@openparachute/agent 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude/scheduled_tasks.lock +1 -0
- package/.claude/settings.json +5 -0
- package/.claude/skills/add-atomic-chat-tool/SKILL.md +243 -0
- package/.claude/skills/add-atomic-chat-tool/atomic-chat-mcp-stdio.ts +229 -0
- package/.claude/skills/add-codex/SKILL.md +161 -0
- package/.claude/skills/add-dashboard/SKILL.md +138 -0
- package/.claude/skills/add-dashboard/resources/dashboard-pusher.ts +495 -0
- package/.claude/skills/add-emacs/SKILL.md +296 -0
- package/.claude/skills/add-gcal-tool/SKILL.md +210 -0
- package/.claude/skills/add-gchat/REMOVE.md +6 -0
- package/.claude/skills/add-gchat/SKILL.md +92 -0
- package/.claude/skills/add-gchat/VERIFY.md +3 -0
- package/.claude/skills/add-github/REMOVE.md +6 -0
- package/.claude/skills/add-github/SKILL.md +148 -0
- package/.claude/skills/add-github/VERIFY.md +3 -0
- package/.claude/skills/add-gmail-tool/SKILL.md +229 -0
- package/.claude/skills/add-imessage/REMOVE.md +6 -0
- package/.claude/skills/add-imessage/SKILL.md +113 -0
- package/.claude/skills/add-imessage/VERIFY.md +3 -0
- package/.claude/skills/add-karpathy-llm-wiki/SKILL.md +110 -0
- package/.claude/skills/add-karpathy-llm-wiki/llm-wiki.md +75 -0
- package/.claude/skills/add-linear/REMOVE.md +6 -0
- package/.claude/skills/add-linear/SKILL.md +168 -0
- package/.claude/skills/add-linear/VERIFY.md +3 -0
- package/.claude/skills/add-macos-statusbar/SKILL.md +133 -0
- package/.claude/skills/add-macos-statusbar/add/src/statusbar.swift +147 -0
- package/.claude/skills/add-matrix/REMOVE.md +6 -0
- package/.claude/skills/add-matrix/SKILL.md +148 -0
- package/.claude/skills/add-matrix/VERIFY.md +3 -0
- package/.claude/skills/add-ollama-provider/SKILL.md +179 -0
- package/.claude/skills/add-ollama-tool/SKILL.md +193 -0
- package/.claude/skills/add-opencode/SKILL.md +229 -0
- package/.claude/skills/add-parallel/SKILL.md +290 -0
- package/.claude/skills/add-resend/REMOVE.md +6 -0
- package/.claude/skills/add-resend/SKILL.md +93 -0
- package/.claude/skills/add-resend/VERIFY.md +3 -0
- package/.claude/skills/add-signal/REMOVE.md +13 -0
- package/.claude/skills/add-signal/SKILL.md +318 -0
- package/.claude/skills/add-signal/VERIFY.md +5 -0
- package/.claude/skills/add-slack/REMOVE.md +6 -0
- package/.claude/skills/add-slack/SKILL.md +112 -0
- package/.claude/skills/add-slack/VERIFY.md +3 -0
- package/.claude/skills/add-teams/REMOVE.md +6 -0
- package/.claude/skills/add-teams/SKILL.md +207 -0
- package/.claude/skills/add-teams/VERIFY.md +3 -0
- package/.claude/skills/add-vercel/SKILL.md +147 -0
- package/.claude/skills/add-vercel/container-skills/vercel-cli/SKILL.md +103 -0
- package/.claude/skills/add-webex/REMOVE.md +6 -0
- package/.claude/skills/add-webex/SKILL.md +88 -0
- package/.claude/skills/add-webex/VERIFY.md +3 -0
- package/.claude/skills/add-wechat/REMOVE.md +49 -0
- package/.claude/skills/add-wechat/SKILL.md +170 -0
- package/.claude/skills/add-wechat/scripts/wire-dm.ts +172 -0
- package/.claude/skills/add-whatsapp/SKILL.md +264 -0
- package/.claude/skills/add-whatsapp-cloud/REMOVE.md +6 -0
- package/.claude/skills/add-whatsapp-cloud/SKILL.md +95 -0
- package/.claude/skills/add-whatsapp-cloud/VERIFY.md +3 -0
- package/.claude/skills/claw/SKILL.md +131 -0
- package/.claude/skills/claw/scripts/claw +374 -0
- package/.claude/skills/convert-to-apple-container/SKILL.md +212 -0
- package/.claude/skills/customize/SKILL.md +110 -0
- package/.claude/skills/debug/SKILL.md +349 -0
- package/.claude/skills/get-qodo-rules/SKILL.md +122 -0
- package/.claude/skills/get-qodo-rules/references/output-format.md +41 -0
- package/.claude/skills/get-qodo-rules/references/pagination.md +33 -0
- package/.claude/skills/get-qodo-rules/references/repository-scope.md +26 -0
- package/.claude/skills/init-first-agent/SKILL.md +120 -0
- package/.claude/skills/init-onecli/SKILL.md +270 -0
- package/.claude/skills/manage-channels/SKILL.md +87 -0
- package/.claude/skills/manage-mounts/SKILL.md +47 -0
- package/.claude/skills/migrate-from-openclaw/MIGRATE_CRONS.md +100 -0
- package/.claude/skills/migrate-from-openclaw/SKILL.md +447 -0
- package/.claude/skills/migrate-from-openclaw/scripts/discover-openclaw.ts +734 -0
- package/.claude/skills/migrate-from-openclaw/scripts/extract-channel-credentials.ts +476 -0
- package/.claude/skills/migrate-nanoclaw/SKILL.md +484 -0
- package/.claude/skills/migrate-nanoclaw/diagnostics.md +51 -0
- package/.claude/skills/qodo-pr-resolver/SKILL.md +326 -0
- package/.claude/skills/qodo-pr-resolver/resources/providers.md +329 -0
- package/.claude/skills/update-nanoclaw/SKILL.md +243 -0
- package/.claude/skills/update-nanoclaw/diagnostics.md +48 -0
- package/.claude/skills/update-skills/SKILL.md +130 -0
- package/.claude/skills/use-native-credential-proxy/SKILL.md +167 -0
- package/.claude/skills/x-integration/SKILL.md +417 -0
- package/.claude/skills/x-integration/agent.ts +243 -0
- package/.claude/skills/x-integration/host.ts +155 -0
- package/.claude/skills/x-integration/lib/browser.ts +148 -0
- package/.claude/skills/x-integration/lib/config.ts +62 -0
- package/.claude/skills/x-integration/scripts/like.ts +56 -0
- package/.claude/skills/x-integration/scripts/post.ts +66 -0
- package/.claude/skills/x-integration/scripts/quote.ts +80 -0
- package/.claude/skills/x-integration/scripts/reply.ts +74 -0
- package/.claude/skills/x-integration/scripts/retweet.ts +62 -0
- package/.claude/skills/x-integration/scripts/setup.ts +87 -0
- package/.github/CODEOWNERS +10 -0
- package/.github/PULL_REQUEST_TEMPLATE.md +18 -0
- package/.github/workflows/bump-version.yml +35 -0
- package/.github/workflows/ci.yml +39 -0
- package/.github/workflows/label-pr.yml +40 -0
- package/.github/workflows/update-tokens.yml +43 -0
- package/.husky/pre-commit +1 -0
- package/.mcp.json +3 -0
- package/.nvmrc +1 -0
- package/.parachute/module.json +14 -0
- package/.prettierrc +4 -0
- package/CHANGELOG.md +215 -0
- package/CLAUDE.md +307 -0
- package/CODE_OF_CONDUCT.md +128 -0
- package/CONTRIBUTING.md +159 -0
- package/CONTRIBUTORS.md +26 -0
- package/LICENSE +21 -0
- package/README.md +190 -0
- package/README_ja.md +194 -0
- package/README_zh.md +194 -0
- package/assets/nanoclaw-favicon.png +0 -0
- package/assets/nanoclaw-icon.png +0 -0
- package/assets/nanoclaw-logo-dark.png +0 -0
- package/assets/nanoclaw-logo.png +0 -0
- package/assets/nanoclaw-profile.jpeg +0 -0
- package/assets/nanoclaw-sales.png +0 -0
- package/assets/social-preview.jpg +0 -0
- package/config-examples/mount-allowlist.json +25 -0
- package/container/.dockerignore +2 -0
- package/container/CLAUDE.md +21 -0
- package/container/Dockerfile +121 -0
- package/container/agent-runner/bun.lock +243 -0
- package/container/agent-runner/package.json +22 -0
- package/container/agent-runner/scripts/sdk-signal-probe.ts +169 -0
- package/container/agent-runner/src/config.ts +55 -0
- package/container/agent-runner/src/db/connection.ts +267 -0
- package/container/agent-runner/src/db/index.ts +20 -0
- package/container/agent-runner/src/db/messages-in.ts +138 -0
- package/container/agent-runner/src/db/messages-out.ts +143 -0
- package/container/agent-runner/src/db/session-routing.ts +30 -0
- package/container/agent-runner/src/db/session-state.test.ts +100 -0
- package/container/agent-runner/src/db/session-state.ts +79 -0
- package/container/agent-runner/src/destinations.ts +135 -0
- package/container/agent-runner/src/formatter.test.ts +167 -0
- package/container/agent-runner/src/formatter.ts +260 -0
- package/container/agent-runner/src/index.ts +110 -0
- package/container/agent-runner/src/integration.test.ts +121 -0
- package/container/agent-runner/src/mcp-tools/agents.instructions.md +26 -0
- package/container/agent-runner/src/mcp-tools/agents.ts +66 -0
- package/container/agent-runner/src/mcp-tools/core.instructions.md +27 -0
- package/container/agent-runner/src/mcp-tools/core.ts +262 -0
- package/container/agent-runner/src/mcp-tools/index.ts +22 -0
- package/container/agent-runner/src/mcp-tools/interactive.instructions.md +22 -0
- package/container/agent-runner/src/mcp-tools/interactive.ts +169 -0
- package/container/agent-runner/src/mcp-tools/scheduling.instructions.md +40 -0
- package/container/agent-runner/src/mcp-tools/scheduling.ts +299 -0
- package/container/agent-runner/src/mcp-tools/self-mod.instructions.md +25 -0
- package/container/agent-runner/src/mcp-tools/self-mod.ts +120 -0
- package/container/agent-runner/src/mcp-tools/server.ts +54 -0
- package/container/agent-runner/src/mcp-tools/types.ts +6 -0
- package/container/agent-runner/src/poll-loop.test.ts +248 -0
- package/container/agent-runner/src/poll-loop.ts +437 -0
- package/container/agent-runner/src/providers/claude.ts +379 -0
- package/container/agent-runner/src/providers/factory.test.ts +19 -0
- package/container/agent-runner/src/providers/factory.ts +13 -0
- package/container/agent-runner/src/providers/index.ts +6 -0
- package/container/agent-runner/src/providers/mock.ts +77 -0
- package/container/agent-runner/src/providers/provider-registry.ts +33 -0
- package/container/agent-runner/src/providers/types.ts +82 -0
- package/container/agent-runner/src/scheduling/task-script.ts +121 -0
- package/container/agent-runner/src/timezone.test.ts +93 -0
- package/container/agent-runner/src/timezone.ts +107 -0
- package/container/agent-runner/tsconfig.json +14 -0
- package/container/build.sh +48 -0
- package/container/entrypoint.sh +16 -0
- package/container/skills/agent-browser/SKILL.md +159 -0
- package/container/skills/frontend-engineer/SKILL.md +157 -0
- package/container/skills/self-customize/SKILL.md +87 -0
- package/container/skills/slack-formatting/SKILL.md +94 -0
- package/container/skills/vercel-cli/SKILL.md +111 -0
- package/container/skills/welcome/SKILL.md +85 -0
- package/docs/APPLE-CONTAINER-NETWORKING.md +90 -0
- package/docs/BRANCH-FORK-MAINTENANCE.md +81 -0
- package/docs/README.md +25 -0
- package/docs/SDK_DEEP_DIVE.md +643 -0
- package/docs/SECURITY.md +162 -0
- package/docs/agent-runner-details.md +749 -0
- package/docs/api-details.md +365 -0
- package/docs/architecture-diagram.html +422 -0
- package/docs/architecture-diagram.md +215 -0
- package/docs/architecture.md +751 -0
- package/docs/audit/2026-04-30-channel-endpoint-audit.md +36 -0
- package/docs/build-and-runtime.md +80 -0
- package/docs/cross-mount-stress/README.md +112 -0
- package/docs/cross-mount-stress/container-writer-retry.mjs +55 -0
- package/docs/cross-mount-stress/container-writer-slow.mjs +42 -0
- package/docs/cross-mount-stress/container-writer.mjs +47 -0
- package/docs/cross-mount-stress/host-writer-retry.mjs +55 -0
- package/docs/cross-mount-stress/host-writer-slow.mjs +43 -0
- package/docs/cross-mount-stress/host-writer.mjs +47 -0
- package/docs/db-central.md +316 -0
- package/docs/db-session.md +183 -0
- package/docs/db.md +119 -0
- package/docs/design/2026-04-29-vault-management-ui.md +231 -0
- package/docs/design/2026-04-30-channel-wiring-rework.md +234 -0
- package/docs/design/2026-05-01-channel-wiring-approvals-deep-dive.md +272 -0
- package/docs/design/2026-05-02-channel-policy-and-approval-routing.md +250 -0
- package/docs/docker-sandboxes.md +359 -0
- package/docs/isolation-model.md +88 -0
- package/docs/ollama.md +79 -0
- package/docs/parachute-integration.md +109 -0
- package/docs/post-night-rebirth-reflections.md +151 -0
- package/eslint.config.js +32 -0
- package/package.json +54 -0
- package/pnpm-workspace.yaml +8 -0
- package/repo-tokens/README.md +113 -0
- package/repo-tokens/action.yml +186 -0
- package/repo-tokens/badge.svg +23 -0
- package/repo-tokens/examples/green.svg +14 -0
- package/repo-tokens/examples/red.svg +14 -0
- package/repo-tokens/examples/yellow-green.svg +14 -0
- package/repo-tokens/examples/yellow.svg +14 -0
- package/scripts/chat.ts +101 -0
- package/scripts/cleanup-sessions.sh +150 -0
- package/scripts/init-cli-agent.ts +171 -0
- package/scripts/init-first-agent.ts +377 -0
- package/scripts/parachute.ts +158 -0
- package/scripts/run-migrations.ts +105 -0
- package/scripts/sanity-live-poll.ts +95 -0
- package/scripts/seed-discord.ts +79 -0
- package/scripts/test-v2-agent.ts +106 -0
- package/scripts/test-v2-channel-e2e.ts +265 -0
- package/scripts/test-v2-host.ts +184 -0
- package/src/channels/adapter.ts +214 -0
- package/src/channels/ask-question.ts +46 -0
- package/src/channels/channel-registry.test.ts +421 -0
- package/src/channels/channel-registry.ts +313 -0
- package/src/channels/chat-sdk-bridge.test.ts +84 -0
- package/src/channels/chat-sdk-bridge.ts +652 -0
- package/src/channels/cli.ts +276 -0
- package/src/channels/discord.ts +90 -0
- package/src/channels/index.ts +17 -0
- package/src/channels/telegram-markdown-sanitize.test.ts +78 -0
- package/src/channels/telegram-markdown-sanitize.ts +55 -0
- package/src/channels/telegram-pairing.test.ts +254 -0
- package/src/channels/telegram-pairing.ts +339 -0
- package/src/channels/telegram.ts +279 -0
- package/src/channels/trust-hint.test.ts +48 -0
- package/src/channels/trust-hint.ts +75 -0
- package/src/claude-md-compose.migrate.test.ts +64 -0
- package/src/claude-md-compose.ts +205 -0
- package/src/command-gate.ts +63 -0
- package/src/config.test.ts +93 -0
- package/src/config.ts +108 -0
- package/src/container-config.ts +167 -0
- package/src/container-runner.test.ts +32 -0
- package/src/container-runner.ts +576 -0
- package/src/container-runtime.test.ts +169 -0
- package/src/container-runtime.ts +92 -0
- package/src/db/_bun-sqlite-shim.ts +88 -0
- package/src/db/agent-activity.test.ts +155 -0
- package/src/db/agent-activity.ts +121 -0
- package/src/db/agent-groups.ts +77 -0
- package/src/db/connection.migrate.test.ts +143 -0
- package/src/db/connection.ts +224 -0
- package/src/db/db-v2.test.ts +440 -0
- package/src/db/dropped-messages.ts +44 -0
- package/src/db/index.ts +40 -0
- package/src/db/messaging-groups.ts +252 -0
- package/src/db/migrations/001-initial.ts +112 -0
- package/src/db/migrations/002-chat-sdk-state.ts +36 -0
- package/src/db/migrations/008-dropped-messages.ts +27 -0
- package/src/db/migrations/009-drop-pending-credentials.ts +13 -0
- package/src/db/migrations/010-engage-modes.ts +103 -0
- package/src/db/migrations/011-pending-sender-approvals.ts +40 -0
- package/src/db/migrations/012-channel-registration.ts +48 -0
- package/src/db/migrations/013-approval-render-metadata.ts +27 -0
- package/src/db/migrations/014-secrets.ts +44 -0
- package/src/db/migrations/015-secrets-drop-host-pattern.ts +18 -0
- package/src/db/migrations/016-secret-assignments.ts +30 -0
- package/src/db/migrations/017-agent-activity.ts +40 -0
- package/src/db/migrations/018-oauth-app-configs.ts +34 -0
- package/src/db/migrations/019-oauth-app-connections.ts +48 -0
- package/src/db/migrations/020-agent-app-connections.ts +28 -0
- package/src/db/migrations/021-pending-oauth-states.ts +35 -0
- package/src/db/migrations/022-app-connections-provider.ts +25 -0
- package/src/db/migrations/023-agent-group-secret-mode.test.ts +124 -0
- package/src/db/migrations/023-agent-group-secret-mode.ts +65 -0
- package/src/db/migrations/024-collapse-approvals.test.ts +249 -0
- package/src/db/migrations/024-collapse-approvals.ts +182 -0
- package/src/db/migrations/025-secret-mode-check.test.ts +155 -0
- package/src/db/migrations/025-secret-mode-check.ts +49 -0
- package/src/db/migrations/026-user-dms-bot-id.test.ts +116 -0
- package/src/db/migrations/026-user-dms-bot-id.ts +54 -0
- package/src/db/migrations/027-provider-credentials.ts +41 -0
- package/src/db/migrations/_test-helpers.ts +41 -0
- package/src/db/migrations/index.ts +127 -0
- package/src/db/migrations/module-agent-to-agent-destinations.ts +84 -0
- package/src/db/migrations/module-approvals-pending-approvals.ts +42 -0
- package/src/db/migrations/module-approvals-title-options.ts +40 -0
- package/src/db/schema.ts +258 -0
- package/src/db/session-db.test.ts +93 -0
- package/src/db/session-db.ts +325 -0
- package/src/db/sessions.ts +241 -0
- package/src/delivery.test.ts +148 -0
- package/src/delivery.ts +445 -0
- package/src/env.ts +74 -0
- package/src/group-folder.test.ts +35 -0
- package/src/group-folder.ts +44 -0
- package/src/group-init.ts +92 -0
- package/src/host-core.test.ts +456 -0
- package/src/host-sweep.test.ts +146 -0
- package/src/host-sweep.ts +287 -0
- package/src/index.ts +227 -0
- package/src/install-slug.ts +33 -0
- package/src/log.test.ts +81 -0
- package/src/log.ts +117 -0
- package/src/mcp/http.ts +72 -0
- package/src/mcp/server.ts +92 -0
- package/src/mcp/stdio.ts +51 -0
- package/src/mcp/tools/activity.ts +88 -0
- package/src/mcp/tools/agent-groups.ts +183 -0
- package/src/mcp/tools/approvals.ts +122 -0
- package/src/mcp/tools/channels.ts +199 -0
- package/src/mcp/tools/index.ts +27 -0
- package/src/mcp/tools/oauth.ts +48 -0
- package/src/mcp/tools/secrets.ts +169 -0
- package/src/mcp/tools/sessions.ts +135 -0
- package/src/mcp/types.ts +51 -0
- package/src/modules/agent-to-agent/agent-route.test.ts +46 -0
- package/src/modules/agent-to-agent/agent-route.ts +223 -0
- package/src/modules/agent-to-agent/create-agent.ts +127 -0
- package/src/modules/agent-to-agent/db/agent-destinations.ts +135 -0
- package/src/modules/agent-to-agent/index.ts +22 -0
- package/src/modules/agent-to-agent/write-destinations.ts +59 -0
- package/src/modules/approvals/agent.md +45 -0
- package/src/modules/approvals/index.ts +21 -0
- package/src/modules/approvals/picks.test.ts +291 -0
- package/src/modules/approvals/primitive.ts +279 -0
- package/src/modules/approvals/project.md +27 -0
- package/src/modules/approvals/response-handler.ts +87 -0
- package/src/modules/index.ts +24 -0
- package/src/modules/interactive/agent.md +21 -0
- package/src/modules/interactive/index.ts +69 -0
- package/src/modules/interactive/project.md +12 -0
- package/src/modules/mount-security/index.ts +448 -0
- package/src/modules/mount-security/migrate.test.ts +91 -0
- package/src/modules/permissions/access.ts +28 -0
- package/src/modules/permissions/channel-approval.test.ts +389 -0
- package/src/modules/permissions/channel-approval.ts +188 -0
- package/src/modules/permissions/db/agent-group-members.ts +44 -0
- package/src/modules/permissions/db/pending-channel-approvals.test.ts +86 -0
- package/src/modules/permissions/db/pending-channel-approvals.ts +66 -0
- package/src/modules/permissions/db/pending-sender-approvals.ts +60 -0
- package/src/modules/permissions/db/user-dms.ts +58 -0
- package/src/modules/permissions/db/user-roles.ts +85 -0
- package/src/modules/permissions/db/users.ts +38 -0
- package/src/modules/permissions/index.ts +421 -0
- package/src/modules/permissions/permissions.test.ts +358 -0
- package/src/modules/permissions/sender-approval.test.ts +470 -0
- package/src/modules/permissions/sender-approval.ts +165 -0
- package/src/modules/permissions/user-dm.ts +200 -0
- package/src/modules/provider-credentials/db.ts +121 -0
- package/src/modules/provider-credentials/index.ts +12 -0
- package/src/modules/provider-credentials/spawn.test.ts +206 -0
- package/src/modules/provider-credentials/spawn.ts +114 -0
- package/src/modules/scheduling/actions.ts +113 -0
- package/src/modules/scheduling/db.test.ts +282 -0
- package/src/modules/scheduling/db.ts +148 -0
- package/src/modules/scheduling/index.ts +34 -0
- package/src/modules/scheduling/recurrence.test.ts +98 -0
- package/src/modules/scheduling/recurrence.ts +54 -0
- package/src/modules/self-mod/agent.md +30 -0
- package/src/modules/self-mod/apply.ts +85 -0
- package/src/modules/self-mod/index.ts +30 -0
- package/src/modules/self-mod/project.md +39 -0
- package/src/modules/self-mod/request.ts +91 -0
- package/src/modules/typing/index.ts +165 -0
- package/src/oauth/agent-app-connections.ts +103 -0
- package/src/oauth/app-configs.test.ts +64 -0
- package/src/oauth/app-configs.ts +114 -0
- package/src/oauth/app-connections.test.ts +109 -0
- package/src/oauth/app-connections.ts +178 -0
- package/src/oauth/crypto.ts +56 -0
- package/src/oauth/flow.ts +104 -0
- package/src/oauth/providers/google.test.ts +38 -0
- package/src/oauth/providers/google.ts +46 -0
- package/src/oauth/providers/index.ts +48 -0
- package/src/oauth/state-store.test.ts +54 -0
- package/src/oauth/state-store.ts +93 -0
- package/src/parachute/README.md +27 -0
- package/src/parachute/create-agent.test.ts +83 -0
- package/src/parachute/create-agent.ts +122 -0
- package/src/parachute/group-status.test.ts +165 -0
- package/src/parachute/group-status.ts +136 -0
- package/src/parachute/types.ts +41 -0
- package/src/parachute/vault-mcp.test.ts +251 -0
- package/src/parachute/vault-mcp.ts +232 -0
- package/src/platform-id.test.ts +104 -0
- package/src/platform-id.ts +109 -0
- package/src/providers/index.ts +6 -0
- package/src/providers/provider-container-registry.ts +58 -0
- package/src/response-registry.ts +45 -0
- package/src/router.ts +530 -0
- package/src/secrets/crypto.test.ts +45 -0
- package/src/secrets/crypto.ts +55 -0
- package/src/secrets/index.ts +355 -0
- package/src/secrets/master-key.ts +70 -0
- package/src/secrets/secrets.test.ts +354 -0
- package/src/session-manager.migrate.test.ts +59 -0
- package/src/session-manager.ts +433 -0
- package/src/startup-bootstrap.test.ts +226 -0
- package/src/startup-bootstrap.ts +207 -0
- package/src/state-sqlite.ts +182 -0
- package/src/timezone.test.ts +64 -0
- package/src/timezone.ts +37 -0
- package/src/types.ts +230 -0
- package/src/web/auth.test.ts +335 -0
- package/src/web/auth.ts +214 -0
- package/src/web/discord-validate.test.ts +77 -0
- package/src/web/discord-validate.ts +88 -0
- package/src/web/hub-discovery.test.ts +98 -0
- package/src/web/hub-discovery.ts +69 -0
- package/src/web/routes/activity.ts +106 -0
- package/src/web/routes/agent-provider.test.ts +282 -0
- package/src/web/routes/agent-provider.ts +309 -0
- package/src/web/routes/approvals.ts +185 -0
- package/src/web/routes/apps.ts +434 -0
- package/src/web/routes/channels-mg-detail.test.ts +324 -0
- package/src/web/routes/channels-mga-detail.test.ts +425 -0
- package/src/web/routes/channels.ts +489 -0
- package/src/web/routes/oauth-providers.ts +42 -0
- package/src/web/routes/secrets.test.ts +175 -0
- package/src/web/routes/secrets.ts +282 -0
- package/src/web/routes/sessions.ts +123 -0
- package/src/web/routes/settings.test.ts +106 -0
- package/src/web/routes/settings.ts +247 -0
- package/src/web/routes/setup-status.ts +205 -0
- package/src/web/routes/vaults.test.ts +389 -0
- package/src/web/routes/vaults.ts +225 -0
- package/src/web/server-version.test.ts +16 -0
- package/src/web/server.ts +1003 -0
- package/src/web/services-manifest.test.ts +120 -0
- package/src/web/services-manifest.ts +61 -0
- package/src/web/static-serve.test.ts +255 -0
- package/src/web/static-serve.ts +104 -0
- package/src/web/telegram-validate.test.ts +116 -0
- package/src/web/telegram-validate.ts +107 -0
- package/src/web/vault-proxy.test.ts +214 -0
- package/src/web/vault-proxy.ts +120 -0
- package/src/web/wire-channel.ts +181 -0
- package/src/webhook-server.ts +134 -0
- package/tsconfig.json +21 -0
- package/vitest.config.ts +18 -0
- package/web/README.md +63 -0
- package/web/ui/index.html +13 -0
- package/web/ui/package.json +35 -0
- package/web/ui/pnpm-lock.yaml +2164 -0
- package/web/ui/scripts/verify-base.mjs +31 -0
- package/web/ui/src/App.tsx +88 -0
- package/web/ui/src/components/ActivityFeed.tsx +444 -0
- package/web/ui/src/components/AgentGroupPicker.tsx +263 -0
- package/web/ui/src/components/AgentProviderCards.tsx +220 -0
- package/web/ui/src/components/CredentialForm.tsx +214 -0
- package/web/ui/src/components/ScopeGrants.tsx +74 -0
- package/web/ui/src/components/StatusDot.tsx +43 -0
- package/web/ui/src/components/VaultPicker.tsx +127 -0
- package/web/ui/src/components/setup/AdapterInstallStep.tsx +178 -0
- package/web/ui/src/components/setup/AgentGroupStep.tsx +43 -0
- package/web/ui/src/components/setup/ChannelPickStep.tsx +74 -0
- package/web/ui/src/components/setup/DoneStep.tsx +49 -0
- package/web/ui/src/components/setup/PrereqStep.tsx +129 -0
- package/web/ui/src/components/setup/TestConnectionStep.tsx +108 -0
- package/web/ui/src/components/setup/TestMessageStep.tsx +104 -0
- package/web/ui/src/components/setup/WireChannelStep.tsx +166 -0
- package/web/ui/src/components/setup/types.ts +105 -0
- package/web/ui/src/lib/api.test.ts +410 -0
- package/web/ui/src/lib/api.ts +1210 -0
- package/web/ui/src/lib/auth.test.ts +139 -0
- package/web/ui/src/lib/auth.ts +348 -0
- package/web/ui/src/lib/channel-adapters.ts +136 -0
- package/web/ui/src/main.tsx +19 -0
- package/web/ui/src/routes/ApprovalsList.tsx +294 -0
- package/web/ui/src/routes/Apps.tsx +613 -0
- package/web/ui/src/routes/ChannelWireDetail.test.tsx +233 -0
- package/web/ui/src/routes/ChannelWireDetail.tsx +403 -0
- package/web/ui/src/routes/ChannelsList.tsx +158 -0
- package/web/ui/src/routes/GroupDetail.tsx +755 -0
- package/web/ui/src/routes/GroupList.tsx +187 -0
- package/web/ui/src/routes/MessagingGroupDetail.test.tsx +233 -0
- package/web/ui/src/routes/MessagingGroupDetail.tsx +306 -0
- package/web/ui/src/routes/NewGroupWizard.tsx +390 -0
- package/web/ui/src/routes/OAuthCallback.tsx +56 -0
- package/web/ui/src/routes/SecretsList.tsx +921 -0
- package/web/ui/src/routes/SessionsList.tsx +220 -0
- package/web/ui/src/routes/SettingsAgentProvider.tsx +109 -0
- package/web/ui/src/routes/SettingsApprovals.tsx +234 -0
- package/web/ui/src/routes/SetupWizard.tsx +219 -0
- package/web/ui/src/routes/VaultDetail.test.tsx +361 -0
- package/web/ui/src/routes/VaultDetail.tsx +960 -0
- package/web/ui/src/routes/VaultsList.tsx +295 -0
- package/web/ui/src/routes/WireChannelPage.tsx +413 -0
- package/web/ui/src/styles.css +608 -0
- package/web/ui/src/test/setup.ts +23 -0
- package/web/ui/src/vite-env.d.ts +10 -0
- package/web/ui/tsconfig.json +20 -0
- package/web/ui/vite.config.ts +34 -0
- package/web/ui/vitest.config.ts +25 -0
|
@@ -0,0 +1,296 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: add-emacs
|
|
3
|
+
description: Add Emacs as a channel. Opens an interactive chat buffer and org-mode integration so you can talk to NanoClaw from within Emacs (Doom, Spacemacs, or vanilla). Local HTTP bridge — no bot token or external service needed.
|
|
4
|
+
---
|
|
5
|
+
|
|
6
|
+
# Add Emacs Channel
|
|
7
|
+
|
|
8
|
+
Adds Emacs support via a local HTTP bridge. Works with Doom Emacs, Spacemacs, and vanilla Emacs 27.1+.
|
|
9
|
+
|
|
10
|
+
## What you can do with this
|
|
11
|
+
|
|
12
|
+
- **Ask while coding** — open the chat buffer (`C-c n c` / `SPC N c`), ask about a function or error without leaving Emacs
|
|
13
|
+
- **Code review** — select a region and send it with `nanoclaw-org-send`; the response appears as a child heading inline in your org file
|
|
14
|
+
- **Meeting notes** — send an org agenda entry; get a summary or action item list back as a child node
|
|
15
|
+
- **Draft writing** — send org prose; receive revisions or continuations in place
|
|
16
|
+
- **Research capture** — ask a question directly in your org notes; the answer lands exactly where you need it
|
|
17
|
+
|
|
18
|
+
## Install
|
|
19
|
+
|
|
20
|
+
NanoClaw doesn't ship channels in trunk. This skill copies the Emacs adapter and the Lisp client in from the `channels` branch. Native HTTP bridge — no Chat SDK, no adapter package.
|
|
21
|
+
|
|
22
|
+
### Pre-flight (idempotent)
|
|
23
|
+
|
|
24
|
+
Skip to **Enable** if all of these are already in place:
|
|
25
|
+
|
|
26
|
+
- `src/channels/emacs.ts` exists
|
|
27
|
+
- `emacs/nanoclaw.el` exists
|
|
28
|
+
- `src/channels/index.ts` contains `import './emacs.js';`
|
|
29
|
+
|
|
30
|
+
Otherwise continue. Every step below is safe to re-run.
|
|
31
|
+
|
|
32
|
+
### 1. Fetch the channels branch
|
|
33
|
+
|
|
34
|
+
```bash
|
|
35
|
+
git fetch origin channels
|
|
36
|
+
```
|
|
37
|
+
|
|
38
|
+
### 2. Copy the adapter and Lisp client
|
|
39
|
+
|
|
40
|
+
```bash
|
|
41
|
+
mkdir -p emacs
|
|
42
|
+
git show origin/channels:src/channels/emacs.ts > src/channels/emacs.ts
|
|
43
|
+
git show origin/channels:src/channels/emacs.test.ts > src/channels/emacs.test.ts
|
|
44
|
+
git show origin/channels:emacs/nanoclaw.el > emacs/nanoclaw.el
|
|
45
|
+
```
|
|
46
|
+
|
|
47
|
+
### 3. Append the self-registration import
|
|
48
|
+
|
|
49
|
+
Append to `src/channels/index.ts` (skip if the line is already present):
|
|
50
|
+
|
|
51
|
+
```typescript
|
|
52
|
+
import './emacs.js';
|
|
53
|
+
```
|
|
54
|
+
|
|
55
|
+
### 4. Build
|
|
56
|
+
|
|
57
|
+
```bash
|
|
58
|
+
pnpm run build
|
|
59
|
+
```
|
|
60
|
+
|
|
61
|
+
No npm package to install — the adapter uses only Node builtins (`http`).
|
|
62
|
+
|
|
63
|
+
## Enable
|
|
64
|
+
|
|
65
|
+
The adapter is gated by `EMACS_ENABLED` so the HTTP port isn't opened on hosts that aren't running Emacs. Add to `.env`:
|
|
66
|
+
|
|
67
|
+
```bash
|
|
68
|
+
EMACS_ENABLED=true
|
|
69
|
+
EMACS_CHANNEL_PORT=8766 # optional — change only if 8766 is taken
|
|
70
|
+
EMACS_AUTH_TOKEN= # optional — set to a random string to lock the endpoint
|
|
71
|
+
EMACS_PLATFORM_ID=default # optional — only change if you want a non-default chat id
|
|
72
|
+
```
|
|
73
|
+
|
|
74
|
+
Generate an auth token (recommended even on single-user machines — prevents other local processes from poking the endpoint):
|
|
75
|
+
|
|
76
|
+
```bash
|
|
77
|
+
node -e "console.log(require('crypto').randomBytes(16).toString('hex'))"
|
|
78
|
+
```
|
|
79
|
+
|
|
80
|
+
## Wire the channel
|
|
81
|
+
|
|
82
|
+
Emacs is a single-user, single-chat channel. One host = one messaging group with `platform_id = "default"`.
|
|
83
|
+
|
|
84
|
+
### If this is your first agent group
|
|
85
|
+
|
|
86
|
+
Run `/init-first-agent` — pick **Emacs** as the channel, use any short handle as the "user id" (e.g. your OS username), and the skill will create the agent group, wire the channel, and write a welcome message that the agent delivers back to your Emacs buffer.
|
|
87
|
+
|
|
88
|
+
### Otherwise — wire to an existing agent group
|
|
89
|
+
|
|
90
|
+
Run the `register` step directly. The `EMACS_PLATFORM_ID` (default `default`) becomes the messaging group's platform id:
|
|
91
|
+
|
|
92
|
+
```bash
|
|
93
|
+
pnpm exec tsx setup/index.ts --step register -- \
|
|
94
|
+
--platform-id "default" --name "Emacs" \
|
|
95
|
+
--folder "<existing-folder>" --channel "emacs" \
|
|
96
|
+
--session-mode "agent-shared" \
|
|
97
|
+
--assistant-name "<existing-assistant-name>"
|
|
98
|
+
```
|
|
99
|
+
|
|
100
|
+
`agent-shared` puts Emacs messages in the same session as any other channel wired to the same agent group — so a conversation you started in Telegram continues in Emacs. Use `shared` to keep an independent Emacs thread with the same workspace, or a new `--folder` for a dedicated Emacs-only agent.
|
|
101
|
+
|
|
102
|
+
## Configure Emacs
|
|
103
|
+
|
|
104
|
+
`nanoclaw.el` needs only Emacs 27.1+ builtins (`url`, `json`, `org`) — no package manager.
|
|
105
|
+
|
|
106
|
+
AskUserQuestion: Which Emacs distribution are you using?
|
|
107
|
+
- **Doom Emacs** — `config.el` with `map!` keybindings
|
|
108
|
+
- **Spacemacs** — `dotspacemacs/user-config` in `~/.spacemacs`
|
|
109
|
+
- **Vanilla Emacs / other** — `init.el` with `global-set-key`
|
|
110
|
+
|
|
111
|
+
**Doom Emacs** — add to `~/.config/doom/config.el` (or `~/.doom.d/config.el`):
|
|
112
|
+
|
|
113
|
+
```elisp
|
|
114
|
+
;; NanoClaw — personal AI assistant channel
|
|
115
|
+
(load (expand-file-name "~/src/nanoclaw/emacs/nanoclaw.el"))
|
|
116
|
+
|
|
117
|
+
(map! :leader
|
|
118
|
+
:prefix ("N" . "NanoClaw")
|
|
119
|
+
:desc "Chat buffer" "c" #'nanoclaw-chat
|
|
120
|
+
:desc "Send org" "o" #'nanoclaw-org-send)
|
|
121
|
+
```
|
|
122
|
+
|
|
123
|
+
Reload: `M-x doom/reload`
|
|
124
|
+
|
|
125
|
+
**Spacemacs** — add to `dotspacemacs/user-config` in `~/.spacemacs`:
|
|
126
|
+
|
|
127
|
+
```elisp
|
|
128
|
+
;; NanoClaw — personal AI assistant channel
|
|
129
|
+
(load-file "~/src/nanoclaw/emacs/nanoclaw.el")
|
|
130
|
+
|
|
131
|
+
(spacemacs/set-leader-keys "aNc" #'nanoclaw-chat)
|
|
132
|
+
(spacemacs/set-leader-keys "aNo" #'nanoclaw-org-send)
|
|
133
|
+
```
|
|
134
|
+
|
|
135
|
+
Reload: `M-x dotspacemacs/sync-configuration-layers` or restart Emacs.
|
|
136
|
+
|
|
137
|
+
**Vanilla Emacs** — add to `~/.emacs.d/init.el`:
|
|
138
|
+
|
|
139
|
+
```elisp
|
|
140
|
+
;; NanoClaw — personal AI assistant channel
|
|
141
|
+
(load-file "~/src/nanoclaw/emacs/nanoclaw.el")
|
|
142
|
+
|
|
143
|
+
(global-set-key (kbd "C-c n c") #'nanoclaw-chat)
|
|
144
|
+
(global-set-key (kbd "C-c n o") #'nanoclaw-org-send)
|
|
145
|
+
```
|
|
146
|
+
|
|
147
|
+
Reload: `M-x eval-buffer` or restart Emacs.
|
|
148
|
+
|
|
149
|
+
Replace `~/src/nanoclaw/emacs/nanoclaw.el` with your actual NanoClaw checkout path.
|
|
150
|
+
|
|
151
|
+
If `EMACS_AUTH_TOKEN` is set, also add (any distribution):
|
|
152
|
+
|
|
153
|
+
```elisp
|
|
154
|
+
(setq nanoclaw-auth-token "<your-token>")
|
|
155
|
+
```
|
|
156
|
+
|
|
157
|
+
If you changed `EMACS_CHANNEL_PORT` from the default:
|
|
158
|
+
|
|
159
|
+
```elisp
|
|
160
|
+
(setq nanoclaw-port <your-port>)
|
|
161
|
+
```
|
|
162
|
+
|
|
163
|
+
## Restart NanoClaw
|
|
164
|
+
|
|
165
|
+
```bash
|
|
166
|
+
pnpm run build
|
|
167
|
+
launchctl kickstart -k gui/$(id -u)/com.nanoclaw # macOS
|
|
168
|
+
# systemctl --user restart nanoclaw # Linux
|
|
169
|
+
```
|
|
170
|
+
|
|
171
|
+
## Verify
|
|
172
|
+
|
|
173
|
+
### HTTP endpoint
|
|
174
|
+
|
|
175
|
+
```bash
|
|
176
|
+
curl -s http://localhost:8766/api/messages?since=0
|
|
177
|
+
```
|
|
178
|
+
|
|
179
|
+
Expected: `{"messages":[]}`. With an auth token:
|
|
180
|
+
|
|
181
|
+
```bash
|
|
182
|
+
curl -s -H "Authorization: Bearer <token>" http://localhost:8766/api/messages?since=0
|
|
183
|
+
```
|
|
184
|
+
|
|
185
|
+
### From Emacs
|
|
186
|
+
|
|
187
|
+
Tell the user:
|
|
188
|
+
|
|
189
|
+
> 1. Open the chat buffer with your keybinding (`SPC N c`, `SPC a N c`, or `C-c n c`)
|
|
190
|
+
> 2. Type a message and press `C-c C-c` to send (RET inserts newlines)
|
|
191
|
+
> 3. A response should appear within a few seconds
|
|
192
|
+
>
|
|
193
|
+
> For org-mode: open any `.org` file, position the cursor on a heading, and use `SPC N o` / `SPC a N o` / `C-c n o`
|
|
194
|
+
|
|
195
|
+
### Log line
|
|
196
|
+
|
|
197
|
+
`tail -f logs/nanoclaw.log` should show `Emacs channel listening` at startup.
|
|
198
|
+
|
|
199
|
+
## Channel Info
|
|
200
|
+
|
|
201
|
+
- **type**: `emacs`
|
|
202
|
+
- **terminology**: Single local buffer. There are no "groups" or separate chats — one host = one chat, addressed by a `platform_id` string (default `default`).
|
|
203
|
+
- **how-to-find-id**: The platform id is whatever you set in `EMACS_PLATFORM_ID` (default `default`). User handles are arbitrary; your OS username or first name is fine (e.g. `emacs:<username>`).
|
|
204
|
+
- **supports-threads**: no
|
|
205
|
+
- **typical-use**: Single developer talking to the assistant from within Emacs, alongside whatever other channel they use (Slack, Telegram, Discord).
|
|
206
|
+
- **default-isolation**: Same agent group as the primary DM, with `session-mode = agent-shared` so a conversation started elsewhere continues in Emacs. Pick a separate folder only if you specifically want an Emacs-only persona.
|
|
207
|
+
|
|
208
|
+
### Features
|
|
209
|
+
|
|
210
|
+
- Interactive chat buffer (`nanoclaw-chat`) with markdown → org-mode rendering
|
|
211
|
+
- Org integration (`nanoclaw-org-send`) — sends the current subtree or region; reply lands as a child heading
|
|
212
|
+
- Optional bearer-token auth for the local endpoint
|
|
213
|
+
- Single-user: the adapter exposes exactly one messaging group per host
|
|
214
|
+
|
|
215
|
+
Not applicable (design): multi-user channels, threads, cold DM initiation, typing indicators, attachments.
|
|
216
|
+
|
|
217
|
+
## Troubleshooting
|
|
218
|
+
|
|
219
|
+
### Port already in use
|
|
220
|
+
|
|
221
|
+
```
|
|
222
|
+
Error: listen EADDRINUSE: address already in use :::8766
|
|
223
|
+
```
|
|
224
|
+
|
|
225
|
+
Either a stale NanoClaw is running or another app has the port. Kill stale process or change port:
|
|
226
|
+
|
|
227
|
+
```bash
|
|
228
|
+
lsof -ti :8766 | xargs kill -9
|
|
229
|
+
# or set EMACS_CHANNEL_PORT in .env and mirror in Emacs config (nanoclaw-port)
|
|
230
|
+
```
|
|
231
|
+
|
|
232
|
+
### Adapter not starting
|
|
233
|
+
|
|
234
|
+
If `grep "Emacs channel listening" logs/nanoclaw.log` returns nothing, check that `EMACS_ENABLED=true` is in `.env` and that the adapter import is present:
|
|
235
|
+
|
|
236
|
+
```bash
|
|
237
|
+
grep -q '^EMACS_ENABLED=true' .env && echo "enabled" || echo "not enabled"
|
|
238
|
+
grep -q "import './emacs.js'" src/channels/index.ts && echo "imported" || echo "not imported"
|
|
239
|
+
```
|
|
240
|
+
|
|
241
|
+
### No response from agent
|
|
242
|
+
|
|
243
|
+
1. NanoClaw running: `launchctl list | grep nanoclaw` (macOS) / `systemctl --user status nanoclaw` (Linux)
|
|
244
|
+
2. Messaging group wired: `sqlite3 data/v2.db "SELECT mg.platform_id, ag.folder FROM messaging_groups mg JOIN messaging_group_agents mga ON mg.id = mga.messaging_group_id JOIN agent_groups ag ON ag.id = mga.agent_group_id WHERE mg.channel_type = 'emacs'"`
|
|
245
|
+
3. Logs show inbound: `grep 'channel_type=emacs\|Emacs' logs/nanoclaw.log | tail -20`
|
|
246
|
+
|
|
247
|
+
If no messaging group row exists, run the `register` command above.
|
|
248
|
+
|
|
249
|
+
### Auth token mismatch (401 Unauthorized)
|
|
250
|
+
|
|
251
|
+
```elisp
|
|
252
|
+
M-x describe-variable RET nanoclaw-auth-token RET
|
|
253
|
+
```
|
|
254
|
+
|
|
255
|
+
Must match `EMACS_AUTH_TOKEN` in `.env`. If you didn't set one server-side, clear it in Emacs too:
|
|
256
|
+
|
|
257
|
+
```elisp
|
|
258
|
+
(setq nanoclaw-auth-token nil)
|
|
259
|
+
```
|
|
260
|
+
|
|
261
|
+
### nanoclaw.el not loading
|
|
262
|
+
|
|
263
|
+
```bash
|
|
264
|
+
ls ~/src/nanoclaw/emacs/nanoclaw.el
|
|
265
|
+
```
|
|
266
|
+
|
|
267
|
+
If NanoClaw is cloned elsewhere, update the `load`/`load-file` path in your Emacs config.
|
|
268
|
+
|
|
269
|
+
## Agent Formatting
|
|
270
|
+
|
|
271
|
+
The Emacs bridge converts markdown → org-mode automatically. Agents should output standard markdown, **not** org-mode syntax:
|
|
272
|
+
|
|
273
|
+
| Markdown | Org-mode |
|
|
274
|
+
|----------|----------|
|
|
275
|
+
| `**bold**` | `*bold*` |
|
|
276
|
+
| `*italic*` | `/italic/` |
|
|
277
|
+
| `~~text~~` | `+text+` |
|
|
278
|
+
| `` `code` `` | `~code~` |
|
|
279
|
+
| ` ```lang ` | `#+begin_src lang` |
|
|
280
|
+
|
|
281
|
+
If an agent outputs org-mode directly, markers get double-converted and render incorrectly.
|
|
282
|
+
|
|
283
|
+
## Removal
|
|
284
|
+
|
|
285
|
+
```bash
|
|
286
|
+
rm src/channels/emacs.ts src/channels/emacs.test.ts emacs/nanoclaw.el
|
|
287
|
+
# Remove the `import './emacs.js';` line from src/channels/index.ts
|
|
288
|
+
# Remove EMACS_* lines from .env
|
|
289
|
+
pnpm run build
|
|
290
|
+
launchctl kickstart -k gui/$(id -u)/com.nanoclaw # macOS
|
|
291
|
+
# systemctl --user restart nanoclaw # Linux
|
|
292
|
+
|
|
293
|
+
# Remove the NanoClaw block from your Emacs config
|
|
294
|
+
# Optionally clean up the messaging group:
|
|
295
|
+
sqlite3 data/v2.db "DELETE FROM messaging_group_agents WHERE messaging_group_id IN (SELECT id FROM messaging_groups WHERE channel_type='emacs'); DELETE FROM messaging_groups WHERE channel_type='emacs';"
|
|
296
|
+
```
|
|
@@ -0,0 +1,210 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: add-gcal-tool
|
|
3
|
+
description: Add Google Calendar as an MCP tool (list calendars, list/search/create events, free/busy queries) using OneCLI-managed OAuth. Multi-calendar and multi-account supported. Mirrors /add-gmail-tool's stub pattern — no raw credentials ever reach the container; OneCLI injects real tokens at request time.
|
|
4
|
+
---
|
|
5
|
+
|
|
6
|
+
# Add Google Calendar Tool (OneCLI-native)
|
|
7
|
+
|
|
8
|
+
This skill wires [`@cocal/google-calendar-mcp`](https://github.com/cocal-com/google-calendar-mcp) into selected agent groups. The MCP server reads stub credentials containing the `onecli-managed` placeholder; the OneCLI gateway intercepts outbound calls to `calendar.googleapis.com` / `oauth2.googleapis.com` and swaps the bearer for the real OAuth token from its vault.
|
|
9
|
+
|
|
10
|
+
**Why this package (and not gongrzhe's):** `@gongrzhe/server-calendar-autoauth-mcp` only supports the `primary` calendar and exposes 5 tools (no `list_calendars`). `@cocal/google-calendar-mcp` explicitly supports multi-calendar and multi-account, and is actively maintained.
|
|
11
|
+
|
|
12
|
+
Tools exposed (surfaced as `mcp__calendar__<name>`, exact set depends on version — run `tools/list` against the MCP server to enumerate): `list-calendars`, `list-events`, `search-events`, `create-event`, `update-event`, `delete-event`, `get-event`, `list-colors`, `get-freebusy`, `get-current-time`, plus multi-account management tools.
|
|
13
|
+
|
|
14
|
+
**Why this pattern:** v2's invariant is that containers never receive raw API keys (CHANGELOG 2.0.0). Same stub pattern `/add-gmail-tool` uses. This skill is deliberately a sibling, not a combined "Google Workspace" skill — installs independently and removes cleanly.
|
|
15
|
+
|
|
16
|
+
## Phase 1: Pre-flight
|
|
17
|
+
|
|
18
|
+
### Verify OneCLI has Google Calendar connected
|
|
19
|
+
|
|
20
|
+
```bash
|
|
21
|
+
onecli apps get --provider google-calendar
|
|
22
|
+
```
|
|
23
|
+
|
|
24
|
+
Expected: `"connection": { "status": "connected" }` with scopes including `calendar.readonly` and `calendar.events`.
|
|
25
|
+
|
|
26
|
+
If not connected, tell the user:
|
|
27
|
+
|
|
28
|
+
> Open the OneCLI web UI at http://127.0.0.1:10254, go to Apps → Google Calendar, and click Connect. Sign in with the Google account the agent should act as. `calendar.readonly` + `calendar.events` are the minimum useful scopes.
|
|
29
|
+
|
|
30
|
+
### Verify stub credentials exist
|
|
31
|
+
|
|
32
|
+
The stub lives at `~/.calendar-mcp/` by convention (shared with `/add-gmail-tool`'s sibling). cocal doesn't default to this path (it uses `~/.config/google-calendar-mcp/tokens.json`) — we override via env vars below so it reads our stubs instead.
|
|
33
|
+
|
|
34
|
+
```bash
|
|
35
|
+
ls -la ~/.calendar-mcp/gcp-oauth.keys.json ~/.calendar-mcp/credentials.json 2>&1
|
|
36
|
+
```
|
|
37
|
+
|
|
38
|
+
If both exist with `onecli-managed`:
|
|
39
|
+
|
|
40
|
+
```bash
|
|
41
|
+
grep -l onecli-managed ~/.calendar-mcp/gcp-oauth.keys.json ~/.calendar-mcp/credentials.json
|
|
42
|
+
```
|
|
43
|
+
|
|
44
|
+
...skip to Phase 2. If either file has real credentials (no `onecli-managed`), **STOP** — back up and delete before proceeding.
|
|
45
|
+
|
|
46
|
+
If absent, write them:
|
|
47
|
+
|
|
48
|
+
```bash
|
|
49
|
+
mkdir -p ~/.calendar-mcp
|
|
50
|
+
cat > ~/.calendar-mcp/gcp-oauth.keys.json <<'EOF'
|
|
51
|
+
{
|
|
52
|
+
"installed": {
|
|
53
|
+
"client_id": "onecli-managed.apps.googleusercontent.com",
|
|
54
|
+
"client_secret": "onecli-managed",
|
|
55
|
+
"redirect_uris": ["http://localhost:3000/oauth2callback"]
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
EOF
|
|
59
|
+
cat > ~/.calendar-mcp/credentials.json <<'EOF'
|
|
60
|
+
{
|
|
61
|
+
"access_token": "onecli-managed",
|
|
62
|
+
"refresh_token": "onecli-managed",
|
|
63
|
+
"token_type": "Bearer",
|
|
64
|
+
"expiry_date": 99999999999999,
|
|
65
|
+
"scope": "https://www.googleapis.com/auth/calendar.readonly https://www.googleapis.com/auth/calendar.events"
|
|
66
|
+
}
|
|
67
|
+
EOF
|
|
68
|
+
chmod 600 ~/.calendar-mcp/*.json
|
|
69
|
+
```
|
|
70
|
+
|
|
71
|
+
### Verify mount allowlist covers the path
|
|
72
|
+
|
|
73
|
+
```bash
|
|
74
|
+
cat ~/.config/nanoclaw/mount-allowlist.json
|
|
75
|
+
```
|
|
76
|
+
|
|
77
|
+
`~/.calendar-mcp` must sit under an `allowedRoots` entry.
|
|
78
|
+
|
|
79
|
+
### Check agent secret-mode
|
|
80
|
+
|
|
81
|
+
For each target agent group, confirm OneCLI will inject the Google Calendar token:
|
|
82
|
+
|
|
83
|
+
```bash
|
|
84
|
+
onecli agents list
|
|
85
|
+
```
|
|
86
|
+
|
|
87
|
+
`secretMode: all` is sufficient. If `selective`, explicitly assign the Calendar secret.
|
|
88
|
+
|
|
89
|
+
## Phase 2: Apply Code Changes
|
|
90
|
+
|
|
91
|
+
### Check if already applied
|
|
92
|
+
|
|
93
|
+
```bash
|
|
94
|
+
grep -q 'CALENDAR_MCP_VERSION' container/Dockerfile && \
|
|
95
|
+
grep -q "mcp__calendar__\*" container/agent-runner/src/providers/claude.ts && \
|
|
96
|
+
echo "ALREADY APPLIED — skip to Phase 3"
|
|
97
|
+
```
|
|
98
|
+
|
|
99
|
+
### Add MCP server to Dockerfile
|
|
100
|
+
|
|
101
|
+
Edit `container/Dockerfile`. Find the pinned-version ARG block and add:
|
|
102
|
+
|
|
103
|
+
```dockerfile
|
|
104
|
+
ARG CALENDAR_MCP_VERSION=2.6.1
|
|
105
|
+
```
|
|
106
|
+
|
|
107
|
+
If `/add-gmail-tool` has already been applied, the pnpm global-install block already exists with its `zod-to-json-schema@3.22.5` pin. Just append the calendar package — **the calendar-mcp uses `zod@4.x` and does NOT need that pin**, but it's harmless to share the block:
|
|
108
|
+
|
|
109
|
+
```dockerfile
|
|
110
|
+
RUN --mount=type=cache,target=/root/.cache/pnpm \
|
|
111
|
+
pnpm install -g \
|
|
112
|
+
"@gongrzhe/server-gmail-autoauth-mcp@${GMAIL_MCP_VERSION}" \
|
|
113
|
+
"@cocal/google-calendar-mcp@${CALENDAR_MCP_VERSION}" \
|
|
114
|
+
"zod-to-json-schema@3.22.5"
|
|
115
|
+
```
|
|
116
|
+
|
|
117
|
+
If `/add-gmail-tool` hasn't been applied, install Calendar standalone:
|
|
118
|
+
|
|
119
|
+
```dockerfile
|
|
120
|
+
RUN --mount=type=cache,target=/root/.cache/pnpm \
|
|
121
|
+
pnpm install -g "@cocal/google-calendar-mcp@${CALENDAR_MCP_VERSION}"
|
|
122
|
+
```
|
|
123
|
+
|
|
124
|
+
### Add tools to allowlist
|
|
125
|
+
|
|
126
|
+
Edit `container/agent-runner/src/providers/claude.ts`. Add `'mcp__calendar__*'` to `TOOL_ALLOWLIST` after `'mcp__nanoclaw__*'` (or after `'mcp__gmail__*'` if present).
|
|
127
|
+
|
|
128
|
+
### Rebuild the container image
|
|
129
|
+
|
|
130
|
+
```bash
|
|
131
|
+
./container/build.sh
|
|
132
|
+
```
|
|
133
|
+
|
|
134
|
+
## Phase 3: Wire Per-Agent-Group
|
|
135
|
+
|
|
136
|
+
For each agent group, merge into `groups/<folder>/container.json`:
|
|
137
|
+
|
|
138
|
+
```jsonc
|
|
139
|
+
{
|
|
140
|
+
"mcpServers": {
|
|
141
|
+
"calendar": {
|
|
142
|
+
"command": "google-calendar-mcp",
|
|
143
|
+
"args": [],
|
|
144
|
+
"env": {
|
|
145
|
+
"GOOGLE_OAUTH_CREDENTIALS": "/workspace/extra/.calendar-mcp/gcp-oauth.keys.json",
|
|
146
|
+
"GOOGLE_CALENDAR_MCP_TOKEN_PATH": "/workspace/extra/.calendar-mcp/credentials.json"
|
|
147
|
+
}
|
|
148
|
+
}
|
|
149
|
+
},
|
|
150
|
+
"additionalMounts": [
|
|
151
|
+
{
|
|
152
|
+
"hostPath": "/home/<user>/.calendar-mcp",
|
|
153
|
+
"containerPath": ".calendar-mcp",
|
|
154
|
+
"readonly": false
|
|
155
|
+
}
|
|
156
|
+
]
|
|
157
|
+
}
|
|
158
|
+
```
|
|
159
|
+
|
|
160
|
+
Substitute `<user>` with `echo $HOME`. `containerPath` is relative (mount-security rejects absolute paths — additional mounts land at `/workspace/extra/<relative>`).
|
|
161
|
+
|
|
162
|
+
**Same-group-as-gmail tip:** if this group already has the gmail MCP + `.gmail-mcp` mount, **merge, don't replace** — both entries coexist in `mcpServers` and `additionalMounts`.
|
|
163
|
+
|
|
164
|
+
## Phase 4: Build and Restart
|
|
165
|
+
|
|
166
|
+
```bash
|
|
167
|
+
pnpm run build
|
|
168
|
+
systemctl --user restart nanoclaw # Linux
|
|
169
|
+
# launchctl kickstart -k gui/$(id -u)/com.nanoclaw # macOS
|
|
170
|
+
```
|
|
171
|
+
|
|
172
|
+
Kill any existing agent containers so they respawn with the new mcpServers config:
|
|
173
|
+
|
|
174
|
+
```bash
|
|
175
|
+
docker ps -q --filter 'name=nanoclaw-v2-' | xargs -r docker kill
|
|
176
|
+
```
|
|
177
|
+
|
|
178
|
+
## Phase 5: Verify
|
|
179
|
+
|
|
180
|
+
### Test from a wired agent
|
|
181
|
+
|
|
182
|
+
> Send: **"list my calendars"** or **"what's on my work calendar next Monday?"**.
|
|
183
|
+
>
|
|
184
|
+
> First call takes 2–3s while the MCP server starts and OneCLI does the token exchange.
|
|
185
|
+
|
|
186
|
+
### Check logs if the tool isn't working
|
|
187
|
+
|
|
188
|
+
```bash
|
|
189
|
+
tail -100 logs/nanoclaw.log | grep -iE 'calendar|mcp'
|
|
190
|
+
```
|
|
191
|
+
|
|
192
|
+
Common signals:
|
|
193
|
+
- `command not found: google-calendar-mcp` → image not rebuilt.
|
|
194
|
+
- `ENOENT ...credentials.json` → mount missing. Check the mount allowlist.
|
|
195
|
+
- `401 Unauthorized` from `*.googleapis.com` → OneCLI isn't injecting; verify agent's secret mode and that Google Calendar is connected.
|
|
196
|
+
- Agent says "I don't have calendar tools" → `mcp__calendar__*` missing from `TOOL_ALLOWLIST`, or image cache stale (`./container/build.sh` again).
|
|
197
|
+
|
|
198
|
+
## Removal
|
|
199
|
+
|
|
200
|
+
1. Delete `"calendar"` from `mcpServers` and the `.calendar-mcp` mount from `additionalMounts` in each group's `container.json`.
|
|
201
|
+
2. Remove `'mcp__calendar__*'` from `TOOL_ALLOWLIST`.
|
|
202
|
+
3. Remove `CALENDAR_MCP_VERSION` ARG and the calendar package from the Dockerfile install block.
|
|
203
|
+
4. `pnpm run build && ./container/build.sh && systemctl --user restart nanoclaw`.
|
|
204
|
+
5. Optional: `rm -rf ~/.calendar-mcp/` and `onecli apps disconnect --provider google-calendar`.
|
|
205
|
+
|
|
206
|
+
## Credits & references
|
|
207
|
+
|
|
208
|
+
- **MCP server:** [`@cocal/google-calendar-mcp`](https://github.com/cocal-com/google-calendar-mcp) — MIT-licensed, actively maintained, multi-account and multi-calendar.
|
|
209
|
+
- **Why not gongrzhe:** earlier versions of this skill used `@gongrzhe/server-calendar-autoauth-mcp@1.0.2` which only supports the primary calendar with 5 event-level tools. The cocal server supersedes it.
|
|
210
|
+
- **Skill pattern:** direct sibling of [`/add-gmail-tool`](../add-gmail-tool/SKILL.md); same OneCLI stub mechanism.
|
|
@@ -0,0 +1,92 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: add-gchat
|
|
3
|
+
description: Add Google Chat channel integration via Chat SDK.
|
|
4
|
+
---
|
|
5
|
+
|
|
6
|
+
# Add Google Chat Channel
|
|
7
|
+
|
|
8
|
+
Adds Google Chat support via the Chat SDK bridge.
|
|
9
|
+
|
|
10
|
+
## Install
|
|
11
|
+
|
|
12
|
+
NanoClaw doesn't ship channels in trunk. This skill copies the Google Chat adapter in from the `channels` branch.
|
|
13
|
+
|
|
14
|
+
### Pre-flight (idempotent)
|
|
15
|
+
|
|
16
|
+
Skip to **Credentials** if all of these are already in place:
|
|
17
|
+
|
|
18
|
+
- `src/channels/gchat.ts` exists
|
|
19
|
+
- `src/channels/index.ts` contains `import './gchat.js';`
|
|
20
|
+
- `@chat-adapter/gchat` is listed in `package.json` dependencies
|
|
21
|
+
|
|
22
|
+
Otherwise continue. Every step below is safe to re-run.
|
|
23
|
+
|
|
24
|
+
### 1. Fetch the channels branch
|
|
25
|
+
|
|
26
|
+
```bash
|
|
27
|
+
git fetch origin channels
|
|
28
|
+
```
|
|
29
|
+
|
|
30
|
+
### 2. Copy the adapter
|
|
31
|
+
|
|
32
|
+
```bash
|
|
33
|
+
git show origin/channels:src/channels/gchat.ts > src/channels/gchat.ts
|
|
34
|
+
```
|
|
35
|
+
|
|
36
|
+
### 3. Append the self-registration import
|
|
37
|
+
|
|
38
|
+
Append to `src/channels/index.ts` (skip if the line is already present):
|
|
39
|
+
|
|
40
|
+
```typescript
|
|
41
|
+
import './gchat.js';
|
|
42
|
+
```
|
|
43
|
+
|
|
44
|
+
### 4. Install the adapter package (pinned)
|
|
45
|
+
|
|
46
|
+
```bash
|
|
47
|
+
pnpm install @chat-adapter/gchat@4.26.0
|
|
48
|
+
```
|
|
49
|
+
|
|
50
|
+
### 5. Build
|
|
51
|
+
|
|
52
|
+
```bash
|
|
53
|
+
pnpm run build
|
|
54
|
+
```
|
|
55
|
+
|
|
56
|
+
## Credentials
|
|
57
|
+
|
|
58
|
+
> 1. Go to [Google Cloud Console](https://console.cloud.google.com)
|
|
59
|
+
> 2. Create or select a project
|
|
60
|
+
> 3. Enable the **Google Chat API**
|
|
61
|
+
> 4. Go to **Google Chat API** > **Configuration**:
|
|
62
|
+
> - App name and description
|
|
63
|
+
> - Connection settings: select **HTTP endpoint URL** and set to `https://your-domain/webhook/gchat`
|
|
64
|
+
> 5. Create a **Service Account**:
|
|
65
|
+
> - Go to **IAM & Admin** > **Service Accounts** > **Create Service Account**
|
|
66
|
+
> - Grant the Chat Bot role
|
|
67
|
+
> - Create a JSON key and download it
|
|
68
|
+
|
|
69
|
+
### Configure environment
|
|
70
|
+
|
|
71
|
+
Add the service account JSON as a single-line string to `.env`:
|
|
72
|
+
|
|
73
|
+
```bash
|
|
74
|
+
GCHAT_CREDENTIALS={"type":"service_account","project_id":"...","private_key":"...","client_email":"..."}
|
|
75
|
+
```
|
|
76
|
+
|
|
77
|
+
Sync to container: `mkdir -p data/env && cp .env data/env/env`
|
|
78
|
+
|
|
79
|
+
## Next Steps
|
|
80
|
+
|
|
81
|
+
If you're in the middle of `/setup`, return to the setup flow now.
|
|
82
|
+
|
|
83
|
+
Otherwise, run `/manage-channels` to wire this channel to an agent group.
|
|
84
|
+
|
|
85
|
+
## Channel Info
|
|
86
|
+
|
|
87
|
+
- **type**: `gchat`
|
|
88
|
+
- **terminology**: Google Chat has "spaces." A space can be a group conversation or a direct message with the bot.
|
|
89
|
+
- **how-to-find-id**: Open the space in Google Chat, look at the URL — the space ID is the segment after `/space/` (e.g. `spaces/AAAA...`). Or use the Google Chat API to list spaces.
|
|
90
|
+
- **supports-threads**: yes
|
|
91
|
+
- **typical-use**: Interactive chat — team spaces or direct messages
|
|
92
|
+
- **default-isolation**: Same agent group for spaces where you're the primary user. Separate agent group for spaces with different teams or sensitive contexts.
|