nanoclaw/diagnostics.md +48 -0
  81. package/.claude/skills/update-skills/SKILL.md +130 -0
  82. package/.claude/skills/use-native-credential-proxy/SKILL.md +167 -0
  83. package/.claude/skills/x-integration/SKILL.md +417 -0
  84. package/.claude/skills/x-integration/agent.ts +243 -0
  85. package/.claude/skills/x-integration/host.ts +155 -0
  86. package/.claude/skills/x-integration/lib/browser.ts +148 -0
  87. package/.claude/skills/x-integration/lib/config.ts +62 -0
  88. package/.claude/skills/x-integration/scripts/like.ts +56 -0
  89. package/.claude/skills/x-integration/scripts/post.ts +66 -0
  90. package/.claude/skills/x-integration/scripts/quote.ts +80 -0
  91. package/.claude/skills/x-integration/scripts/reply.ts +74 -0
  92. package/.claude/skills/x-integration/scripts/retweet.ts +62 -0
  93. package/.claude/skills/x-integration/scripts/setup.ts +87 -0
  94. package/.github/CODEOWNERS +10 -0
  95. package/.github/PULL_REQUEST_TEMPLATE.md +18 -0
  96. package/.github/workflows/bump-version.yml +35 -0
  97. package/.github/workflows/ci.yml +39 -0
  98. package/.github/workflows/label-pr.yml +40 -0
  99. package/.github/workflows/update-tokens.yml +43 -0
  100. package/.husky/pre-commit +1 -0
  101. package/.mcp.json +3 -0
  102. package/.nvmrc +1 -0
  103. package/.parachute/module.json +14 -0
  104. package/.prettierrc +4 -0
  105. package/CHANGELOG.md +215 -0
  106. package/CLAUDE.md +307 -0
  107. package/CODE_OF_CONDUCT.md +128 -0
  108. package/CONTRIBUTING.md +159 -0
  109. package/CONTRIBUTORS.md +26 -0
  110. package/LICENSE +21 -0
  111. package/README.md +190 -0
  112. package/README_ja.md +194 -0
  113. package/README_zh.md +194 -0
  114. package/assets/nanoclaw-favicon.png +0 -0
  115. package/assets/nanoclaw-icon.png +0 -0
  116. package/assets/nanoclaw-logo-dark.png +0 -0
  117. package/assets/nanoclaw-logo.png +0 -0
  118. package/assets/nanoclaw-profile.jpeg +0 -0
  119. package/assets/nanoclaw-sales.png +0 -0
  120. package/assets/social-preview.jpg +0 -0
  121. package/config-examples/mount-allowlist.json +25 -0
  122. package/container/.dockerignore +2 -0
  123. package/container/CLAUDE.md +21 -0
  124. package/container/Dockerfile +121 -0
  125. package/container/agent-runner/bun.lock +243 -0
  126. package/container/agent-runner/package.json +22 -0
  127. package/container/agent-runner/scripts/sdk-signal-probe.ts +169 -0
  128. package/container/agent-runner/src/config.ts +55 -0
  129. package/container/agent-runner/src/db/connection.ts +267 -0
  130. package/container/agent-runner/src/db/index.ts +20 -0
  131. package/container/agent-runner/src/db/messages-in.ts +138 -0
  132. package/container/agent-runner/src/db/messages-out.ts +143 -0
  133. package/container/agent-runner/src/db/session-routing.ts +30 -0
  134. package/container/agent-runner/src/db/session-state.test.ts +100 -0
  135. package/container/agent-runner/src/db/session-state.ts +79 -0
  136. package/container/agent-runner/src/destinations.ts +135 -0
  137. package/container/agent-runner/src/formatter.test.ts +167 -0
  138. package/container/agent-runner/src/formatter.ts +260 -0
  139. package/container/agent-runner/src/index.ts +110 -0
  140. package/container/agent-runner/src/integration.test.ts +121 -0
  141. package/container/agent-runner/src/mcp-tools/agents.instructions.md +26 -0
  142. package/container/agent-runner/src/mcp-tools/agents.ts +66 -0
  143. package/container/agent-runner/src/mcp-tools/core.instructions.md +27 -0
  144. package/container/agent-runner/src/mcp-tools/core.ts +262 -0
  145. package/container/agent-runner/src/mcp-tools/index.ts +22 -0
  146. package/container/agent-runner/src/mcp-tools/interactive.instructions.md +22 -0
  147. package/container/agent-runner/src/mcp-tools/interactive.ts +169 -0
  148. package/container/agent-runner/src/mcp-tools/scheduling.instructions.md +40 -0
  149. package/container/agent-runner/src/mcp-tools/scheduling.ts +299 -0
  150. package/container/agent-runner/src/mcp-tools/self-mod.instructions.md +25 -0
  151. package/container/agent-runner/src/mcp-tools/self-mod.ts +120 -0
  152. package/container/agent-runner/src/mcp-tools/server.ts +54 -0
  153. package/container/agent-runner/src/mcp-tools/types.ts +6 -0
  154. package/container/agent-runner/src/poll-loop.test.ts +248 -0
  155. package/container/agent-runner/src/poll-loop.ts +437 -0
  156. package/container/agent-runner/src/providers/claude.ts +379 -0
  157. package/container/agent-runner/src/providers/factory.test.ts +19 -0
  158. package/container/agent-runner/src/providers/factory.ts +13 -0
  159. package/container/agent-runner/src/providers/index.ts +6 -0
  160. package/container/agent-runner/src/providers/mock.ts +77 -0
  161. package/container/agent-runner/src/providers/provider-registry.ts +33 -0
  162. package/container/agent-runner/src/providers/types.ts +82 -0
  163. package/container/agent-runner/src/scheduling/task-script.ts +121 -0
  164. package/container/agent-runner/src/timezone.test.ts +93 -0
  165. package/container/agent-runner/src/timezone.ts +107 -0
  166. package/container/agent-runner/tsconfig.json +14 -0
  167. package/container/build.sh +48 -0
  168. package/container/entrypoint.sh +16 -0
  169. package/container/skills/agent-browser/SKILL.md +159 -0
  170. package/container/skills/frontend-engineer/SKILL.md +157 -0
  171. package/container/skills/self-customize/SKILL.md +87 -0
  172. package/container/skills/slack-formatting/SKILL.md +94 -0
  173. package/container/skills/vercel-cli/SKILL.md +111 -0
  174. package/container/skills/welcome/SKILL.md +85 -0
  175. package/docs/APPLE-CONTAINER-NETWORKING.md +90 -0
  176. package/docs/BRANCH-FORK-MAINTENANCE.md +81 -0
  177. package/docs/README.md +25 -0
  178. package/docs/SDK_DEEP_DIVE.md +643 -0
  179. package/docs/SECURITY.md +162 -0
  180. package/docs/agent-runner-details.md +749 -0
  181. package/docs/api-details.md +365 -0
  182. package/docs/architecture-diagram.html +422 -0
  183. package/docs/architecture-diagram.md +215 -0
  184. package/docs/architecture.md +751 -0
  185. package/docs/audit/2026-04-30-channel-endpoint-audit.md +36 -0
  186. package/docs/build-and-runtime.md +80 -0
  187. package/docs/cross-mount-stress/README.md +112 -0
  188. package/docs/cross-mount-stress/container-writer-retry.mjs +55 -0
  189. package/docs/cross-mount-stress/container-writer-slow.mjs +42 -0
  190. package/docs/cross-mount-stress/container-writer.mjs +47 -0
  191. package/docs/cross-mount-stress/host-writer-retry.mjs +55 -0
  192. package/docs/cross-mount-stress/host-writer-slow.mjs +43 -0
  193. package/docs/cross-mount-stress/host-writer.mjs +47 -0
  194. package/docs/db-central.md +316 -0
  195. package/docs/db-session.md +183 -0
  196. package/docs/db.md +119 -0
  197. package/docs/design/2026-04-29-vault-management-ui.md +231 -0
  198. package/docs/design/2026-04-30-channel-wiring-rework.md +234 -0
  199. package/docs/design/2026-05-01-channel-wiring-approvals-deep-dive.md +272 -0
  200. package/docs/design/2026-05-02-channel-policy-and-approval-routing.md +250 -0
  201. package/docs/docker-sandboxes.md +359 -0
  202. package/docs/isolation-model.md +88 -0
  203. package/docs/ollama.md +79 -0
  204. package/docs/parachute-integration.md +109 -0
  205. package/docs/post-night-rebirth-reflections.md +151 -0
  206. package/eslint.config.js +32 -0
  207. package/package.json +54 -0
  208. package/pnpm-workspace.yaml +8 -0
  209. package/repo-tokens/README.md +113 -0
  210. package/repo-tokens/action.yml +186 -0
  211. package/repo-tokens/badge.svg +23 -0
  212. package/repo-tokens/examples/green.svg +14 -0
  213. package/repo-tokens/examples/red.svg +14 -0
  214. package/repo-tokens/examples/yellow-green.svg +14 -0
  215. package/repo-tokens/examples/yellow.svg +14 -0
  216. package/scripts/chat.ts +101 -0
  217. package/scripts/cleanup-sessions.sh +150 -0
  218. package/scripts/init-cli-agent.ts +171 -0
  219. package/scripts/init-first-agent.ts +377 -0
  220. package/scripts/parachute.ts +158 -0
  221. package/scripts/run-migrations.ts +105 -0
  222. package/scripts/sanity-live-poll.ts +95 -0
  223. package/scripts/seed-discord.ts +79 -0
  224. package/scripts/test-v2-agent.ts +106 -0
  225. package/scripts/test-v2-channel-e2e.ts +265 -0
  226. package/scripts/test-v2-host.ts +184 -0
  227. package/src/channels/adapter.ts +214 -0
  228. package/src/channels/ask-question.ts +46 -0
  229. package/src/channels/channel-registry.test.ts +421 -0
  230. package/src/channels/channel-registry.ts +313 -0
  231. package/src/channels/chat-sdk-bridge.test.ts +84 -0
  232. package/src/channels/chat-sdk-bridge.ts +652 -0
  233. package/src/channels/cli.ts +276 -0
  234. package/src/channels/discord.ts +90 -0
  235. package/src/channels/index.ts +17 -0
  236. package/src/channels/telegram-markdown-sanitize.test.ts +78 -0
  237. package/src/channels/telegram-markdown-sanitize.ts +55 -0
  238. package/src/channels/telegram-pairing.test.ts +254 -0
  239. package/src/channels/telegram-pairing.ts +339 -0
  240. package/src/channels/telegram.ts +279 -0
  241. package/src/channels/trust-hint.test.ts +48 -0
  242. package/src/channels/trust-hint.ts +75 -0
  243. package/src/claude-md-compose.migrate.test.ts +64 -0
  244. package/src/claude-md-compose.ts +205 -0
  245. package/src/command-gate.ts +63 -0
  246. package/src/config.test.ts +93 -0
  247. package/src/config.ts +108 -0
  248. package/src/container-config.ts +167 -0
  249. package/src/container-runner.test.ts +32 -0
  250. package/src/container-runner.ts +576 -0
  251. package/src/container-runtime.test.ts +169 -0
  252. package/src/container-runtime.ts +92 -0
  253. package/src/db/_bun-sqlite-shim.ts +88 -0
  254. package/src/db/agent-activity.test.ts +155 -0
  255. package/src/db/agent-activity.ts +121 -0
  256. package/src/db/agent-groups.ts +77 -0
  257. package/src/db/connection.migrate.test.ts +143 -0
  258. package/src/db/connection.ts +224 -0
  259. package/src/db/db-v2.test.ts +440 -0
  260. package/src/db/dropped-messages.ts +44 -0
  261. package/src/db/index.ts +40 -0
  262. package/src/db/messaging-groups.ts +252 -0
  263. package/src/db/migrations/001-initial.ts +112 -0
  264. package/src/db/migrations/002-chat-sdk-state.ts +36 -0
  265. package/src/db/migrations/008-dropped-messages.ts +27 -0
  266. package/src/db/migrations/009-drop-pending-credentials.ts +13 -0
  267. package/src/db/migrations/010-engage-modes.ts +103 -0
  268. package/src/db/migrations/011-pending-sender-approvals.ts +40 -0
  269. package/src/db/migrations/012-channel-registration.ts +48 -0
  270. package/src/db/migrations/013-approval-render-metadata.ts +27 -0
  271. package/src/db/migrations/014-secrets.ts +44 -0
  272. package/src/db/migrations/015-secrets-drop-host-pattern.ts +18 -0
  273. package/src/db/migrations/016-secret-assignments.ts +30 -0
  274. package/src/db/migrations/017-agent-activity.ts +40 -0
  275. package/src/db/migrations/018-oauth-app-configs.ts +34 -0
  276. package/src/db/migrations/019-oauth-app-connections.ts +48 -0
  277. package/src/db/migrations/020-agent-app-connections.ts +28 -0
  278. package/src/db/migrations/021-pending-oauth-states.ts +35 -0
  279. package/src/db/migrations/022-app-connections-provider.ts +25 -0
  280. package/src/db/migrations/023-agent-group-secret-mode.test.ts +124 -0
  281. package/src/db/migrations/023-agent-group-secret-mode.ts +65 -0
  282. package/src/db/migrations/024-collapse-approvals.test.ts +249 -0
  283. package/src/db/migrations/024-collapse-approvals.ts +182 -0
  284. package/src/db/migrations/025-secret-mode-check.test.ts +155 -0
  285. package/src/db/migrations/025-secret-mode-check.ts +49 -0
  286. package/src/db/migrations/026-user-dms-bot-id.test.ts +116 -0
  287. package/src/db/migrations/026-user-dms-bot-id.ts +54 -0
  288. package/src/db/migrations/027-provider-credentials.ts +41 -0
  289. package/src/db/migrations/_test-helpers.ts +41 -0
  290. package/src/db/migrations/index.ts +127 -0
  291. package/src/db/migrations/module-agent-to-agent-destinations.ts +84 -0
  292. package/src/db/migrations/module-approvals-pending-approvals.ts +42 -0
  293. package/src/db/migrations/module-approvals-title-options.ts +40 -0
  294. package/src/db/schema.ts +258 -0
  295. package/src/db/session-db.test.ts +93 -0
  296. package/src/db/session-db.ts +325 -0
  297. package/src/db/sessions.ts +241 -0
  298. package/src/delivery.test.ts +148 -0
  299. package/src/delivery.ts +445 -0
  300. package/src/env.ts +74 -0
  301. package/src/group-folder.test.ts +35 -0
  302. package/src/group-folder.ts +44 -0
  303. package/src/group-init.ts +92 -0
  304. package/src/host-core.test.ts +456 -0
  305. package/src/host-sweep.test.ts +146 -0
  306. package/src/host-sweep.ts +287 -0
  307. package/src/index.ts +227 -0
  308. package/src/install-slug.ts +33 -0
  309. package/src/log.test.ts +81 -0
  310. package/src/log.ts +117 -0
  311. package/src/mcp/http.ts +72 -0
  312. package/src/mcp/server.ts +92 -0
  313. package/src/mcp/stdio.ts +51 -0
  314. package/src/mcp/tools/activity.ts +88 -0
  315. package/src/mcp/tools/agent-groups.ts +183 -0
  316. package/src/mcp/tools/approvals.ts +122 -0
  317. package/src/mcp/tools/channels.ts +199 -0
  318. package/src/mcp/tools/index.ts +27 -0
  319. package/src/mcp/tools/oauth.ts +48 -0
  320. package/src/mcp/tools/secrets.ts +169 -0
  321. package/src/mcp/tools/sessions.ts +135 -0
  322. package/src/mcp/types.ts +51 -0
  323. package/src/modules/agent-to-agent/agent-route.test.ts +46 -0
  324. package/src/modules/agent-to-agent/agent-route.ts +223 -0
  325. package/src/modules/agent-to-agent/create-agent.ts +127 -0
  326. package/src/modules/agent-to-agent/db/agent-destinations.ts +135 -0
  327. package/src/modules/agent-to-agent/index.ts +22 -0
  328. package/src/modules/agent-to-agent/write-destinations.ts +59 -0
  329. package/src/modules/approvals/agent.md +45 -0
  330. package/src/modules/approvals/index.ts +21 -0
  331. package/src/modules/approvals/picks.test.ts +291 -0
  332. package/src/modules/approvals/primitive.ts +279 -0
  333. package/src/modules/approvals/project.md +27 -0
  334. package/src/modules/approvals/response-handler.ts +87 -0
  335. package/src/modules/index.ts +24 -0
  336. package/src/modules/interactive/agent.md +21 -0
  337. package/src/modules/interactive/index.ts +69 -0
  338. package/src/modules/interactive/project.md +12 -0
  339. package/src/modules/mount-security/index.ts +448 -0
  340. package/src/modules/mount-security/migrate.test.ts +91 -0
  341. package/src/modules/permissions/access.ts +28 -0
  342. package/src/modules/permissions/channel-approval.test.ts +389 -0
  343. package/src/modules/permissions/channel-approval.ts +188 -0
  344. package/src/modules/permissions/db/agent-group-members.ts +44 -0
  345. package/src/modules/permissions/db/pending-channel-approvals.test.ts +86 -0
  346. package/src/modules/permissions/db/pending-channel-approvals.ts +66 -0
  347. package/src/modules/permissions/db/pending-sender-approvals.ts +60 -0
  348. package/src/modules/permissions/db/user-dms.ts +58 -0
  349. package/src/modules/permissions/db/user-roles.ts +85 -0
  350. package/src/modules/permissions/db/users.ts +38 -0
  351. package/src/modules/permissions/index.ts +421 -0
  352. package/src/modules/permissions/permissions.test.ts +358 -0
  353. package/src/modules/permissions/sender-approval.test.ts +470 -0
  354. package/src/modules/permissions/sender-approval.ts +165 -0
  355. package/src/modules/permissions/user-dm.ts +200 -0
  356. package/src/modules/provider-credentials/db.ts +121 -0
  357. package/src/modules/provider-credentials/index.ts +12 -0
  358. package/src/modules/provider-credentials/spawn.test.ts +206 -0
  359. package/src/modules/provider-credentials/spawn.ts +114 -0
  360. package/src/modules/scheduling/actions.ts +113 -0
  361. package/src/modules/scheduling/db.test.ts +282 -0
  362. package/src/modules/scheduling/db.ts +148 -0
  363. package/src/modules/scheduling/index.ts +34 -0
  364. package/src/modules/scheduling/recurrence.test.ts +98 -0
  365. package/src/modules/scheduling/recurrence.ts +54 -0
  366. package/src/modules/self-mod/agent.md +30 -0
  367. package/src/modules/self-mod/apply.ts +85 -0
  368. package/src/modules/self-mod/index.ts +30 -0
  369. package/src/modules/self-mod/project.md +39 -0
  370. package/src/modules/self-mod/request.ts +91 -0
  371. package/src/modules/typing/index.ts +165 -0
  372. package/src/oauth/agent-app-connections.ts +103 -0
  373. package/src/oauth/app-configs.test.ts +64 -0
  374. package/src/oauth/app-configs.ts +114 -0
  375. package/src/oauth/app-connections.test.ts +109 -0
  376. package/src/oauth/app-connections.ts +178 -0
  377. package/src/oauth/crypto.ts +56 -0
  378. package/src/oauth/flow.ts +104 -0
  379. package/src/oauth/providers/google.test.ts +38 -0
  380. package/src/oauth/providers/google.ts +46 -0
  381. package/src/oauth/providers/index.ts +48 -0
  382. package/src/oauth/state-store.test.ts +54 -0
  383. package/src/oauth/state-store.ts +93 -0
  384. package/src/parachute/README.md +27 -0
  385. package/src/parachute/create-agent.test.ts +83 -0
  386. package/src/parachute/create-agent.ts +122 -0
  387. package/src/parachute/group-status.test.ts +165 -0
  388. package/src/parachute/group-status.ts +136 -0
  389. package/src/parachute/types.ts +41 -0
  390. package/src/parachute/vault-mcp.test.ts +251 -0
  391. package/src/parachute/vault-mcp.ts +232 -0
  392. package/src/platform-id.test.ts +104 -0
  393. package/src/platform-id.ts +109 -0
  394. package/src/providers/index.ts +6 -0
  395. package/src/providers/provider-container-registry.ts +58 -0
  396. package/src/response-registry.ts +45 -0
  397. package/src/router.ts +530 -0
  398. package/src/secrets/crypto.test.ts +45 -0
  399. package/src/secrets/crypto.ts +55 -0
  400. package/src/secrets/index.ts +355 -0
  401. package/src/secrets/master-key.ts +70 -0
  402. package/src/secrets/secrets.test.ts +354 -0
  403. package/src/session-manager.migrate.test.ts +59 -0
  404. package/src/session-manager.ts +433 -0
  405. package/src/startup-bootstrap.test.ts +226 -0
  406. package/src/startup-bootstrap.ts +207 -0
  407. package/src/state-sqlite.ts +182 -0
  408. package/src/timezone.test.ts +64 -0
  409. package/src/timezone.ts +37 -0
  410. package/src/types.ts +230 -0
  411. package/src/web/auth.test.ts +335 -0
  412. package/src/web/auth.ts +214 -0
  413. package/src/web/discord-validate.test.ts +77 -0
  414. package/src/web/discord-validate.ts +88 -0
  415. package/src/web/hub-discovery.test.ts +98 -0
  416. package/src/web/hub-discovery.ts +69 -0
  417. package/src/web/routes/activity.ts +106 -0
  418. package/src/web/routes/agent-provider.test.ts +282 -0
  419. package/src/web/routes/agent-provider.ts +309 -0
  420. package/src/web/routes/approvals.ts +185 -0
  421. package/src/web/routes/apps.ts +434 -0
  422. package/src/web/routes/channels-mg-detail.test.ts +324 -0
  423. package/src/web/routes/channels-mga-detail.test.ts +425 -0
  424. package/src/web/routes/channels.ts +489 -0
  425. package/src/web/routes/oauth-providers.ts +42 -0
  426. package/src/web/routes/secrets.test.ts +175 -0
  427. package/src/web/routes/secrets.ts +282 -0
  428. package/src/web/routes/sessions.ts +123 -0
  429. package/src/web/routes/settings.test.ts +106 -0
  430. package/src/web/routes/settings.ts +247 -0
  431. package/src/web/routes/setup-status.ts +205 -0
  432. package/src/web/routes/vaults.test.ts +389 -0
  433. package/src/web/routes/vaults.ts +225 -0
  434. package/src/web/server-version.test.ts +16 -0
  435. package/src/web/server.ts +1003 -0
  436. package/src/web/services-manifest.test.ts +120 -0
  437. package/src/web/services-manifest.ts +61 -0
  438. package/src/web/static-serve.test.ts +255 -0
  439. package/src/web/static-serve.ts +104 -0
  440. package/src/web/telegram-validate.test.ts +116 -0
  441. package/src/web/telegram-validate.ts +107 -0
  442. package/src/web/vault-proxy.test.ts +214 -0
  443. package/src/web/vault-proxy.ts +120 -0
  444. package/src/web/wire-channel.ts +181 -0
  445. package/src/webhook-server.ts +134 -0
  446. package/tsconfig.json +21 -0
  447. package/vitest.config.ts +18 -0
  448. package/web/README.md +63 -0
  449. package/web/ui/index.html +13 -0
  450. package/web/ui/package.json +35 -0
  451. package/web/ui/pnpm-lock.yaml +2164 -0
  452. package/web/ui/scripts/verify-base.mjs +31 -0
  453. package/web/ui/src/App.tsx +88 -0
  454. package/web/ui/src/components/ActivityFeed.tsx +444 -0
  455. package/web/ui/src/components/AgentGroupPicker.tsx +263 -0
  456. package/web/ui/src/components/AgentProviderCards.tsx +220 -0
  457. package/web/ui/src/components/CredentialForm.tsx +214 -0
  458. package/web/ui/src/components/ScopeGrants.tsx +74 -0
  459. package/web/ui/src/components/StatusDot.tsx +43 -0
  460. package/web/ui/src/components/VaultPicker.tsx +127 -0
  461. package/web/ui/src/components/setup/AdapterInstallStep.tsx +178 -0
  462. package/web/ui/src/components/setup/AgentGroupStep.tsx +43 -0
  463. package/web/ui/src/components/setup/ChannelPickStep.tsx +74 -0
  464. package/web/ui/src/components/setup/DoneStep.tsx +49 -0
  465. package/web/ui/src/components/setup/PrereqStep.tsx +129 -0
  466. package/web/ui/src/components/setup/TestConnectionStep.tsx +108 -0
  467. package/web/ui/src/components/setup/TestMessageStep.tsx +104 -0
  468. package/web/ui/src/components/setup/WireChannelStep.tsx +166 -0
  469. package/web/ui/src/components/setup/types.ts +105 -0
  470. package/web/ui/src/lib/api.test.ts +410 -0
  471. package/web/ui/src/lib/api.ts +1210 -0
  472. package/web/ui/src/lib/auth.test.ts +139 -0
  473. package/web/ui/src/lib/auth.ts +348 -0
  474. package/web/ui/src/lib/channel-adapters.ts +136 -0
  475. package/web/ui/src/main.tsx +19 -0
  476. package/web/ui/src/routes/ApprovalsList.tsx +294 -0
  477. package/web/ui/src/routes/Apps.tsx +613 -0
  478. package/web/ui/src/routes/ChannelWireDetail.test.tsx +233 -0
  479. package/web/ui/src/routes/ChannelWireDetail.tsx +403 -0
  480. package/web/ui/src/routes/ChannelsList.tsx +158 -0
  481. package/web/ui/src/routes/GroupDetail.tsx +755 -0
  482. package/web/ui/src/routes/GroupList.tsx +187 -0
  483. package/web/ui/src/routes/MessagingGroupDetail.test.tsx +233 -0
  484. package/web/ui/src/routes/MessagingGroupDetail.tsx +306 -0
  485. package/web/ui/src/routes/NewGroupWizard.tsx +390 -0
  486. package/web/ui/src/routes/OAuthCallback.tsx +56 -0
  487. package/web/ui/src/routes/SecretsList.tsx +921 -0
  488. package/web/ui/src/routes/SessionsList.tsx +220 -0
  489. package/web/ui/src/routes/SettingsAgentProvider.tsx +109 -0
  490. package/web/ui/src/routes/SettingsApprovals.tsx +234 -0
  491. package/web/ui/src/routes/SetupWizard.tsx +219 -0
  492. package/web/ui/src/routes/VaultDetail.test.tsx +361 -0
  493. package/web/ui/src/routes/VaultDetail.tsx +960 -0
  494. package/web/ui/src/routes/VaultsList.tsx +295 -0
  495. package/web/ui/src/routes/WireChannelPage.tsx +413 -0
  496. package/web/ui/src/styles.css +608 -0
  497. package/web/ui/src/test/setup.ts +23 -0
  498. package/web/ui/src/vite-env.d.ts +10 -0
  499. package/web/ui/tsconfig.json +20 -0
  500. package/web/ui/vite.config.ts +34 -0
  501. package/web/ui/vitest.config.ts +25 -0
@@ -0,0 +1,296 @@
1
+ ---
2
+ name: add-emacs
3
+ description: Add Emacs as a channel. Opens an interactive chat buffer and org-mode integration so you can talk to NanoClaw from within Emacs (Doom, Spacemacs, or vanilla). Local HTTP bridge — no bot token or external service needed.
4
+ ---
5
+
6
+ # Add Emacs Channel
7
+
8
+ Adds Emacs support via a local HTTP bridge. Works with Doom Emacs, Spacemacs, and vanilla Emacs 27.1+.
9
+
10
+ ## What you can do with this
11
+
12
+ - **Ask while coding** — open the chat buffer (`C-c n c` / `SPC N c`), ask about a function or error without leaving Emacs
13
+ - **Code review** — select a region and send it with `nanoclaw-org-send`; the response appears as a child heading inline in your org file
14
+ - **Meeting notes** — send an org agenda entry; get a summary or action item list back as a child node
15
+ - **Draft writing** — send org prose; receive revisions or continuations in place
16
+ - **Research capture** — ask a question directly in your org notes; the answer lands exactly where you need it
17
+
18
+ ## Install
19
+
20
+ NanoClaw doesn't ship channels in trunk. This skill copies the Emacs adapter and the Lisp client in from the `channels` branch. Native HTTP bridge — no Chat SDK, no adapter package.
21
+
22
+ ### Pre-flight (idempotent)
23
+
24
+ Skip to **Enable** if all of these are already in place:
25
+
26
+ - `src/channels/emacs.ts` exists
27
+ - `emacs/nanoclaw.el` exists
28
+ - `src/channels/index.ts` contains `import './emacs.js';`
29
+
30
+ Otherwise continue. Every step below is safe to re-run.
31
+
32
+ ### 1. Fetch the channels branch
33
+
34
+ ```bash
35
+ git fetch origin channels
36
+ ```
37
+
38
+ ### 2. Copy the adapter and Lisp client
39
+
40
+ ```bash
41
+ mkdir -p emacs
42
+ git show origin/channels:src/channels/emacs.ts > src/channels/emacs.ts
43
+ git show origin/channels:src/channels/emacs.test.ts > src/channels/emacs.test.ts
44
+ git show origin/channels:emacs/nanoclaw.el > emacs/nanoclaw.el
45
+ ```
46
+
47
+ ### 3. Append the self-registration import
48
+
49
+ Append to `src/channels/index.ts` (skip if the line is already present):
50
+
51
+ ```typescript
52
+ import './emacs.js';
53
+ ```
54
+
55
+ ### 4. Build
56
+
57
+ ```bash
58
+ pnpm run build
59
+ ```
60
+
61
+ No npm package to install — the adapter uses only Node builtins (`http`).
62
+
63
+ ## Enable
64
+
65
+ The adapter is gated by `EMACS_ENABLED` so the HTTP port isn't opened on hosts that aren't running Emacs. Add to `.env`:
66
+
67
+ ```bash
68
+ EMACS_ENABLED=true
69
+ EMACS_CHANNEL_PORT=8766 # optional — change only if 8766 is taken
70
+ EMACS_AUTH_TOKEN= # optional — set to a random string to lock the endpoint
71
+ EMACS_PLATFORM_ID=default # optional — only change if you want a non-default chat id
72
+ ```
73
+
74
+ Generate an auth token (recommended even on single-user machines — prevents other local processes from poking the endpoint):
75
+
76
+ ```bash
77
+ node -e "console.log(require('crypto').randomBytes(16).toString('hex'))"
78
+ ```
79
+
80
+ ## Wire the channel
81
+
82
+ Emacs is a single-user, single-chat channel. One host = one messaging group with `platform_id = "default"`.
83
+
84
+ ### If this is your first agent group
85
+
86
+ Run `/init-first-agent` — pick **Emacs** as the channel, use any short handle as the "user id" (e.g. your OS username), and the skill will create the agent group, wire the channel, and write a welcome message that the agent delivers back to your Emacs buffer.
87
+
88
+ ### Otherwise — wire to an existing agent group
89
+
90
+ Run the `register` step directly. The `EMACS_PLATFORM_ID` (default `default`) becomes the messaging group's platform id:
91
+
92
+ ```bash
93
+ pnpm exec tsx setup/index.ts --step register -- \
94
+ --platform-id "default" --name "Emacs" \
95
+ --folder "<existing-folder>" --channel "emacs" \
96
+ --session-mode "agent-shared" \
97
+ --assistant-name "<existing-assistant-name>"
98
+ ```
99
+
100
+ `agent-shared` puts Emacs messages in the same session as any other channel wired to the same agent group — so a conversation you started in Telegram continues in Emacs. Use `shared` to keep an independent Emacs thread with the same workspace, or a new `--folder` for a dedicated Emacs-only agent.
101
+
102
+ ## Configure Emacs
103
+
104
+ `nanoclaw.el` needs only Emacs 27.1+ builtins (`url`, `json`, `org`) — no package manager.
105
+
106
+ AskUserQuestion: Which Emacs distribution are you using?
107
+ - **Doom Emacs** — `config.el` with `map!` keybindings
108
+ - **Spacemacs** — `dotspacemacs/user-config` in `~/.spacemacs`
109
+ - **Vanilla Emacs / other** — `init.el` with `global-set-key`
110
+
111
+ **Doom Emacs** — add to `~/.config/doom/config.el` (or `~/.doom.d/config.el`):
112
+
113
+ ```elisp
114
+ ;; NanoClaw — personal AI assistant channel
115
+ (load (expand-file-name "~/src/nanoclaw/emacs/nanoclaw.el"))
116
+
117
+ (map! :leader
118
+ :prefix ("N" . "NanoClaw")
119
+ :desc "Chat buffer" "c" #'nanoclaw-chat
120
+ :desc "Send org" "o" #'nanoclaw-org-send)
121
+ ```
122
+
123
+ Reload: `M-x doom/reload`
124
+
125
+ **Spacemacs** — add to `dotspacemacs/user-config` in `~/.spacemacs`:
126
+
127
+ ```elisp
128
+ ;; NanoClaw — personal AI assistant channel
129
+ (load-file "~/src/nanoclaw/emacs/nanoclaw.el")
130
+
131
+ (spacemacs/set-leader-keys "aNc" #'nanoclaw-chat)
132
+ (spacemacs/set-leader-keys "aNo" #'nanoclaw-org-send)
133
+ ```
134
+
135
+ Reload: `M-x dotspacemacs/sync-configuration-layers` or restart Emacs.
136
+
137
+ **Vanilla Emacs** — add to `~/.emacs.d/init.el`:
138
+
139
+ ```elisp
140
+ ;; NanoClaw — personal AI assistant channel
141
+ (load-file "~/src/nanoclaw/emacs/nanoclaw.el")
142
+
143
+ (global-set-key (kbd "C-c n c") #'nanoclaw-chat)
144
+ (global-set-key (kbd "C-c n o") #'nanoclaw-org-send)
145
+ ```
146
+
147
+ Reload: `M-x eval-buffer` or restart Emacs.
148
+
149
+ Replace `~/src/nanoclaw/emacs/nanoclaw.el` with your actual NanoClaw checkout path.
150
+
151
+ If `EMACS_AUTH_TOKEN` is set, also add (any distribution):
152
+
153
+ ```elisp
154
+ (setq nanoclaw-auth-token "<your-token>")
155
+ ```
156
+
157
+ If you changed `EMACS_CHANNEL_PORT` from the default:
158
+
159
+ ```elisp
160
+ (setq nanoclaw-port <your-port>)
161
+ ```
162
+
163
+ ## Restart NanoClaw
164
+
165
+ ```bash
166
+ pnpm run build
167
+ launchctl kickstart -k gui/$(id -u)/com.nanoclaw # macOS
168
+ # systemctl --user restart nanoclaw # Linux
169
+ ```
170
+
171
+ ## Verify
172
+
173
+ ### HTTP endpoint
174
+
175
+ ```bash
176
+ curl -s http://localhost:8766/api/messages?since=0
177
+ ```
178
+
179
+ Expected: `{"messages":[]}`. With an auth token:
180
+
181
+ ```bash
182
+ curl -s -H "Authorization: Bearer <token>" http://localhost:8766/api/messages?since=0
183
+ ```
184
+
185
+ ### From Emacs
186
+
187
+ Tell the user:
188
+
189
+ > 1. Open the chat buffer with your keybinding (`SPC N c`, `SPC a N c`, or `C-c n c`)
190
+ > 2. Type a message and press `C-c C-c` to send (RET inserts newlines)
191
+ > 3. A response should appear within a few seconds
192
+ >
193
+ > For org-mode: open any `.org` file, position the cursor on a heading, and use `SPC N o` / `SPC a N o` / `C-c n o`
194
+
195
+ ### Log line
196
+
197
+ `tail -f logs/nanoclaw.log` should show `Emacs channel listening` at startup.
198
+
199
+ ## Channel Info
200
+
201
+ - **type**: `emacs`
202
+ - **terminology**: Single local buffer. There are no "groups" or separate chats — one host = one chat, addressed by a `platform_id` string (default `default`).
203
+ - **how-to-find-id**: The platform id is whatever you set in `EMACS_PLATFORM_ID` (default `default`). User handles are arbitrary; your OS username or first name is fine (e.g. `emacs:<username>`).
204
+ - **supports-threads**: no
205
+ - **typical-use**: Single developer talking to the assistant from within Emacs, alongside whatever other channel they use (Slack, Telegram, Discord).
206
+ - **default-isolation**: Same agent group as the primary DM, with `session-mode = agent-shared` so a conversation started elsewhere continues in Emacs. Pick a separate folder only if you specifically want an Emacs-only persona.
207
+
208
+ ### Features
209
+
210
+ - Interactive chat buffer (`nanoclaw-chat`) with markdown → org-mode rendering
211
+ - Org integration (`nanoclaw-org-send`) — sends the current subtree or region; reply lands as a child heading
212
+ - Optional bearer-token auth for the local endpoint
213
+ - Single-user: the adapter exposes exactly one messaging group per host
214
+
215
+ Not applicable (design): multi-user channels, threads, cold DM initiation, typing indicators, attachments.
216
+
217
+ ## Troubleshooting
218
+
219
+ ### Port already in use
220
+
221
+ ```
222
+ Error: listen EADDRINUSE: address already in use :::8766
223
+ ```
224
+
225
+ Either a stale NanoClaw is running or another app has the port. Kill stale process or change port:
226
+
227
+ ```bash
228
+ lsof -ti :8766 | xargs kill -9
229
+ # or set EMACS_CHANNEL_PORT in .env and mirror in Emacs config (nanoclaw-port)
230
+ ```
231
+
232
+ ### Adapter not starting
233
+
234
+ If `grep "Emacs channel listening" logs/nanoclaw.log` returns nothing, check that `EMACS_ENABLED=true` is in `.env` and that the adapter import is present:
235
+
236
+ ```bash
237
+ grep -q '^EMACS_ENABLED=true' .env && echo "enabled" || echo "not enabled"
238
+ grep -q "import './emacs.js'" src/channels/index.ts && echo "imported" || echo "not imported"
239
+ ```
240
+
241
+ ### No response from agent
242
+
243
+ 1. NanoClaw running: `launchctl list | grep nanoclaw` (macOS) / `systemctl --user status nanoclaw` (Linux)
244
+ 2. Messaging group wired: `sqlite3 data/v2.db "SELECT mg.platform_id, ag.folder FROM messaging_groups mg JOIN messaging_group_agents mga ON mg.id = mga.messaging_group_id JOIN agent_groups ag ON ag.id = mga.agent_group_id WHERE mg.channel_type = 'emacs'"`
245
+ 3. Logs show inbound: `grep 'channel_type=emacs\|Emacs' logs/nanoclaw.log | tail -20`
246
+
247
+ If no messaging group row exists, run the `register` command above.
248
+
249
+ ### Auth token mismatch (401 Unauthorized)
250
+
251
+ ```elisp
252
+ M-x describe-variable RET nanoclaw-auth-token RET
253
+ ```
254
+
255
+ Must match `EMACS_AUTH_TOKEN` in `.env`. If you didn't set one server-side, clear it in Emacs too:
256
+
257
+ ```elisp
258
+ (setq nanoclaw-auth-token nil)
259
+ ```
260
+
261
+ ### nanoclaw.el not loading
262
+
263
+ ```bash
264
+ ls ~/src/nanoclaw/emacs/nanoclaw.el
265
+ ```
266
+
267
+ If NanoClaw is cloned elsewhere, update the `load`/`load-file` path in your Emacs config.
268
+
269
+ ## Agent Formatting
270
+
271
+ The Emacs bridge converts markdown → org-mode automatically. Agents should output standard markdown, **not** org-mode syntax:
272
+
273
+ | Markdown | Org-mode |
274
+ |----------|----------|
275
+ | `**bold**` | `*bold*` |
276
+ | `*italic*` | `/italic/` |
277
+ | `~~text~~` | `+text+` |
278
+ | `` `code` `` | `~code~` |
279
+ | ` ```lang ` | `#+begin_src lang` |
280
+
281
+ If an agent outputs org-mode directly, markers get double-converted and render incorrectly.
282
+
283
+ ## Removal
284
+
285
+ ```bash
286
+ rm src/channels/emacs.ts src/channels/emacs.test.ts emacs/nanoclaw.el
287
+ # Remove the `import './emacs.js';` line from src/channels/index.ts
288
+ # Remove EMACS_* lines from .env
289
+ pnpm run build
290
+ launchctl kickstart -k gui/$(id -u)/com.nanoclaw # macOS
291
+ # systemctl --user restart nanoclaw # Linux
292
+
293
+ # Remove the NanoClaw block from your Emacs config
294
+ # Optionally clean up the messaging group:
295
+ sqlite3 data/v2.db "DELETE FROM messaging_group_agents WHERE messaging_group_id IN (SELECT id FROM messaging_groups WHERE channel_type='emacs'); DELETE FROM messaging_groups WHERE channel_type='emacs';"
296
+ ```
@@ -0,0 +1,210 @@
1
+ ---
2
+ name: add-gcal-tool
3
+ description: Add Google Calendar as an MCP tool (list calendars, list/search/create events, free/busy queries) using OneCLI-managed OAuth. Multi-calendar and multi-account supported. Mirrors /add-gmail-tool's stub pattern — no raw credentials ever reach the container; OneCLI injects real tokens at request time.
4
+ ---
5
+
6
+ # Add Google Calendar Tool (OneCLI-native)
7
+
8
+ This skill wires [`@cocal/google-calendar-mcp`](https://github.com/cocal-com/google-calendar-mcp) into selected agent groups. The MCP server reads stub credentials containing the `onecli-managed` placeholder; the OneCLI gateway intercepts outbound calls to `calendar.googleapis.com` / `oauth2.googleapis.com` and swaps the bearer for the real OAuth token from its vault.
9
+
10
+ **Why this package (and not gongrzhe's):** `@gongrzhe/server-calendar-autoauth-mcp` only supports the `primary` calendar and exposes 5 tools (no `list_calendars`). `@cocal/google-calendar-mcp` explicitly supports multi-calendar and multi-account, and is actively maintained.
11
+
12
+ Tools exposed (surfaced as `mcp__calendar__<name>`, exact set depends on version — run `tools/list` against the MCP server to enumerate): `list-calendars`, `list-events`, `search-events`, `create-event`, `update-event`, `delete-event`, `get-event`, `list-colors`, `get-freebusy`, `get-current-time`, plus multi-account management tools.
13
+
14
+ **Why this pattern:** v2's invariant is that containers never receive raw API keys (CHANGELOG 2.0.0). Same stub pattern `/add-gmail-tool` uses. This skill is deliberately a sibling, not a combined "Google Workspace" skill — installs independently and removes cleanly.
15
+
16
+ ## Phase 1: Pre-flight
17
+
18
+ ### Verify OneCLI has Google Calendar connected
19
+
20
+ ```bash
21
+ onecli apps get --provider google-calendar
22
+ ```
23
+
24
+ Expected: `"connection": { "status": "connected" }` with scopes including `calendar.readonly` and `calendar.events`.
25
+
26
+ If not connected, tell the user:
27
+
28
+ > Open the OneCLI web UI at http://127.0.0.1:10254, go to Apps → Google Calendar, and click Connect. Sign in with the Google account the agent should act as. `calendar.readonly` + `calendar.events` are the minimum useful scopes.
29
+
30
+ ### Verify stub credentials exist
31
+
32
+ The stub lives at `~/.calendar-mcp/` by convention (shared with `/add-gmail-tool`'s sibling). cocal doesn't default to this path (it uses `~/.config/google-calendar-mcp/tokens.json`) — we override via env vars below so it reads our stubs instead.
33
+
34
+ ```bash
35
+ ls -la ~/.calendar-mcp/gcp-oauth.keys.json ~/.calendar-mcp/credentials.json 2>&1
36
+ ```
37
+
38
+ If both exist with `onecli-managed`:
39
+
40
+ ```bash
41
+ grep -l onecli-managed ~/.calendar-mcp/gcp-oauth.keys.json ~/.calendar-mcp/credentials.json
42
+ ```
43
+
44
+ ...skip to Phase 2. If either file has real credentials (no `onecli-managed`), **STOP** — back up and delete before proceeding.
45
+
46
+ If absent, write them:
47
+
48
+ ```bash
49
+ mkdir -p ~/.calendar-mcp
50
+ cat > ~/.calendar-mcp/gcp-oauth.keys.json <<'EOF'
51
+ {
52
+ "installed": {
53
+ "client_id": "onecli-managed.apps.googleusercontent.com",
54
+ "client_secret": "onecli-managed",
55
+ "redirect_uris": ["http://localhost:3000/oauth2callback"]
56
+ }
57
+ }
58
+ EOF
59
+ cat > ~/.calendar-mcp/credentials.json <<'EOF'
60
+ {
61
+ "access_token": "onecli-managed",
62
+ "refresh_token": "onecli-managed",
63
+ "token_type": "Bearer",
64
+ "expiry_date": 99999999999999,
65
+ "scope": "https://www.googleapis.com/auth/calendar.readonly https://www.googleapis.com/auth/calendar.events"
66
+ }
67
+ EOF
68
+ chmod 600 ~/.calendar-mcp/*.json
69
+ ```
70
+
71
+ ### Verify mount allowlist covers the path
72
+
73
+ ```bash
74
+ cat ~/.config/nanoclaw/mount-allowlist.json
75
+ ```
76
+
77
+ `~/.calendar-mcp` must sit under an `allowedRoots` entry.
78
+
79
+ ### Check agent secret-mode
80
+
81
+ For each target agent group, confirm OneCLI will inject the Google Calendar token:
82
+
83
+ ```bash
84
+ onecli agents list
85
+ ```
86
+
87
+ `secretMode: all` is sufficient. If `selective`, explicitly assign the Calendar secret.
88
+
89
+ ## Phase 2: Apply Code Changes
90
+
91
+ ### Check if already applied
92
+
93
+ ```bash
94
+ grep -q 'CALENDAR_MCP_VERSION' container/Dockerfile && \
95
+ grep -q "mcp__calendar__\*" container/agent-runner/src/providers/claude.ts && \
96
+ echo "ALREADY APPLIED — skip to Phase 3"
97
+ ```
98
+
99
+ ### Add MCP server to Dockerfile
100
+
101
+ Edit `container/Dockerfile`. Find the pinned-version ARG block and add:
102
+
103
+ ```dockerfile
104
+ ARG CALENDAR_MCP_VERSION=2.6.1
105
+ ```
106
+
107
+ If `/add-gmail-tool` has already been applied, the pnpm global-install block already exists with its `zod-to-json-schema@3.22.5` pin. Just append the calendar package — **the calendar-mcp uses `zod@4.x` and does NOT need that pin**, but it's harmless to share the block:
108
+
109
+ ```dockerfile
110
+ RUN --mount=type=cache,target=/root/.cache/pnpm \
111
+ pnpm install -g \
112
+ "@gongrzhe/server-gmail-autoauth-mcp@${GMAIL_MCP_VERSION}" \
113
+ "@cocal/google-calendar-mcp@${CALENDAR_MCP_VERSION}" \
114
+ "zod-to-json-schema@3.22.5"
115
+ ```
116
+
117
+ If `/add-gmail-tool` hasn't been applied, install Calendar standalone:
118
+
119
+ ```dockerfile
120
+ RUN --mount=type=cache,target=/root/.cache/pnpm \
121
+ pnpm install -g "@cocal/google-calendar-mcp@${CALENDAR_MCP_VERSION}"
122
+ ```
123
+
124
+ ### Add tools to allowlist
125
+
126
+ Edit `container/agent-runner/src/providers/claude.ts`. Add `'mcp__calendar__*'` to `TOOL_ALLOWLIST` after `'mcp__nanoclaw__*'` (or after `'mcp__gmail__*'` if present).
127
+
128
+ ### Rebuild the container image
129
+
130
+ ```bash
131
+ ./container/build.sh
132
+ ```
133
+
134
+ ## Phase 3: Wire Per-Agent-Group
135
+
136
+ For each agent group, merge into `groups/<folder>/container.json`:
137
+
138
+ ```jsonc
139
+ {
140
+ "mcpServers": {
141
+ "calendar": {
142
+ "command": "google-calendar-mcp",
143
+ "args": [],
144
+ "env": {
145
+ "GOOGLE_OAUTH_CREDENTIALS": "/workspace/extra/.calendar-mcp/gcp-oauth.keys.json",
146
+ "GOOGLE_CALENDAR_MCP_TOKEN_PATH": "/workspace/extra/.calendar-mcp/credentials.json"
147
+ }
148
+ }
149
+ },
150
+ "additionalMounts": [
151
+ {
152
+ "hostPath": "/home/<user>/.calendar-mcp",
153
+ "containerPath": ".calendar-mcp",
154
+ "readonly": false
155
+ }
156
+ ]
157
+ }
158
+ ```
159
+
160
+ Substitute `<user>` with `echo $HOME`. `containerPath` is relative (mount-security rejects absolute paths — additional mounts land at `/workspace/extra/<relative>`).
161
+
162
+ **Same-group-as-gmail tip:** if this group already has the gmail MCP + `.gmail-mcp` mount, **merge, don't replace** — both entries coexist in `mcpServers` and `additionalMounts`.
163
+
164
+ ## Phase 4: Build and Restart
165
+
166
+ ```bash
167
+ pnpm run build
168
+ systemctl --user restart nanoclaw # Linux
169
+ # launchctl kickstart -k gui/$(id -u)/com.nanoclaw # macOS
170
+ ```
171
+
172
+ Kill any existing agent containers so they respawn with the new mcpServers config:
173
+
174
+ ```bash
175
+ docker ps -q --filter 'name=nanoclaw-v2-' | xargs -r docker kill
176
+ ```
177
+
178
+ ## Phase 5: Verify
179
+
180
+ ### Test from a wired agent
181
+
182
+ > Send: **"list my calendars"** or **"what's on my work calendar next Monday?"**.
183
+ >
184
+ > First call takes 2–3s while the MCP server starts and OneCLI does the token exchange.
185
+
186
+ ### Check logs if the tool isn't working
187
+
188
+ ```bash
189
+ tail -100 logs/nanoclaw.log | grep -iE 'calendar|mcp'
190
+ ```
191
+
192
+ Common signals:
193
+ - `command not found: google-calendar-mcp` → image not rebuilt.
194
+ - `ENOENT ...credentials.json` → mount missing. Check the mount allowlist.
195
+ - `401 Unauthorized` from `*.googleapis.com` → OneCLI isn't injecting; verify agent's secret mode and that Google Calendar is connected.
196
+ - Agent says "I don't have calendar tools" → `mcp__calendar__*` missing from `TOOL_ALLOWLIST`, or image cache stale (`./container/build.sh` again).
197
+
198
+ ## Removal
199
+
200
+ 1. Delete `"calendar"` from `mcpServers` and the `.calendar-mcp` mount from `additionalMounts` in each group's `container.json`.
201
+ 2. Remove `'mcp__calendar__*'` from `TOOL_ALLOWLIST`.
202
+ 3. Remove `CALENDAR_MCP_VERSION` ARG and the calendar package from the Dockerfile install block.
203
+ 4. `pnpm run build && ./container/build.sh && systemctl --user restart nanoclaw`.
204
+ 5. Optional: `rm -rf ~/.calendar-mcp/` and `onecli apps disconnect --provider google-calendar`.
205
+
206
+ ## Credits & references
207
+
208
+ - **MCP server:** [`@cocal/google-calendar-mcp`](https://github.com/cocal-com/google-calendar-mcp) — MIT-licensed, actively maintained, multi-account and multi-calendar.
209
+ - **Why not gongrzhe:** earlier versions of this skill used `@gongrzhe/server-calendar-autoauth-mcp@1.0.2` which only supports the primary calendar with 5 event-level tools. The cocal server supersedes it.
210
+ - **Skill pattern:** direct sibling of [`/add-gmail-tool`](../add-gmail-tool/SKILL.md); same OneCLI stub mechanism.
@@ -0,0 +1,6 @@
1
+ # Remove Google Chat Channel
2
+
3
+ 1. Comment out `import './gchat.js'` in `src/channels/index.ts`
4
+ 2. Remove `GCHAT_CREDENTIALS` from `.env`
5
+ 3. `pnpm uninstall @chat-adapter/gchat`
6
+ 4. Rebuild and restart
@@ -0,0 +1,92 @@
1
+ ---
2
+ name: add-gchat
3
+ description: Add Google Chat channel integration via Chat SDK.
4
+ ---
5
+
6
+ # Add Google Chat Channel
7
+
8
+ Adds Google Chat support via the Chat SDK bridge.
9
+
10
+ ## Install
11
+
12
+ NanoClaw doesn't ship channels in trunk. This skill copies the Google Chat adapter in from the `channels` branch.
13
+
14
+ ### Pre-flight (idempotent)
15
+
16
+ Skip to **Credentials** if all of these are already in place:
17
+
18
+ - `src/channels/gchat.ts` exists
19
+ - `src/channels/index.ts` contains `import './gchat.js';`
20
+ - `@chat-adapter/gchat` is listed in `package.json` dependencies
21
+
22
+ Otherwise continue. Every step below is safe to re-run.
23
+
24
+ ### 1. Fetch the channels branch
25
+
26
+ ```bash
27
+ git fetch origin channels
28
+ ```
29
+
30
+ ### 2. Copy the adapter
31
+
32
+ ```bash
33
+ git show origin/channels:src/channels/gchat.ts > src/channels/gchat.ts
34
+ ```
35
+
36
+ ### 3. Append the self-registration import
37
+
38
+ Append to `src/channels/index.ts` (skip if the line is already present):
39
+
40
+ ```typescript
41
+ import './gchat.js';
42
+ ```
43
+
44
+ ### 4. Install the adapter package (pinned)
45
+
46
+ ```bash
47
+ pnpm install @chat-adapter/gchat@4.26.0
48
+ ```
49
+
50
+ ### 5. Build
51
+
52
+ ```bash
53
+ pnpm run build
54
+ ```
55
+
56
+ ## Credentials
57
+
58
+ > 1. Go to [Google Cloud Console](https://console.cloud.google.com)
59
+ > 2. Create or select a project
60
+ > 3. Enable the **Google Chat API**
61
+ > 4. Go to **Google Chat API** > **Configuration**:
62
+ > - App name and description
63
+ > - Connection settings: select **HTTP endpoint URL** and set to `https://your-domain/webhook/gchat`
64
+ > 5. Create a **Service Account**:
65
+ > - Go to **IAM & Admin** > **Service Accounts** > **Create Service Account**
66
+ > - Grant the Chat Bot role
67
+ > - Create a JSON key and download it
68
+
69
+ ### Configure environment
70
+
71
+ Add the service account JSON as a single-line string to `.env`:
72
+
73
+ ```bash
74
+ GCHAT_CREDENTIALS={"type":"service_account","project_id":"...","private_key":"...","client_email":"..."}
75
+ ```
76
+
77
+ Sync to container: `mkdir -p data/env && cp .env data/env/env`
78
+
79
+ ## Next Steps
80
+
81
+ If you're in the middle of `/setup`, return to the setup flow now.
82
+
83
+ Otherwise, run `/manage-channels` to wire this channel to an agent group.
84
+
85
+ ## Channel Info
86
+
87
+ - **type**: `gchat`
88
+ - **terminology**: Google Chat has "spaces." A space can be a group conversation or a direct message with the bot.
89
+ - **how-to-find-id**: Open the space in Google Chat, look at the URL — the space ID is the segment after `/space/` (e.g. `spaces/AAAA...`). Or use the Google Chat API to list spaces.
90
+ - **supports-threads**: yes
91
+ - **typical-use**: Interactive chat — team spaces or direct messages
92
+ - **default-isolation**: Same agent group for spaces where you're the primary user. Separate agent group for spaces with different teams or sensitive contexts.
@@ -0,0 +1,3 @@
1
+ # Verify Google Chat Channel
2
+
3
+ Add the bot to a Google Chat space, then send a message or @mention the bot. The bot should respond within a few seconds.
@@ -0,0 +1,6 @@
1
+ # Remove GitHub Channel
2
+
3
+ 1. Comment out `import './github.js'` in `src/channels/index.ts`
4
+ 2. Remove `GITHUB_TOKEN` and `GITHUB_WEBHOOK_SECRET` from `.env`
5
+ 3. `pnpm uninstall @chat-adapter/github`
6
+ 4. Rebuild and restart