Muse

Build a custom integration to DashClaw. Its MCP server URL is
https://your-dashclaw-instance.example.com/api/mcp
Use OAuth.

# One-time setup: hand the agent these three values through your
# runtime's secure channel (not chat).
DASHCLAW_BASE_URL=https://your-dashclaw-instance.example.com
DASHCLAW_API_KEY=oc_live_...
DASHCLAW_AGENT_ID=muse-main

git clone https://github.com/ucsandman/DashClaw.git
# Give your Muse agent this directory as a skill:
# DashClaw/plugins/dashclaw/skills/muse-governance/

import { DashClaw } from 'dashclaw';

const claw = new DashClaw({
  baseUrl: process.env.DASHCLAW_BASE_URL,
  apiKey: process.env.DASHCLAW_API_KEY,
  agentId: 'muse-main',
});

// 1. Guard — "may I?"
const decision = await claw.guard({
  action_type: 'deploy',
  declared_goal: 'Deploy v2.3.1 to staging after all tests passed',
  systems_touched: ['staging'],
  reversible: false,
  confidence: 80, // your honest pre-act odds of completing without human help
});

if (decision.decision === 'block') throw new Error('blocked: ' + decision.reason);
if (decision.decision === 'require_approval') {
  // 2-3. Record, then wait for the human in /approvals
  const action = await claw.recordAction({
    action_type: 'deploy',
    declared_goal: 'Deploy v2.3.1 to staging after all tests passed',
  });
  await claw.waitForApproval(action.action_id); // resolves on approve, throws on deny/expiry
}

// 4. Act — run the real effect with your own tools.
await deployToStaging('v2.3.1');

// 5. Outcome — completed, partial, or failed. One-shot: the first call wins.
await claw.recordOutcome(action.action_id, { status: 'completed' });

# One approval for a whole run, instead of one per action.
curl -s -X POST "https://your-dashclaw-instance.example.com/api/plans" \
  -H "Authorization: Bearer $DASHCLAW_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{
    "declared_goal": "Nightly deploy run for the API service",
    "ttl_minutes": 180,
    "steps": [
      {"action_type": "shell", "step_goal": "Run the test suite on build 402"},
      {"action_type": "deploy", "step_goal": "Deploy build 402 to staging",
       "act": {"target": "staging", "build": "402"}}
    ]
  }'

# The operator approves ONE card in /approvals. Then, at run start:
curl -s -X POST "https://your-dashclaw-instance.example.com/api/plans/<plan_id>/attest" \
  -H "Authorization: Bearer $DASHCLAW_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{"plan_hash": "<plan_hash from the submit response>"}'
# Any refusal (not_approved, expired, revoked, hash_mismatch) means STOP.