@openparachute/agent 0.1.2 → 0.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (608) hide show
  1. package/.parachute/module.json +124 -8
  2. package/LICENSE +2 -16
  3. package/README.md +118 -166
  4. package/package.json +35 -42
  5. package/scripts/spawn-agent.ts +371 -0
  6. package/src/_parked/interactive-spawn.test.ts +324 -0
  7. package/src/_parked/interactive-spawn.ts +701 -0
  8. package/src/agent-defs.test.ts +1504 -0
  9. package/src/agent-defs.ts +1702 -0
  10. package/src/agent-mcp-config.test.ts +115 -0
  11. package/src/agent-mcp-config.ts +115 -0
  12. package/src/agents.test.ts +360 -0
  13. package/src/agents.ts +379 -0
  14. package/src/auth.test.ts +46 -0
  15. package/src/auth.ts +140 -0
  16. package/src/backends/attached-queue.test.ts +376 -0
  17. package/src/backends/attached-queue.ts +372 -0
  18. package/src/backends/programmatic.test.ts +1715 -0
  19. package/src/backends/programmatic.ts +927 -0
  20. package/src/backends/registry.test.ts +1494 -0
  21. package/src/backends/registry.ts +1202 -0
  22. package/src/backends/stream-json.test.ts +570 -0
  23. package/src/backends/stream-json.ts +392 -0
  24. package/src/backends/types.ts +223 -0
  25. package/src/bridge.ts +417 -0
  26. package/src/channel-backend-wiring.test.ts +237 -0
  27. package/src/credentials.test.ts +274 -0
  28. package/src/credentials.ts +380 -0
  29. package/src/cron.test.ts +342 -0
  30. package/src/cron.ts +380 -0
  31. package/src/daemon-agent-def-api.test.ts +166 -0
  32. package/src/daemon-agent-defs-api.test.ts +953 -0
  33. package/src/daemon-agent-env-api.test.ts +338 -0
  34. package/src/daemon-attached-queue-store.test.ts +65 -0
  35. package/src/daemon-config-api.test.ts +962 -0
  36. package/src/daemon-jobs-api.test.ts +271 -0
  37. package/src/daemon-vault-chat.test.ts +250 -0
  38. package/src/daemon.test.ts +746 -0
  39. package/src/daemon.ts +3314 -0
  40. package/src/def-vaults.test.ts +136 -0
  41. package/src/def-vaults.ts +165 -0
  42. package/src/delivery-state.test.ts +110 -0
  43. package/src/delivery-state.ts +154 -0
  44. package/src/effective-env.test.ts +114 -0
  45. package/src/effective-env.ts +184 -0
  46. package/src/env-compat.ts +39 -0
  47. package/src/grants.test.ts +638 -0
  48. package/src/grants.ts +675 -0
  49. package/src/hub-jwt.test.ts +161 -0
  50. package/src/hub-jwt.ts +182 -0
  51. package/src/jobs.test.ts +245 -0
  52. package/src/jobs.ts +266 -0
  53. package/src/mcp-http.test.ts +265 -0
  54. package/src/mcp-http.ts +771 -0
  55. package/src/mint-token.test.ts +152 -0
  56. package/src/mint-token.ts +139 -0
  57. package/src/module-manifest.test.ts +158 -0
  58. package/src/oauth-discovery.ts +134 -0
  59. package/src/programmatic-wiring.test.ts +838 -0
  60. package/src/registry.test.ts +227 -0
  61. package/src/registry.ts +228 -0
  62. package/src/resolve-port.test.ts +64 -0
  63. package/src/routing.test.ts +184 -0
  64. package/src/routing.ts +76 -0
  65. package/src/runner.test.ts +506 -0
  66. package/src/runner.ts +255 -0
  67. package/src/sandbox/config.test.ts +150 -0
  68. package/src/sandbox/config.ts +102 -0
  69. package/src/sandbox/egress.test.ts +113 -0
  70. package/src/sandbox/egress.ts +123 -0
  71. package/src/sandbox/index.ts +180 -0
  72. package/src/sandbox/live-seatbelt.test.ts +277 -0
  73. package/src/sandbox/mounts.test.ts +154 -0
  74. package/src/sandbox/mounts.ts +133 -0
  75. package/src/sandbox/sandbox.test.ts +168 -0
  76. package/src/sandbox/types.ts +382 -0
  77. package/src/services-manifest.test.ts +106 -0
  78. package/src/services-manifest.ts +95 -0
  79. package/src/spa-serve.test.ts +116 -0
  80. package/src/spa-serve.ts +116 -0
  81. package/src/spawn-agent-cli.test.ts +172 -0
  82. package/src/spawn-agent.test.ts +1218 -0
  83. package/src/spawn-agent.ts +569 -0
  84. package/src/spawn-deps.test.ts +54 -0
  85. package/src/spawn-deps.ts +166 -0
  86. package/src/telegram/api.ts +153 -0
  87. package/src/terminal-assets.test.ts +50 -0
  88. package/src/terminal-assets.ts +79 -0
  89. package/src/terminal-ui.ts +305 -0
  90. package/src/terminal.test.ts +530 -0
  91. package/src/terminal.ts +458 -0
  92. package/src/transport.ts +270 -0
  93. package/src/transports/http-ui.test.ts +455 -0
  94. package/src/transports/http-ui.ts +201 -0
  95. package/src/transports/telegram.test.ts +174 -0
  96. package/src/transports/telegram.ts +426 -0
  97. package/src/transports/vault.test.ts +2011 -0
  98. package/src/transports/vault.ts +1790 -0
  99. package/src/ui-kit.test.ts +178 -0
  100. package/src/ui-kit.ts +402 -0
  101. package/tsconfig.json +8 -14
  102. package/web/ui/dist/assets/index-C-iWdFFV.css +1 -0
  103. package/web/ui/dist/assets/index-VFETBk0a.js +60 -0
  104. package/web/ui/dist/index.html +15 -0
  105. package/web/ui/tsconfig.json +2 -1
  106. package/.claude/scheduled_tasks.lock +0 -1
  107. package/.claude/settings.json +0 -5
  108. package/.claude/skills/add-atomic-chat-tool/SKILL.md +0 -243
  109. package/.claude/skills/add-atomic-chat-tool/atomic-chat-mcp-stdio.ts +0 -229
  110. package/.claude/skills/add-codex/SKILL.md +0 -161
  111. package/.claude/skills/add-dashboard/SKILL.md +0 -138
  112. package/.claude/skills/add-dashboard/resources/dashboard-pusher.ts +0 -495
  113. package/.claude/skills/add-emacs/SKILL.md +0 -296
  114. package/.claude/skills/add-gcal-tool/SKILL.md +0 -210
  115. package/.claude/skills/add-gchat/REMOVE.md +0 -6
  116. package/.claude/skills/add-gchat/SKILL.md +0 -92
  117. package/.claude/skills/add-gchat/VERIFY.md +0 -3
  118. package/.claude/skills/add-github/REMOVE.md +0 -6
  119. package/.claude/skills/add-github/SKILL.md +0 -148
  120. package/.claude/skills/add-github/VERIFY.md +0 -3
  121. package/.claude/skills/add-gmail-tool/SKILL.md +0 -229
  122. package/.claude/skills/add-imessage/REMOVE.md +0 -6
  123. package/.claude/skills/add-imessage/SKILL.md +0 -113
  124. package/.claude/skills/add-imessage/VERIFY.md +0 -3
  125. package/.claude/skills/add-karpathy-llm-wiki/SKILL.md +0 -110
  126. package/.claude/skills/add-karpathy-llm-wiki/llm-wiki.md +0 -75
  127. package/.claude/skills/add-linear/REMOVE.md +0 -6
  128. package/.claude/skills/add-linear/SKILL.md +0 -168
  129. package/.claude/skills/add-linear/VERIFY.md +0 -3
  130. package/.claude/skills/add-macos-statusbar/SKILL.md +0 -133
  131. package/.claude/skills/add-macos-statusbar/add/src/statusbar.swift +0 -147
  132. package/.claude/skills/add-matrix/REMOVE.md +0 -6
  133. package/.claude/skills/add-matrix/SKILL.md +0 -148
  134. package/.claude/skills/add-matrix/VERIFY.md +0 -3
  135. package/.claude/skills/add-ollama-provider/SKILL.md +0 -179
  136. package/.claude/skills/add-ollama-tool/SKILL.md +0 -193
  137. package/.claude/skills/add-opencode/SKILL.md +0 -229
  138. package/.claude/skills/add-parallel/SKILL.md +0 -290
  139. package/.claude/skills/add-resend/REMOVE.md +0 -6
  140. package/.claude/skills/add-resend/SKILL.md +0 -93
  141. package/.claude/skills/add-resend/VERIFY.md +0 -3
  142. package/.claude/skills/add-signal/REMOVE.md +0 -13
  143. package/.claude/skills/add-signal/SKILL.md +0 -318
  144. package/.claude/skills/add-signal/VERIFY.md +0 -5
  145. package/.claude/skills/add-slack/REMOVE.md +0 -6
  146. package/.claude/skills/add-slack/SKILL.md +0 -112
  147. package/.claude/skills/add-slack/VERIFY.md +0 -3
  148. package/.claude/skills/add-teams/REMOVE.md +0 -6
  149. package/.claude/skills/add-teams/SKILL.md +0 -207
  150. package/.claude/skills/add-teams/VERIFY.md +0 -3
  151. package/.claude/skills/add-vercel/SKILL.md +0 -147
  152. package/.claude/skills/add-vercel/container-skills/vercel-cli/SKILL.md +0 -103
  153. package/.claude/skills/add-webex/REMOVE.md +0 -6
  154. package/.claude/skills/add-webex/SKILL.md +0 -88
  155. package/.claude/skills/add-webex/VERIFY.md +0 -3
  156. package/.claude/skills/add-wechat/REMOVE.md +0 -49
  157. package/.claude/skills/add-wechat/SKILL.md +0 -170
  158. package/.claude/skills/add-wechat/scripts/wire-dm.ts +0 -172
  159. package/.claude/skills/add-whatsapp/SKILL.md +0 -264
  160. package/.claude/skills/add-whatsapp-cloud/REMOVE.md +0 -6
  161. package/.claude/skills/add-whatsapp-cloud/SKILL.md +0 -95
  162. package/.claude/skills/add-whatsapp-cloud/VERIFY.md +0 -3
  163. package/.claude/skills/claw/SKILL.md +0 -131
  164. package/.claude/skills/claw/scripts/claw +0 -374
  165. package/.claude/skills/convert-to-apple-container/SKILL.md +0 -212
  166. package/.claude/skills/customize/SKILL.md +0 -110
  167. package/.claude/skills/debug/SKILL.md +0 -349
  168. package/.claude/skills/get-qodo-rules/SKILL.md +0 -122
  169. package/.claude/skills/get-qodo-rules/references/output-format.md +0 -41
  170. package/.claude/skills/get-qodo-rules/references/pagination.md +0 -33
  171. package/.claude/skills/get-qodo-rules/references/repository-scope.md +0 -26
  172. package/.claude/skills/init-first-agent/SKILL.md +0 -120
  173. package/.claude/skills/init-onecli/SKILL.md +0 -270
  174. package/.claude/skills/manage-channels/SKILL.md +0 -87
  175. package/.claude/skills/manage-mounts/SKILL.md +0 -47
  176. package/.claude/skills/migrate-from-openclaw/MIGRATE_CRONS.md +0 -100
  177. package/.claude/skills/migrate-from-openclaw/SKILL.md +0 -447
  178. package/.claude/skills/migrate-from-openclaw/scripts/discover-openclaw.ts +0 -734
  179. package/.claude/skills/migrate-from-openclaw/scripts/extract-channel-credentials.ts +0 -476
  180. package/.claude/skills/migrate-nanoclaw/SKILL.md +0 -484
  181. package/.claude/skills/migrate-nanoclaw/diagnostics.md +0 -51
  182. package/.claude/skills/qodo-pr-resolver/SKILL.md +0 -326
  183. package/.claude/skills/qodo-pr-resolver/resources/providers.md +0 -329
  184. package/.claude/skills/update-nanoclaw/SKILL.md +0 -243
  185. package/.claude/skills/update-nanoclaw/diagnostics.md +0 -48
  186. package/.claude/skills/update-skills/SKILL.md +0 -130
  187. package/.claude/skills/use-native-credential-proxy/SKILL.md +0 -167
  188. package/.claude/skills/x-integration/SKILL.md +0 -417
  189. package/.claude/skills/x-integration/agent.ts +0 -243
  190. package/.claude/skills/x-integration/host.ts +0 -155
  191. package/.claude/skills/x-integration/lib/browser.ts +0 -148
  192. package/.claude/skills/x-integration/lib/config.ts +0 -62
  193. package/.claude/skills/x-integration/scripts/like.ts +0 -56
  194. package/.claude/skills/x-integration/scripts/post.ts +0 -66
  195. package/.claude/skills/x-integration/scripts/quote.ts +0 -80
  196. package/.claude/skills/x-integration/scripts/reply.ts +0 -74
  197. package/.claude/skills/x-integration/scripts/retweet.ts +0 -62
  198. package/.claude/skills/x-integration/scripts/setup.ts +0 -87
  199. package/.github/CODEOWNERS +0 -10
  200. package/.github/PULL_REQUEST_TEMPLATE.md +0 -18
  201. package/.github/workflows/bump-version.yml +0 -35
  202. package/.github/workflows/ci.yml +0 -39
  203. package/.github/workflows/label-pr.yml +0 -40
  204. package/.github/workflows/update-tokens.yml +0 -43
  205. package/.husky/pre-commit +0 -1
  206. package/.mcp.json +0 -3
  207. package/.nvmrc +0 -1
  208. package/.prettierrc +0 -4
  209. package/CHANGELOG.md +0 -263
  210. package/CLAUDE.md +0 -307
  211. package/CODE_OF_CONDUCT.md +0 -128
  212. package/CONTRIBUTING.md +0 -159
  213. package/CONTRIBUTORS.md +0 -26
  214. package/LICENSE-NANOCLAW-MIT +0 -21
  215. package/README_ja.md +0 -194
  216. package/README_zh.md +0 -194
  217. package/assets/nanoclaw-favicon.png +0 -0
  218. package/assets/nanoclaw-icon.png +0 -0
  219. package/assets/nanoclaw-logo-dark.png +0 -0
  220. package/assets/nanoclaw-logo.png +0 -0
  221. package/assets/nanoclaw-profile.jpeg +0 -0
  222. package/assets/nanoclaw-sales.png +0 -0
  223. package/assets/social-preview.jpg +0 -0
  224. package/config-examples/mount-allowlist.json +0 -25
  225. package/container/.dockerignore +0 -2
  226. package/container/CLAUDE.md +0 -21
  227. package/container/Dockerfile +0 -121
  228. package/container/agent-runner/bun.lock +0 -243
  229. package/container/agent-runner/package.json +0 -22
  230. package/container/agent-runner/scripts/sdk-signal-probe.ts +0 -169
  231. package/container/agent-runner/src/config.ts +0 -55
  232. package/container/agent-runner/src/db/connection.ts +0 -267
  233. package/container/agent-runner/src/db/index.ts +0 -20
  234. package/container/agent-runner/src/db/messages-in.ts +0 -138
  235. package/container/agent-runner/src/db/messages-out.ts +0 -143
  236. package/container/agent-runner/src/db/session-routing.ts +0 -30
  237. package/container/agent-runner/src/db/session-state.test.ts +0 -100
  238. package/container/agent-runner/src/db/session-state.ts +0 -79
  239. package/container/agent-runner/src/destinations.ts +0 -135
  240. package/container/agent-runner/src/formatter.test.ts +0 -167
  241. package/container/agent-runner/src/formatter.ts +0 -260
  242. package/container/agent-runner/src/index.ts +0 -110
  243. package/container/agent-runner/src/integration.test.ts +0 -121
  244. package/container/agent-runner/src/mcp-tools/agents.instructions.md +0 -26
  245. package/container/agent-runner/src/mcp-tools/agents.ts +0 -66
  246. package/container/agent-runner/src/mcp-tools/core.instructions.md +0 -27
  247. package/container/agent-runner/src/mcp-tools/core.ts +0 -262
  248. package/container/agent-runner/src/mcp-tools/index.ts +0 -22
  249. package/container/agent-runner/src/mcp-tools/interactive.instructions.md +0 -22
  250. package/container/agent-runner/src/mcp-tools/interactive.ts +0 -169
  251. package/container/agent-runner/src/mcp-tools/scheduling.instructions.md +0 -40
  252. package/container/agent-runner/src/mcp-tools/scheduling.ts +0 -299
  253. package/container/agent-runner/src/mcp-tools/self-mod.instructions.md +0 -25
  254. package/container/agent-runner/src/mcp-tools/self-mod.ts +0 -120
  255. package/container/agent-runner/src/mcp-tools/server.ts +0 -54
  256. package/container/agent-runner/src/mcp-tools/types.ts +0 -6
  257. package/container/agent-runner/src/poll-loop.test.ts +0 -248
  258. package/container/agent-runner/src/poll-loop.ts +0 -437
  259. package/container/agent-runner/src/providers/claude.ts +0 -379
  260. package/container/agent-runner/src/providers/factory.test.ts +0 -19
  261. package/container/agent-runner/src/providers/factory.ts +0 -13
  262. package/container/agent-runner/src/providers/index.ts +0 -6
  263. package/container/agent-runner/src/providers/mock.ts +0 -77
  264. package/container/agent-runner/src/providers/provider-registry.ts +0 -33
  265. package/container/agent-runner/src/providers/types.ts +0 -82
  266. package/container/agent-runner/src/scheduling/task-script.ts +0 -121
  267. package/container/agent-runner/src/timezone.test.ts +0 -93
  268. package/container/agent-runner/src/timezone.ts +0 -107
  269. package/container/agent-runner/tsconfig.json +0 -14
  270. package/container/build.sh +0 -48
  271. package/container/entrypoint.sh +0 -16
  272. package/container/skills/agent-browser/SKILL.md +0 -159
  273. package/container/skills/frontend-engineer/SKILL.md +0 -157
  274. package/container/skills/self-customize/SKILL.md +0 -87
  275. package/container/skills/slack-formatting/SKILL.md +0 -94
  276. package/container/skills/vercel-cli/SKILL.md +0 -111
  277. package/container/skills/welcome/SKILL.md +0 -85
  278. package/docs/APPLE-CONTAINER-NETWORKING.md +0 -90
  279. package/docs/BRANCH-FORK-MAINTENANCE.md +0 -81
  280. package/docs/README.md +0 -25
  281. package/docs/SDK_DEEP_DIVE.md +0 -643
  282. package/docs/SECURITY.md +0 -162
  283. package/docs/agent-runner-details.md +0 -749
  284. package/docs/api-details.md +0 -365
  285. package/docs/architecture-diagram.html +0 -422
  286. package/docs/architecture-diagram.md +0 -215
  287. package/docs/architecture.md +0 -751
  288. package/docs/audit/2026-04-30-channel-endpoint-audit.md +0 -36
  289. package/docs/build-and-runtime.md +0 -80
  290. package/docs/cross-mount-stress/README.md +0 -112
  291. package/docs/cross-mount-stress/container-writer-retry.mjs +0 -55
  292. package/docs/cross-mount-stress/container-writer-slow.mjs +0 -42
  293. package/docs/cross-mount-stress/container-writer.mjs +0 -47
  294. package/docs/cross-mount-stress/host-writer-retry.mjs +0 -55
  295. package/docs/cross-mount-stress/host-writer-slow.mjs +0 -43
  296. package/docs/cross-mount-stress/host-writer.mjs +0 -47
  297. package/docs/db-central.md +0 -316
  298. package/docs/db-session.md +0 -183
  299. package/docs/db.md +0 -119
  300. package/docs/design/2026-04-29-vault-management-ui.md +0 -231
  301. package/docs/design/2026-04-30-channel-wiring-rework.md +0 -234
  302. package/docs/design/2026-05-01-channel-wiring-approvals-deep-dive.md +0 -272
  303. package/docs/design/2026-05-02-channel-policy-and-approval-routing.md +0 -250
  304. package/docs/docker-sandboxes.md +0 -359
  305. package/docs/isolation-model.md +0 -88
  306. package/docs/ollama.md +0 -79
  307. package/docs/parachute-integration.md +0 -109
  308. package/docs/post-night-rebirth-reflections.md +0 -151
  309. package/eslint.config.js +0 -32
  310. package/pnpm-workspace.yaml +0 -8
  311. package/repo-tokens/README.md +0 -113
  312. package/repo-tokens/action.yml +0 -186
  313. package/repo-tokens/badge.svg +0 -23
  314. package/repo-tokens/examples/green.svg +0 -14
  315. package/repo-tokens/examples/red.svg +0 -14
  316. package/repo-tokens/examples/yellow-green.svg +0 -14
  317. package/repo-tokens/examples/yellow.svg +0 -14
  318. package/scripts/chat.ts +0 -101
  319. package/scripts/cleanup-sessions.sh +0 -150
  320. package/scripts/init-cli-agent.ts +0 -172
  321. package/scripts/init-first-agent.ts +0 -378
  322. package/scripts/parachute.ts +0 -158
  323. package/scripts/run-migrations.ts +0 -105
  324. package/scripts/sanity-live-poll.ts +0 -95
  325. package/scripts/seed-discord.ts +0 -80
  326. package/scripts/test-v2-agent.ts +0 -106
  327. package/scripts/test-v2-channel-e2e.ts +0 -265
  328. package/scripts/test-v2-host.ts +0 -184
  329. package/src/channels/adapter.ts +0 -214
  330. package/src/channels/api-translator.test.ts +0 -306
  331. package/src/channels/api-translator.ts +0 -214
  332. package/src/channels/ask-question.ts +0 -46
  333. package/src/channels/channel-registry.test.ts +0 -421
  334. package/src/channels/channel-registry.ts +0 -313
  335. package/src/channels/chat-sdk-bridge.test.ts +0 -84
  336. package/src/channels/chat-sdk-bridge.ts +0 -652
  337. package/src/channels/cli.ts +0 -276
  338. package/src/channels/discord.ts +0 -90
  339. package/src/channels/index.ts +0 -17
  340. package/src/channels/telegram-markdown-sanitize.test.ts +0 -78
  341. package/src/channels/telegram-markdown-sanitize.ts +0 -55
  342. package/src/channels/telegram-pairing.test.ts +0 -254
  343. package/src/channels/telegram-pairing.ts +0 -339
  344. package/src/channels/telegram.ts +0 -279
  345. package/src/channels/trust-hint.test.ts +0 -48
  346. package/src/channels/trust-hint.ts +0 -75
  347. package/src/claude-md-compose.migrate.test.ts +0 -64
  348. package/src/claude-md-compose.ts +0 -205
  349. package/src/command-gate.ts +0 -63
  350. package/src/config.test.ts +0 -93
  351. package/src/config.ts +0 -128
  352. package/src/container-config.ts +0 -167
  353. package/src/container-runner.test.ts +0 -32
  354. package/src/container-runner.ts +0 -576
  355. package/src/container-runtime.test.ts +0 -269
  356. package/src/container-runtime.ts +0 -167
  357. package/src/db/_bun-sqlite-shim.ts +0 -88
  358. package/src/db/agent-activity.test.ts +0 -155
  359. package/src/db/agent-activity.ts +0 -121
  360. package/src/db/agent-groups.ts +0 -77
  361. package/src/db/connection.migrate.test.ts +0 -176
  362. package/src/db/connection.ts +0 -259
  363. package/src/db/db-v2.test.ts +0 -440
  364. package/src/db/dropped-messages.ts +0 -44
  365. package/src/db/index.ts +0 -40
  366. package/src/db/messaging-groups.ts +0 -252
  367. package/src/db/migrations/001-initial.ts +0 -112
  368. package/src/db/migrations/002-chat-sdk-state.ts +0 -36
  369. package/src/db/migrations/008-dropped-messages.ts +0 -27
  370. package/src/db/migrations/009-drop-pending-credentials.ts +0 -13
  371. package/src/db/migrations/010-engage-modes.ts +0 -103
  372. package/src/db/migrations/011-pending-sender-approvals.ts +0 -40
  373. package/src/db/migrations/012-channel-registration.ts +0 -48
  374. package/src/db/migrations/013-approval-render-metadata.ts +0 -27
  375. package/src/db/migrations/014-secrets.ts +0 -44
  376. package/src/db/migrations/015-secrets-drop-host-pattern.ts +0 -18
  377. package/src/db/migrations/016-secret-assignments.ts +0 -30
  378. package/src/db/migrations/017-agent-activity.ts +0 -40
  379. package/src/db/migrations/018-oauth-app-configs.ts +0 -34
  380. package/src/db/migrations/019-oauth-app-connections.ts +0 -48
  381. package/src/db/migrations/020-agent-app-connections.ts +0 -28
  382. package/src/db/migrations/021-pending-oauth-states.ts +0 -35
  383. package/src/db/migrations/022-app-connections-provider.ts +0 -25
  384. package/src/db/migrations/023-agent-group-secret-mode.test.ts +0 -124
  385. package/src/db/migrations/023-agent-group-secret-mode.ts +0 -65
  386. package/src/db/migrations/024-collapse-approvals.test.ts +0 -249
  387. package/src/db/migrations/024-collapse-approvals.ts +0 -182
  388. package/src/db/migrations/025-secret-mode-check.test.ts +0 -155
  389. package/src/db/migrations/025-secret-mode-check.ts +0 -49
  390. package/src/db/migrations/026-user-dms-bot-id.test.ts +0 -116
  391. package/src/db/migrations/026-user-dms-bot-id.ts +0 -54
  392. package/src/db/migrations/027-provider-credentials.ts +0 -41
  393. package/src/db/migrations/_test-helpers.ts +0 -41
  394. package/src/db/migrations/index.ts +0 -127
  395. package/src/db/migrations/module-agent-to-agent-destinations.ts +0 -84
  396. package/src/db/migrations/module-approvals-pending-approvals.ts +0 -42
  397. package/src/db/migrations/module-approvals-title-options.ts +0 -40
  398. package/src/db/schema.ts +0 -258
  399. package/src/db/session-db.test.ts +0 -93
  400. package/src/db/session-db.ts +0 -325
  401. package/src/db/sessions.ts +0 -241
  402. package/src/delivery.test.ts +0 -148
  403. package/src/delivery.ts +0 -445
  404. package/src/env.ts +0 -74
  405. package/src/group-folder.test.ts +0 -35
  406. package/src/group-folder.ts +0 -44
  407. package/src/group-init.ts +0 -92
  408. package/src/host-core.test.ts +0 -456
  409. package/src/host-sweep.test.ts +0 -146
  410. package/src/host-sweep.ts +0 -287
  411. package/src/index.ts +0 -232
  412. package/src/install-slug.ts +0 -33
  413. package/src/log.test.ts +0 -81
  414. package/src/log.ts +0 -117
  415. package/src/mcp/http.ts +0 -72
  416. package/src/mcp/server.ts +0 -92
  417. package/src/mcp/stdio.ts +0 -51
  418. package/src/mcp/tools/activity.ts +0 -88
  419. package/src/mcp/tools/agent-groups.ts +0 -183
  420. package/src/mcp/tools/approvals.ts +0 -122
  421. package/src/mcp/tools/channels.test.ts +0 -126
  422. package/src/mcp/tools/channels.ts +0 -134
  423. package/src/mcp/tools/index.ts +0 -27
  424. package/src/mcp/tools/oauth.ts +0 -48
  425. package/src/mcp/tools/secrets.ts +0 -169
  426. package/src/mcp/tools/sessions.ts +0 -135
  427. package/src/mcp/types.ts +0 -51
  428. package/src/modules/agent-to-agent/agent-route.test.ts +0 -46
  429. package/src/modules/agent-to-agent/agent-route.ts +0 -223
  430. package/src/modules/agent-to-agent/create-agent.ts +0 -127
  431. package/src/modules/agent-to-agent/db/agent-destinations.ts +0 -135
  432. package/src/modules/agent-to-agent/index.ts +0 -22
  433. package/src/modules/agent-to-agent/write-destinations.ts +0 -59
  434. package/src/modules/approvals/agent.md +0 -45
  435. package/src/modules/approvals/index.ts +0 -21
  436. package/src/modules/approvals/picks.test.ts +0 -291
  437. package/src/modules/approvals/primitive.ts +0 -279
  438. package/src/modules/approvals/project.md +0 -27
  439. package/src/modules/approvals/response-handler.ts +0 -87
  440. package/src/modules/index.ts +0 -24
  441. package/src/modules/interactive/agent.md +0 -21
  442. package/src/modules/interactive/index.ts +0 -69
  443. package/src/modules/interactive/project.md +0 -12
  444. package/src/modules/mount-security/expand-path.test.ts +0 -82
  445. package/src/modules/mount-security/index.ts +0 -459
  446. package/src/modules/mount-security/migrate.test.ts +0 -91
  447. package/src/modules/permissions/access.ts +0 -28
  448. package/src/modules/permissions/channel-approval.test.ts +0 -389
  449. package/src/modules/permissions/channel-approval.ts +0 -188
  450. package/src/modules/permissions/db/agent-group-members.ts +0 -44
  451. package/src/modules/permissions/db/pending-channel-approvals.test.ts +0 -86
  452. package/src/modules/permissions/db/pending-channel-approvals.ts +0 -66
  453. package/src/modules/permissions/db/pending-sender-approvals.ts +0 -60
  454. package/src/modules/permissions/db/user-dms.ts +0 -58
  455. package/src/modules/permissions/db/user-roles.ts +0 -85
  456. package/src/modules/permissions/db/users.ts +0 -38
  457. package/src/modules/permissions/index.ts +0 -421
  458. package/src/modules/permissions/permissions.test.ts +0 -358
  459. package/src/modules/permissions/sender-approval.test.ts +0 -641
  460. package/src/modules/permissions/sender-approval.ts +0 -165
  461. package/src/modules/permissions/user-dm.ts +0 -200
  462. package/src/modules/provider-credentials/db.ts +0 -121
  463. package/src/modules/provider-credentials/index.ts +0 -12
  464. package/src/modules/provider-credentials/spawn.test.ts +0 -206
  465. package/src/modules/provider-credentials/spawn.ts +0 -114
  466. package/src/modules/scheduling/actions.ts +0 -113
  467. package/src/modules/scheduling/db.test.ts +0 -282
  468. package/src/modules/scheduling/db.ts +0 -148
  469. package/src/modules/scheduling/index.ts +0 -34
  470. package/src/modules/scheduling/recurrence.test.ts +0 -98
  471. package/src/modules/scheduling/recurrence.ts +0 -54
  472. package/src/modules/self-mod/agent.md +0 -30
  473. package/src/modules/self-mod/apply.ts +0 -85
  474. package/src/modules/self-mod/index.ts +0 -30
  475. package/src/modules/self-mod/project.md +0 -39
  476. package/src/modules/self-mod/request.ts +0 -91
  477. package/src/modules/typing/index.ts +0 -165
  478. package/src/oauth/agent-app-connections.ts +0 -103
  479. package/src/oauth/app-configs.test.ts +0 -64
  480. package/src/oauth/app-configs.ts +0 -114
  481. package/src/oauth/app-connections.test.ts +0 -109
  482. package/src/oauth/app-connections.ts +0 -178
  483. package/src/oauth/crypto.ts +0 -56
  484. package/src/oauth/flow.ts +0 -104
  485. package/src/oauth/providers/google.test.ts +0 -38
  486. package/src/oauth/providers/google.ts +0 -46
  487. package/src/oauth/providers/index.ts +0 -48
  488. package/src/oauth/state-store.test.ts +0 -54
  489. package/src/oauth/state-store.ts +0 -93
  490. package/src/parachute/README.md +0 -27
  491. package/src/parachute/create-agent.test.ts +0 -83
  492. package/src/parachute/create-agent.ts +0 -122
  493. package/src/parachute/group-status.test.ts +0 -165
  494. package/src/parachute/group-status.ts +0 -136
  495. package/src/parachute/types.ts +0 -41
  496. package/src/parachute/vault-mcp.test.ts +0 -251
  497. package/src/parachute/vault-mcp.ts +0 -232
  498. package/src/platform-id.test.ts +0 -104
  499. package/src/platform-id.ts +0 -109
  500. package/src/providers/index.ts +0 -6
  501. package/src/providers/provider-container-registry.ts +0 -58
  502. package/src/response-registry.ts +0 -45
  503. package/src/router.ts +0 -530
  504. package/src/secrets/crypto.test.ts +0 -45
  505. package/src/secrets/crypto.ts +0 -55
  506. package/src/secrets/index.ts +0 -461
  507. package/src/secrets/master-key.ts +0 -70
  508. package/src/secrets/secrets.test.ts +0 -651
  509. package/src/session-manager.attachments.test.ts +0 -171
  510. package/src/session-manager.dup-skip.test.ts +0 -173
  511. package/src/session-manager.migrate.test.ts +0 -59
  512. package/src/session-manager.ts +0 -451
  513. package/src/startup-bootstrap.test.ts +0 -226
  514. package/src/startup-bootstrap.ts +0 -207
  515. package/src/state-sqlite.ts +0 -182
  516. package/src/timezone.test.ts +0 -64
  517. package/src/timezone.ts +0 -37
  518. package/src/types.ts +0 -233
  519. package/src/web/auth.test.ts +0 -335
  520. package/src/web/auth.ts +0 -214
  521. package/src/web/discord-validate.test.ts +0 -77
  522. package/src/web/discord-validate.ts +0 -88
  523. package/src/web/hub-discovery.test.ts +0 -98
  524. package/src/web/hub-discovery.ts +0 -69
  525. package/src/web/routes/activity.ts +0 -106
  526. package/src/web/routes/agent-provider.test.ts +0 -282
  527. package/src/web/routes/agent-provider.ts +0 -309
  528. package/src/web/routes/approvals.ts +0 -185
  529. package/src/web/routes/apps.ts +0 -434
  530. package/src/web/routes/channels-mg-detail.test.ts +0 -324
  531. package/src/web/routes/channels-mga-detail.test.ts +0 -472
  532. package/src/web/routes/channels.ts +0 -311
  533. package/src/web/routes/oauth-providers.ts +0 -42
  534. package/src/web/routes/secrets.test.ts +0 -220
  535. package/src/web/routes/secrets.ts +0 -317
  536. package/src/web/routes/sessions.ts +0 -123
  537. package/src/web/routes/settings.test.ts +0 -106
  538. package/src/web/routes/settings.ts +0 -247
  539. package/src/web/routes/setup-status.ts +0 -205
  540. package/src/web/routes/vaults.test.ts +0 -389
  541. package/src/web/routes/vaults.ts +0 -225
  542. package/src/web/server-version.test.ts +0 -16
  543. package/src/web/server.ts +0 -1024
  544. package/src/web/services-manifest.test.ts +0 -148
  545. package/src/web/services-manifest.ts +0 -66
  546. package/src/web/static-serve.test.ts +0 -255
  547. package/src/web/static-serve.ts +0 -104
  548. package/src/web/telegram-validate.test.ts +0 -116
  549. package/src/web/telegram-validate.ts +0 -107
  550. package/src/web/vault-proxy.test.ts +0 -214
  551. package/src/web/vault-proxy.ts +0 -120
  552. package/src/web/wire-channel.ts +0 -181
  553. package/src/webhook-server.ts +0 -134
  554. package/vitest.config.ts +0 -18
  555. package/web/README.md +0 -63
  556. package/web/ui/index.html +0 -13
  557. package/web/ui/package.json +0 -35
  558. package/web/ui/pnpm-lock.yaml +0 -2164
  559. package/web/ui/scripts/verify-base.mjs +0 -31
  560. package/web/ui/src/App.tsx +0 -88
  561. package/web/ui/src/components/ActivityFeed.tsx +0 -444
  562. package/web/ui/src/components/AgentGroupPicker.tsx +0 -263
  563. package/web/ui/src/components/AgentProviderCards.tsx +0 -220
  564. package/web/ui/src/components/CredentialForm.tsx +0 -214
  565. package/web/ui/src/components/ScopeGrants.tsx +0 -74
  566. package/web/ui/src/components/StatusDot.tsx +0 -43
  567. package/web/ui/src/components/VaultPicker.tsx +0 -127
  568. package/web/ui/src/components/setup/AdapterInstallStep.tsx +0 -178
  569. package/web/ui/src/components/setup/AgentGroupStep.tsx +0 -43
  570. package/web/ui/src/components/setup/ChannelPickStep.tsx +0 -74
  571. package/web/ui/src/components/setup/DoneStep.tsx +0 -49
  572. package/web/ui/src/components/setup/PrereqStep.tsx +0 -129
  573. package/web/ui/src/components/setup/TestConnectionStep.tsx +0 -108
  574. package/web/ui/src/components/setup/TestMessageStep.tsx +0 -104
  575. package/web/ui/src/components/setup/WireChannelStep.tsx +0 -166
  576. package/web/ui/src/components/setup/types.ts +0 -105
  577. package/web/ui/src/lib/api.test.ts +0 -410
  578. package/web/ui/src/lib/api.ts +0 -1248
  579. package/web/ui/src/lib/auth.test.ts +0 -352
  580. package/web/ui/src/lib/auth.ts +0 -405
  581. package/web/ui/src/lib/channel-adapters.ts +0 -136
  582. package/web/ui/src/main.tsx +0 -19
  583. package/web/ui/src/routes/ApprovalsList.tsx +0 -294
  584. package/web/ui/src/routes/Apps.tsx +0 -613
  585. package/web/ui/src/routes/ChannelWireDetail.test.tsx +0 -233
  586. package/web/ui/src/routes/ChannelWireDetail.tsx +0 -403
  587. package/web/ui/src/routes/ChannelsList.tsx +0 -158
  588. package/web/ui/src/routes/GroupDetail.test.tsx +0 -206
  589. package/web/ui/src/routes/GroupDetail.tsx +0 -880
  590. package/web/ui/src/routes/GroupList.tsx +0 -187
  591. package/web/ui/src/routes/MessagingGroupDetail.test.tsx +0 -233
  592. package/web/ui/src/routes/MessagingGroupDetail.tsx +0 -306
  593. package/web/ui/src/routes/NewGroupWizard.tsx +0 -390
  594. package/web/ui/src/routes/OAuthCallback.tsx +0 -56
  595. package/web/ui/src/routes/SecretsList.tsx +0 -942
  596. package/web/ui/src/routes/SessionsList.tsx +0 -220
  597. package/web/ui/src/routes/SettingsAgentProvider.tsx +0 -109
  598. package/web/ui/src/routes/SettingsApprovals.tsx +0 -234
  599. package/web/ui/src/routes/SetupWizard.tsx +0 -219
  600. package/web/ui/src/routes/VaultDetail.test.tsx +0 -363
  601. package/web/ui/src/routes/VaultDetail.tsx +0 -960
  602. package/web/ui/src/routes/VaultsList.tsx +0 -295
  603. package/web/ui/src/routes/WireChannelPage.tsx +0 -413
  604. package/web/ui/src/styles.css +0 -608
  605. package/web/ui/src/test/setup.ts +0 -23
  606. package/web/ui/src/vite-env.d.ts +0 -10
  607. package/web/ui/vite.config.ts +0 -34
  608. package/web/ui/vitest.config.ts +0 -25
@@ -1,374 +0,0 @@
1
- #!/usr/bin/env python3
2
- """
3
- claw — NanoClaw CLI
4
- Run a NanoClaw agent container from the command line.
5
-
6
- Usage:
7
- claw "What is 2+2?"
8
- claw -g <channel_name> "Review this code"
9
- claw -g "<channel name with spaces>" "What's the latest issue?"
10
- claw -j "<chatJid>" "Hello"
11
- claw -g <channel_name> -s <session-id> "Continue"
12
- claw --list-groups
13
- echo "prompt text" | claw --pipe -g <channel_name>
14
- cat prompt.txt | claw --pipe
15
- """
16
-
17
- from __future__ import annotations
18
-
19
- import argparse
20
- import json
21
- import os
22
- import re
23
- import sqlite3
24
- import subprocess
25
- import sys
26
- import threading
27
- from pathlib import Path
28
-
29
- # ── Globals ─────────────────────────────────────────────────────────────────
30
-
31
- VERBOSE = False
32
-
33
- def dbg(*args):
34
- if VERBOSE:
35
- print("»", *args, file=sys.stderr)
36
-
37
- # ── Config ──────────────────────────────────────────────────────────────────
38
-
39
- def _find_nanoclaw_dir() -> Path:
40
- """Locate the NanoClaw installation directory.
41
-
42
- Resolution order:
43
- 1. NANOCLAW_DIR env var
44
- 2. The directory containing this script (if it looks like a NanoClaw install)
45
- 3. ~/src/nanoclaw (legacy default)
46
- """
47
- if env := os.environ.get("NANOCLAW_DIR"):
48
- return Path(env).expanduser()
49
- # If this script lives inside the NanoClaw tree (e.g. scripts/claw), walk up
50
- here = Path(__file__).resolve()
51
- for parent in [here.parent, here.parent.parent]:
52
- if (parent / "store" / "messages.db").exists() or (parent / ".env").exists():
53
- return parent
54
- return Path.home() / "src" / "nanoclaw"
55
-
56
- NANOCLAW_DIR = _find_nanoclaw_dir()
57
- DB_PATH = NANOCLAW_DIR / "store" / "messages.db"
58
- ENV_FILE = NANOCLAW_DIR / ".env"
59
- IMAGE = "nanoclaw-agent:latest"
60
-
61
- SECRET_KEYS = [
62
- "CLAUDE_CODE_OAUTH_TOKEN",
63
- "ANTHROPIC_API_KEY",
64
- "ANTHROPIC_BASE_URL",
65
- "ANTHROPIC_AUTH_TOKEN",
66
- "OLLAMA_HOST",
67
- ]
68
-
69
- # ── Helpers ──────────────────────────────────────────────────────────────────
70
-
71
- def detect_runtime(preference: str | None) -> str:
72
- if preference:
73
- dbg(f"runtime: forced to {preference}")
74
- return preference
75
- for rt in ("container", "docker"):
76
- result = subprocess.run(["which", rt], capture_output=True)
77
- if result.returncode == 0:
78
- dbg(f"runtime: auto-detected {rt} at {result.stdout.decode().strip()}")
79
- return rt
80
- sys.exit("error: neither 'container' nor 'docker' found. Install one or pass --runtime.")
81
-
82
-
83
- def read_secrets(env_file: Path) -> dict:
84
- secrets = {}
85
- if not env_file.exists():
86
- return secrets
87
- for line in env_file.read_text().splitlines():
88
- line = line.strip()
89
- if not line or line.startswith("#"):
90
- continue
91
- if "=" in line:
92
- key, _, val = line.partition("=")
93
- key = key.strip()
94
- if key in SECRET_KEYS:
95
- secrets[key] = val.strip()
96
- return secrets
97
-
98
-
99
- def get_groups(db: Path) -> list[dict]:
100
- conn = sqlite3.connect(db)
101
- rows = conn.execute(
102
- "SELECT jid, name, folder, is_main FROM registered_groups ORDER BY name"
103
- ).fetchall()
104
- conn.close()
105
- return [{"jid": r[0], "name": r[1], "folder": r[2], "is_main": bool(r[3])} for r in rows]
106
-
107
-
108
- def find_group(groups: list[dict], query: str) -> dict | None:
109
- q = query.lower()
110
- # Exact name match
111
- for g in groups:
112
- if g["name"].lower() == q or g["folder"].lower() == q:
113
- return g
114
- # Partial match
115
- matches = [g for g in groups if q in g["name"].lower() or q in g["folder"].lower()]
116
- if len(matches) == 1:
117
- return matches[0]
118
- if len(matches) > 1:
119
- names = ", ".join(f'"{g["name"]}"' for g in matches)
120
- sys.exit(f"error: ambiguous group '{query}'. Matches: {names}")
121
- return None
122
-
123
-
124
- def build_mounts(folder: str, is_main: bool) -> list[tuple[str, str, bool]]:
125
- """Return list of (host_path, container_path, readonly) tuples."""
126
- groups_dir = NANOCLAW_DIR / "groups"
127
- data_dir = NANOCLAW_DIR / "data"
128
- sessions_dir = data_dir / "sessions" / folder
129
- ipc_dir = data_dir / "ipc" / folder
130
-
131
- # Ensure required dirs exist
132
- group_dir = groups_dir / folder
133
- group_dir.mkdir(parents=True, exist_ok=True)
134
- (sessions_dir / ".claude").mkdir(parents=True, exist_ok=True)
135
- for sub in ("messages", "tasks", "input"):
136
- (ipc_dir / sub).mkdir(parents=True, exist_ok=True)
137
-
138
- agent_runner_src = sessions_dir / "agent-runner-src"
139
- project_agent_runner = NANOCLAW_DIR / "container" / "agent-runner" / "src"
140
- if not agent_runner_src.exists() and project_agent_runner.exists():
141
- import shutil
142
- shutil.copytree(project_agent_runner, agent_runner_src)
143
-
144
- mounts: list[tuple[str, str, bool]] = []
145
- if is_main:
146
- mounts.append((str(NANOCLAW_DIR), "/workspace/project", True))
147
- mounts.append((str(group_dir), "/workspace/group", False))
148
- mounts.append((str(sessions_dir / ".claude"), "/home/node/.claude", False))
149
- mounts.append((str(ipc_dir), "/workspace/ipc", False))
150
- if agent_runner_src.exists():
151
- mounts.append((str(agent_runner_src), "/app/src", False))
152
- return mounts
153
-
154
-
155
- def run_container(runtime: str, image: str, payload: dict,
156
- folder: str | None = None, is_main: bool = False,
157
- timeout: int = 300) -> None:
158
- cmd = [runtime, "run", "-i", "--rm"]
159
- if folder:
160
- for host, container, readonly in build_mounts(folder, is_main):
161
- if readonly:
162
- cmd += ["--mount", f"type=bind,source={host},target={container},readonly"]
163
- else:
164
- cmd += ["-v", f"{host}:{container}"]
165
- cmd.append(image)
166
- dbg(f"cmd: {' '.join(cmd)}")
167
-
168
- # Show payload sans secrets
169
- if VERBOSE:
170
- safe = {k: v for k, v in payload.items() if k != "secrets"}
171
- safe["secrets"] = {k: "***" for k in payload.get("secrets", {})}
172
- dbg(f"payload: {json.dumps(safe, indent=2)}")
173
-
174
- proc = subprocess.Popen(
175
- cmd,
176
- stdin=subprocess.PIPE,
177
- stdout=subprocess.PIPE,
178
- stderr=subprocess.PIPE,
179
- )
180
- dbg(f"container pid: {proc.pid}")
181
-
182
- # Write JSON payload and close stdin
183
- proc.stdin.write(json.dumps(payload).encode())
184
- proc.stdin.close()
185
- dbg("stdin closed, waiting for response...")
186
-
187
- stdout_lines: list[str] = []
188
- stderr_lines: list[str] = []
189
- done = threading.Event()
190
-
191
- def stream_stderr():
192
- for raw in proc.stderr:
193
- line = raw.decode(errors="replace").rstrip()
194
- if line.startswith("npm notice"):
195
- continue
196
- stderr_lines.append(line)
197
- print(line, file=sys.stderr)
198
-
199
- def stream_stdout():
200
- for raw in proc.stdout:
201
- line = raw.decode(errors="replace").rstrip()
202
- stdout_lines.append(line)
203
- dbg(f"stdout: {line}")
204
- # Kill the container as soon as we see the closing sentinel —
205
- # the Node.js event loop often keeps the process alive indefinitely.
206
- if line.strip() == "---NANOCLAW_OUTPUT_END---":
207
- dbg("output sentinel found, terminating container")
208
- done.set()
209
- try:
210
- proc.terminate()
211
- try:
212
- proc.wait(timeout=5)
213
- except subprocess.TimeoutExpired:
214
- dbg("graceful stop timed out, force killing container")
215
- proc.kill()
216
- except ProcessLookupError:
217
- pass
218
- return
219
-
220
- t_err = threading.Thread(target=stream_stderr, daemon=True)
221
- t_out = threading.Thread(target=stream_stdout, daemon=True)
222
- t_err.start()
223
- t_out.start()
224
-
225
- # Wait for sentinel or timeout
226
- if not done.wait(timeout=timeout):
227
- # Also check if process exited naturally
228
- t_out.join(timeout=2)
229
- if not done.is_set():
230
- proc.kill()
231
- sys.exit(f"error: container timed out after {timeout}s (no output sentinel received)")
232
-
233
- t_err.join(timeout=5)
234
- t_out.join(timeout=5)
235
- proc.wait()
236
- dbg(f"container done (rc={proc.returncode}), {len(stdout_lines)} stdout lines")
237
- stdout = "\n".join(stdout_lines)
238
-
239
- # Parse output block
240
- match = re.search(
241
- r"---NANOCLAW_OUTPUT_START---\n(.*?)\n---NANOCLAW_OUTPUT_END---",
242
- stdout,
243
- re.DOTALL,
244
- )
245
- success = False
246
-
247
- if match:
248
- try:
249
- data = json.loads(match.group(1))
250
- status = data.get("status", "unknown")
251
- if status == "success":
252
- print(data.get("result", ""))
253
- session_id = data.get("newSessionId") or data.get("sessionId")
254
- if session_id:
255
- print(f"\n[session: {session_id}]", file=sys.stderr)
256
- success = True
257
- else:
258
- print(f"[{status}] {data.get('result', '')}", file=sys.stderr)
259
- sys.exit(1)
260
- except json.JSONDecodeError:
261
- print(match.group(1))
262
- else:
263
- # No structured output — print raw stdout
264
- print(stdout)
265
-
266
- if success:
267
- return
268
-
269
- if proc.returncode not in (0, None):
270
- sys.exit(proc.returncode)
271
-
272
-
273
- # ── Main ─────────────────────────────────────────────────────────────────────
274
-
275
- def main():
276
- parser = argparse.ArgumentParser(
277
- prog="claw",
278
- description="Run a NanoClaw agent from the command line.",
279
- )
280
- parser.add_argument("prompt", nargs="?", help="Prompt to send")
281
- parser.add_argument("-g", "--group", help="Group name or folder (fuzzy match)")
282
- parser.add_argument("-j", "--jid", help="Chat JID (exact)")
283
- parser.add_argument("-s", "--session", help="Session ID to resume")
284
- parser.add_argument("-p", "--pipe", action="store_true",
285
- help="Read prompt from stdin (can be combined with a prompt arg as prefix)")
286
- parser.add_argument("--runtime", choices=["docker", "container"],
287
- help="Container runtime (default: auto-detect)")
288
- parser.add_argument("--image", default=IMAGE, help=f"Container image (default: {IMAGE})")
289
- parser.add_argument("--list-groups", action="store_true", help="List registered groups and exit")
290
- parser.add_argument("--raw", action="store_true", help="Print raw JSON output")
291
- parser.add_argument("--timeout", type=int, default=300, metavar="SECS",
292
- help="Max seconds to wait for a response (default: 300)")
293
- parser.add_argument("-v", "--verbose", action="store_true",
294
- help="Show debug info: cmd, payload (secrets redacted), stdout lines, exit code")
295
- args = parser.parse_args()
296
-
297
- global VERBOSE
298
- VERBOSE = args.verbose
299
-
300
- groups = get_groups(DB_PATH) if DB_PATH.exists() else []
301
-
302
- if args.list_groups:
303
- print(f"{'NAME':<35} {'FOLDER':<30} {'JID'}")
304
- print("-" * 100)
305
- for g in groups:
306
- main_tag = " [main]" if g["is_main"] else ""
307
- print(f"{g['name']:<35} {g['folder']:<30} {g['jid']}{main_tag}")
308
- return
309
-
310
- # Resolve prompt: --pipe reads stdin, optionally prepended with positional arg
311
- if args.pipe or (not sys.stdin.isatty() and not args.prompt):
312
- stdin_text = sys.stdin.read().strip()
313
- if args.prompt:
314
- prompt = f"{args.prompt}\n\n{stdin_text}"
315
- else:
316
- prompt = stdin_text
317
- else:
318
- prompt = args.prompt
319
-
320
- if not prompt:
321
- parser.print_help()
322
- sys.exit(1)
323
-
324
- # Resolve group → jid
325
- jid = args.jid
326
- group_name = None
327
- group_folder = None
328
- is_main = False
329
-
330
- if args.group:
331
- g = find_group(groups, args.group)
332
- if g is None:
333
- sys.exit(f"error: group '{args.group}' not found. Run --list-groups to see options.")
334
- jid = g["jid"]
335
- group_name = g["name"]
336
- group_folder = g["folder"]
337
- is_main = g["is_main"]
338
- elif not jid:
339
- # Default: main group
340
- mains = [g for g in groups if g["is_main"]]
341
- if mains:
342
- jid = mains[0]["jid"]
343
- group_name = mains[0]["name"]
344
- group_folder = mains[0]["folder"]
345
- is_main = True
346
- else:
347
- sys.exit("error: no group specified and no main group found. Use -g or -j.")
348
-
349
- runtime = detect_runtime(args.runtime)
350
- secrets = read_secrets(ENV_FILE)
351
-
352
- if not secrets:
353
- print("warning: no secrets found in .env — agent may not be authenticated", file=sys.stderr)
354
-
355
- payload: dict = {
356
- "prompt": prompt,
357
- "chatJid": jid,
358
- "isMain": is_main,
359
- "secrets": secrets,
360
- }
361
- if group_name:
362
- payload["groupFolder"] = group_name
363
- if args.session:
364
- payload["sessionId"] = args.session
365
- payload["resumeAt"] = "latest"
366
-
367
- print(f"[{group_name or jid}] running via {runtime}...", file=sys.stderr)
368
- run_container(runtime, args.image, payload,
369
- folder=group_folder, is_main=is_main,
370
- timeout=args.timeout)
371
-
372
-
373
- if __name__ == "__main__":
374
- main()
@@ -1,212 +0,0 @@
1
- ---
2
- name: convert-to-apple-container
3
- description: Switch from Docker to Apple Container for macOS-native container isolation. Use when the user wants Apple Container instead of Docker, or is setting up on macOS and prefers the native runtime. Triggers on "apple container", "convert to apple container", "switch to apple container", or "use apple container".
4
- ---
5
-
6
- # Convert to Apple Container
7
-
8
- This skill switches NanoClaw's container runtime from Docker to Apple Container (macOS-only). It uses the skills engine for deterministic code changes, then walks through verification.
9
-
10
- **What this changes:**
11
- - Container runtime binary: `docker` → `container`
12
- - Mount syntax: `-v path:path:ro` → `--mount type=bind,source=...,target=...,readonly`
13
- - Startup check: `docker info` → `container system status` (with auto-start)
14
- - Orphan detection: `docker ps --filter` → `container ls --format json`
15
- - Build script default: `docker` → `container`
16
- - Dockerfile entrypoint: `.env` shadowing via `mount --bind` inside the container (Apple Container only supports directory mounts, not file mounts like Docker's `/dev/null` overlay)
17
- - Container runner: main-group containers start as root for `mount --bind`, then drop privileges via `setpriv`
18
-
19
- **What stays the same:**
20
- - Mount security/allowlist validation
21
- - All exported interfaces and IPC protocol
22
- - Non-main container behavior (still uses `--user` flag)
23
- - All other functionality
24
-
25
- ## Prerequisites
26
-
27
- Verify Apple Container is installed:
28
-
29
- ```bash
30
- container --version && echo "Apple Container ready" || echo "Install Apple Container first"
31
- ```
32
-
33
- If not installed:
34
- - Download from https://github.com/apple/container/releases
35
- - Install the `.pkg` file
36
- - Verify: `container --version`
37
-
38
- Apple Container requires macOS. It does not work on Linux.
39
-
40
- ## Phase 1: Pre-flight
41
-
42
- ### Check if already applied
43
-
44
- ```bash
45
- grep "CONTAINER_RUNTIME_BIN" src/container-runtime.ts
46
- ```
47
-
48
- If it already shows `'container'`, the runtime is already Apple Container. Skip to Phase 4.
49
-
50
- ## Phase 2: Apply Code Changes
51
-
52
- ### Ensure upstream remote
53
-
54
- ```bash
55
- git remote -v
56
- ```
57
-
58
- If `upstream` is missing, add it:
59
-
60
- ```bash
61
- git remote add upstream https://github.com/qwibitai/nanoclaw.git
62
- ```
63
-
64
- ### Merge the skill branch
65
-
66
- ```bash
67
- git fetch upstream skill/apple-container
68
- git merge upstream/skill/apple-container
69
- ```
70
-
71
- This merges in:
72
- - `src/container-runtime.ts` — Apple Container implementation (replaces Docker)
73
- - `src/container-runtime.test.ts` — Apple Container-specific tests
74
- - `src/container-runner.ts` — .env shadow mount fix and privilege dropping
75
- - `container/Dockerfile` — entrypoint that shadows .env via `mount --bind`
76
- - `container/build.sh` — default runtime set to `container`
77
-
78
- If the merge reports conflicts, resolve them by reading the conflicted files and understanding the intent of both sides.
79
-
80
- ### Validate code changes
81
-
82
- ```bash
83
- pnpm test
84
- pnpm run build
85
- ```
86
-
87
- All tests must pass and build must be clean before proceeding.
88
-
89
- ## Phase 3: Credential proxy network binding
90
-
91
- Apple Container uses a bridge network (bridge100) that only exists while containers are running. The credential proxy must start before any container, so it cannot bind to the bridge IP. It must bind to `0.0.0.0`, which exposes port 3001 on all network interfaces — anyone on your local network could route API requests through the proxy using your credentials.
92
-
93
- Use AskUserQuestion to ask the user:
94
-
95
- **"The credential proxy needs to bind to all interfaces (0.0.0.0). Is this Mac on a trusted private network?"**
96
-
97
- Options:
98
- 1. **Yes, private/home network** — description: "No firewall rule needed."
99
- 2. **No, shared/public network** — description: "Add a macOS firewall rule to block external access to port 3001."
100
-
101
- For both options, add `CREDENTIAL_PROXY_HOST=0.0.0.0` to `.env`:
102
-
103
- ```bash
104
- grep -q 'CREDENTIAL_PROXY_HOST' .env 2>/dev/null || echo 'CREDENTIAL_PROXY_HOST=0.0.0.0' >> .env
105
- ```
106
-
107
- If they chose the public network option, set up and persist the firewall rule:
108
-
109
- ```bash
110
- echo "block in on en0 proto tcp to any port 3001" | sudo pfctl -ef -
111
- ```
112
-
113
- ```bash
114
- grep -q 'nanoclaw proxy' /etc/pf.conf 2>/dev/null || echo '# nanoclaw proxy — block LAN access to credential proxy
115
- block in on en0 proto tcp to any port 3001' | sudo tee -a /etc/pf.conf > /dev/null
116
- ```
117
-
118
- Verify the rule is working:
119
-
120
- ```bash
121
- curl -sf http://$(ipconfig getifaddr en0):3001 && echo "EXPOSED — rule not working" || echo "BLOCKED — rule active"
122
- ```
123
-
124
- If the verification shows "EXPOSED", warn the user and retry. If "BLOCKED", confirm success and continue.
125
-
126
- ## Phase 4: Verify
127
-
128
- ### Ensure Apple Container runtime is running
129
-
130
- ```bash
131
- container system status || container system start
132
- ```
133
-
134
- ### Build the container image
135
-
136
- ```bash
137
- ./container/build.sh
138
- ```
139
-
140
- ### Test basic execution
141
-
142
- ```bash
143
- echo '{}' | container run -i --entrypoint /bin/echo nanoclaw-agent:latest "Container OK"
144
- ```
145
-
146
- ### Test readonly mounts
147
-
148
- ```bash
149
- mkdir -p /tmp/test-ro && echo "test" > /tmp/test-ro/file.txt
150
- container run --rm --entrypoint /bin/bash \
151
- --mount type=bind,source=/tmp/test-ro,target=/test,readonly \
152
- nanoclaw-agent:latest \
153
- -c "cat /test/file.txt && touch /test/new.txt 2>&1 || echo 'Write blocked (expected)'"
154
- rm -rf /tmp/test-ro
155
- ```
156
-
157
- Expected: Read succeeds, write fails with "Read-only file system".
158
-
159
- ### Test read-write mounts
160
-
161
- ```bash
162
- mkdir -p /tmp/test-rw
163
- container run --rm --entrypoint /bin/bash \
164
- -v /tmp/test-rw:/test \
165
- nanoclaw-agent:latest \
166
- -c "echo 'test write' > /test/new.txt && cat /test/new.txt"
167
- cat /tmp/test-rw/new.txt && rm -rf /tmp/test-rw
168
- ```
169
-
170
- Expected: Both operations succeed.
171
-
172
- ### Full integration test
173
-
174
- ```bash
175
- pnpm run build
176
- launchctl kickstart -k gui/$(id -u)/com.nanoclaw
177
- ```
178
-
179
- Send a message via WhatsApp and verify the agent responds.
180
-
181
- ## Troubleshooting
182
-
183
- **Apple Container not found:**
184
- - Download from https://github.com/apple/container/releases
185
- - Install the `.pkg` file
186
- - Verify: `container --version`
187
-
188
- **Runtime won't start:**
189
- ```bash
190
- container system start
191
- container system status
192
- ```
193
-
194
- **Image build fails:**
195
- ```bash
196
- # Clean rebuild — Apple Container caches aggressively
197
- container builder stop && container builder rm && container builder start
198
- ./container/build.sh
199
- ```
200
-
201
- **Container can't write to mounted directories:**
202
- Check directory permissions on the host. The container runs as uid 1000.
203
-
204
- ## Summary of Changed Files
205
-
206
- | File | Type of Change |
207
- |------|----------------|
208
- | `src/container-runtime.ts` | Full replacement — Docker → Apple Container API |
209
- | `src/container-runtime.test.ts` | Full replacement — tests for Apple Container behavior |
210
- | `src/container-runner.ts` | .env shadow mount removed, main containers start as root with privilege drop |
211
- | `container/Dockerfile` | Entrypoint: `mount --bind` for .env shadowing, `setpriv` privilege drop |
212
- | `container/build.sh` | Default runtime: `docker` → `container` |
@@ -1,110 +0,0 @@
1
- ---
2
- name: customize
3
- description: Add new capabilities or modify NanoClaw behavior. Use when user wants to add channels (Telegram, Slack, email input), change triggers, add integrations, modify the router, or make any other customizations. This is an interactive skill that asks questions to understand what the user wants.
4
- ---
5
-
6
- # NanoClaw Customization
7
-
8
- This skill helps users add capabilities or modify behavior. Use AskUserQuestion to understand what they want before making changes.
9
-
10
- ## Workflow
11
-
12
- 1. **Understand the request** - Ask clarifying questions
13
- 3. **Plan the changes** - Identify files to modify. If a skill exists for the request (e.g., `/add-telegram` for adding Telegram), invoke it instead of implementing manually.
14
- 4. **Implement** - Make changes directly to the code
15
- 5. **Test guidance** - Tell user how to verify
16
-
17
- ## Key Files
18
-
19
- | File | Purpose |
20
- |------|---------|
21
- | `src/index.ts` | Orchestrator: state, message loop, agent invocation |
22
- | `src/channels/whatsapp.ts` | WhatsApp connection, auth, send/receive |
23
- | `src/ipc.ts` | IPC watcher and task processing |
24
- | `src/router.ts` | Message formatting and outbound routing |
25
- | `src/types.ts` | TypeScript interfaces (includes Channel) |
26
- | `src/config.ts` | Assistant name, trigger pattern, directories |
27
- | `src/db.ts` | Database initialization and queries |
28
- | `src/whatsapp-auth.ts` | Standalone WhatsApp authentication script |
29
- | `groups/CLAUDE.md` | Global memory/persona |
30
-
31
- ## Common Customization Patterns
32
-
33
- ### Adding a New Input Channel (e.g., Telegram, Slack, Email)
34
-
35
- Questions to ask:
36
- - Which channel? (Telegram, Slack, Discord, email, SMS, etc.)
37
- - Same trigger word or different?
38
- - Same memory hierarchy or separate?
39
- - Should messages from this channel go to existing groups or new ones?
40
-
41
- Implementation pattern:
42
- 1. Create `src/channels/{name}.ts` implementing the `Channel` interface from `src/types.ts` (see `src/channels/whatsapp.ts` for reference)
43
- 2. Add the channel instance to `main()` in `src/index.ts` and wire callbacks (`onMessage`, `onChatMetadata`)
44
- 3. Messages are stored via the `onMessage` callback; routing is automatic via `ownsJid()`
45
-
46
- ### Adding a New MCP Integration
47
-
48
- Questions to ask:
49
- - What service? (Calendar, Notion, database, etc.)
50
- - What operations needed? (read, write, both)
51
- - Which groups should have access?
52
-
53
- Implementation:
54
- 1. Add MCP server config to the container settings (see `src/container-runner.ts` for how MCP servers are mounted)
55
- 2. Document available tools in `groups/CLAUDE.md`
56
-
57
- ### Changing Assistant Behavior
58
-
59
- Questions to ask:
60
- - What aspect? (name, trigger, persona, response style)
61
- - Apply to all groups or specific ones?
62
-
63
- Simple changes → edit `src/config.ts`
64
- Persona changes → edit `groups/CLAUDE.md`
65
- Per-group behavior → edit specific group's `CLAUDE.md`
66
-
67
- ### Adding New Commands
68
-
69
- Questions to ask:
70
- - What should the command do?
71
- - Available in all groups or main only?
72
- - Does it need new MCP tools?
73
-
74
- Implementation:
75
- 1. Commands are handled by the agent naturally — add instructions to `groups/CLAUDE.md` or the group's `CLAUDE.md`
76
- 2. For trigger-level routing changes, modify `processGroupMessages()` in `src/index.ts`
77
-
78
- ### Changing Deployment
79
-
80
- Questions to ask:
81
- - Target platform? (Linux server, Docker, different Mac)
82
- - Service manager? (systemd, Docker, supervisord)
83
-
84
- Implementation:
85
- 1. Create appropriate service files
86
- 2. Update paths in config
87
- 3. Provide setup instructions
88
-
89
- ## After Changes
90
-
91
- Always tell the user:
92
- ```bash
93
- # Rebuild and restart
94
- pnpm run build
95
- # macOS:
96
- launchctl unload ~/Library/LaunchAgents/com.nanoclaw.plist
97
- launchctl load ~/Library/LaunchAgents/com.nanoclaw.plist
98
- # Linux:
99
- # systemctl --user restart nanoclaw
100
- ```
101
-
102
- ## Example Interaction
103
-
104
- User: "Add Telegram as an input channel"
105
-
106
- 1. Ask: "Should Telegram use the same @Andy trigger, or a different one?"
107
- 2. Ask: "Should Telegram messages create separate conversation contexts, or share with WhatsApp groups?"
108
- 3. Create `src/channels/telegram.ts` implementing the `Channel` interface (see `src/channels/whatsapp.ts`)
109
- 4. Add the channel to `main()` in `src/index.ts`
110
- 5. Tell user how to authenticate and test