@moltbankhq/openclaw 0.1.0 → 0.1.2

package/README.md

@@ -0,0 +1,98 @@
+# @moltbankhq/openclaw
+
+OpenClaw plugin for [MoltBank](https://moltbank.bot) — stablecoin treasury controls, approvals, and audit trails for agent fleets.
+
+## Install
+
+```bash
+openclaw plugins install @moltbankhq/openclaw
+```
+
+Direct `npm install` can be useful to acquire the package, but by itself it does not complete OpenClaw plugin registration or setup.
+
+## What it does
+
+This plugin connects your OpenClaw agent to MoltBank's stablecoin treasury infrastructure. On install, it:
+
+- Downloads and configures the MoltBank skill (SKILL.md + scripts)
+- Installs and registers [mcporter](https://www.npmjs.com/package/mcporter) for MCP server connectivity
+- Handles OAuth device-code authentication to link your agent to your MoltBank account
+- Configures sandbox (Docker) or host mode automatically based on your OpenClaw setup
+- Injects required environment variables (`MOLTBANK`, `SIGNER`, `ACTIVE_ORG_OVERRIDE`)
+
+Once set up, your agent can manage treasury operations, set per-agent spending limits, handle x402 payments, and interact with MoltBank's MCP server — all within OpenClaw.
+
+## Setup
+
+After installing, run:
+
+```bash
+openclaw moltbank setup
+```
+
+The plugin will guide you through linking your MoltBank account via browser-based OAuth. Once approved, setup finalizes automatically.
+
+## CLI Commands
+
+| Command | Description |
+|---------|-------------|
+| `openclaw moltbank setup` | Run full setup (nonblocking auth) |
+| `openclaw moltbank setup-blocking` | Setup and wait for OAuth approval |
+| `openclaw moltbank auth-status` | Check current auth state |
+| `openclaw moltbank sandbox-setup` | Reconfigure sandbox Docker settings |
+| `openclaw moltbank inject-key` | Re-inject env vars from credentials |
+| `openclaw moltbank register` | Re-register mcporter MCP server |
+
+## Configuration
+
+Optional config in your `openclaw.json`:
+
+```json
+{
+  "plugins": {
+    "entries": {
+      "moltbank": {
+        "config": {
+          "appBaseUrl": "https://app.moltbank.bot",
+          "skillName": "MoltBank"
+        }
+      }
+    }
+  }
+}
+```
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `APP_BASE_URL` | MoltBank deployment URL (default: `https://app.moltbank.bot`) |
+| `MOLTBANK_SKILL_NAME` | Override skill folder name (default: `MoltBank`) |
+| `MOLTBANK_CREDENTIALS_PATH` | Custom credentials file path |
+| `MOLTBANK_SETUP_AUTH_WAIT_MODE` | `blocking` or `nonblocking` (default: `nonblocking`) |
+
+## Capabilities
+
+The MoltBank skill gives your agent access to:
+
+- **Treasury management** — balances, transfers, account operations
+- **Per-agent spending limits** — transaction, daily, and weekly caps
+- **Approval workflows** — human-in-the-loop for spend above thresholds
+- **x402 payments** — agent-to-agent payments via the x402 protocol
+- **Audit trails** — full visibility into which agent spent what, when, and why
+
+## Requirements
+
+- OpenClaw v2026.3+
+- Node.js 22+
+- Docker (if using sandbox mode)
+
+## Links
+
+- [MoltBank](https://moltbank.bot)
+- [Documentation](https://app.moltbank.bot)
+- [GitHub](https://github.com/moltbankhq/openclaw-plugin)
+
+## License
+
+ISC

package/index.ts

@@ -1,5 +1,5 @@
 import { execSync, spawn } from 'child_process';
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'fs';
+import { chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';
 import { homedir } from 'os';
 const IS_WIN = process.platform === 'win32';
@@ -276,43 +276,34 @@ function ensureWrapperExecutable(skillDir: string, api: LoggerApi): void {
 // ─── skill install ───────────────────────────────────────────────────────────
 
 const SKILL_FILES = [
+  'README.md',
   'skill.md',
-  'setup.md',
-  'onboarding.md',
-  'multi-org.md',
-  'tools-reference.md',
-  'x402-workflow.md',
-  'heartbeat.md',
-  'rules.md',
   'skill.json',
-  'polymarket-workflow.md',
-  'polymarket-operation.md',
-  'polymarket-refill.md',
-  'openclaw-signer-eoa.md',
-  'openclaw-solana-signer.md',
-  'pumpfun-workflow.md',
-  'config/mcporter.json',
+  'install.sh',
+  'assets/mcporter.json',
+  'references/heartbeat.md',
+  'references/onboarding.md',
+  'references/openclaw-signer-eoa.md',
+  'references/rules.md',
+  'references/setup.md',
+  'references/tools-reference.md',
+  'references/x402-workflow.md',
   'scripts/openclaw-runtime-config.mjs',
   'scripts/request-oauth-device-code.mjs',
   'scripts/init-openclaw-signer.mjs',
-  'scripts/init-openclaw-solana-signer.mjs',
-  'scripts/bootstrap-openclaw-pumpfun-wallet.mjs',
   'scripts/inspect-x402-requirements.mjs',
-  'scripts/inspect-solana-wallet.mjs',
-  'scripts/inspect-polygon-wallet.mjs',
-  'scripts/quote-solana-budget.mjs',
-  'scripts/polymarket-execute-lifi-tx.mjs',
-  'scripts/polymarket-signer-to-safe.mjs',
   'scripts/poll-oauth-token.mjs',
   'scripts/export-api-key.mjs',
-  'scripts/fetch-openrouter-intent.mjs',
   'scripts/x402-pay-and-confirm.mjs',
-  'scripts/pumpportal-trade-local.mjs',
+  'scripts/setup-sandbox.sh',
   'scripts/moltbank.sh',
-  'scripts/moltbank.ps1',
-  'scripts/polymarket-service.mjs'
+  'scripts/moltbank.ps1'
 ];
 
+function hasRequiredSkillFiles(skillDir: string): boolean {
+  return SKILL_FILES.every((file) => existsSync(join(skillDir, file)));
+}
+
 function ensureSkillInstalled(
   skillDir: string,
   appBaseUrl: string,
@@ -321,12 +312,21 @@ function ensureSkillInstalled(
   mode: 'sandbox' | 'host' = 'sandbox'
 ) {
   const successFlag = join(skillDir, '.install_success');
-  if (existsSync(successFlag)) {
+  if (existsSync(successFlag) && hasRequiredSkillFiles(skillDir)) {
     ensureWrapperExecutable(skillDir, api);
     api.logger.info('[moltbank] ✓ skill already installed at ' + skillDir);
     return true;
   }
 
+  if (existsSync(successFlag)) {
+    api.logger.warn('[moltbank] existing skill install is stale or incomplete — reinstalling current bundle');
+    try {
+      unlinkSync(successFlag);
+    } catch {
+      // ignore
+    }
+  }
+
   api.logger.info(`[moltbank] installing skill '${skillName}' to ${skillDir} (mode: ${mode})`);
   mkdirSync(skillDir, { recursive: true });
 
@@ -350,66 +350,32 @@ function ensureSkillInstalled(
 function ensureSkillFilesUppercase(skillDir: string, api: LoggerApi) {
   const lower = join(skillDir, 'skill.md');
   const upper = join(skillDir, 'SKILL.md');
-  if (existsSync(upper)) {
-    api.logger.info('[moltbank] ✓ SKILL.md already exists');
+  if (existsSync(lower)) {
+    api.logger.info('[moltbank] ✓ skill entrypoint present (skill.md)');
     return;
   }
-  if (existsSync(lower)) {
-    renameSync(lower, upper);
-    api.logger.info('[moltbank] ✓ renamed skill.md → SKILL.md');
+  if (existsSync(upper)) {
+    api.logger.info('[moltbank] ✓ skill entrypoint present (SKILL.md)');
   } else {
     api.logger.warn('[moltbank] ✗ neither skill.md nor SKILL.md found');
   }
 }
 
 function fixSkillFrontmatter(skillDir: string, skillName: string, api: LoggerApi) {
-  const skillFile = join(skillDir, 'SKILL.md');
+  const skillFile = existsSync(join(skillDir, 'skill.md')) ? join(skillDir, 'skill.md') : join(skillDir, 'SKILL.md');
   if (!existsSync(skillFile)) {
-    api.logger.warn('[moltbank] ✗ SKILL.md not found — skipping frontmatter fix');
+    api.logger.warn('[moltbank] ✗ skill entrypoint not found — skipping frontmatter validation');
     return;
   }
 
   const content = readFileSync(skillFile, 'utf8').replace(/\r\n/g, '\n');
   const frontmatterMatch = content.match(/^---\n([\s\S]*?)\n---/);
   if (!frontmatterMatch) {
-    api.logger.warn('[moltbank] ✗ no frontmatter in SKILL.md');
+    api.logger.warn('[moltbank] ✗ no frontmatter in skill entrypoint');
     return;
   }
 
-  const binsYaml = IS_WIN ? '        - mcporter' : '        - mcporter\n        - jq';
-  const newFrontmatter = `---
-name: ${skillName}
-version: 1.5.3
-description: MCP skill for MoltBank business banking workflows (treasury, approvals, allowances, x402, OpenRouter, Polymarket, and Pump.Fun).
-homepage: \${APP_BASE_URL:-https://app.moltbank.bot}
-metadata:
-  category: finance
-  api_base: \${APP_BASE_URL:-https://app.moltbank.bot}/api/mcp
-  install_script: \${APP_BASE_URL:-https://app.moltbank.bot}/install.sh
-  openclaw:
-    requires:
-      bins:
-${binsYaml}
-      npm:
-        - '@x402/fetch@^2.3.0'
-        - '@x402/evm@^2.3.1'
-        - 'viem@^2.46.0'
-        - '@polymarket/clob-client'
-        - 'ethers@5'
-        - '@solana/web3.js@^1.98.4'
-        - 'bs58@^6.0.0'
-    primaryEnv: MOLTBANK
----`;
-
-  const body = content.slice(frontmatterMatch[0].length);
-  const fixed = newFrontmatter + body;
-
-  if (fixed !== content) {
-    writeFileSync(skillFile, fixed, 'utf8');
-    api.logger.info(`[moltbank] ✓ SKILL.md frontmatter fixed → name: ${skillName}`);
-  } else {
-    api.logger.info('[moltbank] ✓ SKILL.md frontmatter already correct');
-  }
+  api.logger.info(`[moltbank] ✓ skill frontmatter retained as authored (${skillName})`);
 }
 
 function ensureSkillPermissions(skillDir: string, api: LoggerApi) {
@@ -418,8 +384,9 @@ function ensureSkillPermissions(skillDir: string, api: LoggerApi) {
     return;
   }
 
-  const configDir = join(skillDir, 'config');
-  const configFile = join(skillDir, 'config', 'mcporter.json');
+  const assetsDir = join(skillDir, 'assets');
+  const configFile = join(skillDir, 'assets', 'mcporter.json');
+  const referencesDir = join(skillDir, 'references');
   const scriptsDir = join(skillDir, 'scripts');
 
   const user = run('whoami', { silent: true }).stdout;
@@ -428,9 +395,9 @@ function ensureSkillPermissions(skillDir: string, api: LoggerApi) {
     api.logger.info(`[moltbank] ✓ ownership corrected to ${user}`);
   }
 
-  if (existsSync(configDir)) {
-    run(`chmod 777 "${configDir}"`, { silent: true });
-    api.logger.info('[moltbank] ✓ config/ permissions → 777');
+  if (existsSync(assetsDir)) {
+    run(`chmod 777 "${assetsDir}"`, { silent: true });
+    api.logger.info('[moltbank] ✓ assets/ permissions → 777');
   }
   if (existsSync(configFile)) {
     run(`chmod 666 "${configFile}"`, { silent: true });
@@ -439,15 +406,20 @@ function ensureSkillPermissions(skillDir: string, api: LoggerApi) {
   if (existsSync(scriptsDir)) {
     run(`chmod -R 755 "${scriptsDir}"`, { silent: true });
     api.logger.info('[moltbank] ✓ scripts/ permissions → 755');
-    run(`find "${scriptsDir}" -type f | xargs sed -i 's/\r$//'`, {
+    run(`find "${scriptsDir}" -type f -exec sed -i 's/\r$//' {} +`, {
       silent: true
     });
     api.logger.info('[moltbank] ✓ scripts/ line endings normalized (CRLF → LF)');
   }
 
   if (existsSync(skillDir)) {
-    run(`find "${skillDir}" -maxdepth 1 -name "*.md" | xargs sed -i 's/\r$//'`, { silent: true });
-    api.logger.info('[moltbank] ✓ .md files line endings normalized (CRLF → LF)');
+    run(`find "${skillDir}" -maxdepth 1 -type f -name "*.md" -exec sed -i 's/\r$//' {} +`, { silent: true });
+  }
+  if (existsSync(referencesDir)) {
+    run(`find "${referencesDir}" -maxdepth 1 -type f -name "*.md" -exec sed -i 's/\r$//' {} +`, { silent: true });
+  }
+  if (existsSync(skillDir) || existsSync(referencesDir)) {
+    api.logger.info('[moltbank] ✓ markdown line endings normalized (CRLF → LF)');
   }
 }
 
@@ -464,28 +436,12 @@ function ensureNpmDeps(skillDir: string, api: LoggerApi, mode: 'sandbox' | 'host
       dependencies: {
         '@x402/fetch': '^2.3.0',
         '@x402/evm': '^2.3.1',
-        viem: '^2.46.0',
-        '@polymarket/clob-client': 'latest',
-        ethers: '^5.8.0',
-        '@solana/web3.js': '^1.98.4',
-        bs58: '^6.0.0'
+        viem: '^2.46.0'
       }
     };
     writeFileSync(pkgPath, JSON.stringify(fallbackPkg, null, 2) + '\n', 'utf8');
     api.logger.warn('[moltbank] package.json not found — created fallback package.json for skill runtime deps');
   }
-  try {
-    const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
-    pkg.dependencies = pkg.dependencies ?? {};
-    const cur = String(pkg.dependencies['@polymarket/clob-client'] ?? '').trim();
-    if (!cur || cur === '^6.0.0') {
-      pkg.dependencies['@polymarket/clob-client'] = 'latest';
-      writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + '\n', 'utf8');
-      api.logger.info('[moltbank] normalized package.json: @polymarket/clob-client -> latest');
-    }
-  } catch (e) {
-    api.logger.warn('[moltbank] could not normalize package.json deps: ' + String(e));
-  }
   api.logger.info('[moltbank] installing npm deps...');
   if (mode === 'sandbox') {
     const result = run('npm install --ignore-scripts', { cwd: skillDir });
@@ -927,13 +883,13 @@ function printAuthStatus(skillDir: string, appBaseUrl: string, api: LoggerApi):
 }
 
 function ensureMcporterConfig(skillDir: string, appBaseUrl: string, api: LoggerApi) {
-  const cfgPath = join(skillDir, 'config', 'mcporter.json');
-  mkdirSync(join(skillDir, 'config'), { recursive: true });
+  const cfgPath = join(skillDir, 'assets', 'mcporter.json');
+  mkdirSync(join(skillDir, 'assets'), { recursive: true });
 
   const cfg = {
     mcpServers: {
       MoltBank: {
-        description: 'MoltBank stablecoin banking MCP server powered by Fondu',
+        description: 'MoltBank stablecoin treasury MCP server powered by Fondu',
         transport: 'sse',
         url: `${appBaseUrl}/api/mcp`,
         headers: {
@@ -965,7 +921,7 @@ function ensureMcporterConfig(skillDir: string, appBaseUrl: string, api: LoggerA
     `--transport sse ` +
     `--header "Authorization=Bearer \${MOLTBANK}" ` +
     `--header "Content-Type=application/json" ` +
-    `--description "MoltBank stablecoin banking MCP server powered by Fondu" ` +
+    `--description "MoltBank stablecoin treasury MCP server powered by Fondu" ` +
     `--scope home`;
 
   const result = run(addCmd, { silent: false });
@@ -1040,7 +996,7 @@ function injectSandboxEnv(skillDir: string, api: LoggerApi): boolean {
       });
       if (!initResult.ok) {
         api.logger.warn('[moltbank] ✗ could not generate EOA signer: ' + initResult.stderr);
-        api.logger.warn('[moltbank]   agent will generate signer on first x402/Polymarket use');
+        api.logger.warn('[moltbank]   agent will generate signer on first x402 use');
       } else {
         const freshCreds = JSON.parse(readFileSync(credsPath, 'utf8')) as CredentialsFile;
         const freshOrg = freshCreds.organizations?.find((o: CredentialsOrganization) => o.name === activeOrg);
@@ -1100,7 +1056,7 @@ function configureSandbox(api: LoggerApi): boolean {
     'update-alternatives --set node $NODE22_BIN 2>/dev/null || true && ' +
     'node -v && npm -v && ' +
     "echo '[moltbank:sandbox] [5/7] installing npm global deps (mcporter + sdk libs)...' && " +
-    'npm install -g mcporter @x402/fetch@2.3.0 @x402/evm@2.3.1 viem@2.46.0 @polymarket/clob-client ethers@5 @solana/web3.js@1.98.4 bs58@6.0.0 && ' +
+    'npm install -g mcporter @x402/fetch@2.3.0 @x402/evm@2.3.1 viem@2.46.0 && ' +
     "echo '[moltbank:sandbox] [6/7] verifying mcporter binary...' && " +
     "NPM_GLOBAL=$(npm root -g 2>/dev/null | sed 's|/node_modules$|/bin|' || true) && " +
     'if [ -n "$NPM_GLOBAL" ] && [ -x "$NPM_GLOBAL/mcporter" ]; then ln -sf "$NPM_GLOBAL/mcporter" /usr/local/bin/mcporter || true; fi && ' +
@@ -1216,7 +1172,7 @@ async function runSetup(cfg: MoltbankPluginConfig, api: LoggerApi, options: { au
       return;
     }
 
-    api.logger.info('[moltbank] [sandbox 2/10] ensuring SKILL.md naming...');
+    api.logger.info('[moltbank] [sandbox 2/10] verifying skill entrypoint...');
     ensureSkillFilesUppercase(skillDir, api);
 
     api.logger.info('[moltbank] [sandbox 3/10] applying permissions (chown + chmod)...');
@@ -1243,7 +1199,7 @@ async function runSetup(cfg: MoltbankPluginConfig, api: LoggerApi, options: { au
     api.logger.info('[moltbank] [sandbox 5/10] installing skill npm dependencies...');
     ensureNpmDeps(skillDir, api, 'sandbox');
 
-    api.logger.info('[moltbank] [sandbox 6/10] normalizing SKILL.md frontmatter...');
+    api.logger.info('[moltbank] [sandbox 6/10] validating skill frontmatter...');
     fixSkillFrontmatter(skillDir, skillName, api);
 
     api.logger.info('[moltbank] [sandbox 7/10] writing/registering mcporter config...');
@@ -1273,7 +1229,7 @@ async function runSetup(cfg: MoltbankPluginConfig, api: LoggerApi, options: { au
       return;
     }
 
-    api.logger.info('[moltbank] [host 3/8] ensuring SKILL.md naming/frontmatter...');
+    api.logger.info('[moltbank] [host 3/8] verifying skill entrypoint/frontmatter...');
     ensureSkillFilesUppercase(skillDir, api);
     fixSkillFrontmatter(skillDir, skillName, api);
 
@@ -1328,8 +1284,8 @@ async function runSetup(cfg: MoltbankPluginConfig, api: LoggerApi, options: { au
   } else if (hostReady) {
     api.logger.info('[moltbank] ✓ host ready');
   }
-  api.logger.info(`[moltbank]   skill:    ${skillDir}/SKILL.md`);
-  api.logger.info(`[moltbank]   mcporter: ${skillDir}/config/mcporter.json`);
+  api.logger.info(`[moltbank]   skill:    ${skillDir}/skill.md`);
+  api.logger.info(`[moltbank]   mcporter: ${skillDir}/assets/mcporter.json`);
   if (sandbox) {
     const finalConfig = readOpenclawConfig();
     const finalEnv = asStringRecord(getNestedValue(finalConfig, ['agents', 'defaults', 'sandbox', 'docker', 'env']));

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
     "id": "moltbank",
     "name": "MoltBank",
-    "description": "MoltBank banking skill for OpenClaw — installs mcporter, npm dependencies, sandbox setup, and the MoltBank skill",
+    "description": "MoltBank stablecoin treasury plugin for OpenClaw — installs mcporter, npm dependencies, sandbox setup, and the MoltBank skill",
     "configSchema": {
         "type": "object",
         "additionalProperties": false,

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@moltbankhq/openclaw",
-    "version": "0.1.0",
-    "description": "MoltBank OpenClaw plugin",
+    "version": "0.1.2",
+    "description": "MoltBank stablecoin treasury OpenClaw plugin",
     "main": "index.ts",
     "openclaw": {
         "extensions": [