@agentlayer.tech/wallet 0.1.52 → 0.1.53

package/.openclaw/extensions/agent-wallet/dist/index.js

@@ -18,6 +18,17 @@ const PREVIEW_BOUND_SWAP_TOOLS = new Set([
   "flash_trade_open_position",
   "flash_trade_close_position",
 ]);
+const AUTONOMOUS_BASE_SWAP_TOOLS = new Set([
+  "swap_evm_tokens",
+  "swap_evm_uniswap_tokens",
+]);
+const AUTONOMOUS_DEFI_TOOLS = new Set([
+  "manage_evm_aave_position",
+  "manage_evm_lido_position",
+  "manage_evm_lido_withdrawal",
+  "manage_evm_morpho_market_position",
+  "manage_evm_morpho_vault_position",
+]);
 const approvalPreviewCache = new Map();
 const WALLET_TOOL_ONLY_GUIDANCE =
   "Use this wallet tool instead of shelling out to solana CLI, spl-token CLI, curl, or exec. If it fails, surface the wallet-tool error and stop rather than falling back to terminal commands.";
@@ -127,6 +138,17 @@ function requiresApprovedPreviewPayload(toolName, params = null) {
   return PREVIEW_BOUND_SWAP_TOOLS.has(toolName);
 }
 
+function shouldLetBackendAuthorizeAutonomousExecution(toolName, params, config) {
+  const isBaseSwapTool = AUTONOMOUS_BASE_SWAP_TOOLS.has(toolName);
+  const isDefiTool = AUTONOMOUS_DEFI_TOOLS.has(toolName);
+  if (!isBaseSwapTool && !isDefiTool) return false;
+  if (String(params?.mode || "") !== "execute") return false;
+  if (typeof params?.approval_token === "string" && params.approval_token.trim()) return false;
+  const network = String(params?.network || config?.network || selectedEvmNetwork || "").trim().toLowerCase();
+  if (isBaseSwapTool) return network === "base";
+  return network === "base" || network === "ethereum";
+}
+
 function looksLikeApprovalContextError(message) {
   const text = String(message || "").toLowerCase();
   return (
@@ -516,6 +538,7 @@ async function attachApprovalForExecute(api, config, userId, toolName, effective
   }
 
   if (effectiveParams.approval_token) return null;
+  if (shouldLetBackendAuthorizeAutonomousExecution(toolName, effectiveParams, config)) return null;
 
   throw new Error(APPROVAL_CONTEXT_MISSING_MESSAGE);
 }
@@ -697,6 +720,38 @@ const walletSessionToolDefinitions = [
       additionalProperties: false,
     },
   },
+  {
+    name: "agentlayer_autonomous_status",
+    description: "Return AgentLayer high-trust autonomous permission status for the combined base_swaps + defi_tools permission group.",
+    parameters: { type: "object", properties: {}, additionalProperties: false },
+  },
+  {
+    name: "agentlayer_autonomous_approve",
+    description:
+      "Enable high-trust autonomous execution for the combined permission group. The scope parameter is kept for compatibility; choosing base_swaps or defi_tools enables both Base Velora/Uniswap swaps and supported EVM DeFi management tools until revoked. This does not cover transfers, bridges, Solana swaps, or generic contract calls.",
+    parameters: {
+      type: "object",
+      properties: {
+        scope: { type: "string", enum: ["base_swaps", "defi_tools"], description: "Compatibility scope; either value enables the full autonomous permission group." },
+        purpose: { type: "string" },
+        user_intent: { type: "boolean" },
+      },
+      required: ["scope", "purpose", "user_intent"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "agentlayer_autonomous_revoke",
+    description: "Disable the full high-trust autonomous permission group. The scope parameter is kept for compatibility; either value revokes base_swaps and defi_tools together.",
+    parameters: {
+      type: "object",
+      properties: {
+        scope: { type: "string", enum: ["base_swaps", "defi_tools"], description: "Compatibility scope; either value revokes the full autonomous permission group." },
+      },
+      required: ["scope"],
+      additionalProperties: false,
+    },
+  },
   {
     name: "x402_search_services",
     description:
@@ -1689,6 +1744,105 @@ const evmToolDefinitions = [
       additionalProperties: false,
     },
   },
+  {
+    name: "get_evm_morpho_vaults",
+    description: "Get read-only Morpho vault discovery and detail data for the configured EVM network on supported mainnet chains. When listing, results are ordered (default: largest TVL first) and can be filtered by underlying asset.",
+    parameters: {
+      type: "object",
+      properties: {
+        vault_address: { type: "string", description: "Optional explicit vault address for a single-vault lookup." },
+        limit: { type: "integer", minimum: 1, maximum: 500 },
+        listed_only: { type: "boolean", description: "Filter to listed vaults only. Defaults to true." },
+        asset_address: { type: "string", description: "Optional underlying asset address filter (e.g. only USDC vaults)." },
+        order_by: {
+          type: "string",
+          enum: ["TotalAssetsUsd", "TotalAssets", "TotalSupply", "Liquidity", "LiquidityUsd", "Apy", "NetApy", "Address"],
+          description: "Sort field when listing. Defaults to TotalAssetsUsd.",
+        },
+        order_direction: { type: "string", enum: ["asc", "desc"], description: "Sort direction. Defaults to desc." },
+        network: { type: "string", enum: ["ethereum", "base"] },
+      },
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "get_evm_morpho_markets",
+    description: "Get read-only Morpho market discovery and detail data for the configured EVM network on supported mainnet chains. When listing, results are ordered (default: largest supply first) and can be filtered by free-text search or by collateral/loan asset.",
+    parameters: {
+      type: "object",
+      properties: {
+        market_id: { type: "string", description: "Optional explicit market id (32-byte hex) for a single-market lookup." },
+        limit: { type: "integer", minimum: 1, maximum: 500 },
+        listed_only: { type: "boolean", description: "Filter to listed markets only. Defaults to true." },
+        search: { type: "string", description: "Optional free-text search over market/asset symbols (e.g. 'wstETH')." },
+        collateral_asset_address: { type: "string", description: "Optional collateral asset address filter." },
+        loan_asset_address: { type: "string", description: "Optional loan asset address filter." },
+        order_by: {
+          type: "string",
+          enum: ["SupplyAssetsUsd", "BorrowAssetsUsd", "SupplyApy", "NetSupplyApy", "BorrowApy", "NetBorrowApy", "Utilization", "TotalLiquidityUsd", "Lltv"],
+          description: "Sort field when listing. Defaults to SupplyAssetsUsd.",
+        },
+        order_direction: { type: "string", enum: ["asc", "desc"], description: "Sort direction. Defaults to desc." },
+        network: { type: "string", enum: ["ethereum", "base"] },
+      },
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "get_evm_morpho_positions",
+    description: "Get read-only Morpho vault and market positions for the configured EVM wallet on supported mainnet chains.",
+    parameters: {
+      type: "object",
+      properties: {
+        network: { type: "string", enum: ["ethereum", "base"] },
+      },
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "manage_evm_morpho_vault_position",
+    description: "Preview, prepare, or execute a narrow Morpho vault operation on supported EVM mainnet networks. Supported operations are supply and withdraw. Preview or prepare first. After the user explicitly confirms the shown summary in chat, call execute; the OpenClaw plugin handles the internal execution authorization automatically.",
+    optional: true,
+    parameters: {
+      type: "object",
+      properties: {
+        operation: { type: "string", enum: ["supply", "withdraw"] },
+        token_address: { type: "string" },
+        vault_address: { type: "string" },
+        vault_preset: { type: "string" },
+        amount_raw: { type: "string" },
+        native_amount_raw: { type: "string" },
+        mode: { type: "string", enum: ["preview", "prepare", "execute"] },
+        purpose: { type: "string" },
+        user_intent: { type: "boolean" },
+        network: { type: "string", enum: ["ethereum", "base"] },
+      },
+      required: ["operation", "token_address", "mode", "purpose"],
+      additionalProperties: false,
+    },
+  },
+  {
+    name: "manage_evm_morpho_market_position",
+    description: "Preview, prepare, or execute a narrow Morpho market operation on supported EVM mainnet networks. Supported operations are supply_collateral, borrow, repay, and withdraw_collateral. Preview or prepare first. After the user explicitly confirms the shown summary in chat, call execute; the OpenClaw plugin handles the internal execution authorization automatically.",
+    optional: true,
+    parameters: {
+      type: "object",
+      properties: {
+        operation: { type: "string", enum: ["supply_collateral", "borrow", "repay", "withdraw_collateral"] },
+        token_address: { type: "string" },
+        market_id: { type: "string" },
+        market_preset: { type: "string" },
+        amount_raw: { type: "string" },
+        native_amount_raw: { type: "string" },
+        mode: { type: "string", enum: ["preview", "prepare", "execute"] },
+        purpose: { type: "string" },
+        user_intent: { type: "boolean" },
+        network: { type: "string", enum: ["ethereum", "base"] },
+      },
+      required: ["operation", "token_address", "mode", "purpose"],
+      additionalProperties: false,
+    },
+  },
   {
     name: "get_evm_swap_quote",
     description: "Get a read-only Velora quote for an ERC-20 or native ETH swap on supported EVM mainnet networks. This does not approve or execute a swap.",

package/.openclaw/extensions/agent-wallet/index.ts

@@ -22,6 +22,13 @@ const AUTONOMOUS_BASE_SWAP_TOOLS = new Set([
   "swap_evm_tokens",
   "swap_evm_uniswap_tokens",
 ]);
+const AUTONOMOUS_DEFI_TOOLS = new Set([
+  "manage_evm_aave_position",
+  "manage_evm_lido_position",
+  "manage_evm_lido_withdrawal",
+  "manage_evm_morpho_market_position",
+  "manage_evm_morpho_vault_position",
+]);
 const approvalPreviewCache = new Map();
 const WALLET_TOOL_ONLY_GUIDANCE =
   "Use this wallet tool instead of shelling out to solana CLI, spl-token CLI, curl, or exec. If it fails, surface the wallet-tool error and stop rather than falling back to terminal commands.";
@@ -131,12 +138,15 @@ function requiresApprovedPreviewPayload(toolName, params = null) {
   return PREVIEW_BOUND_SWAP_TOOLS.has(toolName);
 }
 
-function shouldLetBackendAuthorizeAutonomousBaseSwap(toolName, params, config) {
-  if (!AUTONOMOUS_BASE_SWAP_TOOLS.has(toolName)) return false;
+function shouldLetBackendAuthorizeAutonomousExecution(toolName, params, config) {
+  const isBaseSwapTool = AUTONOMOUS_BASE_SWAP_TOOLS.has(toolName);
+  const isDefiTool = AUTONOMOUS_DEFI_TOOLS.has(toolName);
+  if (!isBaseSwapTool && !isDefiTool) return false;
   if (String(params?.mode || "") !== "execute") return false;
   if (typeof params?.approval_token === "string" && params.approval_token.trim()) return false;
   const network = String(params?.network || config?.network || selectedEvmNetwork || "").trim().toLowerCase();
-  return network === "base";
+  if (isBaseSwapTool) return network === "base";
+  return network === "base" || network === "ethereum";
 }
 
 function looksLikeApprovalContextError(message) {
@@ -528,7 +538,7 @@ async function attachApprovalForExecute(api, config, userId, toolName, effective
   }
 
   if (effectiveParams.approval_token) return null;
-  if (shouldLetBackendAuthorizeAutonomousBaseSwap(toolName, effectiveParams, config)) return null;
+  if (shouldLetBackendAuthorizeAutonomousExecution(toolName, effectiveParams, config)) return null;
 
   throw new Error(APPROVAL_CONTEXT_MISSING_MESSAGE);
 }
@@ -712,17 +722,17 @@ const walletSessionToolDefinitions = [
   },
   {
     name: "agentlayer_autonomous_status",
-    description: "Return AgentLayer high-trust autonomous permission status. Currently supports only scope=base_swaps.",
+    description: "Return AgentLayer high-trust autonomous permission status for the combined base_swaps + defi_tools permission group.",
     parameters: { type: "object", properties: {}, additionalProperties: false },
   },
   {
     name: "agentlayer_autonomous_approve",
     description:
-      "Enable high-trust autonomous Base swaps. scope=base_swaps lets Base Velora/Uniswap swap execute calls run without per-transaction human approval until revoked. This does not cover transfers, withdrawals, lending, staking, bridges, Solana swaps, or non-Base networks.",
+      "Enable high-trust autonomous execution for the combined permission group. The scope parameter is kept for compatibility; choosing base_swaps or defi_tools enables both Base Velora/Uniswap swaps and supported EVM DeFi management tools until revoked. This does not cover transfers, bridges, Solana swaps, or generic contract calls.",
     parameters: {
       type: "object",
       properties: {
-        scope: { type: "string", enum: ["base_swaps"] },
+        scope: { type: "string", enum: ["base_swaps", "defi_tools"], description: "Compatibility scope; either value enables the full autonomous permission group." },
         purpose: { type: "string" },
         user_intent: { type: "boolean" },
       },
@@ -732,11 +742,11 @@ const walletSessionToolDefinitions = [
   },
   {
     name: "agentlayer_autonomous_revoke",
-    description: "Disable high-trust autonomous execution for a scope. Currently supports only scope=base_swaps.",
+    description: "Disable the full high-trust autonomous permission group. The scope parameter is kept for compatibility; either value revokes base_swaps and defi_tools together.",
     parameters: {
       type: "object",
       properties: {
-        scope: { type: "string", enum: ["base_swaps"] },
+        scope: { type: "string", enum: ["base_swaps", "defi_tools"], description: "Compatibility scope; either value revokes the full autonomous permission group." },
       },
       required: ["scope"],
       additionalProperties: false,

package/.openclaw/extensions/agent-wallet/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "agent-wallet",
   "name": "Agent Wallet",
   "description": "Official OpenClaw plugin bridge for the agent-wallet backends, including Solana, local BTC, and local EVM.",
-  "version": "0.1.52",
+  "version": "0.1.53",
   "contracts": {
     "tools": [
       "agentlayer_autonomous_approve",

package/.openclaw/extensions/agent-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayertech/agent-wallet-plugin",
-  "version": "0.1.52",
+  "version": "0.1.53",
   "description": "OpenClaw plugin bridge for the AgentLayer wallet runtime.",
   "type": "module",
   "license": "SEE LICENSE IN ../../../LICENSE",

package/CHANGELOG.md

@@ -2,7 +2,7 @@
 
 ## Unreleased
 
-## v0.1.52 - 2026-06-26
+## v0.1.53 - 2026-06-26
 
 - Fixed Morpho vault and market quote (preview) requests timing out under the
   default 10 s HTTP budget. The Morpho SDK fetches vault state from

package/VERSION

@@ -1 +1 @@
-0.1.52
+0.1.53

package/agent-wallet/agent_wallet/__init__.py

@@ -2,7 +2,7 @@
 
 # Keep in sync with package.json, pyproject.toml, and the npm installer version.
 # scripts/check_release_version.mjs enforces this on release.
-__version__ = "0.1.52"
+__version__ = "0.1.53"
 
 __all__ = [
     "config",

package/agent-wallet/agent_wallet/autonomous_permissions.py

@@ -2,7 +2,7 @@
 
 This module is intentionally narrower than ``autonomous_session``.  It models
 the "CLI permissions" UX where a user grants a standing capability, not a
-budgeted policy envelope.  The first supported scope is Base swaps only.
+budgeted policy envelope.
 """
 
 from __future__ import annotations
@@ -22,6 +22,19 @@ BASE_SWAP_SCOPE = "base_swaps"
 BASE_SWAP_NETWORK = "base"
 BASE_SWAP_TOOLS = frozenset({"swap_evm_tokens", "swap_evm_uniswap_tokens"})
 BASE_SWAP_ISSUER = "autonomous-permission:base-swaps"
+DEFI_TOOLS_SCOPE = "defi_tools"
+DEFI_TOOLS_NETWORKS = frozenset({"base", "ethereum"})
+DEFI_TOOLS = frozenset(
+    {
+        "manage_evm_aave_position",
+        "manage_evm_lido_position",
+        "manage_evm_lido_withdrawal",
+        "manage_evm_morpho_market_position",
+        "manage_evm_morpho_vault_position",
+    }
+)
+DEFI_TOOLS_ISSUER = "autonomous-permission:defi-tools"
+SUPPORTED_SCOPES = frozenset({BASE_SWAP_SCOPE, DEFI_TOOLS_SCOPE})
 _PERMISSIONS_FILENAME = "autonomous_permissions.json"
 
 
@@ -68,6 +81,7 @@ def _scope_status(record: dict[str, Any], scope: str) -> dict[str, Any]:
         "approved_at": raw.get("approved_at"),
         "approved_by": raw.get("approved_by"),
         "network": raw.get("network"),
+        "networks": raw.get("networks") or ([raw.get("network")] if raw.get("network") else []),
         "tools": raw.get("tools") or [],
         "warning": raw.get("warning"),
     }
@@ -77,17 +91,16 @@ def status() -> dict[str, Any]:
     """Return current high-trust autonomous permission status."""
     record = _load_record()
     base_swaps = _scope_status(record, BASE_SWAP_SCOPE)
+    defi_tools = _scope_status(record, DEFI_TOOLS_SCOPE)
+    group_enabled = all(bool(scope.get("enabled")) for scope in (base_swaps, defi_tools))
     return {
-        "active": bool(base_swaps.get("enabled")),
-        "scopes": {BASE_SWAP_SCOPE: base_swaps},
+        "active": group_enabled,
+        "scopes": {BASE_SWAP_SCOPE: base_swaps, DEFI_TOOLS_SCOPE: defi_tools},
         "permission_file": str(_permissions_path()),
     }
 
 
-def approve_base_swaps(*, approved_by: str = "user") -> dict[str, Any]:
-    """Enable unattended Base swap execution for supported EVM swap tools."""
-    record = _load_record()
-    scopes = record.setdefault("scopes", {})
+def _set_base_swap_scope(scopes: dict[str, Any], *, approved_by: str) -> None:
     scopes[BASE_SWAP_SCOPE] = {
         "enabled": True,
         "approved_at": _now(),
@@ -99,26 +112,81 @@ def approve_base_swaps(*, approved_by: str = "user") -> dict[str, Any]:
             "per-transaction human approval until revoked."
         ),
     }
+
+
+def _set_defi_tools_scope(scopes: dict[str, Any], *, approved_by: str) -> None:
+    scopes[DEFI_TOOLS_SCOPE] = {
+        "enabled": True,
+        "approved_at": _now(),
+        "approved_by": str(approved_by or "user"),
+        "networks": sorted(DEFI_TOOLS_NETWORKS),
+        "tools": sorted(DEFI_TOOLS),
+        "warning": (
+            "High-trust permission: supported EVM DeFi execute calls can run "
+            "without per-transaction human approval until revoked."
+        ),
+    }
+
+
+def approve_all(*, approved_by: str = "user") -> dict[str, Any]:
+    """Enable all high-trust autonomous permission scopes as one group."""
+    record = _load_record()
+    scopes = record.setdefault("scopes", {})
+    normalized_approved_by = str(approved_by or "user")
+    _set_base_swap_scope(scopes, approved_by=normalized_approved_by)
+    _set_defi_tools_scope(scopes, approved_by=normalized_approved_by)
     _write_record(record)
     return status()
 
 
+def approve_base_swaps(*, approved_by: str = "user") -> dict[str, Any]:
+    """Enable all autonomous permissions; base_swaps is kept as a compatibility scope."""
+    return approve_all(approved_by=approved_by)
+
+
+def approve_defi_tools(*, approved_by: str = "user") -> dict[str, Any]:
+    """Enable all autonomous permissions; defi_tools is kept as a compatibility scope."""
+    return approve_all(approved_by=approved_by)
+
+
 def revoke_base_swaps() -> dict[str, Any]:
-    """Disable unattended Base swap execution."""
+    """Disable all autonomous permissions; base_swaps is kept as a compatibility scope."""
+    return revoke_all()
+
+
+def revoke_defi_tools() -> dict[str, Any]:
+    """Disable all autonomous permissions; defi_tools is kept as a compatibility scope."""
+    return revoke_all()
+
+
+def revoke_all() -> dict[str, Any]:
+    """Disable every high-trust autonomous permission scope as one group."""
     record = _load_record()
     scopes = record.setdefault("scopes", {})
-    existing = scopes.get(BASE_SWAP_SCOPE)
-    if isinstance(existing, dict):
-        existing["enabled"] = False
-        existing["revoked_at"] = _now()
-    else:
-        scopes[BASE_SWAP_SCOPE] = {"enabled": False, "revoked_at": _now()}
+    for supported_scope in sorted(SUPPORTED_SCOPES):
+        existing = scopes.get(supported_scope)
+        if isinstance(existing, dict):
+            existing["enabled"] = False
+            existing["revoked_at"] = _now()
+        else:
+            scopes[supported_scope] = {"enabled": False, "revoked_at": _now()}
     _write_record(record)
     return status()
 
 
+def revoke_scope(scope: str) -> dict[str, Any]:
+    normalized_scope = str(scope or "").strip()
+    if normalized_scope not in SUPPORTED_SCOPES:
+        raise WalletBackendError("Unsupported autonomous permission scope.")
+    return revoke_all()
+
+
 def is_base_swap_approved() -> bool:
-    return bool(status()["scopes"][BASE_SWAP_SCOPE].get("enabled"))
+    return bool(status()["active"])
+
+
+def is_defi_tools_approved() -> bool:
+    return bool(status()["active"])
 
 
 def authorize_base_swap(*, tool_name: str, network: str, summary: dict[str, Any]) -> str:
@@ -129,8 +197,8 @@ def authorize_base_swap(*, tool_name: str, network: str, summary: dict[str, Any]
         raise WalletBackendError("Autonomous Base swap permission only applies on network=base.")
     if not is_base_swap_approved():
         raise WalletBackendError(
-            "Autonomous Base swap permission is not enabled. Ask the user to run "
-            "agentlayer_autonomous_approve for scope=base_swaps first."
+            "Autonomous execution is not enabled. Ask the user to run "
+            "agentlayer_autonomous_approve first."
         )
     summary_network = str((summary or {}).get("network") or "").strip().lower()
     if summary_network and summary_network != BASE_SWAP_NETWORK:
@@ -143,3 +211,28 @@ def authorize_base_swap(*, tool_name: str, network: str, summary: dict[str, Any]
         ttl_seconds=120,
         issued_by=BASE_SWAP_ISSUER,
     )
+
+
+def authorize_defi_tool(*, tool_name: str, network: str, summary: dict[str, Any]) -> str:
+    """Issue an internal approval token for one exact EVM DeFi operation."""
+    normalized_network = str(network or "").strip().lower()
+    if str(tool_name) not in DEFI_TOOLS:
+        raise WalletBackendError("Autonomous DeFi permission only covers supported EVM DeFi tools.")
+    if normalized_network not in DEFI_TOOLS_NETWORKS:
+        raise WalletBackendError("Autonomous DeFi permission only applies on ethereum or base.")
+    if not is_defi_tools_approved():
+        raise WalletBackendError(
+            "Autonomous execution is not enabled. Ask the user to run "
+            "agentlayer_autonomous_approve first."
+        )
+    summary_network = str((summary or {}).get("network") or "").strip().lower()
+    if summary_network and summary_network != normalized_network:
+        raise WalletBackendError("Autonomous DeFi summary is not bound to the active network.")
+    return issue_approval_token(
+        tool_name=tool_name,
+        network=normalized_network,
+        summary=summary,
+        mainnet_confirmed=True,
+        ttl_seconds=120,
+        issued_by=DEFI_TOOLS_ISSUER,
+    )