@agentlayer.tech/wallet 0.1.65 → 0.1.67

package/agent-wallet/scripts/install_openclaw_local_config.py

@@ -29,6 +29,10 @@ LEGACY_ALLOWLIST_TOOLS = [
     "set_wallet_backend",
     "get_wallet_portfolio",
     "get_solana_token_prices",
+    "get_kamino_portfolio",
+    "get_kamino_vaults",
+    "get_kamino_earn_positions",
+    "get_kamino_liquidity_positions",
     "get_kamino_lend_markets",
     "get_kamino_lend_market_reserves",
     "get_kamino_lend_user_obligations",
@@ -37,6 +41,8 @@ LEGACY_ALLOWLIST_TOOLS = [
     "kamino_lend_withdraw",
     "kamino_lend_borrow",
     "kamino_lend_repay",
+    "kamino_earn_deposit",
+    "kamino_earn_withdraw",
     "sign_wallet_message",
     "transfer_sol",
     "transfer_btc",

package/agent-wallet/skills/wallet-operator/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: wallet-operator
-description: Use when operating OpenClaw wallet tools: balances, transfers, swaps, LI.FI cross-chain swaps, Jupiter swaps, Velora EVM swaps, BTC transfers, staking, Kamino lending, Bags launches, and wallet execution safety.
+description: Use whenever the user's own funds are involved, even if they never say "wallet": balances, portfolio, transfers, swaps, LI.FI cross-chain swaps, Jupiter swaps, Velora EVM swaps, BTC transfers, staking, Kamino lending, Bags launches, and wallet execution safety.
 ---
 
 # Wallet Operator
@@ -30,7 +30,7 @@ Use this skill before calling OpenClaw wallet tools. It is the routing guide for
 - EVM transfers: `transfer_evm_native`, `transfer_evm_token`.
 - BTC transfer: `transfer_btc`.
 - Solana staking: `stake_sol_native`, `deactivate_solana_stake`, `withdraw_solana_stake`.
-- Kamino: `kamino_lend_deposit`, `kamino_lend_withdraw`, `kamino_lend_borrow`, `kamino_lend_repay`.
+- Kamino: `get_kamino_portfolio`, `get_kamino_vaults`, `get_kamino_earn_positions`, `get_kamino_liquidity_positions`, `kamino_lend_deposit`, `kamino_lend_withdraw`, `kamino_lend_borrow`, `kamino_lend_repay`, `kamino_earn_deposit`, `kamino_earn_withdraw`.
 - Bags: `launch_bags_token`.
 
 ## Common Token IDs
@@ -118,8 +118,10 @@ Use this skill before calling OpenClaw wallet tools. It is the routing guide for
 - `stake_sol_native`: `vote_account`, `amount` in SOL, `mode`, `purpose`.
 - `deactivate_solana_stake`: `stake_account`, `mode`, `purpose`.
 - `withdraw_solana_stake`: `stake_account`, `amount` in SOL, optional `recipient`, `mode`, `purpose`.
-- Before Kamino writes, use `get_kamino_lend_markets`, `get_kamino_lend_market_reserves`, `get_kamino_lend_user_obligations`, and `get_kamino_lend_user_rewards`.
-- Kamino write params: `market`, `reserve`, `amount_ui` decimal string, `mode`, `purpose`.
+- Before Kamino lend writes, use `get_kamino_lend_markets`, `get_kamino_lend_market_reserves`, `get_kamino_lend_user_obligations`, and `get_kamino_lend_user_rewards`.
+- For broader Kamino read coverage, prefer `get_kamino_portfolio` first, then drill into `get_kamino_vaults`, `get_kamino_earn_positions`, or `get_kamino_liquidity_positions` as needed.
+- Kamino lend write params: `market`, `reserve`, `amount_ui` decimal string, `mode`, `purpose`.
+- Kamino Earn write params: `kvault`, `amount_ui` decimal string, `mode`, `purpose`.
 - `launch_bags_token`: `name`, `symbol`, `description`, `base_mint`, `claimers`, `basis_points`, `initial_buy_sol`, `mode`, `purpose`; optional socials/image/config type.
 - `close_empty_token_accounts`: `limit`, `mode` (`preview` or `execute`), `purpose`.
 

package/claude-code/plugins/agent-wallet/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-wallet",
   "displayName": "Agent Wallet",
-  "version": "0.1.65",
+  "version": "0.1.67",
   "description": "Claude Code bridge for the existing AgentLayer wallet runtime. Connects to Solana, Bitcoin, and EVM wallets without creating a new one.",
   "author": {
     "name": "AgentLayer"

package/claude-code/plugins/agent-wallet/skills/wallet-operator/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Use when the user asks Claude Code to interact with the local AgentLayer wallet runtime: check balances, transfer tokens, swap, DeFi operations, or x402 payments. Prefer wallet tools over shell commands. Preview writes first and execute only after explicit user confirmation."
+description: "Use whenever the user's own funds or wallet are involved — balances, portfolio, transfers, swaps, bridging, staking, lending, or x402 payments — even if the user never says \"wallet\". Trigger phrases include \"my balance\", \"how much SOL/ETH/BTC/USDC do I have\", \"send/transfer X to\", \"swap\", \"bridge\", \"stake\", \"my portfolio\", \"pay for this API\", \"x402\". Prefer agent-wallet MCP tools over shell commands, raw RPC, or crypto data servers. Preview writes first and execute only after explicit user confirmation."
 ---
 
 # Agent Wallet Operator

package/codex/plugins/agent-wallet/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-wallet",
-  "version": "0.1.65",
+  "version": "0.1.67",
   "description": "Codex plugin bridge for the AgentLayer wallet runtime.",
   "author": {
     "name": "AgentLayer"

package/codex/plugins/agent-wallet/server.py

@@ -273,6 +273,44 @@ def _cache_preview_for_approval(user_id: str, tool_name: str, payload: dict[str,
         }
 
 
+X402_PREVIEW_REUSE_TTL_SECONDS = 300
+
+
+def _cache_x402_preview_payload(user_id: str, payload: dict[str, Any]) -> None:
+    """Cache a paid-endpoint preview so x402_pay_request can skip its unpaid probe.
+
+    x402 previews run on the read-only resident-worker path, so they never reach
+    _cache_preview_for_approval (and preview-mode annotation strips
+    confirmation_summary anyway). Stored under the x402_preview_request key that
+    the pay alias resolves to. The wallet runtime revalidates the payload by
+    request fingerprint and falls back to a fresh probe on any mismatch, so a
+    stale or unrelated cached preview can never redirect a payment.
+    """
+    if not isinstance(payload, dict) or payload.get("ok") is False:
+        return
+    data = payload.get("data")
+    if not isinstance(data, dict):
+        return
+    if not data.get("payment_required") or not str(data.get("request_fingerprint") or "").strip():
+        return
+    with _approval_cache_lock:
+        _prune_approval_preview_cache()
+        approval_preview_cache[_approval_cache_key(user_id, "x402_preview_request")] = {
+            "digest": _preview_digest(data),
+            "expires_at": time.time() + X402_PREVIEW_REUSE_TTL_SECONDS,
+            "preview": data,
+            "summary": None,
+        }
+
+
+def _attach_x402_approved_preview(tool_name: str, effective_params: dict[str, Any]) -> None:
+    if tool_name != "x402_pay_request" or "_approved_preview" in effective_params:
+        return
+    cached = _latest_cached_preview(_user_id(), tool_name)
+    if cached and isinstance(cached.get("preview"), dict):
+        effective_params["_approved_preview"] = cached["preview"]
+
+
 def _latest_cached_preview(user_id: str, tool_name: str) -> dict[str, Any] | None:
     with _approval_cache_lock:
         _prune_approval_preview_cache()
@@ -1403,6 +1441,7 @@ def _invoke_wallet_tool_blocking(
     cancellation stay responsive).
     """
     used_cache, approval_args = _attach_approval_for_execute(tool_name, config, effective_params)
+    _attach_x402_approved_preview(tool_name, effective_params)
     try:
         payload = _invoke_tool(
             tool_name,
@@ -1413,6 +1452,10 @@ def _invoke_wallet_tool_blocking(
         )
     except Exception as exc:
         raise _normalize_approval_context_error(exc) from exc
+    if tool_name == "x402_pay_request":
+        # The cached x402 preview quote is single-use: whether the payment
+        # succeeded or the endpoint re-priced, the next pay must re-preview.
+        _consume_cached_preview(_user_id(), tool_name)
     _cache_preview_for_approval(_user_id(), tool_name, payload)
     # A bridge-managed preview that was just executed successfully is single-use:
     # drop it so a duplicate execute cannot silently re-run the operation.
@@ -1451,15 +1494,21 @@ async def _handle_wallet_tool(tool_name: str, params: dict[str, Any]) -> dict[st
             _invoke_wallet_tool_blocking, tool_name, config, effective_params
         )
 
+    if tool_name == "x402_preview_request":
+        _cache_x402_preview_payload(_user_id(), payload)
     if payload.get("ok") is False:
         raise RuntimeError(str(payload.get("error") or f"{tool_name} failed"))
     return payload.get("data", {})
 
 
 BASE_INSTRUCTIONS = (
-    "Use the local AgentLayer wallet runtime through explicit wallet tools. Keep wallet "
-    "secrets local. Preview writes first when supported, and execute only after explicit "
-    "user confirmation."
+    "This server is the user's own local AgentLayer wallet (Solana, EVM, Bitcoin). Use its "
+    "tools whenever the user asks about their balances, portfolio, addresses, transfers, "
+    "swaps, bridging, staking, lending, or x402 payments — even when they never say the "
+    "word 'wallet'. For anything touching the user's own funds, prefer these tools over "
+    "shell commands, raw RPC calls, or other crypto data servers (those are for arbitrary "
+    "addresses and market data, not the user's wallet). Keep wallet secrets local. Preview "
+    "writes first when supported, and execute only after explicit user confirmation."
 )
 
 

package/codex/plugins/agent-wallet/skills/wallet-operator/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: "wallet-operator"
-description: "Use when the user asks Codex to interact with the local AgentLayer wallet runtime. Prefer wallet tools over shell commands, preview writes first, and keep approval/signing semantics intact."
+description: "Use whenever the user's own funds or wallet are involved — balances, portfolio, transfers, swaps, bridging, staking, lending, or x402 payments — even if the user never says \"wallet\". Trigger phrases include \"my balance\", \"how much SOL/ETH/BTC/USDC do I have\", \"send/transfer X to\", \"swap\", \"bridge\", \"stake\", \"my portfolio\". Prefer wallet tools over shell commands, preview writes first, and keep approval/signing semantics intact."
 ---
 
 # Agent Wallet Operator

package/hermes/plugins/agent_wallet/plugin.yaml

@@ -1,5 +1,5 @@
 name: agent-wallet
-version: 0.1.65
+version: 0.1.67
 description: Thin Hermes Agent bridge to the existing AgentLayer/OpenClaw wallet backend
 provides_tools:
   - agent_wallet_tools

package/install-from-github.sh

@@ -120,9 +120,15 @@ if [ -z "$SOURCE_ROOT" ] || [ ! -d "$SOURCE_ROOT" ]; then
   exit 1
 fi
 
+# Pre-flight must be a superset of setup.sh's require_path list: everything is
+# checked on the EXTRACTED temp tree, before the destructive swap below. A
+# bundle that would fail setup.sh must never replace the user's runtime.
 require_path "$SOURCE_ROOT/setup.sh" "local setup entrypoint"
 require_path "$SOURCE_ROOT/agent-wallet" "agent-wallet package"
+require_path "$SOURCE_ROOT/agent-wallet/scripts/install_agent_wallet.py" "Python installer"
 require_path "$SOURCE_ROOT/.openclaw/extensions/agent-wallet" "OpenClaw extension"
+require_path "$SOURCE_ROOT/codex/plugins/agent-wallet/.codex-plugin/plugin.json" "Codex plugin"
+require_path "$SOURCE_ROOT/claude-code/plugins/agent-wallet/.claude-plugin/plugin.json" "Claude Code plugin"
 require_path "$SOURCE_ROOT/wdk-btc-wallet/package.json" "wdk-btc-wallet runtime"
 require_path "$SOURCE_ROOT/wdk-evm-wallet/package.json" "wdk-evm-wallet runtime"
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayer.tech/wallet",
-  "version": "0.1.65",
+  "version": "0.1.67",
   "description": "NPM installer for the OpenClaw Agent Wallet local runtime.",
   "type": "module",
   "repository": {

package/wdk-btc-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-btc-wallet",
-  "version": "0.1.65",
+  "version": "0.1.67",
   "private": true,
   "type": "module",
   "description": "Separate BTC-only wallet service built on Tether WDK.",

package/wdk-evm-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-evm-wallet",
-  "version": "0.1.65",
+  "version": "0.1.67",
   "private": true,
   "type": "module",
   "description": "Separate EVM wallet service built on Tether WDK.",

package/wdk-evm-wallet/src/wdk_evm_wallet.js

@@ -94,8 +94,38 @@ const LIFI_CHAIN_ALIASES = {
   sol: "1151111081099710",
   solana: "1151111081099710",
 };
-const MORPHO_DEFAULT_LIST_LIMIT = 100;
+// Default is deliberately small: list responses land in an LLM agent's
+// context window (a 100-item vault list is ~80 KB of JSON). Agents can raise
+// the limit explicitly when they really need more.
+const MORPHO_DEFAULT_LIST_LIMIT = 20;
 const MORPHO_MAX_LIST_LIMIT = 500;
+// Discovery lists/details only — never user positions. APY/TVL drift over
+// two minutes is below the indexer's own aggregation noise.
+const MORPHO_DISCOVERY_CACHE_TTL_MS = 120_000;
+const MORPHO_DISCOVERY_CACHE_MAX_ENTRIES = 64;
+const morphoDiscoveryCache = new Map();
+
+function morphoDiscoveryCacheGet(key) {
+  const entry = morphoDiscoveryCache.get(key);
+  if (!entry) {
+    return null;
+  }
+  if (entry.expiresAt <= Date.now()) {
+    morphoDiscoveryCache.delete(key);
+    return null;
+  }
+  return JSON.parse(entry.payload);
+}
+
+function morphoDiscoveryCacheSet(key, payload) {
+  if (morphoDiscoveryCache.size >= MORPHO_DISCOVERY_CACHE_MAX_ENTRIES) {
+    morphoDiscoveryCache.delete(morphoDiscoveryCache.keys().next().value);
+  }
+  morphoDiscoveryCache.set(key, {
+    expiresAt: Date.now() + MORPHO_DISCOVERY_CACHE_TTL_MS,
+    payload: JSON.stringify(payload),
+  });
+}
 const MORPHO_VAULT_LIST_QUERY = `
   query MorphoVaultV2List($first: Int!, $where: VaultV2sFilters, $orderBy: VaultV2OrderBy, $orderDirection: OrderDirection) {
     vaultV2s(first: $first, where: $where, orderBy: $orderBy, orderDirection: $orderDirection) {
@@ -112,6 +142,7 @@ const MORPHO_VAULT_LIST_QUERY = `
         idleAssets
         idleAssetsUsd
         sharePrice
+        netApy
         avgNetApy
         avgNetApyExcludingRewards
         performanceFee
@@ -666,6 +697,17 @@ function normalizeMorphoSearch(value) {
   return value.trim() || null;
 }
 
+function normalizeOptionalNonNegativeNumber(value, fieldName) {
+  if (value === undefined || value === null || value === "") {
+    return null;
+  }
+  const num = Number(value);
+  if (!Number.isFinite(num) || num < 0) {
+    throw new Error(`${fieldName} must be a non-negative number.`);
+  }
+  return num;
+}
+
 function normalizeOptionalAddressFilter(value, fieldName) {
   if (value === undefined || value === null || value === "") {
     return null;
@@ -1925,21 +1967,29 @@ export class WdkEvmWalletService {
     limit,
     listedOnly = true,
     assetAddress = null,
+    minTotalAssetsUsd = null,
+    minNetApy = null,
     orderBy,
     orderDirection,
   }) {
     const runtimeConfig = this.#resolveRuntimeConfig(network);
     assertMorphoSupportedNetwork(runtimeConfig.network);
     if (vaultAddress !== null && vaultAddress !== undefined && String(vaultAddress).trim()) {
+      const address = normalizeAddress(vaultAddress, "vaultAddress");
+      const cacheKey = JSON.stringify(["vault", runtimeConfig.chainId, address]);
+      const cached = morphoDiscoveryCacheGet(cacheKey);
+      if (cached) {
+        return cached;
+      }
       const data = await this.#morphoGraphqlRequest({
         query: MORPHO_VAULT_BY_ADDRESS_QUERY,
         variables: {
-          address: normalizeAddress(vaultAddress, "vaultAddress"),
+          address,
           chainId: runtimeConfig.chainId,
         },
         operationName: "MorphoVaultV2ByAddress",
       });
-      return {
+      const result = {
         network: runtimeConfig.network,
         chainId: runtimeConfig.chainId,
         protocol: "morpho",
@@ -1947,10 +1997,17 @@ export class WdkEvmWalletService {
         found: Boolean(data.vaultV2ByAddress),
         source: "morpho-api",
       };
+      morphoDiscoveryCacheSet(cacheKey, result);
+      return result;
     }
     const first = normalizeMorphoListLimit(limit);
     const onlyListed = normalizeMorphoListedOnly(listedOnly);
     const assetAddressFilter = normalizeOptionalAddressFilter(assetAddress, "assetAddress");
+    const minTotalAssetsUsdFilter = normalizeOptionalNonNegativeNumber(
+      minTotalAssetsUsd,
+      "minTotalAssetsUsd"
+    );
+    const minNetApyFilter = normalizeOptionalNonNegativeNumber(minNetApy, "minNetApy");
     const resolvedOrderBy = normalizeMorphoOrderBy(
       orderBy,
       MORPHO_VAULT_ORDER_LOOKUP,
@@ -1964,18 +2021,30 @@ export class WdkEvmWalletService {
     if (assetAddressFilter) {
       where.assetAddress_in = assetAddressFilter;
     }
+    if (minTotalAssetsUsdFilter !== null) {
+      where.totalAssetsUsd_gte = minTotalAssetsUsdFilter;
+    }
+    if (minNetApyFilter !== null) {
+      where.netApy_gte = minNetApyFilter;
+    }
+    const variables = {
+      first,
+      where,
+      orderBy: resolvedOrderBy,
+      orderDirection: resolvedOrderDirection,
+    };
+    const cacheKey = JSON.stringify(["vaults", variables]);
+    const cached = morphoDiscoveryCacheGet(cacheKey);
+    if (cached) {
+      return cached;
+    }
     const data = await this.#morphoGraphqlRequest({
       query: MORPHO_VAULT_LIST_QUERY,
-      variables: {
-        first,
-        where,
-        orderBy: resolvedOrderBy,
-        orderDirection: resolvedOrderDirection,
-      },
+      variables,
       operationName: "MorphoVaultV2List",
     });
     const vaults = Array.isArray(data?.vaultV2s?.items) ? data.vaultV2s.items : [];
-    return {
+    const result = {
       network: runtimeConfig.network,
       chainId: runtimeConfig.chainId,
       protocol: "morpho",
@@ -1984,10 +2053,14 @@ export class WdkEvmWalletService {
       orderBy: resolvedOrderBy,
       orderDirection: resolvedOrderDirection,
       assetAddressFilter,
+      minTotalAssetsUsd: minTotalAssetsUsdFilter,
+      minNetApy: minNetApyFilter,
       vaultCount: vaults.length,
       vaults,
       source: "morpho-api",
     };
+    morphoDiscoveryCacheSet(cacheKey, result);
+    return result;
   }
 
   async getMorphoMarkets({
@@ -1998,21 +2071,29 @@ export class WdkEvmWalletService {
     search,
     collateralAssetAddress = null,
     loanAssetAddress = null,
+    minSupplyAssetsUsd = null,
+    minNetSupplyApy = null,
     orderBy,
     orderDirection,
   }) {
     const runtimeConfig = this.#resolveRuntimeConfig(network);
     assertMorphoSupportedNetwork(runtimeConfig.network);
     if (marketId !== null && marketId !== undefined && String(marketId).trim()) {
+      const normalizedMarketId = assertMorphoMarketId(marketId, "marketId");
+      const cacheKey = JSON.stringify(["market", runtimeConfig.chainId, normalizedMarketId]);
+      const cached = morphoDiscoveryCacheGet(cacheKey);
+      if (cached) {
+        return cached;
+      }
       const data = await this.#morphoGraphqlRequest({
         query: MORPHO_MARKET_BY_ID_QUERY,
         variables: {
-          marketId: assertMorphoMarketId(marketId, "marketId"),
+          marketId: normalizedMarketId,
           chainId: runtimeConfig.chainId,
         },
         operationName: "MorphoMarketById",
       });
-      return {
+      const result = {
         network: runtimeConfig.network,
         chainId: runtimeConfig.chainId,
         protocol: "morpho",
@@ -2020,6 +2101,8 @@ export class WdkEvmWalletService {
         found: Boolean(data.marketById),
         source: "morpho-api",
       };
+      morphoDiscoveryCacheSet(cacheKey, result);
+      return result;
     }
     const first = normalizeMorphoListLimit(limit);
     const onlyListed = normalizeMorphoListedOnly(listedOnly);
@@ -2029,6 +2112,14 @@ export class WdkEvmWalletService {
       "collateralAssetAddress"
     );
     const loanFilter = normalizeOptionalAddressFilter(loanAssetAddress, "loanAssetAddress");
+    const minSupplyAssetsUsdFilter = normalizeOptionalNonNegativeNumber(
+      minSupplyAssetsUsd,
+      "minSupplyAssetsUsd"
+    );
+    const minNetSupplyApyFilter = normalizeOptionalNonNegativeNumber(
+      minNetSupplyApy,
+      "minNetSupplyApy"
+    );
     const resolvedOrderBy = normalizeMorphoOrderBy(
       orderBy,
       MORPHO_MARKET_ORDER_LOOKUP,
@@ -2048,18 +2139,30 @@ export class WdkEvmWalletService {
     if (loanFilter) {
       where.loanAssetAddress_in = loanFilter;
     }
+    if (minSupplyAssetsUsdFilter !== null) {
+      where.supplyAssetsUsd_gte = minSupplyAssetsUsdFilter;
+    }
+    if (minNetSupplyApyFilter !== null) {
+      where.netSupplyApy_gte = minNetSupplyApyFilter;
+    }
+    const variables = {
+      first,
+      where,
+      orderBy: resolvedOrderBy,
+      orderDirection: resolvedOrderDirection,
+    };
+    const cacheKey = JSON.stringify(["markets", variables]);
+    const cached = morphoDiscoveryCacheGet(cacheKey);
+    if (cached) {
+      return cached;
+    }
     const data = await this.#morphoGraphqlRequest({
       query: MORPHO_MARKET_LIST_QUERY,
-      variables: {
-        first,
-        where,
-        orderBy: resolvedOrderBy,
-        orderDirection: resolvedOrderDirection,
-      },
+      variables,
       operationName: "MorphoMarketList",
     });
     const markets = Array.isArray(data?.markets?.items) ? data.markets.items : [];
-    return {
+    const result = {
       network: runtimeConfig.network,
       chainId: runtimeConfig.chainId,
       protocol: "morpho",
@@ -2070,10 +2173,14 @@ export class WdkEvmWalletService {
       search: searchTerm,
       collateralAssetFilter: collateralFilter,
       loanAssetFilter: loanFilter,
+      minSupplyAssetsUsd: minSupplyAssetsUsdFilter,
+      minNetSupplyApy: minNetSupplyApyFilter,
       marketCount: markets.length,
       markets,
       source: "morpho-api",
     };
+    morphoDiscoveryCacheSet(cacheKey, result);
+    return result;
   }
 
   async getMorphoPositions({ seedPhrase, address, accountIndex = 0, network }) {