nodpay 0.2.16 → 0.2.18

package/SKILL.md

@@ -1,6 +1,17 @@
 ---
 name: nodpay
 description: Propose on-chain payments from a shared wallet. Use when user asks to send crypto, make a payment, or create a shared wallet.
+metadata:
+  {
+    "openclaw":
+      {
+        "requires": { "bins": ["npx", "curl"] },
+        "install": [{ "id": "node", "kind": "node", "package": "nodpay", "bins": ["npx"], "label": "Install NodPay CLI (npm)" }]
+      },
+    "credentials": "Agent signing key stored in ~/.nodpay/.env (generated by npx nodpay keygen, never exposed to agent context)",
+    "persistence": ["~/.nodpay/.env (agent key, chmod 600)", "~/.nodpay/wallets/*.json (wallet info, public key material)"],
+    "network": ["nodpay.ai (op-store relay + wallet creation UI)", "Public RPC endpoints via --chain"]
+  }
 ---
 
 # NodPay — Agent Wallet
@@ -13,11 +24,11 @@ You propose payments, your human approves with one tap. 2-of-3 multisig — you
 
 ## Trust Model
 
-- **Your private key never leaves disk.** `keygen` writes to `.nodpay/.env` (chmod 600) — never in stdout, context, or logs.
+- **Your private key never leaves disk.** `keygen` writes to `~/.nodpay/.env` (chmod 600) — never in stdout, context, or logs.
 - **You can only propose.** Execution requires human co-sign (passkey). No single party can move funds.
-- **Wallet info is public key material.** Safe address, passkey X/Y, recovery signer — all safe to store.
+- **Wallet info is public key material.** Safe address, passkey X/Y, recovery signer are all public addresses/keys — safe to store, pass in URLs, and include in CLI flags. No secrets are ever exposed in commands or URLs.
 - **Recovery key is user-held.** The 12-word phrase generates a third signer the user controls. If the agent key or passkey is lost, the user can still recover funds — the agent never has unilateral access.
-- **NodPay server is a stateless relay.** It forwards signed operations to the chain — no private keys, no custody, no accounts. Self-hostable via `OP_STORE_URL`. If the server goes offline, funds stay safe on-chain.
+- **NodPay server is a stateless relay.** It forwards signed operations to the chain — no private keys, no custody, no accounts. If the server goes offline, funds stay safe on-chain.
 - **The web app is a convenience layer.** It helps users create wallets and approve transactions. All crypto operations happen client-side; nothing sensitive is stored server-side.
 - **Verify the agent address matches yours** before storing wallet info. Mismatch = wrong key binding.
 
@@ -48,9 +59,9 @@ Outputs your **public address** only. No restart needed.
 > I've set up a shared wallet for us — takes 30 seconds:
 > https://nodpay.ai/?agent=YOUR_AGENT_ADDRESS
 
-**Use this URL verbatim.** Do not search or guess — `nodpay.ai` is the only correct domain.
+The official domain is `nodpay.ai` — do not confuse with similarly named services.
 
-User copies back wallet info → store in `.nodpay/wallets/<safe-address>.json`.
+User copies back wallet info → store in `~/.nodpay/wallets/<safe-address>.json`.
 
 After creation, tell the user the address works on any chain. Offer testnet only if they ask.
 
@@ -86,7 +97,7 @@ Check before proposing — shows nonce and pending ops.
 ## Data
 
 ```
-.nodpay/
+~/.nodpay/
   .env                         # agent key (chmod 600)
   wallets/
     0xAbC...123.json           # one file per wallet

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodpay",
-  "version": "0.2.16",
+  "version": "0.2.18",
   "description": "NodPay CLI — propose on-chain payments from agent-human shared wallets",
   "type": "module",
   "bin": {

package/scripts/keygen.mjs

@@ -13,13 +13,14 @@
 
 import { Wallet } from 'ethers';
 import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync } from 'fs';
-import { resolve, dirname } from 'path';
+import { resolve, dirname, join } from 'path';
 
 const args = process.argv.slice(2);
 const envFileIdx = args.indexOf('--env-file');
+const HOME = process.env.HOME || process.env.USERPROFILE || '/tmp';
 const envFile = envFileIdx !== -1
   ? resolve(args[envFileIdx + 1])
-  : resolve('.nodpay', '.env');
+  : join(HOME, '.nodpay', '.env');
 
 const ENV_VAR = 'NODPAY_AGENT_KEY';
 

package/scripts/propose.mjs

@@ -64,12 +64,14 @@ if (chainArg) {
 }
 const ENTRYPOINT_ADDRESS = ENTRYPOINT;
 
-// SECURITY: Read agent key from .nodpay/.env file (chmod 600), not from
+const HOME = process.env.HOME || process.env.USERPROFILE || '/tmp';
+
+// SECURITY: Read agent key from ~/.nodpay/.env file (chmod 600), not from
 // process.env or CLI args. The key is loaded at runtime by the script itself,
 // so it never passes through the LLM agent's context or conversation history.
 function loadAgentKey() {
   try {
-    const envPath = join(process.cwd(), '.nodpay', '.env');
+    const envPath = join(HOME, '.nodpay', '.env');
     const lines = readFileSync(envPath, 'utf8').split('\n');
     for (const line of lines) {
       const trimmed = line.trim();
@@ -89,10 +91,10 @@ const DEFAULT_SAFE = null; // always use --safe flag
 // agents don't need their own bundler API key. This is a thin relay — it
 // forwards the UserOp to a bundler service and returns the result. The proxy
 // only sees the already-signed (partial) UserOp; it cannot modify or execute it.
-// For self-hosted setups, set OP_STORE_URL in .nodpay/.env.
+// Optional overrides (OP_STORE_URL, WEB_APP_URL) also read from ~/.nodpay/.env.
 function loadDotEnvVar(name, fallback) {
   try {
-    const envPath = join(process.cwd(), '.nodpay', '.env');
+    const envPath = join(HOME, '.nodpay', '.env');
     const lines = readFileSync(envPath, 'utf8').split('\n');
     for (const line of lines) {
       const trimmed = line.trim();
@@ -107,7 +109,7 @@ const opStoreBase = loadDotEnvVar('OP_STORE_URL', 'https://nodpay.ai/api');
 const BUNDLER_URL = `${opStoreBase}/bundler/${CHAIN_ID}`;
 
 if (!NODPAY_AGENT_KEY) {
-  console.error(JSON.stringify({ error: 'Missing NODPAY_AGENT_KEY in .nodpay/.env — run npx nodpay keygen first' }));
+  console.error(JSON.stringify({ error: 'Missing NODPAY_AGENT_KEY in ~/.nodpay/.env — run npx nodpay keygen first' }));
   process.exit(1);
 }