@agentlayer.tech/wallet 0.1.71 → 0.1.73

package/.openclaw/extensions/agent-wallet/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "agent-wallet",
   "name": "Agent Wallet",
   "description": "Official OpenClaw plugin bridge for the agent-wallet backends, including Solana, local BTC, and local EVM.",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "contracts": {
     "tools": [
       "agentlayer_autonomous_approve",

package/.openclaw/extensions/agent-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayertech/agent-wallet-plugin",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "description": "OpenClaw plugin bridge for the AgentLayer wallet runtime.",
   "type": "module",
   "license": "SEE LICENSE IN ../../../LICENSE",

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 ## Unreleased
 
+## v0.1.73 - 2026-07-09
+
+- Fixed CLI installer/update boot-key precedence when recovering an existing
+  hardened install. `buildInstallerEnv()` now resolves the boot key in the same
+  order as the runtime itself: explicit env first, then keystore, and only then
+  plaintext fallback files. This prevents a stale
+  `~/.openclaw/agent-wallet-runtime/boot-key` from overriding a correct key in
+  the keystore and breaking `wallet install` / `wallet update` even though the
+  active runtime can still decrypt `sealed_keys.json`.
+  - `bin/openclaw-agent-wallet.mjs`
+  - `agent-wallet/tests/smoke_cli_install_prefers_keystore_over_stale_boot_file.py`
+
+## v0.1.72 - 2026-07-09
+
+- Fixed a `0.1.71` installer regression where `wallet update --yes` could fail
+  during the nested OpenClaw config step on hardened installs with:
+  `AGENT_WALLET_BOOT_KEY is required`. The config installer was checking only
+  the direct env var even though the runtime now legitimately resolves the boot
+  key via the OS keystore or `agent-wallet-runtime/boot-key`. It now uses the
+  shared boot-key resolver, so update/install works again when the boot key is
+  available through the supported non-env paths.
+  - `agent-wallet/scripts/install_openclaw_local_config.py`
+  - `agent-wallet/tests/smoke_install_openclaw_local_config_sealed.py`
+
 ## v0.1.71 - 2026-07-09
 
 - Fixed `wallet update` leaving editor integrations pinned to a stale

package/VERSION

@@ -1 +1 @@
-0.1.71
+0.1.73

package/agent-wallet/agent_wallet/__init__.py

@@ -2,7 +2,7 @@
 
 # Keep in sync with package.json, pyproject.toml, and the npm installer version.
 # scripts/check_release_version.mjs enforces this on release.
-__version__ = "0.1.71"
+__version__ = "0.1.73"
 
 __all__ = [
     "config",

package/agent-wallet/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "agent-wallet",
   "name": "Agent Wallet",
   "description": "Plugin-friendly wallet backend for OpenClaw agents with safe wallet tools and runtime instructions across Solana, local BTC, and local EVM.",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "skills": ["skills/wallet-operator"],
   "configSchema": {
     "type": "object",

package/agent-wallet/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "openclaw-agent-wallet"
-version = "0.1.71"
+version = "0.1.73"
 description = "Plugin-friendly wallet backend for OpenClaw agents"
 requires-python = ">=3.10"
 dependencies = [

package/agent-wallet/scripts/install_openclaw_local_config.py

@@ -17,6 +17,7 @@ from agent_wallet.config import (
     normalize_btc_network,
     normalize_evm_network,
     normalize_solana_network,
+    resolve_boot_key,
 )
 from agent_wallet.sealed_keys import resolve_sealed_keys_path, seal_keys, unseal_keys
 from security_utils import write_redacted_backup
@@ -277,10 +278,11 @@ def _require_hardened_runtime_secrets(backend: str) -> str | None:
     if backend.strip().lower() in {"", "none"}:
         return None
 
-    boot_key = os.getenv("AGENT_WALLET_BOOT_KEY", "").strip()
+    boot_key = resolve_boot_key().strip()
     if not boot_key:
         raise SystemExit(
-            "AGENT_WALLET_BOOT_KEY is required. Runtime secrets must be loaded from sealed_keys.json."
+            "A boot key is required to unlock sealed_keys.json. Resolve it via "
+            "AGENT_WALLET_BOOT_KEY, the OS keystore, or AGENT_WALLET_BOOT_KEY_FILE."
         )
 
     sealed_path = resolve_sealed_keys_path()

package/bin/openclaw-agent-wallet.mjs

@@ -1237,11 +1237,14 @@ function buildInstallerEnv(args) {
   const sealedKeysExist = fs.existsSync(sealedKeysPath);
   const dryRun = hasFlag(args, "--dry-run");
   if (!env.AGENT_WALLET_BOOT_KEY) {
+    // Keep installer/update boot-key resolution aligned with the runtime:
+    // explicit env first, then keystore, then plaintext fallback paths. A stale
+    // boot-key file must not override a good keystore key and break updates.
     const existingBootKey =
+      readBootKeyFromKeystore(env) ||
       resolveBootKeyFromFile(env) ||
       readTextIfExists(defaultBootKeyFile(env)).trim() ||
-      currentBootKey(env) ||
-      readBootKeyFromKeystore(env);
+      currentBootKey(env);
     if (existingBootKey) {
       env.AGENT_WALLET_BOOT_KEY = existingBootKey;
     }

package/claude-code/plugins/agent-wallet/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-wallet",
   "displayName": "Agent Wallet",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "description": "Claude Code bridge for the existing AgentLayer wallet runtime. Connects to Solana, Bitcoin, and EVM wallets without creating a new one.",
   "author": {
     "name": "AgentLayer"

package/claude-code/plugins/agent-wallet/.mcp.json

@@ -7,7 +7,8 @@
       ],
       "env": {
         "FASTMCP_SHOW_SERVER_BANNER": "false",
-        "FASTMCP_LOG_LEVEL": "ERROR"
+        "FASTMCP_LOG_LEVEL": "ERROR",
+        "OPENCLAW_HOME": "/tmp/openclaw-cli-install-keystore-precedence-smoke"
       }
     }
   }

package/codex/plugins/agent-wallet/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-wallet",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "description": "Codex plugin bridge for the AgentLayer wallet runtime.",
   "author": {
     "name": "AgentLayer"

package/hermes/plugins/agent_wallet/plugin.yaml

@@ -1,5 +1,5 @@
 name: agent-wallet
-version: 0.1.71
+version: 0.1.73
 description: Thin Hermes Agent bridge to the existing AgentLayer/OpenClaw wallet backend
 provides_tools:
   - agent_wallet_tools

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentlayer.tech/wallet",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "description": "NPM installer for the OpenClaw Agent Wallet local runtime.",
   "type": "module",
   "repository": {

package/wdk-btc-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-btc-wallet",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "private": true,
   "type": "module",
   "description": "Separate BTC-only wallet service built on Tether WDK.",

package/wdk-evm-wallet/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdk-evm-wallet",
-  "version": "0.1.71",
+  "version": "0.1.73",
   "private": true,
   "type": "module",
   "description": "Separate EVM wallet service built on Tether WDK.",