@xpr-agents/openclaw 0.6.1 → 0.7.1

package/dist/proton-cli 2.js

@@ -1,237 +0,0 @@
-"use strict";
-/**
- * Proton CLI wrapper.
- *
- * Shells out to the `proton` CLI for all transaction signing. The agent
- * process never touches private keys — they live exclusively in the CLI's
- * encrypted keychain.
- *
- * Used by:
- *   - openclaw/src/session.ts (createCliSession factory)
- *   - openclaw/src/cli-session.ts (createCliApi factory)
- *   - openclaw/starter/agent/skills/* (via @xpr-agents/openclaw)
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProtonCliError = void 0;
-exports.execAction = execAction;
-exports.execTransactionPush = execTransactionPush;
-exports.getTableRows = getTableRows;
-exports.checkProtonCli = checkProtonCli;
-exports.checkKeychainPopulated = checkKeychainPopulated;
-const child_process_1 = require("child_process");
-const util_1 = require("util");
-const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
-const CLI_TIMEOUT_MS = 30000;
-const MAX_BUFFER = 10 * 1024 * 1024; // 10MB
-class ProtonCliError extends Error {
-    constructor(message, code, stderr) {
-        super(message);
-        this.name = 'ProtonCliError';
-        this.code = code;
-        this.stderr = stderr;
-    }
-}
-exports.ProtonCliError = ProtonCliError;
-/**
- * Categorise an error from the CLI by stderr signature.
- * Default to 'unknown' — pattern set is intentionally narrow.
- */
-function classifyError(stderr) {
-    if (/ECONNREFUSED|ETIMEDOUT|ENOTFOUND|fetch failed|getaddrinfo|ENETUNREACH/i.test(stderr)) {
-        return 'network';
-    }
-    if (/no key found|key is not unlocked|account .* not found|signature_provider/i.test(stderr)) {
-        return 'auth';
-    }
-    if (/unable to unpack|invalid type|cannot serialize|unknown action|unknown_action_exception/i.test(stderr)) {
-        return 'serialization';
-    }
-    if (/assertion failure|eosio_assert|action_validate_exception/i.test(stderr)) {
-        return 'reverted';
-    }
-    return 'unknown';
-}
-/**
- * Remove anything that looks like action data payload from stderr before logging.
- * Action data may contain memos, addresses, or other potentially sensitive info.
- */
-function scrubStderr(stderr) {
-    if (!stderr)
-        return '';
-    return stderr
-        // Strip "data": { ... } blocks (single-line and multi-line)
-        .replace(/"data"\s*:\s*\{[^}]*\}/gs, '"data":[scrubbed]')
-        // Strip hex_data blocks
-        .replace(/"hex_data"\s*:\s*"[^"]*"/g, '"hex_data":"[scrubbed]"');
-}
-function logStart(contract, action, auth) {
-    console.error(`[proton-cli] action ${contract}::${action} auth=${auth}`);
-}
-function logSuccess(txid, ms) {
-    console.error(`[proton-cli] tx ${txid} ok in ${ms}ms`);
-}
-function logFailure(code, scrubbed) {
-    // Cap stderr in logs to avoid flooding
-    const snippet = scrubbed.length > 500 ? scrubbed.slice(0, 500) + '...' : scrubbed;
-    console.error(`[proton-cli] tx FAILED: ${code} ${snippet}`);
-}
-/**
- * Parse the transaction ID from proton CLI stdout.
- * Output is JSON containing a transaction_id (or trx_id) field.
- */
-/**
- * `proton action` can exit 0 while printing a chain error (e.g. an
- * eosio_assert from the contract). Surface that text so callers see the real
- * reason instead of a generic "no transaction ID" message.
- */
-function noTxIdError(stdout) {
-    const assertion = stdout.match(/assertion failure with message:\s*([^\n"]+)/i);
-    if (assertion) {
-        return new ProtonCliError(`contract rejected the action: ${assertion[1].trim()}`, 'reverted', scrubStderr(stdout));
-    }
-    const generic = stdout.match(/(?:^|\n)\s*(?:Error|error)[:\s]+([^\n]+)/);
-    if (generic) {
-        return new ProtonCliError(`proton CLI error: ${generic[1].trim()}`, classifyError(stdout), scrubStderr(stdout));
-    }
-    return new ProtonCliError('proton CLI returned success but no transaction ID could be parsed', 'unknown', stdout);
-}
-function parseTxId(stdout) {
-    const txMatch = stdout.match(/"transaction_id"\s*:\s*"([0-9a-f]+)"/);
-    if (txMatch)
-        return txMatch[1];
-    const trxMatch = stdout.match(/"trx_id"\s*:\s*"([0-9a-f]+)"/);
-    return trxMatch ? trxMatch[1] : null;
-}
-/**
- * Try to parse the full processed result block from stdout. Best-effort.
- */
-function tryParseProcessed(stdout) {
-    try {
-        const parsed = JSON.parse(stdout);
-        if (parsed && typeof parsed === 'object' && 'processed' in parsed) {
-            return parsed.processed;
-        }
-        return parsed;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * Run the proton CLI with the given arguments. Always uses execFile (no shell).
- */
-async function runProton(args) {
-    try {
-        const result = await execFileAsync('proton', args, {
-            timeout: CLI_TIMEOUT_MS,
-            maxBuffer: MAX_BUFFER,
-        });
-        return { stdout: result.stdout };
-    }
-    catch (err) {
-        const e = err;
-        const stderrRaw = (e.stderr || '') + (e.message || '');
-        const scrubbed = scrubStderr(stderrRaw);
-        const code = classifyError(stderrRaw);
-        logFailure(code, scrubbed);
-        throw new ProtonCliError(`proton CLI failed: ${code}`, code, scrubbed);
-    }
-}
-/**
- * Sign and submit a single action via `proton action`.
- *
- * @param contract - Contract account (e.g. 'agentescrow')
- * @param action - Action name (e.g. 'createjob')
- * @param data - Positional args matching the contract's action ABI
- * @param authorization - "account@permission" string (e.g. "alice@active")
- */
-async function execAction(contract, action, data, authorization) {
-    logStart(contract, action, authorization);
-    const start = Date.now();
-    const dataJson = JSON.stringify(data);
-    const { stdout } = await runProton(['action', contract, action, dataJson, authorization]);
-    const txid = parseTxId(stdout);
-    if (!txid) {
-        throw noTxIdError(stdout);
-    }
-    logSuccess(txid, Date.now() - start);
-    return { transaction_id: txid, processed: tryParseProcessed(stdout) };
-}
-/**
- * Sign and submit a multi-action atomic transaction via `proton transaction:push`.
- *
- * NOTE: do NOT use the bare `proton transaction` command — it does not
- * JSON.parse its argument (bug in @proton/cli). Use `transaction:push` exclusively.
- */
-async function execTransactionPush(tx) {
-    if (!tx.actions || tx.actions.length === 0) {
-        throw new ProtonCliError('execTransactionPush: empty actions array', 'unknown', '');
-    }
-    const first = tx.actions[0];
-    const auth = first.authorization[0];
-    logStart(first.account, first.name, `${auth.actor}@${auth.permission}`);
-    const start = Date.now();
-    const txJson = JSON.stringify(tx);
-    const { stdout } = await runProton(['transaction:push', txJson]);
-    const txid = parseTxId(stdout);
-    if (!txid) {
-        throw noTxIdError(stdout);
-    }
-    logSuccess(txid, Date.now() - start);
-    return { transaction_id: txid, processed: tryParseProcessed(stdout) };
-}
-/**
- * Read-only table query via `proton table`. No signing required.
- */
-async function getTableRows(code, table, scope, opts) {
-    const args = ['table', code, table];
-    if (scope)
-        args.push(scope);
-    if (opts?.limit !== undefined)
-        args.push('-c', String(opts.limit));
-    if (opts?.lower_bound !== undefined)
-        args.push('-l', opts.lower_bound);
-    if (opts?.upper_bound !== undefined)
-        args.push('-u', opts.upper_bound);
-    if (opts?.reverse)
-        args.push('-r');
-    if (opts?.index_position !== undefined)
-        args.push('-i', String(opts.index_position));
-    if (opts?.key_type !== undefined)
-        args.push('-k', opts.key_type);
-    const { stdout } = await runProton(args);
-    try {
-        return JSON.parse(stdout);
-    }
-    catch {
-        throw new ProtonCliError('proton table returned invalid JSON', 'unknown', stdout);
-    }
-}
-/**
- * Verify the proton CLI is installed and on PATH. Used by startup checks.
- */
-async function checkProtonCli() {
-    try {
-        await execFileAsync('proton', ['--version'], { timeout: 5000 });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Verify the proton CLI keychain has at least one key registered.
- * Soft check — this doesn't verify any specific account, just that
- * a keychain exists. The CLI itself will fail with auth code if the
- * specific account's key is missing.
- */
-async function checkKeychainPopulated() {
-    try {
-        const { stdout } = await execFileAsync('proton', ['key:list'], { timeout: 5000 });
-        return stdout.includes('publicKey');
-    }
-    catch {
-        return false;
-    }
-}
-//# sourceMappingURL=proton-cli.js.map

package/dist/proton-cli.d 2.ts

@@ -1,73 +0,0 @@
-/**
- * Proton CLI wrapper.
- *
- * Shells out to the `proton` CLI for all transaction signing. The agent
- * process never touches private keys — they live exclusively in the CLI's
- * encrypted keychain.
- *
- * Used by:
- *   - openclaw/src/session.ts (createCliSession factory)
- *   - openclaw/src/cli-session.ts (createCliApi factory)
- *   - openclaw/starter/agent/skills/* (via @xpr-agents/openclaw)
- */
-export type CliErrorCode = 'network' | 'auth' | 'serialization' | 'reverted' | 'unknown';
-export declare class ProtonCliError extends Error {
-    readonly code: CliErrorCode;
-    readonly stderr: string;
-    constructor(message: string, code: CliErrorCode, stderr: string);
-}
-export interface CliAction {
-    account: string;
-    name: string;
-    authorization: Array<{
-        actor: string;
-        permission: string;
-    }>;
-    data: Record<string, unknown>;
-}
-export interface CliTransactionResult {
-    transaction_id: string;
-    processed?: unknown;
-}
-export interface TableQueryOpts {
-    limit?: number;
-    lower_bound?: string;
-    upper_bound?: string;
-    reverse?: boolean;
-    index_position?: number;
-    key_type?: string;
-}
-/**
- * Sign and submit a single action via `proton action`.
- *
- * @param contract - Contract account (e.g. 'agentescrow')
- * @param action - Action name (e.g. 'createjob')
- * @param data - Positional args matching the contract's action ABI
- * @param authorization - "account@permission" string (e.g. "alice@active")
- */
-export declare function execAction(contract: string, action: string, data: unknown[], authorization: string): Promise<CliTransactionResult>;
-/**
- * Sign and submit a multi-action atomic transaction via `proton transaction:push`.
- *
- * NOTE: do NOT use the bare `proton transaction` command — it does not
- * JSON.parse its argument (bug in @proton/cli). Use `transaction:push` exclusively.
- */
-export declare function execTransactionPush(tx: {
-    actions: CliAction[];
-}): Promise<CliTransactionResult>;
-/**
- * Read-only table query via `proton table`. No signing required.
- */
-export declare function getTableRows(code: string, table: string, scope?: string, opts?: TableQueryOpts): Promise<unknown>;
-/**
- * Verify the proton CLI is installed and on PATH. Used by startup checks.
- */
-export declare function checkProtonCli(): Promise<boolean>;
-/**
- * Verify the proton CLI keychain has at least one key registered.
- * Soft check — this doesn't verify any specific account, just that
- * a keychain exists. The CLI itself will fail with auth code if the
- * specific account's key is missing.
- */
-export declare function checkKeychainPopulated(): Promise<boolean>;
-//# sourceMappingURL=proton-cli.d.ts.map

package/dist/proton-cli.d.ts 2.map

@@ -1 +0,0 @@
-{"version":3,"file":"proton-cli.d.ts","sourceRoot":"","sources":["../src/proton-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,eAAe,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzF,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM;CAMhE;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAgHD;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EAAE,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAW/B;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CAgB/B;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC,OAAO,CAAC,CAelB;AAED;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAOvD;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO/D"}

package/dist/proton-cli.js 2.map

@@ -1 +0,0 @@
-{"version":3,"file":"proton-cli.js","sourceRoot":"","sources":["../src/proton-cli.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAmKH,gCAgBC;AAQD,kDAkBC;AAKD,oCAoBC;AAKD,wCAOC;AAQD,wDAOC;AA/PD,iDAAyC;AACzC,+BAAiC;AAEjC,MAAM,aAAa,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAC;AAE1C,MAAM,cAAc,GAAG,KAAM,CAAC;AAC9B,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAI5C,MAAa,cAAe,SAAQ,KAAK;IAIvC,YAAY,OAAe,EAAE,IAAkB,EAAE,MAAc;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAVD,wCAUC;AAuBD;;;GAGG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,wEAAwE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,2EAA2E,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7F,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,yFAAyF,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3G,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,2DAA2D,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,MAAM;QACX,4DAA4D;SAC3D,OAAO,CAAC,0BAA0B,EAAE,mBAAmB,CAAC;QACzD,wBAAwB;SACvB,OAAO,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAY;IAC9D,OAAO,CAAC,KAAK,CAAC,uBAAuB,QAAQ,KAAK,MAAM,SAAS,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,EAAU;IAC1C,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,UAAU,EAAE,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,IAAkB,EAAE,QAAgB;IACtD,uCAAuC;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClF,OAAO,CAAC,KAAK,CAAC,2BAA2B,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH;;;;GAIG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC/E,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,IAAI,cAAc,CAAC,iCAAiC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACzE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,IAAI,cAAc,CAAC,qBAAqB,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,IAAI,cAAc,CAAC,mEAAmE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACpH,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACrE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;YAClE,OAAQ,MAAiC,CAAC,SAAS,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,IAAc;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE;YACjD,OAAO,EAAE,cAAc;YACvB,SAAS,EAAE,UAAU;SACtB,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAAmE,CAAC;QAC9E,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACtC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3B,MAAM,IAAI,cAAc,CAAC,sBAAsB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,UAAU,CAC9B,QAAgB,EAChB,MAAc,EACd,IAAe,EACf,aAAqB;IAErB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IACrC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,mBAAmB,CACvC,EAA4B;IAE5B,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,cAAc,CAAC,0CAA0C,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IACrC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,KAAa,EACb,KAAc,EACd,IAAqB;IAErB,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,IAAI,EAAE,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACrF,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,oCAAoC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,sBAAsB;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/session 2.js

@@ -1,41 +0,0 @@
-"use strict";
-/**
- * Server-side ProtonSession factory.
- *
- * This module previously held a JsSignatureProvider that loaded
- * XPR_PRIVATE_KEY into the agent process. After the 2026-04-24 charliebot
- * incident — where a hardcoded private key was leaked to a public repo —
- * all signing was moved to the proton CLI's encrypted keychain.
- *
- * This file is now a thin wrapper around createCliSession.
- *
- * Required env: XPR_ACCOUNT
- * Optional env: XPR_PERMISSION (defaults to 'active'), XPR_RPC_ENDPOINT
- *
- * The agent process MUST NOT read XPR_PRIVATE_KEY. The legacy entry-point
- * check in starter/agent/src/index.ts refuses to start if it is set.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createSession = createSession;
-exports.createReadOnlyRpc = createReadOnlyRpc;
-const js_1 = require("@proton/js");
-const cli_session_1 = require("./cli-session");
-/**
- * Create a server-side ProtonSession backed by the proton CLI.
- * No private key required — the CLI signs internally via its keychain.
- */
-function createSession(config) {
-    const account = config.account || process.env.XPR_ACCOUNT;
-    const permission = config.permission || process.env.XPR_PERMISSION || 'active';
-    if (!account) {
-        throw new Error('XPR_ACCOUNT environment variable is required');
-    }
-    return (0, cli_session_1.createCliSession)({ account, permission, rpcEndpoint: config.rpcEndpoint });
-}
-/**
- * Create a read-only RPC connection (no session/signing needed).
- */
-function createReadOnlyRpc(rpcEndpoint) {
-    return new js_1.JsonRpc(rpcEndpoint);
-}
-//# sourceMappingURL=session.js.map

package/dist/session.d 2.ts

@@ -1,36 +0,0 @@
-/**
- * Server-side ProtonSession factory.
- *
- * This module previously held a JsSignatureProvider that loaded
- * XPR_PRIVATE_KEY into the agent process. After the 2026-04-24 charliebot
- * incident — where a hardcoded private key was leaked to a public repo —
- * all signing was moved to the proton CLI's encrypted keychain.
- *
- * This file is now a thin wrapper around createCliSession.
- *
- * Required env: XPR_ACCOUNT
- * Optional env: XPR_PERMISSION (defaults to 'active'), XPR_RPC_ENDPOINT
- *
- * The agent process MUST NOT read XPR_PRIVATE_KEY. The legacy entry-point
- * check in starter/agent/src/index.ts refuses to start if it is set.
- */
-import { JsonRpc } from '@proton/js';
-import type { ProtonSession } from '@xpr-agents/sdk';
-export interface SessionConfig {
-    rpcEndpoint: string;
-    account?: string;
-    permission?: string;
-}
-/**
- * Create a server-side ProtonSession backed by the proton CLI.
- * No private key required — the CLI signs internally via its keychain.
- */
-export declare function createSession(config: SessionConfig): {
-    rpc: JsonRpc;
-    session: ProtonSession;
-};
-/**
- * Create a read-only RPC connection (no session/signing needed).
- */
-export declare function createReadOnlyRpc(rpcEndpoint: string): JsonRpc;
-//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts 2.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGrD,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAS7F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE9D"}

package/dist/session.js 2.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;AAgBH,sCASC;AAKD,8CAEC;AA9BD,mCAAqC;AAErC,+CAAiD;AAQjD;;;GAGG;AACH,SAAgB,aAAa,CAAC,MAAqB;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,QAAQ,CAAC;IAE/E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,IAAA,8BAAgB,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,WAAmB;IACnD,OAAO,IAAI,YAAO,CAAC,WAAW,CAAC,CAAC;AAClC,CAAC"}

package/dist/skill-types 2.js

@@ -1,9 +0,0 @@
-"use strict";
-/**
- * Skill Module Types
- *
- * Defines the interfaces for the XPR Agent skill module system.
- * Skill authors import these types to create portable, reusable skill packages.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=skill-types.js.map

package/dist/skill-types.d 2.ts

@@ -1,61 +0,0 @@
-/**
- * Skill Module Types
- *
- * Defines the interfaces for the XPR Agent skill module system.
- * Skill authors import these types to create portable, reusable skill packages.
- */
-import type { ToolDefinition, PluginApi } from './types';
-/**
- * Skill manifest — metadata for discovery, A2A cards, and future on-chain marketplace.
- * Lives in skill.json at the package root.
- */
-export interface SkillManifest {
-    /** Skill identifier, e.g. "web-scraping" */
-    name: string;
-    /** Semver version string */
-    version: string;
-    /** Human-readable description (for A2A card + on-chain listing) */
-    description: string;
-    /** Author — npm org or XPR account name */
-    author: string;
-    /** Category: compute | storage | oracle | payment | messaging | ai */
-    category: string;
-    /** Search/filter tags */
-    tags: string[];
-    /** Capabilities exposed (maps to A2A card skills) */
-    capabilities: string[];
-    /** Tool names this skill registers (for transparency) */
-    tools: string[];
-    /** Optional requirements */
-    requires?: {
-        /** Required environment variables */
-        env?: string[];
-    };
-    /** Future: on-chain skill exchange pricing */
-    pricing?: {
-        model: 'free' | 'one-time' | 'subscription';
-        amount?: string;
-    };
-}
-/**
- * API passed to skill entry functions for registering tools.
- * Extends PluginApi with convenience accessors for RPC and session.
- */
-export interface SkillApi extends PluginApi {
-    /** Register a tool (same interface as OpenClaw core tools) */
-    registerTool(tool: ToolDefinition): void;
-    /** Get plugin config values */
-    getConfig(): Record<string, unknown>;
-}
-/**
- * A fully loaded skill — returned by the skill loader after successful loading.
- */
-export interface LoadedSkill {
-    /** Parsed manifest from skill.json */
-    manifest: SkillManifest;
-    /** Behavioral instructions from SKILL.md (frontmatter stripped) */
-    promptSection: string;
-    /** Number of tools successfully registered */
-    toolCount: number;
-}
-//# sourceMappingURL=skill-types.d.ts.map

package/dist/skill-types.d.ts 2.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-types.d.ts","sourceRoot":"","sources":["../src/skill-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,qDAAqD;IACrD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,yDAAyD;IACzD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE;QACT,qCAAqC;QACrC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC;IACF,8CAA8C;IAC9C,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,cAAc,CAAC;QAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,QAAS,SAAQ,SAAS;IACzC,8DAA8D;IAC9D,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAAC;IACzC,+BAA+B;IAC/B,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,sCAAsC;IACtC,QAAQ,EAAE,aAAa,CAAC;IACxB,mEAAmE;IACnE,aAAa,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/skill-types.js 2.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-types.js","sourceRoot":"","sources":["../src/skill-types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/types 2.js

@@ -1,6 +0,0 @@
-"use strict";
-/**
- * Internal types for the OpenClaw plugin.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=types.js.map

package/dist/types.d 2.ts

@@ -1,39 +0,0 @@
-/**
- * Internal types for the OpenClaw plugin.
- */
-import type { JsonRpc, ProtonSession } from '@xpr-agents/sdk';
-export interface PluginConfig {
-    rpc: JsonRpc;
-    session?: ProtonSession;
-    network: 'mainnet' | 'testnet';
-    rpcEndpoint: string;
-    indexerUrl: string;
-    contracts: ContractNames;
-    confirmHighRisk: boolean;
-    maxTransferAmount: number;
-}
-export interface ContractNames {
-    agentcore: string;
-    agentfeed: string;
-    agentvalid: string;
-    agentescrow: string;
-}
-export interface ToolDefinition {
-    name: string;
-    description: string;
-    parameters: {
-        type: 'object';
-        required?: string[];
-        properties: Record<string, unknown>;
-    };
-    handler: (params: any) => Promise<unknown>;
-}
-/**
- * OpenClaw plugin API interface.
- * This matches the OpenClaw extension registration pattern.
- */
-export interface PluginApi {
-    registerTool(tool: ToolDefinition): void;
-    getConfig(): Record<string, unknown>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts 2.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE9D,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,SAAS,GAAG,SAAS,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,aAAa,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,CAAC;IACF,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5C;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAAC;IACzC,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC"}

package/dist/types.js 2.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;GAEG"}