@agentlayer.tech/wallet 0.1.0

package/.openclaw/extensions/agent-wallet/openclaw.plugin.json

@@ -0,0 +1,184 @@
+{
+  "id": "agent-wallet",
+  "name": "Agent Wallet",
+  "description": "Official OpenClaw plugin bridge for the agent-wallet backends, including Solana, local BTC, and local EVM.",
+  "version": "0.1.0",
+  "skills": ["skills/wallet-operator"],
+  "configSchema": {
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+      "userId": {
+        "type": "string",
+        "description": "Stable wallet owner identifier for this OpenClaw agent install."
+      },
+      "backend": {
+        "type": "string",
+        "description": "Wallet backend identifier. Supported values: solana_local, wdk_btc_local, wdk_evm_local."
+      },
+      "network": {
+        "type": "string",
+        "description": "Backend network selector. Solana uses mainnet/devnet/testnet. BTC uses bitcoin/testnet/regtest. EVM uses ethereum/sepolia/base/base-sepolia."
+      },
+      "wdkBtcServiceUrl": {
+        "type": "string",
+        "description": "Base URL for the localhost-only wdk-btc-wallet HTTP service when backend=wdk_btc_local."
+      },
+      "wdkBtcWalletId": {
+        "type": "string",
+        "description": "Optional direct walletId override from the local wdk-btc-wallet vault. If omitted, agent-wallet will look for a user-bound BTC wallet under ~/.openclaw/users/<user>/wallets/."
+      },
+      "wdkBtcAccountIndex": {
+        "type": "integer",
+        "description": "Optional BTC account index to expose to the agent. Defaults to 0."
+      },
+      "wdkEvmServiceUrl": {
+        "type": "string",
+        "description": "Base URL for the localhost-only wdk-evm-wallet HTTP service when backend=wdk_evm_local."
+      },
+      "wdkEvmWalletId": {
+        "type": "string",
+        "description": "Optional direct walletId override from the local wdk-evm-wallet vault. If omitted, agent-wallet will look for a user-bound EVM wallet under ~/.openclaw/users/<user>/wallets/."
+      },
+      "wdkEvmAccountIndex": {
+        "type": "integer",
+        "description": "Optional EVM account index to expose to the agent. Defaults to 0."
+      },
+      "rpcUrl": {
+        "type": "string",
+        "description": "Optional local fallback Solana RPC URL. Deployment env SOLANA_RPC_URL wins if set."
+      },
+      "rpcUrls": {
+        "type": "array",
+        "items": { "type": "string" },
+        "description": "Optional local fallback ordered list of Solana RPC URLs. Deployment env SOLANA_RPC_URLS wins if set."
+      },
+      "rpcProviderMode": {
+        "type": "string",
+        "description": "RPC mode: auto, user_direct, or shared_proxy. In auto mode, user RPC keys/URLs win; otherwise the shared provider gateway is used when configured."
+      },
+      "providerGatewayUrl": {
+        "type": "string",
+        "description": "Optional override for the shared provider gateway base URL. If omitted, the hosted OpenClaw gateway default is used for onboarding-friendly mainnet RPC and Bags launch/fees flows."
+      },
+      "providerGatewayRpcProvider": {
+        "type": "string",
+        "description": "Optional shared RPC upstream selection for the provider gateway: auto, shared, helius, or alchemy."
+      },
+      "swapProvider": {
+        "type": "string",
+        "description": "Optional Solana swap routing preference: auto or jupiter. Bags launch and fee flows still use the provider gateway separately, but token swaps stay Jupiter-first."
+      },
+      "heliusApiKey": {
+        "type": "string",
+        "description": "Optional user-owned Helius API key. If set, direct user RPC wins over shared proxy mode.",
+        "uiHints": {
+          "sensitive": true
+        }
+      },
+      "alchemyApiKey": {
+        "type": "string",
+        "description": "Optional user-owned Alchemy API key. If set, direct user RPC wins over shared proxy mode.",
+        "uiHints": {
+          "sensitive": true
+        }
+      },
+      "publicKey": {
+        "type": "string",
+        "description": "Read-only wallet public key."
+      },
+      "privateKey": {
+        "type": "string",
+        "description": "Deprecated insecure config path. Inject signing key material via environment variables or encrypted per-user wallets instead.",
+        "uiHints": {
+          "sensitive": true
+        }
+      },
+      "keypairPath": {
+        "type": "string",
+        "description": "Path to a Solana CLI JSON keypair file or encrypted wallet file."
+      },
+      "autoCreateWallet": {
+        "type": "boolean",
+        "description": "Create a wallet automatically on first use if none exists."
+      },
+      "signOnly": {
+        "type": "boolean",
+        "description": "If true, signing is allowed but broadcast should not happen automatically."
+      },
+      "masterKey": {
+        "type": "string",
+        "description": "Deprecated insecure config path. Inject the wallet master secret via environment or a secret manager instead.",
+        "uiHints": {
+          "sensitive": true
+        }
+      },
+      "approvalSecret": {
+        "type": "string",
+        "description": "Deprecated insecure config path. Inject the approval secret via environment or a secret manager instead.",
+        "uiHints": {
+          "sensitive": true
+        }
+      },
+      "encryptUserWallets": {
+        "type": "boolean",
+        "description": "If true, per-user wallets are encrypted at rest."
+      },
+      "migratePlaintextUserWallets": {
+        "type": "boolean",
+        "description": "If true, legacy plaintext wallets are migrated in place after successful load."
+      },
+      "refuseMainnetWalletRecreation": {
+        "type": "boolean",
+        "description": "If true, refuse to silently create a new mainnet wallet when a pinned address already exists."
+      },
+      "openclawHome": {
+        "type": "string",
+        "description": "Optional OpenClaw home directory for wallet state."
+      },
+      "pythonBin": {
+        "type": "string",
+        "description": "Python interpreter used to invoke the agent-wallet bridge CLI."
+      },
+      "packageRoot": {
+        "type": "string",
+        "description": "Absolute path to the local agent-wallet Python package root."
+      },
+      "jupiterBaseUrl": {
+        "type": "string",
+        "description": "Optional Jupiter Swap API base URL."
+      },
+      "jupiterUltraBaseUrl": {
+        "type": "string",
+        "description": "Optional Jupiter Ultra API base URL."
+      },
+      "jupiterPriceBaseUrl": {
+        "type": "string",
+        "description": "Optional Jupiter Price API base URL."
+      },
+      "jupiterPortfolioBaseUrl": {
+        "type": "string",
+        "description": "Optional Jupiter Portfolio API base URL."
+      },
+      "jupiterLendBaseUrl": {
+        "type": "string",
+        "description": "Optional Jupiter Lend API base URL."
+      },
+      "jupiterApiKey": {
+        "type": "string",
+        "description": "Optional Jupiter API key.",
+        "uiHints": {
+          "sensitive": true
+        }
+      },
+      "kaminoBaseUrl": {
+        "type": "string",
+        "description": "Optional Kamino REST API base URL."
+      },
+      "kaminoProgramId": {
+        "type": "string",
+        "description": "Optional Kamino lending program id."
+      }
+    }
+  }
+}

package/.openclaw/extensions/agent-wallet/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "agent-wallet",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "openclaw": {
+    "extensions": [
+      "./index.ts"
+    ]
+  }
+}

package/.openclaw/extensions/agent-wallet/skills/wallet-operator/SKILL.md

@@ -0,0 +1,20 @@
+# Wallet Operator
+
+Use wallet tools only when the user explicitly asks for wallet information, signing, transfers, swaps, or lending/yield actions.
+
+Safety rules:
+
+- Prefer read-only tools first.
+- Jupiter Portfolio tools are temporarily disabled. Do not suggest or call them until they are re-enabled.
+- Use Jupiter Earn read tools before Jupiter Earn writes when the user needs lending/yield context.
+- Use Kamino market/reserve reads before Kamino writes when the user needs lending context.
+- Use Aave account reads before Aave writes when the user needs EVM lending context.
+- For transfers, native staking, swaps, Aave writes, Jupiter Earn writes, and Kamino writes, use `preview` before `prepare` or `execute`.
+- Use `prepare` only when the user clearly intends to produce an execution plan.
+- Use `execute` only after the host issues an `approval_token` bound to the exact previewed operation.
+- On `mainnet`, require an approval token that includes explicit mainnet confirmation before any execution.
+- Before any `mainnet` execute, restate the network, operation type, asset, amount, and destination, validator, or stake account.
+- If a preview or prepare result includes `confirmation_summary` or `mainnet_warning`, surface that summary before asking for confirmation.
+- Never claim funds moved unless the tool returns a confirmed transaction result.
+- If the wallet is configured as `signOnly`, describe `prepare` output as an execution plan only, not a signed transaction.
+- Use native staking read tools first when the user asks about validators, stake accounts, deactivation, or withdrawals.

package/CHANGELOG.md

@@ -0,0 +1,42 @@
+# Changelog
+
+## Unreleased
+
+- Replaced the repo license with `PolyForm Small Business 1.0.0`.
+- Clarified in `README.md` that individuals can audit, fork, run, and modify
+  the code for themselves, and that company use follows the PolyForm small
+  business limits.
+- Removed direct Mayan swap routing from `agent-wallet`, `.openclaw`, and
+  `wdk-evm-wallet`; cross-chain swaps now stay on LI.FI/Jupiter-backed paths
+  with Mayan denied as a LI.FI bridge.
+
+## v0.1.0-beta.2 - 2026-03-31
+
+Second public beta release that expands the stack beyond the initial MCP, wallet, and AgentLayer bridge scope.
+
+### Added
+
+- `wdk-btc-wallet/`: separate BTC-only wallet service built on top of Tether WDK for local Bitcoin wallet operations.
+- `provider-gateway/`: non-custodial shared provider access layer for hosted Solana RPC defaults, Bags launch and fees, and Jupiter Earn.
+- `docs/`: Starlight-based documentation app for AgentLayer onboarding, architecture, and capability docs.
+
+### Notes
+
+- `mcp-server/`, `agent-wallet/`, and `.openclaw/extensions/agent-wallet/` remain part of the beta stack from `v0.1.0-beta.1`.
+- This is still a beta release intended for testing, onboarding, and early integration work.
+- Mainnet use should remain explicit, operator-approved, and cautious.
+
+## v0.1.0-beta.1 - 2026-03-21
+
+First public beta centered on the repo's three primary deliverables: `mcp-server`, `agent-wallet`, and the AgentLayer bridge in `.openclaw/extensions/agent-wallet`.
+
+### Added
+
+- `mcp-server/`: finance and crypto MCP server with market, DeFi, on-chain, and agent identity tooling.
+- `agent-wallet/`: Python wallet backend for local Solana wallet operations with guarded read, preview, prepare, and execute flows.
+- `.openclaw/extensions/agent-wallet/`: repo-shipped AgentLayer extension bridge that forwards tool execution into the Python wallet backend.
+
+### Notes
+
+- This is a beta release intended for testing and early integration work.
+- Mainnet use should remain explicit, operator-approved, and cautious.

package/LICENSE

@@ -0,0 +1,104 @@
+PolyForm Small Business License 1.0.0
+
+https://polyformproject.org/licenses/small-business/1.0.0
+
+Required Notice: Copyright (c) 2026 lopushok9
+
+Acceptance
+
+In order to get any license under these terms, you must agree to them as both
+strict obligations and conditions to all your licenses.
+
+Copyright License
+
+The licensor grants you a copyright license for the software to do everything
+you might do with the software that would otherwise infringe the licensor's
+copyright in it for any permitted purpose. However, you may only distribute
+the software according to Distribution License and make changes or new works
+based on the software according to Changes and New Works License.
+
+Distribution License
+
+The licensor grants you an additional copyright license to distribute copies of
+the software. Your license to distribute covers distributing the software with
+changes and new works permitted by Changes and New Works License.
+
+Notices
+
+You must ensure that anyone who gets a copy of any part of the software from
+you also gets a copy of these terms or the URL for them above, as well as
+copies of any plain-text lines beginning with "Required Notice:" that the
+licensor provided with the software.
+
+Changes and New Works License
+
+The licensor grants you an additional copyright license to make changes and new
+works based on the software for any permitted purpose.
+
+Patent License
+
+The licensor grants you a patent license for the software that covers patent
+claims the licensor can license, or becomes able to license, that you would
+infringe by using the software.
+
+Fair Use
+
+You may have "fair use" rights for the software under the law. These terms do
+not limit them.
+
+Small Business
+
+Use of the software for the benefit of your company is use for a permitted
+purpose if your company has fewer than 100 total individuals working as
+employees and independent contractors, and less than 1,000,000 USD (2019)
+total revenue in the prior tax year. Adjust this revenue threshold for
+inflation according to the United States Bureau of Labor Statistics' consumer
+price index for all urban consumers, U.S. city average, for all items, not
+seasonally adjusted, with 1982-1984=100 reference base.
+
+No Other Rights
+
+These terms do not allow you to sublicense or transfer any of your licenses to
+anyone else, or prevent the licensor from granting licenses to anyone else.
+These terms do not imply any other licenses.
+
+Patent Defense
+
+If you make any written claim that the software infringes or contributes to
+infringement of any patent, your patent license for the software granted under
+these terms ends immediately. If your company makes such a claim, your patent
+license ends immediately for work on behalf of your company.
+
+Violations
+
+The first time you are notified in writing that you have violated any of these
+terms, or done anything with the software not covered by your licenses, your
+licenses can nonetheless continue if you come into full compliance with these
+terms, and take practical steps to correct past violations, within 32 days of
+receiving notice. Otherwise, all your licenses end immediately.
+
+No Liability
+
+As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.
+
+Definitions
+
+The licensor is the individual or entity offering these terms, and the
+software is the software the licensor makes available under these terms.
+
+You refers to the individual or entity agreeing to these terms.
+
+Your company is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that organization.
+Control means ownership of substantially all the assets of an entity, or the
+power to direct its management and policies by vote, contract, or otherwise.
+Control can be direct or indirect.
+
+Your licenses are all the licenses granted to you for the software under these
+terms.
+
+Use means anything you do with the software requiring one of your licenses.