@agentlayer.tech/wallet 0.1.25 → 0.1.27

package/.openclaw/extensions/agent-wallet/README.md

@@ -17,7 +17,7 @@ In practice this means the agent works through explicit tools for:
 - EVM native balance, ERC-20 balance/metadata, fee-rate, receipt, Velora swap quote/execute, Aave V3 account/reserve/position flows, and transfer flows through the local `wdk-evm-wallet` backend
 - wallet address, balances, and portfolio reads
 - native SOL and SPL token transfers
-- Jupiter swap and price lookup
+- Jupiter swap and price lookup, including Solana swap intent execution that refreshes quotes inside user-approved limits
 - Jupiter Earn read/deposit/withdraw flows
 - Kamino lending read/deposit/withdraw/borrow/repay flows
 - native Solana staking, stake deactivation, and stake withdrawal

package/.openclaw/extensions/agent-wallet/dist/index.js

@@ -76,7 +76,7 @@ function cachePreviewForApproval(userId, toolName, payload) {
   const cacheToolName = approvalPreviewToolName(toolName);
   if (!payload || payload.ok !== true || !payload.data || typeof payload.data !== "object") return;
   const approvalSource = payload.data;
-  if (!["preview", "prepare"].includes(String(approvalSource.mode || ""))) return;
+  if (!["preview", "prepare", "intent_preview"].includes(String(approvalSource.mode || ""))) return;
   if (!approvalSource.confirmation_summary || typeof approvalSource.confirmation_summary !== "object") return;
   pruneApprovalPreviewCache();
   const digest = previewDigest(approvalSource);
@@ -119,7 +119,21 @@ function cachedPreviewForToken(userId, toolName, token) {
   return cached.preview && typeof cached.preview === "object" ? cached.preview : null;
 }
 
-function requiresApprovedPreviewPayload(toolName) {
+function isSolanaSwapIntentPayload(payload) {
+  return (
+    payload &&
+    typeof payload === "object" &&
+    (String(payload.asset_type || "") === "solana-swap-intent" ||
+      String(payload.mode || "") === "intent_preview")
+  );
+}
+
+function isSolanaSwapIntentExecute(params) {
+  return String(params?.mode || "") === "intent_execute";
+}
+
+function requiresApprovedPreviewPayload(toolName, params = null) {
+  if (toolName === "swap_solana_tokens" && isSolanaSwapIntentExecute(params)) return false;
   return PREVIEW_BOUND_SWAP_TOOLS.has(toolName);
 }
 
@@ -536,7 +550,7 @@ async function issueApprovalToken(api, config, userId, toolName, previewPayload)
   if (!summary || typeof summary !== "object") {
     throw new Error(`No confirmation_summary available for ${toolName}.`);
   }
-  const summaryForToken = PREVIEW_BOUND_SWAP_TOOLS.has(toolName)
+  const summaryForToken = PREVIEW_BOUND_SWAP_TOOLS.has(toolName) && !isSolanaSwapIntentPayload(previewPayload)
     ? { ...summary, _preview_digest: previewDigest(previewPayload) }
     : { ...summary };
   const extraArgs = [
@@ -560,7 +574,12 @@ async function issueApprovalToken(api, config, userId, toolName, previewPayload)
 }
 
 async function attachApprovalForExecute(api, config, userId, toolName, effectiveParams) {
-  if (String(effectiveParams.mode || "") !== "execute") return null;
+  if (!["execute", "intent_execute"].includes(String(effectiveParams.mode || ""))) return null;
+  if (toolName === "swap_solana_tokens" && String(effectiveParams.mode || "") === "execute") {
+    throw new Error(
+      "Legacy exact-preview execute is disabled for Solana Jupiter swaps in OpenClaw. Use intent_preview, ask for explicit chat confirmation, then call intent_execute. The intent path binds approval to risk limits instead of a fragile Jupiter quote payload."
+    );
+  }
 
   const cached = latestCachedPreview(userId, toolName);
   if (cached?.preview && cached?.summary) {
@@ -571,14 +590,14 @@ async function attachApprovalForExecute(api, config, userId, toolName, effective
       toolName,
       cached.preview
     );
-    if (requiresApprovedPreviewPayload(toolName)) {
+    if (requiresApprovedPreviewPayload(toolName, effectiveParams)) {
       effectiveParams._approved_preview = cached.preview;
     }
     return cached;
   }
 
   if (
-    requiresApprovedPreviewPayload(toolName) &&
+    requiresApprovedPreviewPayload(toolName, effectiveParams) &&
     typeof effectiveParams.approval_token === "string" &&
     effectiveParams.approval_token.trim() &&
     effectiveParams._approved_preview === undefined
@@ -1312,7 +1331,7 @@ const solanaToolDefinitions = [
   },
   {
     name: "swap_solana_tokens",
-    description: `Preview, prepare, or execute a Solana token swap via Jupiter. Preview or prepare first. After the user explicitly confirms the shown summary in chat, call execute; the OpenClaw plugin handles the internal execution authorization automatically. ${WALLET_TOOL_ONLY_GUIDANCE}`,
+    description: `Preview or execute a Solana token swap via Jupiter. Use intent_preview followed by intent_execute after the user explicitly confirms the intent summary in chat; intent_execute fetches a fresh quote and only executes inside the approved limits. Do not use legacy execute for Solana swaps. The OpenClaw plugin handles internal execution authorization automatically. ${WALLET_TOOL_ONLY_GUIDANCE}`,
     optional: true,
     parameters: {
       type: "object",
@@ -1320,8 +1339,12 @@ const solanaToolDefinitions = [
         input_mint: { type: "string" },
         output_mint: { type: "string" },
         amount: { type: "number" },
-        slippage_bps: { type: "integer" },
-        mode: { type: "string", enum: ["preview", "prepare", "execute"] },
+        slippage_bps: { type: "integer", description: "Optional slippage tolerance in basis points. Defaults to 300 (3%) for Solana swaps." },
+        minimum_output_amount_raw: { type: "integer", description: "Optional approved minimum output in raw output token units for intent_preview. For intent swaps, overly strict values are clamped to the slippage floor." },
+        max_fee_lamports: { type: "integer" },
+        valid_for_seconds: { type: "integer", description: "Optional intent validity window in seconds. Intent swaps use at least 120 seconds, max 120." },
+        max_attempts: { type: "integer", description: "Optional number of fresh quote/simulate/execute attempts. Intent swaps use at least 3 attempts, max 5." },
+        mode: { type: "string", enum: ["preview", "intent_preview", "intent_execute"] },
         purpose: { type: "string" },
         user_intent: { type: "boolean" },
       },
@@ -1512,6 +1535,7 @@ const solanaToolDefinitions = [
         market: { type: "string" },
         reserve: { type: "string" },
         amount_ui: { type: "string" },
+        obligation_address: { type: "string" },
         mode: { type: "string", enum: ["preview", "prepare", "execute"] },
         purpose: { type: "string" },
         user_intent: { type: "boolean" },
@@ -1530,6 +1554,7 @@ const solanaToolDefinitions = [
         market: { type: "string" },
         reserve: { type: "string" },
         amount_ui: { type: "string" },
+        obligation_address: { type: "string" },
         mode: { type: "string", enum: ["preview", "prepare", "execute"] },
         purpose: { type: "string" },
         user_intent: { type: "boolean" },
@@ -1548,6 +1573,7 @@ const solanaToolDefinitions = [
         market: { type: "string" },
         reserve: { type: "string" },
         amount_ui: { type: "string" },
+        obligation_address: { type: "string" },
         mode: { type: "string", enum: ["preview", "prepare", "execute"] },
         purpose: { type: "string" },
         user_intent: { type: "boolean" },

package/.openclaw/extensions/agent-wallet/index.ts

@@ -76,7 +76,7 @@ function cachePreviewForApproval(userId, toolName, payload) {
   const cacheToolName = approvalPreviewToolName(toolName);
   if (!payload || payload.ok !== true || !payload.data || typeof payload.data !== "object") return;
   const approvalSource = payload.data;
-  if (!["preview", "prepare"].includes(String(approvalSource.mode || ""))) return;
+  if (!["preview", "prepare", "intent_preview"].includes(String(approvalSource.mode || ""))) return;
   if (!approvalSource.confirmation_summary || typeof approvalSource.confirmation_summary !== "object") return;
   pruneApprovalPreviewCache();
   const digest = previewDigest(approvalSource);
@@ -119,7 +119,21 @@ function cachedPreviewForToken(userId, toolName, token) {
   return cached.preview && typeof cached.preview === "object" ? cached.preview : null;
 }
 
-function requiresApprovedPreviewPayload(toolName) {
+function isSolanaSwapIntentPayload(payload) {
+  return (
+    payload &&
+    typeof payload === "object" &&
+    (String(payload.asset_type || "") === "solana-swap-intent" ||
+      String(payload.mode || "") === "intent_preview")
+  );
+}
+
+function isSolanaSwapIntentExecute(params) {
+  return String(params?.mode || "") === "intent_execute";
+}
+
+function requiresApprovedPreviewPayload(toolName, params = null) {
+  if (toolName === "swap_solana_tokens" && isSolanaSwapIntentExecute(params)) return false;
   return PREVIEW_BOUND_SWAP_TOOLS.has(toolName);
 }
 
@@ -536,7 +550,7 @@ async function issueApprovalToken(api, config, userId, toolName, previewPayload)
   if (!summary || typeof summary !== "object") {
     throw new Error(`No confirmation_summary available for ${toolName}.`);
   }
-  const summaryForToken = PREVIEW_BOUND_SWAP_TOOLS.has(toolName)
+  const summaryForToken = PREVIEW_BOUND_SWAP_TOOLS.has(toolName) && !isSolanaSwapIntentPayload(previewPayload)
     ? { ...summary, _preview_digest: previewDigest(previewPayload) }
     : { ...summary };
   const extraArgs = [
@@ -560,7 +574,12 @@ async function issueApprovalToken(api, config, userId, toolName, previewPayload)
 }
 
 async function attachApprovalForExecute(api, config, userId, toolName, effectiveParams) {
-  if (String(effectiveParams.mode || "") !== "execute") return null;
+  if (!["execute", "intent_execute"].includes(String(effectiveParams.mode || ""))) return null;
+  if (toolName === "swap_solana_tokens" && String(effectiveParams.mode || "") === "execute") {
+    throw new Error(
+      "Legacy exact-preview execute is disabled for Solana Jupiter swaps in OpenClaw. Use intent_preview, ask for explicit chat confirmation, then call intent_execute. The intent path binds approval to risk limits instead of a fragile Jupiter quote payload."
+    );
+  }
 
   const cached = latestCachedPreview(userId, toolName);
   if (cached?.preview && cached?.summary) {
@@ -571,14 +590,14 @@ async function attachApprovalForExecute(api, config, userId, toolName, effective
       toolName,
       cached.preview
     );
-    if (requiresApprovedPreviewPayload(toolName)) {
+    if (requiresApprovedPreviewPayload(toolName, effectiveParams)) {
       effectiveParams._approved_preview = cached.preview;
     }
     return cached;
   }
 
   if (
-    requiresApprovedPreviewPayload(toolName) &&
+    requiresApprovedPreviewPayload(toolName, effectiveParams) &&
     typeof effectiveParams.approval_token === "string" &&
     effectiveParams.approval_token.trim() &&
     effectiveParams._approved_preview === undefined
@@ -1312,7 +1331,7 @@ const solanaToolDefinitions = [
   },
   {
     name: "swap_solana_tokens",
-    description: `Preview, prepare, or execute a Solana token swap via Jupiter. Preview or prepare first. After the user explicitly confirms the shown summary in chat, call execute; the OpenClaw plugin handles the internal execution authorization automatically. ${WALLET_TOOL_ONLY_GUIDANCE}`,
+    description: `Preview or execute a Solana token swap via Jupiter. Use intent_preview followed by intent_execute after the user explicitly confirms the intent summary in chat; intent_execute fetches a fresh quote and only executes inside the approved limits. Do not use legacy execute for Solana swaps. The OpenClaw plugin handles internal execution authorization automatically. ${WALLET_TOOL_ONLY_GUIDANCE}`,
     optional: true,
     parameters: {
       type: "object",
@@ -1320,8 +1339,12 @@ const solanaToolDefinitions = [
         input_mint: { type: "string" },
         output_mint: { type: "string" },
         amount: { type: "number" },
-        slippage_bps: { type: "integer" },
-        mode: { type: "string", enum: ["preview", "prepare", "execute"] },
+        slippage_bps: { type: "integer", description: "Optional slippage tolerance in basis points. Defaults to 300 (3%) for Solana swaps." },
+        minimum_output_amount_raw: { type: "integer", description: "Optional approved minimum output in raw output token units for intent_preview. For intent swaps, overly strict values are clamped to the slippage floor." },
+        max_fee_lamports: { type: "integer" },
+        valid_for_seconds: { type: "integer", description: "Optional intent validity window in seconds. Intent swaps use at least 120 seconds, max 120." },
+        max_attempts: { type: "integer", description: "Optional number of fresh quote/simulate/execute attempts. Intent swaps use at least 3 attempts, max 5." },
+        mode: { type: "string", enum: ["preview", "intent_preview", "intent_execute"] },
         purpose: { type: "string" },
         user_intent: { type: "boolean" },
       },
@@ -1512,6 +1535,7 @@ const solanaToolDefinitions = [
         market: { type: "string" },
         reserve: { type: "string" },
         amount_ui: { type: "string" },
+        obligation_address: { type: "string" },
         mode: { type: "string", enum: ["preview", "prepare", "execute"] },
         purpose: { type: "string" },
         user_intent: { type: "boolean" },
@@ -1530,6 +1554,7 @@ const solanaToolDefinitions = [
         market: { type: "string" },
         reserve: { type: "string" },
         amount_ui: { type: "string" },
+        obligation_address: { type: "string" },
         mode: { type: "string", enum: ["preview", "prepare", "execute"] },
         purpose: { type: "string" },
         user_intent: { type: "boolean" },
@@ -1548,6 +1573,7 @@ const solanaToolDefinitions = [
         market: { type: "string" },
         reserve: { type: "string" },
         amount_ui: { type: "string" },
+        obligation_address: { type: "string" },
         mode: { type: "string", enum: ["preview", "prepare", "execute"] },
         purpose: { type: "string" },
         user_intent: { type: "boolean" },

package/.openclaw/extensions/agent-wallet/openclaw.plugin.json

@@ -222,6 +222,10 @@
         "type": "string",
         "description": "Optional Jupiter Swap API base URL."
       },
+      "jupiterSwapV2BaseUrl": {
+        "type": "string",
+        "description": "Optional Jupiter Swap API V2 base URL."
+      },
       "jupiterUltraBaseUrl": {
         "type": "string",
         "description": "Optional Jupiter Ultra API base URL."

package/.openclaw/extensions/agent-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayertech/agent-wallet-plugin",
-  "version": "0.1.24",
+  "version": "0.1.27",
   "description": "OpenClaw plugin bridge for the AgentLayer wallet runtime.",
   "type": "module",
   "license": "SEE LICENSE IN ../../../LICENSE",

package/.openclaw/extensions/agent-wallet/skills/wallet-operator/SKILL.md

@@ -11,9 +11,13 @@ Safety rules:
 - Use Kamino market/reserve reads before Kamino writes when the user needs lending context.
 - Use Aave account reads before Aave writes when the user needs EVM lending context.
 - For transfers, native staking, swaps, Aave writes, Jupiter Earn writes, and Kamino writes, use `preview` before `prepare` or `execute`.
+- For Solana Jupiter swaps through `swap_solana_tokens`, prefer `intent_preview` then `intent_execute` after explicit chat confirmation. The user confirms risk limits; the backend refreshes the quote and only executes inside those limits.
+- Solana swap intent defaults to at least 300 bps (3%) slippage, 120 seconds validity, and 3 fresh execution attempts. The backend computes the approved minimum output from the indicative output and slippage, clamps hand-tightened minimums to that floor, then executes through Jupiter Swap API V2 `/order` + `/execute` when available.
+- Metis `/swap` fallback builds use Jupiter dynamic slippage and a bounded `veryHigh` priority fee instead of the old `"auto"` priority mode.
+- Do not use legacy `execute` for Solana Jupiter swaps in OpenClaw. Exact quote-bound approval is too fragile for active markets and will be rejected by the bridge.
 - For `swap_solana_privately`, use `preview` and then `execute` after explicit user approval. Do not use `prepare` for this tool.
 - Use `prepare` only when the user clearly intends to produce an execution plan.
-- Use `execute` only after the host issues an `approval_token` bound to the exact previewed operation.
+- Use `execute` only after the user explicitly confirms the shown summary in chat. OpenClaw handles the internal approval token; do not ask for `/approve`, buttons, popups, or a manual token. For Solana swap intents, the token is bound to the approved intent limits instead of one fragile quote.
 - On `mainnet`, require an approval token that includes explicit mainnet confirmation before any execution.
 - Before any `mainnet` execute, restate the network, operation type, asset, amount, and destination, validator, or stake account.
 - If a preview or prepare result includes `confirmation_summary` or `mainnet_warning`, surface that summary before asking for confirmation.

package/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 ## Unreleased
 
+## v0.1.27 - 2026-05-27
+
+- Improved Solana swap fallback landing by enabling Jupiter dynamic slippage
+  and bounded `veryHigh` priority fees on the Metis `/swap` fallback path.
+- Hardened Kamino transaction execution with local simulation before send,
+  Kamino-specific build timeouts, and longer confirmation polling on mainnet.
+- Reused approved Kamino preview payloads during execute so OpenClaw no longer
+  needs to rebuild the same write path just to satisfy approval binding.
+- Added Kamino obligation pinning for `withdraw`, `borrow`, and `repay`, so
+  preview can require an explicit `obligation_address` and execute verifies the
+  built transaction references the selected obligation before signing.
+
+## v0.1.26 - 2026-05-26
+
+- Reworked Solana Jupiter swaps to prefer intent approvals, so OpenClaw confirms
+  risk limits and executes against a fresh quote instead of binding approval to
+  a fragile exact quote payload.
+- Added Jupiter Swap API V2 `/order` + `/execute` routing with managed landing
+  support and fallback routing for Solana swaps.
+- Hardened Solana swap intent defaults to 3% slippage, a 120-second execution
+  window, three fresh execution attempts, and safer minimum-output handling.
+- Fixed Jupiter V2 execution payload compatibility by sending
+  `lastValidBlockHeight` in the string form expected by the API.
+- Disabled legacy exact-preview Solana swap execute in the OpenClaw bridge to
+  prevent stale approval-token mismatches on active markets.
+
 ## v0.1.24 - 2026-05-23
 
 - Fixed the published npm package CLI metadata so

package/agent-wallet/README.md

@@ -88,7 +88,7 @@ Current safe tools:
 - `transfer_sol`
 - `stake_sol_native`
 - `transfer_spl_token`
-- `swap_solana_tokens`
+- `swap_solana_tokens` - Solana Jupiter swaps; prefer `intent_preview` -> chat confirmation -> `intent_execute` so execution refreshes the quote inside approved limits.
 - `swap_solana_privately` - Houdini-backed private Solana payout flow for same-token `SOL->SOL` or `USDC->USDC` transfers to a destination wallet.
 - `get_solana_private_swap_status`
 - `get_jupiter_earn_tokens`

package/agent-wallet/agent_wallet/config.py

@@ -45,6 +45,7 @@ class Settings(BaseSettings):
     wdk_evm_account_index: int = 0
 
     jupiter_api_base_url: str = "https://lite-api.jup.ag/swap/v1"
+    jupiter_swap_v2_api_base_url: str = "https://api.jup.ag/swap/v2"
     jupiter_ultra_api_base_url: str = "https://lite-api.jup.ag/ultra/v1"
     jupiter_price_api_base_url: str = "https://lite-api.jup.ag/price/v3"
     jupiter_portfolio_api_base_url: str = "https://api.jup.ag/portfolio/v1"