@elizaos/plugin-wallet 2.0.0-beta.1 → 2.0.3-beta.5

package/src/analytics/token-info/params.test.ts

@@ -0,0 +1,69 @@
+import type { Memory } from "@elizaos/core";
+import { describe, expect, it } from "vitest";
+import {
+  inferTokenInfoSubaction,
+  normalizeTokenInfoSubaction,
+  readBooleanParam,
+  readNumberParam,
+  readParams,
+  readStringParam,
+} from "./params.js";
+
+/**
+ * Token-info param parsing turns loose agent options + free text into a typed
+ * query. Param readers coerce/trim and reject junk; subaction normalization
+ * canonicalizes labels; and intent inference routes a message to the right
+ * read-only lookup.
+ */
+
+const msg = (text: string): Memory =>
+  ({ content: { text } }) as unknown as Memory;
+
+describe("param readers", () => {
+  it("readParams merges nested `parameters` over the top-level bag", () => {
+    expect(readParams({ a: 1, parameters: { b: 2 } })).toMatchObject({
+      a: 1,
+      b: 2,
+    });
+    expect(readParams(undefined)).toEqual({});
+  });
+
+  it("readStringParam trims, scans keys, ignores empties", () => {
+    expect(readStringParam({ q: "  hi " }, "q")).toBe("hi");
+    expect(readStringParam({ q: "" }, "q")).toBeUndefined();
+    expect(readStringParam({ parameters: { x: "yo" } }, "q", "x")).toBe("yo");
+  });
+
+  it("readNumberParam coerces, falls back; readBooleanParam reads keywords", () => {
+    expect(readNumberParam({ n: 5 }, "n")).toBe(5);
+    expect(readNumberParam({ n: "7" }, "n")).toBe(7);
+    expect(readNumberParam({ n: "x" }, "n", 3)).toBe(3);
+    expect(readBooleanParam({ b: "yes" }, "b")).toBe(true);
+    expect(readBooleanParam({ b: "no" }, "b")).toBe(false);
+    expect(readBooleanParam({ b: "maybe" }, "b")).toBeUndefined();
+  });
+});
+
+describe("normalizeTokenInfoSubaction", () => {
+  it("canonicalizes spacing/case to known subactions", () => {
+    expect(normalizeTokenInfoSubaction("wallet")).toBe("wallet");
+    expect(normalizeTokenInfoSubaction("New Pairs")).toBe("new_pairs");
+    expect(normalizeTokenInfoSubaction("chain pairs")).toBe("chain_pairs");
+    expect(normalizeTokenInfoSubaction(42)).toBeUndefined();
+  });
+});
+
+describe("inferTokenInfoSubaction", () => {
+  it("routes by message intent, defaults to token", () => {
+    expect(inferTokenInfoSubaction(msg("show my wallet holdings"))).toBe(
+      "wallet",
+    );
+    expect(inferTokenInfoSubaction(msg("what's trending right now"))).toBe(
+      "trending",
+    );
+    expect(inferTokenInfoSubaction(msg("search for pepe"))).toBe("search");
+    expect(inferTokenInfoSubaction(msg("tell me about this coin"))).toBe(
+      "token",
+    );
+  });
+});

package/src/analytics/token-info/params.ts

@@ -10,11 +10,13 @@ const SUBACTION_ALIASES: Record<string, TokenInfoSubaction> = {
   info: "token",
   "token-info": "token",
   token_info: "token",
-  pairs: "chain-pairs",
-  "new pairs": "new-pairs",
-  new_pairs: "new-pairs",
-  chain_pairs: "chain-pairs",
-  chainpairs: "chain-pairs",
+  pairs: "chain_pairs",
+  "new pairs": "new_pairs",
+  "new-pairs": "new_pairs",
+  new_pairs: "new_pairs",
+  chain_pairs: "chain_pairs",
+  "chain-pairs": "chain_pairs",
+  chainpairs: "chain_pairs",
   boosted_tokens: "boosted",
   boostedtokens: "boosted",
   token_profiles: "profiles",
@@ -86,7 +88,7 @@ export function normalizeTokenInfoSubaction(
   const normalized = value
     .trim()
     .toLowerCase()
-    .replace(/[\s_]+/g, "-");
+    .replace(/[\s-]+/g, "_");
   if ((TOKEN_INFO_SUBACTIONS as readonly string[]).includes(normalized)) {
     return normalized as TokenInfoSubaction;
   }
@@ -100,7 +102,7 @@ export function inferTokenInfoSubaction(
   state?: State,
 ): TokenInfoSubaction {
   const text = [
-    typeof message.content?.text === "string" ? message.content.text : "",
+    typeof message.content.text === "string" ? message.content.text : "",
     typeof state?.values?.recentMessages === "string"
       ? state.values.recentMessages
       : "",
@@ -115,7 +117,7 @@ export function inferTokenInfoSubaction(
     /\b(new|latest|fresh)\b/.test(text) &&
     /\b(pair|pairs|tokens?)\b/.test(text)
   ) {
-    return "new-pairs";
+    return "new_pairs";
   }
   if (
     /\b(pair|pairs)\b/.test(text) &&
@@ -123,7 +125,7 @@ export function inferTokenInfoSubaction(
       text,
     )
   ) {
-    return "chain-pairs";
+    return "chain_pairs";
   }
   if (/\b(trending|hot|popular|gainers)\b/.test(text)) return "trending";
   if (/\b(search|find|look for)\b/.test(text)) return "search";
@@ -137,10 +139,10 @@ export function parseTokenInfoParams(
 ): TokenInfoParams {
   const raw = readParams(options);
   const content =
-    typeof message.content?.text === "string" ? message.content.text : "";
+    typeof message.content.text === "string" ? message.content.text : "";
   const subaction =
     normalizeTokenInfoSubaction(
-      raw.subaction ?? raw.action ?? raw.operation ?? raw.kind,
+      raw.action ?? raw.subaction ?? raw.operation ?? raw.kind,
     ) ?? inferTokenInfoSubaction(message, state);
   const target = readStringParam(raw, "target", "provider", "source");
   const query =

package/src/analytics/token-info/providers.ts

@@ -1,5 +1,4 @@
-// @ts-nocheck — bridges legacy analytics services behind the consolidated TOKEN_INFO registry.
-import type { ActionResult, IAgentRuntime } from "@elizaos/core";
+import type { ActionResult, ContentValue, IAgentRuntime } from "@elizaos/core";
 import { BirdeyeProvider } from "../birdeye/birdeye";
 import { searchBirdeyeTokens } from "../birdeye/search-category";
 import type { WalletPortfolioResponse } from "../birdeye/types/api/wallet";
@@ -34,6 +33,36 @@ function failure(
   };
 }
 
+function toCallbackContentValue(value: unknown): ContentValue {
+  if (
+    value === null ||
+    value === undefined ||
+    typeof value === "string" ||
+    typeof value === "number" ||
+    typeof value === "boolean"
+  ) {
+    return value;
+  }
+  if (typeof value === "bigint" || typeof value === "symbol") {
+    return String(value);
+  }
+  if (value instanceof Date) {
+    return value.toISOString();
+  }
+  if (Array.isArray(value)) {
+    return value.map((item) => toCallbackContentValue(item));
+  }
+  if (typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, item]) => [
+        key,
+        toCallbackContentValue(item),
+      ]),
+    );
+  }
+  return undefined;
+}
+
 async function emit(
   context: TokenInfoDispatchContext,
   result: ActionResult,
@@ -41,7 +70,7 @@ async function emit(
   await context.callback?.({
     text: result.text ?? "",
     actions: ["TOKEN_INFO"],
-    data: result.data,
+    data: toCallbackContentValue(result.data),
   });
   return result;
 }
@@ -68,7 +97,7 @@ function topPairs(
     .slice(0, limit)
     .map((pair, index) => {
       const price = service.formatPrice(pair.priceUsd || pair.priceNative);
-      const volume = pair.volume?.h24
+      const volume = pair.volume.h24
         ? service.formatUsdValue(pair.volume.h24)
         : "n/a";
       const liquidity = pair.liquidity?.usd
@@ -161,8 +190,8 @@ async function executeDexScreener(
           `${mainPair.baseToken.name} (${mainPair.baseToken.symbol})`,
           `Address: ${mainPair.baseToken.address}`,
           `Price: ${service.formatPrice(mainPair.priceUsd || mainPair.priceNative)}`,
-          `24h change: ${service.formatPriceChange(mainPair.priceChange?.h24 ?? 0)}`,
-          `24h volume: ${service.formatUsdValue(mainPair.volume?.h24 ?? 0)}`,
+          `24h change: ${service.formatPriceChange(mainPair.priceChange.h24)}`,
+          `24h volume: ${service.formatUsdValue(mainPair.volume.h24)}`,
           `Top pairs:\n${topPairs(service, pairs, 3)}`,
         ].join("\n");
         return emit(
@@ -195,7 +224,7 @@ async function executeDexScreener(
           ),
         );
       }
-      case "new-pairs": {
+      case "new_pairs": {
         const limit = Math.min(25, Math.max(1, params.limit ?? 10));
         const pairs = requireDexResult(
           await service.getNewPairs({ chain: params.chain, limit }),
@@ -207,18 +236,18 @@ async function executeDexScreener(
             `New trading pairs${params.chain ? ` on ${params.chain}` : ""}:\n${topPairs(service, pairs, limit)}`,
             {
               target: "dexscreener",
-              subaction: "new-pairs",
+              subaction: "new_pairs",
               chain: params.chain,
               pairs,
             },
           ),
         );
       }
-      case "chain-pairs": {
+      case "chain_pairs": {
         if (!params.chain) {
           return emit(
             context,
-            failure("Provide chain for chain-pairs.", "MISSING_CHAIN"),
+            failure("Provide chain for chain_pairs.", "MISSING_CHAIN"),
           );
         }
         const limit = Math.min(25, Math.max(1, params.limit ?? 10));
@@ -233,7 +262,7 @@ async function executeDexScreener(
             `Top ${params.chain} pairs by ${sortBy}:\n${topPairs(service, pairs, limit)}`,
             {
               target: "dexscreener",
-              subaction: "chain-pairs",
+              subaction: "chain_pairs",
               chain: params.chain,
               sortBy,
               pairs,
@@ -315,9 +344,9 @@ function formatBirdeyeWallet(
   result: WalletPortfolioResponse,
   address: string,
 ): string {
-  const tokens = result?.data?.items?.slice(0, 10) ?? [];
+  const tokens = result.data.items.slice(0, 10);
   const totalValue =
-    typeof result?.data?.totalUsd === "number"
+    typeof result.data.totalUsd === "number"
       ? result.data.totalUsd
       : tokens.reduce(
           (sum: number, token: BirdeyePortfolioToken) =>
@@ -330,7 +359,7 @@ function formatBirdeyeWallet(
         `- ${String(token.symbol ?? "TOKEN").toUpperCase()}: $${Number(token.valueUsd ?? 0).toLocaleString()} (${token.uiAmount ?? "n/a"})`,
     )
     .join("\n");
-  return `Wallet ${address}\nTotal value: $${Number(totalValue ?? 0).toLocaleString()}\nTop holdings:\n${holdings}`;
+  return `Wallet ${address}\nTotal value: $${Number(totalValue).toLocaleString()}\nTop holdings:\n${holdings}`;
 }
 
 async function executeBirdeye(
@@ -603,7 +632,7 @@ async function executeCoingecko(
       }>(runtime, "/search/trending");
       const coins = (result.coins ?? [])
         .map((entry) => entry.item)
-        .filter(Boolean)
+        .filter((coin): coin is NonNullable<typeof coin> => coin !== undefined)
         .slice(0, params.limit ?? 10);
       const text = coins
         .map(
@@ -650,8 +679,8 @@ export function createDexScreenerTokenInfoProvider(): TokenInfoProvider {
       "search",
       "token",
       "trending",
-      "new-pairs",
-      "chain-pairs",
+      "new_pairs",
+      "chain_pairs",
       "boosted",
       "profiles",
     ],

package/src/analytics/token-info/service.ts

@@ -18,8 +18,8 @@ const DEFAULT_PROVIDER_BY_SUBACTION: Record<TokenInfoSubaction, string> = {
   search: "dexscreener",
   token: "dexscreener",
   trending: "dexscreener",
-  "new-pairs": "dexscreener",
-  "chain-pairs": "dexscreener",
+  new_pairs: "dexscreener",
+  chain_pairs: "dexscreener",
   boosted: "dexscreener",
   profiles: "dexscreener",
   wallet: "birdeye",
@@ -36,7 +36,7 @@ export class TokenInfoService extends Service {
   static override serviceType = TOKEN_INFO_SERVICE_TYPE;
 
   override capabilityDescription =
-    "Token information provider registry for DexScreener, Birdeye, CoinGecko, and future crypto data sources";
+    "Token information provider registry for DexScreener, Birdeye, CoinGecko, and additional crypto data sources";
 
   private readonly providers = new Map<string, TokenInfoProvider>();
   private readonly aliases = new Map<string, string>();

package/src/analytics/token-info/types.ts

@@ -11,8 +11,8 @@ export const TOKEN_INFO_SUBACTIONS = [
   "search",
   "token",
   "trending",
-  "new-pairs",
-  "chain-pairs",
+  "new_pairs",
+  "chain_pairs",
   "boosted",
   "profiles",
   "wallet",

package/src/api/wallet-routes.test.ts

@@ -0,0 +1,56 @@
+import { describe, expect, it, vi } from "vitest";
+import { handleWalletRoutes, type WalletRouteContext } from "./wallet-routes";
+
+function buildCtx(): {
+  ctx: WalletRouteContext;
+  res: { statusCode?: number; body?: unknown };
+  readJsonBody: ReturnType<typeof vi.fn>;
+  resolveWalletExportRejection: ReturnType<typeof vi.fn>;
+} {
+  const res: { statusCode?: number; body?: unknown } = {};
+  const readJsonBody = vi.fn(async () => ({
+    confirm: true,
+    exportToken: "token",
+  }));
+  const resolveWalletExportRejection = vi.fn(() => null);
+  const ctx = {
+    req: { headers: {} },
+    res,
+    method: "POST",
+    pathname: "/api/wallet/export",
+    config: {},
+    saveConfig: vi.fn(),
+    ensureWalletKeysInEnvAndConfig: vi.fn(() => true),
+    resolveWalletExportRejection,
+    deps: {},
+    readJsonBody,
+    json(target: typeof res, data: unknown, status = 200) {
+      target.statusCode = status;
+      target.body = data;
+    },
+    error(target: typeof res, message: string, status = 400) {
+      target.statusCode = status;
+      target.body = { error: message };
+    },
+  } as unknown as WalletRouteContext;
+  return { ctx, res, readJsonBody, resolveWalletExportRejection };
+}
+
+describe("wallet route contracts", () => {
+  it("keeps plaintext private-key export removed from the agent API", async () => {
+    const { ctx, res, readJsonBody, resolveWalletExportRejection } = buildCtx();
+
+    await expect(handleWalletRoutes(ctx)).resolves.toBe(true);
+
+    expect(res.statusCode).toBe(410);
+    expect(res.body).toEqual({
+      error:
+        "Private key export has been removed. Use Steward or OS-backed custody flows.",
+    });
+    expect(JSON.stringify(res.body)).not.toMatch(
+      /privateKey|secretKey|mnemonic|seed/i,
+    );
+    expect(readJsonBody).not.toHaveBeenCalled();
+    expect(resolveWalletExportRejection).not.toHaveBeenCalled();
+  });
+});