visionclaw 0.1.67 → 0.1.69

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [0.1.69](https://github.com/babelcloud/visionclaw/compare/v0.1.68...v0.1.69) (2026-03-02)
+
+
+### Features
+
+* **config:** add support for Gmail password, agent phone number, and Mac user password ([6979bb3](https://github.com/babelcloud/visionclaw/commit/6979bb3f4615aae388c8d69ec5472f61d1588172))
+* **skills:** enhance skill management and add catalog functionality ([cb90f97](https://github.com/babelcloud/visionclaw/commit/cb90f9780b1fdb1de2a53de68acb7c9005316bad))
+
+
+
+## [0.1.68](https://github.com/babelcloud/visionclaw/compare/v0.1.67...v0.1.68) (2026-03-02)
+
+
+
 ## [0.1.67](https://github.com/babelcloud/visionclaw/compare/v0.1.66...v0.1.67) (2026-03-01)
 
 

package/dist/agent/system-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system-prompt.d.ts","sourceRoot":"","sources":["../../src/agent/system-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAExE;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,WAAW,GACvB,MAAM,CA6HR"}
+{"version":3,"file":"system-prompt.d.ts","sourceRoot":"","sources":["../../src/agent/system-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAExE;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,WAAW,GACvB,MAAM,CAwJR"}

package/dist/agent/system-prompt.js

@@ -21,13 +21,15 @@ You are ${ownerConfig.agentName}, a personal desktop assistant. You are a long-r
 - **Name**: ${ownerConfig.agentName}
 - **Email**: ${config.gmail} (this is YOUR email address — you send and receive emails as yourself)
 - **Calendar**: Google Calendar associated with ${config.gmail} (this is YOUR calendar)
-${ownerConfig.phoneNumber ? `- **Phone**: ${ownerConfig.phoneNumber}` : "- **Phone**: Not configured"}
+${config.phoneNumber ? `- **Phone**: ${config.phoneNumber} (this is YOUR phone number)` : "- **Phone**: Not configured"}
+${config.gmailPassword ? `- **Gmail Password**: ${config.gmailPassword}` : ""}
+${config.macUserPassword ? `- **Mac User Password**: ${config.macUserPassword} (use for sudo, system settings, screen unlock, etc.)` : ""}
 
 ## Your Owner
 ${ownerConfig.ownerName ? `- **Name**: ${ownerConfig.ownerName}` : "- Owner name not configured"}
 ${ownerConfig.ownerEmail ? `- **Personal Email**: ${ownerConfig.ownerEmail}` : ""}
 ${ownerConfig.phoneNumber ? `- **Phone**: ${ownerConfig.phoneNumber}` : ""}
-${ownerConfig.allowedTelegramChatIds.length > 0 ? `- **Telegram Chat IDs**: ${ownerConfig.allowedTelegramChatIds.join(", ")}` : ""}
+${ownerConfig.telegramChatId ? `- **Telegram Chat ID**: ${ownerConfig.telegramChatId}` : ""}
 
 All messages from enabled channels come from your owner (or people your owner has authorized). When someone messages you on Telegram, Gmail, or Discord — they are your owner giving you commands. Always respond helpfully and promptly.
 
@@ -36,6 +38,7 @@ All messages from enabled channels come from your owner (or people your owner ha
 - You are a program running on this computer. You are always on as long as the computer is on.
 - You have full control of this computer: you can run terminal commands, use GUI applications, take screenshots, control the mouse and keyboard, browse the web, read and write files.
 - You can manage your skills using the \`manage_skills\` tool (create, update, delete, list), and invoke them via the \`Skill\` tool.
+- You also have a **skill catalog** with optional domain-specific skills(such as Coding, Financial, Chat Apps...). Use \`manage_skills(action="list_catalog")\` to browse available skills and \`manage_skills(action="install_catalog", name="skill-name")\` to install one. Installed skills become permanently available.
 - You persist across restarts — your session and memory carry over.
 
 ## Communication Channels
@@ -44,6 +47,10 @@ ${channelList}
 
 When you need to communicate results, answer questions, or ask for help, use the \`notify_user\` tool. Always specify the \`channel\` and \`to\` parameters matching the originating message — especially when messages arrive from multiple channels in the same wake cycle. If you omit them, the tool defaults to the owner's primary channel.
 
+### Chat Apps
+The owner may config chat apps like WeChat, Feishu, WhatsApp...These apps are not direct messaging channels, but you can use the computer use tools to interact with them.
+Also, you need to regularly check the chat apps to see if there are any new messages.
+
 ## Behavior
 
 ### Wake Cycle
@@ -83,6 +90,15 @@ At the start of each turn, check for memos from the other session (they appear i
 - Proactively save important information to memory so it survives context compaction.
 - Retrieve relevant memories when starting new tasks.
 - Your conversation session is infinite — context compaction will automatically summarize old turns. Important details should be saved to memory before they get compacted.
+- **What to save**: credentials/API keys (immediately when received), account setups, owner preferences and rules, active task state for long tasks, important decisions and outcomes, calendar event IDs (so you can update/delete them later).
+- **What NOT to save**: temporary task outputs, information already in this system prompt, one-time information that won't recur.
+
+### Communication Patterns
+- **Match language**: reply in the same language as the inbound message (Chinese message → Chinese reply).
+- **Match channel**: always reply via the same channel the message arrived on.
+- **No Markdown in chat apps**: WeChat, Feishu, and Telegram do not render Markdown — use plain text and emojis only.
+- **Minimize questions**: take action and report the outcome rather than asking for permission. Only confirm before irreversible actions (large trades, emails to external parties).
+- **Error reporting**: when a tool fails, try alternative approaches before giving up. Report failures clearly: what failed, why, what was tried, and what alternatives remain. For auth/credential errors, re-read memory to verify stored credentials.
 
 ### Task Completion
 - When you have nothing left to do, call the \`finish\` tool to go back to sleep.
@@ -97,6 +113,11 @@ During heartbeat wakes (no new messages), review your calendar, check for pendin
 - Follow up on pending tasks
 - Perform maintenance (check for updates, clean up, etc.)
 
+### Efficiency
+- When multiple independent tool calls are needed, make them in parallel (same message) rather than sequentially.
+- Process the most recent/urgent message first when multiple messages are queued.
+- Acknowledge time-sensitive requests immediately before starting long work.
+
 ## Tool Usage Guidelines
 
 All available tools (SDK built-ins, system tools, browser tools, desktop tools) are auto-documented at runtime — refer to their descriptions for parameters and usage.
@@ -111,12 +132,18 @@ For all web browser interactions, prefer the Playwright browser tools. They use
 
 Playwright saves screenshots and other output files to **~/screenshots**.
 
+Even if you are using playwright to operate the browser, you should bring the browser window to the foreground.
+
 ### Desktop Interactions (Computer Use)
 
 For desktop applications and UI outside the browser, use the \`computer_use_*\` tools. They use AI-powered coordinate resolution — describe what you want to interact with in natural language.
 
 **Prefer Playwright browser tools** for all in-browser work. Use **computer_use_*** only for desktop apps, situations outside the browser, or as a fallback when Playwright can't do the job.
 
+The computer use tools are very powerful, you can basically do anything on the computer using them. If direct tool call is not possible, you should use the computer use tools to interact with the computer.
+
+You should close the un-needed windows after task to make your desktop clean and tidy.
+
 ## Memory Protocol
 
 IMPORTANT: ALWAYS VIEW YOUR MEMORY DIRECTORY BEFORE DOING ANYTHING ELSE.

package/dist/agent/system-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"system-prompt.js","sourceRoot":"","sources":["../../src/agent/system-prompt.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAwB,EACxB,WAAwB;IAExB,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE;QAC7C,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,MAAM;KAClB,CAAC,CAAC;IAEH,OAAO;;UAEC,WAAW,CAAC,SAAS,oHAAoH,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;;;cAGxL,WAAW,CAAC,SAAS;eACpB,MAAM,CAAC,KAAK;kDACuB,MAAM,CAAC,KAAK;EAC5D,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,6BAA6B;;;EAGnG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,6BAA6B;EAC9F,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,yBAAyB,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;EAC/E,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;EACxE,WAAW,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,4BAA4B,WAAW,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;EAahI,WAAW;;;;;;;;;gCASmB,WAAW,CAAC,mBAAmB,GAAG,IAAI;;;;;;;;;;;;;;EAcpE,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;CAelC,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiDJ,GAAG,KAAK,EAAE;CACX,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAwB;IAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAE5E,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"system-prompt.js","sourceRoot":"","sources":["../../src/agent/system-prompt.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAwB,EACxB,WAAwB;IAExB,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE;QAC7C,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,MAAM;KAClB,CAAC,CAAC;IAEH,OAAO;;UAEC,WAAW,CAAC,SAAS,oHAAoH,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;;;cAGxL,WAAW,CAAC,SAAS;eACpB,MAAM,CAAC,KAAK;kDACuB,MAAM,CAAC,KAAK;EAC5D,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,WAAW,8BAA8B,CAAC,CAAC,CAAC,6BAA6B;EACrH,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,yBAAyB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE;EAC3E,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,4BAA4B,MAAM,CAAC,eAAe,uDAAuD,CAAC,CAAC,CAAC,EAAE;;;EAGvI,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,6BAA6B;EAC9F,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,yBAAyB,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;EAC/E,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;EACxE,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,2BAA2B,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;EAczF,WAAW;;;;;;;;;;;;;gCAamB,WAAW,CAAC,mBAAmB,GAAG,IAAI;;;;;;;;;;;;;;EAcpE,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;CAelC,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqEJ,GAAG,KAAK,EAAE;CACX,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAwB;IAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAE5E,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/builtin-skills/catalog/futu-stock-trading/SKILL.md

@@ -0,0 +1,118 @@
+---
+description: Use this skill for Futu OpenD / moomoo stock trading operations -- placing orders, checking positions and holdings, querying account info for HK and US equities. Covers FutuOpenD setup, the moomoo Python API, and HK market hours.
+---
+
+# Futu OpenD / moomoo Stock Trading API
+
+## Setup
+
+- **FutuOpenD**: Download from Futu official site, install to `~/FutuOpenD/`
+- **Start command**: `open ~/FutuOpenD/Futu_OpenD_VERSION/FutuOpenD.app`
+- **API port**: `127.0.0.1:11111`
+- **Python library**: `moomoo` (NOT `futu`) — `pip3 install moomoo-api`
+
+## Credentials
+
+Check memory for:
+- Account phone number
+- Login password
+- Trading unlock password (6-digit PIN)
+
+## Key Discovery: Use OpenSecTradeContext
+
+```python
+# WRONG — returns empty/wrong account for comprehensive accounts
+from moomoo import *
+trade_ctx = OpenHKTradeContext(host='127.0.0.1', port=11111)
+
+# CORRECT — use this for the comprehensive margin account
+trade_ctx = OpenSecTradeContext(filter_trdmarket=TrdMarket.HK, host='127.0.0.1', port=11111)
+```
+
+Multiple accounts may exist under one login. Identify the correct one by:
+- Querying all accounts: `trade_ctx.get_acc_list()`
+- The "保证金综合账户" (comprehensive margin account) is typically the main real account
+
+## Restarting FutuOpenD
+
+```bash
+open ~/FutuOpenD/Futu_OpenD_VERSION/FutuOpenD.app
+# Session is cached after first login — no SMS code needed on restart
+```
+
+## Basic Operations
+
+```python
+from moomoo import *
+
+# Connect
+quote_ctx = OpenQuoteContext(host='127.0.0.1', port=11111)
+trade_ctx = OpenSecTradeContext(filter_trdmarket=TrdMarket.HK, host='127.0.0.1', port=11111)
+
+# Unlock trading (required before placing orders) — check memory for PIN
+trade_ctx.unlock_trade(password='TRADING_PIN')
+
+# Get account info
+ret, data = trade_ctx.accinfo_query(trd_env=TrdEnv.REAL)
+
+# Get holdings
+ret, data = trade_ctx.position_list_query(trd_env=TrdEnv.REAL)
+
+# Get orders
+ret, data = trade_ctx.order_list_query(trd_env=TrdEnv.REAL)
+```
+
+## Placing an Order
+
+```python
+# Limit SELL order — check memory for account ID
+ret, data = trade_ctx.place_order(
+    price=530.0,
+    qty=100,
+    code='HK.00700',
+    trd_side=TrdSide.SELL,
+    order_type=OrderType.NORMAL,  # limit order
+    trd_env=TrdEnv.REAL,
+    acc_id=REAL_ACCOUNT_ID  # from get_acc_list()
+)
+order_id = data['order_id'][0]
+```
+
+## Order Status Values
+
+| Status | Meaning |
+|--------|---------|
+| `WAITING_SUBMIT` | Pre-market, waiting for market open |
+| `SUBMITTING` | Being submitted to exchange |
+| `SUBMITTED` | Submitted, waiting for match |
+| `FILLED_ALL` | Fully executed |
+| `CANCELLED_ALL` | Cancelled |
+
+## HK Market Hours
+
+- Opens: 9:30 AM HKT (UTC+8)
+- Lunch break: 12:00-13:00 HKT
+- Closes: 16:00 HKT
+- Pre-market orders: Submitted during market hours, status = WAITING_SUBMIT outside hours
+
+## Checking Order Execution
+
+```python
+ret, data = trade_ctx.order_list_query(trd_env=TrdEnv.REAL)
+# Filter by order_id to find specific order
+order = data[data['order_id'] == 'ORDER_ID']
+print(order[['order_status', 'dealt_qty', 'dealt_avg_price']])
+```
+
+## Stock Price Monitoring
+
+A monitoring script can be run via pm2:
+- Alerts at configurable price thresholds (buy signal, stop loss, take profit)
+- Uses Polygon.io or similar API for real-time data
+- Notify owner via Telegram when thresholds are hit
+
+## Earnings Calendar Monitoring
+
+Set Google Calendar reminders for 1 day before earnings:
+- Look up earnings dates for relevant stocks
+- When calendar reminder fires → notify owner via Telegram

package/dist/builtin-skills/catalog/github-dev-ops/SKILL.md

@@ -0,0 +1,93 @@
+---
+description: Use this skill for GitHub CLI operations, pm2 process management, Python/Node code execution, Google Drive file sharing, and presentation generation. Covers SSH config, common gh commands, and development environment setup on macOS.
+---
+
+# GitHub & Development Operations
+
+## GitHub CLI Setup
+
+- Binary: `gh` (install via `brew install gh`, then `gh auth login`)
+- Authenticate with `gh auth login` using the agent's GitHub account
+- SSH key: `~/.ssh/id_ed25519`
+
+```bash
+# SSH config for GitHub (use port 443 to avoid firewall issues)
+# ~/.ssh/config:
+Host github.com
+  Hostname ssh.github.com
+  Port 443
+  User git
+  IdentityFile ~/.ssh/id_ed25519
+```
+
+## Common GitHub Operations
+
+```bash
+# View PR
+gh pr view [PR_NUMBER] --repo [org/repo]
+
+# Create PR
+gh pr create --title "feat: add feature" --body "$(cat <<'EOF'
+## Summary
+- Added new feature
+EOF
+)"
+
+# List PRs
+gh pr list --repo [org/repo]
+
+# Check PR status / CI checks
+gh pr checks [PR_NUMBER]
+
+# View issues
+gh issue list --repo [org/repo]
+
+# Clone a repo
+git clone git@github.com:[org/repo].git
+```
+
+## Code Execution Environment
+
+- Python: `python3` (system or Homebrew)
+- Python packages (user): `~/.Library/Python/[VERSION]/lib/python/site-packages/`
+- Node.js: Available via `node`
+- npm/npx: Available
+- Useful packages: `moomoo-api`, `web3`, `eth_account`, `yt-dlp`
+
+## Process Management (pm2)
+
+```bash
+# Check running processes
+pm2 list
+
+# View logs
+pm2 logs [process-name]
+
+# Start a script
+pm2 start /path/to/script.py --name my-process --interpreter python3
+
+# Stop
+pm2 stop my-process
+```
+
+## Google Drive File Sharing
+
+```python
+# Upload file to Google Drive
+manage_drive(action="upload_file", local_path="/path/to/file", name="filename.ext")
+
+# Share a file
+manage_drive(action="share_file", file_id="...", email="user@example.com", role="reader")
+
+# Download file
+manage_drive(action="download_file", file_id="...", local_path="/tmp/file")
+
+# Shareable link format: https://drive.google.com/file/d/{file_id}/view
+```
+
+## Presentations (python-pptx)
+
+```bash
+pip3 install python-pptx
+python3 /tmp/create_presentation.py  # generates .pptx
+```

package/dist/builtin-skills/catalog/polymarket-trading/SKILL.md

@@ -0,0 +1,142 @@
+---
+description: Use this skill for Polymarket prediction market operations -- placing orders, checking positions and balance, CLOB API authentication (HMAC + EIP-712), and order signing on Polygon. Includes critical bug fixes for HMAC path signing and NegRisk adapter addresses.
+---
+
+# Polymarket Prediction Market Trading
+
+## Infrastructure Overview
+
+- **Network**: Polygon (Chain ID: 137)
+- **Wallet**: Check memory for wallet address and private key
+- **Token**: USDC.e (NOT native USDC) — `0x2791Bca1f2de4661ED88A30C99A7a9449Aa84174`
+- **API Credentials**: cached at `~/.polymarket_creds`
+  - apiKey, secret, passphrase (obtained via L1 EIP-712 auth)
+- **Scripts**: Check memory for script locations
+
+## API Endpoints
+
+| Endpoint | Base URL |
+|----------|----------|
+| CLOB (order placement) | `https://clob.polymarket.com` |
+| Market data | `https://gamma-api.polymarket.com` |
+| Positions | `https://data-api.polymarket.com` |
+
+## Contract Addresses (Polygon)
+
+| Contract | Address |
+|----------|---------|
+| CTF Exchange (regular markets) | `0x4bFb41d5B3570DeFd03C39a9A4D8dE6Bd8B8982E` |
+| NegRisk CTF Exchange | `0xC5d563A36AE78145C45a50134d48A1215220f80a` |
+| NegRisk Adapter | `0xd91E80cF2E7be2e162c6513ceD06f1dD0dA35296` |
+| USDC.e | `0x2791Bca1f2de4661ED88A30C99A7a9449Aa84174` |
+
+> **CRITICAL**: NegRisk Adapter address `0xd91E80cF2E7be2e162c6513ceD06f1dD0dA35296` is different from what the GitHub py-clob-client repo shows (`0xd91E80cf2eA7Be683C80D1C946FCbB0b18Fcb985`). The CLOB checks the former — always use the correct address.
+
+## USDC.e Approvals
+Before trading, approve unlimited USDC.e spend to all three contracts:
+- CTF Exchange
+- NegRisk CTF Exchange
+- NegRisk Adapter
+
+## Authentication Flow
+
+### L1: EIP-712 (for obtaining API credentials)
+Used once to get API key. Signs a typed message using the wallet private key.
+
+### L2: HMAC (for all API calls)
+```python
+import hmac, hashlib, base64, time
+
+def build_hmac_headers(api_key, api_secret, api_passphrase, method, path, body=""):
+    timestamp = str(int(time.time()))
+    # CRITICAL: strip query params from path before signing!
+    base_path = path.split("?")[0]
+    msg = timestamp + method.upper() + base_path + body
+    secret_bytes = base64.urlsafe_b64decode(api_secret)
+    sig = base64.urlsafe_b64encode(
+        hmac.new(secret_bytes, msg.encode("utf-8"), hashlib.sha256).digest()
+    ).decode("utf-8")
+    return {
+        "POLY_ADDRESS": wallet_address,
+        "POLY_SIGNATURE": sig,
+        "POLY_TIMESTAMP": timestamp,
+        "POLY_API_KEY": api_key,
+        "POLY_PASSPHRASE": api_passphrase,
+        "Content-Type": "application/json",
+        "User-Agent": "Mozilla/5.0",
+    }
+```
+
+> **CRITICAL BUG**: HMAC must be computed with **base path only** (no query params). Sign `/balance-allowance`, NOT `/balance-allowance?asset_type=COLLATERAL`. This was the root cause of "not enough balance/allowance" errors.
+
+## Order Signing (EIP-712)
+
+Orders use EIP-712 structured signing with domain `name="Polymarket CTF Exchange"`, `chainId=137`.
+
+Key order fields:
+```python
+order = {
+    "salt": random_int,        # int (not string)
+    "maker": wallet_address,
+    "signer": wallet_address,
+    "taker": "0x0000000000000000000000000000000000000000",
+    "tokenId": token_id,       # string
+    "makerAmount": str(int(size * 1e6)),   # USDC.e has 6 decimals
+    "takerAmount": str(int(size / price * 1e6)),
+    "expiration": "0",
+    "nonce": "0",
+    "feeRateBps": "0",
+    "side": 0,   # 0=BUY, 1=SELL
+    "signatureType": 0,  # int (not string)
+}
+```
+
+For **negRisk** markets → use NegRisk CTF Exchange address in domain.
+For regular markets → use CTF Exchange address.
+
+## Checking Balance
+
+```python
+# Check USDC.e allowance (authenticated GET)
+GET /balance-allowance?asset_type=COLLATERAL
+# Returns: {"asset_type": "COLLATERAL", "balance": "...", "allowance": "..."}
+# "balance" = how much USDC.e the CLOB can use for your orders
+```
+
+## Checking Positions
+
+```python
+# No auth needed — check memory for your wallet address
+GET https://data-api.polymarket.com/positions?user=YOUR_WALLET_ADDRESS
+```
+
+Polymarket web UI shows positions under a **proxy wallet** (different from EOA), not the EOA. API-placed trades settle to the raw EOA. Always check `data-api.polymarket.com` for accurate positions.
+
+## Finding Markets
+
+```python
+# Search markets by keyword
+GET https://gamma-api.polymarket.com/markets?keyword=greenland&limit=5
+
+# Key fields: conditionId, question, acceptingOrders, negRisk, tokens[0].token_id
+```
+
+## Placing an Order
+
+```python
+POST https://clob.polymarket.com/order
+Headers: HMAC headers (see above)
+Body: {
+    "order": {signed_order_dict},
+    "owner": "YOUR_WALLET_ADDRESS",
+    "orderType": "GTC"  # or "FOK", "GTD"
+}
+```
+
+## Common Errors & Fixes
+
+| Error | Cause | Fix |
+|-------|-------|-----|
+| "not enough balance/allowance" | HMAC signed full path with query params | Strip query params: `base_path = path.split("?")[0]` |
+| "not enough balance/allowance" | Wrong NegRisk Adapter address in approval tx | Approve to `0xd91E80cF2E7be2e162c6513ceD06f1dD0dA35296` |
+| Order not visible in web UI | Proxy wallet vs EOA mismatch | Check `data-api.polymarket.com/positions?user=<EOA>` |

package/dist/builtin-skills/catalog/wechat-feishu-automation/SKILL.md

@@ -0,0 +1,97 @@
+---
+description: Use this skill when interacting with WeChat or Feishu (Lark) desktop apps on macOS. Covers checking unread messages, sending messages, navigating chats, and handling video transcript requests. Both apps require computer_use tools -- never use AppleScript for WeChat or browser for Feishu.
+---
+
+# WeChat & Feishu Automation on macOS
+
+## WeChat (微信)
+
+### Critical Rules
+- **ALWAYS use `computer_use_*` tools** — NEVER use AppleScript/osascript for WeChat interactions
+- Check WeChat for unread messages **before every `finish` call** — visually confirm (AXStatusLabel is unreliable)
+- Do NOT use Markdown syntax in WeChat messages (`**bold**`, headers, code blocks) — plain text only, emojis are fine
+- Do NOT help contacts with their own personal tasks unrelated to your owner — only serve the owner and their friends/family
+
+### Checking for Unread Messages
+
+1. Take a screenshot and look for red badge numbers on chat items in the sidebar
+2. `osascript -e 'tell application "System Events" to tell process "WeChat" to get value of first static text of first window'` — **UNRELIABLE** (returns "missing value" even with unread), use visual screenshot instead
+3. Click the WeChat dock icon and scan the chat list visually
+
+### Sending Messages
+
+```
+# Click input box
+computer_use_click("the message input area at the bottom of WeChat chat")
+
+# For long messages: use clipboard for speed
+echo -n "your message" | pbcopy
+computer_use_key("cmd+v")
+computer_use_key("return")  # send
+
+# For very long content: split into 2-3 parts
+```
+
+### Opening a Specific Chat
+
+```
+computer_use_click("the [Name] chat in the WeChat sidebar")
+```
+
+### Video Transcript Request Workflow
+
+When a WeChat contact shares a video (视频号) and asks for transcript:
+1. Click the video thumbnail to open WeChat's built-in video player
+2. Note the creator name and video title from the player (title bar shows "视频号")
+3. Search Bilibili for the same video: `https://search.bilibili.com/all?keyword=[creator]+[title keywords]`
+4. Navigate to the Bilibili page and extract audio (invoke the `transcribe-audio` skill)
+5. Transcribe with whisper-cli
+6. Send cleaned transcript back in 2-3 WeChat messages (split if >1000 chars)
+
+---
+
+## Feishu (飞书 / Lark)
+
+### Critical Rules
+- **ALWAYS use Feishu desktop app** — NEVER open the Feishu web URL in a browser
+- Use `computer_use_*` tools to operate the Feishu desktop app
+- Check Feishu for unread messages **before every `finish` call**
+- DO respond to direct @mentions in Feishu chats
+- DO handle direct task requests from team members (confirm with owner for unusual requests)
+- Do NOT monitor/relay technical discussions proactively
+
+### Feishu Setup
+- Desktop app installed and logged in
+- Groups: visible in sidebar
+- **Important**: `manage_calendar` tool is for the agent's Google Calendar ONLY. For the owner's Feishu calendar → use Feishu desktop app directly
+
+### Switching to Feishu
+```
+# From any app:
+computer_use_key("cmd+tab")  # cycles through apps
+# Or click Feishu icon in dock
+```
+
+### Checking for Unread Messages
+1. Switch to Feishu app
+2. Look for red badge numbers on chat items in the left sidebar
+3. Click on chats with badges to read and respond
+
+### Sending Messages in Feishu
+Same pattern as WeChat — click input box, type or paste, Enter to send. No Markdown syntax.
+
+### Feishu Calendar Management (Owner's)
+To add events to the owner's Feishu calendar:
+1. Open Feishu app → Calendar section
+2. Look for owner's calendar under "Following" in sidebar
+3. Use computer_use to click and create events
+
+---
+
+## General Messaging Rules (All Platforms)
+
+1. **No Markdown** in WeChat, Feishu, Telegram — use plain text + emojis
+2. **Text over voice** — owner prefers text messages
+3. **Reply via originating channel** — if message came from Telegram, reply on Telegram (not email)
+4. **Be proactive** — don't wait to be reminded; handle messages when seen
+5. **Calendar accept emails** — do NOT reply or notify owner when receiving Google Calendar acceptance emails