@agentlayer.tech/wallet 0.1.17 → 0.1.18

package/.openclaw/extensions/agent-wallet/dist/index.js

@@ -25,6 +25,9 @@ const approvalPreviewCache = new Map();
 const privateSwapOrderCache = new Map();
 const WALLET_TOOL_ONLY_GUIDANCE =
   "Use this wallet tool instead of shelling out to solana CLI, spl-token CLI, curl, or exec. If it fails, surface the wallet-tool error and stop rather than falling back to terminal commands.";
+const APPROVAL_PREVIEW_TOOL_ALIASES = new Map([
+  ["x402_pay_request", "x402_preview_request"],
+]);
 
 function canonicalJsonText(payload) {
   const normalize = (value) => {
@@ -51,6 +54,11 @@ function approvalCacheKey(userId, toolName) {
   return `${userId}::${toolName}`;
 }
 
+function approvalPreviewToolName(toolName) {
+  const normalized = typeof toolName === "string" ? toolName.trim() : "";
+  return APPROVAL_PREVIEW_TOOL_ALIASES.get(normalized) || normalized;
+}
+
 function pruneApprovalPreviewCache() {
   const now = Date.now();
   for (const [key, value] of approvalPreviewCache.entries()) {
@@ -61,29 +69,30 @@ function pruneApprovalPreviewCache() {
 }
 
 function cachePreviewForApproval(userId, toolName, payload) {
+  const cacheToolName = approvalPreviewToolName(toolName);
   if (!payload || payload.ok !== true || !payload.data || typeof payload.data !== "object") return;
   const preview = payload.data;
   if (preview.mode !== "preview") return;
   if (!preview.confirmation_summary || typeof preview.confirmation_summary !== "object") return;
   pruneApprovalPreviewCache();
   const digest = previewDigest(preview);
-  approvalPreviewCache.set(approvalCacheKey(userId, toolName), {
+  approvalPreviewCache.set(approvalCacheKey(userId, cacheToolName), {
     digest,
     expiresAt:
-      toolName === "swap_solana_privately"
+      cacheToolName === "swap_solana_privately"
         ? Date.now() + PRIVATE_SWAP_CACHE_TTL_MS
         : Date.now() + PREVIEW_CACHE_TTL_MS,
     preview,
     summary: preview.confirmation_summary,
   });
-  if (toolName === "swap_solana_privately") {
-    privateSwapOrderCache.delete(approvalCacheKey(userId, toolName));
+  if (cacheToolName === "swap_solana_privately") {
+    privateSwapOrderCache.delete(approvalCacheKey(userId, cacheToolName));
   }
 }
 
 function latestCachedPreview(userId, toolName) {
   pruneApprovalPreviewCache();
-  return approvalPreviewCache.get(approvalCacheKey(userId, toolName)) || null;
+  return approvalPreviewCache.get(approvalCacheKey(userId, approvalPreviewToolName(toolName))) || null;
 }
 
 function approvalTokenPreviewDigest(token) {
@@ -498,8 +507,9 @@ async function issueApprovalToken(api, config, userId, toolName, previewPayload)
   if (!summary || typeof summary !== "object") {
     throw new Error(`No confirmation_summary available for ${toolName}.`);
   }
-  const digest = previewDigest(previewPayload);
-  const summaryForToken = { ...summary, _preview_digest: digest };
+  const summaryForToken = PREVIEW_BOUND_SWAP_TOOLS.has(toolName)
+    ? { ...summary, _preview_digest: previewDigest(previewPayload) }
+    : { ...summary };
   const extraArgs = [
     "--tool",
     toolName,
@@ -819,6 +829,94 @@ const walletSessionToolDefinitions = [
       additionalProperties: false,
     },
   },
+  {
+    name: "x402_search_services",
+    description:
+      "Search x402-paid services through CDP Bazaar or Agentic Market. This is read-only discovery and does not spend funds.",
+    parameters: {
+      type: "object",
+      properties: {
+        query: { type: "string" },
+        discovery_provider: {
+          type: "string",
+          enum: ["auto", "cdp_bazaar", "agentic_market"],
+        },
+        network: { type: "string" },
+        asset: { type: "string" },
+        scheme: { type: "string" },
+        max_usd_price: { type: "string" },
+        limit: { type: "integer" },
+      },
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "x402_get_service_details",
+    description:
+      "Resolve one x402 service or resource into a normalized details payload. Use a resource URL for CDP Bazaar or a domain/service id for Agentic Market.",
+    parameters: {
+      type: "object",
+      properties: {
+        reference: { type: "string" },
+        discovery_provider: {
+          type: "string",
+          enum: ["auto", "cdp_bazaar", "agentic_market"],
+        },
+      },
+      required: ["reference"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "x402_preview_request",
+    description:
+      "Make an unpaid HTTP request to an x402 endpoint, detect HTTP 402, parse PAYMENT-REQUIRED, and summarize the payment options. This does not pay or execute.",
+    parameters: {
+      type: "object",
+      properties: {
+        url: { type: "string" },
+        method: { type: "string" },
+        headers: { type: "object", additionalProperties: { type: "string" } },
+        query: { type: "object", additionalProperties: true },
+        json_body: {},
+        text_body: { type: "string" },
+      },
+      required: ["url"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "x402_pay_request",
+    description:
+      "Prepare or execute an x402 paid request using the active wallet backend. This milestone executes the Solana exact buyer flow and keeps EVM as prepare-only.",
+    parameters: {
+      type: "object",
+      properties: {
+        url: { type: "string" },
+        method: { type: "string" },
+        headers: { type: "object", additionalProperties: { type: "string" } },
+        query: { type: "object", additionalProperties: true },
+        json_body: {},
+        text_body: { type: "string" },
+        mode: {
+          type: "string",
+          enum: ["prepare", "execute"],
+          description: "prepare validates the payment plan; execute sends the paid retry.",
+        },
+        purpose: { type: "string" },
+        user_intent: {
+          type: "boolean",
+          description: "Must be true for prepare mode.",
+        },
+        approval_token: {
+          type: "string",
+          description: "Required for execute mode and must be issued against the exact x402 payment summary.",
+        },
+      },
+      required: ["url", "mode", "purpose"],
+      additionalProperties: false,
+    },
+  },
   {
     name: "get_active_wallet_backend",
     description: "Show which wallet backend is active in this OpenClaw plugin session and whether it differs from the startup plugin config.",

package/.openclaw/extensions/agent-wallet/index.ts

@@ -25,6 +25,9 @@ const approvalPreviewCache = new Map();
 const privateSwapOrderCache = new Map();
 const WALLET_TOOL_ONLY_GUIDANCE =
   "Use this wallet tool instead of shelling out to solana CLI, spl-token CLI, curl, or exec. If it fails, surface the wallet-tool error and stop rather than falling back to terminal commands.";
+const APPROVAL_PREVIEW_TOOL_ALIASES = new Map([
+  ["x402_pay_request", "x402_preview_request"],
+]);
 
 function canonicalJsonText(payload) {
   const normalize = (value) => {
@@ -51,6 +54,11 @@ function approvalCacheKey(userId, toolName) {
   return `${userId}::${toolName}`;
 }
 
+function approvalPreviewToolName(toolName) {
+  const normalized = typeof toolName === "string" ? toolName.trim() : "";
+  return APPROVAL_PREVIEW_TOOL_ALIASES.get(normalized) || normalized;
+}
+
 function pruneApprovalPreviewCache() {
   const now = Date.now();
   for (const [key, value] of approvalPreviewCache.entries()) {
@@ -61,29 +69,30 @@ function pruneApprovalPreviewCache() {
 }
 
 function cachePreviewForApproval(userId, toolName, payload) {
+  const cacheToolName = approvalPreviewToolName(toolName);
   if (!payload || payload.ok !== true || !payload.data || typeof payload.data !== "object") return;
   const preview = payload.data;
   if (preview.mode !== "preview") return;
   if (!preview.confirmation_summary || typeof preview.confirmation_summary !== "object") return;
   pruneApprovalPreviewCache();
   const digest = previewDigest(preview);
-  approvalPreviewCache.set(approvalCacheKey(userId, toolName), {
+  approvalPreviewCache.set(approvalCacheKey(userId, cacheToolName), {
     digest,
     expiresAt:
-      toolName === "swap_solana_privately"
+      cacheToolName === "swap_solana_privately"
         ? Date.now() + PRIVATE_SWAP_CACHE_TTL_MS
         : Date.now() + PREVIEW_CACHE_TTL_MS,
     preview,
     summary: preview.confirmation_summary,
   });
-  if (toolName === "swap_solana_privately") {
-    privateSwapOrderCache.delete(approvalCacheKey(userId, toolName));
+  if (cacheToolName === "swap_solana_privately") {
+    privateSwapOrderCache.delete(approvalCacheKey(userId, cacheToolName));
   }
 }
 
 function latestCachedPreview(userId, toolName) {
   pruneApprovalPreviewCache();
-  return approvalPreviewCache.get(approvalCacheKey(userId, toolName)) || null;
+  return approvalPreviewCache.get(approvalCacheKey(userId, approvalPreviewToolName(toolName))) || null;
 }
 
 function approvalTokenPreviewDigest(token) {
@@ -498,8 +507,9 @@ async function issueApprovalToken(api, config, userId, toolName, previewPayload)
   if (!summary || typeof summary !== "object") {
     throw new Error(`No confirmation_summary available for ${toolName}.`);
   }
-  const digest = previewDigest(previewPayload);
-  const summaryForToken = { ...summary, _preview_digest: digest };
+  const summaryForToken = PREVIEW_BOUND_SWAP_TOOLS.has(toolName)
+    ? { ...summary, _preview_digest: previewDigest(previewPayload) }
+    : { ...summary };
   const extraArgs = [
     "--tool",
     toolName,
@@ -819,6 +829,94 @@ const walletSessionToolDefinitions = [
       additionalProperties: false,
     },
   },
+  {
+    name: "x402_search_services",
+    description:
+      "Search x402-paid services through CDP Bazaar or Agentic Market. This is read-only discovery and does not spend funds.",
+    parameters: {
+      type: "object",
+      properties: {
+        query: { type: "string" },
+        discovery_provider: {
+          type: "string",
+          enum: ["auto", "cdp_bazaar", "agentic_market"],
+        },
+        network: { type: "string" },
+        asset: { type: "string" },
+        scheme: { type: "string" },
+        max_usd_price: { type: "string" },
+        limit: { type: "integer" },
+      },
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "x402_get_service_details",
+    description:
+      "Resolve one x402 service or resource into a normalized details payload. Use a resource URL for CDP Bazaar or a domain/service id for Agentic Market.",
+    parameters: {
+      type: "object",
+      properties: {
+        reference: { type: "string" },
+        discovery_provider: {
+          type: "string",
+          enum: ["auto", "cdp_bazaar", "agentic_market"],
+        },
+      },
+      required: ["reference"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "x402_preview_request",
+    description:
+      "Make an unpaid HTTP request to an x402 endpoint, detect HTTP 402, parse PAYMENT-REQUIRED, and summarize the payment options. This does not pay or execute.",
+    parameters: {
+      type: "object",
+      properties: {
+        url: { type: "string" },
+        method: { type: "string" },
+        headers: { type: "object", additionalProperties: { type: "string" } },
+        query: { type: "object", additionalProperties: true },
+        json_body: {},
+        text_body: { type: "string" },
+      },
+      required: ["url"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "x402_pay_request",
+    description:
+      "Prepare or execute an x402 paid request using the active wallet backend. This milestone executes the Solana exact buyer flow and keeps EVM as prepare-only.",
+    parameters: {
+      type: "object",
+      properties: {
+        url: { type: "string" },
+        method: { type: "string" },
+        headers: { type: "object", additionalProperties: { type: "string" } },
+        query: { type: "object", additionalProperties: true },
+        json_body: {},
+        text_body: { type: "string" },
+        mode: {
+          type: "string",
+          enum: ["prepare", "execute"],
+          description: "prepare validates the payment plan; execute sends the paid retry.",
+        },
+        purpose: { type: "string" },
+        user_intent: {
+          type: "boolean",
+          description: "Must be true for prepare mode.",
+        },
+        approval_token: {
+          type: "string",
+          description: "Required for execute mode and must be issued against the exact x402 payment summary.",
+        },
+      },
+      required: ["url", "mode", "purpose"],
+      additionalProperties: false,
+    },
+  },
   {
     name: "get_active_wallet_backend",
     description: "Show which wallet backend is active in this OpenClaw plugin session and whether it differs from the startup plugin config.",

package/.openclaw/extensions/agent-wallet/openclaw.plugin.json

@@ -70,7 +70,11 @@
       "transfer_evm_native",
       "transfer_evm_token",
       "transfer_sol",
-      "transfer_spl_token"
+      "transfer_spl_token",
+      "x402_get_service_details",
+      "x402_pay_request",
+      "x402_preview_request",
+      "x402_search_services"
     ]
   },
   "skills": ["skills/wallet-operator"],

package/.openclaw/extensions/agent-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayertech/agent-wallet-plugin",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "OpenClaw plugin bridge for the AgentLayer wallet runtime.",
   "type": "module",
   "license": "SEE LICENSE IN ../../../LICENSE",

package/.openclaw/extensions/pay-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayertech/pay-bridge-plugin",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "OpenClaw plugin bridge for the local pay.sh CLI.",
   "type": "module",
   "license": "SEE LICENSE IN ../../../LICENSE",

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 ## Unreleased
 
+## v0.1.18 - 2026-05-19
+
+- Started the native x402 buyer integration inside `agent-wallet` instead of
+  the separate `pay-bridge` wallet path.
+- Added read-only x402 discovery helpers for `CDP Bazaar` and
+  `Agentic Market`, including normalized service/resource search results.
+- Added `x402_preview_request`, which performs an unpaid request, parses
+  `PAYMENT-REQUIRED`, and summarizes accepted payment options without spending
+  funds.
+- Added `x402_pay_request` with `prepare` and `execute` flow for exact buyer
+  payments from the native wallet on Solana, Base, and Base Sepolia.
+- Added buyer-side x402 signing support to the local EVM runtime so Base
+  payments execute without requiring a separate wallet product.
+- Fixed x402 Solana execution against hosted RPC routing by deriving an
+  SDK-compatible direct Solana RPC URL for the x402 SVM client.
+- Fixed x402 payment requirement selection so SDK model objects survive through
+  prepare and execute without crashing on plain dict access.
+- Added automatic host approval-token issuance for `x402_pay_request` from the
+  cached `x402_preview_request` summary in the OpenClaw bridge.
+- Fixed x402 approval-token binding so execute validates against the exact
+  `confirmation_summary` used by the Python wallet policy gate.
+- Synced the OpenClaw coding profile allowlist and runtime bundle so the new
+  x402 tools are exposed correctly in packaged installs.
+
 ## v0.1.17 - 2026-05-17
 
 - Added Flash Trade collateral-aware perp opens so the Solana wallet flow can

package/agent-wallet/README.md

@@ -108,6 +108,10 @@ Current safe tools:
 - `deactivate_solana_stake`
 - `withdraw_solana_stake`
 - `request_devnet_airdrop`
+- `x402_search_services`
+- `x402_get_service_details`
+- `x402_preview_request`
+- `x402_pay_request`
 
 Temporarily disabled but kept in the codebase for later re-enable: