@openparachute/agent 0.1.1 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (598) hide show
  1. package/.parachute/module.json +124 -8
  2. package/LICENSE +2 -16
  3. package/README.md +118 -166
  4. package/package.json +32 -43
  5. package/scripts/spawn-agent.ts +371 -0
  6. package/src/_parked/interactive-spawn.test.ts +324 -0
  7. package/src/_parked/interactive-spawn.ts +701 -0
  8. package/src/agent-defs.test.ts +1504 -0
  9. package/src/agent-defs.ts +1702 -0
  10. package/src/agent-mcp-config.test.ts +115 -0
  11. package/src/agent-mcp-config.ts +115 -0
  12. package/src/agents.test.ts +360 -0
  13. package/src/agents.ts +379 -0
  14. package/src/auth.test.ts +46 -0
  15. package/src/auth.ts +140 -0
  16. package/src/backends/attached-queue.test.ts +376 -0
  17. package/src/backends/attached-queue.ts +372 -0
  18. package/src/backends/programmatic.test.ts +1715 -0
  19. package/src/backends/programmatic.ts +927 -0
  20. package/src/backends/registry.test.ts +1494 -0
  21. package/src/backends/registry.ts +1202 -0
  22. package/src/backends/stream-json.test.ts +570 -0
  23. package/src/backends/stream-json.ts +392 -0
  24. package/src/backends/types.ts +223 -0
  25. package/src/bridge.ts +417 -0
  26. package/src/channel-backend-wiring.test.ts +237 -0
  27. package/src/credentials.test.ts +274 -0
  28. package/src/credentials.ts +380 -0
  29. package/src/cron.test.ts +342 -0
  30. package/src/cron.ts +380 -0
  31. package/src/daemon-agent-def-api.test.ts +166 -0
  32. package/src/daemon-agent-defs-api.test.ts +953 -0
  33. package/src/daemon-agent-env-api.test.ts +338 -0
  34. package/src/daemon-attached-queue-store.test.ts +65 -0
  35. package/src/daemon-config-api.test.ts +962 -0
  36. package/src/daemon-jobs-api.test.ts +271 -0
  37. package/src/daemon-vault-chat.test.ts +250 -0
  38. package/src/daemon.test.ts +746 -0
  39. package/src/daemon.ts +3314 -0
  40. package/src/def-vaults.test.ts +136 -0
  41. package/src/def-vaults.ts +165 -0
  42. package/src/delivery-state.test.ts +110 -0
  43. package/src/delivery-state.ts +154 -0
  44. package/src/effective-env.test.ts +114 -0
  45. package/src/effective-env.ts +184 -0
  46. package/src/env-compat.ts +39 -0
  47. package/src/grants.test.ts +638 -0
  48. package/src/grants.ts +675 -0
  49. package/src/hub-jwt.test.ts +161 -0
  50. package/src/hub-jwt.ts +182 -0
  51. package/src/jobs.test.ts +245 -0
  52. package/src/jobs.ts +266 -0
  53. package/src/mcp-http.test.ts +265 -0
  54. package/src/mcp-http.ts +771 -0
  55. package/src/mint-token.test.ts +152 -0
  56. package/src/mint-token.ts +139 -0
  57. package/src/module-manifest.test.ts +158 -0
  58. package/src/oauth-discovery.ts +134 -0
  59. package/src/programmatic-wiring.test.ts +838 -0
  60. package/src/registry.test.ts +227 -0
  61. package/src/registry.ts +228 -0
  62. package/src/resolve-port.test.ts +64 -0
  63. package/src/routing.test.ts +184 -0
  64. package/src/routing.ts +76 -0
  65. package/src/runner.test.ts +506 -0
  66. package/src/runner.ts +255 -0
  67. package/src/sandbox/config.test.ts +150 -0
  68. package/src/sandbox/config.ts +102 -0
  69. package/src/sandbox/egress.test.ts +113 -0
  70. package/src/sandbox/egress.ts +123 -0
  71. package/src/sandbox/index.ts +180 -0
  72. package/src/sandbox/live-seatbelt.test.ts +277 -0
  73. package/src/sandbox/mounts.test.ts +154 -0
  74. package/src/sandbox/mounts.ts +133 -0
  75. package/src/sandbox/sandbox.test.ts +168 -0
  76. package/src/sandbox/types.ts +382 -0
  77. package/src/services-manifest.test.ts +106 -0
  78. package/src/services-manifest.ts +95 -0
  79. package/src/spa-serve.test.ts +116 -0
  80. package/src/spa-serve.ts +116 -0
  81. package/src/spawn-agent-cli.test.ts +172 -0
  82. package/src/spawn-agent.test.ts +1218 -0
  83. package/src/spawn-agent.ts +569 -0
  84. package/src/spawn-deps.test.ts +54 -0
  85. package/src/spawn-deps.ts +166 -0
  86. package/src/telegram/api.ts +153 -0
  87. package/src/terminal-assets.test.ts +50 -0
  88. package/src/terminal-assets.ts +79 -0
  89. package/src/terminal-ui.ts +305 -0
  90. package/src/terminal.test.ts +530 -0
  91. package/src/terminal.ts +458 -0
  92. package/src/transport.ts +270 -0
  93. package/src/transports/http-ui.test.ts +455 -0
  94. package/src/transports/http-ui.ts +201 -0
  95. package/src/transports/telegram.test.ts +174 -0
  96. package/src/transports/telegram.ts +426 -0
  97. package/src/transports/vault.test.ts +2011 -0
  98. package/src/transports/vault.ts +1790 -0
  99. package/src/ui-kit.test.ts +178 -0
  100. package/src/ui-kit.ts +402 -0
  101. package/tsconfig.json +8 -14
  102. package/web/ui/tsconfig.json +2 -1
  103. package/.claude/scheduled_tasks.lock +0 -1
  104. package/.claude/settings.json +0 -5
  105. package/.claude/skills/add-atomic-chat-tool/SKILL.md +0 -243
  106. package/.claude/skills/add-atomic-chat-tool/atomic-chat-mcp-stdio.ts +0 -229
  107. package/.claude/skills/add-codex/SKILL.md +0 -161
  108. package/.claude/skills/add-dashboard/SKILL.md +0 -138
  109. package/.claude/skills/add-dashboard/resources/dashboard-pusher.ts +0 -495
  110. package/.claude/skills/add-emacs/SKILL.md +0 -296
  111. package/.claude/skills/add-gcal-tool/SKILL.md +0 -210
  112. package/.claude/skills/add-gchat/REMOVE.md +0 -6
  113. package/.claude/skills/add-gchat/SKILL.md +0 -92
  114. package/.claude/skills/add-gchat/VERIFY.md +0 -3
  115. package/.claude/skills/add-github/REMOVE.md +0 -6
  116. package/.claude/skills/add-github/SKILL.md +0 -148
  117. package/.claude/skills/add-github/VERIFY.md +0 -3
  118. package/.claude/skills/add-gmail-tool/SKILL.md +0 -229
  119. package/.claude/skills/add-imessage/REMOVE.md +0 -6
  120. package/.claude/skills/add-imessage/SKILL.md +0 -113
  121. package/.claude/skills/add-imessage/VERIFY.md +0 -3
  122. package/.claude/skills/add-karpathy-llm-wiki/SKILL.md +0 -110
  123. package/.claude/skills/add-karpathy-llm-wiki/llm-wiki.md +0 -75
  124. package/.claude/skills/add-linear/REMOVE.md +0 -6
  125. package/.claude/skills/add-linear/SKILL.md +0 -168
  126. package/.claude/skills/add-linear/VERIFY.md +0 -3
  127. package/.claude/skills/add-macos-statusbar/SKILL.md +0 -133
  128. package/.claude/skills/add-macos-statusbar/add/src/statusbar.swift +0 -147
  129. package/.claude/skills/add-matrix/REMOVE.md +0 -6
  130. package/.claude/skills/add-matrix/SKILL.md +0 -148
  131. package/.claude/skills/add-matrix/VERIFY.md +0 -3
  132. package/.claude/skills/add-ollama-provider/SKILL.md +0 -179
  133. package/.claude/skills/add-ollama-tool/SKILL.md +0 -193
  134. package/.claude/skills/add-opencode/SKILL.md +0 -229
  135. package/.claude/skills/add-parallel/SKILL.md +0 -290
  136. package/.claude/skills/add-resend/REMOVE.md +0 -6
  137. package/.claude/skills/add-resend/SKILL.md +0 -93
  138. package/.claude/skills/add-resend/VERIFY.md +0 -3
  139. package/.claude/skills/add-signal/REMOVE.md +0 -13
  140. package/.claude/skills/add-signal/SKILL.md +0 -318
  141. package/.claude/skills/add-signal/VERIFY.md +0 -5
  142. package/.claude/skills/add-slack/REMOVE.md +0 -6
  143. package/.claude/skills/add-slack/SKILL.md +0 -112
  144. package/.claude/skills/add-slack/VERIFY.md +0 -3
  145. package/.claude/skills/add-teams/REMOVE.md +0 -6
  146. package/.claude/skills/add-teams/SKILL.md +0 -207
  147. package/.claude/skills/add-teams/VERIFY.md +0 -3
  148. package/.claude/skills/add-vercel/SKILL.md +0 -147
  149. package/.claude/skills/add-vercel/container-skills/vercel-cli/SKILL.md +0 -103
  150. package/.claude/skills/add-webex/REMOVE.md +0 -6
  151. package/.claude/skills/add-webex/SKILL.md +0 -88
  152. package/.claude/skills/add-webex/VERIFY.md +0 -3
  153. package/.claude/skills/add-wechat/REMOVE.md +0 -49
  154. package/.claude/skills/add-wechat/SKILL.md +0 -170
  155. package/.claude/skills/add-wechat/scripts/wire-dm.ts +0 -172
  156. package/.claude/skills/add-whatsapp/SKILL.md +0 -264
  157. package/.claude/skills/add-whatsapp-cloud/REMOVE.md +0 -6
  158. package/.claude/skills/add-whatsapp-cloud/SKILL.md +0 -95
  159. package/.claude/skills/add-whatsapp-cloud/VERIFY.md +0 -3
  160. package/.claude/skills/claw/SKILL.md +0 -131
  161. package/.claude/skills/claw/scripts/claw +0 -374
  162. package/.claude/skills/convert-to-apple-container/SKILL.md +0 -212
  163. package/.claude/skills/customize/SKILL.md +0 -110
  164. package/.claude/skills/debug/SKILL.md +0 -349
  165. package/.claude/skills/get-qodo-rules/SKILL.md +0 -122
  166. package/.claude/skills/get-qodo-rules/references/output-format.md +0 -41
  167. package/.claude/skills/get-qodo-rules/references/pagination.md +0 -33
  168. package/.claude/skills/get-qodo-rules/references/repository-scope.md +0 -26
  169. package/.claude/skills/init-first-agent/SKILL.md +0 -120
  170. package/.claude/skills/init-onecli/SKILL.md +0 -270
  171. package/.claude/skills/manage-channels/SKILL.md +0 -87
  172. package/.claude/skills/manage-mounts/SKILL.md +0 -47
  173. package/.claude/skills/migrate-from-openclaw/MIGRATE_CRONS.md +0 -100
  174. package/.claude/skills/migrate-from-openclaw/SKILL.md +0 -447
  175. package/.claude/skills/migrate-from-openclaw/scripts/discover-openclaw.ts +0 -734
  176. package/.claude/skills/migrate-from-openclaw/scripts/extract-channel-credentials.ts +0 -476
  177. package/.claude/skills/migrate-nanoclaw/SKILL.md +0 -484
  178. package/.claude/skills/migrate-nanoclaw/diagnostics.md +0 -51
  179. package/.claude/skills/qodo-pr-resolver/SKILL.md +0 -326
  180. package/.claude/skills/qodo-pr-resolver/resources/providers.md +0 -329
  181. package/.claude/skills/update-nanoclaw/SKILL.md +0 -243
  182. package/.claude/skills/update-nanoclaw/diagnostics.md +0 -48
  183. package/.claude/skills/update-skills/SKILL.md +0 -130
  184. package/.claude/skills/use-native-credential-proxy/SKILL.md +0 -167
  185. package/.claude/skills/x-integration/SKILL.md +0 -417
  186. package/.claude/skills/x-integration/agent.ts +0 -243
  187. package/.claude/skills/x-integration/host.ts +0 -155
  188. package/.claude/skills/x-integration/lib/browser.ts +0 -148
  189. package/.claude/skills/x-integration/lib/config.ts +0 -62
  190. package/.claude/skills/x-integration/scripts/like.ts +0 -56
  191. package/.claude/skills/x-integration/scripts/post.ts +0 -66
  192. package/.claude/skills/x-integration/scripts/quote.ts +0 -80
  193. package/.claude/skills/x-integration/scripts/reply.ts +0 -74
  194. package/.claude/skills/x-integration/scripts/retweet.ts +0 -62
  195. package/.claude/skills/x-integration/scripts/setup.ts +0 -87
  196. package/.github/CODEOWNERS +0 -10
  197. package/.github/PULL_REQUEST_TEMPLATE.md +0 -18
  198. package/.github/workflows/bump-version.yml +0 -35
  199. package/.github/workflows/ci.yml +0 -39
  200. package/.github/workflows/label-pr.yml +0 -40
  201. package/.github/workflows/update-tokens.yml +0 -43
  202. package/.husky/pre-commit +0 -1
  203. package/.mcp.json +0 -3
  204. package/.nvmrc +0 -1
  205. package/.prettierrc +0 -4
  206. package/CHANGELOG.md +0 -221
  207. package/CLAUDE.md +0 -307
  208. package/CODE_OF_CONDUCT.md +0 -128
  209. package/CONTRIBUTING.md +0 -159
  210. package/CONTRIBUTORS.md +0 -26
  211. package/LICENSE-NANOCLAW-MIT +0 -21
  212. package/README_ja.md +0 -194
  213. package/README_zh.md +0 -194
  214. package/assets/nanoclaw-favicon.png +0 -0
  215. package/assets/nanoclaw-icon.png +0 -0
  216. package/assets/nanoclaw-logo-dark.png +0 -0
  217. package/assets/nanoclaw-logo.png +0 -0
  218. package/assets/nanoclaw-profile.jpeg +0 -0
  219. package/assets/nanoclaw-sales.png +0 -0
  220. package/assets/social-preview.jpg +0 -0
  221. package/config-examples/mount-allowlist.json +0 -25
  222. package/container/.dockerignore +0 -2
  223. package/container/CLAUDE.md +0 -21
  224. package/container/Dockerfile +0 -121
  225. package/container/agent-runner/bun.lock +0 -243
  226. package/container/agent-runner/package.json +0 -22
  227. package/container/agent-runner/scripts/sdk-signal-probe.ts +0 -169
  228. package/container/agent-runner/src/config.ts +0 -55
  229. package/container/agent-runner/src/db/connection.ts +0 -267
  230. package/container/agent-runner/src/db/index.ts +0 -20
  231. package/container/agent-runner/src/db/messages-in.ts +0 -138
  232. package/container/agent-runner/src/db/messages-out.ts +0 -143
  233. package/container/agent-runner/src/db/session-routing.ts +0 -30
  234. package/container/agent-runner/src/db/session-state.test.ts +0 -100
  235. package/container/agent-runner/src/db/session-state.ts +0 -79
  236. package/container/agent-runner/src/destinations.ts +0 -135
  237. package/container/agent-runner/src/formatter.test.ts +0 -167
  238. package/container/agent-runner/src/formatter.ts +0 -260
  239. package/container/agent-runner/src/index.ts +0 -110
  240. package/container/agent-runner/src/integration.test.ts +0 -121
  241. package/container/agent-runner/src/mcp-tools/agents.instructions.md +0 -26
  242. package/container/agent-runner/src/mcp-tools/agents.ts +0 -66
  243. package/container/agent-runner/src/mcp-tools/core.instructions.md +0 -27
  244. package/container/agent-runner/src/mcp-tools/core.ts +0 -262
  245. package/container/agent-runner/src/mcp-tools/index.ts +0 -22
  246. package/container/agent-runner/src/mcp-tools/interactive.instructions.md +0 -22
  247. package/container/agent-runner/src/mcp-tools/interactive.ts +0 -169
  248. package/container/agent-runner/src/mcp-tools/scheduling.instructions.md +0 -40
  249. package/container/agent-runner/src/mcp-tools/scheduling.ts +0 -299
  250. package/container/agent-runner/src/mcp-tools/self-mod.instructions.md +0 -25
  251. package/container/agent-runner/src/mcp-tools/self-mod.ts +0 -120
  252. package/container/agent-runner/src/mcp-tools/server.ts +0 -54
  253. package/container/agent-runner/src/mcp-tools/types.ts +0 -6
  254. package/container/agent-runner/src/poll-loop.test.ts +0 -248
  255. package/container/agent-runner/src/poll-loop.ts +0 -437
  256. package/container/agent-runner/src/providers/claude.ts +0 -379
  257. package/container/agent-runner/src/providers/factory.test.ts +0 -19
  258. package/container/agent-runner/src/providers/factory.ts +0 -13
  259. package/container/agent-runner/src/providers/index.ts +0 -6
  260. package/container/agent-runner/src/providers/mock.ts +0 -77
  261. package/container/agent-runner/src/providers/provider-registry.ts +0 -33
  262. package/container/agent-runner/src/providers/types.ts +0 -82
  263. package/container/agent-runner/src/scheduling/task-script.ts +0 -121
  264. package/container/agent-runner/src/timezone.test.ts +0 -93
  265. package/container/agent-runner/src/timezone.ts +0 -107
  266. package/container/agent-runner/tsconfig.json +0 -14
  267. package/container/build.sh +0 -48
  268. package/container/entrypoint.sh +0 -16
  269. package/container/skills/agent-browser/SKILL.md +0 -159
  270. package/container/skills/frontend-engineer/SKILL.md +0 -157
  271. package/container/skills/self-customize/SKILL.md +0 -87
  272. package/container/skills/slack-formatting/SKILL.md +0 -94
  273. package/container/skills/vercel-cli/SKILL.md +0 -111
  274. package/container/skills/welcome/SKILL.md +0 -85
  275. package/docs/APPLE-CONTAINER-NETWORKING.md +0 -90
  276. package/docs/BRANCH-FORK-MAINTENANCE.md +0 -81
  277. package/docs/README.md +0 -25
  278. package/docs/SDK_DEEP_DIVE.md +0 -643
  279. package/docs/SECURITY.md +0 -162
  280. package/docs/agent-runner-details.md +0 -749
  281. package/docs/api-details.md +0 -365
  282. package/docs/architecture-diagram.html +0 -422
  283. package/docs/architecture-diagram.md +0 -215
  284. package/docs/architecture.md +0 -751
  285. package/docs/audit/2026-04-30-channel-endpoint-audit.md +0 -36
  286. package/docs/build-and-runtime.md +0 -80
  287. package/docs/cross-mount-stress/README.md +0 -112
  288. package/docs/cross-mount-stress/container-writer-retry.mjs +0 -55
  289. package/docs/cross-mount-stress/container-writer-slow.mjs +0 -42
  290. package/docs/cross-mount-stress/container-writer.mjs +0 -47
  291. package/docs/cross-mount-stress/host-writer-retry.mjs +0 -55
  292. package/docs/cross-mount-stress/host-writer-slow.mjs +0 -43
  293. package/docs/cross-mount-stress/host-writer.mjs +0 -47
  294. package/docs/db-central.md +0 -316
  295. package/docs/db-session.md +0 -183
  296. package/docs/db.md +0 -119
  297. package/docs/design/2026-04-29-vault-management-ui.md +0 -231
  298. package/docs/design/2026-04-30-channel-wiring-rework.md +0 -234
  299. package/docs/design/2026-05-01-channel-wiring-approvals-deep-dive.md +0 -272
  300. package/docs/design/2026-05-02-channel-policy-and-approval-routing.md +0 -250
  301. package/docs/docker-sandboxes.md +0 -359
  302. package/docs/isolation-model.md +0 -88
  303. package/docs/ollama.md +0 -79
  304. package/docs/parachute-integration.md +0 -109
  305. package/docs/post-night-rebirth-reflections.md +0 -151
  306. package/eslint.config.js +0 -32
  307. package/pnpm-workspace.yaml +0 -8
  308. package/repo-tokens/README.md +0 -113
  309. package/repo-tokens/action.yml +0 -186
  310. package/repo-tokens/badge.svg +0 -23
  311. package/repo-tokens/examples/green.svg +0 -14
  312. package/repo-tokens/examples/red.svg +0 -14
  313. package/repo-tokens/examples/yellow-green.svg +0 -14
  314. package/repo-tokens/examples/yellow.svg +0 -14
  315. package/scripts/chat.ts +0 -101
  316. package/scripts/cleanup-sessions.sh +0 -150
  317. package/scripts/init-cli-agent.ts +0 -171
  318. package/scripts/init-first-agent.ts +0 -377
  319. package/scripts/parachute.ts +0 -158
  320. package/scripts/run-migrations.ts +0 -105
  321. package/scripts/sanity-live-poll.ts +0 -95
  322. package/scripts/seed-discord.ts +0 -79
  323. package/scripts/test-v2-agent.ts +0 -106
  324. package/scripts/test-v2-channel-e2e.ts +0 -265
  325. package/scripts/test-v2-host.ts +0 -184
  326. package/src/channels/adapter.ts +0 -214
  327. package/src/channels/ask-question.ts +0 -46
  328. package/src/channels/channel-registry.test.ts +0 -421
  329. package/src/channels/channel-registry.ts +0 -313
  330. package/src/channels/chat-sdk-bridge.test.ts +0 -84
  331. package/src/channels/chat-sdk-bridge.ts +0 -652
  332. package/src/channels/cli.ts +0 -276
  333. package/src/channels/discord.ts +0 -90
  334. package/src/channels/index.ts +0 -17
  335. package/src/channels/telegram-markdown-sanitize.test.ts +0 -78
  336. package/src/channels/telegram-markdown-sanitize.ts +0 -55
  337. package/src/channels/telegram-pairing.test.ts +0 -254
  338. package/src/channels/telegram-pairing.ts +0 -339
  339. package/src/channels/telegram.ts +0 -279
  340. package/src/channels/trust-hint.test.ts +0 -48
  341. package/src/channels/trust-hint.ts +0 -75
  342. package/src/claude-md-compose.migrate.test.ts +0 -64
  343. package/src/claude-md-compose.ts +0 -205
  344. package/src/command-gate.ts +0 -63
  345. package/src/config.test.ts +0 -93
  346. package/src/config.ts +0 -108
  347. package/src/container-config.ts +0 -167
  348. package/src/container-runner.test.ts +0 -32
  349. package/src/container-runner.ts +0 -576
  350. package/src/container-runtime.test.ts +0 -169
  351. package/src/container-runtime.ts +0 -92
  352. package/src/db/_bun-sqlite-shim.ts +0 -88
  353. package/src/db/agent-activity.test.ts +0 -155
  354. package/src/db/agent-activity.ts +0 -121
  355. package/src/db/agent-groups.ts +0 -77
  356. package/src/db/connection.migrate.test.ts +0 -143
  357. package/src/db/connection.ts +0 -224
  358. package/src/db/db-v2.test.ts +0 -440
  359. package/src/db/dropped-messages.ts +0 -44
  360. package/src/db/index.ts +0 -40
  361. package/src/db/messaging-groups.ts +0 -252
  362. package/src/db/migrations/001-initial.ts +0 -112
  363. package/src/db/migrations/002-chat-sdk-state.ts +0 -36
  364. package/src/db/migrations/008-dropped-messages.ts +0 -27
  365. package/src/db/migrations/009-drop-pending-credentials.ts +0 -13
  366. package/src/db/migrations/010-engage-modes.ts +0 -103
  367. package/src/db/migrations/011-pending-sender-approvals.ts +0 -40
  368. package/src/db/migrations/012-channel-registration.ts +0 -48
  369. package/src/db/migrations/013-approval-render-metadata.ts +0 -27
  370. package/src/db/migrations/014-secrets.ts +0 -44
  371. package/src/db/migrations/015-secrets-drop-host-pattern.ts +0 -18
  372. package/src/db/migrations/016-secret-assignments.ts +0 -30
  373. package/src/db/migrations/017-agent-activity.ts +0 -40
  374. package/src/db/migrations/018-oauth-app-configs.ts +0 -34
  375. package/src/db/migrations/019-oauth-app-connections.ts +0 -48
  376. package/src/db/migrations/020-agent-app-connections.ts +0 -28
  377. package/src/db/migrations/021-pending-oauth-states.ts +0 -35
  378. package/src/db/migrations/022-app-connections-provider.ts +0 -25
  379. package/src/db/migrations/023-agent-group-secret-mode.test.ts +0 -124
  380. package/src/db/migrations/023-agent-group-secret-mode.ts +0 -65
  381. package/src/db/migrations/024-collapse-approvals.test.ts +0 -249
  382. package/src/db/migrations/024-collapse-approvals.ts +0 -182
  383. package/src/db/migrations/025-secret-mode-check.test.ts +0 -155
  384. package/src/db/migrations/025-secret-mode-check.ts +0 -49
  385. package/src/db/migrations/026-user-dms-bot-id.test.ts +0 -116
  386. package/src/db/migrations/026-user-dms-bot-id.ts +0 -54
  387. package/src/db/migrations/027-provider-credentials.ts +0 -41
  388. package/src/db/migrations/_test-helpers.ts +0 -41
  389. package/src/db/migrations/index.ts +0 -127
  390. package/src/db/migrations/module-agent-to-agent-destinations.ts +0 -84
  391. package/src/db/migrations/module-approvals-pending-approvals.ts +0 -42
  392. package/src/db/migrations/module-approvals-title-options.ts +0 -40
  393. package/src/db/schema.ts +0 -258
  394. package/src/db/session-db.test.ts +0 -93
  395. package/src/db/session-db.ts +0 -325
  396. package/src/db/sessions.ts +0 -241
  397. package/src/delivery.test.ts +0 -148
  398. package/src/delivery.ts +0 -445
  399. package/src/env.ts +0 -74
  400. package/src/group-folder.test.ts +0 -35
  401. package/src/group-folder.ts +0 -44
  402. package/src/group-init.ts +0 -92
  403. package/src/host-core.test.ts +0 -456
  404. package/src/host-sweep.test.ts +0 -146
  405. package/src/host-sweep.ts +0 -287
  406. package/src/index.ts +0 -227
  407. package/src/install-slug.ts +0 -33
  408. package/src/log.test.ts +0 -81
  409. package/src/log.ts +0 -117
  410. package/src/mcp/http.ts +0 -72
  411. package/src/mcp/server.ts +0 -92
  412. package/src/mcp/stdio.ts +0 -51
  413. package/src/mcp/tools/activity.ts +0 -88
  414. package/src/mcp/tools/agent-groups.ts +0 -183
  415. package/src/mcp/tools/approvals.ts +0 -122
  416. package/src/mcp/tools/channels.ts +0 -199
  417. package/src/mcp/tools/index.ts +0 -27
  418. package/src/mcp/tools/oauth.ts +0 -48
  419. package/src/mcp/tools/secrets.ts +0 -169
  420. package/src/mcp/tools/sessions.ts +0 -135
  421. package/src/mcp/types.ts +0 -51
  422. package/src/modules/agent-to-agent/agent-route.test.ts +0 -46
  423. package/src/modules/agent-to-agent/agent-route.ts +0 -223
  424. package/src/modules/agent-to-agent/create-agent.ts +0 -127
  425. package/src/modules/agent-to-agent/db/agent-destinations.ts +0 -135
  426. package/src/modules/agent-to-agent/index.ts +0 -22
  427. package/src/modules/agent-to-agent/write-destinations.ts +0 -59
  428. package/src/modules/approvals/agent.md +0 -45
  429. package/src/modules/approvals/index.ts +0 -21
  430. package/src/modules/approvals/picks.test.ts +0 -291
  431. package/src/modules/approvals/primitive.ts +0 -279
  432. package/src/modules/approvals/project.md +0 -27
  433. package/src/modules/approvals/response-handler.ts +0 -87
  434. package/src/modules/index.ts +0 -24
  435. package/src/modules/interactive/agent.md +0 -21
  436. package/src/modules/interactive/index.ts +0 -69
  437. package/src/modules/interactive/project.md +0 -12
  438. package/src/modules/mount-security/index.ts +0 -448
  439. package/src/modules/mount-security/migrate.test.ts +0 -91
  440. package/src/modules/permissions/access.ts +0 -28
  441. package/src/modules/permissions/channel-approval.test.ts +0 -389
  442. package/src/modules/permissions/channel-approval.ts +0 -188
  443. package/src/modules/permissions/db/agent-group-members.ts +0 -44
  444. package/src/modules/permissions/db/pending-channel-approvals.test.ts +0 -86
  445. package/src/modules/permissions/db/pending-channel-approvals.ts +0 -66
  446. package/src/modules/permissions/db/pending-sender-approvals.ts +0 -60
  447. package/src/modules/permissions/db/user-dms.ts +0 -58
  448. package/src/modules/permissions/db/user-roles.ts +0 -85
  449. package/src/modules/permissions/db/users.ts +0 -38
  450. package/src/modules/permissions/index.ts +0 -421
  451. package/src/modules/permissions/permissions.test.ts +0 -358
  452. package/src/modules/permissions/sender-approval.test.ts +0 -470
  453. package/src/modules/permissions/sender-approval.ts +0 -165
  454. package/src/modules/permissions/user-dm.ts +0 -200
  455. package/src/modules/provider-credentials/db.ts +0 -121
  456. package/src/modules/provider-credentials/index.ts +0 -12
  457. package/src/modules/provider-credentials/spawn.test.ts +0 -206
  458. package/src/modules/provider-credentials/spawn.ts +0 -114
  459. package/src/modules/scheduling/actions.ts +0 -113
  460. package/src/modules/scheduling/db.test.ts +0 -282
  461. package/src/modules/scheduling/db.ts +0 -148
  462. package/src/modules/scheduling/index.ts +0 -34
  463. package/src/modules/scheduling/recurrence.test.ts +0 -98
  464. package/src/modules/scheduling/recurrence.ts +0 -54
  465. package/src/modules/self-mod/agent.md +0 -30
  466. package/src/modules/self-mod/apply.ts +0 -85
  467. package/src/modules/self-mod/index.ts +0 -30
  468. package/src/modules/self-mod/project.md +0 -39
  469. package/src/modules/self-mod/request.ts +0 -91
  470. package/src/modules/typing/index.ts +0 -165
  471. package/src/oauth/agent-app-connections.ts +0 -103
  472. package/src/oauth/app-configs.test.ts +0 -64
  473. package/src/oauth/app-configs.ts +0 -114
  474. package/src/oauth/app-connections.test.ts +0 -109
  475. package/src/oauth/app-connections.ts +0 -178
  476. package/src/oauth/crypto.ts +0 -56
  477. package/src/oauth/flow.ts +0 -104
  478. package/src/oauth/providers/google.test.ts +0 -38
  479. package/src/oauth/providers/google.ts +0 -46
  480. package/src/oauth/providers/index.ts +0 -48
  481. package/src/oauth/state-store.test.ts +0 -54
  482. package/src/oauth/state-store.ts +0 -93
  483. package/src/parachute/README.md +0 -27
  484. package/src/parachute/create-agent.test.ts +0 -83
  485. package/src/parachute/create-agent.ts +0 -122
  486. package/src/parachute/group-status.test.ts +0 -165
  487. package/src/parachute/group-status.ts +0 -136
  488. package/src/parachute/types.ts +0 -41
  489. package/src/parachute/vault-mcp.test.ts +0 -251
  490. package/src/parachute/vault-mcp.ts +0 -232
  491. package/src/platform-id.test.ts +0 -104
  492. package/src/platform-id.ts +0 -109
  493. package/src/providers/index.ts +0 -6
  494. package/src/providers/provider-container-registry.ts +0 -58
  495. package/src/response-registry.ts +0 -45
  496. package/src/router.ts +0 -530
  497. package/src/secrets/crypto.test.ts +0 -45
  498. package/src/secrets/crypto.ts +0 -55
  499. package/src/secrets/index.ts +0 -355
  500. package/src/secrets/master-key.ts +0 -70
  501. package/src/secrets/secrets.test.ts +0 -354
  502. package/src/session-manager.migrate.test.ts +0 -59
  503. package/src/session-manager.ts +0 -433
  504. package/src/startup-bootstrap.test.ts +0 -226
  505. package/src/startup-bootstrap.ts +0 -207
  506. package/src/state-sqlite.ts +0 -182
  507. package/src/timezone.test.ts +0 -64
  508. package/src/timezone.ts +0 -37
  509. package/src/types.ts +0 -230
  510. package/src/web/auth.test.ts +0 -335
  511. package/src/web/auth.ts +0 -214
  512. package/src/web/discord-validate.test.ts +0 -77
  513. package/src/web/discord-validate.ts +0 -88
  514. package/src/web/hub-discovery.test.ts +0 -98
  515. package/src/web/hub-discovery.ts +0 -69
  516. package/src/web/routes/activity.ts +0 -106
  517. package/src/web/routes/agent-provider.test.ts +0 -282
  518. package/src/web/routes/agent-provider.ts +0 -309
  519. package/src/web/routes/approvals.ts +0 -185
  520. package/src/web/routes/apps.ts +0 -434
  521. package/src/web/routes/channels-mg-detail.test.ts +0 -324
  522. package/src/web/routes/channels-mga-detail.test.ts +0 -425
  523. package/src/web/routes/channels.ts +0 -489
  524. package/src/web/routes/oauth-providers.ts +0 -42
  525. package/src/web/routes/secrets.test.ts +0 -175
  526. package/src/web/routes/secrets.ts +0 -282
  527. package/src/web/routes/sessions.ts +0 -123
  528. package/src/web/routes/settings.test.ts +0 -106
  529. package/src/web/routes/settings.ts +0 -247
  530. package/src/web/routes/setup-status.ts +0 -205
  531. package/src/web/routes/vaults.test.ts +0 -389
  532. package/src/web/routes/vaults.ts +0 -225
  533. package/src/web/server-version.test.ts +0 -16
  534. package/src/web/server.ts +0 -1003
  535. package/src/web/services-manifest.test.ts +0 -120
  536. package/src/web/services-manifest.ts +0 -61
  537. package/src/web/static-serve.test.ts +0 -255
  538. package/src/web/static-serve.ts +0 -104
  539. package/src/web/telegram-validate.test.ts +0 -116
  540. package/src/web/telegram-validate.ts +0 -107
  541. package/src/web/vault-proxy.test.ts +0 -214
  542. package/src/web/vault-proxy.ts +0 -120
  543. package/src/web/wire-channel.ts +0 -181
  544. package/src/webhook-server.ts +0 -134
  545. package/vitest.config.ts +0 -18
  546. package/web/README.md +0 -63
  547. package/web/ui/index.html +0 -13
  548. package/web/ui/package.json +0 -35
  549. package/web/ui/pnpm-lock.yaml +0 -2164
  550. package/web/ui/scripts/verify-base.mjs +0 -31
  551. package/web/ui/src/App.tsx +0 -88
  552. package/web/ui/src/components/ActivityFeed.tsx +0 -444
  553. package/web/ui/src/components/AgentGroupPicker.tsx +0 -263
  554. package/web/ui/src/components/AgentProviderCards.tsx +0 -220
  555. package/web/ui/src/components/CredentialForm.tsx +0 -214
  556. package/web/ui/src/components/ScopeGrants.tsx +0 -74
  557. package/web/ui/src/components/StatusDot.tsx +0 -43
  558. package/web/ui/src/components/VaultPicker.tsx +0 -127
  559. package/web/ui/src/components/setup/AdapterInstallStep.tsx +0 -178
  560. package/web/ui/src/components/setup/AgentGroupStep.tsx +0 -43
  561. package/web/ui/src/components/setup/ChannelPickStep.tsx +0 -74
  562. package/web/ui/src/components/setup/DoneStep.tsx +0 -49
  563. package/web/ui/src/components/setup/PrereqStep.tsx +0 -129
  564. package/web/ui/src/components/setup/TestConnectionStep.tsx +0 -108
  565. package/web/ui/src/components/setup/TestMessageStep.tsx +0 -104
  566. package/web/ui/src/components/setup/WireChannelStep.tsx +0 -166
  567. package/web/ui/src/components/setup/types.ts +0 -105
  568. package/web/ui/src/lib/api.test.ts +0 -410
  569. package/web/ui/src/lib/api.ts +0 -1210
  570. package/web/ui/src/lib/auth.test.ts +0 -139
  571. package/web/ui/src/lib/auth.ts +0 -348
  572. package/web/ui/src/lib/channel-adapters.ts +0 -136
  573. package/web/ui/src/main.tsx +0 -19
  574. package/web/ui/src/routes/ApprovalsList.tsx +0 -294
  575. package/web/ui/src/routes/Apps.tsx +0 -613
  576. package/web/ui/src/routes/ChannelWireDetail.test.tsx +0 -233
  577. package/web/ui/src/routes/ChannelWireDetail.tsx +0 -403
  578. package/web/ui/src/routes/ChannelsList.tsx +0 -158
  579. package/web/ui/src/routes/GroupDetail.tsx +0 -755
  580. package/web/ui/src/routes/GroupList.tsx +0 -187
  581. package/web/ui/src/routes/MessagingGroupDetail.test.tsx +0 -233
  582. package/web/ui/src/routes/MessagingGroupDetail.tsx +0 -306
  583. package/web/ui/src/routes/NewGroupWizard.tsx +0 -390
  584. package/web/ui/src/routes/OAuthCallback.tsx +0 -56
  585. package/web/ui/src/routes/SecretsList.tsx +0 -921
  586. package/web/ui/src/routes/SessionsList.tsx +0 -220
  587. package/web/ui/src/routes/SettingsAgentProvider.tsx +0 -109
  588. package/web/ui/src/routes/SettingsApprovals.tsx +0 -234
  589. package/web/ui/src/routes/SetupWizard.tsx +0 -219
  590. package/web/ui/src/routes/VaultDetail.test.tsx +0 -361
  591. package/web/ui/src/routes/VaultDetail.tsx +0 -960
  592. package/web/ui/src/routes/VaultsList.tsx +0 -295
  593. package/web/ui/src/routes/WireChannelPage.tsx +0 -413
  594. package/web/ui/src/styles.css +0 -608
  595. package/web/ui/src/test/setup.ts +0 -23
  596. package/web/ui/src/vite-env.d.ts +0 -10
  597. package/web/ui/vite.config.ts +0 -34
  598. package/web/ui/vitest.config.ts +0 -25
@@ -1,374 +0,0 @@
1
- #!/usr/bin/env python3
2
- """
3
- claw — NanoClaw CLI
4
- Run a NanoClaw agent container from the command line.
5
-
6
- Usage:
7
- claw "What is 2+2?"
8
- claw -g <channel_name> "Review this code"
9
- claw -g "<channel name with spaces>" "What's the latest issue?"
10
- claw -j "<chatJid>" "Hello"
11
- claw -g <channel_name> -s <session-id> "Continue"
12
- claw --list-groups
13
- echo "prompt text" | claw --pipe -g <channel_name>
14
- cat prompt.txt | claw --pipe
15
- """
16
-
17
- from __future__ import annotations
18
-
19
- import argparse
20
- import json
21
- import os
22
- import re
23
- import sqlite3
24
- import subprocess
25
- import sys
26
- import threading
27
- from pathlib import Path
28
-
29
- # ── Globals ─────────────────────────────────────────────────────────────────
30
-
31
- VERBOSE = False
32
-
33
- def dbg(*args):
34
- if VERBOSE:
35
- print("»", *args, file=sys.stderr)
36
-
37
- # ── Config ──────────────────────────────────────────────────────────────────
38
-
39
- def _find_nanoclaw_dir() -> Path:
40
- """Locate the NanoClaw installation directory.
41
-
42
- Resolution order:
43
- 1. NANOCLAW_DIR env var
44
- 2. The directory containing this script (if it looks like a NanoClaw install)
45
- 3. ~/src/nanoclaw (legacy default)
46
- """
47
- if env := os.environ.get("NANOCLAW_DIR"):
48
- return Path(env).expanduser()
49
- # If this script lives inside the NanoClaw tree (e.g. scripts/claw), walk up
50
- here = Path(__file__).resolve()
51
- for parent in [here.parent, here.parent.parent]:
52
- if (parent / "store" / "messages.db").exists() or (parent / ".env").exists():
53
- return parent
54
- return Path.home() / "src" / "nanoclaw"
55
-
56
- NANOCLAW_DIR = _find_nanoclaw_dir()
57
- DB_PATH = NANOCLAW_DIR / "store" / "messages.db"
58
- ENV_FILE = NANOCLAW_DIR / ".env"
59
- IMAGE = "nanoclaw-agent:latest"
60
-
61
- SECRET_KEYS = [
62
- "CLAUDE_CODE_OAUTH_TOKEN",
63
- "ANTHROPIC_API_KEY",
64
- "ANTHROPIC_BASE_URL",
65
- "ANTHROPIC_AUTH_TOKEN",
66
- "OLLAMA_HOST",
67
- ]
68
-
69
- # ── Helpers ──────────────────────────────────────────────────────────────────
70
-
71
- def detect_runtime(preference: str | None) -> str:
72
- if preference:
73
- dbg(f"runtime: forced to {preference}")
74
- return preference
75
- for rt in ("container", "docker"):
76
- result = subprocess.run(["which", rt], capture_output=True)
77
- if result.returncode == 0:
78
- dbg(f"runtime: auto-detected {rt} at {result.stdout.decode().strip()}")
79
- return rt
80
- sys.exit("error: neither 'container' nor 'docker' found. Install one or pass --runtime.")
81
-
82
-
83
- def read_secrets(env_file: Path) -> dict:
84
- secrets = {}
85
- if not env_file.exists():
86
- return secrets
87
- for line in env_file.read_text().splitlines():
88
- line = line.strip()
89
- if not line or line.startswith("#"):
90
- continue
91
- if "=" in line:
92
- key, _, val = line.partition("=")
93
- key = key.strip()
94
- if key in SECRET_KEYS:
95
- secrets[key] = val.strip()
96
- return secrets
97
-
98
-
99
- def get_groups(db: Path) -> list[dict]:
100
- conn = sqlite3.connect(db)
101
- rows = conn.execute(
102
- "SELECT jid, name, folder, is_main FROM registered_groups ORDER BY name"
103
- ).fetchall()
104
- conn.close()
105
- return [{"jid": r[0], "name": r[1], "folder": r[2], "is_main": bool(r[3])} for r in rows]
106
-
107
-
108
- def find_group(groups: list[dict], query: str) -> dict | None:
109
- q = query.lower()
110
- # Exact name match
111
- for g in groups:
112
- if g["name"].lower() == q or g["folder"].lower() == q:
113
- return g
114
- # Partial match
115
- matches = [g for g in groups if q in g["name"].lower() or q in g["folder"].lower()]
116
- if len(matches) == 1:
117
- return matches[0]
118
- if len(matches) > 1:
119
- names = ", ".join(f'"{g["name"]}"' for g in matches)
120
- sys.exit(f"error: ambiguous group '{query}'. Matches: {names}")
121
- return None
122
-
123
-
124
- def build_mounts(folder: str, is_main: bool) -> list[tuple[str, str, bool]]:
125
- """Return list of (host_path, container_path, readonly) tuples."""
126
- groups_dir = NANOCLAW_DIR / "groups"
127
- data_dir = NANOCLAW_DIR / "data"
128
- sessions_dir = data_dir / "sessions" / folder
129
- ipc_dir = data_dir / "ipc" / folder
130
-
131
- # Ensure required dirs exist
132
- group_dir = groups_dir / folder
133
- group_dir.mkdir(parents=True, exist_ok=True)
134
- (sessions_dir / ".claude").mkdir(parents=True, exist_ok=True)
135
- for sub in ("messages", "tasks", "input"):
136
- (ipc_dir / sub).mkdir(parents=True, exist_ok=True)
137
-
138
- agent_runner_src = sessions_dir / "agent-runner-src"
139
- project_agent_runner = NANOCLAW_DIR / "container" / "agent-runner" / "src"
140
- if not agent_runner_src.exists() and project_agent_runner.exists():
141
- import shutil
142
- shutil.copytree(project_agent_runner, agent_runner_src)
143
-
144
- mounts: list[tuple[str, str, bool]] = []
145
- if is_main:
146
- mounts.append((str(NANOCLAW_DIR), "/workspace/project", True))
147
- mounts.append((str(group_dir), "/workspace/group", False))
148
- mounts.append((str(sessions_dir / ".claude"), "/home/node/.claude", False))
149
- mounts.append((str(ipc_dir), "/workspace/ipc", False))
150
- if agent_runner_src.exists():
151
- mounts.append((str(agent_runner_src), "/app/src", False))
152
- return mounts
153
-
154
-
155
- def run_container(runtime: str, image: str, payload: dict,
156
- folder: str | None = None, is_main: bool = False,
157
- timeout: int = 300) -> None:
158
- cmd = [runtime, "run", "-i", "--rm"]
159
- if folder:
160
- for host, container, readonly in build_mounts(folder, is_main):
161
- if readonly:
162
- cmd += ["--mount", f"type=bind,source={host},target={container},readonly"]
163
- else:
164
- cmd += ["-v", f"{host}:{container}"]
165
- cmd.append(image)
166
- dbg(f"cmd: {' '.join(cmd)}")
167
-
168
- # Show payload sans secrets
169
- if VERBOSE:
170
- safe = {k: v for k, v in payload.items() if k != "secrets"}
171
- safe["secrets"] = {k: "***" for k in payload.get("secrets", {})}
172
- dbg(f"payload: {json.dumps(safe, indent=2)}")
173
-
174
- proc = subprocess.Popen(
175
- cmd,
176
- stdin=subprocess.PIPE,
177
- stdout=subprocess.PIPE,
178
- stderr=subprocess.PIPE,
179
- )
180
- dbg(f"container pid: {proc.pid}")
181
-
182
- # Write JSON payload and close stdin
183
- proc.stdin.write(json.dumps(payload).encode())
184
- proc.stdin.close()
185
- dbg("stdin closed, waiting for response...")
186
-
187
- stdout_lines: list[str] = []
188
- stderr_lines: list[str] = []
189
- done = threading.Event()
190
-
191
- def stream_stderr():
192
- for raw in proc.stderr:
193
- line = raw.decode(errors="replace").rstrip()
194
- if line.startswith("npm notice"):
195
- continue
196
- stderr_lines.append(line)
197
- print(line, file=sys.stderr)
198
-
199
- def stream_stdout():
200
- for raw in proc.stdout:
201
- line = raw.decode(errors="replace").rstrip()
202
- stdout_lines.append(line)
203
- dbg(f"stdout: {line}")
204
- # Kill the container as soon as we see the closing sentinel —
205
- # the Node.js event loop often keeps the process alive indefinitely.
206
- if line.strip() == "---NANOCLAW_OUTPUT_END---":
207
- dbg("output sentinel found, terminating container")
208
- done.set()
209
- try:
210
- proc.terminate()
211
- try:
212
- proc.wait(timeout=5)
213
- except subprocess.TimeoutExpired:
214
- dbg("graceful stop timed out, force killing container")
215
- proc.kill()
216
- except ProcessLookupError:
217
- pass
218
- return
219
-
220
- t_err = threading.Thread(target=stream_stderr, daemon=True)
221
- t_out = threading.Thread(target=stream_stdout, daemon=True)
222
- t_err.start()
223
- t_out.start()
224
-
225
- # Wait for sentinel or timeout
226
- if not done.wait(timeout=timeout):
227
- # Also check if process exited naturally
228
- t_out.join(timeout=2)
229
- if not done.is_set():
230
- proc.kill()
231
- sys.exit(f"error: container timed out after {timeout}s (no output sentinel received)")
232
-
233
- t_err.join(timeout=5)
234
- t_out.join(timeout=5)
235
- proc.wait()
236
- dbg(f"container done (rc={proc.returncode}), {len(stdout_lines)} stdout lines")
237
- stdout = "\n".join(stdout_lines)
238
-
239
- # Parse output block
240
- match = re.search(
241
- r"---NANOCLAW_OUTPUT_START---\n(.*?)\n---NANOCLAW_OUTPUT_END---",
242
- stdout,
243
- re.DOTALL,
244
- )
245
- success = False
246
-
247
- if match:
248
- try:
249
- data = json.loads(match.group(1))
250
- status = data.get("status", "unknown")
251
- if status == "success":
252
- print(data.get("result", ""))
253
- session_id = data.get("newSessionId") or data.get("sessionId")
254
- if session_id:
255
- print(f"\n[session: {session_id}]", file=sys.stderr)
256
- success = True
257
- else:
258
- print(f"[{status}] {data.get('result', '')}", file=sys.stderr)
259
- sys.exit(1)
260
- except json.JSONDecodeError:
261
- print(match.group(1))
262
- else:
263
- # No structured output — print raw stdout
264
- print(stdout)
265
-
266
- if success:
267
- return
268
-
269
- if proc.returncode not in (0, None):
270
- sys.exit(proc.returncode)
271
-
272
-
273
- # ── Main ─────────────────────────────────────────────────────────────────────
274
-
275
- def main():
276
- parser = argparse.ArgumentParser(
277
- prog="claw",
278
- description="Run a NanoClaw agent from the command line.",
279
- )
280
- parser.add_argument("prompt", nargs="?", help="Prompt to send")
281
- parser.add_argument("-g", "--group", help="Group name or folder (fuzzy match)")
282
- parser.add_argument("-j", "--jid", help="Chat JID (exact)")
283
- parser.add_argument("-s", "--session", help="Session ID to resume")
284
- parser.add_argument("-p", "--pipe", action="store_true",
285
- help="Read prompt from stdin (can be combined with a prompt arg as prefix)")
286
- parser.add_argument("--runtime", choices=["docker", "container"],
287
- help="Container runtime (default: auto-detect)")
288
- parser.add_argument("--image", default=IMAGE, help=f"Container image (default: {IMAGE})")
289
- parser.add_argument("--list-groups", action="store_true", help="List registered groups and exit")
290
- parser.add_argument("--raw", action="store_true", help="Print raw JSON output")
291
- parser.add_argument("--timeout", type=int, default=300, metavar="SECS",
292
- help="Max seconds to wait for a response (default: 300)")
293
- parser.add_argument("-v", "--verbose", action="store_true",
294
- help="Show debug info: cmd, payload (secrets redacted), stdout lines, exit code")
295
- args = parser.parse_args()
296
-
297
- global VERBOSE
298
- VERBOSE = args.verbose
299
-
300
- groups = get_groups(DB_PATH) if DB_PATH.exists() else []
301
-
302
- if args.list_groups:
303
- print(f"{'NAME':<35} {'FOLDER':<30} {'JID'}")
304
- print("-" * 100)
305
- for g in groups:
306
- main_tag = " [main]" if g["is_main"] else ""
307
- print(f"{g['name']:<35} {g['folder']:<30} {g['jid']}{main_tag}")
308
- return
309
-
310
- # Resolve prompt: --pipe reads stdin, optionally prepended with positional arg
311
- if args.pipe or (not sys.stdin.isatty() and not args.prompt):
312
- stdin_text = sys.stdin.read().strip()
313
- if args.prompt:
314
- prompt = f"{args.prompt}\n\n{stdin_text}"
315
- else:
316
- prompt = stdin_text
317
- else:
318
- prompt = args.prompt
319
-
320
- if not prompt:
321
- parser.print_help()
322
- sys.exit(1)
323
-
324
- # Resolve group → jid
325
- jid = args.jid
326
- group_name = None
327
- group_folder = None
328
- is_main = False
329
-
330
- if args.group:
331
- g = find_group(groups, args.group)
332
- if g is None:
333
- sys.exit(f"error: group '{args.group}' not found. Run --list-groups to see options.")
334
- jid = g["jid"]
335
- group_name = g["name"]
336
- group_folder = g["folder"]
337
- is_main = g["is_main"]
338
- elif not jid:
339
- # Default: main group
340
- mains = [g for g in groups if g["is_main"]]
341
- if mains:
342
- jid = mains[0]["jid"]
343
- group_name = mains[0]["name"]
344
- group_folder = mains[0]["folder"]
345
- is_main = True
346
- else:
347
- sys.exit("error: no group specified and no main group found. Use -g or -j.")
348
-
349
- runtime = detect_runtime(args.runtime)
350
- secrets = read_secrets(ENV_FILE)
351
-
352
- if not secrets:
353
- print("warning: no secrets found in .env — agent may not be authenticated", file=sys.stderr)
354
-
355
- payload: dict = {
356
- "prompt": prompt,
357
- "chatJid": jid,
358
- "isMain": is_main,
359
- "secrets": secrets,
360
- }
361
- if group_name:
362
- payload["groupFolder"] = group_name
363
- if args.session:
364
- payload["sessionId"] = args.session
365
- payload["resumeAt"] = "latest"
366
-
367
- print(f"[{group_name or jid}] running via {runtime}...", file=sys.stderr)
368
- run_container(runtime, args.image, payload,
369
- folder=group_folder, is_main=is_main,
370
- timeout=args.timeout)
371
-
372
-
373
- if __name__ == "__main__":
374
- main()
@@ -1,212 +0,0 @@
1
- ---
2
- name: convert-to-apple-container
3
- description: Switch from Docker to Apple Container for macOS-native container isolation. Use when the user wants Apple Container instead of Docker, or is setting up on macOS and prefers the native runtime. Triggers on "apple container", "convert to apple container", "switch to apple container", or "use apple container".
4
- ---
5
-
6
- # Convert to Apple Container
7
-
8
- This skill switches NanoClaw's container runtime from Docker to Apple Container (macOS-only). It uses the skills engine for deterministic code changes, then walks through verification.
9
-
10
- **What this changes:**
11
- - Container runtime binary: `docker` → `container`
12
- - Mount syntax: `-v path:path:ro` → `--mount type=bind,source=...,target=...,readonly`
13
- - Startup check: `docker info` → `container system status` (with auto-start)
14
- - Orphan detection: `docker ps --filter` → `container ls --format json`
15
- - Build script default: `docker` → `container`
16
- - Dockerfile entrypoint: `.env` shadowing via `mount --bind` inside the container (Apple Container only supports directory mounts, not file mounts like Docker's `/dev/null` overlay)
17
- - Container runner: main-group containers start as root for `mount --bind`, then drop privileges via `setpriv`
18
-
19
- **What stays the same:**
20
- - Mount security/allowlist validation
21
- - All exported interfaces and IPC protocol
22
- - Non-main container behavior (still uses `--user` flag)
23
- - All other functionality
24
-
25
- ## Prerequisites
26
-
27
- Verify Apple Container is installed:
28
-
29
- ```bash
30
- container --version && echo "Apple Container ready" || echo "Install Apple Container first"
31
- ```
32
-
33
- If not installed:
34
- - Download from https://github.com/apple/container/releases
35
- - Install the `.pkg` file
36
- - Verify: `container --version`
37
-
38
- Apple Container requires macOS. It does not work on Linux.
39
-
40
- ## Phase 1: Pre-flight
41
-
42
- ### Check if already applied
43
-
44
- ```bash
45
- grep "CONTAINER_RUNTIME_BIN" src/container-runtime.ts
46
- ```
47
-
48
- If it already shows `'container'`, the runtime is already Apple Container. Skip to Phase 4.
49
-
50
- ## Phase 2: Apply Code Changes
51
-
52
- ### Ensure upstream remote
53
-
54
- ```bash
55
- git remote -v
56
- ```
57
-
58
- If `upstream` is missing, add it:
59
-
60
- ```bash
61
- git remote add upstream https://github.com/qwibitai/nanoclaw.git
62
- ```
63
-
64
- ### Merge the skill branch
65
-
66
- ```bash
67
- git fetch upstream skill/apple-container
68
- git merge upstream/skill/apple-container
69
- ```
70
-
71
- This merges in:
72
- - `src/container-runtime.ts` — Apple Container implementation (replaces Docker)
73
- - `src/container-runtime.test.ts` — Apple Container-specific tests
74
- - `src/container-runner.ts` — .env shadow mount fix and privilege dropping
75
- - `container/Dockerfile` — entrypoint that shadows .env via `mount --bind`
76
- - `container/build.sh` — default runtime set to `container`
77
-
78
- If the merge reports conflicts, resolve them by reading the conflicted files and understanding the intent of both sides.
79
-
80
- ### Validate code changes
81
-
82
- ```bash
83
- pnpm test
84
- pnpm run build
85
- ```
86
-
87
- All tests must pass and build must be clean before proceeding.
88
-
89
- ## Phase 3: Credential proxy network binding
90
-
91
- Apple Container uses a bridge network (bridge100) that only exists while containers are running. The credential proxy must start before any container, so it cannot bind to the bridge IP. It must bind to `0.0.0.0`, which exposes port 3001 on all network interfaces — anyone on your local network could route API requests through the proxy using your credentials.
92
-
93
- Use AskUserQuestion to ask the user:
94
-
95
- **"The credential proxy needs to bind to all interfaces (0.0.0.0). Is this Mac on a trusted private network?"**
96
-
97
- Options:
98
- 1. **Yes, private/home network** — description: "No firewall rule needed."
99
- 2. **No, shared/public network** — description: "Add a macOS firewall rule to block external access to port 3001."
100
-
101
- For both options, add `CREDENTIAL_PROXY_HOST=0.0.0.0` to `.env`:
102
-
103
- ```bash
104
- grep -q 'CREDENTIAL_PROXY_HOST' .env 2>/dev/null || echo 'CREDENTIAL_PROXY_HOST=0.0.0.0' >> .env
105
- ```
106
-
107
- If they chose the public network option, set up and persist the firewall rule:
108
-
109
- ```bash
110
- echo "block in on en0 proto tcp to any port 3001" | sudo pfctl -ef -
111
- ```
112
-
113
- ```bash
114
- grep -q 'nanoclaw proxy' /etc/pf.conf 2>/dev/null || echo '# nanoclaw proxy — block LAN access to credential proxy
115
- block in on en0 proto tcp to any port 3001' | sudo tee -a /etc/pf.conf > /dev/null
116
- ```
117
-
118
- Verify the rule is working:
119
-
120
- ```bash
121
- curl -sf http://$(ipconfig getifaddr en0):3001 && echo "EXPOSED — rule not working" || echo "BLOCKED — rule active"
122
- ```
123
-
124
- If the verification shows "EXPOSED", warn the user and retry. If "BLOCKED", confirm success and continue.
125
-
126
- ## Phase 4: Verify
127
-
128
- ### Ensure Apple Container runtime is running
129
-
130
- ```bash
131
- container system status || container system start
132
- ```
133
-
134
- ### Build the container image
135
-
136
- ```bash
137
- ./container/build.sh
138
- ```
139
-
140
- ### Test basic execution
141
-
142
- ```bash
143
- echo '{}' | container run -i --entrypoint /bin/echo nanoclaw-agent:latest "Container OK"
144
- ```
145
-
146
- ### Test readonly mounts
147
-
148
- ```bash
149
- mkdir -p /tmp/test-ro && echo "test" > /tmp/test-ro/file.txt
150
- container run --rm --entrypoint /bin/bash \
151
- --mount type=bind,source=/tmp/test-ro,target=/test,readonly \
152
- nanoclaw-agent:latest \
153
- -c "cat /test/file.txt && touch /test/new.txt 2>&1 || echo 'Write blocked (expected)'"
154
- rm -rf /tmp/test-ro
155
- ```
156
-
157
- Expected: Read succeeds, write fails with "Read-only file system".
158
-
159
- ### Test read-write mounts
160
-
161
- ```bash
162
- mkdir -p /tmp/test-rw
163
- container run --rm --entrypoint /bin/bash \
164
- -v /tmp/test-rw:/test \
165
- nanoclaw-agent:latest \
166
- -c "echo 'test write' > /test/new.txt && cat /test/new.txt"
167
- cat /tmp/test-rw/new.txt && rm -rf /tmp/test-rw
168
- ```
169
-
170
- Expected: Both operations succeed.
171
-
172
- ### Full integration test
173
-
174
- ```bash
175
- pnpm run build
176
- launchctl kickstart -k gui/$(id -u)/com.nanoclaw
177
- ```
178
-
179
- Send a message via WhatsApp and verify the agent responds.
180
-
181
- ## Troubleshooting
182
-
183
- **Apple Container not found:**
184
- - Download from https://github.com/apple/container/releases
185
- - Install the `.pkg` file
186
- - Verify: `container --version`
187
-
188
- **Runtime won't start:**
189
- ```bash
190
- container system start
191
- container system status
192
- ```
193
-
194
- **Image build fails:**
195
- ```bash
196
- # Clean rebuild — Apple Container caches aggressively
197
- container builder stop && container builder rm && container builder start
198
- ./container/build.sh
199
- ```
200
-
201
- **Container can't write to mounted directories:**
202
- Check directory permissions on the host. The container runs as uid 1000.
203
-
204
- ## Summary of Changed Files
205
-
206
- | File | Type of Change |
207
- |------|----------------|
208
- | `src/container-runtime.ts` | Full replacement — Docker → Apple Container API |
209
- | `src/container-runtime.test.ts` | Full replacement — tests for Apple Container behavior |
210
- | `src/container-runner.ts` | .env shadow mount removed, main containers start as root with privilege drop |
211
- | `container/Dockerfile` | Entrypoint: `mount --bind` for .env shadowing, `setpriv` privilege drop |
212
- | `container/build.sh` | Default runtime: `docker` → `container` |
@@ -1,110 +0,0 @@
1
- ---
2
- name: customize
3
- description: Add new capabilities or modify NanoClaw behavior. Use when user wants to add channels (Telegram, Slack, email input), change triggers, add integrations, modify the router, or make any other customizations. This is an interactive skill that asks questions to understand what the user wants.
4
- ---
5
-
6
- # NanoClaw Customization
7
-
8
- This skill helps users add capabilities or modify behavior. Use AskUserQuestion to understand what they want before making changes.
9
-
10
- ## Workflow
11
-
12
- 1. **Understand the request** - Ask clarifying questions
13
- 3. **Plan the changes** - Identify files to modify. If a skill exists for the request (e.g., `/add-telegram` for adding Telegram), invoke it instead of implementing manually.
14
- 4. **Implement** - Make changes directly to the code
15
- 5. **Test guidance** - Tell user how to verify
16
-
17
- ## Key Files
18
-
19
- | File | Purpose |
20
- |------|---------|
21
- | `src/index.ts` | Orchestrator: state, message loop, agent invocation |
22
- | `src/channels/whatsapp.ts` | WhatsApp connection, auth, send/receive |
23
- | `src/ipc.ts` | IPC watcher and task processing |
24
- | `src/router.ts` | Message formatting and outbound routing |
25
- | `src/types.ts` | TypeScript interfaces (includes Channel) |
26
- | `src/config.ts` | Assistant name, trigger pattern, directories |
27
- | `src/db.ts` | Database initialization and queries |
28
- | `src/whatsapp-auth.ts` | Standalone WhatsApp authentication script |
29
- | `groups/CLAUDE.md` | Global memory/persona |
30
-
31
- ## Common Customization Patterns
32
-
33
- ### Adding a New Input Channel (e.g., Telegram, Slack, Email)
34
-
35
- Questions to ask:
36
- - Which channel? (Telegram, Slack, Discord, email, SMS, etc.)
37
- - Same trigger word or different?
38
- - Same memory hierarchy or separate?
39
- - Should messages from this channel go to existing groups or new ones?
40
-
41
- Implementation pattern:
42
- 1. Create `src/channels/{name}.ts` implementing the `Channel` interface from `src/types.ts` (see `src/channels/whatsapp.ts` for reference)
43
- 2. Add the channel instance to `main()` in `src/index.ts` and wire callbacks (`onMessage`, `onChatMetadata`)
44
- 3. Messages are stored via the `onMessage` callback; routing is automatic via `ownsJid()`
45
-
46
- ### Adding a New MCP Integration
47
-
48
- Questions to ask:
49
- - What service? (Calendar, Notion, database, etc.)
50
- - What operations needed? (read, write, both)
51
- - Which groups should have access?
52
-
53
- Implementation:
54
- 1. Add MCP server config to the container settings (see `src/container-runner.ts` for how MCP servers are mounted)
55
- 2. Document available tools in `groups/CLAUDE.md`
56
-
57
- ### Changing Assistant Behavior
58
-
59
- Questions to ask:
60
- - What aspect? (name, trigger, persona, response style)
61
- - Apply to all groups or specific ones?
62
-
63
- Simple changes → edit `src/config.ts`
64
- Persona changes → edit `groups/CLAUDE.md`
65
- Per-group behavior → edit specific group's `CLAUDE.md`
66
-
67
- ### Adding New Commands
68
-
69
- Questions to ask:
70
- - What should the command do?
71
- - Available in all groups or main only?
72
- - Does it need new MCP tools?
73
-
74
- Implementation:
75
- 1. Commands are handled by the agent naturally — add instructions to `groups/CLAUDE.md` or the group's `CLAUDE.md`
76
- 2. For trigger-level routing changes, modify `processGroupMessages()` in `src/index.ts`
77
-
78
- ### Changing Deployment
79
-
80
- Questions to ask:
81
- - Target platform? (Linux server, Docker, different Mac)
82
- - Service manager? (systemd, Docker, supervisord)
83
-
84
- Implementation:
85
- 1. Create appropriate service files
86
- 2. Update paths in config
87
- 3. Provide setup instructions
88
-
89
- ## After Changes
90
-
91
- Always tell the user:
92
- ```bash
93
- # Rebuild and restart
94
- pnpm run build
95
- # macOS:
96
- launchctl unload ~/Library/LaunchAgents/com.nanoclaw.plist
97
- launchctl load ~/Library/LaunchAgents/com.nanoclaw.plist
98
- # Linux:
99
- # systemctl --user restart nanoclaw
100
- ```
101
-
102
- ## Example Interaction
103
-
104
- User: "Add Telegram as an input channel"
105
-
106
- 1. Ask: "Should Telegram use the same @Andy trigger, or a different one?"
107
- 2. Ask: "Should Telegram messages create separate conversation contexts, or share with WhatsApp groups?"
108
- 3. Create `src/channels/telegram.ts` implementing the `Channel` interface (see `src/channels/whatsapp.ts`)
109
- 4. Add the channel to `main()` in `src/index.ts`
110
- 5. Tell user how to authenticate and test