nodpay 0.2.16 → 0.2.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/SKILL.md +14 -3
  2. package/package.json +1 -1
package/SKILL.md CHANGED
@@ -1,6 +1,17 @@
1
1
  ---
2
2
  name: nodpay
3
3
  description: Propose on-chain payments from a shared wallet. Use when user asks to send crypto, make a payment, or create a shared wallet.
4
+ metadata:
5
+ {
6
+ "openclaw":
7
+ {
8
+ "requires": { "bins": ["npx", "curl"] },
9
+ "install": [{ "id": "node", "kind": "node", "package": "nodpay", "bins": ["npx"], "label": "Install NodPay CLI (npm)" }]
10
+ },
11
+ "credentials": "Agent signing key stored in .nodpay/.env (generated by npx nodpay keygen, never exposed to agent context)",
12
+ "persistence": [".nodpay/.env (agent key, chmod 600)", ".nodpay/wallets/*.json (wallet info, public key material)"],
13
+ "network": ["nodpay.ai (op-store relay + wallet creation UI)", "Public RPC endpoints via --chain"]
14
+ }
4
15
  ---
5
16
 
6
17
  # NodPay — Agent Wallet
@@ -15,9 +26,9 @@ You propose payments, your human approves with one tap. 2-of-3 multisig — you
15
26
 
16
27
  - **Your private key never leaves disk.** `keygen` writes to `.nodpay/.env` (chmod 600) — never in stdout, context, or logs.
17
28
  - **You can only propose.** Execution requires human co-sign (passkey). No single party can move funds.
18
- - **Wallet info is public key material.** Safe address, passkey X/Y, recovery signer all safe to store.
29
+ - **Wallet info is public key material.** Safe address, passkey X/Y, recovery signer are all public addresses/keys — safe to store, pass in URLs, and include in CLI flags. No secrets are ever exposed in commands or URLs.
19
30
  - **Recovery key is user-held.** The 12-word phrase generates a third signer the user controls. If the agent key or passkey is lost, the user can still recover funds — the agent never has unilateral access.
20
- - **NodPay server is a stateless relay.** It forwards signed operations to the chain — no private keys, no custody, no accounts. Self-hostable via `OP_STORE_URL`. If the server goes offline, funds stay safe on-chain.
31
+ - **NodPay server is a stateless relay.** It forwards signed operations to the chain — no private keys, no custody, no accounts. If the server goes offline, funds stay safe on-chain.
21
32
  - **The web app is a convenience layer.** It helps users create wallets and approve transactions. All crypto operations happen client-side; nothing sensitive is stored server-side.
22
33
  - **Verify the agent address matches yours** before storing wallet info. Mismatch = wrong key binding.
23
34
 
@@ -48,7 +59,7 @@ Outputs your **public address** only. No restart needed.
48
59
  > I've set up a shared wallet for us — takes 30 seconds:
49
60
  > https://nodpay.ai/?agent=YOUR_AGENT_ADDRESS
50
61
 
51
- **Use this URL verbatim.** Do not search or guess — `nodpay.ai` is the only correct domain.
62
+ The official domain is `nodpay.ai` do not confuse with similarly named services.
52
63
 
53
64
  User copies back wallet info → store in `.nodpay/wallets/<safe-address>.json`.
54
65
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "nodpay",
3
- "version": "0.2.16",
3
+ "version": "0.2.17",
4
4
  "description": "NodPay CLI — propose on-chain payments from agent-human shared wallets",
5
5
  "type": "module",
6
6
  "bin": {