@agentlayer.tech/wallet 0.1.70 → 0.1.72

package/.openclaw/extensions/agent-wallet/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "agent-wallet",
   "name": "Agent Wallet",
   "description": "Official OpenClaw plugin bridge for the agent-wallet backends, including Solana, local BTC, and local EVM.",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "contracts": {
     "tools": [
       "agentlayer_autonomous_approve",

package/.openclaw/extensions/agent-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayertech/agent-wallet-plugin",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "description": "OpenClaw plugin bridge for the AgentLayer wallet runtime.",
   "type": "module",
   "license": "SEE LICENSE IN ../../../LICENSE",

package/CHANGELOG.md

@@ -2,6 +2,41 @@
 
 ## Unreleased
 
+## v0.1.72 - 2026-07-09
+
+- Fixed a `0.1.71` installer regression where `wallet update --yes` could fail
+  during the nested OpenClaw config step on hardened installs with:
+  `AGENT_WALLET_BOOT_KEY is required`. The config installer was checking only
+  the direct env var even though the runtime now legitimately resolves the boot
+  key via the OS keystore or `agent-wallet-runtime/boot-key`. It now uses the
+  shared boot-key resolver, so update/install works again when the boot key is
+  available through the supported non-env paths.
+  - `agent-wallet/scripts/install_openclaw_local_config.py`
+  - `agent-wallet/tests/smoke_install_openclaw_local_config_sealed.py`
+
+## v0.1.71 - 2026-07-09
+
+- Fixed `wallet update` leaving editor integrations pinned to a stale
+  `releases/<version>` path after a runtime upgrade. The installer and
+  OpenClaw local config now canonicalize runtime-owned paths back through
+  `~/.openclaw/agent-wallet-runtime/current`, and the update command
+  proactively refreshes existing Hermes, Codex, and Claude Code installs so a
+  successful update rewires old integrations to the new active runtime
+  automatically. The `update` CLI path also now returns its final update JSON
+  payload directly instead of leaking the nested install payload shape.
+  - `bin/openclaw-agent-wallet.mjs`
+  - `agent-wallet/scripts/install_openclaw_local_config.py`
+  - `agent-wallet/tests/smoke_install_openclaw_local_config_runtime_defaults.py`
+  - `agent-wallet/tests/smoke_npm_installer.py`
+  - `agent-wallet/tests/smoke_update_repairs_editor_installs.py`
+
+- Fixed the EVM live tool list dropping the read-only `x402_*` service tools
+  because the adapter returned before appending them. EVM-backed runtimes now
+  expose x402 discovery/preview/pay tool specs consistently alongside the rest
+  of the EVM wallet surface.
+  - `agent-wallet/agent_wallet/openclaw_adapter.py`
+  - `agent-wallet/tests/smoke_openclaw_evm_x402_tools.py`
+
 - Fixed the npm `files` allowlist dropping `.env.example` for `wdk-evm-wallet`
   and `wdk-btc-wallet`. Both templates are tracked in git and correctly
   un-ignored (`!.env.example` in `.gitignore`), but the root `package.json`

package/VERSION

@@ -1 +1 @@
-0.1.70
+0.1.72

package/agent-wallet/agent_wallet/__init__.py

@@ -2,7 +2,7 @@
 
 # Keep in sync with package.json, pyproject.toml, and the npm installer version.
 # scripts/check_release_version.mjs enforces this on release.
-__version__ = "0.1.70"
+__version__ = "0.1.72"
 
 __all__ = [
     "config",

package/agent-wallet/agent_wallet/openclaw_adapter.py

@@ -2296,6 +2296,7 @@ class OpenClawWalletAdapter:
                     ),
                 )
 
+            tools.extend(self._x402_tool_specs())
             tools.extend(self._autonomous_permission_tool_specs())
             return tools
 

package/agent-wallet/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "agent-wallet",
   "name": "Agent Wallet",
   "description": "Plugin-friendly wallet backend for OpenClaw agents with safe wallet tools and runtime instructions across Solana, local BTC, and local EVM.",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "skills": ["skills/wallet-operator"],
   "configSchema": {
     "type": "object",

package/agent-wallet/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "openclaw-agent-wallet"
-version = "0.1.70"
+version = "0.1.72"
 description = "Plugin-friendly wallet backend for OpenClaw agents"
 requires-python = ">=3.10"
 dependencies = [

package/agent-wallet/scripts/install_openclaw_local_config.py

@@ -17,6 +17,7 @@ from agent_wallet.config import (
     normalize_btc_network,
     normalize_evm_network,
     normalize_solana_network,
+    resolve_boot_key,
 )
 from agent_wallet.sealed_keys import resolve_sealed_keys_path, seal_keys, unseal_keys
 from security_utils import write_redacted_backup
@@ -137,6 +138,26 @@ def _default_runtime_root() -> Path:
     return _resolve_openclaw_home() / "agent-wallet-runtime" / "current"
 
 
+def _canonical_runtime_path(path_value: str) -> Path:
+    """Keep host config pinned to runtime/current instead of releases/<version>.
+
+    The updater flips ``agent-wallet-runtime/current`` on every release. Host
+    configs that store resolved release paths silently pin themselves to stale
+    code after the next update, so rewrite any release-local path back through
+    ``current`` while preserving its relative suffix.
+    """
+    candidate = Path(path_value).expanduser().resolve()
+    releases_root = (_resolve_openclaw_home() / "agent-wallet-runtime" / "releases").resolve()
+    try:
+        relative = candidate.relative_to(releases_root)
+    except ValueError:
+        return candidate
+    parts = relative.parts
+    if len(parts) < 2:
+        return candidate
+    return _default_runtime_root() / Path(*parts[1:])
+
+
 def _repo_root() -> Path:
     return Path(__file__).resolve().parents[2]
 
@@ -257,10 +278,11 @@ def _require_hardened_runtime_secrets(backend: str) -> str | None:
     if backend.strip().lower() in {"", "none"}:
         return None
 
-    boot_key = os.getenv("AGENT_WALLET_BOOT_KEY", "").strip()
+    boot_key = resolve_boot_key().strip()
     if not boot_key:
         raise SystemExit(
-            "AGENT_WALLET_BOOT_KEY is required. Runtime secrets must be loaded from sealed_keys.json."
+            "A boot key is required to unlock sealed_keys.json. Resolve it via "
+            "AGENT_WALLET_BOOT_KEY, the OS keystore, or AGENT_WALLET_BOOT_KEY_FILE."
         )
 
     sealed_path = resolve_sealed_keys_path()
@@ -300,7 +322,7 @@ def main() -> None:
 
     load = plugins.setdefault("load", {})
     paths = load.setdefault("paths", [])
-    extension_path_text = str(Path(args.extension_path).expanduser().resolve())
+    extension_path_text = str(_canonical_runtime_path(args.extension_path))
     paths[:] = _normalize_load_paths(list(paths), extension_path_text)
 
     entries = plugins.setdefault("entries", {})
@@ -316,6 +338,11 @@ def main() -> None:
         or str(existing_config.get("userId") or "").strip()
         or _default_user_id()
     )
+    python_bin_text = args.python_bin
+    python_bin_candidate = Path(python_bin_text).expanduser()
+    if python_bin_text.startswith("~") or python_bin_candidate.is_absolute():
+        python_bin_text = str(_canonical_runtime_path(python_bin_text))
+
     plugin_config = {
         **existing_config,
         "userId": resolved_user_id,
@@ -324,8 +351,8 @@ def main() -> None:
         "signOnly": args.sign_only,
         "encryptUserWallets": args.encrypt_user_wallets,
         "migratePlaintextUserWallets": args.migrate_plaintext_user_wallets,
-        "packageRoot": str(Path(args.package_root).expanduser().resolve()),
-        "pythonBin": args.python_bin,
+        "packageRoot": str(_canonical_runtime_path(args.package_root)),
+        "pythonBin": python_bin_text,
     }
     if args.rpc_url.strip():
         plugin_config["rpcUrl"] = args.rpc_url.strip()
@@ -382,7 +409,7 @@ def main() -> None:
                 "config_path": str(config_path),
                 "backup_path": str(backup_path),
                 "extension_path": extension_path_text,
-                "python_bin": args.python_bin,
+                "python_bin": python_bin_text,
                 "package_root": plugin_config["packageRoot"],
                 "plugin_id": args.plugin_id,
                 "user_id": resolved_user_id,

package/bin/openclaw-agent-wallet.mjs

@@ -384,6 +384,17 @@ function currentRuntimePath(env = process.env) {
   return path.join(resolveRuntimeBase(env), "current");
 }
 
+function logicalCurrentRuntimeRoot(env = process.env) {
+  const currentPath = currentRuntimePath(env);
+  try {
+    const stat = fs.lstatSync(currentPath);
+    if (stat.isSymbolicLink() || stat.isDirectory()) return currentPath;
+  } catch (error) {
+    if (error?.code !== "ENOENT") throw error;
+  }
+  return "";
+}
+
 function resolvedCurrentRuntimeRoot(env = process.env) {
   const currentPath = currentRuntimePath(env);
   const currentTarget = readLinkOrNull(currentPath);
@@ -1392,6 +1403,8 @@ function runInstall(args, { commandName = "install" } = {}) {
     }
   }
 
+  const integrationRefresh = refreshInstalledEditorIntegrations(env);
+
   const pythonInfo = activePythonRuntimeInfo(env);
   const nodeInfo = activeNodeRuntimeInfo(env)
     .map((item) => `${item.project_name}:${item.shared ? "shared" : item.exists ? "local" : "missing"}`)
@@ -1410,6 +1423,7 @@ function runInstall(args, { commandName = "install" } = {}) {
         current_runtime: currentPath,
         previous_runtime: readLinkOrNull(previousPath),
         generated_runtime_secrets: Object.keys(generated),
+        integration_refresh: integrationRefresh,
       },
       null,
       2,
@@ -1517,9 +1531,10 @@ function runUpdate(args) {
     }
   }
 
+  const currentVersionBefore = activeVersion();
   let delegated;
   try {
-    delegated = runDelegatedInstallForUpdate(args, { captureOutput: false });
+    delegated = runDelegatedInstallForUpdate(args, { captureOutput: true });
   } catch (error) {
     console.error(error.message);
     return 1;
@@ -1528,7 +1543,60 @@ function runUpdate(args) {
     console.error(delegated.result.error.message);
     return 1;
   }
-  return delegated.result.status ?? 1;
+  const { result } = delegated;
+  if ((result.status ?? 1) !== 0) {
+    const stderr = String(result.stderr || "").trim();
+    const stdout = String(result.stdout || "").trim();
+    if (stderr) process.stderr.write(`${stderr}\n`);
+    if (stdout) process.stderr.write(`${stdout}\n`);
+    return result.status ?? 1;
+  }
+
+  let installPayload;
+  try {
+    installPayload = extractTrailingJson(result.stderr || "") || extractTrailingJson(result.stdout || "");
+  } catch {
+    try {
+      installPayload = extractTrailingJson(result.stdout || "");
+    } catch (error) {
+      const stderr = String(result.stderr || "").trim();
+      const stdout = String(result.stdout || "").trim();
+      if (stderr) process.stderr.write(`${stderr}\n`);
+      if (stdout) process.stderr.write(`${stdout}\n`);
+      console.error(error.message);
+      return 1;
+    }
+  }
+
+  const stderr = String(result.stderr || "");
+  const summaryLine = stderr
+    .split(/\r?\n/)
+    .map((line) => line.trimEnd())
+    .find((line) => line.startsWith("Update summary:"));
+  if (summaryLine) {
+    console.error(summaryLine);
+  }
+
+  console.log(
+    JSON.stringify(
+      {
+        ...installPayload,
+        command: "update",
+        delegated_via: delegated.delegated_via,
+        target_package_spec: delegated.target_package_spec,
+        target_version:
+          delegated.target_version_hint ||
+          pathVersionFromRuntimeRoot(installPayload?.runtime_root) ||
+          installPayload?.version ||
+          null,
+        previous_version: currentVersionBefore,
+        active_version: activeVersion(),
+      },
+      null,
+      2,
+    ),
+  );
+  return 0;
 }
 
 function runRollback(args) {
@@ -1571,7 +1639,7 @@ function runRollback(args) {
 }
 
 function resolveHermesPluginSource() {
-  const currentRoot = resolvedCurrentRuntimeRoot();
+  const currentRoot = logicalCurrentRuntimeRoot();
   const candidates = [];
   if (currentRoot) {
     candidates.push(path.join(currentRoot, "hermes", "plugins", "agent_wallet"));
@@ -1589,7 +1657,7 @@ function resolveCodexPluginSource() {
   // test/CI override: inject a staged bundle dir
   const override = String(process.env.AGENT_WALLET_CODEX_PLUGIN_SOURCE || "").trim();
   if (override) return path.resolve(expandHome(override));
-  const currentRoot = resolvedCurrentRuntimeRoot();
+  const currentRoot = logicalCurrentRuntimeRoot();
   const candidates = [];
   if (currentRoot) {
     candidates.push(path.join(currentRoot, "codex", "plugins", "agent-wallet"));
@@ -1607,7 +1675,7 @@ function resolveClaudeCodePluginSource() {
   // test/CI override: inject a staged bundle dir
   const override = String(process.env.AGENT_WALLET_CLAUDE_CODE_PLUGIN_SOURCE || "").trim();
   if (override) return path.resolve(expandHome(override));
-  const currentRoot = resolvedCurrentRuntimeRoot();
+  const currentRoot = logicalCurrentRuntimeRoot();
   const candidates = [];
   if (currentRoot) {
     candidates.push(path.join(currentRoot, "claude-code", "plugins", "agent-wallet"));
@@ -1683,7 +1751,7 @@ function ensureCodexMarketplaceEntry({ marketplacePath, pluginName }) {
 }
 
 function resolveAgentWalletPackageRoot(env = process.env) {
-  const currentRoot = resolvedCurrentRuntimeRoot(env);
+  const currentRoot = logicalCurrentRuntimeRoot(env);
   if (currentRoot) {
     const runtimePackage = path.join(currentRoot, "agent-wallet");
     if (fs.existsSync(path.join(runtimePackage, "agent_wallet", "__init__.py"))) {
@@ -2081,6 +2149,79 @@ function runClaudeCodeInstall(args) {
   return enable.skipped || enable.ok ? 0 : 1;
 }
 
+function hermesInstallPresent(env = process.env) {
+  const hermesHome = resolveHermesHome(env);
+  return (
+    fs.existsSync(path.join(hermesHome, "plugins", "agent_wallet")) ||
+    fs.existsSync(path.join(hermesHome, ".env"))
+  );
+}
+
+function codexInstallPresent(env = process.env) {
+  return (
+    fs.existsSync(path.join(resolveCodexPluginInstallRoot(env), "agent-wallet")) ||
+    fs.existsSync(resolveCodexMarketplacePath(env))
+  );
+}
+
+function claudeCodeInstallPresent(env = process.env) {
+  const marketplaceDir = resolveClaudeCodeMarketplaceDir(env);
+  const cacheRoot = path.resolve(
+    expandHome(env.AGENT_WALLET_CLAUDE_CODE_CACHE_ROOT || "~/.claude/plugins/cache"),
+  );
+  return (
+    fs.existsSync(path.join(marketplaceDir, "plugins", "agent-wallet")) ||
+    fs.existsSync(path.join(cacheRoot, CLAUDE_CODE_MARKETPLACE_NAME, "agent-wallet"))
+  );
+}
+
+function captureInstallerRefresh(name, runFn, args) {
+  const originalLog = console.log;
+  const lines = [];
+  console.log = (...items) => {
+    lines.push(items.join(" "));
+  };
+  try {
+    const code = runFn(args);
+    const output = lines.join("\n");
+    return {
+      name,
+      attempted: true,
+      ok: code === 0,
+      code,
+      payload: output ? extractTrailingJson(output) : null,
+      error: code === 0 ? "" : output.trim(),
+    };
+  } catch (error) {
+    return {
+      name,
+      attempted: true,
+      ok: false,
+      code: 1,
+      payload: null,
+      error: error?.message || String(error),
+    };
+  } finally {
+    console.log = originalLog;
+  }
+}
+
+function refreshInstalledEditorIntegrations(env = process.env) {
+  const results = [];
+  if (hermesInstallPresent(env)) {
+    results.push(captureInstallerRefresh("hermes", runHermesInstall, ["--yes", "--force", "--skip-enable"]));
+  }
+  if (codexInstallPresent(env)) {
+    results.push(captureInstallerRefresh("codex", runCodexInstall, ["--yes", "--force", "--skip-enable"]));
+  }
+  if (claudeCodeInstallPresent(env)) {
+    results.push(
+      captureInstallerRefresh("claude-code", runClaudeCodeInstall, ["--yes", "--force", "--skip-enable"]),
+    );
+  }
+  return results;
+}
+
 const args = process.argv.slice(2);
 const command = args[0] || "install";
 

package/claude-code/plugins/agent-wallet/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-wallet",
   "displayName": "Agent Wallet",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "description": "Claude Code bridge for the existing AgentLayer wallet runtime. Connects to Solana, Bitcoin, and EVM wallets without creating a new one.",
   "author": {
     "name": "AgentLayer"

package/codex/plugins/agent-wallet/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-wallet",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "description": "Codex plugin bridge for the AgentLayer wallet runtime.",
   "author": {
     "name": "AgentLayer"

package/hermes/plugins/agent_wallet/plugin.yaml

@@ -1,5 +1,5 @@
 name: agent-wallet
-version: 0.1.70
+version: 0.1.72
 description: Thin Hermes Agent bridge to the existing AgentLayer/OpenClaw wallet backend
 provides_tools:
   - agent_wallet_tools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayer.tech/wallet",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "description": "NPM installer for the OpenClaw Agent Wallet local runtime.",
   "type": "module",
   "repository": {

package/wdk-btc-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-btc-wallet",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "private": true,
   "type": "module",
   "description": "Separate BTC-only wallet service built on Tether WDK.",

package/wdk-evm-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-evm-wallet",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "private": true,
   "type": "module",
   "description": "Separate EVM wallet service built on Tether WDK.",