@waiaas/skills 2.10.0-rc.8 → 2.10.0

package/README.md

@@ -5,7 +5,7 @@
 [![npm downloads](https://img.shields.io/npm/dt/@waiaas/core)](https://www.npmjs.com/package/@waiaas/core)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Node.js](https://img.shields.io/badge/Node.js-22_LTS-green.svg)](https://nodejs.org/)
-[![Tests](https://img.shields.io/badge/Tests-3%2C599_passing-brightgreen.svg)](#)
+[![Tests](https://img.shields.io/endpoint?url=https://gist.githubusercontent.com/minhoyoo-iotrust/8eaa6e6fa868042de1a47f1b600df0f6/raw/waiaas-test-badge.json)](#)
 
 A self-hosted wallet daemon that lets AI agents perform on-chain transactions securely -- while the owner keeps full control of funds.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waiaas/skills",
-  "version": "2.10.0-rc.8",
+  "version": "2.10.0",
   "description": "WAIaaS skill files for AI agents - install via npx @waiaas/skills add <name>",
   "license": "MIT",
   "type": "module",

package/skills/actions.skill.md

@@ -2,8 +2,8 @@
 name: "WAIaaS Actions"
 description: "Action Provider framework: list providers, execute DeFi actions through the 6-stage transaction pipeline"
 category: "api"
-tags: [wallet, blockchain, defi, actions, waiass, jupiter, 0x, swap, lifi, bridge, cross-chain, lido, jito, staking, liquid-staking, pendle, yield, pt, yt, drift, perp, perpetual, leverage, futures]
-version: "2.10.0-rc.8"
+tags: [wallet, blockchain, defi, actions, waiass, jupiter, 0x, swap, lifi, bridge, cross-chain, lido, jito, staking, liquid-staking, pendle, yield, pt, yt, drift, perp, perpetual, leverage, futures, dcent-swap, dcent, aggregator, across, across-bridge, polymarket, prediction-market, clob, ctf]
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]
@@ -1589,7 +1589,216 @@ The ERC-8004 provider enables on-chain agent identity registration, reputation m
 
 For full action documentation, input schemas, SDK methods, and MCP tools, see **erc8004.skill.md**.
 
-## 13. Policy Integration
+## 13. D'CENT Swap Aggregator -- Built-in Provider (Multi-Chain)
+
+D'CENT Swap Aggregator aggregates multiple DEX providers to offer optimal swap routes across EVM chains and Solana. Supports same-chain DEX swaps (approve+txdata BATCH), cross-chain swaps (`cross_swap` providerType), and 2-hop auto-routing fallback when direct routes are unavailable.
+
+- **Provider name:** `dcent_swap`
+- **Chains:** ethereum, solana (multi-chain via provider network)
+- **Requires API key:** No
+- **Feature gate:** `actions.dcent_swap_enabled` (default: true)
+- **Aggregated providers:** 1inch, SushiSwap, Uniswap Labs, SwapScanner, Rubic, ButterSwap, LI.FI
+- **Provider types:** `swap` (same-chain DEX), `cross_swap` (cross-chain DEX)
+
+### Actions (2)
+
+| Action | Description | Tier | Risk |
+|--------|-------------|------|------|
+| `get_quotes` | Get swap quotes with provider comparison — supports same-chain and cross-chain swaps (informational) | INSTANT | low |
+| `dex_swap` | Execute DEX swap — supports same-chain and cross-chain swaps (approve+txdata BATCH for ERC-20, single CONTRACT_CALL for native) | DELAY | high |
+
+### Admin Settings Keys (5)
+
+| Key | Default | Description |
+|-----|---------|-------------|
+| `actions.dcent_swap_enabled` | `true` | Enable/disable D'CENT Swap Aggregator |
+| `actions.dcent_swap_api_url` | `https://agent-swap.dcentwallet.com` | D'CENT Swap API base URL |
+| `actions.dcent_swap_default_slippage_bps` | `100` | Default slippage (1%) |
+| `actions.dcent_swap_max_slippage_bps` | `500` | Maximum slippage (5%) |
+| `actions.dcent_swap_currency_cache_ttl_ms` | `86400000` | Currency list cache TTL (24h) |
+
+### Example: Get Quotes
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/dcent_swap/get_quotes \
+  -H 'Content-Type: application/json' \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -d '{
+    "params": {
+      "fromAsset": "eip155:1/slip44:60",
+      "toAsset": "eip155:1/erc20:0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",
+      "amount": "1000000000000000000",
+      "fromDecimals": 18,
+      "toDecimals": 6
+    },
+    "network": "ethereum-mainnet"
+  }'
+```
+
+### Example: DEX Swap
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/dcent_swap/dex_swap \
+  -H 'Content-Type: application/json' \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -d '{
+    "params": {
+      "fromAsset": "eip155:1/slip44:60",
+      "toAsset": "eip155:1/erc20:0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",
+      "amount": "1000000000000000000",
+      "fromDecimals": 18,
+      "toDecimals": 6,
+      "slippageBps": 100
+    },
+    "network": "ethereum-mainnet"
+  }'
+```
+
+### Policy Interaction
+
+- **DEX Swap (dex_swap):** Resolves to CONTRACT_CALL targeting DEX router address. Subject to CONTRACT_WHITELIST (provider-trust bypass applies when enabled), ALLOWED_TOKENS, APPROVED_SPENDERS, and SPENDING_LIMIT policies.
+- **2-hop auto-routing:** When direct route unavailable (`fail_no_available_provider`), attempts intermediate token (ETH/USDC/USDT) routing. Multi-step BATCH with cumulative fee/slippage calculation.
+
+### SDK Methods
+
+```typescript
+const quotes = await client.getDcentQuotes({ fromAsset, toAsset, amount, fromDecimals, toDecimals, network });
+const swap = await client.dcentDexSwap({ fromAsset, toAsset, amount, fromDecimals, toDecimals, network });
+```
+
+### MCP Tools
+
+- `action_dcent_swap_get_quotes` -- Get swap quotes from D'CENT Swap Aggregator
+- `action_dcent_swap_dex_swap` -- Execute DEX swap via D'CENT Swap Aggregator
+
+## 14. Across Bridge -- Built-in Provider (EVM)
+
+Intent-based cross-chain bridge with fast relayer fills (2-10 seconds). Supports Ethereum, Arbitrum, Optimism, Base, Polygon, Linea.
+
+### Prerequisites (Admin)
+- Enable via Admin Settings: `actions.across_bridge_enabled = true`
+- Add SpokePool addresses to CONTRACT_WHITELIST for each chain (or rely on provider-trust bypass)
+
+### Admin Settings
+
+| Key | Default | Description |
+|-----|---------|-------------|
+| `actions.across_bridge_enabled` | `false` | Enable Across Bridge |
+| `actions.across_bridge_api_base_url` | `https://app.across.to/api` | API base URL |
+| `actions.across_bridge_integrator_id` | (empty) | Integrator ID |
+| `actions.across_bridge_fill_deadline_buffer_sec` | `21600` | Fill deadline buffer (6h) |
+| `actions.across_bridge_default_slippage_pct` | `0.01` | Default slippage (1%) |
+| `actions.across_bridge_max_slippage_pct` | `0.03` | Max slippage (3%) |
+| `actions.across_bridge_request_timeout_ms` | `10000` | Request timeout (ms) |
+
+### Available Actions
+
+#### across_bridge / quote -- Get Bridge Quote
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/across_bridge/quote \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{"params":{"fromChain":"ethereum","toChain":"arbitrum","inputToken":"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","outputToken":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","amount":"1000000000"}}'
+```
+
+Returns: inputAmount, outputAmount, totalFee, feeBreakdown (lpFee, relayerCapitalFee, relayerGasFee), estimatedFillTimeSec, limits.
+
+#### across_bridge / execute -- Execute Cross-chain Bridge
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/across_bridge/execute \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{"params":{"fromChain":"ethereum","toChain":"arbitrum","inputToken":"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","outputToken":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","amount":"1000000000"}}'
+```
+
+Executes approve+depositV3 BATCH (ERC-20) or single depositV3 with msg.value (native ETH). Bridge status tracked automatically via 2-phase polling.
+
+#### across_bridge / status -- Check Bridge Status
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/across_bridge/status \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{"params":{"depositTxHash":"0xabc..."}}'
+```
+
+Returns: status (filled/pending/expired/refunded), fillTxHash, depositId.
+
+#### across_bridge / routes -- List Available Routes
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/across_bridge/routes \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{"params":{}}'
+```
+
+Returns supported chain/token route combinations.
+
+### MCP Tools (auto-registered)
+
+- `action_across_bridge_quote` -- Get Across bridge quote
+- `action_across_bridge_execute` -- Execute cross-chain bridge
+- `action_across_bridge_status` -- Check bridge deposit status
+- `action_across_bridge_routes` -- List available routes
+
+## 15. Polymarket Prediction Market
+
+Polymarket trades on Polygon using CLOB off-chain orders and CTF on-chain settlement. Two providers: `polymarket_order` (CLOB) and `polymarket_ctf` (on-chain). Requires Polygon wallet.
+
+### Setup
+
+```bash
+curl -s -X POST http://localhost:3100/v1/wallets/${WALLET_ID}/polymarket/setup \
+  -H 'Authorization: Bearer wai_sess_eyJ...'
+```
+
+### CLOB Trading Actions (polymarket_order)
+
+| Action | Tier | Description |
+|--------|------|-------------|
+| `pm_buy` | APPROVAL | Buy outcome tokens |
+| `pm_sell` | DELAY | Sell outcome tokens |
+| `pm_cancel_order` | INSTANT | Cancel order by ID |
+| `pm_cancel_all` | INSTANT | Cancel all orders |
+| `pm_update_order` | DELAY | Update order (cancel+replace) |
+
+### CTF On-chain Actions (polymarket_ctf)
+
+| Action | Tier | Description |
+|--------|------|-------------|
+| `pm_split_position` | DELAY | Split USDC to outcome tokens |
+| `pm_merge_positions` | DELAY | Merge outcome tokens to USDC |
+| `pm_redeem_positions` | INSTANT | Redeem winning tokens |
+| `pm_approve_collateral` | INSTANT | Approve USDC.e for CTF |
+| `pm_approve_ctf` | INSTANT | Approve CTF ERC-1155 tokens |
+
+### Admin Settings
+
+| Key | Default | Description |
+|-----|---------|-------------|
+| `actions.polymarket_enabled` | `false` | Enable Polymarket |
+| `actions.polymarket_default_fee_bps` | `0` | Default fee (bps) |
+| `actions.polymarket_order_expiry_seconds` | `86400` | Order expiry |
+| `actions.polymarket_max_position_usdc` | `1000` | Max position USDC |
+| `actions.polymarket_proxy_wallet` | `false` | Proxy wallet mode |
+| `actions.polymarket_neg_risk_enabled` | `true` | Neg risk routing |
+| `actions.polymarket_auto_approve_ctf` | `true` | Auto approve CTF |
+
+### Example: Buy on Prediction Market
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/polymarket_order/pm_buy \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{"walletId":"WALLET_ID","params":{"tokenId":"TOKEN_ID","price":"0.65","size":"100"}}'
+```
+
+See **polymarket.skill.md** for full reference.
+
+## 16. Policy Integration
 
 ### CONTRACT_WHITELIST
 
@@ -1616,7 +1825,7 @@ The swap/bridge input amount is converted to USD via IPriceOracle and evaluated
 
 **LI.FI bridge reservation lifecycle:** Bridge amounts are reserved against the spending limit when the transaction is submitted. The reservation is released on terminal states (COMPLETED, FAILED, REFUNDED) but **held** on TIMEOUT to prevent double-spend during manual resolution. This means the spending budget is not freed until the bridge completes or fails definitively.
 
-## 14. Configuration via Admin Settings
+## 17. Configuration via Admin Settings
 
 Since v28.2, all action provider settings are managed via **Admin UI > DeFi (`#/defi`)** for DeFi providers and **Admin UI > Agent Identity (`#/agent-identity`)** for ERC-8004 (not config.toml). The Admin Settings UI provides:
 
@@ -1656,7 +1865,7 @@ Operators can override the default security tier for individual actions. This al
 
 **Cross-reference:** Policy tier escalation rules apply on top of action tier. See **policies.skill.md** Section 3.
 
-## 15. Error Reference
+## 18. Error Reference
 
 | Code | HTTP | Description | Recovery |
 |------|------|-------------|----------|
@@ -1672,7 +1881,7 @@ Operators can override the default security tier for individual actions. This al
 | `INVALID_INSTRUCTION` | 400 | Chain not supported by LI.FI integration. | Use one of the supported chains: solana, ethereum, polygon, arbitrum, optimism, base. |
 | `ACTION_API_ERROR` | 502 | LI.FI API returned an error. | Check LI.FI API status, verify parameters, retry. |
 
-## 16. MCP Auto-Registration
+## 19. MCP Auto-Registration
 
 When a provider has `mcpExpose: true` in its metadata, the MCP server automatically registers each action as an MCP tool using the naming convention:
 
@@ -1723,10 +1932,11 @@ MCP tool parameters:
 - `network` (optional string): Target network
 - `wallet_id` (optional string): Target wallet ID
 
-## 17. Related Skill Files
+## 20. Related Skill Files
 
 - **admin.skill.md** -- API key management, Admin Settings, daemon admin
 - **transactions.skill.md** -- 5-type transaction reference (actions execute as CONTRACT_CALL)
 - **policies.skill.md** -- Policy management (CONTRACT_WHITELIST, SPENDING_LIMIT, REPUTATION_THRESHOLD)
 - **wallet.skill.md** -- Wallet CRUD, sessions, assets
 - **erc8004.skill.md** -- ERC-8004 trustless agent identity and reputation
+- **polymarket.skill.md** -- Polymarket prediction market trading (CLOB + CTF)

package/skills/admin.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS Admin"
 description: "Admin API: daemon status, kill switch, notifications, settings management, JWT rotation, shutdown, oracle status, API key management, audit logs, backup, webhooks, stats, autostop"
 category: "api"
 tags: [wallet, blockchain, admin, security, oracle, defi, waiass, audit, backup, webhook, stats, autostop]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]
@@ -1469,7 +1469,39 @@ Add a provider later with `PUT /v1/wallets/{id}/provider` to enable **Full mode*
 
 In Admin UI, the wallet create form defaults to **None (Lite mode)** for the Provider dropdown. Lite/Full mode is shown as badges in the wallet list and detail pages.
 
-## 17. Related Skill Files
+## 17. Hyperliquid Settings
+
+Hyperliquid Perp Trading settings under the `actions` category:
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| `actions.hyperliquid_enabled` | boolean | `false` | Enable Hyperliquid Perp trading |
+| `actions.hyperliquid_network` | string | `mainnet` | `mainnet` or `testnet` |
+| `actions.hyperliquid_api_url` | string | `` | Custom API URL (overrides network default) |
+| `actions.hyperliquid_rate_limit_weight_per_min` | number | `600` | Rate limit weight per minute (Hyperliquid max: 1200) |
+| `actions.hyperliquid_default_leverage` | number | `1` | Default leverage for new positions |
+| `actions.hyperliquid_default_margin_mode` | string | `CROSS` | Default margin mode: `CROSS` or `ISOLATED` |
+| `actions.hyperliquid_builder_address` | string | `` | Builder fee recipient address |
+| `actions.hyperliquid_builder_fee` | number | `0` | Builder fee in basis points |
+| `actions.hyperliquid_order_status_poll_interval_ms` | number | `2000` | Order status polling interval |
+
+```bash
+# Enable Hyperliquid and set default leverage to 3x
+curl -X PUT http://localhost:3100/v1/admin/settings \
+  -H "X-Master-Password: $PASS" \
+  -H "Content-Type: application/json" \
+  -d '{"settings":{"actions.hyperliquid_enabled":"true","actions.hyperliquid_default_leverage":"3"}}'
+
+# Switch to testnet
+curl -X PUT http://localhost:3100/v1/admin/settings \
+  -H "X-Master-Password: $PASS" \
+  -H "Content-Type: application/json" \
+  -d '{"settings":{"actions.hyperliquid_network":"testnet"}}'
+```
+
+Admin UI: DeFi > Hyperliquid > Settings tab provides a form editor for all runtime keys.
+
+## 18. Related Skill Files
 
 - **actions.skill.md** -- Action Provider REST API (DeFi actions)
 - **policies.skill.md** -- Policy management (14 policy types for transaction controls)

package/skills/erc8004.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS ERC-8004"
 description: "ERC-8004 Trustless Agents: identity registration, reputation management, on-chain validation"
 category: "api"
 tags: [wallet, blockchain, erc-8004, identity, reputation, validation, trust, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]

package/skills/erc8128.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS ERC-8128"
 description: "ERC-8128 Signed HTTP Requests: RFC 9421 + EIP-191 signature for API authentication"
 category: "api"
 tags: [wallet, blockchain, erc-8128, signing, rfc9421, http, authentication, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]

package/skills/nft.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS NFT Operations"
 description: "NFT query, transfer, and approval operations for ERC-721, ERC-1155, and Metaplex standards"
 category: "api"
 tags: [wallet, blockchain, nft, erc721, erc1155, metaplex, solana, ethereum, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]

package/skills/policies.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS Policies"
 description: "Policy engine CRUD: 14 policy types for spending limits, whitelists, time restrictions, rate limits, token/contract/approve controls, network restrictions, x402 domain controls, ERC-8128 domain controls, reputation threshold"
 category: "api"
 tags: [wallet, blockchain, policies, security, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]

package/skills/polymarket.skill.md

@@ -0,0 +1,343 @@
+---
+name: "WAIaaS Polymarket"
+description: "Polymarket prediction market trading: CLOB off-chain orders, CTF on-chain settlement, market data, position tracking"
+category: "api"
+tags: [polymarket, prediction-market, clob, ctf, defi, polygon, usdc]
+version: "2.10.0"
+dispatch:
+  kind: "tool"
+  allowedCommands: ["curl"]
+---
+
+# WAIaaS Polymarket
+
+Polymarket prediction market integration for AI agents. Trade on prediction markets using CLOB (Central Limit Order Book) off-chain orders and CTF (Conditional Token Framework) on-chain settlement. Runs exclusively on Polygon network using USDC.e as collateral.
+
+> AI agents must NEVER request the master password. Use only your session token.
+
+## Base URL / Authentication
+
+```
+http://localhost:3100
+```
+
+All endpoints require **sessionAuth** via `Authorization: Bearer <token>` header.
+
+## Prerequisites
+
+1. **Polygon wallet** -- Polymarket requires a wallet on `polygon-mainnet` network
+2. **Polymarket enabled** -- Admin must set `actions.polymarket_enabled = true` in Admin Settings
+3. **API keys** -- Run setup to create Polymarket CLOB API keys for the wallet
+
+## 1. Setup
+
+### POST /v1/wallets/{walletId}/polymarket/setup -- Create API Keys
+
+Creates Polymarket CLOB API keys for the specified wallet. Required before placing orders.
+
+```bash
+curl -s -X POST http://localhost:3100/v1/wallets/${WALLET_ID}/polymarket/setup \
+  -H 'Authorization: Bearer wai_sess_eyJ...'
+```
+
+**Response (200):**
+```json
+{
+  "setup": {
+    "created": true,
+    "apiKey": "...",
+    "walletId": "..."
+  }
+}
+```
+
+## 2. CLOB Trading Actions (polymarket_order)
+
+All CLOB actions are executed via the action provider framework. Orders are placed off-chain on the Polymarket CLOB.
+
+### pm_buy -- Buy Outcome Tokens
+
+**Default Tier:** APPROVAL (requires owner approval)
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/polymarket_order/pm_buy \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{
+    "walletId": "WALLET_ID",
+    "params": {
+      "tokenId": "TOKEN_ID",
+      "price": "0.65",
+      "size": "100"
+    }
+  }'
+```
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `tokenId` | string | yes | Outcome token ID from market data |
+| `price` | string | yes | Price per token (0-1 range, e.g. "0.65" = 65 cents) |
+| `size` | string | yes | Number of tokens to buy |
+| `feeRateBps` | number | no | Fee rate override (basis points) |
+| `nonce` | string | no | Custom nonce |
+| `expiration` | number | no | Custom expiry (unix timestamp) |
+
+### pm_sell -- Sell Outcome Tokens
+
+**Default Tier:** DELAY
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/polymarket_order/pm_sell \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{
+    "walletId": "WALLET_ID",
+    "params": {
+      "tokenId": "TOKEN_ID",
+      "price": "0.70",
+      "size": "50"
+    }
+  }'
+```
+
+Same params as pm_buy.
+
+### pm_cancel_order -- Cancel Single Order
+
+**Default Tier:** INSTANT
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/polymarket_order/pm_cancel_order \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{
+    "walletId": "WALLET_ID",
+    "params": {
+      "orderId": "ORDER_ID"
+    }
+  }'
+```
+
+### pm_cancel_all -- Cancel All Orders
+
+**Default Tier:** INSTANT
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/polymarket_order/pm_cancel_all \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{
+    "walletId": "WALLET_ID",
+    "params": {
+      "conditionId": "CONDITION_ID"
+    }
+  }'
+```
+
+| Param | Type | Required | Description |
+|-------|------|----------|-------------|
+| `conditionId` | string | no | Filter by market condition ID (omit for all) |
+
+### pm_update_order -- Update Order
+
+**Default Tier:** DELAY (cancel + replace)
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/polymarket_order/pm_update_order \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{
+    "walletId": "WALLET_ID",
+    "params": {
+      "tokenId": "TOKEN_ID",
+      "price": "0.70",
+      "size": "100",
+      "orderId": "EXISTING_ORDER_ID"
+    }
+  }'
+```
+
+## 3. CTF On-chain Actions (polymarket_ctf)
+
+CTF actions execute on-chain transactions on the Conditional Token Framework contracts.
+
+### pm_split_position -- Split USDC to Outcome Tokens
+
+**Default Tier:** DELAY
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/polymarket_ctf/pm_split_position \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{
+    "walletId": "WALLET_ID",
+    "params": {
+      "conditionId": "CONDITION_ID",
+      "amount": "100"
+    }
+  }'
+```
+
+### pm_merge_positions -- Merge Outcome Tokens to USDC
+
+**Default Tier:** DELAY
+
+Same params as pm_split_position.
+
+### pm_redeem_positions -- Redeem Winning Tokens
+
+**Default Tier:** INSTANT (post-resolution, no risk)
+
+```bash
+curl -s -X POST http://localhost:3100/v1/actions/polymarket_ctf/pm_redeem_positions \
+  -H 'Authorization: Bearer wai_sess_eyJ...' \
+  -H 'Content-Type: application/json' \
+  -d '{
+    "walletId": "WALLET_ID",
+    "params": {
+      "conditionId": "CONDITION_ID"
+    }
+  }'
+```
+
+### pm_approve_collateral -- Approve USDC.e for CTF
+
+**Default Tier:** INSTANT
+
+### pm_approve_ctf -- Approve CTF ERC-1155
+
+**Default Tier:** INSTANT
+
+## 4. Query Endpoints
+
+### GET /v1/wallets/{walletId}/polymarket/positions -- List Positions
+
+```bash
+curl -s http://localhost:3100/v1/wallets/${WALLET_ID}/polymarket/positions \
+  -H 'Authorization: Bearer wai_sess_eyJ...'
+```
+
+### GET /v1/wallets/{walletId}/polymarket/orders -- List Orders
+
+```bash
+curl -s "http://localhost:3100/v1/wallets/${WALLET_ID}/polymarket/orders?status=LIVE" \
+  -H 'Authorization: Bearer wai_sess_eyJ...'
+```
+
+| Param | Type | Description |
+|-------|------|-------------|
+| `status` | string | Filter: LIVE, MATCHED, CANCELLED |
+
+### GET /v1/wallets/{walletId}/polymarket/balance -- Token Balance
+
+```bash
+curl -s http://localhost:3100/v1/wallets/${WALLET_ID}/polymarket/balance \
+  -H 'Authorization: Bearer wai_sess_eyJ...'
+```
+
+### GET /v1/wallets/{walletId}/polymarket/pnl -- PnL Summary
+
+```bash
+curl -s http://localhost:3100/v1/wallets/${WALLET_ID}/polymarket/pnl \
+  -H 'Authorization: Bearer wai_sess_eyJ...'
+```
+
+### GET /v1/polymarket/markets -- Browse Markets
+
+```bash
+curl -s "http://localhost:3100/v1/polymarket/markets?keyword=election&limit=10" \
+  -H 'Authorization: Bearer wai_sess_eyJ...'
+```
+
+| Param | Type | Description |
+|-------|------|-------------|
+| `keyword` | string | Search query |
+| `category` | string | Category filter |
+| `limit` | number | Max results |
+
+### GET /v1/polymarket/markets/{conditionId} -- Market Detail
+
+```bash
+curl -s http://localhost:3100/v1/polymarket/markets/${CONDITION_ID} \
+  -H 'Authorization: Bearer wai_sess_eyJ...'
+```
+
+### GET /v1/polymarket/events -- List Events
+
+```bash
+curl -s http://localhost:3100/v1/polymarket/events \
+  -H 'Authorization: Bearer wai_sess_eyJ...'
+```
+
+## 5. Workflow Examples
+
+### Workflow 1: Search Market and Buy
+
+1. Search markets: `GET /v1/polymarket/markets?keyword=election`
+2. Get market detail: `GET /v1/polymarket/markets/{conditionId}`
+3. Setup (first time): `POST /v1/wallets/{id}/polymarket/setup`
+4. Buy outcome tokens: `POST /v1/actions/polymarket_order/pm_buy`
+5. Check position: `GET /v1/wallets/{id}/polymarket/positions`
+
+### Workflow 2: Redeem Resolved Market
+
+1. Check positions: `GET /v1/wallets/{id}/polymarket/positions`
+2. Find resolved positions with `resolved: true`
+3. Redeem: `POST /v1/actions/polymarket_ctf/pm_redeem_positions`
+4. Verify balance: `GET /v1/wallets/{id}/polymarket/balance`
+
+### Workflow 3: Position Management
+
+1. View PnL: `GET /v1/wallets/{id}/polymarket/pnl`
+2. Sell losing position: `POST /v1/actions/polymarket_order/pm_sell`
+3. Cancel pending orders: `POST /v1/actions/polymarket_order/pm_cancel_all`
+
+## 6. Admin Settings
+
+| Key | Default | Description |
+|-----|---------|-------------|
+| `actions.polymarket_enabled` | `false` | Enable Polymarket integration |
+| `actions.polymarket_default_fee_bps` | `0` | Default maker/taker fee (basis points) |
+| `actions.polymarket_order_expiry_seconds` | `86400` | Order expiry (24h default) |
+| `actions.polymarket_max_position_usdc` | `1000` | Max position size in USDC |
+| `actions.polymarket_proxy_wallet` | `false` | Use proxy wallet for CLOB signing |
+| `actions.polymarket_neg_risk_enabled` | `true` | Auto-route neg risk markets |
+| `actions.polymarket_auto_approve_ctf` | `true` | Auto-approve CTF token allowances |
+
+Admin UI: Navigate to `#/polymarket` > Settings tab.
+
+## 7. MCP Tools
+
+8 query tools registered in MCP server:
+
+- `waiaas_pm_get_positions` -- Get wallet positions
+- `waiaas_pm_get_orders` -- Get wallet orders
+- `waiaas_pm_get_markets` -- Search/browse markets
+- `waiaas_pm_get_market_detail` -- Get market detail by condition ID
+- `waiaas_pm_get_events` -- List prediction events
+- `waiaas_pm_get_balance` -- Get CTF token balance
+- `waiaas_pm_get_pnl` -- Get PnL summary
+- `waiaas_pm_setup` -- Create API keys for wallet
+
+## 8. SDK Methods
+
+15 convenience methods on WAIaaSClient:
+
+**Actions:** `pmBuy`, `pmSell`, `pmCancelOrder`, `pmCancelAll`, `pmUpdateOrder`, `pmSplitPosition`, `pmMergePositions`, `pmRedeemPositions`
+
+**Queries:** `pmGetPositions`, `pmGetOrders`, `pmGetMarkets`, `pmGetMarketDetail`, `pmGetBalance`, `pmGetPnl`, `pmSetup`
+
+## 9. Notes
+
+- **Polygon only** -- All Polymarket operations require a wallet on `polygon-mainnet`. Other networks will return INVALID_NETWORK error.
+- **USDC.e collateral** -- Polymarket uses USDC.e (bridged USDC on Polygon) as collateral for all trades.
+- **Neg Risk routing** -- Markets with neg risk flag are automatically routed to the NegRiskCTFExchange contract.
+- **Spending limits** -- `pm_buy` spending (price * size in USDC) is evaluated against SPENDING_LIMIT policies. `pm_sell`, `pm_cancel_*` have zero spending.
+- **connect-info** -- When `actions.polymarket_enabled = true`, the `polymarket` capability is included in `GET /v1/connect-info` for agent self-discovery.
+
+## 10. Related Skill Files
+
+- **actions.skill.md** -- Action Provider framework, policy integration
+- **wallet.skill.md** -- Wallet CRUD, sessions
+- **policies.skill.md** -- SPENDING_LIMIT, CONTRACT_WHITELIST
+- **admin.skill.md** -- Admin Settings management

package/skills/quickstart.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS Quickset"
 description: "End-to-end quickset: create wallet, session, check balance, send first transfer"
 category: "api"
 tags: [wallet, blockchain, solana, ethereum, quickset, quickstart, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]

package/skills/session-recovery.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS Session Recovery"
 description: "Recover from expired or permanently expired session tokens"
 category: "api"
 tags: [wallet, blockchain, session, recovery, token, expired, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]

package/skills/setup.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS Setup"
 description: "Zero-state daemon setup: install CLI, initialize, start daemon, create wallet, configure session"
 category: "api"
 tags: [wallet, blockchain, solana, ethereum, setup, install, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl", "npm", "npx", "waiaas", "which"]

package/skills/transactions.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS Transactions"
 description: "All 6 transaction types (TRANSFER, TOKEN_TRANSFER, CONTRACT_CALL, APPROVE, BATCH, NFT_TRANSFER) with lifecycle management"
 category: "api"
 tags: [wallet, blockchain, solana, ethereum, transactions, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]
@@ -49,7 +49,7 @@ All transaction types accept a `network` parameter to specify the target network
 
 ## 2. Type 1: TRANSFER (Native SOL/ETH)
 
-Transfer native tokens to a recipient address. No policy prerequisite -- subject to SPENDING_LIMIT if configured.
+Transfer native tokens to a recipient address. No policy prerequisite -- subject to SPENDING_LIMIT if configured. DCent Exchange uses TRANSFER to send funds to the exchange service's payInAddress for cross-chain swaps.
 
 ### Request
 
@@ -274,7 +274,7 @@ Parameters:
 
 ## 6. Type 5: BATCH (Multiple Instructions)
 
-Execute multiple instructions in a single transaction. **Solana only** -- EVM returns `BATCH_NOT_SUPPORTED` error.
+Execute multiple instructions in a single transaction. **Solana only** -- EVM returns `BATCH_NOT_SUPPORTED` error. DCent DEX Swap uses BATCH with approve + swap txdata for ERC-20 sell orders (resolved internally by the action provider, not user-facing BATCH).
 
 ### Request
 
@@ -1284,3 +1284,253 @@ const signed = await client.signUserOp('wallet-id', {
   userOperation: { ...build, callGasLimit: '0x...', ... },
 });
 ```
+
+## Hyperliquid Perp Trading
+
+Hyperliquid perpetual futures trading via the action provider pipeline. Requires `actions.hyperliquid_enabled=true` in Admin Settings.
+
+> AI agents must NEVER request the master password. Use only your session token.
+
+### Action Endpoints (through pipeline)
+
+Actions go through the standard `/v1/actions/hyperliquid_perp/{action}` route with policy evaluation.
+
+```bash
+# Open a market long position (10x leverage, 1 ETH)
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_perp/hl_open_position \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"ETH","side":"LONG","size":"1","leverage":10,"order_type":"MARKET"}'
+
+# Place a limit buy order
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_perp/hl_place_order \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"ETH","side":"BUY","size":"0.5","price":"2000","order_type":"LIMIT","time_in_force":"GTC"}'
+
+# Set stop-loss (trigger order)
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_perp/hl_place_order \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"ETH","side":"SELL","size":"1","price":"1800","order_type":"STOP","trigger_price":"1810","time_in_force":"GTC","reduce_only":true}'
+
+# Close a position
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_perp/hl_close_position \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"ETH"}'
+
+# Set leverage for a market
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_perp/hl_set_leverage \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"ETH","leverage":5,"is_cross":true}'
+```
+
+### Query Endpoints (no pipeline, direct)
+
+```bash
+# Get positions
+curl http://localhost:3100/v1/wallets/$WID/hyperliquid/positions \
+  -H "X-Master-Password: $PASS"
+
+# Get open orders
+curl http://localhost:3100/v1/wallets/$WID/hyperliquid/orders \
+  -H "X-Master-Password: $PASS"
+
+# Get account state (balances, margins)
+curl http://localhost:3100/v1/wallets/$WID/hyperliquid/account \
+  -H "X-Master-Password: $PASS"
+
+# Get trade history
+curl http://localhost:3100/v1/wallets/$WID/hyperliquid/fills?limit=50 \
+  -H "X-Master-Password: $PASS"
+
+# Get market list (no wallet needed)
+curl http://localhost:3100/v1/hyperliquid/markets \
+  -H "X-Master-Password: $PASS"
+
+# Get funding rates
+curl http://localhost:3100/v1/hyperliquid/funding-rates?market=ETH \
+  -H "X-Master-Password: $PASS"
+```
+
+### MCP Tools
+
+Action tools (7, auto-registered via provider):
+- `hl_open_position`: Open a perp position (market/limit)
+- `hl_close_position`: Close a perp position
+- `hl_place_order`: Place an order (limit/stop/take-profit)
+- `hl_cancel_order`: Cancel an open order
+- `hl_set_leverage`: Set leverage for a market
+- `hl_set_margin_mode`: Set margin mode (cross/isolated)
+- `hl_transfer_usdc`: Transfer USDC between spot and perp
+
+Query tools (6, manually registered):
+- `waiaas_hl_get_positions`: Get perp positions
+- `waiaas_hl_get_open_orders`: Get open orders
+- `waiaas_hl_get_markets`: Get market list
+- `waiaas_hl_get_funding_rates`: Get funding rate history
+- `waiaas_hl_get_account_state`: Get account state
+- `waiaas_hl_get_trade_history`: Get trade history (fills)
+
+### SDK Methods
+
+```typescript
+// Action methods (through pipeline)
+await client.hlOpenPosition('wallet-id', { market: 'ETH', side: 'LONG', size: '1', leverage: 10 });
+await client.hlClosePosition('wallet-id', { market: 'ETH' });
+await client.hlPlaceOrder('wallet-id', { market: 'ETH', side: 'BUY', size: '0.5', price: '2000', order_type: 'LIMIT' });
+await client.hlCancelOrder('wallet-id', { market: 'ETH', oid: 12345 });
+await client.hlSetLeverage('wallet-id', { market: 'ETH', leverage: 5, is_cross: true });
+
+// Query methods (direct)
+const positions = await client.hlGetPositions('wallet-id');
+const orders = await client.hlGetOpenOrders('wallet-id');
+const markets = await client.hlGetMarkets();
+const rates = await client.hlGetFundingRates('ETH');
+const account = await client.hlGetAccountState('wallet-id');
+const fills = await client.hlGetTradeHistory('wallet-id', 50);
+```
+
+## Hyperliquid Spot Trading
+
+Hyperliquid spot market trading via the action provider pipeline. Requires `actions.hyperliquid_enabled=true` in Admin Settings.
+
+> AI agents must NEVER request the master password. Use only your session token.
+
+### Action Endpoints (through pipeline)
+
+Actions go through the standard `/v1/actions/hyperliquid_spot/{action}` route with policy evaluation.
+
+```bash
+# Buy 100 HYPE at market price
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_spot/hl_spot_buy \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"HYPE/USDC","size":"100","orderType":"MARKET"}'
+
+# Place a limit buy order for HYPE at $24.50
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_spot/hl_spot_buy \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"HYPE/USDC","size":"100","price":"24.5","orderType":"LIMIT","tif":"GTC"}'
+
+# Sell 50 HYPE at market price
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_spot/hl_spot_sell \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"HYPE/USDC","size":"50","orderType":"MARKET"}'
+
+# Cancel a specific spot order
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_spot/hl_spot_cancel \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"HYPE/USDC","oid":12345}'
+
+# Cancel all spot orders for a market
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_spot/hl_spot_cancel \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","market":"HYPE/USDC"}'
+```
+
+### Query Endpoints (no pipeline, direct)
+
+```bash
+# Get spot token balances
+curl http://localhost:3100/v1/wallets/$WID/hyperliquid/spot/balances \
+  -H "X-Master-Password: $PASS"
+
+# Get spot market list
+curl http://localhost:3100/v1/hyperliquid/spot/markets \
+  -H "X-Master-Password: $PASS"
+```
+
+### MCP Tools
+
+Action tools (3, auto-registered via provider):
+- `hl_spot_buy`: Buy tokens on Hyperliquid spot (market/limit)
+- `hl_spot_sell`: Sell tokens on Hyperliquid spot (market/limit)
+- `hl_spot_cancel`: Cancel spot orders (single or all for a market)
+
+Query tools (2, manually registered):
+- `waiaas_hl_get_spot_balances`: Get spot token balances
+- `waiaas_hl_get_spot_markets`: Get spot market list
+
+### SDK Methods
+
+```typescript
+// Action methods (through pipeline)
+await client.hlSpotBuy('wallet-id', { market: 'HYPE/USDC', size: '100', orderType: 'MARKET' });
+await client.hlSpotSell('wallet-id', { market: 'HYPE/USDC', size: '50', orderType: 'MARKET' });
+await client.hlSpotCancel('wallet-id', { market: 'HYPE/USDC', oid: 12345 });
+
+// Query methods (direct)
+const spotBalances = await client.hlGetSpotBalances('wallet-id');
+const spotMarkets = await client.hlGetSpotMarkets();
+```
+
+## Hyperliquid Sub-account Management
+
+Hyperliquid sub-account management for isolating funds per strategy. Requires `actions.hyperliquid_enabled=true` in Admin Settings.
+
+> AI agents must NEVER request the master password. Use only your session token.
+
+### Action Endpoints (through pipeline)
+
+Actions go through the standard `/v1/actions/hyperliquid_sub/{action}` route with policy evaluation.
+
+```bash
+# Create a new sub-account
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_sub/hl_create_sub_account \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","name":"Trend Following"}'
+
+# Transfer USDC: master -> sub-account
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_sub/hl_sub_transfer \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","subAccount":"0xSub...","amount":"1000","isDeposit":true}'
+
+# Transfer USDC: sub-account -> master
+curl -X POST http://localhost:3100/v1/actions/hyperliquid_sub/hl_sub_transfer \
+  -H "Authorization: Bearer $TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"wallet_id":"wid","subAccount":"0xSub...","amount":"500","isDeposit":false}'
+```
+
+### Query Endpoints (no pipeline, direct)
+
+```bash
+# List sub-accounts
+curl http://localhost:3100/v1/wallets/$WID/hyperliquid/sub-accounts \
+  -H "X-Master-Password: $PASS"
+
+# Get sub-account positions
+curl http://localhost:3100/v1/wallets/$WID/hyperliquid/sub-accounts/0xSub.../positions \
+  -H "X-Master-Password: $PASS"
+```
+
+### MCP Tools
+
+Action tools (2, auto-registered via provider):
+- `hl_create_sub_account`: Create a new Hyperliquid sub-account
+- `hl_sub_transfer`: Transfer USDC between master and sub-account
+
+Query tools (2, manually registered):
+- `waiaas_hl_list_sub_accounts`: List sub-accounts for a wallet
+- `waiaas_hl_get_sub_positions`: Get positions for a sub-account
+
+### SDK Methods
+
+```typescript
+// Action methods (through pipeline)
+await client.hlCreateSubAccount('wallet-id', { name: 'Trend Following' });
+await client.hlSubTransfer('wallet-id', { subAccount: '0xSub...', amount: '1000', isDeposit: true });
+
+// Query methods (direct)
+const subAccounts = await client.hlListSubAccounts('wallet-id');
+const positions = await client.hlGetSubPositions('wallet-id', '0xSubAddress');
+```

package/skills/wallet.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS Wallet Management"
 description: "Wallet CRUD, asset queries, session management, token registry, MCP provisioning, owner management"
 category: "api"
 tags: [wallet, blockchain, solana, ethereum, sessions, tokens, mcp, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]
@@ -124,6 +124,9 @@ Response (201):
 - `accountType`: `"smart"` -- ERC-4337 smart account
 - `signerKey`: EOA signer (owner) address that controls the smart account
 - `deployed`: `false` until the first transaction (lazy deployment via CREATE2)
+- `factoryAddress`: The factory contract address used to create this smart account
+- `factorySupportedNetworks`: Array of network IDs where the factory contract is deployed (e.g., `["ethereum-mainnet", "base-mainnet", ...]`). `null` for EOA wallets.
+- `factoryVerifiedOnNetwork`: `true` if the factory was verified via `eth_getCode` on the current network, `false` if not found, `null` if verification was skipped or failed
 
 **Key differences from EOA:**
 - Gas can be sponsored by a Paymaster (agent needs no ETH for gas)
@@ -242,6 +245,23 @@ Response (200):
 }
 ```
 
+### DELETE /v1/wallets/{id}/purge -- Permanently Delete Wallet (masterAuth)
+
+Permanently removes a terminated wallet and all associated data (transactions, sessions, policies, keys). Only works on wallets in TERMINATED status.
+
+```bash
+curl -s -X DELETE http://localhost:3100/v1/wallets/01958f3a-1234-7000-8000-abcdef123456/purge \
+  -H 'X-Master-Password: your-master-password'
+```
+
+Response (200):
+```json
+{
+  "id": "01958f3a-1234-7000-8000-abcdef123456",
+  "status": "PURGED"
+}
+```
+
 ### PUT /v1/wallets/{id}/owner -- Set Owner Address (masterAuth)
 
 Register a human owner address for this wallet. Enables owner-based approval workflows.
@@ -899,6 +919,7 @@ async with WAIaaSClient("http://localhost:3100", "wai_sess_...") as client:
 |------|------|-------------|
 | `WALLET_NOT_FOUND` | 404 | Wallet ID does not exist |
 | `WALLET_TERMINATED` | 410 | Wallet has been terminated |
+| `WALLET_NOT_TERMINATED` | 409 | Wallet must be terminated before purging |
 | `SESSION_NOT_FOUND` | 404 | Session ID does not exist |
 | `SESSION_EXPIRED` | 401 | Session JWT has expired |
 | `SESSION_REVOKED` | 401 | Session has been revoked |
@@ -1423,3 +1444,16 @@ Key capabilities:
 - **Approve**: `POST /v1/transactions/send` with `type: "APPROVE"` and `nft` field
 
 The Admin UI wallet detail page includes an **NFTs** tab showing NFT grid/list views with metadata modal. NFT indexer API keys (Alchemy for EVM, Helius for Solana) can be configured in **Settings > NFT Indexer**.
+
+## 18. Hyperliquid Perp Trading
+
+EVM wallets can trade Hyperliquid perpetual futures when enabled via Admin Settings (`actions.hyperliquid_enabled=true`).
+
+> AI agents must NEVER request the master password. Use only your session token.
+
+Key capabilities:
+- **Trade**: Open/close positions, place/cancel orders via action provider pipeline
+- **Query**: Get positions, orders, account state, trade history, market data, funding rates
+- **Configure**: Set leverage, margin mode (cross/isolated), USDC transfers (spot to perp)
+
+See **transactions.skill.md** for full Hyperliquid REST/MCP/SDK reference and **admin.skill.md** for Hyperliquid Admin Settings.

package/skills/x402.skill.md

@@ -3,7 +3,7 @@ name: "WAIaaS x402"
 description: "x402 auto-payment protocol: fetch URLs with automatic cryptocurrency payments"
 category: "api"
 tags: [wallet, blockchain, x402, payments, waiass]
-version: "2.10.0-rc.8"
+version: "2.10.0"
 dispatch:
   kind: "tool"
   allowedCommands: ["curl"]