zerodevblock-cyber · Oct 29, 2026 · Oct 28, 2026 · Oct 28, 2026 · Oct 28, 2026 · Oct 28, 2026
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -27,7 +27,29 @@ env:
   IMAGE_NAME: bankofai/docs
 
 jobs:
+  lint:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.23.4
+          cache: yarn
+
+      - name: Install dependencies
+        run: yarn install --frozen-lockfile --non-interactive
+
+      - name: Lint
+        run: yarn lint
+
   build-and-push:
+    needs: lint
     runs-on: ubuntu-latest
     permissions:
       contents: read

diff --git a/README.md b/README.md
@@ -30,12 +30,14 @@ Built on the Model Context Protocol (MCP) architecture, providing full on-chain
 - **Infrastructure Layer (MCP Server)**: The agent’s **“hands and eyes.”** Provides a unified interface to read blocks, manage wallets, execute transfers, and interact with any contract.
 - **Application Logic Layer (Skills)**: The agent’s **“brain.”** Uses structured instructions (`SKILL.md`) to guide AI in orchestrating underlying tools.
   - **sunswap**: Enables automated DEX swaps.
-  - **x402-payment**: Allows agents to detect payment requirements and execute payments automatically.
+  - **wallet-cli**: Guides agents through wallet-cli for TRON accounts, transfers, signing, and on-chain operations.
 
 ---
 
 ### 3. 🧩 OpenClaw Extension: Financial Assistant for AI Agents
 
+> For new setups, start with Skills and wallet-cli (see [Quick Start](#-quick-start)). OpenClaw remains documented for existing integrations.
+
 OpenClaw is a financial extension plugin developed by BANK OF AI for AI agents, aiming to become the “central bank” of the agent economy.
 
 - **Wallet Ownership**: Enables agents to truly control and manage on-chain assets.
@@ -68,9 +70,11 @@ OpenClaw is a financial extension plugin developed by BANK OF AI for AI agents,
 ### 🤖 For Agents/Buyers
 *Want your agent to have autonomous payment and on-chain interaction capabilities?*
 
-1. **Install OpenClaw**: Configure your environment and connect to the [mcp-server-tron](https://github.com/BofAI/mcp-server-tron).
-2. **Sync Skills**: Load `sunswap` or `x402-payment` from the [skills](https://github.com/BofAI/skills) repository.
-3. **Start Transacting**: Your agent can now automatically process payment requests from sellers and execute settlements.
+1. **Install Skills**: Add the Skills your agent needs, such as `wallet-cli` or `sunswap`, from the [skills](https://github.com/BofAI/skills) repository. See the [Skills quick start](https://docs.bankofai.io/McpServer-Skills/SKILLS/QuickStart/).
+2. **Set up wallet-cli**: Install wallet-cli and configure an account on your own machine. See the [wallet-cli quick start](https://docs.bankofai.io/wallet-cli/quickstart/). Never send a private key, mnemonic, or password to an AI.
+3. **Start Transacting**: Your agent can now pay x402 endpoints with `wallet-cli x402 pay` and run on-chain workflows through Skills.
+
+Already using OpenClaw or the TRON MCP Server? Their docs remain available: [OpenClaw](https://docs.bankofai.io/Openclaw-extension/Intro/) and [TRON MCP Server](https://docs.bankofai.io/McpServer-Skills/MCP/TRONMCPServer/Intro/).
 
 ---
 

diff --git a/changelog/8004.md b/changelog/8004.md
@@ -7,6 +7,44 @@ description: 'Release notes for the 8004 Protocol.'
 
 Release notes for the 8004 Protocol.
 
+<div className="changelog-entry">
+<div className="changelog-date">Oct 27, 2026</div>
+<div className="changelog-body">
+
+### Subgraph defaults, aliases and contract errors
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">Fix</span></div>
+
+- **Subgraph** — the Python SDK ships default subgraph URLs for Base Mainnet and Base Sepolia (TypeScript ships none; BSC has none in either), so the pages no longer say a subgraph always has to be deployed by you.
+- **Config and aliases** — Python-only `embeddings`; `feeLimit` defaults (120,000,000 SUN in TypeScript, 10,000,000 in Python); TypeScript's `bsc` / `bsc:mainnet` / `evm` aliases, all of which resolve to BSC Testnet unless `chainId: 56` is passed; the TypeScript IPFS prerequisite is an `ipfsUploader` callback, and Python RPC endpoints include Base.
+- **New: Common Contract Errors** — the registry revert reasons a reader hits through the documented flows (`Not authorized`, `reserved key`, `expired`, `invalid wallet sig`, `Self-feedback not allowed`, …) with their causes.
+
+👉 [Configure Agents](/8004/Usage/ConfigureAgents/) · [SDK Feature Matrix](/8004/sdk-features/)
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Oct 23, 2026</div>
+<div className="changelog-body">
+
+### Docs aligned with 8004 SDK 1.2.1
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">Fix</span></div>
+
+- **Release** — the feature matrix names `@bankofai/8004-sdk` 1.2.1 (the Python package is still not on PyPI). The TypeScript SDK needs Node.js 22.23.4+ (22.x), 24.22.1+ (24.x), or 26.12.1+ (26.x).
+- **Base networks** — Base Mainnet and Base Sepolia, with their official ERC-8004 registry addresses, are documented (all three registries in TypeScript; Identity and Reputation only in Python, via `eip155:8453` / `eip155:84532`). TRON agent IDs use the network's chain ID as prefix (for example `3448148188:<tokenId>` on Nile).
+- **Registration files** — since 1.2.0, `registerIPFS()` publishes the canonical registration-v1 keys (`services`, `x402Support`, `registrations`) and uses the TRC-8004 `type` on TRON. TypeScript `toJSON()` still returns the internal names, so map them before hosting the file yourself. This updates the Sep 9 note.
+- **Feature matrix** — adds the TypeScript registry read APIs, the new `register()` overloads, and per-agent approvals; reading an agent's owner is now supported in both languages. The TypeScript `updateRegistration` sample now type-checks under `strict`.
+- **On-chain metadata sample** — the TypeScript sample called `agent.register()`, which always mints a new agent; it now uses `updateOnChainMetadata()`. The Python sample now writes staged keys through `registerIPFS()`, since on a registered agent `register(uri)` and `updateRegistration()` only update the URI.
+- **BSC network names** — the network table listed BSC as `mainnet` / `testnet`, but a bare `mainnet` resolves to TRON and TypeScript rejects `testnet`. BSC is now given as `eip155:56` / `eip155:97`.
+- **Indexing and IPFS** — Python `refreshIndex()` / `refreshAgentIndex()` are marked as not working in 1.2.1 (the SDK builds its indexer without the Identity Registry), so without a subgraph Python `getAgent()` raises `Agent … not found in index` and TypeScript returns `undefined`. TypeScript reads `ipfs://` URIs through the public `ipfs.io` gateway; Python needs an IPFS client for that and for `giveFeedback(feedbackFile=...)`. The TRON chain-ID agent IDs date from 1.1.2, not 1.2.0.
+
+👉 [SDK Feature Matrix](/8004/sdk-features/) · [Supported Networks](/8004/SupportedNetworks/) · [Contracts](/8004/contract/)
+
+</div>
+</div>
+
 <div className="changelog-entry">
 <div className="changelog-date">Sep 9, 2026</div>
 <div className="changelog-body">

diff --git a/changelog/agent-wallet.md b/changelog/agent-wallet.md
@@ -7,6 +7,61 @@ description: 'Release notes for Agent Wallet.'
 
 Release notes for Agent Wallet.
 
+<div className="changelog-entry">
+<div className="changelog-date">Oct 27, 2026</div>
+<div className="changelog-body">
+
+### Error codes, Privy automation and config schema
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">Fix</span></div>
+
+- **SDK Guide** — lists the `code` values of `WalletCliExecutionError` / `WalletCliUsageError` (`capability_missing`, `network_mismatch`, `timeout`, …) and that wallet-cli's own failure codes pass through; a `wallet_cli` chainId mismatch throws `SigningError`; `signAndBroadcast()` returns `{ txId, stage: 'timeout' }` when a broadcast times out or the `wait` deadline passes, and throws `WalletCliSubmittedTransactionError` only when a status query fails after broadcast; the `/advanced` export list is complete.
+- **CLI Reference** — `privy` automation needs both `--app-id` and `--app-secret-exec`, otherwise a reuse or secret prompt exits 1; `-g/--generate` is parsed but ignored; the `wallets_config.json` layout is described.
+
+👉 [SDK Guide](/Agent-Wallet/Developer/SDK-Guide/) · [CLI Reference](/Agent-Wallet/Developer/CLI-Reference/)
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Oct 21, 2026</div>
+<div className="changelog-body">
+
+### Docs rewritten for Agent Wallet 3.0
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">Breaking</span></div>
+
+- **Rewritten for 3.0.0** — every page now follows `@bankofai/agent-wallet` 3.0.0. The wallet types are `wallet_cli` (recommended), `privy` and `raw_secret`. `local_secure`, the master password, `AGENT_WALLET_PASSWORD`, `runtime_secrets.json`, and the `init`, `change-password` and `sign msg` commands no longer exist. See [Upgrading from 2.x](/Agent-Wallet/FAQ/#upgrade-from-2x).
+- **Credentials** — wallet-cli and Privy secrets should come from exec scripts (`--cli-password-exec`, `--app-secret-exec`; a direct `--app-secret` value is also accepted but stored in plaintext); 3.x has no password environment variable. The env fallback reads only `AGENT_WALLET_PRIVATE_KEY` / `AGENT_WALLET_MNEMONIC`; the 2.x aliases such as `TRON_PRIVATE_KEY` are no longer read.
+- **Exact network IDs** — `-n` / `network` accept only canonical CAIP-2 strings such as `tron:728126428`, `tron:3448148188` or `eip155:56`. Aliases like `tron:nile` and hex TRON IDs are rejected.
+- **Signed transactions** — `signTransaction()` returns a `SignedTransactionArtifact` with a `family` field instead of a string, and the cookbook branches on it. `signMessage` was removed.
+- **TypeScript only** — the Python tabs were removed. The PyPI package `bankofai-agent-wallet` stopped at 2.4.0 and follows the 2.x model.
+- **Reference fixes** — `reset` removes only `wallets_config.json`; the error list now includes the `ExternalSigner*` and `WalletCli*` classes; the `/advanced` and `/integrations/wallet-cli` entry points and `AGENT_WALLET_WALLET_CLI_PATH` are documented.
+
+👉 [Quick Start](/Agent-Wallet/QuickStart/) · [CLI Reference](/Agent-Wallet/Developer/CLI-Reference/) · [SDK Guide](/Agent-Wallet/Developer/SDK-Guide/)
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Sep 10, 2026</div>
+<div className="changelog-body">
+
+### Agent Wallet v3.0.0
+
+<div className="changelog-tags"><span className="changelog-tag">New Release</span><span className="changelog-tag">Breaking</span></div>
+
+- **Wallet types** — new `wallet_cli` type delegates TRON and EVM transaction and typed-data signing to a local wallet-cli account (compatible range `>=4.13.0 <5.0.0`). `local_secure`, the master password, `AGENT_WALLET_PASSWORD` and `runtime_secrets.json` are removed; existing `local_secure` wallets are not converted.
+- **Signing API** — `signTransaction()` returns a `SignedTransactionArtifact` with a `family` field (`rawTransaction` for EVM, `transaction` for TRON) instead of a string. `signRaw()`, `signMessage()` and the CLI `sign msg` command are removed; only transaction and typed-data signing remain.
+- **Package surface** — low-level adapters, clients and config resolvers move to `@bankofai/agent-wallet/advanced`; wallet-cli helpers are under `@bankofai/agent-wallet/integrations/wallet-cli`. `ConfigWalletProvider` is now `new ConfigWalletProvider(dir, options)`.
+- **Credentials and environment** — Privy and wallet-cli secrets accept `{ "exec": "/absolute/script" }` references (`--app-secret-exec`, `--cli-password-exec`). The 2.x aliases `TRON_PRIVATE_KEY`, `TRON_MNEMONIC` and `TRON_ACCOUNT_INDEX` are no longer read; use `AGENT_WALLET_PRIVATE_KEY`, `AGENT_WALLET_MNEMONIC` and `AGENT_WALLET_MNEMONIC_ACCOUNT_INDEX`.
+- Published to npm on September 10, 2026. The Python package stays at 2.4.0 on PyPI. Upgrade steps: [Upgrading from 2.x](/Agent-Wallet/FAQ/#upgrade-from-2x).
+
+👉 [Introduction](/Agent-Wallet/Intro/) · [CLI Reference](/Agent-Wallet/Developer/CLI-Reference/) · [SDK Guide](/Agent-Wallet/Developer/SDK-Guide/)
+
+</div>
+</div>
+
 <div className="changelog-entry">
 <div className="changelog-date">Sep 9, 2026</div>
 <div className="changelog-body">

diff --git a/changelog/index.md b/changelog/index.md
@@ -7,6 +7,110 @@ description: 'Product updates and announcements for BANK OF AI — all products,
 
 Product updates and announcements for BANK OF AI.
 
+<div className="changelog-entry">
+<div className="changelog-date">Oct 27, 2026</div>
+<div className="changelog-body">
+
+### Reverse audit: code features the docs had not covered
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">Fix</span></div>
+
+- Facilitator error codes, 8004 subgraph defaults and contract revert reasons, Agent Wallet error codes and config schema, wallet-cli error codes and recharge rules, per-Skill setup steps and credentials, OpenClaw installer details, TRON MCP package and HTTP details. [x402](./x402/) · [8004](./8004/) · [Agent Wallet](./agent-wallet/) · [SKILLS](./skills/) · [OpenClaw](./openclaw-extension/) · [MCP](./mcp-server/)
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Oct 25, 2026</div>
+<div className="changelog-body">
+
+### x402 docs aligned with SDK 2.1.0 and facilitator v2.2.2
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">x402</span><span className="changelog-tag">Fix</span></div>
+
+- The 2.1.0 package set on official `@x402/core` 2.28.0 (with `@bankofai/x402-tron-extensions` for TRON resource sponsoring), decimal TRON IDs, the official facilitator's 10-per-minute anonymous limit on both `/verify` and `/settle`, Nile resource sponsoring, and the remaining API Catalog CI rules. [Details](./x402/)
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Oct 23, 2026</div>
+<div className="changelog-body">
+
+### Node.js requirements updated across products
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">Fix</span></div>
+
+- Install pages now state the October 2026 security releases required by each project's source (published packages that still declare an older floor — agent-wallet `3.0.0` with `>=18`, TRON MCP Server `1.1.7` with `>=20` — are noted on their pages): Agent Wallet, wallet-cli, SKILLS, and OpenClaw Extension need Node.js 22.23.4+ (22.x), 24.22.1+ (24.x), or 26.12.1+; the 8004 TypeScript SDK the same but only up to 26.x; TRON MCP Server needs 22.23.4+ or 24.22.1+ (source, `v1.1.8`; Node.js 26 is not supported; npm `1.1.7` declares `>=20`); the x402 SDK needs 24.22.1+. Both OpenClaw installers now check the full version before installing anything.
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Oct 23, 2026</div>
+<div className="changelog-body">
+
+### 8004 docs aligned with SDK 1.2.1
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">8004</span><span className="changelog-tag">Fix</span></div>
+
+- Base Mainnet and Base Sepolia, canonical registration-v1 keys from `registerIPFS()`, the new TypeScript registry read APIs, and the 1.2.1 Node.js requirement. [Details](./8004/)
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Oct 23, 2026</div>
+<div className="changelog-body">
+
+### OpenClaw Extension and TRON MCP Server docs matched to the code
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">Fix</span></div>
+
+- OpenClaw: the installer still pins Skills `v1.5.15`, agent-wallet 2.3.1 and `chat.ainft.com` — the Sep 9 installer changes never shipped, and the docs now describe the real installer. [Details](./openclaw-extension/) TRON MCP Server: mainnet RPC fallback without an API key, tool and prompt details, and real wallet error texts. [Details](./mcp-server/)
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Oct 22, 2026</div>
+<div className="changelog-body">
+
+### SKILLS 3.0.1 — Node.js security baseline
+
+<div className="changelog-tags"><span className="changelog-tag">New Release</span><span className="changelog-tag">SKILLS</span></div>
+
+- The bundled Node.js Skills and the wallet-cli installer require Node.js `^22.23.4 || ^24.22.1 || >=26.12.1`. The `wallet-cli` Skill still pins `@tron-walletcli/wallet-cli@4.14.0`. [Details](./skills/)
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Oct 21, 2026</div>
+<div className="changelog-body">
+
+### Agent Wallet docs rewritten for 3.0
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">Agent Wallet</span><span className="changelog-tag">Breaking</span></div>
+
+- The Agent Wallet pages now follow 3.0.0: `wallet_cli`, `privy` and `raw_secret` wallets, exec-script credentials and exact CAIP-2 network IDs. `local_secure`, `AGENT_WALLET_PASSWORD` and the Python SDK are no longer covered. [Details](./agent-wallet/)
+
+</div>
+</div>
+
+<div className="changelog-entry">
+<div className="changelog-date">Oct 21, 2026</div>
+<div className="changelog-body">
+
+### SKILLS install command pinned to main
+
+<div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">SKILLS</span><span className="changelog-tag">Fix</span></div>
+
+- Install with `npx skills add https://github.com/BofAI/skills/tree/main -g` so the Skills match the documented wallet-cli version. [Details](./skills/)
+
+</div>
+</div>
+
 <div className="changelog-entry">
 <div className="changelog-date">Sep 28, 2026</div>
 <div className="changelog-body">
@@ -33,6 +137,19 @@ Product updates and announcements for BANK OF AI.
 </div>
 </div>
 
+<div className="changelog-entry">
+<div className="changelog-date">Sep 10, 2026</div>
+<div className="changelog-body">
+
+### Agent Wallet v3.0.0
+
+<div className="changelog-tags"><span className="changelog-tag">New Release</span><span className="changelog-tag">Agent Wallet</span><span className="changelog-tag">Breaking</span></div>
+
+- New `wallet_cli` wallet type; `local_secure`, the master password and `AGENT_WALLET_PASSWORD` removed; `signTransaction()` returns a typed artifact; `signRaw` / `signMessage` removed; low-level APIs move to `/advanced`. [Details](./agent-wallet/)
+
+</div>
+</div>
+
 <div className="changelog-entry">
 <div className="changelog-date">Sep 9, 2026</div>
 <div className="changelog-body">
@@ -41,7 +158,7 @@ Product updates and announcements for BANK OF AI.
 
 <div className="changelog-tags"><span className="changelog-tag">Docs</span><span className="changelog-tag">Fix</span><span className="changelog-tag">8004</span><span className="changelog-tag">Openclaw</span></div>
 
-- The 8004 guides are now internally consistent: one consistent `setWallet` call shape per SDK instead of four different ones, with the rules for how the new wallet's signature is supplied, no legacy TRON `chainId`, the network names the SDK actually accepts, and private keys read from environment variables. The Openclaw installer no longer pins a superseded skills tag and writes the correct BANK OF AI host. [8004 details](./8004/) · [Openclaw details](./openclaw-extension/)
+- The 8004 guides are now internally consistent: one consistent `setWallet` call shape per SDK instead of four different ones, with the rules for how the new wallet's signature is supplied, no legacy TRON `chainId`, the network names the SDK actually accepts, and private keys read from environment variables. The Openclaw installer no longer pins a superseded skills tag and writes the correct BANK OF AI host. *(Corrected on Oct 23: these installer changes never shipped.)* [8004 details](./8004/) · [Openclaw details](./openclaw-extension/)
 
 </div>
 </div>