@agentlayer.tech/wallet 0.1.14 → 0.1.16

package/.openclaw/extensions/pay-bridge/dist/index.js

@@ -0,0 +1,196 @@
+import {
+  executePayApiRequest,
+  getPayServiceEndpoints,
+  getPayStatus,
+  getPayWalletInfo,
+  searchPayServices,
+} from "./core.mjs";
+
+const PLUGIN_ID = "pay-bridge";
+
+function asContent(data) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(data, null, 2),
+      },
+    ],
+  };
+}
+
+function resolvePluginConfig(api) {
+  const globalConfig = api?.config ?? {};
+  const pluginEntry = globalConfig?.plugins?.entries?.[PLUGIN_ID];
+  return pluginEntry?.config ?? globalConfig?.config ?? {};
+}
+
+function registerTool(api, definition) {
+  api.registerTool({
+    name: definition.name,
+    description: definition.description,
+    parameters: definition.parameters,
+    returns: {
+      type: "object",
+      additionalProperties: true,
+    },
+    async execute(_id, params = {}) {
+      const config = resolvePluginConfig(api);
+      let result;
+      if (definition.name === "pay_status") {
+        result = await getPayStatus(config, { cwd: process.cwd() });
+      } else if (definition.name === "pay_wallet_info") {
+        result = await getPayWalletInfo(config, { cwd: process.cwd() });
+      } else if (definition.name === "pay_search_services") {
+        result = await searchPayServices(config, params, { cwd: process.cwd() });
+      } else if (definition.name === "pay_get_service_endpoints") {
+        result = await getPayServiceEndpoints(config, params, { cwd: process.cwd() });
+      } else if (definition.name === "pay_api_request") {
+        result = await executePayApiRequest(config, params, { cwd: process.cwd() });
+      } else {
+        throw new Error(`Unsupported pay-bridge tool: ${definition.name}`);
+      }
+      return asContent(result);
+    },
+  });
+}
+
+const toolDefinitions = [
+  {
+    name: "pay_status",
+    description:
+      "Check whether the local pay.sh CLI is installed and whether a pay wallet/account is configured. Use this before any paid API workflow.",
+    parameters: {
+      type: "object",
+      properties: {},
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "pay_wallet_info",
+    description:
+      "Show pay wallet/account status. This wallet is separate from the AgentLayer execution wallet and is only for pay.sh API payments.",
+    parameters: {
+      type: "object",
+      properties: {},
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "pay_search_services",
+    description:
+      "Search the pay.sh skills catalog for paid APIs. Prefer this instead of guessing URLs manually.",
+    parameters: {
+      type: "object",
+      properties: {
+        query: {
+          type: "string",
+          description: "Search text for service names, descriptions, or endpoint paths.",
+        },
+        category: {
+          type: "string",
+          description: "Optional category filter such as ai_ml, maps, data, compute, search, crypto_finance.",
+        },
+        account: {
+          type: "string",
+          description: "Optional pay account override.",
+        },
+      },
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "pay_get_service_endpoints",
+    description:
+      "List the discoverable endpoints for a pay.sh service/resource pair and return their gateway URLs. Use the returned URL with pay_api_request.",
+    parameters: {
+      type: "object",
+      properties: {
+        service_fqn: {
+          type: "string",
+          description: "Fully qualified pay service name, for example solana-foundation/google/language.",
+        },
+        resource: {
+          type: "string",
+          description: "Resource name inside the service, for example entities or jobs.",
+        },
+        account: {
+          type: "string",
+          description: "Optional pay account override.",
+        },
+      },
+      required: ["service_fqn", "resource"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "pay_api_request",
+    description:
+      "Call a paid API through the local pay.sh CLI using a URL returned by pay_get_service_endpoints. Requires explicit user_confirmed=true and keeps the pay wallet separate from AgentLayer execution wallets.",
+    optional: true,
+    parameters: {
+      type: "object",
+      properties: {
+        service_fqn: {
+          type: "string",
+          description: "Fully qualified pay service name used to validate the request URL.",
+        },
+        resource: {
+          type: "string",
+          description: "Resource name used to validate the request URL.",
+        },
+        url: {
+          type: "string",
+          description: "Exact HTTPS gateway URL returned by pay_get_service_endpoints.",
+        },
+        method: {
+          type: "string",
+          description: "HTTP method such as GET or POST.",
+        },
+        headers: {
+          type: "object",
+          additionalProperties: { type: "string" },
+          description: "Optional HTTP headers.",
+        },
+        query: {
+          type: "object",
+          additionalProperties: true,
+          description: "Optional query parameters to append to the URL.",
+        },
+        json_body: {
+          description: "Optional JSON request body.",
+        },
+        text_body: {
+          type: "string",
+          description: "Optional raw text request body. Do not provide with json_body.",
+        },
+        account: {
+          type: "string",
+          description: "Optional pay account override.",
+        },
+        parse_json_response: {
+          type: "boolean",
+          description: "If true, attempt to parse the response body as JSON.",
+        },
+        purpose: {
+          type: "string",
+          description: "Short user-facing reason for this paid API call.",
+        },
+        user_confirmed: {
+          type: "boolean",
+          description: "Must be true for paid API requests.",
+        },
+      },
+      required: ["service_fqn", "resource", "url", "method", "purpose", "user_confirmed"],
+      additionalProperties: false,
+    },
+  },
+];
+
+export default function registerPayBridgePlugin(api) {
+  api?.logger?.info?.("[pay-bridge] registering pay.sh OpenClaw plugin");
+  for (const definition of toolDefinitions) {
+    registerTool(api, definition);
+  }
+  api?.logger?.info?.(`[pay-bridge] registered ${toolDefinitions.length} pay tools`);
+}

package/.openclaw/extensions/pay-bridge/package.json

@@ -1,11 +1,49 @@
 {
-  "name": "pay-bridge",
-  "version": "0.1.0",
-  "private": true,
+  "name": "@agentlayertech/pay-bridge-plugin",
+  "version": "0.1.16",
+  "description": "OpenClaw plugin bridge for the local pay.sh CLI.",
   "type": "module",
+  "license": "SEE LICENSE IN ../../../LICENSE",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lopushok9/Agent-Layer.git",
+    "directory": ".openclaw/extensions/pay-bridge"
+  },
+  "bugs": {
+    "url": "https://github.com/lopushok9/Agent-Layer/issues"
+  },
+  "homepage": "https://github.com/lopushok9/Agent-Layer/tree/main/.openclaw/extensions/pay-bridge#readme",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "index.ts",
+    "core.mjs",
+    "dist/",
+    "openclaw.plugin.json",
+    "README.md",
+    "skills/"
+  ],
   "openclaw": {
     "extensions": [
       "./index.ts"
-    ]
-  }
+    ],
+    "runtimeExtensions": [
+      "./dist/index.js"
+    ],
+    "compat": {
+      "pluginApi": ">=2026.3.24-beta.2",
+      "minGatewayVersion": "2026.3.24-beta.2"
+    },
+    "build": {
+      "openclawVersion": "2026.3.24-beta.2",
+      "pluginSdkVersion": "2026.3.24-beta.2"
+    }
+  },
+  "keywords": [
+    "openclaw",
+    "plugin",
+    "pay",
+    "payments"
+  ]
 }

package/CHANGELOG.md

@@ -2,6 +2,39 @@
 
 ## Unreleased
 
+## v0.1.16 - 2026-05-16
+
+- Added Flash Trade perpetuals support to the Solana wallet flow, including
+  market discovery, position lookup, preview, prepare, open, and close tools.
+- Kept Flash perps wallet-native inside the existing Solana backend instead of
+  introducing a separate custodial trading account flow.
+- Added a repo-owned Flash SDK bridge for real quote, prepare, and execution
+  planning against Flash Trade from the local runtime.
+- Fixed OpenClaw runtime packaging and plugin contract sync so Flash Trade
+  tools are exposed correctly from the installed runtime.
+- Bound Flash execute approvals to the exact approved preview payload, so
+  host-issued approvals remain valid across small quote drift between preview
+  and execution.
+
+- Added ClawHub-publishable OpenClaw plugin package metadata for
+  `.openclaw/extensions/agent-wallet` and `.openclaw/extensions/pay-bridge`,
+  including required `openclaw.compat`, `openclaw.build`, and
+  `runtimeExtensions` fields for native `openclaw plugins install clawhub:...`
+  installs.
+- Added a reproducible OpenClaw plugin package build/check script at
+  `scripts/manage_openclaw_plugin_packages.mjs` to generate published runtime
+  JS artifacts under `.openclaw/extensions/*/dist/`.
+- Updated the `agent-wallet` OpenClaw bridge to auto-check the packaged runtime
+  path at `~/.openclaw/agent-wallet-runtime/current/agent-wallet` before local
+  workspace fallbacks, so a ClawHub-installed plugin can ride on top of the
+  existing npm runtime installer.
+- Documented the dual-install model: keep `npx @agentlayer.tech/wallet install`
+  for runtime/bootstrap, and use `openclaw plugins install clawhub:...` for the
+  native OpenClaw plugin packages.
+- Added a GitHub Actions workflow at `.github/workflows/clawhub-plugins.yml`
+  that can dry-run ClawHub publishes on pull requests and publish both OpenClaw
+  plugin packages on `v*` tags or manual dispatch.
+
 ## v0.1.14 - 2026-05-13
 
 - Added a separate `.openclaw/extensions/pay-bridge/` plugin that keeps

package/README.md

@@ -51,6 +51,15 @@ Install through npm:
 npx @agentlayer.tech/wallet install --yes
 ```
 
+Install the native OpenClaw plugins from ClawHub:
+
+```bash
+openclaw plugins install clawhub:@agentlayertech/agent-wallet-plugin
+openclaw plugins install clawhub:@agentlayertech/pay-bridge-plugin
+```
+
+Those ClawHub packages do not replace the npm installer. Keep `npx @agentlayer.tech/wallet install --yes` for laying down the local wallet runtime, Python backend, and helper services. The ClawHub packages only install the OpenClaw plugin surfaces that point at that runtime.
+
 Or install the CLI globally first:
 
 ```bash
@@ -77,6 +86,29 @@ wallet update --yes
 wallet rollback
 ```
 
+## Native OpenClaw plugin installs
+
+Use ClawHub when you want the plugin itself to be installed through OpenClaw:
+
+```bash
+openclaw plugins install clawhub:@agentlayertech/agent-wallet-plugin
+openclaw plugins install clawhub:@agentlayertech/pay-bridge-plugin
+```
+
+Recommended order:
+
+1. Install or update the local runtime with `npx @agentlayer.tech/wallet install --yes`.
+2. Install the plugin package from ClawHub with `openclaw plugins install clawhub:...`.
+3. Restart the OpenClaw gateway and enable/configure the plugin entry in `openclaw.json`.
+
+The `agent-wallet` ClawHub plugin auto-checks the standard runtime path at:
+
+```bash
+~/.openclaw/agent-wallet-runtime/current/agent-wallet
+```
+
+If your runtime lives elsewhere, set `plugins.entries.agent-wallet.config.packageRoot` explicitly.
+
 Install from a local clone:
 
 ```bash

package/RELEASING.md

@@ -12,6 +12,13 @@ The public install command is:
 npx @agentlayer.tech/wallet install --yes
 ```
 
+The repo also ships two native OpenClaw plugin packages for ClawHub:
+
+```text
+@agentlayertech/agent-wallet-plugin
+@agentlayertech/pay-bridge-plugin
+```
+
 ## When npm Publishes
 
 Normal commits and pushes do not publish new npm versions. They only run the
@@ -31,6 +38,9 @@ agent-wallet/pyproject.toml
 ```
 
 If those versions do not match the tag, the workflow fails before publishing.
+The same `v*` tag can also trigger the ClawHub plugin publish workflow, so keep
+the root installer versions aligned with the ClawHub plugin package versions
+when you want one GitHub release to ship both surfaces together.
 
 ## Stable Release
 
@@ -174,6 +184,66 @@ OpenClaw secrets
 
 The package allowlist lives in `package.json` under `files`.
 
+## ClawHub Plugin Packages
+
+The OpenClaw plugin packages are published separately from the npm installer.
+They are additive and do not replace `@agentlayer.tech/wallet`.
+
+Before publishing either package, build and validate the runtime artifacts:
+
+```bash
+npm run build:openclaw-plugins
+npm run check:openclaw-plugins
+```
+
+Dry-run the package contents from each plugin directory:
+
+```bash
+(cd .openclaw/extensions/agent-wallet && npm pack --dry-run)
+(cd .openclaw/extensions/pay-bridge && npm pack --dry-run)
+```
+
+Publish to ClawHub with the package-specific command documented by OpenClaw:
+
+```bash
+clawhub package publish .openclaw/extensions/agent-wallet --dry-run
+clawhub package publish .openclaw/extensions/agent-wallet
+
+clawhub package publish .openclaw/extensions/pay-bridge --dry-run
+clawhub package publish .openclaw/extensions/pay-bridge
+```
+
+Users then install them natively through OpenClaw:
+
+```bash
+openclaw plugins install clawhub:@agentlayertech/agent-wallet-plugin
+openclaw plugins install clawhub:@agentlayertech/pay-bridge-plugin
+```
+
+GitHub Actions can publish the same packages automatically from tags and manual
+dispatch through `.github/workflows/clawhub-plugins.yml`.
+
+Required repository secret:
+
+```text
+CLAWHUB_TOKEN
+```
+
+Workflow behavior:
+
+- `pull_request`: packs both plugins and runs ClawHub `--dry-run`
+- `workflow_dispatch`: publishes or dry-runs based on the `dry_run` input
+- `push` on `v*` tags: publishes both plugins automatically
+
+The workflow currently publishes:
+
+- `.openclaw/extensions/agent-wallet` as `bundle-plugin`
+- `.openclaw/extensions/pay-bridge` as `code-plugin`
+
+`agent-wallet` stays on `bundle-plugin` because that package name was first
+published to ClawHub with that family, and ClawHub does not allow family
+changes for an existing package record.
+
 ## Runtime Layout
 
 Installer releases are copied into the user's OpenClaw home:
@@ -214,3 +284,100 @@ https://github.com/lopushok9/Agent-Layer.git
 
 Do not use `NPM_TOKEN` unless Trusted Publishing is unavailable. Token-based
 publishes can fail with `EOTP` when npm requires two-factor authentication.
+
+## ClawHub Release Workflow
+
+This repo also includes a separate GitHub Actions workflow for the OpenClaw
+plugin packages:
+
+```text
+.github/workflows/clawhub-plugins.yml
+```
+
+It publishes these ClawHub packages:
+
+```text
+@agentlayertech/agent-wallet-plugin
+@agentlayertech/pay-bridge-plugin
+```
+
+### Triggers
+
+- `pull_request`
+  - runs ClawHub publish in `--dry-run` mode for both plugin packages
+- `workflow_dispatch`
+  - supports manual runs with a `dry_run` boolean input
+- `push` on git tags matching `v*`
+  - publishes both plugin packages to ClawHub
+
+### Required secret
+
+The workflow requires this repository Actions secret:
+
+```text
+CLAWHUB_TOKEN
+```
+
+That token is created in the ClawHub web UI and must belong to an account with
+publisher access to:
+
+```text
+@agentlayertech
+```
+
+### Family mapping
+
+The workflow currently publishes:
+
+- `.openclaw/extensions/agent-wallet` as `bundle-plugin`
+- `.openclaw/extensions/pay-bridge` as `code-plugin`
+
+`agent-wallet` remains on `bundle-plugin` because the package
+`@agentlayertech/agent-wallet-plugin` was first created in ClawHub with that
+family, and ClawHub does not allow family changes for an existing package name.
+
+### Release flow with tags
+
+If you want one git tag to publish both npm and ClawHub surfaces together:
+
+1. Keep these versions aligned:
+
+```text
+package.json
+agent-wallet/pyproject.toml
+.openclaw/extensions/agent-wallet/package.json
+.openclaw/extensions/pay-bridge/package.json
+```
+
+2. Commit the release version bump.
+
+3. Push `main`.
+
+4. Create and push the tag:
+
+```bash
+git tag -a v0.1.16 -m "v0.1.16"
+git push origin v0.1.16
+```
+
+That tag will trigger:
+
+- `.github/workflows/npm-installer.yml`
+- `.github/workflows/clawhub-plugins.yml`
+
+### Manual verification without publishing
+
+To verify the ClawHub workflow and token without creating a new release:
+
+1. Open GitHub Actions
+2. Select `ClawHub plugins`
+3. Click `Run workflow`
+4. Choose branch `main`
+5. Set `dry_run=true`
+6. Run it
+
+Expected result:
+
+- both matrix jobs succeed
+- ClawHub login succeeds
+- both package publishes resolve in dry-run mode without uploading

package/agent-wallet/.env.example

@@ -65,6 +65,11 @@ HOUDINI_USER_IP=
 HOUDINI_USER_AGENT=AgentLayer/0.1.12
 HOUDINI_USER_TIMEZONE=UTC
 
+# Flash Trade perps
+FLASH_API_BASE_URL=
+FLASH_SDK_BRIDGE_COMMAND=
+FLASH_SDK_BRIDGE_MODE=real
+
 # Kamino REST lending
 KAMINO_API_BASE_URL=https://api.kamino.finance
 KAMINO_PROGRAM_ID=KLend2g3cP87fffoy8q1mQqGKjrxjC8boSyAYavgmjD

package/agent-wallet/README.md

@@ -524,6 +524,30 @@ Operational notes:
 - Jupiter `Portfolio` implementation remains in the backend, but the agent-facing tools are temporarily disabled.
 - The Jupiter config fields and provider code are intentionally kept so these surfaces can be restored later without rebuilding the integration from scratch.
 
+## Flash Trade coverage
+
+Current Flash Trade integration is intentionally phase-scoped:
+
+- read-only `markets` and `positions` hooks are now wired through the Solana backend and OpenClaw adapter
+- the transport is provider-driven, so Flash can be added through `provider-gateway` without introducing a new wallet runtime
+
+Operational notes:
+
+- current agent-facing tools are `get_flash_trade_markets` and `get_flash_trade_positions`
+- these reads are mainnet-only
+- Flash perpetual opens/closes now follow the existing `preview -> prepare -> execute` approval model instead of a separate trading wallet flow
+- Flash reads expect either hosted/self-hosted gateway routes on `PROVIDER_GATEWAY_URL` or a direct `FLASH_API_BASE_URL`
+- if those HTTP routes are unavailable, the Solana backend now falls back to the local `flash-sdk-bridge` for market discovery and user-position discovery
+- Phase 2 now also adds `flash_trade_open_position` and `flash_trade_close_position` in `preview` / `prepare` / `execute`
+- those preview/prepare/execute flows are produced by a local bridge command configured via `FLASH_SDK_BRIDGE_COMMAND`
+- the bridge is expected to return machine JSON on stdout; `agent-wallet/tests/smoke_flash_sdk_bridge.py` documents the minimal contract shape
+- a repo-owned Node bridge now lives at `agent-wallet/scripts/flash-sdk-bridge/bridge.mjs`
+- install its pinned SDK dependencies with `cd agent-wallet/scripts/flash-sdk-bridge && npm install`
+- `FLASH_SDK_BRIDGE_MODE=mock` provides deterministic smoke behavior without SDK dependencies
+- `FLASH_SDK_BRIDGE_MODE=real` now produces real Flash SDK quotes for preview and real versioned transaction builds for prepare/execute
+- the backend locally verifies the provider-built Flash transaction, applies only the wallet signature, and requires a host-issued approval token before broadcast; tool-level `prepare` still strips signed transaction bytes before returning to the agent
+- current real-mode constraints are intentionally narrow: mainnet only, same-collateral `market_symbol == collateral_symbol`, and whole-number leverage strings for opens
+
 ## Native staking coverage
 
 Current native Solana staking integration now includes:
@@ -558,6 +582,20 @@ It forwards tool execution to the Python bridge CLI:
 
 This keeps the official OpenClaw-facing layer in TypeScript while the actual wallet/security logic remains in the Python backend.
 
+If you want OpenClaw to install the plugin through ClawHub instead of a repo-local path, use:
+
+```bash
+openclaw plugins install clawhub:@agentlayertech/agent-wallet-plugin
+```
+
+That native plugin package is additive. Keep the existing runtime installer for the actual wallet backend:
+
+```bash
+npx @agentlayer.tech/wallet install --yes
+```
+
+The ClawHub plugin package auto-checks `~/.openclaw/agent-wallet-runtime/current/agent-wallet` before it falls back to a local workspace checkout.
+
 Public-safe helper scripts are available in `agent-wallet/scripts/`:
 
 - `install_openclaw_local_config.py`

package/agent-wallet/agent_wallet/config.py

@@ -60,6 +60,10 @@ class Settings(BaseSettings):
     houdini_user_ip: str = ""
     houdini_user_agent: str = "AgentLayer/0.1.12"
     houdini_user_timezone: str = "UTC"
+    flash_api_base_url: str = ""
+    flash_sdk_bridge_command: str = ""
+    flash_sdk_bridge_mode: str = "mock"
+    flash_sdk_bridge_timeout_seconds: float = 20.0
     kamino_api_base_url: str = "https://api.kamino.finance"
     kamino_program_id: str = "KLend2g3cP87fffoy8q1mQqGKjrxjC8boSyAYavgmjD"
     alchemy_api_key: str = ""