feat: agentmask + service discovery infrastructure

.claude/settings.json

@@ -13,5 +13,14 @@
   },
   "enabledPlugins": {
     "typescript-lsp@claude-plugins-official": true
+  },
+  "sandbox": {
+    "filesystem": {
+      "allowWrite": ["~/.yarn"]
+    },
+    "network": {
+      "allowedDomains": ["registry.yarnpkg.com", "registry.npmjs.org"],
+      "allowUnixSockets": ["/tmp/claude-*/tsx-*/*.pipe"]
+    }
   }
 }

.yarnrc.yml

@@ -6,6 +6,14 @@ enableScripts: false
 
 enableTelemetry: false
 
+# Route yarn's HTTP traffic through the shell's proxy when set.
+# The Claude Code sandbox sets HTTPS_PROXY to its local MITM proxy; yarn
+# doesn't pick up HTTPS_PROXY automatically, so surface it here.
+# Outside a sandbox, HTTPS_PROXY is typically unset and the `:-` default
+# resolves to an empty string, which yarn treats as "no proxy".
+httpProxy: '${HTTPS_PROXY:-}'
+httpsProxy: '${HTTPS_PROXY:-}'
+
 logFilters:
   - code: YN0004
     level: discard

packages/agentmask/CHANGELOG.md

@@ -0,0 +1,10 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+[Unreleased]: https://github.com/MetaMask/ocap-kernel/

packages/agentmask/README.md

@@ -0,0 +1,9 @@
+# `@ocap/agentmask`
+
+OpenClaw plugin for requesting and using MetaMask wallet capabilities via the OCAP kernel daemon.
+
+The primary artifact is the OpenClaw plugin in [`openclaw-plugin-metamask/`](./openclaw-plugin-metamask/). See its [README](./openclaw-plugin-metamask/README.md) for setup and usage instructions.
+
+## Contributing
+
+This package is part of a monorepo. Instructions for contributing can be found in the [monorepo README](https://github.com/MetaMask/ocap-kernel#readme).