@envarai/envarpay 0.2.0-alpha.8 → 2026.1025.1

package/dist/commerce/native-inventory.js

@@ -0,0 +1,75 @@
+import { existsSync, lstatSync, readFileSync, readdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { extname, join, resolve } from 'node:path';
+import { createHash } from 'node:crypto';
+import { parse } from 'yaml';
+const namePattern = /^[a-z][a-z0-9-]{0,63}$/;
+// Native installer provenance is included in the source digest, but never
+// copied into the executable service package or supplied to the model.
+export const isSkillInstallerMetadata = (path) => path === '.clawhub/origin.json' || path === '.openclaw/source-origin.json';
+export function readSkillInventory(roots) {
+    const found = [];
+    const seen = new Set();
+    function visit(folder, depth) {
+        if (depth > 10 || found.length >= 128 || !existsSync(folder))
+            return;
+        const stat = lstatSync(folder);
+        if (!stat.isDirectory() || stat.isSymbolicLink())
+            return;
+        const entry = join(folder, 'SKILL.md');
+        if (!existsSync(entry)) {
+            for (const child of readdirSync(folder).sort())
+                if (!child.startsWith('.'))
+                    visit(join(folder, child), depth + 1);
+            return;
+        }
+        const info = lstatSync(entry);
+        if (!info.isFile() || info.isSymbolicLink() || info.size > 48000)
+            return;
+        const raw = readFileSync(entry, 'utf8'), header = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(raw)?.[1];
+        let meta;
+        try {
+            meta = parse(header ?? '') ?? {};
+        }
+        catch {
+            return;
+        }
+        if (typeof meta.name !== 'string' || !namePattern.test(meta.name) || seen.has(meta.name))
+            return;
+        const files = [];
+        let size = 0, supported = true;
+        function collect(path, prefix = '', level = 0) {
+            if (level > 10) {
+                supported = false;
+                return;
+            }
+            for (const name of readdirSync(path).sort()) {
+                const file = join(path, name), s = lstatSync(file);
+                if (s.isSymbolicLink()) {
+                    supported = false;
+                    continue;
+                }
+                if (s.isDirectory()) {
+                    collect(file, prefix + name + '/', level + 1);
+                    continue;
+                }
+                if (!s.isFile() || s.size > 512 * 1024 || (size += s.size) > 1024 * 1024 || files.length >= 128) {
+                    supported = false;
+                    continue;
+                }
+                if (!['.md', '.txt'].includes(extname(name).toLowerCase()) && name !== 'LICENSE' && !isSkillInstallerMetadata(prefix + name))
+                    supported = false;
+                files.push([prefix + name, createHash('sha256').update(readFileSync(file)).digest('hex')]);
+            }
+        }
+        collect(folder);
+        files.sort((a, b) => a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0);
+        const canonical = JSON.stringify(files).replace(/[\u007f-\uffff]/g, c => '\\u' + c.charCodeAt(0).toString(16).padStart(4, '0'));
+        seen.add(meta.name);
+        found.push({ name: meta.name, path: resolve(folder), description: String(meta.description ?? '').slice(0, 500), supported, digest: createHash('sha256').update(canonical).digest('hex'), files: files.length });
+    }
+    for (const root of roots.slice(0, 16))
+        if (typeof root === 'string')
+            visit(resolve(root.replace(/^~(?=\/|$)/, homedir())), 0);
+    return found;
+}

package/dist/commerce/native-skills.d.ts

@@ -10,6 +10,14 @@ export interface NativeSkillSettings {
     model: string;
     baseUrl: string;
     apiKeyFile: string;
+    /** Host-side Docker CLI, never a Docker socket mounted into the Agent. */
+    dockerContainer?: string;
+    dockerStateDirectory?: string;
+    discovery?: {
+        hermesHome: string;
+        enabledFromWeb: true;
+        roots?: string[];
+    };
 }
 interface InstalledSkill {
     descriptor: SkillDescriptor;

package/dist/commerce/native-skills.js

@@ -56,8 +56,8 @@ export function readInstalledSkills(root, freeSkills, cardUrl) {
             throw new CommerceError('skill_size', 'Instruction resources exceed the supported context size');
         output.push({ descriptor: { name, digest: digest(files), cardUrl, access: freeSkills.includes(name) ? 'free' : 'paid', description }, instructions: instructions + references });
     }
-    if (!output.length || output.length > 32 || freeSkills.some(name => !output.some(s => s.descriptor.name === name)))
-        throw new CommerceError('skill_inventory', 'Install between 1 and 32 skills and declare only installed free skills');
+    if (output.length > 32 || freeSkills.some(name => !output.some(s => s.descriptor.name === name)))
+        throw new CommerceError('skill_inventory', 'Install at most 32 skills and declare only installed free skills');
     // Free helpers are executable dependencies of every purchase, so their versions
     // and access-policy changes must invalidate the quote's selected skill digest too.
     const helpers = output.filter(s => s.descriptor.access === 'free').map(s => ({ name: s.descriptor.name, digest: s.descriptor.digest }));
@@ -70,7 +70,7 @@ export function createNativeSkillExecutor(settings, origin, agentName) {
         throw new CommerceError('skill_settings', 'Configure a supported native skill runtime');
     const cardUrl = new URL('/.well-known/agent-card.json', origin).href;
     const installed = () => readInstalledSkills(settings.skillsDirectory, settings.freeSkills, cardUrl);
-    const initial = installed();
+    installed();
     mkdirSync(settings.stateDirectory, { recursive: true, mode: 0o700 });
     const stateStat = lstatSync(settings.stateDirectory);
     if (!stateStat.isDirectory() || stateStat.isSymbolicLink() || (stateStat.mode & 0o077) !== 0)
@@ -85,7 +85,7 @@ export function createNativeSkillExecutor(settings, origin, agentName) {
         }
     }
     const inFlight = new Map();
-    const runner = fileURLToPath(new URL('../../examples/native-skill-runner.py', import.meta.url));
+    const runner = fileURLToPath(new URL('../../runtime/native-skill-runner.py', import.meta.url));
     function readTask(id, invocation) {
         const row = db.prepare('SELECT order_id,task_json FROM skill_tasks WHERE id=?').get(id);
         if (!row || row.order_id !== invocation.orderId)
@@ -94,7 +94,12 @@ export function createNativeSkillExecutor(settings, origin, agentName) {
     }
     function executeProcess(payload) {
         return new Promise((accept, reject) => {
-            const child = spawn(settings.python, [runner], { stdio: ['pipe', 'pipe', 'pipe'], env: { PATH: process.env.PATH, LANG: 'C.UTF-8', PYTHONUNBUFFERED: '1' } });
+            const docker = settings.dockerContainer;
+            if (docker && !/^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,127}$/.test(docker))
+                throw new CommerceError('skill_container', 'Invalid Docker container name');
+            const child = docker
+                ? spawn('docker', ['exec', '-i', docker, settings.python, '-c', readFileSync(runner, 'utf8')], { stdio: ['pipe', 'pipe', 'pipe'], env: { PATH: process.env.PATH, HOME: process.env.HOME, DOCKER_CONFIG: process.env.DOCKER_CONFIG, DOCKER_HOST: process.env.DOCKER_HOST } })
+                : spawn(settings.python, [runner], { stdio: ['pipe', 'pipe', 'pipe'], env: { PATH: process.env.PATH, LANG: 'C.UTF-8', PYTHONUNBUFFERED: '1' } });
             const chunks = [];
             let size = 0;
             const timeout = setTimeout(() => child.kill('SIGTERM'), 240000);
@@ -145,7 +150,7 @@ export function createNativeSkillExecutor(settings, origin, agentName) {
             const operation = (async () => {
                 let task;
                 try {
-                    const result = await executeProcess({ settings: { ...settings, stateDirectory: join(settings.stateDirectory, id) }, skillName: name, skills: allowed.map(s => ({ name: s.descriptor.name, instructions: s.instructions })), input });
+                    const result = await executeProcess({ settings: { ...settings, stateDirectory: join(settings.dockerStateDirectory ?? settings.stateDirectory, id) }, skillName: name, skills: allowed.map(s => ({ name: s.descriptor.name, instructions: s.instructions })), input });
                     task = Task.fromJSON({ id, status: { state: 'TASK_STATE_COMPLETED' }, artifacts: [{ artifactId: 'result', name: name + '.md', parts: [{ text: result.output, mediaType: 'text/markdown' }] }], metadata: { skillName: name, skillDigest: selected.descriptor.digest, allowedSkills: allowed.map(s => s.descriptor.name), framework: settings.framework, tools: result.tools, sessionId: result.sessionId ?? id } });
                 }
                 catch (error) {
@@ -165,7 +170,5 @@ export function createNativeSkillExecutor(settings, origin, agentName) {
         const skills = installed();
         return AgentCard.fromJSON({ name: agentName, description: 'Installed Agent Skills', version: '1.0', supportedInterfaces: [{ url: new URL('/a2a', origin).href, protocolBinding: 'JSONRPC', protocolVersion: '1.0' }], capabilities: { extensions: [{ uri: 'urn:envarpay:skill-gate:1', required: false, params: { runtime: 'instruction-only-v1', skills: skills.map(s => ({ name: s.descriptor.name, digest: s.descriptor.digest, access: s.descriptor.access })) } }] }, defaultInputModes: ['application/json'], defaultOutputModes: ['text/markdown'], skills: skills.map(s => ({ id: s.descriptor.name, name: s.descriptor.name, description: s.descriptor.description, tags: [s.descriptor.name] })) });
     };
-    if (initial.length === 0)
-        throw new CommerceError('skill_inventory', 'No installed skills');
     return { execute, close: async () => { await Promise.allSettled(inFlight.values()); db.close(); } };
 }

package/dist/commerce/openclaw-setup.d.ts

@@ -0,0 +1,28 @@
+export declare function openclawRoots(home?: string): string[];
+export declare function openclawInventory(home?: string): {
+    name: string;
+    path: string;
+    description: string;
+    supported: boolean;
+    digest: string;
+    files: number;
+}[];
+export declare function probeOpenClaw(home?: string, python?: string): {
+    home: string;
+    python: string;
+    command: string[];
+    model: string;
+    baseUrl: any;
+    apiKeyFile: null;
+    apiKey: string;
+    skillRoots: string[];
+    skills: {
+        textPackage: boolean;
+        name: string;
+        path: string;
+        description: string;
+        supported: boolean;
+        digest: string;
+        files: number;
+    }[];
+};

package/dist/commerce/openclaw-setup.js

@@ -0,0 +1,43 @@
+/** Read local OpenClaw configuration and installed Skill metadata without invoking a model. */
+import { existsSync, lstatSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { execFileSync } from 'node:child_process';
+import { readSkillInventory } from './native-inventory.js';
+import { CommerceError } from './types.js';
+function configuration(home) {
+    const path = home ? join(resolve(home), 'openclaw.json') : process.env.OPENCLAW_CONFIG_PATH ?? join(process.env.OPENCLAW_STATE_DIR ?? join(homedir(), '.openclaw'), 'openclaw.json');
+    const stat = lstatSync(path);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1024 * 1024)
+        throw new CommerceError('setup_model', 'Use a bounded local OpenClaw configuration file');
+    return { home: dirname(resolve(path)), config: JSON.parse(readFileSync(path, 'utf8')) };
+}
+export function openclawRoots(home) {
+    const local = configuration(home), config = local.config, defaults = config.agents?.defaults ?? {};
+    const agent = config.agents?.list?.find((a) => a.default || a.id === 'main');
+    return [join(local.home, 'skills'), join(agent?.workspace ?? defaults.workspace ?? join(local.home, 'workspace'), 'skills'), ...(config.skills?.load?.extraDirs ?? [])].filter((r) => typeof r === 'string');
+}
+export function openclawInventory(home) { return readSkillInventory(openclawRoots(home)); }
+export function probeOpenClaw(home, python = 'python3') {
+    const local = configuration(home), config = local.config;
+    const agent = config.agents?.list?.find((a) => a.default || a.id === 'main');
+    const selected = agent?.model ?? config.agents?.defaults?.model;
+    const primary = typeof selected === 'string' ? selected : selected?.primary;
+    if (typeof primary !== 'string' || !primary.includes('/'))
+        throw new CommerceError('setup_model', 'Configure an OpenAI-compatible OpenClaw model first');
+    const slash = primary.indexOf('/'), provider = config.models?.providers?.[primary.slice(0, slash)], model = primary.slice(slash + 1);
+    let key = provider?.apiKey;
+    if (typeof key === 'string') {
+        const env = /^\$\{([A-Z_][A-Z0-9_]*)\}$/.exec(key);
+        if (env)
+            key = process.env[env[1]];
+    }
+    else if (key?.source === 'env' && typeof key.id === 'string')
+        key = process.env[key.id];
+    if (typeof key !== 'string' || !key.trim() || typeof provider?.baseUrl !== 'string' || (provider.api ?? 'openai-completions') !== 'openai-completions')
+        throw new CommerceError('setup_model', 'Use an OpenAI-compatible provider with a locally available API key');
+    const command = existsSync('/app/openclaw.mjs') ? [process.execPath, '/app/openclaw.mjs'] : ['openclaw'];
+    execFileSync(python, ['--version'], { stdio: 'pipe', timeout: 10000 });
+    execFileSync(command[0], [...command.slice(1), '--version'], { stdio: 'pipe', timeout: 30000 });
+    return { home: local.home, python, command, model, baseUrl: provider.baseUrl, apiKeyFile: null, apiKey: key, skillRoots: openclawRoots(local.home), skills: openclawInventory(local.home).map(s => ({ ...s, textPackage: s.supported })) };
+}

package/dist/commerce/operations.d.ts

@@ -1,8 +1,7 @@
 export { inspectLocalAlerts, type LocalAlertOptions } from './alerts.js';
 export type InspectionView = 'attention' | 'refund-review';
-/** Local owner-only diagnostics: never opens a signer, vault, provider or network. */
 export declare function inspectLedger(path: string, after?: number, limit?: number, view?: InspectionView): {
-    role: string;
+    role: "seller";
     view: InspectionView;
     total: number;
     attentionCount: number;

package/dist/commerce/operations.js

@@ -1,37 +1,34 @@
+/** Owner-only, read-only inspection of original seller orders. */
 import { DatabaseSync } from 'node:sqlite';
 import { lstatSync } from 'node:fs';
 import { CommerceError } from './types.js';
 export { inspectLocalAlerts } from './alerts.js';
-/** Local owner-only diagnostics: never opens a signer, vault, provider or network. */
+const ATTENTION = "payment_state IN ('settling','unknown') OR execution_state IN ('dispatching','unknown')";
+const REFUND_REVIEW = "payment_state='confirmed' AND execution_state='failed'";
 export function inspectLedger(path, after = 0, limit = 100, view = 'attention') {
     const stat = lstatSync(path);
     if (!stat.isFile() || stat.isSymbolicLink() || (stat.mode & 0o077) !== 0 || (process.getuid && stat.uid !== process.getuid()))
         throw new CommerceError('private_file', 'Inspect an existing ledger owned only by the current user');
     if (!Number.isSafeInteger(after) || after < 0 || !Number.isSafeInteger(limit) || limit < 1 || limit > 100)
-        throw new CommerceError('inspection_cursor', 'Use a nonnegative row cursor and a limit from1 to100');
+        throw new CommerceError('inspection_cursor', 'Use a nonnegative row cursor and a limit from 1 to 100');
     if (!['attention', 'refund-review'].includes(view))
         throw new CommerceError('inspection_view', 'Use attention or refund-review inspection');
     const db = new DatabaseSync(path, { readOnly: true });
     try {
         db.exec('PRAGMA query_only=ON; PRAGMA busy_timeout=1000');
-        const names = new Set(db.prepare("SELECT name FROM sqlite_master WHERE type='table'").all().map(row => row.name));
-        const role = names.has('buyer_purchases') ? 'buyer' : names.has('commerce_orders') ? 'seller' : null;
-        if (!role)
-            throw new CommerceError('store_version', 'Unrecognized commerce ledger');
-        const meta = role === 'buyer' ? 'buyer_meta' : 'commerce_meta', version = role === 'buyer' ? 1 : 2;
-        if (db.prepare(`SELECT version FROM ${meta}`).get()?.version !== version)
-            throw new CommerceError('store_version', 'Unsupported commerce ledger version');
-        const table = role === 'buyer' ? 'buyer_purchases' : 'commerce_orders';
-        const total = Number(db.prepare(`SELECT COUNT(*) AS n FROM ${table}`).get().n);
-        const attention = role === 'buyer' ? "json_extract(record_json,'$.state') IN ('signing','submitted','unknown') OR json_extract(record_json,'$.paymentState') IN ('reserved','unknown') OR json_extract(record_json,'$.executionState')='unknown'" : "payment_state IN ('settling','unknown') OR execution_state IN ('dispatching','unknown')";
-        const refundReview = role === 'buyer' ? "json_extract(record_json,'$.paymentState')='confirmed' AND json_extract(record_json,'$.executionState')='failed'" : "payment_state='confirmed' AND execution_state='failed'";
-        const filter = view === 'refund-review' ? refundReview : attention;
-        const selected = role === 'buyer' ? "rowid AS cursor,id,json_extract(record_json,'$.paymentState') AS payment_state,json_extract(record_json,'$.executionState') AS execution_state,json_extract(record_json,'$.task.id') AS task_id" : "rowid AS cursor,id,payment_state,execution_state,task_id";
-        const rows = db.prepare(`SELECT ${selected} FROM ${table} WHERE rowid>? AND (${filter}) ORDER BY rowid LIMIT ?`).all(after, limit + 1);
-        const page = rows.slice(0, limit).map(row => ({ cursor: Number(row.cursor), id: String(row.id), paymentState: String(row.payment_state), executionState: String(row.execution_state), taskId: typeof row.task_id === 'string' ? row.task_id : null, ...(view === 'refund-review' ? { reason: 'confirmed_payment_failed_execution' } : {}) }));
-        const attentionCount = Number(db.prepare(`SELECT COUNT(*) AS n FROM ${table} WHERE ${attention}`).get().n);
-        const refundReviewCount = Number(db.prepare(`SELECT COUNT(*) AS n FROM ${table} WHERE ${refundReview}`).get().n);
-        return { role, view, total, attentionCount, refundReviewCount, items: page, nextCursor: page.at(-1)?.cursor ?? after, hasMore: rows.length > limit, paymentPerformed: false, refundPerformed: false };
+        if (db.prepare('SELECT version FROM commerce_meta').get()?.version !== 2)
+            throw new CommerceError('store_version', 'Unsupported seller ledger version');
+        const total = Number(db.prepare('SELECT COUNT(*) AS n FROM commerce_orders').get().n);
+        const filter = view === 'refund-review' ? REFUND_REVIEW : ATTENTION;
+        const rows = db.prepare(`SELECT rowid AS cursor,id,payment_state,execution_state,task_id FROM commerce_orders WHERE rowid>? AND (${filter}) ORDER BY rowid LIMIT ?`).all(after, limit + 1);
+        const page = rows.slice(0, limit).map(row => ({
+            cursor: Number(row.cursor), id: String(row.id), paymentState: String(row.payment_state),
+            executionState: String(row.execution_state), taskId: typeof row.task_id === 'string' ? row.task_id : null,
+            ...(view === 'refund-review' ? { reason: 'confirmed_payment_failed_execution' } : {}),
+        }));
+        const attentionCount = Number(db.prepare(`SELECT COUNT(*) AS n FROM commerce_orders WHERE ${ATTENTION}`).get().n);
+        const refundReviewCount = Number(db.prepare(`SELECT COUNT(*) AS n FROM commerce_orders WHERE ${REFUND_REVIEW}`).get().n);
+        return { role: 'seller', view, total, attentionCount, refundReviewCount, items: page, nextCursor: page.at(-1)?.cursor ?? after, hasMore: rows.length > limit, paymentPerformed: false, refundPerformed: false };
     }
     finally {
         db.close();

package/dist/commerce/pricing.d.ts

@@ -7,6 +7,5 @@ export declare function buildQuote(config: CommerceConfig, args: {
     input: Input;
     now?: Date;
     ttlSeconds?: number;
-    stripeRecipient?: string;
 }): Readonly<PriceQuote>;
 export declare function assertQuoteRequest(quote: Readonly<PriceQuote>, caller: string, messageId: string, input: Input, now?: Date): void;

package/dist/commerce/pricing.js

@@ -33,9 +33,7 @@ export function buildQuote(config, args) {
     if (amount >= 2n ** 256n)
         throw new CommerceError('invalid_amount', 'Quoted amount is too large');
     const profile = offer.paymentProfile ? config.paymentProfiles[offer.paymentProfile] : null;
-    const recipient = profile?.adapter === 'x402' ? profile.payTo : profile ? args.stripeRecipient : null;
-    if (profile?.adapter === 'mpp' && !recipient)
-        throw new CommerceError('merchant_not_ready', 'Resolve and verify the Stripe merchant before quoting');
+    const recipient = profile?.accountRef ?? null;
     const now = args.now ?? new Date();
     const ttl = args.ttlSeconds ?? 600;
     if (!Number.isInteger(ttl) || ttl < 1 || ttl > 3600 || !Number.isFinite(now.getTime()))

package/dist/commerce/runtime.d.ts

@@ -5,6 +5,6 @@ export * from './upstream.js';
 export * from './skill-gate.js';
 export * from './native-skills.js';
 export * from './http.js';
-export * from './x402.js';
+export * from './envar-balance.js';
 export * from './vault.js';
-export * from './chain.js';
+export * from './external-agent.js';

package/dist/commerce/runtime.js

@@ -5,6 +5,6 @@ export * from './upstream.js';
 export * from './skill-gate.js';
 export * from './native-skills.js';
 export * from './http.js';
-export * from './x402.js';
+export * from './envar-balance.js';
 export * from './vault.js';
-export * from './chain.js';
+export * from './external-agent.js';

package/dist/commerce/server.d.ts

@@ -23,7 +23,6 @@ export interface CommerceServerOptions {
             headers: Record<string, string>;
         }>;
     };
-    stripeRecipientFor?: (accountRef: string) => string | undefined;
     ownershipChallenges?: Readonly<Record<string, string>>;
     onError?: (code: string, orderId?: string) => void;
 }

package/dist/commerce/server.js

@@ -233,9 +233,8 @@ export class CommerceServer {
         const frozen = this.store.catalogHistory().find(entry => entry.service.id === service.id && entry.service.revision === service.revision);
         if (!frozen)
             throw new CommerceError('unknown_revision', 'Service revision is not registered');
-        const config = { ...this.currentConfig, paymentProfiles: frozen.profiles, services: [frozen.service] }, offer = frozen.service.offers.find(o => o.id === offerId);
-        const profile = offer.paymentProfile ? frozen.profiles[offer.paymentProfile] : undefined;
-        return buildQuote(config, { serviceId: service.id, offerId, caller, messageId, input, ...(profile?.adapter === 'mpp' ? { stripeRecipient: this.options.stripeRecipientFor?.(profile.accountRef) } : {}) });
+        const config = { ...this.currentConfig, paymentProfiles: frozen.profiles, services: [frozen.service] };
+        return buildQuote(config, { serviceId: service.id, offerId, caller, messageId, input });
     }
     async handle(request) {
         const url = new URL(request.url);

package/dist/commerce/setup.d.ts

@@ -0,0 +1,25 @@
+export interface SetupBundle {
+    version: 1;
+    agentId: string;
+    agentName: string;
+    runtimeAgentId: string;
+    platformOrigin: string;
+    token: string;
+    expiresAt: string;
+}
+export declare function parseSetupBundle(raw: unknown): SetupBundle;
+export declare function prepareTextSkill(source: string, destination: string, name: string): void;
+export declare function setupAgent(options: {
+    framework?: "hermes" | "openclaw";
+    managed?: boolean;
+    file: string;
+    directory?: string;
+    container?: string;
+    python?: string;
+    home?: string;
+    automatic?: {
+        port: number;
+        origin: string;
+    };
+}): Promise<void>;
+export declare const setupHermes: (options: Parameters<typeof setupAgent>[0]) => Promise<void>;