@agentlayer.tech/wallet 0.1.37 → 0.1.44

package/claude-code/plugins/agent-wallet/scripts/bootstrap_backend.sh

@@ -0,0 +1,136 @@
+#!/bin/sh
+set -eu
+
+# bootstrap_backend.sh — the in-CLI bridge to the npm installer.
+#
+# Claude Code's plugin marketplace only copies the plugin files (this MCP bridge
+# and its skill) into the cache. It does NOT lay down the Python backend runtime
+# (venv + agent_wallet package + server.py + sealed-secret handling) that the
+# bridge talks to. This script closes that gap: it detects whether the backend
+# runtime is present and, if not, delegates to the existing npm installer
+# (`npx @agentlayer.tech/wallet install --yes`) so the whole thing can be set up
+# without leaving the Claude Code CLI.
+#
+# Modes:
+#   bootstrap_backend.sh check     Report readiness only. Exit 0 if ready, 1 if not.
+#                                  Never installs anything.
+#   bootstrap_backend.sh install   Ensure the backend is installed (default).
+#                                  Idempotent: a no-op when already healthy.
+#
+# Used by:
+#   - /wallet-setup slash command  -> `install` (explicit, user-initiated).
+#   - SessionStart hook            -> `install` by default, so the backend sets
+#                                     itself up on first session. Set
+#                                     AGENT_WALLET_AUTO_BOOTSTRAP=0 to opt out and
+#                                     get only a soft hint to run /wallet-setup.
+
+MODE=${1:-install}
+
+PACKAGE_SPEC=${AGENT_WALLET_BOOTSTRAP_PACKAGE:-"@agentlayer.tech/wallet@latest"}
+OPENCLAW_HOME=${OPENCLAW_HOME:-"$HOME/.openclaw"}
+RUNTIME_CURRENT="$OPENCLAW_HOME/agent-wallet-runtime/current"
+
+# Resolve this script's plugin root with physical paths (pwd -P), the same way
+# run_mcp.sh does, so a marketplace symlink does not break the "../../../codex"
+# sibling math below.
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd -P)
+PLUGIN_ROOT=$(CDPATH= cd -- "$SCRIPT_DIR/.." && pwd -P)
+
+log() {
+  printf '%s\n' "$*" >&2
+}
+
+# Locate server.py exactly like run_mcp.sh: the plugin's own copy, then the codex
+# sibling in a repo checkout, then the installed runtime package. Keeping this in
+# lock-step with run_mcp.sh is what avoids a false "not installed" verdict in a
+# dev checkout, where run_mcp.sh resolves the codex sibling but this script used
+# to look only at the runtime path.
+resolve_server() {
+  if [ -f "$PLUGIN_ROOT/server.py" ]; then
+    printf '%s' "$PLUGIN_ROOT/server.py"
+  elif [ -f "$PLUGIN_ROOT/../../../codex/plugins/agent-wallet/server.py" ]; then
+    printf '%s' "$PLUGIN_ROOT/../../../codex/plugins/agent-wallet/server.py"
+  elif [ -f "$RUNTIME_CURRENT/codex/plugins/agent-wallet/server.py" ]; then
+    printf '%s' "$RUNTIME_CURRENT/codex/plugins/agent-wallet/server.py"
+  else
+    printf '%s' ''
+  fi
+}
+
+resolve_python() {
+  if [ -n "${AGENT_WALLET_PYTHON:-}" ]; then
+    printf '%s' "$AGENT_WALLET_PYTHON"
+  elif [ -x "$RUNTIME_CURRENT/agent-wallet/.venv/bin/python" ]; then
+    printf '%s' "$RUNTIME_CURRENT/agent-wallet/.venv/bin/python"
+  elif [ -x "$RUNTIME_CURRENT/agent-wallet/.runtime-venv/bin/python" ]; then
+    printf '%s' "$RUNTIME_CURRENT/agent-wallet/.runtime-venv/bin/python"
+  elif command -v python3 >/dev/null 2>&1; then
+    printf '%s' python3
+  else
+    printf '%s' ''
+  fi
+}
+
+# Readiness proxy: the resolved server.py exists and parses (ast.parse, no
+# bytecode written) — the same shallow check run_mcp.sh and `doctor` run before
+# exec. It deliberately does NOT verify that the venv/dependencies are installed:
+# importing or running the server would be too slow and flaky for a SessionStart
+# hook and risks false-negative reinstall loops. run_mcp.sh surfaces any missing
+# dependency with a clear error at first tool use, so this stays in lock-step
+# with what actually runs the server rather than being stricter than it.
+backend_ready() {
+  server=$(resolve_server)
+  [ -n "$server" ] || return 1
+  py=$(resolve_python)
+  [ -n "$py" ] || return 1
+  "$py" -c 'import sys, ast; ast.parse(open(sys.argv[1], encoding="utf-8").read())' "$server" 2>/dev/null
+}
+
+if backend_ready; then
+  [ "$MODE" = "check" ] || log "AgentLayer wallet backend already installed (server: $(resolve_server))."
+  exit 0
+fi
+
+if [ "$MODE" = "check" ]; then
+  log "AgentLayer wallet backend is not installed yet."
+  log "Run /wallet-setup inside Claude Code to install it."
+  exit 1
+fi
+
+# --- install path -----------------------------------------------------------
+
+if ! command -v npx >/dev/null 2>&1; then
+  log "Cannot install the AgentLayer wallet backend: npx (Node.js) was not found on PATH."
+  log "Install Node.js 18+ and re-run /wallet-setup, or run manually:"
+  log "  npx $PACKAGE_SPEC install --yes"
+  exit 1
+fi
+
+if ! command -v python3 >/dev/null 2>&1; then
+  log "Warning: python3 was not found on PATH. The installer needs Python >= 3.10 with venv."
+  log "Install Python and re-run /wallet-setup if the install below fails."
+fi
+
+log "Installing the AgentLayer wallet backend runtime via npm (this may take a minute)…"
+log "  -> npx $PACKAGE_SPEC install --yes"
+if ! npx -y "$PACKAGE_SPEC" install --yes; then
+  log "Backend install failed. Ensure Node.js 18+ and Python >= 3.10 (with venv) are installed, then re-run /wallet-setup."
+  exit 1
+fi
+
+# Re-pin the Claude Code cache copies so run_mcp.sh resolves OPENCLAW_HOME and the
+# freshly installed runtime correctly (pinClaudeCacheCopies / marketplace wiring).
+# --skip-enable: the plugin is already registered via the marketplace, so we only
+# want the file pinning, not another `claude plugin install`.
+log "Wiring the Claude Code bridge to the installed runtime…"
+npx -y "$PACKAGE_SPEC" claude-code install --yes --skip-enable || \
+  log "Note: could not re-pin the Claude Code bridge automatically; it will still resolve the default runtime."
+
+if backend_ready; then
+  log "Done. The AgentLayer wallet backend is installed."
+  log "Restart Claude Code (or reload the agent-wallet plugin) to activate the wallet tools."
+  exit 0
+fi
+
+log "Install completed but the backend did not verify. Run: npx $PACKAGE_SPEC doctor --deep"
+exit 1

package/claude-code/plugins/agent-wallet/scripts/run_mcp.sh

@@ -27,7 +27,7 @@ elif [ -f "$CODEX_SERVER" ]; then
 elif [ -f "$RUNTIME_CODEX_DIR/server.py" ]; then
   SERVER_PY=$(CDPATH= cd -- "$RUNTIME_CODEX_DIR" && pwd -P)/server.py
 else
-  printf '{"error":"agent-wallet server.py not found in plugin, codex sibling, or runtime package.","fix":"npx @agentlayer.tech/wallet install --yes"}\n' >&2
+  printf '{"error":"agent-wallet backend not installed yet (server.py not found in plugin, codex sibling, or runtime package).","fix":"Run /wallet-setup inside Claude Code, or: npx @agentlayer.tech/wallet install --yes"}\n' >&2
   exit 1
 fi
 
@@ -58,4 +58,9 @@ PY
   exit 1
 fi
 
+# Tag anonymous telemetry with this frontend so adoption can be split per host
+# (claude-code / codex / hermes / openclaw). An explicit override still wins.
+: "${AGENT_WALLET_HOST:=claude-code}"
+export AGENT_WALLET_HOST
+
 exec "$PYTHON_BIN" "$SERVER_PY"

package/codex/plugins/agent-wallet/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-wallet",
-  "version": "0.1.37",
+  "version": "0.1.44",
   "description": "Codex plugin bridge for the AgentLayer wallet runtime.",
   "author": {
     "name": "AgentLayer"

package/codex/plugins/agent-wallet/scripts/run_mcp.sh

@@ -39,4 +39,9 @@ PY
   exit 1
 fi
 
+# Tag anonymous telemetry with this frontend so adoption can be split per host
+# (claude-code / codex / hermes / openclaw). An explicit override still wins.
+: "${AGENT_WALLET_HOST:=codex}"
+export AGENT_WALLET_HOST
+
 exec "$PYTHON_BIN" "$PLUGIN_ROOT/server.py"

package/hermes/plugins/agent_wallet/plugin.yaml

@@ -1,5 +1,5 @@
 name: agent-wallet
-version: 0.1.37
+version: 0.1.44
 description: Thin Hermes Agent bridge to the existing AgentLayer/OpenClaw wallet backend
 provides_tools:
   - agent_wallet_tools

package/hermes/plugins/agent_wallet/tools.py

@@ -319,6 +319,9 @@ def _cli_env(package_root: Path) -> dict[str, str]:
     env = dict(os.environ)
     prior = env.get("PYTHONPATH", "")
     env["PYTHONPATH"] = str(package_root) if not prior else f"{package_root}{os.pathsep}{prior}"
+    # Tag anonymous telemetry with this frontend so adoption can be split per
+    # host (claude-code / codex / hermes / openclaw). An explicit override wins.
+    env.setdefault("AGENT_WALLET_HOST", "hermes")
     if not env.get("AGENT_WALLET_BOOT_KEY"):
         key_file = env.get("AGENT_WALLET_BOOT_KEY_FILE", "").strip()
         if key_file:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayer.tech/wallet",
-  "version": "0.1.37",
+  "version": "0.1.44",
   "description": "NPM installer for the OpenClaw Agent Wallet local runtime.",
   "type": "module",
   "repository": {
@@ -46,6 +46,7 @@
     "agent-wallet/pyproject.toml",
     ".openclaw/AGENTS.md",
     ".openclaw/extensions/agent-wallet/",
+    ".claude-plugin/marketplace.json",
     "codex/plugins/agent-wallet/",
     "claude-code/plugins/agent-wallet/",
     "hermes/plugins/agent_wallet/",

package/wdk-btc-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-btc-wallet",
-  "version": "0.1.37",
+  "version": "0.1.44",
   "private": true,
   "type": "module",
   "description": "Separate BTC-only wallet service built on Tether WDK.",

package/wdk-evm-wallet/README.md

@@ -20,6 +20,8 @@ Current scope:
 - fetch fee-rate suggestions
 - fetch read-only Velora swap quotes for supported mainnet ERC-20 and native ETH pairs
 - execute Velora ERC-20 and native ETH swaps on supported mainnet networks through the local wallet account
+- fetch read-only Uniswap Trading API swap quotes (CLASSIC routing) for native ETH and ERC-20 pairs on ethereum/base
+- execute Uniswap Trading API swaps (native ETH and ERC-20 inputs) with Permit2 EIP-712 signing for ERC-20 inputs
 - fetch Aave V3 account data on supported mainnet networks
 - fetch Aave V3 reserve catalog on supported mainnet networks
 - fetch Aave V3 per-reserve user positions on supported mainnet networks
@@ -101,6 +103,8 @@ The active network is persistent and can be switched without changing code.
 - `POST /v1/evm/aave/repay/send`
 - `POST /v1/evm/swap/quote`
 - `POST /v1/evm/swap/send`
+- `POST /v1/evm/uniswap/swap/quote`
+- `POST /v1/evm/uniswap/swap/send`
 - `POST /v1/evm/transfer/quote`
 - `POST /v1/evm/transfer/send`
 - `POST /v1/evm/token-transfer/quote`
@@ -158,6 +162,26 @@ Environment variables:
 - `WDK_EVM_SEPOLIA_RPC_URL`
 - `WDK_EVM_BASE_RPC_URL`
 - `WDK_EVM_BASE_SEPOLIA_RPC_URL`
+- `UNISWAP_API_KEY`
+- `UNISWAP_TRADING_API_BASE_URL`
+- `UNISWAP_ROUTER_VERSION`
+- `UNISWAP_DEFAULT_SLIPPAGE_BPS`
+
+Swap providers:
+
+- the runtime exposes three independent swap surfaces: Velora (`/v1/evm/swap/*`),
+  LI.FI cross-chain (`/v1/evm/lifi/*`), and Uniswap Trading API
+  (`/v1/evm/uniswap/swap/*`) — always keep more than one route available
+- Uniswap Trading API support is limited to `ethereum` and `base`, `EXACT_INPUT`,
+  and CLASSIC routing only; non-CLASSIC quotes (UniswapX Dutch/Priority) are rejected
+- native ETH inputs need no approval or signature; ERC-20 inputs are pulled via
+  Permit2 (`0x000000000022D473030F116dDEE9F6B43aC78BA3`) and require a per-swap
+  Permit2 EIP-712 signature produced locally by the wallet account
+- the `/swap` response `to` address is checked against a pinned Universal Router
+  allow-list before broadcast, and every swap is simulated first
+- `UNISWAP_API_KEY` is required for the Uniswap routes; it identifies the
+  integrator (this service), not an end user — swaps are scoped per request by the
+  active wallet address, so a single key never mixes users
 
 Gateway mode:
 
@@ -179,6 +203,7 @@ Local security note:
 - seed reveal is password-gated and separate from normal agent operations
 - Velora swap support is currently limited to `ethereum` and `base` ERC-20 and native ETH pairs
 - the underlying WDK Velora package is still beta; test swap execution carefully before relying on it
+- Uniswap Trading API swaps perform a Permit2-scoped ERC-20 approval for ERC-20 inputs; if a send fails after approval, the service attempts to restore the original allowance
 - Aave V3 support is currently limited to `ethereum` and `base`
 - Aave `supply` and `repay` may perform pool-scoped ERC-20 approvals; if a send fails after approval, the service attempts to restore the original allowance
 - Aave delegated `onBehalfOf` operations and third-party withdraw destinations are intentionally not exposed in this runtime

package/wdk-evm-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-evm-wallet",
-  "version": "0.1.37",
+  "version": "0.1.44",
   "private": true,
   "type": "module",
   "description": "Separate EVM wallet service built on Tether WDK.",
@@ -11,7 +11,9 @@
     "check": "node --check src/server.js && node --check src/wdk_evm_wallet.js && node --check src/config.js && node --check src/json.js && node --check src/local_vault.js && node --check src/network_state.js",
     "test:swap-runtime": "node --test --test-concurrency=1 tests/smoke_swap_runtime.mjs",
     "test:aave-runtime": "node --test --test-concurrency=1 tests/smoke_aave_runtime.mjs",
-    "test:lido-runtime": "node --test --test-concurrency=1 tests/smoke_lido_runtime.mjs"
+    "test:lido-runtime": "node --test --test-concurrency=1 tests/smoke_lido_runtime.mjs",
+    "test:uniswap-runtime": "node --test --test-concurrency=1 tests/smoke_uniswap_runtime.mjs",
+    "test:unit": "node --test tests/unit_uniswap_helpers.mjs"
   },
   "dependencies": {
     "@tetherto/wdk": "^1.0.0-beta.9",

package/wdk-evm-wallet/src/config.js

@@ -9,6 +9,23 @@ const DEFAULTS = {
   network: "sepolia",
   unlockTimeoutSeconds: 0,
 };
+
+// Read this package's version once at module load. Surfaced via /health so the
+// host autostart can detect a stale long-running daemon (old code in memory)
+// after a release and restart it. Falls back to "0.0.0" if package.json is
+// unreadable — a value that will simply look "stale" and trigger a restart.
+function readPackageVersion() {
+  try {
+    const pkgUrl = new URL("../package.json", import.meta.url);
+    const pkg = JSON.parse(fs.readFileSync(pkgUrl, "utf8"));
+    const version = String(pkg.version || "").trim();
+    return version || "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+
+const PACKAGE_VERSION = readPackageVersion();
 const DEFAULT_PROVIDER_GATEWAY_URL = "https://agent-layer-production.up.railway.app";
 const ENFORCED_GATEWAY_MAINNETS = new Set(["ethereum", "base"]);
 
@@ -257,6 +274,20 @@ export function loadConfig(env = process.env) {
     },
   };
 
+  // Route Uniswap Trading API calls through the provider-gateway by default so the
+  // Uniswap key lives only in the gateway (never in a per-release wallet .env). When
+  // the base URL points at the gateway we authenticate with the gateway bearer and
+  // let the gateway inject x-api-key; an explicit non-gateway base URL falls back to
+  // the legacy direct mode (local UNISWAP_API_KEY + x-api-key).
+  const gatewayBaseTrimmed = String(providerGatewayUrl || "").replace(/\/+$/, "");
+  const uniswapTradingApiBaseUrl =
+    String(env.UNISWAP_TRADING_API_BASE_URL ?? "").trim() ||
+    (gatewayBaseTrimmed
+      ? `${gatewayBaseTrimmed}/v1/evm/uniswap`
+      : "https://trade-api.gateway.uniswap.org/v1");
+  const uniswapViaGateway =
+    Boolean(gatewayBaseTrimmed) && uniswapTradingApiBaseUrl.startsWith(gatewayBaseTrimmed);
+
   return {
     host,
     port: parseInteger(env.PORT, DEFAULTS.port, "PORT"),
@@ -284,6 +315,22 @@ export function loadConfig(env = process.env) {
     lifiDefaultDenyBridges: String(env.LIFI_DEFAULT_DENY_BRIDGES ?? "").trim() || "mayan",
     lidoApiBaseUrl: String(env.LIDO_API_BASE_URL ?? "").trim() || "https://eth-api.lido.fi/v1",
     lidoReferralAddress: String(env.LIDO_REFERRAL_ADDRESS ?? "").trim(),
+    uniswapTradingApiBaseUrl,
+    uniswapViaGateway,
+    providerGatewayToken,
+    uniswapApiKey: String(env.UNISWAP_API_KEY ?? "").trim(),
+    uniswapRouterVersion: String(env.UNISWAP_ROUTER_VERSION ?? "").trim() || "2.0",
+    // 300 bps (3%) default mirrors the Solana swap-intent floor. Active markets
+    // (Base re-prices every block) drift during the multi-step preview -> approval
+    // -> execute window; a 0.5% floor rejected ordinary drift. The quote
+    // fingerprint binds only the swap intent, so this floor — not an exact-output
+    // pin — is the real slippage guard. Override per-call or via env for tight swaps.
+    uniswapDefaultSlippageBps: parseInteger(
+      env.UNISWAP_DEFAULT_SLIPPAGE_BPS,
+      300,
+      "UNISWAP_DEFAULT_SLIPPAGE_BPS"
+    ),
+    version: PACKAGE_VERSION,
     networkProfiles,
   };
 }

package/wdk-evm-wallet/src/server.js

@@ -40,7 +40,10 @@ function normalizeErrorCode(errorCode, pathname, message) {
     code === "aave_cleanup_failed" ||
     code === "token_transfer_failed" ||
     code === "fee_limit_exceeded" ||
-    code === "token_read_failed"
+    code === "token_read_failed" ||
+    code === "uniswap_api_key_missing" ||
+    code === "uniswap_unsupported_route" ||
+    code === "uniswap_unexpected_router"
   ) {
     return code;
   }
@@ -129,10 +132,17 @@ function errorStatusCode(errorCode, fallback = 400) {
     errorCode === "aave_fee_unavailable" ||
     errorCode === "aave_cleanup_failed" ||
     errorCode === "token_transfer_failed" ||
-    errorCode === "fee_limit_exceeded"
+    errorCode === "fee_limit_exceeded" ||
+    errorCode === "uniswap_api_key_missing"
   ) {
     return 400;
   }
+  if (errorCode === "uniswap_unsupported_route") {
+    return 422;
+  }
+  if (errorCode === "uniswap_unexpected_router") {
+    return 502;
+  }
   if (errorCode === "token_read_failed") {
     return 502;
   }
@@ -272,7 +282,7 @@ async function handleRequest(request, response) {
       return sendJson(response, 200, {
         ok: true,
         service: "wdk-evm-wallet",
-        version: "0.1.0",
+        version: config.version,
         wallet: "evm",
         network: runtimeConfig.network,
         chainId: runtimeConfig.chainId,
@@ -531,6 +541,18 @@ async function handleRequest(request, response) {
       return sendJson(response, 200, { ok: true, data });
     }
 
+    if (method === "POST" && url.pathname === "/v1/evm/uniswap/swap/quote") {
+      const body = await withResolvedNetwork(await withResolvedSeedOrAddress(await readJsonBody(request)));
+      const data = await service.quoteUniswapSwap(body);
+      return sendJson(response, 200, { ok: true, data });
+    }
+
+    if (method === "POST" && url.pathname === "/v1/evm/uniswap/swap/send") {
+      const body = await withResolvedNetwork(await withResolvedSeed(await readJsonBody(request)));
+      const data = await service.sendUniswapSwap(body);
+      return sendJson(response, 200, { ok: true, data });
+    }
+
     if (method === "POST" && url.pathname === "/v1/evm/transfer/quote") {
       const body = await withResolvedNetwork(await withResolvedSeed(await readJsonBody(request)));
       const data = await service.quoteNativeTransfer(body);