@agentlayer.tech/wallet 0.1.43 → 0.1.47

package/claude-code/plugins/agent-wallet/scripts/bootstrap_backend.sh

@@ -0,0 +1,136 @@
+#!/bin/sh
+set -eu
+
+# bootstrap_backend.sh — the in-CLI bridge to the npm installer.
+#
+# Claude Code's plugin marketplace only copies the plugin files (this MCP bridge
+# and its skill) into the cache. It does NOT lay down the Python backend runtime
+# (venv + agent_wallet package + server.py + sealed-secret handling) that the
+# bridge talks to. This script closes that gap: it detects whether the backend
+# runtime is present and, if not, delegates to the existing npm installer
+# (`npx @agentlayer.tech/wallet install --yes`) so the whole thing can be set up
+# without leaving the Claude Code CLI.
+#
+# Modes:
+#   bootstrap_backend.sh check     Report readiness only. Exit 0 if ready, 1 if not.
+#                                  Never installs anything.
+#   bootstrap_backend.sh install   Ensure the backend is installed (default).
+#                                  Idempotent: a no-op when already healthy.
+#
+# Used by:
+#   - /wallet-setup slash command  -> `install` (explicit, user-initiated).
+#   - SessionStart hook            -> `install` by default, so the backend sets
+#                                     itself up on first session. Set
+#                                     AGENT_WALLET_AUTO_BOOTSTRAP=0 to opt out and
+#                                     get only a soft hint to run /wallet-setup.
+
+MODE=${1:-install}
+
+PACKAGE_SPEC=${AGENT_WALLET_BOOTSTRAP_PACKAGE:-"@agentlayer.tech/wallet@latest"}
+OPENCLAW_HOME=${OPENCLAW_HOME:-"$HOME/.openclaw"}
+RUNTIME_CURRENT="$OPENCLAW_HOME/agent-wallet-runtime/current"
+
+# Resolve this script's plugin root with physical paths (pwd -P), the same way
+# run_mcp.sh does, so a marketplace symlink does not break the "../../../codex"
+# sibling math below.
+SCRIPT_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd -P)
+PLUGIN_ROOT=$(CDPATH= cd -- "$SCRIPT_DIR/.." && pwd -P)
+
+log() {
+  printf '%s\n' "$*" >&2
+}
+
+# Locate server.py exactly like run_mcp.sh: the plugin's own copy, then the codex
+# sibling in a repo checkout, then the installed runtime package. Keeping this in
+# lock-step with run_mcp.sh is what avoids a false "not installed" verdict in a
+# dev checkout, where run_mcp.sh resolves the codex sibling but this script used
+# to look only at the runtime path.
+resolve_server() {
+  if [ -f "$PLUGIN_ROOT/server.py" ]; then
+    printf '%s' "$PLUGIN_ROOT/server.py"
+  elif [ -f "$PLUGIN_ROOT/../../../codex/plugins/agent-wallet/server.py" ]; then
+    printf '%s' "$PLUGIN_ROOT/../../../codex/plugins/agent-wallet/server.py"
+  elif [ -f "$RUNTIME_CURRENT/codex/plugins/agent-wallet/server.py" ]; then
+    printf '%s' "$RUNTIME_CURRENT/codex/plugins/agent-wallet/server.py"
+  else
+    printf '%s' ''
+  fi
+}
+
+resolve_python() {
+  if [ -n "${AGENT_WALLET_PYTHON:-}" ]; then
+    printf '%s' "$AGENT_WALLET_PYTHON"
+  elif [ -x "$RUNTIME_CURRENT/agent-wallet/.venv/bin/python" ]; then
+    printf '%s' "$RUNTIME_CURRENT/agent-wallet/.venv/bin/python"
+  elif [ -x "$RUNTIME_CURRENT/agent-wallet/.runtime-venv/bin/python" ]; then
+    printf '%s' "$RUNTIME_CURRENT/agent-wallet/.runtime-venv/bin/python"
+  elif command -v python3 >/dev/null 2>&1; then
+    printf '%s' python3
+  else
+    printf '%s' ''
+  fi
+}
+
+# Readiness proxy: the resolved server.py exists and parses (ast.parse, no
+# bytecode written) — the same shallow check run_mcp.sh and `doctor` run before
+# exec. It deliberately does NOT verify that the venv/dependencies are installed:
+# importing or running the server would be too slow and flaky for a SessionStart
+# hook and risks false-negative reinstall loops. run_mcp.sh surfaces any missing
+# dependency with a clear error at first tool use, so this stays in lock-step
+# with what actually runs the server rather than being stricter than it.
+backend_ready() {
+  server=$(resolve_server)
+  [ -n "$server" ] || return 1
+  py=$(resolve_python)
+  [ -n "$py" ] || return 1
+  "$py" -c 'import sys, ast; ast.parse(open(sys.argv[1], encoding="utf-8").read())' "$server" 2>/dev/null
+}
+
+if backend_ready; then
+  [ "$MODE" = "check" ] || log "AgentLayer wallet backend already installed (server: $(resolve_server))."
+  exit 0
+fi
+
+if [ "$MODE" = "check" ]; then
+  log "AgentLayer wallet backend is not installed yet."
+  log "Run /wallet-setup inside Claude Code to install it."
+  exit 1
+fi
+
+# --- install path -----------------------------------------------------------
+
+if ! command -v npx >/dev/null 2>&1; then
+  log "Cannot install the AgentLayer wallet backend: npx (Node.js) was not found on PATH."
+  log "Install Node.js 18+ and re-run /wallet-setup, or run manually:"
+  log "  npx $PACKAGE_SPEC install --yes"
+  exit 1
+fi
+
+if ! command -v python3 >/dev/null 2>&1; then
+  log "Warning: python3 was not found on PATH. The installer needs Python >= 3.10 with venv."
+  log "Install Python and re-run /wallet-setup if the install below fails."
+fi
+
+log "Installing the AgentLayer wallet backend runtime via npm (this may take a minute)…"
+log "  -> npx $PACKAGE_SPEC install --yes"
+if ! npx -y "$PACKAGE_SPEC" install --yes; then
+  log "Backend install failed. Ensure Node.js 18+ and Python >= 3.10 (with venv) are installed, then re-run /wallet-setup."
+  exit 1
+fi
+
+# Re-pin the Claude Code cache copies so run_mcp.sh resolves OPENCLAW_HOME and the
+# freshly installed runtime correctly (pinClaudeCacheCopies / marketplace wiring).
+# --skip-enable: the plugin is already registered via the marketplace, so we only
+# want the file pinning, not another `claude plugin install`.
+log "Wiring the Claude Code bridge to the installed runtime…"
+npx -y "$PACKAGE_SPEC" claude-code install --yes --skip-enable || \
+  log "Note: could not re-pin the Claude Code bridge automatically; it will still resolve the default runtime."
+
+if backend_ready; then
+  log "Done. The AgentLayer wallet backend is installed."
+  log "Restart Claude Code (or reload the agent-wallet plugin) to activate the wallet tools."
+  exit 0
+fi
+
+log "Install completed but the backend did not verify. Run: npx $PACKAGE_SPEC doctor --deep"
+exit 1

package/claude-code/plugins/agent-wallet/scripts/run_mcp.sh

@@ -27,7 +27,7 @@ elif [ -f "$CODEX_SERVER" ]; then
 elif [ -f "$RUNTIME_CODEX_DIR/server.py" ]; then
   SERVER_PY=$(CDPATH= cd -- "$RUNTIME_CODEX_DIR" && pwd -P)/server.py
 else
-  printf '{"error":"agent-wallet server.py not found in plugin, codex sibling, or runtime package.","fix":"npx @agentlayer.tech/wallet install --yes"}\n' >&2
+  printf '{"error":"agent-wallet backend not installed yet (server.py not found in plugin, codex sibling, or runtime package).","fix":"Run /wallet-setup inside Claude Code, or: npx @agentlayer.tech/wallet install --yes"}\n' >&2
   exit 1
 fi
 
@@ -58,4 +58,9 @@ PY
   exit 1
 fi
 
+# Tag anonymous telemetry with this frontend so adoption can be split per host
+# (claude-code / codex / hermes / openclaw). An explicit override still wins.
+: "${AGENT_WALLET_HOST:=claude-code}"
+export AGENT_WALLET_HOST
+
 exec "$PYTHON_BIN" "$SERVER_PY"

package/codex/plugins/agent-wallet/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-wallet",
-  "version": "0.1.43",
+  "version": "0.1.47",
   "description": "Codex plugin bridge for the AgentLayer wallet runtime.",
   "author": {
     "name": "AgentLayer"

package/codex/plugins/agent-wallet/scripts/run_mcp.sh

@@ -39,4 +39,9 @@ PY
   exit 1
 fi
 
+# Tag anonymous telemetry with this frontend so adoption can be split per host
+# (claude-code / codex / hermes / openclaw). An explicit override still wins.
+: "${AGENT_WALLET_HOST:=codex}"
+export AGENT_WALLET_HOST
+
 exec "$PYTHON_BIN" "$PLUGIN_ROOT/server.py"

package/hermes/plugins/agent_wallet/plugin.yaml

@@ -1,5 +1,5 @@
 name: agent-wallet
-version: 0.1.43
+version: 0.1.47
 description: Thin Hermes Agent bridge to the existing AgentLayer/OpenClaw wallet backend
 provides_tools:
   - agent_wallet_tools

package/hermes/plugins/agent_wallet/tools.py

@@ -319,6 +319,9 @@ def _cli_env(package_root: Path) -> dict[str, str]:
     env = dict(os.environ)
     prior = env.get("PYTHONPATH", "")
     env["PYTHONPATH"] = str(package_root) if not prior else f"{package_root}{os.pathsep}{prior}"
+    # Tag anonymous telemetry with this frontend so adoption can be split per
+    # host (claude-code / codex / hermes / openclaw). An explicit override wins.
+    env.setdefault("AGENT_WALLET_HOST", "hermes")
     if not env.get("AGENT_WALLET_BOOT_KEY"):
         key_file = env.get("AGENT_WALLET_BOOT_KEY_FILE", "").strip()
         if key_file:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayer.tech/wallet",
-  "version": "0.1.43",
+  "version": "0.1.47",
   "description": "NPM installer for the OpenClaw Agent Wallet local runtime.",
   "type": "module",
   "repository": {
@@ -46,6 +46,7 @@
     "agent-wallet/pyproject.toml",
     ".openclaw/AGENTS.md",
     ".openclaw/extensions/agent-wallet/",
+    ".claude-plugin/marketplace.json",
     "codex/plugins/agent-wallet/",
     "claude-code/plugins/agent-wallet/",
     "hermes/plugins/agent_wallet/",

package/wdk-btc-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-btc-wallet",
-  "version": "0.1.43",
+  "version": "0.1.47",
   "private": true,
   "type": "module",
   "description": "Separate BTC-only wallet service built on Tether WDK.",

package/wdk-evm-wallet/README.md

@@ -26,6 +26,11 @@ Current scope:
 - fetch Aave V3 reserve catalog on supported mainnet networks
 - fetch Aave V3 per-reserve user positions on supported mainnet networks
 - quote and send narrow Aave V3 `supply`, `withdraw`, `borrow`, and `repay` operations
+- fetch Morpho vault discovery and detail data on supported mainnet networks
+- fetch Morpho market discovery and detail data on supported mainnet networks
+- fetch Morpho user vault and market positions on supported mainnet networks
+- quote and send narrow Morpho vault `supply` and `withdraw` operations
+- quote and send narrow Morpho market `supply_collateral`, `borrow`, `repay`, and `withdraw_collateral` operations
 - quote and send native transfers
 - quote and send ERC-20 transfers
 - fetch transaction receipts
@@ -41,6 +46,8 @@ The implementation follows the official WDK documentation:
 - Velora swap API reference: https://docs.wdk.tether.io/sdk/swap-modules/swap-velora-evm/api-reference
 - Aave lending overview: https://docs.wdk.tether.io/sdk/lending-modules/lending-aave-evm
 - Aave lending API reference: https://docs.wdk.tether.io/sdk/lending-modules/lending-aave-evm/api-reference
+- Morpho Build overview: https://morpho.org/build
+- Morpho offchain API docs: https://docs.morpho.org/tools/offchain/api/get-started/
 
 ## Why Separate
 
@@ -101,6 +108,21 @@ The active network is persistent and can be switched without changing code.
 - `POST /v1/evm/aave/borrow/send`
 - `POST /v1/evm/aave/repay/quote`
 - `POST /v1/evm/aave/repay/send`
+- `POST /v1/evm/morpho/vaults/get`
+- `POST /v1/evm/morpho/markets/get`
+- `POST /v1/evm/morpho/positions/get`
+- `POST /v1/evm/morpho/vault/supply/quote`
+- `POST /v1/evm/morpho/vault/supply/send`
+- `POST /v1/evm/morpho/vault/withdraw/quote`
+- `POST /v1/evm/morpho/vault/withdraw/send`
+- `POST /v1/evm/morpho/market/supply_collateral/quote`
+- `POST /v1/evm/morpho/market/supply_collateral/send`
+- `POST /v1/evm/morpho/market/borrow/quote`
+- `POST /v1/evm/morpho/market/borrow/send`
+- `POST /v1/evm/morpho/market/repay/quote`
+- `POST /v1/evm/morpho/market/repay/send`
+- `POST /v1/evm/morpho/market/withdraw_collateral/quote`
+- `POST /v1/evm/morpho/market/withdraw_collateral/send`
 - `POST /v1/evm/swap/quote`
 - `POST /v1/evm/swap/send`
 - `POST /v1/evm/uniswap/swap/quote`
@@ -162,11 +184,20 @@ Environment variables:
 - `WDK_EVM_SEPOLIA_RPC_URL`
 - `WDK_EVM_BASE_RPC_URL`
 - `WDK_EVM_BASE_SEPOLIA_RPC_URL`
+- `MORPHO_API_BASE_URL`
 - `UNISWAP_API_KEY`
 - `UNISWAP_TRADING_API_BASE_URL`
 - `UNISWAP_ROUTER_VERSION`
 - `UNISWAP_DEFAULT_SLIPPAGE_BPS`
 
+Morpho read-only support:
+
+- the runtime exposes Morpho discovery and account-read routes through the public
+  Morpho GraphQL API at `https://api.morpho.org/graphql` by default
+- Morpho support is currently limited to `ethereum` and `base` mainnet
+- vault and market discovery use fixed first-party queries rather than caller-provided
+  GraphQL strings
+
 Swap providers:
 
 - the runtime exposes three independent swap surfaces: Velora (`/v1/evm/swap/*`),