@four-meme/four-meme-ai 1.0.2 → 1.0.4

package/CLAUDE.md

@@ -45,7 +45,7 @@ The SKILL defines a **User Agreement & Security Notice** (bilingual: English + T
 3. **MUST NOT** run any operation that uses a private key or writes on-chain (e.g. `create-api`, `create-chain`, `buy`, `sell`, `send`, `8004-register`) until the user has explicitly agreed or confirmed to continue.
 4. May run read‑only commands (e.g. `config`, `token-info`, `quote-buy`, `8004-balance`) while or after presenting the notice.
 
-Never ask the user to paste a private key into chat. All private keys must come from environment / config (e.g. `PRIVATE_KEY`, `FOURMEME_PRIVATE_KEY`) as described in `SKILL.md`.
+Never ask the user to paste a private key into chat. All private keys must come from environment / config (e.g. `PRIVATE_KEY`) as described in `SKILL.md`.
 
 ## Conventions (aligned with SKILL.md)
 
@@ -59,7 +59,7 @@ Never ask the user to paste a private key into chat. All private keys must come
    - For tax-type tokens, follow `tokenTaxInfo` constraints in `references/token-tax-info.md` and the interactive flow in `SKILL.md` (“Create token (full flow)”).
 4. **RPC and private key (environment)**:
    - When **using OpenClaw**: PRIVATE_KEY and BSC_RPC_URL are configured in OpenClaw (e.g. `skills.entries["four-meme-ai"].env` or apiKey); see SKILL.md.
-   - When **not using OpenClaw (standalone)**: set `PRIVATE_KEY` (or `FOURMEME_PRIVATE_KEY`) and optionally `BSC_RPC_URL` via the process environment—e.g. a `.env` file in the project root (loaded by the user before running `npx fourmeme`) or shell `export`. The scripts do not load `.env` automatically; the variables must be in the environment when the CLI runs. Do not ask the user to paste a private key in chat.
+   - When **not using OpenClaw (standalone)**: set `PRIVATE_KEY` and optionally `BSC_RPC_URL` via the process environment—e.g. a `.env` file in the **directory where you run `fourmeme`** (the CLI loads it automatically via dotenv) or shell `export`. Do not ask the user to paste a private key in chat.
 
 ## CLI Usage (fourmeme)
 

package/README.md

@@ -51,7 +51,7 @@ export BSC_RPC_URL=https://bsc-dataseed.binance.org
 npx fourmeme create-api ./logo.png MyToken MTK "Desc" AI
 ```
 
-- **PRIVATE_KEY** (or **FOURMEME_PRIVATE_KEY**): Required for any command that signs or sends a transaction (create-api, create-chain, buy, sell, send, 8004-register). Hex string; `0x` prefix optional.
+- **PRIVATE_KEY**: Required for any command that signs or sends a transaction (create-api, create-chain, buy, sell, send, 8004-register). Hex string; `0x` prefix optional.
 - **BSC_RPC_URL**: Optional. BSC RPC endpoint; if unset, scripts use a default public BSC RPC.
 
 **Security**: Do not commit `.env` or share your private key. Add `.env` to `.gitignore` if you use a `.env` file.

package/bin/fourmeme.cjs

@@ -1,12 +1,16 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 /**
  * fourmeme CLI - dispatches to four-meme-integration scripts.
  * Usage: fourmeme <command> [args...]
  * Run "fourmeme --help" for commands.
+ * Loads .env from current working directory (where you run fourmeme) if present.
  */
 const { spawnSync } = require('child_process');
 const path = require('path');
 
+// Load .env from cwd (e.g. your project dir) so PRIVATE_KEY, BSC_RPC_URL etc. work when running from a project
+require('dotenv').config({ path: path.join(process.cwd(), '.env') });
+
 const root = path.join(__dirname, '..');
 const scriptsDir = path.join(root, 'skills', 'four-meme-integration', 'scripts');
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@four-meme/four-meme-ai",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Four.meme AI skills for creating and trading meme tokens (BSC only)",
   "license": "MIT",
   "type": "module",
@@ -42,6 +42,9 @@
     "skill",
     "openclaw"
   ],
+  "dependencies": {
+    "dotenv": "^16.0.0"
+  },
   "devDependencies": {
     "@types/node": "^20.0.0",
     "tsx": "^4.20.0",

package/skills/four-meme-integration/SKILL.md

@@ -13,13 +13,13 @@ description: |
   - **Discover → detail → quote → execute**: use token-rankings / token-list / events to find tokens → token-get / token-info for details → quote-buy / quote-sell to estimate → buy / sell to execute (see "Agent workflow: buy/sell from rankings or events" below).
 
   BSC only (Arbitrum/Base not supported). **Before use, the fourmeme CLI must be installed** (e.g. `npm install -g @four-meme/four-meme-ai@latest`). Create/chain need PRIVATE_KEY. TokenManager V1 not supported.
-  **OpenClaw**: PRIVATE_KEY and BSC_RPC_URL are declared in metadata and injected by OpenClaw only when this skill is **enabled** (only this skill can access them). **Two steps required**: (1) Configure private key in the skill’s `apiKey` or `skills.entries["four-meme-ai"].env`; (2) **Enable this skill** in the agent/session so OpenClaw injects the env. See "PRIVATE_KEY and BSC_RPC_URL" below.
+  **OpenClaw**: Only **PRIVATE_KEY** is declared in registry metadata (`requires.env`) and is injected when this skill is **enabled**; **BSC_RPC_URL** is optional (set in global env or project `.env`). **Two steps required**: (1) Configure private key in the skill’s `apiKey` or `skills.entries["four-meme-ai"].env`; (2) **Enable this skill** so OpenClaw injects PRIVATE_KEY. See "PRIVATE_KEY and BSC_RPC_URL" and "Declared and optional environment variables" below.
 allowed-tools:
   - Bash(fourmeme *)
   - Bash(npx fourmeme *)
 license: MIT
 metadata:
-  {"author":"Four.meme AI Skill","version":"1.0.0","openclaw":{"requires":{"env":["PRIVATE_KEY"]},"primaryEnv":"PRIVATE_KEY"}}
+  {"author":"Four.meme AI Skill","version":"1.0.0","openclaw":{"requires":{"env":["PRIVATE_KEY"]},"primaryEnv":"PRIVATE_KEY","optionalEnv":["BSC_RPC_URL"]}}
 ---
 
 ## [Agent must follow] User agreement and security notice on first use
@@ -172,14 +172,24 @@ This skill declares `requires.env: ["PRIVATE_KEY"]` and `primaryEnv: "PRIVATE_KE
 
 **Required steps:**
 1. **Configure private key**: In the Skill management page, set the four-meme-ai skill’s **apiKey** (corresponds to `primaryEnv: "PRIVATE_KEY"`), or set `PRIVATE_KEY` under `skills.entries["four-meme-ai"].env` in `~/.openclaw/openclaw.json`. Optionally set **BSC_RPC_URL** in global env if needed.
-2. **Enable this skill**: In the agent or session, ensure the **four-meme-ai** skill is **enabled**. Only when the skill is enabled will OpenClaw inject `PRIVATE_KEY` (and `BSC_RPC_URL`) into the process; otherwise create/buy/sell/send/8004-register will fail with missing key.
+2. **Enable this skill**: In the agent or session, ensure the **four-meme-ai** skill is **enabled**. Only when the skill is enabled will OpenClaw inject **PRIVATE_KEY** into the process; otherwise create/buy/sell/send/8004-register will fail with missing key. **BSC_RPC_URL** is optional (metadata: `optionalEnv`); if not set, scripts use a default BSC RPC.
 
 **When not using OpenClaw (standalone)**  
-Set **PRIVATE_KEY** (or **FOURMEME_PRIVATE_KEY**) and optionally **BSC_RPC_URL** via the process environment so they are available when running `npx fourmeme` or `node bin/fourmeme.cjs`:
+Set **PRIVATE_KEY** and optionally **BSC_RPC_URL** via the process environment so they are available when running `npx fourmeme` or `node bin/fourmeme.cjs`:
 
-- **.env file**: Create a `.env` file in the project root with lines like `PRIVATE_KEY=...` and `BSC_RPC_URL=...`. The CLI scripts do not load `.env` automatically; you must load it before running (e.g. `export $(cat .env | xargs)` or a tool that injects `.env` into the process). Do not commit `.env`; add it to `.gitignore`.
+- **.env file**: Put a `.env` file in **the directory where you run the `fourmeme` command** (i.e. your project / working directory). Example: if you run `fourmeme quote-buy ...` from `/path/to/my-project`, place `.env` at `/path/to/my-project/.env`. The CLI automatically loads `.env` from that current working directory. Use lines like `PRIVATE_KEY=...` and `BSC_RPC_URL=...`. Do not commit `.env`; add it to `.gitignore`.
 - **Shell export**: `export PRIVATE_KEY=your_hex_key` and `export BSC_RPC_URL=https://bsc-dataseed.binance.org` (or another BSC RPC), then run `npx fourmeme <command> ...`.
 
+### Declared and optional environment variables
+
+- **Declared in registry metadata** (injected by OpenClaw when skill is enabled): **PRIVATE_KEY** (required for write operations). Optional in metadata: **BSC_RPC_URL** (scripts fall back to default BSC RPC if unset).
+- **Not in metadata; optional, may be set in env or project `.env`**: **BSC_RPC_URL**, **CREATION_FEE_WEI** (extra BNB on create), **TAX_TOKEN**, **TAX_FEE_RATE**, **TAX_BURN_RATE**, **TAX_DIVIDE_RATE**, **TAX_LIQUIDITY_RATE**, **TAX_RECIPIENT_RATE**, **TAX_RECIPIENT_ADDRESS**, **TAX_MIN_SHARING**, **WEB_URL**, **TWITTER_URL**, **TELEGRAM_URL**, **PRE_SALE**, **FEE_PLAN**, **8004_NFT_ADDRESS** / **EIP8004_NFT_ADDRESS**. Only **PRIVATE_KEY** is required for signing; others have defaults or are used only for specific commands (see Create token flow, EIP-8004, etc.).
+
+### Execution and install
+
+- **Invocation**: The agent must run commands only via the **fourmeme** CLI: `fourmeme <command> [args]` or `npx fourmeme <command> [args]` (allowed-tools). Do not invoke scripts or `npx tsx` directly; the CLI entry (`bin/fourmeme.cjs`) dispatches to the correct script and loads `.env` from the current working directory.
+- **Install**: `npm install -g @four-meme/four-meme-ai@latest`. Runtime: Node.js. Dependencies (including dotenv, viem, tsx) are declared in the package’s `package.json`; global install installs them. No separate install spec beyond the npm package.
+
 | Need | Command | When |
 |------|---------|------|
 | Public config | `fourmeme config` | Get raisedToken / config (no auth) |
@@ -229,7 +239,7 @@ fourmeme config
 ```
 
 **Step 2 – Create token (API)**  
-Requires `PRIVATE_KEY` or `FOURMEME_PRIVATE_KEY`. Outputs `createArg` and `signature` (hex).
+Requires `PRIVATE_KEY`. Outputs `createArg` and `signature` (hex).
 
 | Position | Argument | Description |
 |----------|----------|-------------|
@@ -368,7 +378,7 @@ fourmeme send <toAddress> <amountWei> [tokenAddress]
 | `amountWei` | Amount in wei (BNB or token smallest unit) |
 | `tokenAddress` | Optional. Omit or use `BNB` / `0x0` for native BNB; otherwise ERC20 contract address |
 
-- Env: `PRIVATE_KEY` or `FOURMEME_PRIVATE_KEY`. Optional: `BSC_RPC_URL`.
+- Env: `PRIVATE_KEY`. Optional: `BSC_RPC_URL`.
 - Output: JSON with `txHash`, `to`, `amountWei`, `native` (whether BNB).
 
 Examples:
@@ -448,3 +458,4 @@ See [references/tax-token-query.md](references/tax-token-query.md).
 | [execute-trade.md](references/execute-trade.md) | Execute buy/sell CLI and contract usage |
 | [event-listening.md](references/event-listening.md) | TokenManager2 event listening (V2) |
 | [tax-token-query.md](references/tax-token-query.md) | TaxToken on-chain fee/tax query (tax-info) |
+| **Official four.meme API and contracts (online)**: [Protocol Integration](https://four-meme.gitbook.io/four.meme/brand/protocol-integration) | API documents, ABIs: TokenManager, TokenManager2, Helper3, TaxToken, etc. |

package/skills/four-meme-integration/references/create-token-scripts.md

@@ -6,7 +6,7 @@
    Fetches `raisedToken` from `https://four.meme/meme-api/v1/public/config`. Use when building the create body manually.
 
 2. **create-token-api.ts**  
-   - Env: `PRIVATE_KEY` or `FOURMEME_PRIVATE_KEY`.  
+   - Env: `PRIVATE_KEY`.  
    - Args: `imagePath`, `name`, `shortName`, `desc`, `label`.  
    - Optional env: `WEB_URL`, `TWITTER_URL`, `TELEGRAM_URL`, `PRE_SALE` (default `"0"`), `FEE_PLAN` (default `"false"`).  
    - Performs: nonce → login (signs `You are sign in Meme {nonce}`) → upload image → GET public config → POST create.  

package/skills/four-meme-integration/references/execute-trade.md

@@ -1,6 +1,6 @@
 # Execute Buy / Sell (Four.meme BSC)
 
-Executes buy/sell (sends on-chain transactions). Requires `PRIVATE_KEY` or `FOURMEME_PRIVATE_KEY`. Only **TokenManager2 (V2)** tokens are supported.
+Executes buy/sell (sends on-chain transactions). Requires `PRIVATE_KEY`. Only **TokenManager2 (V2)** tokens are supported.
 
 ## Buy
 

package/skills/four-meme-integration/scripts/8004-register.ts

@@ -9,7 +9,7 @@
  *   - imageUrl: optional (URL string)
  *   - description: optional
  *
- * Env: PRIVATE_KEY or FOURMEME_PRIVATE_KEY. Optional: BSC_RPC_URL, 8004_NFT_ADDRESS.
+ * Env: PRIVATE_KEY. Optional: BSC_RPC_URL, 8004_NFT_ADDRESS.
  * Default contract: 0x8004A169FB4a3325136EB29fA0ceB6D2e539a432 (BSC).
  */
 
@@ -41,7 +41,7 @@ function buildAgentURI(name: string, imageUrl: string, description: string): str
 }
 
 async function main() {
-  const privateKey = process.env.PRIVATE_KEY || process.env.FOURMEME_PRIVATE_KEY;
+  const privateKey = process.env.PRIVATE_KEY;
   if (!privateKey) {
     console.error('Set PRIVATE_KEY');
     process.exit(1);

package/skills/four-meme-integration/scripts/create-token-api.ts

@@ -6,7 +6,7 @@
  * Usage:
  *   npx tsx create-token-api.ts <imagePath> <name> <shortName> <desc> <label> [taxOptions.json]
  *
- * Env: PRIVATE_KEY or FOURMEME_PRIVATE_KEY (wallet private key, no 0x prefix ok)
+ * Env: PRIVATE_KEY (wallet private key, no 0x prefix ok)
  * Optional env: WEB_URL, TWITTER_URL, TELEGRAM_URL, PRE_SALE ("0"), FEE_PLAN ("false")
  * Tax token: pass path to a JSON file with "tokenTaxInfo" as last arg, or set TAX_TOKEN=1 and
  *   TAX_FEE_RATE (1|3|5|10), TAX_BURN_RATE, TAX_DIVIDE_RATE, TAX_LIQUIDITY_RATE, TAX_RECIPIENT_RATE,
@@ -30,9 +30,9 @@ function toHex(value: string): string {
 }
 
 async function main() {
-  const privateKey = process.env.PRIVATE_KEY || process.env.FOURMEME_PRIVATE_KEY;
+  const privateKey = process.env.PRIVATE_KEY;
   if (!privateKey) {
-    console.error('Set PRIVATE_KEY or FOURMEME_PRIVATE_KEY');
+    console.error('Set PRIVATE_KEY');
     process.exit(1);
   }
   const pk = privateKey.startsWith('0x') ? (privateKey as `0x${string}`) : (`0x${privateKey}` as `0x${string}`);

package/skills/four-meme-integration/scripts/create-token-chain.ts

@@ -7,7 +7,7 @@
  *   npx tsx create-token-chain.ts <createArgHex> <signatureHex>
  *   echo '{"createArg":"0x...","signature":"0x..."}' | npx tsx create-token-chain.ts --
  *
- * Env: PRIVATE_KEY or FOURMEME_PRIVATE_KEY. Optional: BSC_RPC_URL.
+ * Env: PRIVATE_KEY. Optional: BSC_RPC_URL.
  */
 
 import { createWalletClient, http, parseAbi } from 'viem';
@@ -28,9 +28,9 @@ function toHex(s: string): `0x${string}` {
 }
 
 async function main() {
-  const privateKey = process.env.PRIVATE_KEY || process.env.FOURMEME_PRIVATE_KEY;
+  const privateKey = process.env.PRIVATE_KEY;
   if (!privateKey) {
-    console.error('Set PRIVATE_KEY or FOURMEME_PRIVATE_KEY');
+    console.error('Set PRIVATE_KEY');
     process.exit(1);
   }
   const pk = privateKey.startsWith('0x') ? (privateKey as `0x${string}`) : (`0x${privateKey}` as `0x${string}`);

package/skills/four-meme-integration/scripts/execute-buy.ts

@@ -4,7 +4,7 @@
  * Usage:
  *   npx tsx execute-buy.ts <tokenAddress> amount <amountWei> <maxFundsWei>   # buy fixed token amount
  *   npx tsx execute-buy.ts <tokenAddress> funds <fundsWei> <minAmountWei>   # spend fixed quote (e.g. BNB)
- * Env: PRIVATE_KEY or FOURMEME_PRIVATE_KEY. Only V2 tokens (version 2 from getTokenInfo).
+ * Env: PRIVATE_KEY. Only V2 tokens (version 2 from getTokenInfo).
  */
 
 import { createPublicClient, createWalletClient, http } from 'viem';
@@ -98,9 +98,9 @@ const ERC20_ABI = [
 const RPC_URL = process.env.BSC_RPC_URL || 'https://bsc-dataseed.binance.org';
 
 async function main() {
-  const pk = process.env.PRIVATE_KEY || process.env.FOURMEME_PRIVATE_KEY;
+  const pk = process.env.PRIVATE_KEY;
   if (!pk) {
-    console.error('Set PRIVATE_KEY or FOURMEME_PRIVATE_KEY');
+    console.error('Set PRIVATE_KEY');
     process.exit(1);
   }
   const account = privateKeyToAccount(

package/skills/four-meme-integration/scripts/execute-sell.ts

@@ -2,7 +2,7 @@
 /**
  * Four.meme - execute sell on TokenManager2 (BSC only).
  * Usage: npx tsx execute-sell.ts <tokenAddress> <amountWei> [minFundsWei]
- * Env: PRIVATE_KEY or FOURMEME_PRIVATE_KEY. Sends approve(tokenManager, amount) then sellToken(token, amount).
+ * Env: PRIVATE_KEY. Sends approve(tokenManager, amount) then sellToken(token, amount).
  */
 
 import { createPublicClient, createWalletClient, http } from 'viem';
@@ -78,9 +78,9 @@ const ERC20_ABI = [
 const RPC_URL = process.env.BSC_RPC_URL || 'https://bsc-dataseed.binance.org';
 
 async function main() {
-  const pk = process.env.PRIVATE_KEY || process.env.FOURMEME_PRIVATE_KEY;
+  const pk = process.env.PRIVATE_KEY;
   if (!pk) {
-    console.error('Set PRIVATE_KEY or FOURMEME_PRIVATE_KEY');
+    console.error('Set PRIVATE_KEY');
     process.exit(1);
   }
   const account = privateKeyToAccount(

package/skills/four-meme-integration/scripts/send-token.ts

@@ -8,7 +8,7 @@
  *   - amountWei: amount in wei (for BNB or token decimals)
  *   - tokenAddress: optional; omit or use "BNB" / "0x0" for native BNB; otherwise ERC20 token contract address
  *
- * Env: PRIVATE_KEY or FOURMEME_PRIVATE_KEY. Optional: BSC_RPC_URL.
+ * Env: PRIVATE_KEY. Optional: BSC_RPC_URL.
  */
 
 import { createWalletClient, http, parseAbi } from 'viem';
@@ -26,9 +26,9 @@ function isAddress(s: string): boolean {
 }
 
 async function main() {
-  const privateKey = process.env.PRIVATE_KEY || process.env.FOURMEME_PRIVATE_KEY;
+  const privateKey = process.env.PRIVATE_KEY;
   if (!privateKey) {
-    console.error('Set PRIVATE_KEY or FOURMEME_PRIVATE_KEY');
+    console.error('Set PRIVATE_KEY');
     process.exit(1);
   }
   const pk = privateKey.startsWith('0x') ? (privateKey as `0x${string}`) : (`0x${privateKey}` as `0x${string}`);