npm - @dominusnode/openclaw-plugin - Versions diffs - 1.2.0 → 1.3.0 - Mend

@dominusnode/openclaw-plugin 1.2.0 → 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/README.md CHANGED Viewed

@@ -37,10 +37,10 @@ cd Dominus Node/integrations/openclaw
 ## Configuration
-| Environment Variable | Required | Default | Description |
-|---|---|---|---|
-| `DOMINUSNODE_API_KEY` | Yes | -- | Your Dominus Node API key (starts with `dn_live_` or `dn_test_`) |
-| `DOMINUSNODE_BASE_URL` | No | `https://api.dominusnode.com` | Base URL for the Dominus Node REST API |
+| Environment Variable   | Required | Default                       | Description                                                      |
+| ---------------------- | -------- | ----------------------------- | ---------------------------------------------------------------- |
+| `DOMINUSNODE_API_KEY`  | Yes      | --                            | Your Dominus Node API key (starts with `dn_live_` or `dn_test_`) |
+| `DOMINUSNODE_BASE_URL` | No       | `https://api.dominusnode.com` | Base URL for the Dominus Node REST API                           |
 ### Getting an API Key
@@ -54,147 +54,169 @@ cd Dominus Node/integrations/openclaw
 ### Proxy Tools
 #### `proxied_fetch`
 Fetch a URL through the proxy network with optional geo-targeting.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `url` | string | Yes | The URL to fetch (http or https) |
-| `method` | string | No | HTTP method (GET, POST, PUT, DELETE, PATCH, HEAD). Default: GET |
-| `country` | string | No | ISO 3166-1 alpha-2 country code (e.g., US, GB, DE) |
-| `pool` | string | No | Proxy pool: `dc` (datacenter, $3/GB) or `residential` ($5/GB). Default: dc |
-| `headers` | object | No | Additional HTTP headers as key-value pairs |
-| `body` | string | No | Request body for POST/PUT/PATCH |
+| Parameter | Type   | Required | Description                                                                |
+| --------- | ------ | -------- | -------------------------------------------------------------------------- |
+| `url`     | string | Yes      | The URL to fetch (http or https)                                           |
+| `method`  | string | No       | HTTP method (GET, POST, PUT, DELETE, PATCH, HEAD). Default: GET            |
+| `country` | string | No       | ISO 3166-1 alpha-2 country code (e.g., US, GB, DE)                         |
+| `pool`    | string | No       | Proxy pool: `dc` (datacenter, $3/GB) or `residential` ($5/GB). Default: dc |
+| `headers` | object | No       | Additional HTTP headers as key-value pairs                                 |
+| `body`    | string | No       | Request body for POST/PUT/PATCH                                            |
 #### `get_proxy_config`
 View available proxy pools, pricing, supported countries, and endpoint configuration. No parameters.
 #### `list_sessions`
 List all active proxy sessions with status, target hosts, and bandwidth usage. No parameters.
 ### Wallet Tools
 #### `check_balance`
 Check your wallet balance and estimated remaining bandwidth at current pricing. No parameters.
 #### `check_usage`
 View bandwidth usage statistics for a time period.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `days` | number | No | Number of days to look back (1-365). Default: 30 |
+| Parameter | Type   | Required | Description                                      |
+| --------- | ------ | -------- | ------------------------------------------------ |
+| `days`    | number | No       | Number of days to look back (1-365). Default: 30 |
 ### Agentic Wallet Tools
 Agentic wallets are server-side custodial sub-wallets designed for autonomous AI agents. They have per-transaction spending limits for safety and are funded from your main wallet.
 #### `create_agentic_wallet`
 Create a new agentic wallet.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `label` | string | Yes | Label for the wallet (1-100 chars) |
-| `spending_limit_cents` | number | No | Max spend per transaction in cents. Default: 10000 ($100) |
+| Parameter              | Type   | Required | Description                                               |
+| ---------------------- | ------ | -------- | --------------------------------------------------------- |
+| `label`                | string | Yes      | Label for the wallet (1-100 chars)                        |
+| `spending_limit_cents` | number | No       | Max spend per transaction in cents. Default: 10000 ($100) |
 #### `fund_agentic_wallet`
 Transfer funds from your main wallet to an agentic wallet.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `wallet_id` | string | Yes | Agentic wallet UUID |
-| `amount_cents` | number | Yes | Amount in cents (100-1000000) |
+| Parameter      | Type   | Required | Description                   |
+| -------------- | ------ | -------- | ----------------------------- |
+| `wallet_id`    | string | Yes      | Agentic wallet UUID           |
+| `amount_cents` | number | Yes      | Amount in cents (100-1000000) |
 #### `check_agentic_balance`
 Check an agentic wallet's balance and status.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `wallet_id` | string | Yes | Agentic wallet UUID |
+| Parameter   | Type   | Required | Description         |
+| ----------- | ------ | -------- | ------------------- |
+| `wallet_id` | string | Yes      | Agentic wallet UUID |
 #### `list_agentic_wallets`
 List all your agentic wallets with balances and status. No parameters.
 #### `agentic_transactions`
 View transaction history for an agentic wallet.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `wallet_id` | string | Yes | Agentic wallet UUID |
-| `limit` | number | No | Number of transactions (1-100). Default: 20 |
+| Parameter   | Type   | Required | Description                                 |
+| ----------- | ------ | -------- | ------------------------------------------- |
+| `wallet_id` | string | Yes      | Agentic wallet UUID                         |
+| `limit`     | number | No       | Number of transactions (1-100). Default: 20 |
 ### Team Tools
 Teams enable shared wallet billing across multiple users. Owners and admins can manage members and create shared API keys.
 #### `create_team`
 Create a new team.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `name` | string | Yes | Team name (1-100 chars) |
-| `max_members` | number | No | Maximum members (1-1000). Default: unlimited |
+| Parameter     | Type   | Required | Description                                  |
+| ------------- | ------ | -------- | -------------------------------------------- |
+| `name`        | string | Yes      | Team name (1-100 chars)                      |
+| `max_members` | number | No       | Maximum members (1-1000). Default: unlimited |
 #### `list_teams`
 List all teams you belong to. No parameters.
 #### `team_details`
 Get detailed info about a team.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `team_id` | string | Yes | Team UUID |
+| Parameter | Type   | Required | Description |
+| --------- | ------ | -------- | ----------- |
+| `team_id` | string | Yes      | Team UUID   |
 #### `team_fund`
 Transfer funds from your personal wallet to a team wallet.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `team_id` | string | Yes | Team UUID |
-| `amount_cents` | number | Yes | Amount in cents (100-1000000) |
+| Parameter      | Type   | Required | Description                   |
+| -------------- | ------ | -------- | ----------------------------- |
+| `team_id`      | string | Yes      | Team UUID                     |
+| `amount_cents` | number | Yes      | Amount in cents (100-1000000) |
 #### `team_create_key`
 Create a shared API key billed to the team wallet.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `team_id` | string | Yes | Team UUID |
-| `label` | string | Yes | Key label (1-100 chars) |
+| Parameter | Type   | Required | Description             |
+| --------- | ------ | -------- | ----------------------- |
+| `team_id` | string | Yes      | Team UUID               |
+| `label`   | string | Yes      | Key label (1-100 chars) |
 #### `team_usage`
 View team wallet transaction history.
-| Parameter | Type | Required | Description |
-|---|---|---|---|
-| `team_id` | string | Yes | Team UUID |
-| `limit` | number | No | Number of transactions (1-100). Default: 20 |
+| Parameter | Type   | Required | Description                                 |
+| --------- | ------ | -------- | ------------------------------------------- |
+| `team_id` | string | Yes      | Team UUID                                   |
+| `limit`   | number | No       | Number of transactions (1-100). Default: 20 |
 ## Usage Examples
 ### Fetch a page through a US proxy
 ```
 Use proxied_fetch to get https://httpbin.org/ip through a US datacenter proxy
 ```
 ### Check your budget
 ```
 Check my Dominus Node balance and tell me how much residential browsing I have left
 ```
 ### Set up a research team
 ```
 Create a team called "Web Research" with max 5 members, then fund it with $25
 ```
 ### Create an agent wallet for automated scraping
 ```
 Create an agentic wallet called "price-monitor" with a $5 spending limit, fund it with $10
 ```
 ### View usage breakdown
 ```
 Show my Dominus Node usage for the last 7 days
 ```
 ### Fetch with residential proxy and geo-targeting
 ```
 Use proxied_fetch to get https://example.co.uk through a GB residential proxy
 ```
@@ -218,24 +240,24 @@ The plugin implements comprehensive security measures:
 ## API Endpoints Used
-| Tool | Method | Endpoint |
-|---|---|---|
-| `proxied_fetch` | POST | `/api/proxy/fetch` |
-| `check_balance` | GET | `/api/wallet` |
-| `check_usage` | GET | `/api/usage` |
-| `get_proxy_config` | GET | `/api/proxy/config` |
-| `list_sessions` | GET | `/api/sessions/active` |
-| `create_agentic_wallet` | POST | `/api/agent-wallet` |
-| `fund_agentic_wallet` | POST | `/api/agent-wallet/:id/fund` |
-| `check_agentic_balance` | GET | `/api/agent-wallet/:id` |
-| `list_agentic_wallets` | GET | `/api/agent-wallet` |
-| `agentic_transactions` | GET | `/api/agent-wallet/:id/transactions` |
-| `create_team` | POST | `/api/teams` |
-| `list_teams` | GET | `/api/teams` |
-| `team_details` | GET | `/api/teams/:id` |
-| `team_fund` | POST | `/api/teams/:id/wallet/fund` |
-| `team_create_key` | POST | `/api/teams/:id/keys` |
-| `team_usage` | GET | `/api/teams/:id/wallet/transactions` |
+| Tool                    | Method | Endpoint                             |
+| ----------------------- | ------ | ------------------------------------ |
+| `proxied_fetch`         | POST   | `/api/proxy/fetch`                   |
+| `check_balance`         | GET    | `/api/wallet`                        |
+| `check_usage`           | GET    | `/api/usage`                         |
+| `get_proxy_config`      | GET    | `/api/proxy/config`                  |
+| `list_sessions`         | GET    | `/api/sessions/active`               |
+| `create_agentic_wallet` | POST   | `/api/agent-wallet`                  |
+| `fund_agentic_wallet`   | POST   | `/api/agent-wallet/:id/fund`         |
+| `check_agentic_balance` | GET    | `/api/agent-wallet/:id`              |
+| `list_agentic_wallets`  | GET    | `/api/agent-wallet`                  |
+| `agentic_transactions`  | GET    | `/api/agent-wallet/:id/transactions` |
+| `create_team`           | POST   | `/api/teams`                         |
+| `list_teams`            | GET    | `/api/teams`                         |
+| `team_details`          | GET    | `/api/teams/:id`                     |
+| `team_fund`             | POST   | `/api/teams/:id/wallet/fund`         |
+| `team_create_key`       | POST   | `/api/teams/:id/keys`                |
+| `team_usage`            | GET    | `/api/teams/:id/wallet/transactions` |
 ## Requirements

package/dist/plugin.js CHANGED Viewed

@@ -12,10 +12,63 @@
  *  - Response truncation at 4000 chars for LLM context efficiency
  *  - OFAC sanctioned country validation
  */
+import * as crypto from "node:crypto";
 import * as http from "node:http";
 import * as tls from "node:tls";
 import * as dns from "dns/promises";
 // ---------------------------------------------------------------------------
+// SHA-256 Proof-of-Work solver
+// ---------------------------------------------------------------------------
+function countLeadingZeroBits(buf) {
+    let count = 0;
+    for (const byte of buf) {
+        if (byte === 0) {
+            count += 8;
+            continue;
+        }
+        let mask = 0x80;
+        while (mask && !(byte & mask)) {
+            count++;
+            mask >>= 1;
+        }
+        break;
+    }
+    return count;
+}
+async function solvePoW(solveBaseUrl) {
+    try {
+        const resp = await fetch(`${solveBaseUrl}/api/auth/pow/challenge`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            redirect: "error",
+        });
+        if (!resp.ok)
+            return null;
+        const text = await resp.text();
+        if (text.length > 10_485_760)
+            return null;
+        const challenge = JSON.parse(text);
+        const prefix = challenge.prefix ?? "";
+        const difficulty = challenge.difficulty ?? 20;
+        const challengeId = challenge.challengeId ?? "";
+        if (!prefix || !challengeId)
+            return null;
+        for (let nonce = 0; nonce < 100_000_000; nonce++) {
+            const hash = crypto
+                .createHash("sha256")
+                .update(prefix + nonce.toString())
+                .digest();
+            if (countLeadingZeroBits(hash) >= difficulty) {
+                return { challengeId, nonce: nonce.toString() };
+            }
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
 // Configuration
 // ---------------------------------------------------------------------------
 const MAX_RESPONSE_CHARS = 4000;
@@ -69,7 +122,7 @@ function getAgentSecret() {
 // ---------------------------------------------------------------------------
 /** Remove any dn_live_* or dn_test_* tokens from error messages. */
 function scrubCredentials(msg) {
-    return msg.replace(/dn_(live|test)_[A-Za-z0-9_-]+/g, "dn_$1_***REDACTED***");
+    return msg.replace(/dn_(live|test|proxy)_[A-Za-z0-9_-]+/g, "dn_$1_***REDACTED***");
 }
 function safeError(err) {
     const raw = err instanceof Error ? err.message : String(err);
@@ -81,7 +134,8 @@ function safeError(err) {
 function truncate(text, max = MAX_RESPONSE_CHARS) {
     if (text.length <= max)
         return text;
-    return text.slice(0, max) + `\n\n... [truncated, ${text.length - max} chars omitted]`;
+    return (text.slice(0, max) +
+        `\n\n... [truncated, ${text.length - max} chars omitted]`);
 }
 // ---------------------------------------------------------------------------
 // SSRF Protection
@@ -352,7 +406,9 @@ let jwtExpiresAt = 0;
 let cachedApiKeyPrefix = null;
 async function ensureAuth(apiKey, baseUrl) {
     const keyPrefix = apiKey.slice(0, 16);
-    if (cachedJwt && Date.now() < jwtExpiresAt && cachedApiKeyPrefix === keyPrefix)
+    if (cachedJwt &&
+        Date.now() < jwtExpiresAt &&
+        cachedApiKeyPrefix === keyPrefix)
         return cachedJwt;
     const authHeaders = {
         "Content-Type": "application/json",
@@ -373,7 +429,7 @@ async function ensureAuth(apiKey, baseUrl) {
         const text = await res.text().catch(() => "");
         throw new Error(`Auth failed (${res.status}): ${scrubCredentials(text.slice(0, 500))}`);
     }
-    const data = await res.json();
+    const data = (await res.json());
     cachedApiKeyPrefix = keyPrefix;
     cachedJwt = data.token;
     // JWT expires in 15 min, refresh at 14 min for safety
@@ -386,8 +442,8 @@ async function apiRequest(method, path, body) {
     const url = `${baseUrl}${path}`;
     const jwt = await ensureAuth(apiKey, baseUrl);
     const headers = {
-        "Authorization": `Bearer ${jwt}`,
-        "Accept": "application/json",
+        Authorization: `Bearer ${jwt}`,
+        Accept: "application/json",
         "User-Agent": "dominusnode-openclaw-plugin/1.0.0",
     };
     const agentSecret = getAgentSecret();
@@ -477,7 +533,7 @@ async function unauthenticatedRequest(method, path, body) {
     const baseUrl = getBaseUrl();
     const url = `${baseUrl}${path}`;
     const headers = {
-        "Accept": "application/json",
+        Accept: "application/json",
         "User-Agent": "dominusnode-openclaw-plugin/1.0.0",
     };
     const agentSecret = getAgentSecret();
@@ -612,9 +668,19 @@ const proxiedFetchTool = {
             }
             const proxyType = String(args.pool ?? "dc");
             // Validate and collect custom headers
-            const STRIPPED_HEADERS = new Set(["host", "connection", "content-length", "transfer-encoding", "proxy-authorization", "authorization", "user-agent"]);
+            const STRIPPED_HEADERS = new Set([
+                "host",
+                "connection",
+                "content-length",
+                "transfer-encoding",
+                "proxy-authorization",
+                "authorization",
+                "user-agent",
+            ]);
             const customHeaders = {};
-            if (args.headers && typeof args.headers === "object" && !Array.isArray(args.headers)) {
+            if (args.headers &&
+                typeof args.headers === "object" &&
+                !Array.isArray(args.headers)) {
                 for (const [k, v] of Object.entries(args.headers)) {
                     const key = String(k);
                     const val = String(v ?? "");
@@ -639,15 +705,24 @@ const proxiedFetchTool = {
             const parsed = new URL(url);
             const MAX_RESP = 1_048_576; // 1MB
             // Build custom header lines for raw HTTP request
-            const customHeaderLines = Object.entries(customHeaders).map(([k, v]) => `${k}: ${v}\r\n`).join("");
+            const customHeaderLines = Object.entries(customHeaders)
+                .map(([k, v]) => `${k}: ${v}\r\n`)
+                .join("");
             const result = await new Promise((resolve, reject) => {
                 const timer = setTimeout(() => reject(new Error("Proxy request timed out")), 30_000);
                 if (parsed.protocol === "https:") {
-                    const connectHost = parsed.hostname.includes(":") ? `[${parsed.hostname}]` : parsed.hostname;
+                    const connectHost = parsed.hostname.includes(":")
+                        ? `[${parsed.hostname}]`
+                        : parsed.hostname;
                     const connectReq = http.request({
-                        hostname: proxyHost, port: proxyPort, method: "CONNECT",
+                        hostname: proxyHost,
+                        port: proxyPort,
+                        method: "CONNECT",
                         path: `${connectHost}:${parsed.port || 443}`,
-                        headers: { "Proxy-Authorization": proxyAuth, Host: `${connectHost}:${parsed.port || 443}` },
+                        headers: {
+                            "Proxy-Authorization": proxyAuth,
+                            Host: `${connectHost}:${parsed.port || 443}`,
+                        },
                     });
                     connectReq.on("connect", (_res, sock) => {
                         if (_res.statusCode !== 200) {
@@ -656,13 +731,21 @@ const proxiedFetchTool = {
                             reject(new Error(`CONNECT failed: ${_res.statusCode}`));
                             return;
                         }
-                        const tlsSock = tls.connect({ host: parsed.hostname, socket: sock, servername: parsed.hostname, minVersion: "TLSv1.2" }, () => {
+                        const tlsSock = tls.connect({
+                            host: parsed.hostname,
+                            socket: sock,
+                            servername: parsed.hostname,
+                            minVersion: "TLSv1.2",
+                        }, () => {
                             const reqLine = `${method} ${parsed.pathname + parsed.search} HTTP/1.1\r\nHost: ${parsed.host}\r\nUser-Agent: dominusnode-openclaw/1.0.0\r\n${customHeaderLines}Connection: close\r\n\r\n`;
                             tlsSock.write(reqLine);
                             const chunks = [];
                             let bytes = 0;
-                            tlsSock.on("data", (c) => { bytes += c.length; if (bytes <= MAX_RESP + 16384)
-                                chunks.push(c); });
+                            tlsSock.on("data", (c) => {
+                                bytes += c.length;
+                                if (bytes <= MAX_RESP + 16384)
+                                    chunks.push(c);
+                            });
                             let done = false;
                             const fin = () => {
                                 if (done)
@@ -677,40 +760,69 @@ const proxiedFetchTool = {
                                 }
                                 const hdr = raw.substring(0, hEnd);
                                 const body = raw.substring(hEnd + 4).substring(0, MAX_RESP);
-                                const sm = hdr.split("\r\n")[0].match(/^HTTP\/\d\.\d\s+(\d+)/);
+                                const sm = hdr
+                                    .split("\r\n")[0]
+                                    .match(/^HTTP\/\d\.\d\s+(\d+)/);
                                 const hdrs = {};
                                 for (const l of hdr.split("\r\n").slice(1)) {
                                     const ci = l.indexOf(":");
                                     if (ci > 0)
-                                        hdrs[l.substring(0, ci).trim().toLowerCase()] = l.substring(ci + 1).trim();
+                                        hdrs[l.substring(0, ci).trim().toLowerCase()] = l
+                                            .substring(ci + 1)
+                                            .trim();
                                 }
-                                resolve({ status: sm ? parseInt(sm[1], 10) : 0, headers: hdrs, body });
+                                resolve({
+                                    status: sm ? parseInt(sm[1], 10) : 0,
+                                    headers: hdrs,
+                                    body,
+                                });
                             };
                             tlsSock.on("end", fin);
                             tlsSock.on("close", fin);
-                            tlsSock.on("error", (e) => { clearTimeout(timer); reject(e); });
+                            tlsSock.on("error", (e) => {
+                                clearTimeout(timer);
+                                reject(e);
+                            });
                         });
-                        tlsSock.on("error", (e) => { clearTimeout(timer); reject(e); });
+                        tlsSock.on("error", (e) => {
+                            clearTimeout(timer);
+                            reject(e);
+                        });
+                    });
+                    connectReq.on("error", (e) => {
+                        clearTimeout(timer);
+                        reject(e);
                     });
-                    connectReq.on("error", (e) => { clearTimeout(timer); reject(e); });
                     connectReq.end();
                 }
                 else {
                     const req = http.request({
-                        hostname: proxyHost, port: proxyPort, method, path: url,
-                        headers: { "Proxy-Authorization": proxyAuth, Host: parsed.host ?? "", ...customHeaders },
+                        hostname: proxyHost,
+                        port: proxyPort,
+                        method,
+                        path: url,
+                        headers: {
+                            "Proxy-Authorization": proxyAuth,
+                            Host: parsed.host ?? "",
+                            ...customHeaders,
+                        },
                     }, (res) => {
                         const chunks = [];
                         let bytes = 0;
-                        res.on("data", (c) => { bytes += c.length; if (bytes <= MAX_RESP)
-                            chunks.push(c); });
+                        res.on("data", (c) => {
+                            bytes += c.length;
+                            if (bytes <= MAX_RESP)
+                                chunks.push(c);
+                        });
                         let done = false;
                         const fin = () => {
                             if (done)
                                 return;
                             done = true;
                             clearTimeout(timer);
-                            const body = Buffer.concat(chunks).toString("utf-8").substring(0, MAX_RESP);
+                            const body = Buffer.concat(chunks)
+                                .toString("utf-8")
+                                .substring(0, MAX_RESP);
                             const hdrs = {};
                             for (const [k, v] of Object.entries(res.headers)) {
                                 if (v)
@@ -720,9 +832,15 @@ const proxiedFetchTool = {
                         };
                         res.on("end", fin);
                         res.on("close", fin);
-                        res.on("error", (e) => { clearTimeout(timer); reject(e); });
+                        res.on("error", (e) => {
+                            clearTimeout(timer);
+                            reject(e);
+                        });
+                    });
+                    req.on("error", (e) => {
+                        clearTimeout(timer);
+                        reject(e);
                     });
-                    req.on("error", (e) => { clearTimeout(timer); reject(e); });
                     req.end();
                 }
             });
@@ -733,7 +851,13 @@ const proxiedFetchTool = {
             ];
             // Include relevant response headers
             if (result.headers) {
-                const showHeaders = ["content-type", "content-length", "server", "x-cache", "cache-control"];
+                const showHeaders = [
+                    "content-type",
+                    "content-length",
+                    "server",
+                    "x-cache",
+                    "cache-control",
+                ];
                 for (const h of showHeaders) {
                     if (result.headers[h]) {
                         lines.push(`${h}: ${result.headers[h]}`);
@@ -920,9 +1044,12 @@ const createAgenticWalletTool = {
                 spendingLimitCents,
             };
             // Validate optional daily_limit_cents
-            if (args.daily_limit_cents !== undefined && args.daily_limit_cents !== null) {
+            if (args.daily_limit_cents !== undefined &&
+                args.daily_limit_cents !== null) {
                 const dailyLimit = Number(args.daily_limit_cents);
-                if (!Number.isInteger(dailyLimit) || dailyLimit < 1 || dailyLimit > 1000000) {
+                if (!Number.isInteger(dailyLimit) ||
+                    dailyLimit < 1 ||
+                    dailyLimit > 1000000) {
                     return "Error: daily_limit_cents must be a positive integer between 1 and 1000000.";
                 }
                 body.dailyLimitCents = dailyLimit;
@@ -989,7 +1116,9 @@ const fundAgenticWalletTool = {
         try {
             const walletId = validateUuid(String(args.wallet_id ?? ""), "wallet_id");
             const amountCents = Number(args.amount_cents ?? 0);
-            if (!Number.isInteger(amountCents) || amountCents < 100 || amountCents > 1000000) {
+            if (!Number.isInteger(amountCents) ||
+                amountCents < 100 ||
+                amountCents > 1000000) {
                 return "Error: amount_cents must be an integer between 100 ($1) and 1000000 ($10,000).";
             }
             const data = await apiPost(`/api/agent-wallet/${encodeURIComponent(walletId)}/fund`, {
@@ -1099,7 +1228,9 @@ const agenticTransactionsTool = {
             const lines = [`Wallet Transactions (${txs.length})`, ""];
             for (const tx of txs) {
                 const sign = tx.type === "fund" || tx.type === "refund" ? "+" : "-";
-                const session = tx.sessionId ? ` | Session: ${tx.sessionId.slice(0, 8)}` : "";
+                const session = tx.sessionId
+                    ? ` | Session: ${tx.sessionId.slice(0, 8)}`
+                    : "";
                 lines.push(`  ${sign}${formatCents(tx.amountCents)} [${tx.type}] ${tx.description}`);
                 lines.push(`    ${tx.createdAt}${session}`);
             }
@@ -1138,7 +1269,9 @@ const createTeamTool = {
             const body = { name };
             if (args.max_members !== undefined) {
                 const maxMembers = Number(args.max_members);
-                if (!Number.isInteger(maxMembers) || maxMembers < 1 || maxMembers > 100) {
+                if (!Number.isInteger(maxMembers) ||
+                    maxMembers < 1 ||
+                    maxMembers > 100) {
                     return "Error: max_members must be an integer between 1 and 100.";
                 }
                 body.maxMembers = maxMembers;
@@ -1250,7 +1383,9 @@ const teamFundTool = {
         try {
             const teamId = validateUuid(String(args.team_id ?? ""), "team_id");
             const amountCents = Number(args.amount_cents ?? 0);
-            if (!Number.isInteger(amountCents) || amountCents < 100 || amountCents > 1000000) {
+            if (!Number.isInteger(amountCents) ||
+                amountCents < 100 ||
+                amountCents > 1000000) {
                 return "Error: amount_cents must be an integer between 100 ($1) and 1000000 ($10,000).";
             }
             const data = await apiPost(`/api/teams/${encodeURIComponent(teamId)}/wallet/fund`, {
@@ -1490,7 +1625,9 @@ const updateTeamTool = {
             }
             if (args.max_members !== undefined) {
                 const maxMembers = Number(args.max_members);
-                if (!Number.isInteger(maxMembers) || maxMembers < 1 || maxMembers > 100) {
+                if (!Number.isInteger(maxMembers) ||
+                    maxMembers < 1 ||
+                    maxMembers > 100) {
                     return "Error: max_members must be an integer between 1 and 100.";
                 }
                 body.maxMembers = maxMembers;
@@ -1528,7 +1665,9 @@ const topupPaypalTool = {
     execute: async (args) => {
         try {
             const amountCents = Number(args.amount_cents ?? 0);
-            if (!Number.isInteger(amountCents) || amountCents < 500 || amountCents > 100000) {
+            if (!Number.isInteger(amountCents) ||
+                amountCents < 500 ||
+                amountCents > 100000) {
                 return "Error: amount_cents must be an integer between 500 ($5) and 100000 ($1,000).";
             }
             const data = await apiPost("/api/wallet/topup/paypal", { amountCents });
@@ -1563,7 +1702,9 @@ const topupStripeTool = {
     execute: async (args) => {
         try {
             const amountCents = Number(args.amount_cents ?? 0);
-            if (!Number.isInteger(amountCents) || amountCents < 500 || amountCents > 100000) {
+            if (!Number.isInteger(amountCents) ||
+                amountCents < 500 ||
+                amountCents > 100000) {
                 return "Error: amount_cents must be an integer between 500 ($5) and 100000 ($1,000).";
             }
             const data = await apiPost("/api/wallet/topup/stripe", { amountCents });
@@ -1585,7 +1726,17 @@ const topupStripeTool = {
 };
 // 23. topup_crypto
 const VALID_CRYPTO_CURRENCIES = new Set([
-    "BTC", "ETH", "LTC", "XMR", "ZEC", "USDC", "SOL", "USDT", "DAI", "BNB", "LINK",
+    "BTC",
+    "ETH",
+    "LTC",
+    "XMR",
+    "ZEC",
+    "USDC",
+    "SOL",
+    "USDT",
+    "DAI",
+    "BNB",
+    "LINK",
 ]);
 const topupCryptoTool = {
     name: "topup_crypto",
@@ -1602,20 +1753,38 @@ const topupCryptoTool = {
             type: "string",
             description: "Cryptocurrency to pay with",
             required: true,
-            enum: ["BTC", "ETH", "LTC", "XMR", "ZEC", "USDC", "SOL", "USDT", "DAI", "BNB", "LINK"],
+            enum: [
+                "BTC",
+                "ETH",
+                "LTC",
+                "XMR",
+                "ZEC",
+                "USDC",
+                "SOL",
+                "USDT",
+                "DAI",
+                "BNB",
+                "LINK",
+            ],
         },
     },
     execute: async (args) => {
         try {
             const amountUsd = Number(args.amount_usd ?? 0);
-            if (typeof amountUsd !== "number" || !Number.isFinite(amountUsd) || amountUsd < 5 || amountUsd > 1000) {
+            if (typeof amountUsd !== "number" ||
+                !Number.isFinite(amountUsd) ||
+                amountUsd < 5 ||
+                amountUsd > 1000) {
                 return "Error: amount_usd must be a number between 5 and 1000.";
             }
             const currency = String(args.currency ?? "").toUpperCase();
             if (!VALID_CRYPTO_CURRENCIES.has(currency)) {
                 return `Error: currency must be one of: ${[...VALID_CRYPTO_CURRENCIES].join(", ")}.`;
             }
-            const data = await apiPost("/api/wallet/topup/crypto", { amountUsd, currency: currency.toLowerCase() });
+            const data = await apiPost("/api/wallet/topup/crypto", {
+                amountUsd,
+                currency: currency.toLowerCase(),
+            });
             return [
                 "Crypto Payment Invoice Created",
                 "",
@@ -1727,7 +1896,9 @@ const updateWalletPolicyTool = {
                 }
                 else {
                     const dailyLimit = Number(args.daily_limit_cents);
-                    if (!Number.isInteger(dailyLimit) || dailyLimit < 1 || dailyLimit > 1000000) {
+                    if (!Number.isInteger(dailyLimit) ||
+                        dailyLimit < 1 ||
+                        dailyLimit > 1000000) {
                         return "Error: daily_limit_cents must be a positive integer between 1 and 1000000, or null to clear.";
                     }
                     body.dailyLimitCents = dailyLimit;
@@ -1827,7 +1998,9 @@ const getTransactionsTool = {
             }
             const lines = [`Wallet Transactions (${txs.length})`, ""];
             for (const tx of txs) {
-                const sign = tx.type === "topup" || tx.type === "refund" || tx.type === "fund" ? "+" : "-";
+                const sign = tx.type === "topup" || tx.type === "refund" || tx.type === "fund"
+                    ? "+"
+                    : "-";
                 lines.push(`  ${sign}${formatCents(Math.abs(tx.amountCents))} [${tx.type}] ${tx.description}`);
                 lines.push(`    ${tx.createdAt}`);
             }
@@ -1998,7 +2171,12 @@ const registerTool = {
             if (password.length < 8 || password.length > 128) {
                 return "Error: Password must be 8-128 characters.";
             }
-            const data = await unauthenticatedRequest("POST", "/api/auth/register", { email, password });
+            // Solve PoW for CAPTCHA-free registration
+            const pow = await solvePoW(getBaseUrl());
+            const regBody = { email, password };
+            if (pow)
+                regBody.pow = pow;
+            const data = await unauthenticatedRequest("POST", "/api/auth/register", regBody);
             return [
                 "Account Registered",
                 "",
@@ -2130,7 +2308,10 @@ const verifyEmailTool = {
             if (/[\x00-\x1f\x7f]/.test(code)) {
                 return "Error: Verification code contains invalid control characters.";
             }
-            await unauthenticatedRequest("POST", "/api/auth/verify-email", { email, code });
+            await unauthenticatedRequest("POST", "/api/auth/verify-email", {
+                email,
+                code,
+            });
             return [
                 "Email Verified Successfully",
                 "",
@@ -2735,6 +2916,134 @@ const teamCancelInviteTool = {
     },
 };
 // ---------------------------------------------------------------------------
+// MPP (Machine Payment Protocol) tools
+// ---------------------------------------------------------------------------
+const mppInfoTool = {
+    name: "mpp_info",
+    description: "Get Machine Payment Protocol (MPP) information including enabled status, " +
+        "supported payment methods, pricing, and session limits.",
+    parameters: {},
+    execute: async () => {
+        try {
+            const data = await apiGet("/api/mpp/info");
+            return JSON.stringify(data, null, 2);
+        }
+        catch (err) {
+            return `Error: ${safeError(err)}`;
+        }
+    },
+};
+const payMppTool = {
+    name: "pay_mpp",
+    description: "Top up wallet via Machine Payment Protocol (MPP). " +
+        "Supports tempo, stripe_spt, and lightning payment methods.",
+    parameters: {
+        amount_cents: {
+            type: "number",
+            description: "Amount in cents to top up (min 500 = $5, max 100000 = $1,000)",
+            required: true,
+        },
+        method: {
+            type: "string",
+            description: "MPP payment method",
+            required: true,
+            enum: ["tempo", "stripe_spt", "lightning"],
+        },
+    },
+    execute: async (args) => {
+        const amountCents = Number(args.amount_cents);
+        const method = String(args.method ?? "");
+        if (!Number.isInteger(amountCents) ||
+            amountCents < 500 ||
+            amountCents > 100_000) {
+            return "Error: amount_cents must be an integer between 500 and 100,000";
+        }
+        if (!["tempo", "stripe_spt", "lightning"].includes(method)) {
+            return "Error: method must be one of: tempo, stripe_spt, lightning";
+        }
+        try {
+            const data = await apiPost("/api/mpp/topup", {
+                amountCents,
+                method,
+            });
+            return JSON.stringify(data, null, 2);
+        }
+        catch (err) {
+            return `Error: ${safeError(err)}`;
+        }
+    },
+};
+const mppSessionOpenTool = {
+    name: "mpp_session_open",
+    description: "Open a pay-as-you-go MPP session. Returns a channelId for metered proxy usage.",
+    parameters: {
+        max_deposit_cents: {
+            type: "number",
+            description: "Maximum deposit in cents (min 500, max 100000)",
+            required: true,
+        },
+        method: {
+            type: "string",
+            description: "MPP payment method",
+            required: true,
+            enum: ["tempo", "stripe_spt", "lightning"],
+        },
+        pool_type: {
+            type: "string",
+            description: "Proxy pool type: dc ($3/GB) or residential ($5/GB)",
+            default: "dc",
+            enum: ["dc", "residential"],
+        },
+    },
+    execute: async (args) => {
+        const maxDepositCents = Number(args.max_deposit_cents);
+        const method = String(args.method ?? "");
+        const poolType = String(args.pool_type ?? "dc");
+        if (!Number.isInteger(maxDepositCents) ||
+            maxDepositCents < 500 ||
+            maxDepositCents > 100_000) {
+            return "Error: max_deposit_cents must be an integer between 500 and 100,000";
+        }
+        if (!["tempo", "stripe_spt", "lightning"].includes(method)) {
+            return "Error: method must be one of: tempo, stripe_spt, lightning";
+        }
+        if (!["dc", "residential"].includes(poolType)) {
+            return "Error: pool_type must be dc or residential";
+        }
+        try {
+            const data = await apiPost("/api/mpp/session/open", { maxDepositCents, method, poolType });
+            return JSON.stringify(data, null, 2);
+        }
+        catch (err) {
+            return `Error: ${safeError(err)}`;
+        }
+    },
+};
+const mppSessionCloseTool = {
+    name: "mpp_session_close",
+    description: "Close an MPP pay-as-you-go session. Returns the amount spent and refunded.",
+    parameters: {
+        channel_id: {
+            type: "string",
+            description: "The channelId returned from mpp_session_open",
+            required: true,
+        },
+    },
+    execute: async (args) => {
+        const channelId = String(args.channel_id ?? "");
+        if (!channelId) {
+            return "Error: channel_id is required";
+        }
+        try {
+            const data = await apiPost("/api/mpp/session/close", { channelId });
+            return JSON.stringify(data, null, 2);
+        }
+        catch (err) {
+            return `Error: ${safeError(err)}`;
+        }
+    },
+};
+// ---------------------------------------------------------------------------
 // Plugin export — the tools array that OpenClaw discovers
 // ---------------------------------------------------------------------------
 export const tools = [
@@ -2800,6 +3109,11 @@ export const tools = [
     teamInviteMemberTool,
     teamListInvitesTool,
     teamCancelInviteTool,
+    // MPP (4)
+    mppInfoTool,
+    payMppTool,
+    mppSessionOpenTool,
+    mppSessionCloseTool,
 ];
 /**
  * Plugin metadata for OpenClaw discovery.

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@dominusnode/openclaw-plugin",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Dominus Node proxy plugin for OpenClaw — route web requests through rotating proxy networks",
   "main": "dist/plugin.js",
   "types": "dist/plugin.d.ts",
@@ -8,9 +8,11 @@
   "license": "MIT",
   "scripts": {
     "build": "tsc",
+    "prepare": "npm run build",
     "test": "vitest run"
   },
   "devDependencies": {
+    "@types/node": "^22.0.0",
     "typescript": "^5.4.0",
     "vitest": "^1.6.0"
   },