@agentlayer.tech/wallet 0.1.49 → 0.1.52

package/.openclaw/extensions/agent-wallet/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "agent-wallet",
   "name": "Agent Wallet",
   "description": "Official OpenClaw plugin bridge for the agent-wallet backends, including Solana, local BTC, and local EVM.",
-  "version": "0.1.49",
+  "version": "0.1.52",
   "contracts": {
     "tools": [
       "agentlayer_autonomous_approve",

package/.openclaw/extensions/agent-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayertech/agent-wallet-plugin",
-  "version": "0.1.49",
+  "version": "0.1.52",
   "description": "OpenClaw plugin bridge for the AgentLayer wallet runtime.",
   "type": "module",
   "license": "SEE LICENSE IN ../../../LICENSE",

package/CHANGELOG.md

@@ -2,6 +2,26 @@
 
 ## Unreleased
 
+## v0.1.52 - 2026-06-26
+
+- Fixed Morpho vault and market quote (preview) requests timing out under the
+  default 10 s HTTP budget. The Morpho SDK fetches vault state from
+  `api.morpho.org/graphql` and runs on-chain simulation before returning a
+  quote, which regularly exceeds 10 s. Added all six quote paths
+  (`/v1/evm/morpho/vault/{supply,withdraw}/quote` and
+  `/v1/evm/morpho/market/{supply_collateral,borrow,repay,withdraw_collateral}/quote`)
+  to `LONG_RUNNING_POST_PATHS` so they share the 120 s budget already applied
+  to the corresponding send paths.
+  - `agent-wallet/agent_wallet/providers/wdk_evm_local.py`
+- Extended the high-trust autonomous permission mode beyond Base swaps and made
+  it a single combined permission group. `/agentlayer-autonomous-approve`
+  enables both Base Velora/Uniswap swaps and supported EVM DeFi write tools
+  (Aave, Morpho vault/market, and Lido staking/withdrawal) on Ethereum/Base;
+  `/agentlayer-autonomous-revoke` disables both together. Covered execute calls
+  use the same fresh-preview/internal-approval path while retaining exact
+  summary and quote-fingerprint binding. Transfers, bridges, Solana swaps, and
+  generic contract calls remain outside this standing permission.
+
 ## v0.1.47 - 2026-06-16
 
 - Fixed Solana swaps of Token-2022 tokens with complex extensions (e.g. Backpack

package/VERSION

@@ -1 +1 @@
-0.1.49
+0.1.52

package/agent-wallet/agent_wallet/__init__.py

@@ -2,7 +2,7 @@
 
 # Keep in sync with package.json, pyproject.toml, and the npm installer version.
 # scripts/check_release_version.mjs enforces this on release.
-__version__ = "0.1.49"
+__version__ = "0.1.52"
 
 __all__ = [
     "config",

package/agent-wallet/agent_wallet/providers/wdk_evm_local.py

@@ -18,11 +18,17 @@ LONG_RUNNING_POST_PATHS = {
     "/v1/evm/aave/withdraw/send",
     "/v1/evm/aave/borrow/send",
     "/v1/evm/aave/repay/send",
+    "/v1/evm/morpho/vault/supply/quote",
     "/v1/evm/morpho/vault/supply/send",
+    "/v1/evm/morpho/vault/withdraw/quote",
     "/v1/evm/morpho/vault/withdraw/send",
+    "/v1/evm/morpho/market/supply_collateral/quote",
     "/v1/evm/morpho/market/supply_collateral/send",
+    "/v1/evm/morpho/market/borrow/quote",
     "/v1/evm/morpho/market/borrow/send",
+    "/v1/evm/morpho/market/repay/quote",
     "/v1/evm/morpho/market/repay/send",
+    "/v1/evm/morpho/market/withdraw_collateral/quote",
     "/v1/evm/morpho/market/withdraw_collateral/send",
     "/v1/evm/lido/stake_eth_for_wsteth/send",
     "/v1/evm/lido/wrap_steth/send",

package/agent-wallet/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "agent-wallet",
   "name": "Agent Wallet",
   "description": "Plugin-friendly wallet backend for OpenClaw agents with safe wallet tools and runtime instructions across Solana, local BTC, and local EVM.",
-  "version": "0.1.49",
+  "version": "0.1.52",
   "skills": ["skills/wallet-operator"],
   "configSchema": {
     "type": "object",

package/agent-wallet/pyproject.toml

@@ -4,13 +4,13 @@ build-backend = "hatchling.build"
 
 [project]
 name = "openclaw-agent-wallet"
-version = "0.1.49"
+version = "0.1.52"
 description = "Plugin-friendly wallet backend for OpenClaw agents"
 requires-python = ">=3.10"
 dependencies = [
     "fastmcp>=2.0.0",
     "httpx>=0.27.0",
-    "pydantic>=2.0.0",
+    "pydantic>=2.0.0,<2.13.0",
     "pydantic-settings>=2.0.0",
     "pynacl>=1.5.0",
     "python-dotenv>=1.0.0",

package/bin/openclaw-agent-wallet.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { spawnSync } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
 import crypto from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
@@ -15,6 +15,14 @@ const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, "utf8"));
 const packageVersion = packageJson.version;
 const UPDATE_CLI_PATH_ENV = "OPENCLAW_AGENT_WALLET_UPDATE_CLI_PATH";
 const UPDATE_PACKAGE_SPEC_ENV = "OPENCLAW_AGENT_WALLET_UPDATE_PACKAGE_SPEC";
+const DEFAULT_PROVIDER_GATEWAY_URL = "https://agent-layer-production.up.railway.app";
+const TELEMETRY_SPOOL_NAME = "telemetry_spool.jsonl";
+const TELEMETRY_ID_NAME = "telemetry_id";
+const TELEMETRY_LAST_FLUSH_NAME = "telemetry_last_flush";
+const TELEMETRY_FLUSH_THROTTLE_SECONDS = 20;
+const TELEMETRY_FORCE_LINES = 25;
+const TELEMETRY_MAX_EVENTS_PER_FLUSH = 100;
+const TELEMETRY_HTTP_TIMEOUT_MS = 1500;
 
 function printHelp() {
   console.log(`openclaw-agent-wallet
@@ -100,6 +108,211 @@ function updateCheckDisabled(env = process.env) {
   return ["1", "true", "yes", "on"].includes(raw);
 }
 
+function telemetryDisabled(env = process.env) {
+  const raw = String(env.AGENT_WALLET_NO_TELEMETRY || "").trim().toLowerCase();
+  return ["1", "true", "yes", "on"].includes(raw);
+}
+
+function telemetryPath(name, env = process.env) {
+  return path.join(resolveOpenclawHome(env), name);
+}
+
+function telemetryInstallId(env = process.env) {
+  const idPath = telemetryPath(TELEMETRY_ID_NAME, env);
+  try {
+    const existing = fs.readFileSync(idPath, "utf8").trim();
+    if (existing) return existing;
+  } catch {
+    // Create below.
+  }
+  const next = crypto.randomUUID ? crypto.randomUUID().replaceAll("-", "") : crypto.randomBytes(16).toString("hex");
+  try {
+    fs.mkdirSync(path.dirname(idPath), { recursive: true });
+    fs.writeFileSync(idPath, next, { mode: 0o600 });
+  } catch {
+    // Telemetry must not affect install flow.
+  }
+  return next;
+}
+
+function telemetryHost(host = "", env = process.env) {
+  const raw = String(host || env.AGENT_WALLET_HOST || "").trim().toLowerCase();
+  return ["claude-code", "codex", "hermes", "openclaw"].includes(raw) ? raw : "unknown";
+}
+
+function telemetrySource(env = process.env) {
+  const explicit = String(env.AGENT_WALLET_INSTALL_SOURCE || "").trim().toLowerCase();
+  if (explicit) return explicit.replace(/[^a-z0-9_]/g, "_").slice(0, 48);
+  return env.npm_execpath || String(env.npm_config_user_agent || "").includes("npm")
+    ? "npx"
+    : "global_cli";
+}
+
+function telemetryGatewayUrl(env = process.env) {
+  return String(env.PROVIDER_GATEWAY_URL || DEFAULT_PROVIDER_GATEWAY_URL).trim().replace(/\/+$/, "");
+}
+
+function telemetryAppend(payload, env = process.env) {
+  const spool = telemetryPath(TELEMETRY_SPOOL_NAME, env);
+  fs.mkdirSync(path.dirname(spool), { recursive: true });
+  fs.appendFileSync(spool, `${JSON.stringify(payload)}\n`, { encoding: "utf8" });
+}
+
+function telemetrySpoolLineCount(env = process.env) {
+  try {
+    const spool = telemetryPath(TELEMETRY_SPOOL_NAME, env);
+    return fs.readFileSync(spool, "utf8").split(/\r?\n/).filter(Boolean).length;
+  } catch {
+    return 0;
+  }
+}
+
+function telemetryShouldFlush(env = process.env) {
+  const count = telemetrySpoolLineCount(env);
+  if (count === 0) return false;
+  if (count >= TELEMETRY_FORCE_LINES) return true;
+  try {
+    const last = Number(fs.readFileSync(telemetryPath(TELEMETRY_LAST_FLUSH_NAME, env), "utf8").trim() || "0");
+    return Date.now() / 1000 - last >= TELEMETRY_FLUSH_THROTTLE_SECONDS;
+  } catch {
+    return true;
+  }
+}
+
+function telemetryMarkFlush(env = process.env) {
+  try {
+    fs.writeFileSync(telemetryPath(TELEMETRY_LAST_FLUSH_NAME, env), String(Date.now() / 1000));
+  } catch {
+    // ignored
+  }
+}
+
+function telemetrySpawnFlush(env = process.env, force = false) {
+  if (!force && !telemetryShouldFlush(env)) return;
+  telemetryMarkFlush(env);
+  try {
+    const child = spawn(process.execPath, [cliPath, "--telemetry-flush"], {
+      detached: true,
+      stdio: "ignore",
+      env,
+    });
+    child.unref();
+  } catch {
+    // ignored
+  }
+}
+
+function recordCliTelemetry(event, { commandName, host = "", ok = true, args = [], flush = true } = {}) {
+  try {
+    if (telemetryDisabled()) return;
+    if (args && hasFlag(args, "--dry-run")) return;
+    const payload = {
+      event,
+      install_id: telemetryInstallId(),
+      host: telemetryHost(host),
+      tool: "",
+      backend: "",
+      plugin_version: packageVersion,
+      ok: Boolean(ok),
+      ts: Math.floor(Date.now() / 1000),
+      source: telemetrySource(),
+      command: String(commandName || "").trim().toLowerCase().replace(/-/g, "_").slice(0, 48),
+    };
+    telemetryAppend(payload);
+    if (flush) telemetrySpawnFlush(process.env, true);
+  } catch {
+    // Telemetry must never affect CLI behavior.
+  }
+}
+
+async function telemetryPost(url, line) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), TELEMETRY_HTTP_TIMEOUT_MS);
+  try {
+    const response = await fetch(url, {
+      method: "POST",
+      body: line,
+      headers: { "Content-Type": "application/json" },
+      signal: controller.signal,
+    });
+    return response.ok;
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+async function telemetryFlushMain(env = process.env) {
+  if (telemetryDisabled(env)) return 0;
+  const spool = telemetryPath(TELEMETRY_SPOOL_NAME, env);
+  const claim = `${spool}.flushing.${process.pid}`;
+  try {
+    fs.renameSync(spool, claim);
+  } catch {
+    return 0;
+  }
+
+  let lines = [];
+  try {
+    lines = fs.readFileSync(claim, "utf8").split(/\r?\n/).filter(Boolean);
+  } catch {
+    lines = [];
+  }
+
+  const url = `${telemetryGatewayUrl(env)}/v1/telemetry`;
+  const failed = [];
+  let sent = 0;
+  for (const line of lines) {
+    if (sent >= TELEMETRY_MAX_EVENTS_PER_FLUSH) {
+      failed.push(line);
+      continue;
+    }
+    if (await telemetryPost(url, line)) {
+      sent += 1;
+    } else {
+      failed.push(line);
+    }
+  }
+
+  if (failed.length) {
+    try {
+      fs.appendFileSync(spool, `${failed.join("\n")}\n`, { encoding: "utf8" });
+    } catch {
+      // ignored
+    }
+  }
+  try {
+    fs.unlinkSync(claim);
+  } catch {
+    // ignored
+  }
+  return 0;
+}
+
+function runWithCliTelemetry(fn, { startEvent, successEvent, failedEvent, commandName, host = "", args = [] }) {
+  recordCliTelemetry(startEvent, { commandName, host, ok: true, args, flush: false });
+  let code;
+  try {
+    code = fn();
+  } catch (error) {
+    recordCliTelemetry(failedEvent, {
+      commandName,
+      host,
+      ok: false,
+      args,
+    });
+    throw error;
+  }
+  recordCliTelemetry(code === 0 ? successEvent : failedEvent, {
+    commandName,
+    host,
+    ok: code === 0,
+    args,
+  });
+  return code;
+}
+
 // Shared with the Python runtime (agent_wallet/update_check.py): the cache lives
 // under OPENCLAW_HOME/agent-wallet-runtime regardless of OPENCLAW_INSTALL_ROOT.
 function updateCheckCachePath(env = process.env) {
@@ -1802,6 +2015,10 @@ function runClaudeCodeInstall(args) {
 const args = process.argv.slice(2);
 const command = args[0] || "install";
 
+if (command === "--telemetry-flush") {
+  process.exit(await telemetryFlushMain());
+}
+
 if (command === "--help" || command === "-h" || command === "help") {
   printHelp();
   process.exit(0);
@@ -1830,11 +2047,35 @@ if (command === "status") {
 }
 
 if (command === "install" || command === "setup") {
-  process.exit(runInstall(args.slice(1), { commandName: "install" }));
+  const commandArgs = args.slice(1);
+  process.exit(
+    runWithCliTelemetry(
+      () => runInstall(commandArgs, { commandName: "install" }),
+      {
+        startEvent: "install_start",
+        successEvent: "install_success",
+        failedEvent: "install_failed",
+        commandName: "install",
+        args: commandArgs,
+      },
+    ),
+  );
 }
 
 if (command === "update") {
-  process.exit(runUpdate(args.slice(1)));
+  const commandArgs = args.slice(1);
+  process.exit(
+    runWithCliTelemetry(
+      () => runUpdate(commandArgs),
+      {
+        startEvent: "update_start",
+        successEvent: "update_success",
+        failedEvent: "update_failed",
+        commandName: "update",
+        args: commandArgs,
+      },
+    ),
+  );
 }
 
 if (command === "rollback") {
@@ -1844,7 +2085,20 @@ if (command === "rollback") {
 if (command === "hermes") {
   const subcommand = args[1] || "install";
   if (subcommand === "install" || subcommand === "setup") {
-    process.exit(runHermesInstall(args.slice(2)));
+    const commandArgs = args.slice(2);
+    process.exit(
+      runWithCliTelemetry(
+        () => runHermesInstall(commandArgs),
+        {
+          startEvent: "plugin_install_start",
+          successEvent: "plugin_install_success",
+          failedEvent: "plugin_install_failed",
+          commandName: "hermes_install",
+          host: "hermes",
+          args: commandArgs,
+        },
+      ),
+    );
   }
   console.error(`Unknown hermes command: ${subcommand}`);
   console.error("Run `openclaw-agent-wallet hermes install --yes` to connect Hermes Agent.");
@@ -1854,7 +2108,20 @@ if (command === "hermes") {
 if (command === "codex") {
   const subcommand = args[1] || "install";
   if (subcommand === "install" || subcommand === "setup") {
-    process.exit(runCodexInstall(args.slice(2)));
+    const commandArgs = args.slice(2);
+    process.exit(
+      runWithCliTelemetry(
+        () => runCodexInstall(commandArgs),
+        {
+          startEvent: "plugin_install_start",
+          successEvent: "plugin_install_success",
+          failedEvent: "plugin_install_failed",
+          commandName: "codex_install",
+          host: "codex",
+          args: commandArgs,
+        },
+      ),
+    );
   }
   console.error(`Unknown codex command: ${subcommand}`);
   console.error("Run `openclaw-agent-wallet codex install --yes` to connect Codex.");
@@ -1864,7 +2131,20 @@ if (command === "codex") {
 if (command === "claude-code") {
   const subcommand = args[1] || "install";
   if (subcommand === "install" || subcommand === "setup") {
-    process.exit(runClaudeCodeInstall(args.slice(2)));
+    const commandArgs = args.slice(2);
+    process.exit(
+      runWithCliTelemetry(
+        () => runClaudeCodeInstall(commandArgs),
+        {
+          startEvent: "plugin_install_start",
+          successEvent: "plugin_install_success",
+          failedEvent: "plugin_install_failed",
+          commandName: "claude_code_install",
+          host: "claude-code",
+          args: commandArgs,
+        },
+      ),
+    );
   }
   console.error(`Unknown claude-code command: ${subcommand}`);
   console.error("Run `openclaw-agent-wallet claude-code install --yes` to connect Claude Code.");
@@ -1872,7 +2152,18 @@ if (command === "claude-code") {
 }
 
 if (command.startsWith("-")) {
-  process.exit(runInstall(args, { commandName: "install" }));
+  process.exit(
+    runWithCliTelemetry(
+      () => runInstall(args, { commandName: "install" }),
+      {
+        startEvent: "install_start",
+        successEvent: "install_success",
+        failedEvent: "install_failed",
+        commandName: "install",
+        args,
+      },
+    ),
+  );
 }
 
 console.error(`Unknown command: ${command}`);

package/claude-code/plugins/agent-wallet/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-wallet",
   "displayName": "Agent Wallet",
-  "version": "0.1.49",
+  "version": "0.1.52",
   "description": "Claude Code bridge for the existing AgentLayer wallet runtime. Connects to Solana, Bitcoin, and EVM wallets without creating a new one.",
   "author": {
     "name": "AgentLayer"

package/claude-code/plugins/agent-wallet/scripts/bootstrap_backend.sh

@@ -113,7 +113,7 @@ fi
 
 log "Installing the AgentLayer wallet backend runtime via npm (this may take a minute)…"
 log "  -> npx $PACKAGE_SPEC install --yes"
-if ! npx -y "$PACKAGE_SPEC" install --yes; then
+if ! AGENT_WALLET_INSTALL_SOURCE=claude_marketplace_bootstrap npx -y "$PACKAGE_SPEC" install --yes; then
   log "Backend install failed. Ensure Node.js 18+ and Python >= 3.10 (with venv) are installed, then re-run /wallet-setup."
   exit 1
 fi
@@ -123,7 +123,7 @@ fi
 # --skip-enable: the plugin is already registered via the marketplace, so we only
 # want the file pinning, not another `claude plugin install`.
 log "Wiring the Claude Code bridge to the installed runtime…"
-npx -y "$PACKAGE_SPEC" claude-code install --yes --skip-enable || \
+AGENT_WALLET_INSTALL_SOURCE=claude_marketplace_bootstrap npx -y "$PACKAGE_SPEC" claude-code install --yes --skip-enable || \
   log "Note: could not re-pin the Claude Code bridge automatically; it will still resolve the default runtime."
 
 if backend_ready; then

package/codex/plugins/agent-wallet/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-wallet",
-  "version": "0.1.49",
+  "version": "0.1.52",
   "description": "Codex plugin bridge for the AgentLayer wallet runtime.",
   "author": {
     "name": "AgentLayer"

package/hermes/plugins/agent_wallet/plugin.yaml

@@ -1,5 +1,5 @@
 name: agent-wallet
-version: 0.1.49
+version: 0.1.52
 description: Thin Hermes Agent bridge to the existing AgentLayer/OpenClaw wallet backend
 provides_tools:
   - agent_wallet_tools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayer.tech/wallet",
-  "version": "0.1.49",
+  "version": "0.1.52",
   "description": "NPM installer for the OpenClaw Agent Wallet local runtime.",
   "type": "module",
   "repository": {

package/wdk-btc-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-btc-wallet",
-  "version": "0.1.49",
+  "version": "0.1.52",
   "private": true,
   "type": "module",
   "description": "Separate BTC-only wallet service built on Tether WDK.",

package/wdk-evm-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-evm-wallet",
-  "version": "0.1.49",
+  "version": "0.1.52",
   "private": true,
   "type": "module",
   "description": "Separate EVM wallet service built on Tether WDK.",