@crossmint/openclaw-wallet 0.2.3 → 0.3.0

package/README.md

@@ -35,7 +35,7 @@ Enable the plugin in `~/.openclaw/.openclaw.json5`:
 }
 ```
 
-> **Note:** Currently only Solana devnet (staging) is supported. Mainnet support coming soon.
+> **Note:** This plugin uses Solana mainnet (production) for real transactions.
 
 ## Usage
 
@@ -53,7 +53,7 @@ The agent will:
 
 1. Open the delegation URL in your browser
 2. The web app will:
-   - Create a Crossmint smart wallet on Solana devnet
+   - Create a Crossmint smart wallet on Solana
    - Add the agent's public key as a delegated signer
    - Show you the **wallet address** and **API key**
 
@@ -98,7 +98,7 @@ Price: 0.05 SOL
 Order ID: order_abc123
 Payment: completed
 
-Transaction: https://explorer.solana.com/tx/5x...?cluster=devnet
+Transaction: https://explorer.solana.com/tx/5x...
 
 Use crossmint_order_status to check delivery status.
 ```
@@ -172,7 +172,7 @@ All steps are handled automatically by the plugin.
 ┌─────────────────────────────────────────────────────────────┐
 │                    Crossmint Smart Wallet                    │
 ├─────────────────────────────────────────────────────────────┤
-│  - Deployed on Solana (devnet)                              │
+│  - Deployed on Solana                                       │
 │  - Agent's address registered as delegated signer           │
 │  - User retains admin control                               │
 │  - Holds SOL/USDC for purchases and transfers               │
@@ -198,14 +198,14 @@ All steps are handled automatically by the plugin.
 - Run `crossmint_configure` with wallet address and API key from the web app
 
 **"Failed to get balance" or "Failed to send"**
-- Verify the API key is correct (should start with `ck_staging_`)
+- Verify the API key is correct (should start with `ck_production_`)
 - Check that the wallet address matches the one shown in the web app
 - Ensure the wallet has sufficient balance
 
 **"Insufficient funds" (Amazon purchase)**
 - Check balance with `crossmint_balance`
 - Fund the wallet with more SOL or USDC
-- For devnet testing, use Solana faucets for test SOL
+- Fund the wallet with real SOL or USDC on Solana mainnet
 
 **"Timeout waiting for transaction to be broadcast"**
 - Check transaction status with `crossmint_tx_status`
@@ -214,15 +214,24 @@ All steps are handled automatically by the plugin.
 ## Plugin Management
 
 ```bash
+# Install the plugin
+openclaw plugins install @crossmint/openclaw-wallet
+
+# Upgrade to latest version
+openclaw plugins update @crossmint/openclaw-wallet
+
 # List all plugins
 openclaw plugins list
 
-# Check plugin info
+# Check plugin info (shows current version)
 openclaw plugins info openclaw-wallet
 
 # Enable/disable
 openclaw plugins enable openclaw-wallet
 openclaw plugins disable openclaw-wallet
+
+# Uninstall
+openclaw plugins uninstall openclaw-wallet
 ```
 
 ## Supported Currencies

package/index.ts

@@ -9,7 +9,7 @@ import {
   createCrossmintBuyTool,
   createCrossmintOrderStatusTool,
 } from "./src/tools.js";
-import { crossmintConfigSchema } from "./src/config.js";
+import { crossmintConfigSchema, ENVIRONMENT } from "./src/config.js";
 
 const plugin = {
   id: "openclaw-wallet",
@@ -64,7 +64,7 @@ const plugin = {
     });
 
     api.logger.info("Crossmint wallet plugin loaded", {
-      environment: "staging",
+      environment: ENVIRONMENT,
     });
   },
 };

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "openclaw-wallet",
   "name": "Crossmint",
   "description": "Solana wallet integration using Crossmint smart wallets with delegated signing.",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "skills": ["skills/crossmint"],
   "configSchema": {
     "type": "object",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossmint/openclaw-wallet",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "description": "OpenClaw plugin for Solana wallet integration with Crossmint smart wallets",
   "type": "module",
   "main": "./index.ts",

package/skills/crossmint/SKILL.md

@@ -8,7 +8,7 @@ metadata: { "openclaw": { "emoji": "💳" } }
 
 Manage Solana wallets using Crossmint smart wallets with delegated signing. The agent holds a local signing key, and users authorize it via a web-based delegation flow.
 
-> **Note:** Currently only **Solana devnet** (staging environment) is supported. Mainnet/production support coming soon.
+> **Note:** This plugin uses **Solana mainnet** (production) for real transactions.
 
 ## When to Activate
 
@@ -48,7 +48,7 @@ This generates a local ed25519 keypair and returns a delegation URL pointing to
 ### Step 2: User completes web setup
 
 The user opens the delegation URL in their browser. The web app (lobster.cash) will:
-1. Create a Crossmint smart wallet on Solana devnet
+1. Create a Crossmint smart wallet on Solana
 2. Add the agent's public key as a delegated signer
 3. Display the **wallet address** and **API key** for the user to copy
 
@@ -112,6 +112,42 @@ Agent: Use crossmint_wallet_info
 
 Buy products from Amazon using SOL or USDC from the agent's wallet. Crossmint acts as Merchant of Record, handling payments, shipping, and taxes.
 
+### CRITICAL: Product Validation
+
+**ALWAYS validate that the product matches what the user requested before completing a purchase.**
+
+When a purchase completes, the response includes the product title. The agent MUST:
+
+1. **Compare the product title** with what the user asked for
+2. **If there's a mismatch**, inform the user immediately:
+   ```
+   ⚠️ The product found doesn't match your request.
+
+   You asked for: "Celsius Energy Drink"
+   Product found: "USB Cable Organizer"
+
+   This might be the wrong product. Would you like me to:
+   1. Search for the correct product on Amazon
+   2. Cancel and try a different ASIN
+   3. Proceed anyway (if this is actually correct)
+   ```
+3. **Never assume** - If the user says "buy Celsius" without an ASIN, search Amazon first to find the correct product
+4. **Confirm before payment** - For vague requests, always confirm the exact product before purchasing
+
+**Best Practice Flow:**
+```
+User: "Buy me some Celsius energy drinks"
+Agent:
+1. First, search Amazon for "Celsius energy drink" to find the correct ASIN
+2. Present options: "I found these Celsius products:
+   - B08P5H1FLX: Celsius Sparkling Orange (12-pack) - ~$25
+   - B07GX3GDN5: Celsius Variety Pack (12-pack) - ~$30
+   Which one would you like?"
+3. User confirms: "The variety pack"
+4. Agent uses crossmint_buy with the confirmed ASIN
+5. After purchase, verify the product title in the response matches
+```
+
 ### How It Works (Under the Hood)
 
 When you use `crossmint_buy`, the plugin executes a 6-step delegated signer flow:
@@ -154,7 +190,7 @@ Price: 0.05 SOL
 Order ID: order_abc123
 Payment: completed
 
-Transaction: https://explorer.solana.com/tx/5x...?cluster=devnet
+Transaction: https://explorer.solana.com/tx/5x...
 
 Shipping to:
 John Doe
@@ -178,6 +214,26 @@ Returns:
 - Delivery status
 - Tracking information (when available)
 
+### Finding the Right Product
+
+When the user doesn't provide an ASIN:
+
+1. **Search Amazon first** - Use web search to find the product: `"[product name] site:amazon.com"`
+2. **Extract the ASIN** - Look for the 10-character alphanumeric code (e.g., B08P5H1FLX) in the URL
+3. **Confirm with user** - Show the product name, price estimate, and ask for confirmation
+4. **Then purchase** - Only call `crossmint_buy` after user confirms the correct product
+
+**Example:**
+```
+User: "Buy me Celsius energy drinks"
+Agent: Let me search Amazon for Celsius energy drinks...
+       [searches "Celsius energy drink site:amazon.com"]
+       I found: "CELSIUS Sparkling Orange Fitness Drink (12-pack)" - ASIN: B08P5H1FLX
+       Is this what you want? (Yes/No, or tell me a different product)
+User: "Yes"
+Agent: [calls crossmint_buy with B08P5H1FLX]
+```
+
 ### Amazon Product Locator Formats
 
 All of these formats work:
@@ -304,7 +360,7 @@ Agent:
 
 ### "Failed to get balance" or "Failed to send"
 
-- Verify the API key is correct (should start with `ck_staging_` for devnet)
+- Verify the API key is correct (should start with `ck_production_`)
 - Check wallet address matches the one shown in the web app
 - Ensure sufficient balance for transfers
 
@@ -316,7 +372,31 @@ The wallet doesn't have enough SOL or USDC for the purchase.
 Agent:
 1. Use crossmint_balance to check current balance
 2. Ask user to fund the wallet with more SOL/USDC
-3. For devnet testing, use Solana faucets to get test SOL
+3. Fund the wallet with real SOL/USDC on Solana mainnet
+```
+
+### "Wrong product was purchased"
+
+The product title doesn't match what the user requested.
+
+**Prevention:**
+1. Always search for the correct ASIN before purchasing
+2. Confirm the product with the user before calling `crossmint_buy`
+3. After purchase, compare the product title in the response with user's request
+
+**If it happens:**
+```
+Agent:
+⚠️ I notice the product purchased doesn't match your request.
+
+You asked for: "Celsius Energy Drink"
+Product purchased: "USB Cable Organizer" (Order ID: xxx)
+
+Unfortunately, the payment has already been processed. You may need to:
+1. Contact Crossmint support to request a cancellation/refund
+2. Wait for delivery and return the item
+
+I apologize for this error. In the future, I'll confirm the exact product with you before purchasing.
 ```
 
 ### "Order created but no serialized transaction returned"
@@ -348,12 +428,15 @@ Agent:
 
 ## Best Practices
 
-1. **Always check balance before purchasing** - Avoid failed transactions due to insufficient funds
-2. **Confirm shipping address with user** - Double-check addresses for Amazon purchases
-3. **Get devnet tokens for testing** - Use Solana devnet faucets to get test SOL before trying purchases
-4. **One wallet per agent** - Each agent ID gets its own keypair and wallet
-5. **Save the order ID** - Users should note the order ID to track delivery status later
-6. **Verify on-chain** - The explorer link lets users verify the payment transaction on Solana
+1. **ALWAYS validate products before purchasing** - Never buy without confirming the product matches user intent
+2. **Search Amazon first for vague requests** - If user says "buy X" without an ASIN, search for the correct product first
+3. **Confirm product title after purchase** - Check that the returned product title matches what was requested
+4. **Always check balance before purchasing** - Avoid failed transactions due to insufficient funds
+5. **Confirm shipping address with user** - Double-check addresses for Amazon purchases
+6. **Fund wallet before purchasing** - Ensure the wallet has enough SOL or USDC before attempting purchases
+7. **One wallet per agent** - Each agent ID gets its own keypair and wallet
+8. **Save the order ID** - Users should note the order ID to track delivery status later
+9. **Verify on-chain** - The explorer link lets users verify the payment transaction on Solana
 
 ## Supported Currencies
 

package/src/amazon-order.test.ts

@@ -27,9 +27,13 @@ const API_KEY = process.env.CROSSMINT_API_KEY || "";
 const PAYER_ADDRESS = process.env.PAYER_ADDRESS || ""; // Smart wallet address
 const SIGNER_PRIVATE_KEY = process.env.PAYER_PRIVATE_KEY || ""; // Delegated signer private key
 
-// Crossmint API base URLs (staging = devnet)
-const CROSSMINT_ORDERS_API = "https://staging.crossmint.com/api/2022-06-09";
-const CROSSMINT_WALLETS_API = "https://staging.crossmint.com/api/2025-06-09";
+// Crossmint API base URLs - depends on environment
+const CROSSMINT_ENV = process.env.CROSSMINT_ENV || "production";
+const CROSSMINT_BASE_URL = CROSSMINT_ENV === "staging"
+  ? "https://staging.crossmint.com/api"
+  : "https://www.crossmint.com/api";
+const CROSSMINT_ORDERS_API = `${CROSSMINT_BASE_URL}/2022-06-09`;
+const CROSSMINT_WALLETS_API = `${CROSSMINT_BASE_URL}/2025-06-09`;
 
 // Test product - can be overridden via environment variable
 const TEST_AMAZON_ASIN = process.env.TEST_AMAZON_ASIN || "B00AATAHY0";

package/src/api.test.ts

@@ -12,13 +12,18 @@ import {
 /**
  * Live integration tests for Crossmint Amazon purchase API.
  *
- * Run with: CROSSMINT_API_KEY=your-key pnpm test extensions/crossmint/src/api.test.ts
+ * Run with: CROSSMINT_API_KEY=your-key pnpm test src/api.test.ts
  *
- * These tests make real API calls to Crossmint staging (devnet).
- * They require a valid client-side API key with orders.create scope.
+ * These tests make real API calls to Crossmint.
+ * They require a valid API key with orders.create scope.
+ *
+ * Environment:
+ *   CROSSMINT_ENV=staging  -> Uses devnet (staging.crossmint.com)
+ *   CROSSMINT_ENV=production (default) -> Uses mainnet (www.crossmint.com)
  */
 
 const LIVE = process.env.CROSSMINT_API_KEY || process.env.LIVE;
+const CROSSMINT_ENV = (process.env.CROSSMINT_ENV || "production") as "staging" | "production";
 
 describe("crossmint api", () => {
   describe("buildDelegationUrl", () => {
@@ -53,7 +58,7 @@ describe("crossmint api", () => {
   describe.skipIf(!LIVE)("live: createOrder", () => {
     const config: CrossmintApiConfig = {
       apiKey: process.env.CROSSMINT_API_KEY!,
-      environment: "staging",
+      environment: CROSSMINT_ENV,
     };
 
     // Generate a test keypair for the payer address

package/src/api.ts

@@ -3,7 +3,7 @@ import bs58 from "bs58";
 
 export type CrossmintApiConfig = {
   apiKey: string;
-  environment: "staging"; // Only staging (Solana devnet) supported for now
+  environment: "staging" | "production";
 };
 
 export type CrossmintBalance = {
@@ -26,9 +26,10 @@ export type CrossmintTransaction = {
   };
 };
 
-// Only staging (Solana devnet) is supported for now
-function getBaseUrl(_env: "staging"): string {
-  // Production URL reserved for future use: https://www.crossmint.com/api
+function getBaseUrl(env: "staging" | "production"): string {
+  if (env === "production") {
+    return "https://www.crossmint.com/api";
+  }
   return "https://staging.crossmint.com/api";
 }
 
@@ -106,14 +107,19 @@ export async function getTransactionStatus(
 
   const data = await response.json();
 
+  const txId = data.onChain?.txId;
+  const explorerLink = txId
+    ? config.environment === "staging"
+      ? `https://explorer.solana.com/tx/${txId}?cluster=devnet`
+      : `https://explorer.solana.com/tx/${txId}`
+    : undefined;
+
   return {
     id: data.id,
     status: data.status,
     hash: data.onChain?.txId || data.hash,
     txId: data.txId, // Top-level txId from API response
-    explorerLink: data.onChain?.txId
-      ? `https://explorer.solana.com/tx/${data.onChain.txId}?cluster=devnet`
-      : undefined,
+    explorerLink,
     onChain: data.onChain,
   };
 }

package/src/config.ts

@@ -1,6 +1,6 @@
 // Hardcoded configuration - no user config needed
 export const DELEGATION_URL = "https://www.lobster.cash/";
-export const ENVIRONMENT = "staging" as const;
+export const ENVIRONMENT = "production" as const;
 
 export type CrossmintPluginConfig = Record<string, never>;
 

package/src/tools.ts

@@ -26,7 +26,7 @@ function getAgentId(ctx: OpenClawPluginToolContext): string {
   return ctx.agentId || "main";
 }
 
-function getApiConfig(walletData: { apiKey?: string }, environment: "staging"): CrossmintApiConfig {
+function getApiConfig(walletData: { apiKey?: string }, environment: "staging" | "production"): CrossmintApiConfig {
   if (!walletData.apiKey) {
     throw new Error("Wallet not configured. Run crossmint_setup first and provide the API key.");
   }