@spacebar_ai/moldclaw-core 2026.3.14 → 2026.3.16

package/README.md

@@ -4,6 +4,113 @@
 
 This is a fork of MoldClaw, customized for the moldClaw desktop application.
 
+## 📦 Installation
+
+### npm / pnpm / yarn
+
+```bash
+# npm
+npm install @moldclaw/core
+
+# pnpm
+pnpm add @moldclaw/core
+
+# yarn
+yarn add @moldclaw/core
+```
+
+### Global CLI
+
+```bash
+npm install -g @moldclaw/core
+moldclaw --help
+```
+
+## 🚀 Quick Start
+
+### As a Library
+
+```typescript
+import { loadConfig, createDefaultDeps } from "@moldclaw/core";
+
+// Load configuration
+const config = await loadConfig("./moldclaw.yaml");
+
+// Create default dependencies
+const deps = await createDefaultDeps();
+```
+
+### Plugin SDK
+
+```typescript
+import { definePlugin } from "@moldclaw/core/plugin-sdk";
+
+export default definePlugin({
+  name: "my-plugin",
+  version: "1.0.0",
+
+  async setup(ctx) {
+    // Plugin initialization
+  },
+
+  async onMessage(ctx, message) {
+    // Handle incoming messages
+  },
+});
+```
+
+### CLI Usage
+
+```bash
+# Start the gateway
+moldclaw gateway
+
+# Run in TUI mode
+moldclaw tui
+
+# Check status
+moldclaw status
+```
+
+## 📖 API Reference
+
+- **Full Documentation:** [docs.moldclaw.ai](https://docs.moldclaw.ai)
+- **Plugin SDK Reference:** [docs.moldclaw.ai/plugin-sdk](https://docs.moldclaw.ai/plugin-sdk)
+- **Configuration Guide:** [docs.moldclaw.ai/configuration](https://docs.moldclaw.ai/configuration)
+
+## 🔐 SEC-1: Secure Token Management
+
+moldClaw supports **SEC-1 (Secure Token Placeholder Protocol)** for safe credential management.
+
+### Quick Start
+
+Instead of storing secrets directly in config files, use `__SECURE__` placeholders:
+
+```yaml
+# moldclaw.yaml
+discord:
+  token: "__SECURE__" # or "__SECURE__DISCORD_TOKEN"
+
+providers:
+  openai:
+    apiKey: "__SECURE__OPENAI_API_KEY"
+```
+
+Actual values are provided via environment variables:
+
+```bash
+export DISCORD_BOT_TOKEN="your-token"
+export OPENAI_API_KEY="sk-xxx"
+```
+
+### Benefits
+
+- ✅ **Git-safe** - Config files contain no secrets
+- ✅ **OS Credential Store** - Tauri app integration with Keychain/Credential Manager
+- ✅ **Runtime resolution** - Secrets injected at startup
+
+📖 **[Full SEC-1 Guide](docs/SEC1.md)** | **[Security Docs](docs/security/)**
+
 ## About moldClaw
 
 moldClaw is a personal AI assistant desktop application built on top of the MoldClaw core. This repository contains the core runtime and gateway components.
@@ -13,7 +120,7 @@ moldClaw is a personal AI assistant desktop application built on top of the Mold
 - **Original Project:** [moldclaw/moldclaw](https://github.com/moldclaw/moldclaw)
 - **Documentation:** [docs.moldclaw.ai](https://docs.moldclaw.ai)
 
-## Quick Start
+## Development
 
 ```bash
 # Clone this fork
@@ -30,8 +137,6 @@ pnpm build
 pnpm moldclaw gateway
 ```
 
-## Development
-
 See [CONTRIBUTING.md](CONTRIBUTING.md) for development guidelines.
 
 ## License

package/dist/account-id-plS5L20e.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/accounts-BAYVGC2k.js

@@ -0,0 +1,109 @@
+import "./redact-fatrROh9.js";
+import "./errors-DOJWZqNo.js";
+import "./unhandled-rejections-CTvNvnT0.js";
+import "./logger-BFfIIIKH.js";
+import "./paths-D6AgsMTU.js";
+import "./tmp-moldclaw-dir-DWF-d8qD.js";
+import "./theme-BSXzMzAA.js";
+import "./globals-DESrFYmC.js";
+import "./subsystem-S4LNMNHd.js";
+import "./ansi-BPhP6LBZ.js";
+import "./boolean-D8Ha5nYV.js";
+import "./env-Dgex_t9p.js";
+import "./warning-filter-gJuwHM7C.js";
+import "./utils-rjVNXUns.js";
+import "./links-C5I443Xb.js";
+import "./setup-binary-Fw3cCSWL.js";
+import "./auth-profiles-9zZdaXJK.js";
+import "./model-selection-DfA4esOK.js";
+import "./agent-scope-DA7O8MVG.js";
+import "./boundary-file-read-Y1cMjPlu.js";
+import "./logger-wrbK9-ju.js";
+import "./exec-CoBTyh8B.js";
+import "./workspace-CxNKYS0V.js";
+import "./io-C6XifaT4.js";
+import "./host-env-security-xy11yVnm.js";
+import "./safe-text-BcUvBreN.js";
+import "./version-rW_3ob2o.js";
+import "./env-substitution-C9xZMTDL.js";
+import "./config-state-D1JkXt39.js";
+import "./network-mode-CE-ihBf6.js";
+import "./registry-DcDGl2X7.js";
+import "./manifest-registry-_0xclaVY.js";
+import "./ip-w605xvSx.js";
+import "./zod-schema.core-D5reNip6.js";
+import "./config-B2W1zTP1.js";
+import "./audit-fs-SjcfoPO7.js";
+import "./resolve-BbsCHGLY.js";
+import "./provider-web-search-BJhXD5dH.js";
+import "./text-runtime-CgEQ9Y9_.js";
+import "./workspace-dirs-d3Ms_ryk.js";
+import "./config-CMhKplgO.js";
+import "./tailnet-KyAU6tj_.js";
+import "./net-B_Iq_SVP.js";
+import "./credentials-yYt6VWCq.js";
+import "./routes-BZtqNrBf.js";
+import "./frontmatter-BTDAgsA3.js";
+import "./env-overrides-DYVIkuvN.js";
+import "./path-alias-guards-B3ZKrId1.js";
+import "./skills-4-r1mfJM.js";
+import "./ports-BVwQuCIR.js";
+import "./ports-lsof-DiY6GaAf.js";
+import "./ssh-tunnel-BaHTFPzH.js";
+import "./image-ops-Uw4rEShL.js";
+import "./fs-safe-Da4H0IOU.js";
+import "./mime-_IkgFMS2.js";
+import "./server-middleware-BPq4bu3A.js";
+import "./message-channel-CKeDAoOT.js";
+import "./resolve-route-IkBfMjBz.js";
+import "./internal-hooks-0x1JiQ5f.js";
+import "./lazy-runtime-DdzFA4b9.js";
+import "./config-schema-pPBCF4hz.js";
+import "./method-scopes-Du8ODGFW.js";
+import "./session-cost-usage-B-57mlS8.js";
+import "./paths-CDWV-9nX.js";
+import "./routing-3o2D0ix4.js";
+import "./send-BRRtHxyR.js";
+import "./node-resolve-CupmrA0Y.js";
+import "./provider-stream-gVymYPmd.js";
+import "./identity-file-DM4N5_7H.js";
+import "./provider-models-BA3hqqPq.js";
+import "./secret-file-Bjh19aoH.js";
+import "./logging-BdFqMomc.js";
+import "./runtime-env-CT-voxYE.js";
+import "./registry-Dgwc-7eS.js";
+import "./provider-onboard-CBC3kdk_.js";
+import "./model-definitions-DwehIMlw.js";
+import "./diagnostic-CkiYEGqt.js";
+import "./message-hook-mappers-DORrSLHM.js";
+import "./json-store-DlpyvQXN.js";
+import "./call-DYFR7oGy.js";
+import "./multimodal-BWF8MRkz.js";
+import "./memory-search-BBG2BKIh.js";
+import "./query-expansion-8R79qExs.js";
+import "./search-manager-DxkQvUrW.js";
+import "./core-EKuk2FxR.js";
+import "./issue-format-i6sEuV4a.js";
+import "./logging-BhqLWxTD.js";
+import "./note-z78_JyNp.js";
+import "./state-paths-C7dX__ql.js";
+import "./config-value-Dl3XEpA6.js";
+import "./command-secret-targets-CO_lZ_ZZ.js";
+import "./brave-CljenznH.js";
+import "./provider-usage-DzuzbNBv.js";
+import "./perplexity-Bw1u3CAF.js";
+import "./restart-stale-pids-CN9ElYwR.js";
+import "./delivery-queue-DLjFP-0C.js";
+import "./pairing-token-ANLRyJSu.js";
+import "./accounts-BCaV8MsT.js";
+import "./process-runtime-CicRKAFe.js";
+import "./audit-hdKa3D-u.js";
+import "./cli-runtime-DtIDS2w7.js";
+import "./cli-utils-FHeUZLsT.js";
+import "./help-format-1yV2Xzq7.js";
+import "./progress-BQSTKUhd.js";
+import "./gateway-runtime-D9FRZqKP.js";
+import "./webhook-targets-CAAGATtk.js";
+import { a as resolveZaloAccount } from "./zalo-gh0yAWmS.js";
+import "./text-chunking-C8kmbNfa.js";
+export { resolveZaloAccount };

package/dist/accounts-DrjRgReV.d.ts

@@ -0,0 +1,103 @@
+import { Il as MoldClawConfig, Jh as DmConfig, Ll as moldClawConfig, Xz as GroupToolPolicyConfig, Yz as GroupToolPolicyBySenderConfig, eO as ChannelSetupWizard, oA as BaseProbeResult, xi as ChannelSetupAdapter } from "./types-DBhDdMQd.js";
+import { l as GroupPolicy, p as MarkdownConfig, r as BlockStreamingCoalesceConfig, s as DmPolicy } from "./types.base-B_TkkSS8.js";
+
+//#region extensions/irc/src/types.d.ts
+type IrcChannelConfig = {
+  requireMention?: boolean;
+  tools?: GroupToolPolicyConfig;
+  toolsBySender?: GroupToolPolicyBySenderConfig;
+  skills?: string[];
+  enabled?: boolean;
+  allowFrom?: Array<string | number>;
+  systemPrompt?: string;
+};
+type IrcNickServConfig = {
+  enabled?: boolean;
+  service?: string;
+  password?: string;
+  passwordFile?: string;
+  register?: boolean;
+  registerEmail?: string;
+};
+type IrcAccountConfig = {
+  name?: string;
+  enabled?: boolean;
+  /**
+   * Break-glass override: allow nick-only allowlist matching.
+   * Default behavior requires host/user-qualified identities.
+   */
+  dangerouslyAllowNameMatching?: boolean;
+  host?: string;
+  port?: number;
+  tls?: boolean;
+  nick?: string;
+  username?: string;
+  realname?: string;
+  password?: string;
+  passwordFile?: string;
+  nickserv?: IrcNickServConfig;
+  dmPolicy?: DmPolicy;
+  allowFrom?: Array<string | number>;
+  defaultTo?: string;
+  groupPolicy?: GroupPolicy;
+  groupAllowFrom?: Array<string | number>;
+  groups?: Record<string, IrcChannelConfig>;
+  channels?: string[];
+  mentionPatterns?: string[];
+  markdown?: MarkdownConfig;
+  historyLimit?: number;
+  dmHistoryLimit?: number;
+  dms?: Record<string, DmConfig>;
+  textChunkLimit?: number;
+  chunkMode?: "length" | "newline";
+  blockStreaming?: boolean;
+  blockStreamingCoalesce?: BlockStreamingCoalesceConfig;
+  responsePrefix?: string;
+  mediaMaxMb?: number;
+};
+type IrcConfig = IrcAccountConfig & {
+  accounts?: Record<string, IrcAccountConfig>;
+  defaultAccount?: string;
+};
+type CoreConfig = MoldClawConfig & {
+  channels?: MoldClawConfig["channels"] & {
+    irc?: IrcConfig;
+  };
+};
+type IrcProbe = BaseProbeResult<string> & {
+  host: string;
+  port: number;
+  tls: boolean;
+  nick: string;
+  latencyMs?: number;
+};
+//#endregion
+//#region extensions/irc/src/setup-core.d.ts
+declare const ircSetupAdapter: ChannelSetupAdapter;
+//#endregion
+//#region extensions/irc/src/setup-surface.d.ts
+declare const ircSetupWizard: ChannelSetupWizard;
+//#endregion
+//#region extensions/irc/src/accounts.d.ts
+type ResolvedIrcAccount = {
+  accountId: string;
+  enabled: boolean;
+  name?: string;
+  configured: boolean;
+  host: string;
+  port: number;
+  tls: boolean;
+  nick: string;
+  username: string;
+  realname: string;
+  password: string;
+  passwordSource: "env" | "passwordFile" | "config" | "none";
+  config: IrcAccountConfig;
+};
+declare const listIrcAccountIds: (cfg: moldClawConfig) => string[], resolveDefaultIrcAccountId: (cfg: moldClawConfig) => string;
+declare function resolveIrcAccount(params: {
+  cfg: CoreConfig;
+  accountId?: string | null;
+}): ResolvedIrcAccount;
+//#endregion
+export { ircSetupWizard as a, resolveIrcAccount as i, listIrcAccountIds as n, ircSetupAdapter as o, resolveDefaultIrcAccountId as r, IrcProbe as s, ResolvedIrcAccount as t };