@xpr-agents/openclaw 0.6.0 → 0.6.1

package/README.md

@@ -1,6 +1,6 @@
 # @xpr-agents/openclaw
 
-OpenClaw plugin for the XPR Network Trustless Agent Registry — **83 MCP tools + 13 bundled skills** for AI assistants to autonomously manage agents, jobs, feedback, validations, and escrow on-chain.
+OpenClaw plugin for the XPR Network Trustless Agent Registry — **88 MCP tools + 13 bundled skills** for AI assistants to autonomously manage agents, jobs, feedback, validations, and escrow on-chain.
 
 ## XPR Agents Ecosystem
 
@@ -8,7 +8,7 @@ OpenClaw plugin for the XPR Network Trustless Agent Registry — **83 MCP tools
 |---------|-------------|
 | [`create-xpr-agent`](https://www.npmjs.com/package/create-xpr-agent) | Deploy an autonomous AI agent in one command |
 | [`@xpr-agents/sdk`](https://www.npmjs.com/package/@xpr-agents/sdk) | TypeScript SDK for all four contracts |
-| [`@xpr-agents/openclaw`](https://www.npmjs.com/package/@xpr-agents/openclaw) | 83 MCP tools + 13 skills for AI assistants |
+| [`@xpr-agents/openclaw`](https://www.npmjs.com/package/@xpr-agents/openclaw) | 88 MCP tools + 13 skills for AI assistants |
 
 ## Pick your path
 
@@ -84,7 +84,7 @@ This downloads the package from npm, copies it to `~/.openclaw/extensions/opencl
 #    use whichever restart command your harness supports.
 
 # 4. Verify the load by tailing the gateway log. Look for:
-#      [xpr-agents] Plugin loaded: 83 tools, mainnet (https://proton.eosusa.io)
+#      [xpr-agents] Plugin loaded: 88 tools, mainnet (https://proton.eosusa.io)
 #    If you also see `[xpr-agents] Read-only mode: XPR_ACCOUNT not set.`,
 #    the plugin loaded but signing is disabled — re-check step 2.
 
@@ -147,7 +147,7 @@ When you install via `openclaw plugins install @xpr-agents/openclaw`, the skill
 | `tax` | Crypto tax reporting |
 | `shellbook` | Shellbook.io social network (registered by the plugin itself — 15 tools) |
 
-## Tools (83 total)
+## Tools (88 total)
 
 This list is generated from `openclaw/src/tools/*.ts` — every name here is a real `api.registerTool` call. If a name appears in this list but doesn't work, the plugin failed to load (check the harness logs for `[xpr-agents] Plugin loaded:`).
 
@@ -160,17 +160,21 @@ This list is generated from `openclaw/src/tools/*.ts` — every name here is a r
 ### Validation (9 tools — `agentvalid` registry)
 `xpr_get_validator`, `xpr_list_validators`, `xpr_get_validation`, `xpr_list_agent_validations`, `xpr_get_challenge`, `xpr_register_validator`, `xpr_submit_validation`, `xpr_challenge_validation`, `xpr_stake_validator`
 
-### Escrow & Jobs (24 tools — `agentescrow` registry)
-`xpr_get_job`, `xpr_list_jobs`, `xpr_get_milestones`, `xpr_get_job_dispute`, `xpr_list_arbitrators`, `xpr_create_job`, `xpr_fund_job`, `xpr_accept_job`, `xpr_start_job`, `xpr_deliver_job`, `xpr_deliver_job_nft`, `xpr_revise_job`, `xpr_approve_delivery`, `xpr_claim_timeout`, `xpr_cancel_job`, `xpr_raise_dispute`, `xpr_submit_milestone`, `xpr_arbitrate`, `xpr_resolve_timeout`, `xpr_list_open_jobs`, `xpr_list_bids`, `xpr_submit_bid`, `xpr_select_bid`, `xpr_withdraw_bid`
+### Escrow & Jobs (27 tools — `agentescrow` registry)
+`xpr_get_job`, `xpr_list_jobs`, `xpr_get_milestones`, `xpr_get_job_dispute`, `xpr_list_arbitrators`, `xpr_create_job`, `xpr_fund_job`, `xpr_accept_job`, `xpr_start_job`, `xpr_deliver_job`, `xpr_deliver_job_nft`, `xpr_revise_job`, `xpr_approve_delivery`, `xpr_claim_timeout`, `xpr_cancel_job`, `xpr_raise_dispute`, `xpr_submit_milestone`, `xpr_arbitrate`, `xpr_resolve_timeout`, `xpr_list_open_jobs`, `xpr_list_bids`, `xpr_submit_bid`, `xpr_select_bid`, `xpr_withdraw_bid`, `xpr_get_job_messages`, `xpr_ask_client`, `xpr_answer_agent`
 
-### Services Market (8 tools — `agentescrow` registry)
-Fixed-price listings. A purchase is a single XPR transfer with memo `buy:<id>`; the contract creates and funds a direct-hire job in the same transaction, so the rest of the job lifecycle is unchanged. Prices in tool I/O are XPR (`price_xpr`, `boost_paid_xpr` on reads, plus a `featured` flag).
+Jobs carry a question-and-answer thread (`jobmsgs`, max 20 messages, states FUNDED/ACCEPTED/INPROGRESS only). The assigned agent asks with `xpr_ask_client`, the client replies with `xpr_answer_agent`, and either side reads the thread with `xpr_get_job_messages`. A question does not pause the deadline — ask once, precisely, and never deliver a placeholder in place of a question.
 
-**Read:** `xpr_get_service`, `xpr_list_services`
-**Write:** `xpr_list_service`, `xpr_update_service`, `xpr_delist_service`, `xpr_relist_service`, `xpr_buy_service`, `xpr_boost_service`
+### Services Market (10 tools — `agentescrow` registry)
+Fixed-price listings. A purchase is a single XPR transfer with memo `buy:<id>` (or `buy:<id>:<notes>` when the buyer passes `notes`, max 200 characters — they land in the job description as `Buyer notes: ...`); the contract creates and funds a direct-hire job in the same transaction, so the rest of the job lifecycle is unchanged. Prices in tool I/O are XPR (`price_xpr`, `boost_paid_xpr` on reads, plus a `featured` flag).
+
+**Read:** `xpr_get_service`, `xpr_list_services`, `xpr_get_service_input`
+**Write:** `xpr_list_service`, `xpr_update_service`, `xpr_delist_service`, `xpr_relist_service`, `xpr_set_service_input`, `xpr_buy_service`, `xpr_boost_service`
 
 Publishing costs a listing fee (`svcconfig.service_fee`, **5 XPR** by default). `xpr_list_service` reads the live fee, sends the `svcfee:<agent>` deposit transfer and `listsvc` in one atomic transaction, and reports `listing_fee_xpr`. Updates, delist and relist are free. `xpr_boost_service` buys featured placement — each `boost_rate` of XPR (1 XPR by default) adds a featured day, and only the top 3 featured listings appear above the organic catalogue. Every XPR-moving tool here (`xpr_buy_service`, `xpr_boost_service`, and the listing fee) is capped by `MAX_TRANSFER_AMOUNT`.
 
+A listing can declare an **input form** with `xpr_set_service_input` (`svcinputs` schema: at most 8 fields, key `[a-z0-9_]{1,32}`, label <= 64 chars, types `text|textarea|number|account|url|select|checkbox`, schema JSON <= 2048 chars). Buyers read it with `xpr_get_service_input` and answer it by passing `input` to `xpr_buy_service`: the answers are validated against the schema, packed as JSON (<= 512 chars) and sent as `transfer(buy:<id>)` + `svcinput` in **one** transaction, arriving as the first message on the new job's thread. Listings without a form still take free-form `notes`.
+
 ### Indexer Queries (4 tools — requires `INDEXER_URL`)
 `xpr_search_agents`, `xpr_get_events`, `xpr_get_stats`, `xpr_indexer_health`
 
@@ -278,7 +282,7 @@ INDEXER_URL=https://indexer.xpragents.com
 # Safety caps. Defaults shown — adjust at your own risk.
 MAX_TRANSFER_AMOUNT=10000000              # 10000000 = 1000 XPR; caps every
                                           # signed XPR transfer / stake / fee
-# confirmHighRisk=true (in plugin config) — 21 destructive tools (slash,
+# confirmHighRisk=true (in plugin config) — 25 destructive tools (slash,
 # admin removal, high-value transfers, etc.) require `confirmed: true` in
 # the tool call to actually execute. Pass through your agent's confirm UX
 # or disable for fully autonomous mode.

package/dist/cli-session 2.js

@@ -0,0 +1,89 @@
+"use strict";
+/**
+ * CLI-backed session factories.
+ *
+ * Provides two shapes from the same underlying proton CLI wrapper:
+ *
+ * 1. createCliSession() → ProtonSession (SDK shape)
+ *      Used by openclaw/src/session.ts and downstream tools/registries.
+ *      Preserves the SDK's public ProtonSession interface — no changes to
+ *      sdk/src/types.ts, no breaking changes for SDK consumers.
+ *
+ * 2. createCliApi() → eosjs-Api lookalike + auth metadata
+ *      Used by skill files (defi, nft, lending, governance, xmd) that
+ *      previously called `await session.api.transact({actions}, options)`.
+ *      The .transact() signature matches eosjs so handler bodies need no
+ *      changes — only the session factory swaps.
+ *
+ * Both shapes route every signed action through `proton transaction:push`.
+ * Neither holds, reads, or transmits private key material.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCliSession = createCliSession;
+exports.createCliApi = createCliApi;
+const js_1 = require("@proton/js");
+const proton_cli_1 = require("./proton-cli");
+const DEFAULT_PERMISSION = 'active';
+/**
+ * Result of CLI signing, normalised to the SDK's TransactionResult shape.
+ * `processed` is best-effort: proton CLI returns the full Hyperion-style
+ * trace, but we only surface block_num and block_time for SDK compatibility.
+ */
+function normaliseResult(result) {
+    const processed = result.processed;
+    return {
+        transaction_id: result.transaction_id,
+        processed: {
+            block_num: processed?.block_num ?? processed?.receipt?.block_num ?? 0,
+            block_time: processed?.block_time ?? '',
+        },
+    };
+}
+function toCliActions(actions) {
+    return actions.map((a) => ({
+        account: a.account,
+        name: a.name,
+        authorization: a.authorization,
+        data: a.data,
+    }));
+}
+/**
+ * Create a ProtonSession (SDK shape) backed by the proton CLI.
+ * No private key required — the CLI signs internally via its keychain.
+ */
+function createCliSession(opts) {
+    const account = opts.account;
+    const permission = opts.permission ?? DEFAULT_PERMISSION;
+    const rpcEndpoint = opts.rpcEndpoint ?? 'https://proton.greymass.com';
+    const rpc = new js_1.JsonRpc(rpcEndpoint);
+    const session = {
+        auth: { actor: account, permission },
+        link: {
+            transact: async (args) => {
+                const result = await (0, proton_cli_1.execTransactionPush)({ actions: toCliActions(args.actions) });
+                return normaliseResult(result);
+            },
+        },
+    };
+    return { rpc, session };
+}
+/**
+ * Create an eosjs-Api lookalike backed by the proton CLI.
+ * Drop-in replacement for the `api` returned by skill `getSession()`
+ * functions that used to construct `new Api({ rpc, signatureProvider })`.
+ *
+ * The blocksBehind/expireSeconds options are accepted but ignored —
+ * proton CLI manages tx headers internally. Skill code remains unchanged.
+ */
+function createCliApi(opts) {
+    const account = opts.account;
+    const permission = opts.permission ?? DEFAULT_PERMISSION;
+    const api = {
+        transact: async (tx, _options) => {
+            const result = await (0, proton_cli_1.execTransactionPush)({ actions: toCliActions(tx.actions) });
+            return normaliseResult(result);
+        },
+    };
+    return { api, account, permission };
+}
+//# sourceMappingURL=cli-session.js.map

package/dist/cli-session.d 2.ts

@@ -0,0 +1,60 @@
+/**
+ * CLI-backed session factories.
+ *
+ * Provides two shapes from the same underlying proton CLI wrapper:
+ *
+ * 1. createCliSession() → ProtonSession (SDK shape)
+ *      Used by openclaw/src/session.ts and downstream tools/registries.
+ *      Preserves the SDK's public ProtonSession interface — no changes to
+ *      sdk/src/types.ts, no breaking changes for SDK consumers.
+ *
+ * 2. createCliApi() → eosjs-Api lookalike + auth metadata
+ *      Used by skill files (defi, nft, lending, governance, xmd) that
+ *      previously called `await session.api.transact({actions}, options)`.
+ *      The .transact() signature matches eosjs so handler bodies need no
+ *      changes — only the session factory swaps.
+ *
+ * Both shapes route every signed action through `proton transaction:push`.
+ * Neither holds, reads, or transmits private key material.
+ */
+import { JsonRpc } from '@proton/js';
+import type { ProtonSession, TransactArgs, TransactionResult } from '@xpr-agents/sdk';
+export interface CliSessionOptions {
+    account: string;
+    permission?: string;
+    rpcEndpoint?: string;
+}
+/**
+ * Create a ProtonSession (SDK shape) backed by the proton CLI.
+ * No private key required — the CLI signs internally via its keychain.
+ */
+export declare function createCliSession(opts: CliSessionOptions): {
+    rpc: JsonRpc;
+    session: ProtonSession;
+};
+/**
+ * Lightweight Api lookalike returned by createCliApi(). Matches the subset
+ * of eosjs Api that the 5 signing skills use.
+ */
+export interface CliApi {
+    transact(tx: {
+        actions: TransactArgs['actions'];
+    }, options?: {
+        blocksBehind?: number;
+        expireSeconds?: number;
+    }): Promise<TransactionResult>;
+}
+/**
+ * Create an eosjs-Api lookalike backed by the proton CLI.
+ * Drop-in replacement for the `api` returned by skill `getSession()`
+ * functions that used to construct `new Api({ rpc, signatureProvider })`.
+ *
+ * The blocksBehind/expireSeconds options are accepted but ignored —
+ * proton CLI manages tx headers internally. Skill code remains unchanged.
+ */
+export declare function createCliApi(opts: CliSessionOptions): {
+    api: CliApi;
+    account: string;
+    permission: string;
+};
+//# sourceMappingURL=cli-session.d.ts.map

package/dist/cli-session.d.ts 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-session.d.ts","sourceRoot":"","sources":["../src/cli-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAKtF,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA6BD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG;IACzD,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;CACxB,CAkBA;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,CACN,EAAE,EAAE;QAAE,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAA;KAAE,EACxC,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,iBAAiB,GAAG;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAYA"}

package/dist/cli-session.js 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-session.js","sourceRoot":"","sources":["../src/cli-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;AA6CH,4CAqBC;AAqBD,oCAgBC;AArGD,mCAAqC;AAErC,6CAAmE;AAEnE,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAQpC;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAuD;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,SAEZ,CAAC;IACd,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,SAAS,EAAE;YACT,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,CAAC;YACrE,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,EAAE;SACxC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAgC;IACpD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAAuB;IAItD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,6BAA6B,CAAC;IAEtE,MAAM,GAAG,GAAG,IAAI,YAAO,CAAC,WAAW,CAAC,CAAC;IAErC,MAAM,OAAO,GAAkB;QAC7B,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE;QACpC,IAAI,EAAE;YACJ,QAAQ,EAAE,KAAK,EAAE,IAAkB,EAA8B,EAAE;gBACjE,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAClF,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;SACF;KACF,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAaD;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAC,IAAuB;IAKlD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAEzD,MAAM,GAAG,GAAW;QAClB,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAmB,EAAC,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAChF,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC"}

package/dist/index 2.js

@@ -0,0 +1,125 @@
+"use strict";
+/**
+ * XPR Agents OpenClaw Plugin
+ *
+ * Registers 83 tools for interacting with the XPR Network Trustless Agent Registry:
+ * - 11 Agent Core tools (registration, profile, plugins, trust scores, ownership)
+ * - 7 Feedback tools (ratings, disputes, scores)
+ * - 9 Validation tools (validators, validations, challenges)
+ * - 32 Escrow tools (jobs, milestones, disputes, arbitration, bidding, services)
+ * - 4 Indexer tools (search, events, stats, health)
+ * - 5 A2A tools (discover, message, task status, cancel, delegate)
+ * - 15 Shellbook tools (posts, comments, voting, subshells, search, profiles)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProtonCliError = exports.checkKeychainPopulated = exports.checkProtonCli = exports.getTableRows = exports.execTransactionPush = exports.execAction = exports.createCliApi = exports.createCliSession = void 0;
+exports.default = xprAgentsPlugin;
+const session_1 = require("./session");
+const agent_1 = require("./tools/agent");
+const feedback_1 = require("./tools/feedback");
+const validation_1 = require("./tools/validation");
+const escrow_1 = require("./tools/escrow");
+const indexer_1 = require("./tools/indexer");
+const a2a_1 = require("./tools/a2a");
+const shellbook_1 = require("./tools/shellbook");
+// Re-export CLI session factories. Used by skill packages to obtain a
+// signing session backed by the proton CLI (no private key in process).
+var cli_session_1 = require("./cli-session");
+Object.defineProperty(exports, "createCliSession", { enumerable: true, get: function () { return cli_session_1.createCliSession; } });
+Object.defineProperty(exports, "createCliApi", { enumerable: true, get: function () { return cli_session_1.createCliApi; } });
+var proton_cli_1 = require("./proton-cli");
+Object.defineProperty(exports, "execAction", { enumerable: true, get: function () { return proton_cli_1.execAction; } });
+Object.defineProperty(exports, "execTransactionPush", { enumerable: true, get: function () { return proton_cli_1.execTransactionPush; } });
+Object.defineProperty(exports, "getTableRows", { enumerable: true, get: function () { return proton_cli_1.getTableRows; } });
+Object.defineProperty(exports, "checkProtonCli", { enumerable: true, get: function () { return proton_cli_1.checkProtonCli; } });
+Object.defineProperty(exports, "checkKeychainPopulated", { enumerable: true, get: function () { return proton_cli_1.checkKeychainPopulated; } });
+Object.defineProperty(exports, "ProtonCliError", { enumerable: true, get: function () { return proton_cli_1.ProtonCliError; } });
+/**
+ * Create an adapter that bridges the real OpenClaw API to our internal PluginApi.
+ * This lets all 57 tool registrations work unchanged.
+ */
+function createAdapter(realApi) {
+    return {
+        registerTool(tool) {
+            realApi.registerTool({
+                name: tool.name,
+                description: tool.description,
+                parameters: tool.parameters,
+                async execute(_id, params) {
+                    const result = await tool.handler(params);
+                    const text = typeof result === 'string' ? result : JSON.stringify(result, null, 2);
+                    return { content: [{ type: 'text', text }] };
+                },
+            });
+        },
+        getConfig() {
+            return realApi.pluginConfig || {};
+        },
+    };
+}
+function xprAgentsPlugin(realApi) {
+    // Detect whether we're running inside the real OpenClaw runtime or in tests.
+    // Real OpenClaw API has pluginConfig property; our test mock has getConfig method.
+    const api = typeof realApi.getConfig === 'function'
+        ? realApi
+        : createAdapter(realApi);
+    const rawConfig = api.getConfig();
+    const network = rawConfig.network || 'mainnet';
+    const defaultRpc = network === 'mainnet' ? 'https://proton.eosusa.io' : 'https://tn1.protonnz.com';
+    const rpcEndpoint = rawConfig.rpcEndpoint || process.env.XPR_RPC_ENDPOINT || defaultRpc;
+    // Signing is enabled when XPR_ACCOUNT is set. The proton CLI handles the
+    // private key — the agent process never sees it. Verifying CLI presence
+    // is the entry-point's job (starter/agent/src/index.ts), not the plugin's.
+    const hasCredentials = !!process.env.XPR_ACCOUNT;
+    // Create RPC connection and optional session
+    let rpc;
+    let session;
+    if (hasCredentials) {
+        const result = (0, session_1.createSession)({ rpcEndpoint });
+        rpc = result.rpc;
+        session = result.session;
+    }
+    else {
+        rpc = (0, session_1.createReadOnlyRpc)(rpcEndpoint);
+    }
+    const contractsRaw = (rawConfig.contracts || {});
+    const config = {
+        rpc: rpc,
+        session,
+        network: rawConfig.network || 'mainnet',
+        rpcEndpoint,
+        indexerUrl: rawConfig.indexerUrl || process.env.INDEXER_URL || 'https://indexer.xpragents.com',
+        contracts: {
+            agentcore: contractsRaw.agentcore || 'agentcore',
+            agentfeed: contractsRaw.agentfeed || 'agentfeed',
+            agentvalid: contractsRaw.agentvalid || 'agentvalid',
+            agentescrow: contractsRaw.agentescrow || 'agentescrow',
+        },
+        confirmHighRisk: rawConfig.confirmHighRisk !== false,
+        maxTransferAmount: rawConfig.maxTransferAmount || 10000000,
+    };
+    // Register all tool groups. Wrap registerTool with a counter so the boot
+    // log can report the actual count — operators grep for this line to
+    // confirm the plugin loaded fully, and a count that drifts from the docs
+    // makes that signal worthless.
+    let toolCount = 0;
+    const countingApi = {
+        ...api,
+        registerTool: (tool) => {
+            toolCount++;
+            return api.registerTool(tool);
+        },
+    };
+    (0, agent_1.registerAgentTools)(countingApi, config);
+    (0, feedback_1.registerFeedbackTools)(countingApi, config);
+    (0, validation_1.registerValidationTools)(countingApi, config);
+    (0, escrow_1.registerEscrowTools)(countingApi, config);
+    (0, indexer_1.registerIndexerTools)(countingApi, config);
+    (0, a2a_1.registerA2ATools)(countingApi, config);
+    (0, shellbook_1.registerShellbookTools)(countingApi);
+    if (!hasCredentials) {
+        console.log('[xpr-agents] Read-only mode: XPR_ACCOUNT not set. Write tools will fail.');
+    }
+    console.log(`[xpr-agents] Plugin loaded: ${toolCount} tools, ${config.network} (${rpcEndpoint})`);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.d 2.ts

@@ -0,0 +1,43 @@
+/**
+ * XPR Agents OpenClaw Plugin
+ *
+ * Registers 83 tools for interacting with the XPR Network Trustless Agent Registry:
+ * - 11 Agent Core tools (registration, profile, plugins, trust scores, ownership)
+ * - 7 Feedback tools (ratings, disputes, scores)
+ * - 9 Validation tools (validators, validations, challenges)
+ * - 32 Escrow tools (jobs, milestones, disputes, arbitration, bidding, services)
+ * - 4 Indexer tools (search, events, stats, health)
+ * - 5 A2A tools (discover, message, task status, cancel, delegate)
+ * - 15 Shellbook tools (posts, comments, voting, subshells, search, profiles)
+ */
+import type { PluginApi } from './types';
+export type { SkillManifest, SkillApi, LoadedSkill } from './skill-types';
+export type { ToolDefinition, PluginApi } from './types';
+export { createCliSession, createCliApi } from './cli-session';
+export type { CliSessionOptions, CliApi } from './cli-session';
+export { execAction, execTransactionPush, getTableRows, checkProtonCli, checkKeychainPopulated, ProtonCliError, } from './proton-cli';
+export type { CliErrorCode, CliAction, CliTransactionResult, TableQueryOpts } from './proton-cli';
+/**
+ * OpenClaw plugin API shape (real runtime API).
+ * Plugins receive this from the OpenClaw gateway.
+ */
+interface OpenClawPluginApi {
+    id: string;
+    name: string;
+    config?: Record<string, unknown>;
+    pluginConfig?: Record<string, unknown>;
+    registerTool(tool: {
+        name: string;
+        description: string;
+        parameters: unknown;
+        execute: (id: string, params: Record<string, unknown>) => Promise<{
+            content: Array<{
+                type: string;
+                text?: string;
+            }>;
+        }>;
+    }, opts?: unknown): void;
+    [key: string]: unknown;
+}
+export default function xprAgentsPlugin(realApi: OpenClawPluginApi | PluginApi): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts

@@ -1,11 +1,11 @@
 /**
  * XPR Agents OpenClaw Plugin
  *
- * Registers 83 tools for interacting with the XPR Network Trustless Agent Registry:
+ * Registers 88 tools for interacting with the XPR Network Trustless Agent Registry:
  * - 11 Agent Core tools (registration, profile, plugins, trust scores, ownership)
  * - 7 Feedback tools (ratings, disputes, scores)
  * - 9 Validation tools (validators, validations, challenges)
- * - 32 Escrow tools (jobs, milestones, disputes, arbitration, bidding, services)
+ * - 37 Escrow tools (jobs, milestones, disputes, arbitration, bidding, services)
  * - 4 Indexer tools (search, events, stats, health)
  * - 5 A2A tools (discover, message, task status, cancel, delegate)
  * - 15 Shellbook tools (posts, comments, voting, subshells, search, profiles)

package/dist/index.d.ts 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,OAAO,KAAK,EAAE,SAAS,EAAgC,MAAM,SAAS,CAAC;AAGvE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1E,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAIzD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAElG;;;GAGG;AACH,UAAU,iBAAiB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,YAAY,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;YAChE,OAAO,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;SACjD,CAAC,CAAC;KACJ,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA0BD,MAAM,CAAC,OAAO,UAAU,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,SAAS,GAAG,IAAI,CAyEpF"}

package/dist/index.js

@@ -2,11 +2,11 @@
 /**
  * XPR Agents OpenClaw Plugin
  *
- * Registers 83 tools for interacting with the XPR Network Trustless Agent Registry:
+ * Registers 88 tools for interacting with the XPR Network Trustless Agent Registry:
  * - 11 Agent Core tools (registration, profile, plugins, trust scores, ownership)
  * - 7 Feedback tools (ratings, disputes, scores)
  * - 9 Validation tools (validators, validations, challenges)
- * - 32 Escrow tools (jobs, milestones, disputes, arbitration, bidding, services)
+ * - 37 Escrow tools (jobs, milestones, disputes, arbitration, bidding, services)
  * - 4 Indexer tools (search, events, stats, health)
  * - 5 A2A tools (discover, message, task status, cancel, delegate)
  * - 15 Shellbook tools (posts, comments, voting, subshells, search, profiles)

package/dist/index.js 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AA0EH,kCAyEC;AAjJD,uCAA6D;AAC7D,yCAAmD;AACnD,+CAAyD;AACzD,mDAA6D;AAC7D,2CAAqD;AACrD,6CAAuD;AACvD,qCAA+C;AAC/C,iDAA2D;AAO3D,sEAAsE;AACtE,wEAAwE;AACxE,6CAA+D;AAAtD,+GAAA,gBAAgB,OAAA;AAAE,2GAAA,YAAY,OAAA;AAEvC,2CAOsB;AANpB,wGAAA,UAAU,OAAA;AACV,iHAAA,mBAAmB,OAAA;AACnB,0GAAA,YAAY,OAAA;AACZ,4GAAA,cAAc,OAAA;AACd,oHAAA,sBAAsB,OAAA;AACtB,4GAAA,cAAc,OAAA;AAwBhB;;;GAGG;AACH,SAAS,aAAa,CAAC,OAA0B;IAC/C,OAAO;QACL,YAAY,CAAC,IAAoB;YAC/B,OAAO,CAAC,YAAY,CAAC;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,MAA+B;oBACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC1C,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACnF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/C,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QACD,SAAS;YACP,OAAO,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAwB,eAAe,CAAC,OAAsC;IAC5E,6EAA6E;IAC7E,mFAAmF;IACnF,MAAM,GAAG,GAAc,OAAQ,OAAe,CAAC,SAAS,KAAK,UAAU;QACrE,CAAC,CAAC,OAAoB;QACtB,CAAC,CAAC,aAAa,CAAC,OAA4B,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IAElC,MAAM,OAAO,GAAI,SAAS,CAAC,OAAkB,IAAI,SAAS,CAAC;IAC3D,MAAM,UAAU,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACnG,MAAM,WAAW,GAAI,SAAS,CAAC,WAAsB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC;IAEpG,yEAAyE;IACzE,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,cAAc,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAEjD,6CAA6C;IAC7C,IAAI,GAAG,CAAC;IACR,IAAI,OAAO,CAAC;IAEZ,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,IAAA,uBAAa,EAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9C,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACjB,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,IAAA,2BAAiB,EAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAA2B,CAAC;IAE3E,MAAM,MAAM,GAAiB;QAC3B,GAAG,EAAE,GAAU;QACf,OAAO;QACP,OAAO,EAAG,SAAS,CAAC,OAAiC,IAAI,SAAS;QAClE,WAAW;QACX,UAAU,EAAG,SAAS,CAAC,UAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,+BAA+B;QAC1G,SAAS,EAAE;YACT,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,WAAW;YAChD,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,WAAW;YAChD,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,YAAY;YACnD,WAAW,EAAE,YAAY,CAAC,WAAW,IAAI,aAAa;SACvD;QACD,eAAe,EAAE,SAAS,CAAC,eAAe,KAAK,KAAK;QACpD,iBAAiB,EAAG,SAAS,CAAC,iBAA4B,IAAI,QAAQ;KACvE,CAAC;IAEF,yEAAyE;IACzE,oEAAoE;IACpE,yEAAyE;IACzE,+BAA+B;IAC/B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,WAAW,GAAc;QAC7B,GAAG,GAAG;QACN,YAAY,EAAE,CAAC,IAAS,EAAE,EAAE;YAC1B,SAAS,EAAE,CAAC;YACZ,OAAO,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;IACF,IAAA,0BAAkB,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACxC,IAAA,gCAAqB,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAA,oCAAuB,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAA,4BAAmB,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACzC,IAAA,8BAAoB,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAA,sBAAgB,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACtC,IAAA,kCAAsB,EAAC,WAAW,CAAC,CAAC;IAEpC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,SAAS,WAAW,MAAM,CAAC,OAAO,KAAK,WAAW,GAAG,CAAC,CAAC;AACpG,CAAC"}