OmniClaw CLI Skill
Trigger
Use omniclaw-cli only when the task is directly about one of these actions:
- - pay for a paid URL that returns INLINECODE1
- transfer USDC to an address
- inspect wallet, Gateway, or Circle balances
- inspect transaction history
- expose a paid seller endpoint with INLINECODE2
Do not use this skill for:
- - editing policy files
- creating wallets
- provisioning secrets
- changing allowlists, limits, or owner approvals outside the exposed CLI commands
- administering the Financial Policy Engine process itself
Core Model
OmniClaw is not just a wallet wrapper.
It is the economic execution and control layer that combines:
- - zero-trust execution through the CLI
- owner-defined financial policy through the Financial Policy Engine
- settlement rails such as direct transfers, x402, CCTP, and Circle Gateway nanopayments
This skill is specifically about the CLI execution surface.
The same CLI has two economic roles:
- - buyer role: INLINECODE3
- seller role: INLINECODE4
The agent does not control the private key.
The Financial Policy Engine enforces policy and signs allowed actions.
Inputs The Agent Should Expect
The runtime should normally provide either:
- 1. environment-driven execution
- - INLINECODE5
- INLINECODE6
- optionally
OMNICLAW_OWNER_TOKEN if this run is allowed to approve confirmations
- 2. preconfigured CLI state
- -
omniclaw-cli configure was already run before the turn
If neither is true, stop and ask the owner for:
- - Financial Policy Engine URL
- agent token
- wallet alias
Do not invent or search for them yourself.
Safe Default Workflow
For any new spend
- 1. Run
omniclaw-cli status if connectivity or health is uncertain. - Run
omniclaw-cli balance-detail if Gateway balance matters. - Run
omniclaw-cli can-pay --recipient ... before paying a new recipient. - Use
--idempotency-key for job-based payments. - For direct-address payments where budget/guards matter, use
simulate first.
For x402 URLs
- 1. Use
omniclaw-cli pay --recipient <url>. - Add
--method, --body, and --header when the paid endpoint expects a non-GET request. - Add
--output if the paid response should be saved.
For direct address transfers
- 1. Use
omniclaw-cli pay --recipient <0xaddress> --amount <usdc>. - Always include
--purpose.
For seller tasks
- 1. Inspect current state with
balance-detail. - Start the paid endpoint with
omniclaw-cli serve. - Remember that
serve binds to 0.0.0.0 even if the banner prints localhost.
Approval Handling
If pay returns approval-required output, for example:
- - INLINECODE27
- INLINECODE28
Then:
- - do not retry blindly
- do not invent a workaround
- if the run explicitly has owner authority, use INLINECODE29
- otherwise stop and notify the owner
Stop Conditions
Stop and notify the owner if any of these happen:
- - token or Financial Policy Engine URL is missing
- INLINECODE30 says the recipient is blocked
- INLINECODE31 returns a policy or guard rejection
- available or Gateway balance is insufficient
- the exact command or flag is unclear
Command Reference
For exact command schemas, flags, and live help output, read:
Do not guess flags from memory when a reference is available.
OmniClaw CLI 技能
触发条件
仅在任务直接涉及以下操作之一时使用 omniclaw-cli:
- - 为返回 402 Payment Required 的付费URL支付
- 向某个地址转账USDC
- 检查钱包、Gateway或Circle余额
- 检查交易历史
- 使用 serve 暴露付费卖家端点
请勿将此技能用于:
- - 编辑策略文件
- 创建钱包
- 配置密钥
- 修改允许列表、限额或所有者批准(超出已暴露的CLI命令范围)
- 管理金融策略引擎进程本身
核心模型
OmniClaw 不仅仅是钱包的封装器。
它是结合了以下功能的经济执行与控制层:
- - 通过CLI实现零信任执行
- 通过金融策略引擎实现所有者定义的金融策略
- 结算轨道,如直接转账、x402、CCTP和Circle Gateway纳米支付
此技能专门针对CLI执行界面。
同一CLI具有两种经济角色:
- - 买家角色:omniclaw-cli pay
- 卖家角色:omniclaw-cli serve
代理不控制私钥。
金融策略引擎执行策略并签署允许的操作。
代理应预期的输入
运行时通常应提供以下之一:
- 1. 环境驱动的执行
- OMNICLAW
SERVERURL
- OMNICLAW_TOKEN
- 可选 OMNICLAW
OWNERTOKEN(如果本次运行允许批准确认)
- 2. 预配置的CLI状态
- 在轮次开始前已运行 omniclaw-cli configure
如果两者都不满足,请停止并向所有者询问:
不要自行编造或搜索这些信息。
安全默认工作流程
对于任何新支出
- 1. 如果连接性或健康状态不确定,运行 omniclaw-cli status。
- 如果Gateway余额重要,运行 omniclaw-cli balance-detail。
- 在向新收款人付款前,运行 omniclaw-cli can-pay --recipient ...。
- 对于基于任务的付款,使用 --idempotency-key。
- 对于涉及预算/防护措施的直接地址付款,先使用 simulate。
对于x402 URL
- 1. 使用 omniclaw-cli pay --recipient 。
- 当付费端点期望非GET请求时,添加 --method、--body 和 --header。
- 如果需要保存付费响应,添加 --output。
对于直接地址转账
- 1. 使用 omniclaw-cli pay --recipient <0xaddress> --amount 。
- 始终包含 --purpose。
对于卖家任务
- 1. 使用 balance-detail 检查当前状态。
- 使用 omniclaw-cli serve 启动付费端点。
- 记住 serve 绑定到 0.0.0.0,即使横幅打印的是 localhost。
批准处理
如果 pay 返回需要批准的输出,例如:
- - requiresconfirmation: true
- confirmationid: ...
那么:
- - 不要盲目重试
- 不要编造变通方法
- 如果运行明确拥有所有者权限,使用 omniclaw-cli confirmations approve --id
- 否则停止并通知所有者
停止条件
如果发生以下任何情况,请停止并通知所有者:
- - 令牌或金融策略引擎URL缺失
- can-pay 表示收款人被阻止
- pay 返回策略或防护措施拒绝
- 可用余额或Gateway余额不足
- 确切的命令或标志不明确
命令参考
有关确切的命令模式、标志和实时帮助输出,请阅读:
- - references/cli-reference.md
当有参考可用时,不要凭记忆猜测标志。