nodpay 0.2.31 → 0.2.33

package/README.md

@@ -16,12 +16,14 @@ This npm package (`nodpay`) is the **agent-facing CLI**. It is also published as
 | **ClawHub** (`clawhub install nodpay`) | `SKILL.md` only | OpenClaw agents |
 | **nodpay.ai/skill.md** | `SKILL.md` via CDN proxy | All agent frameworks |
 
-The CLI provides three commands:
+The CLI provides five commands:
 
 ```
 nodpay keygen     # Generate agent keypair (~/.nodpay/.env, chmod 600)
-nodpay propose    # Propose a transaction for human approval
+nodpay nonce      # Query next nonce (on-chain EntryPoint + pending proposals)
+nodpay propose    # Propose a transaction for human approval (--nonce required)
 nodpay txs        # List and verify transactions for a wallet
+nodpay gasprice   # Get current gas price + estimated cost per chain
 ```
 
 ## Quick Start
@@ -30,25 +32,32 @@ nodpay txs        # List and verify transactions for a wallet
 # 1. Generate key (public address only in stdout; key never exposed)
 npx nodpay keygen
 
-# 2. Propose a payment
+# 2. Get next nonce (on-chain + pending)
+npx nodpay nonce --safe 0xWALLET --chain base
+
+# 3. Propose a payment
 npx nodpay propose \
   --chain base \
   --safe 0xWALLET \
   --to 0xRECIPIENT \
   --value-eth 0.01 \
+  --nonce 0 \
   --human-signer-passkey-x 0x... \
   --human-signer-passkey-y 0x... \
   --recovery-signer 0x...
 
-# 3. Check pending transactions (with verification)
+# 4. Check transactions (with verification)
 npx nodpay txs --safe 0xWALLET
+
+# 5. Estimate gas cost for a sweep
+npx nodpay gasprice --chain base
 ```
 
 ## Security
 
 All config lives in `~/.nodpay/` — zero `process.env` references in code.
 
-- **Hardened Key Isolation:** private key written directly to `~/.nodpay/.env` (chmod 600), strictly excluded from stdout and agent context.
+- **Hardened Key Isolation:** private key written to `~/.nodpay/.env` (chmod 600), read via file I/O at runtime. Not passed through CLI args, env vars, or stdout.
 - **Zero Trust:** `txs` independently verifies every server response (decode calldata → recompute hash → recover signer → check owner set).
 - **Threshold Security:** 2-of-3 multisig — agent cannot move funds unilaterally.
 

package/SKILL.md

@@ -9,7 +9,7 @@ metadata:
         "homepage": "https://nodpay.ai",
         "install": [{ "id": "node", "kind": "node", "package": "nodpay", "label": "Install NodPay CLI (npm)", "author": "xhyumiracle", "source": "https://github.com/xhyumiracle/nodpay-cli" }]
       },
-    "credentials": "Agent signing key stored in ~/.nodpay/.env (generated by npx nodpay keygen, never exposed to agent context)",
+    "credentials": "Agent signing key stored in ~/.nodpay/.env (chmod 600, generated by npx nodpay keygen). Read at runtime by CLI process; not passed via CLI args, env vars, or stdout.",
     "persistence": ["~/.nodpay/.env (agent key, chmod 600)", "~/.nodpay/wallets/*.json (wallet info, public key material)"],
     "network": ["nodpay.ai (op-store relay + wallet creation UI)", "Public RPC endpoints via --chain"]
   }
@@ -30,8 +30,8 @@ You propose payments, your human approves with one tap. 2-of-3 multisig — you
 | **Threshold Security** | **Elimination of single point of failure:** authority keys are distributed between the agent, human, and a recovery signer (2-of-3 multisig). Ensures non-custodial control — the agent cannot move funds unilaterally. |
 | **Zero Trust** | **End-to-end verification:** no party is implicitly trusted. Server validates signatures; client and CLI independently verify server responses (decode calldata → recompute hash → recover signer → check owner set). The blockchain serves as the canonical source of truth. |
 | **Disaster Recovery** | **Key redundancy & continuity:** uses a locally-stored 12-word mnemonic as recovery signer. Any two of the three signers can reconstruct authority to unlock the wallet, ensuring the user is never locked out by a single lost credential. |
-| **Hardened Key Isolation** | `keygen` writes to `~/.nodpay/.env` (chmod 600). The CLI reads the key internally at runtime — only the public address appears in stdout. |
-| **Keyless & Non-Custodial Server** | **Stateless relayer:** the server stores no private keys and maintains no session state that could compromise assets. All signing happens locally. Funds stay on-chain if the server goes offline. |
+| **Hardened Key Isolation** | `keygen` writes to `~/.nodpay/.env` (chmod 600). The CLI reads the key via file I/O at runtime — not passed through CLI arguments, environment variables, or stdout. Only the public address is returned to the caller. |
+| **Keyless & Non-Custodial Server** | **Stateless relayer:** the server stores no private keys, no passkey credentials, and no session state. Identity verification uses CREATE2 address prediction + cryptographic signatures — zero trusted storage. Funds stay on-chain if the server goes offline. |
 
 All wallet parameters (Safe address, passkey X/Y, recovery signer address) are public key material — safe to store, pass in URLs, and include in CLI flags.
 
@@ -181,16 +181,18 @@ Wallet address is the same across all chains. **Ask which chain if not specified
 
 ## Reconnect
 
-Browser data cleared? Build a reconnect link from the wallet's stored parameters (all public — no secrets):
+Browser data cleared? Build a reconnect link from the wallet's stored parameters (all public — no secrets).
+
+**You MUST include `signerType`** — the client uses it to show the correct verification flow.
 
 **Passkey:**
 ```
-https://nodpay.ai/?agent=AGENT_SIGNER&safe=SAFE_ADDRESS&recovery=RECOVERY_SIGNER&x=PASSKEY_X&y=PASSKEY_Y
+https://nodpay.ai/?agent=AGENT_SIGNER&safe=SAFE_ADDRESS&recovery=RECOVERY_SIGNER&signerType=passkey&x=PASSKEY_X&y=PASSKEY_Y
 ```
 
 **EOA:**
 ```
-https://nodpay.ai/?agent=AGENT_SIGNER&safe=SAFE_ADDRESS&recovery=RECOVERY_SIGNER&eoa=HUMAN_SIGNER_EOA
+https://nodpay.ai/?agent=AGENT_SIGNER&safe=SAFE_ADDRESS&recovery=RECOVERY_SIGNER&signerType=eoa&eoa=HUMAN_SIGNER_EOA
 ```
 
-User opens → verifies identity → wallet restored.
+User opens → verifies identity (passkey assertion or MetaMask connect) → wallet restored.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodpay",
-  "version": "0.2.31",
+  "version": "0.2.33",
   "description": "NodPay CLI — propose on-chain payments from agent-human shared wallets",
   "type": "module",
   "bin": {

package/scripts/propose.mjs

@@ -309,7 +309,50 @@ try {
 
   const safe4337Pack = await Safe4337Pack.init(initOptions);
 
-  const safeAddress = await safe4337Pack.protocolKit.getAddress();
+  let safeAddress = await safe4337Pack.protocolKit.getAddress();
+
+  // --- Ethereum mainnet: force L2 singleton for cross-chain address consistency ---
+  //
+  // Safe SDK defaults to the L1 singleton on chainId 1, but all other chains use the L2
+  // singleton. Different singleton → different CREATE2 address → cross-chain mismatch.
+  //
+  // The L2 singleton (0x29fc...) IS deployed on Ethereum mainnet. Using it there costs
+  // ~2.3% more gas per tx (~$0.14 at 15 Gwei) due to extra event emissions — acceptable.
+  //
+  // Trade-off: safe.global may not fully index L2-singleton Safes on mainnet (their L1
+  // indexer uses trace-based filtering by known singleton addresses). NodPay uses its own
+  // op-store, so this doesn't affect us.
+  //
+  // Long-term plan: support separate L1/L2 wallet families — user chooses at creation time.
+  // For now, we unify on L2 singleton across all chains for address consistency.
+  if (
+    isCounterfactual &&
+    CHAIN_ID === '1' &&
+    SAFE_ADDRESS &&
+    safeAddress.toLowerCase() !== SAFE_ADDRESS.toLowerCase()
+  ) {
+    const Safe = (await import('@safe-global/protocol-kit')).default;
+    // getPredictedSafe() returns the full config Safe4337Pack assembled — owners, threshold,
+    // module setup (to/data), fallbackHandler, salt, etc. We re-init with the same config
+    // but isL1SafeSingleton=false so the SDK picks L2 singleton.
+    const predictedSafe = safe4337Pack.protocolKit.getPredictedSafe();
+    safe4337Pack.protocolKit = await Safe.init({
+      provider: RPC_URL,
+      signer: initOptions.signer,
+      isL1SafeSingleton: false,
+      predictedSafe,
+    });
+    safeAddress = await safe4337Pack.protocolKit.getAddress();
+  }
+
+  // Safety check: if --safe was explicitly given, the computed address MUST match.
+  // Mismatch means owner set / salt / SDK version differs from wallet creation — abort.
+  if (SAFE_ADDRESS && safeAddress.toLowerCase() !== SAFE_ADDRESS.toLowerCase()) {
+    console.error(JSON.stringify({
+      error: `Address mismatch: --safe ${SAFE_ADDRESS} but SDK computed ${safeAddress}. Check --human-signer-eoa, --recovery-signer, and --salt match the original wallet creation params.`
+    }));
+    process.exit(1);
+  }
 
   // Auto-detect deployment status: if Safe is already deployed, drop counterfactual
   if (isCounterfactual) {