kira-wallet 0.1.16 → 0.1.18

package/cashout-quotes.cjs

@@ -39,18 +39,16 @@ async function quotePool(client,network,token,pool,block,blockHash,deployments,{
     return unknown('Output token metadata unavailable');
   const canonical=protocol=>deployments.find(d=>d.chainId===network.chain_id&&d.protocol===protocol&&d.contract===(protocol==='v2'?'UniswapV2Factory':'UniswapV3Factory')&&d.address.toLowerCase()===state.factory?.toLowerCase());
   const quoter=deployments.find(d=>d.chainId===network.chain_id&&d.protocol==='v3'&&d.contract==='QuoterV2'&&d.status==='active');
-  let kind,quote,request,decode;
+  let kind,quote,request,decode,inputIsMaximum=false;
   if(canonical('v3')&&quoter&&Number.isInteger(state.fee)&&state.fee>=0&&state.fee<1_000_000) {
     kind='uniswap_v3_quoter';
     request=amount=>({address:quoter.address,abi:v3Abi,functionName:'quoteExactInputSingle',args:[{tokenIn:token.token_address,tokenOut:output,amountIn:amount,fee:state.fee,sqrtPriceLimitX96:0n}]});
     decode=result=>{
       // QuoterV2's default limit is MIN_SQRT_RATIO+1 / MAX_SQRT_RATIO-1
       // (Uniswap v3-core TickMath). At that boundary input can be unspent.
-      if(fullOnly){
-        const after=integer(result[1]);
-        if(after===null||after<=4295128740n||after>=1461446703485210103287273052203988822378723970341n)
-          throw Error('Full input consumption is not established at the pool price limit');
-      }
+      const after=integer(result[1]);
+      inputIsMaximum=after===null||after<=4295128740n||after>=1461446703485210103287273052203988822378723970341n;
+      if(fullOnly&&inputIsMaximum)throw Error('Full input consumption is not established at the pool price limit');
       return result[0];
     };
   }else if(network.chain_id===8453&&state.factory?.toLowerCase()==='0x420dd381b31aef6683db6b902084cb0ffece40da'&&pool.venue==='aerodrome') {
@@ -84,12 +82,12 @@ async function quotePool(client,network,token,pool,block,blockHash,deployments,{
     }
     catch(error){if(error.code==='market_budget')throw error;failures++;if(contractRevert(error))continue;break;}
     if(result===null){failures++;continue;}
-    if(result>0n)return {status:'quoted',kind,input_amount_raw:amount.toString(),input_amount_is_maximum:kind==='uniswap_v3_quoter',
+    if(result>0n)return {status:'quoted',kind,input_amount_raw:amount.toString(),input_amount_is_maximum:inputIsMaximum,
       holding_amount_raw:balance.toString(),output_amount_raw:result.toString(),output_amount:formatUnits(result,measured.quote_decimals),
       input_address:token.token_address.toLowerCase(),pool:pool.pool,output_address:output.toLowerCase(),output_symbol:measured.quote_symbol,
       output_decimals:measured.quote_decimals,block_number:String(block),block_hash:blockHash,
       observed_at:new Date().toISOString(),route_fees_included:true,price_impact_included:true,gas_included:false,
-      execution_verified:false,transfer_tax_included:false,partial_input:amount<balance,source_url:pool.source_url};
+      execution_verified:false,transfer_tax_included:false,partial_input:amount<balance||inputIsMaximum,source_url:pool.source_url};
   }
   return unknown(failures?'Pool quote failed; smaller-input and other routes remain unknown':'Sampled inputs returned zero; other routes remain unknown');
 }

package/cashout.py

@@ -77,6 +77,15 @@ def valid_path(token, quote, block, block_hash):
             and decimal(quote.get('output_amount'))==decimal(legs[-1].get('output_amount')))
 
 
+def full_input_established(quote):
+    """Every leg must consume its full input, including historical V3 records."""
+    legs=quote['legs'] if quote.get('kind')=='liquidation_path' else [quote]
+    return all(decimal(leg.get('input_amount_raw'))==decimal(leg.get('holding_amount_raw'))
+               and leg.get('partial_input') is not True
+               and (leg.get('kind')!='uniswap_v3_quoter' or leg.get('input_amount_is_maximum') is False)
+               for leg in legs)
+
+
 def classify(token, market, *, environment='mainnet'):
     result = {'criteria_version': CRITERIA['version'], 'minimum_quoted_usd': '1',
               'status': 'unknown', 'gas_included': False, 'execution_verified': False,
@@ -139,7 +148,7 @@ def classify(token, market, *, environment='mainnet'):
                                  'output_symbol': quote.get('output_symbol'),
                                  'quoted_output_usd': format(proceeds, 'f'), 'qualifies': proceeds >= Decimal('1'),
                                  'block_number': block, 'block_hash': block_hash, 'observed_at': quote['observed_at'],
-                                 'output_price': price, 'partial_input': amount < holding,
+                                 'output_price': price, 'partial_input': not full_input_established(quote),
                                  'transfer_tax_included': quote.get('transfer_tax_included'),
                                  **({'legs':quote['legs']} if quote.get('kind')=='liquidation_path' else {}),
                                  'execution_verified': False, 'gas_included': False})

package/curve_pricing.py

@@ -15,15 +15,16 @@ def resolve(graph, prices):
     def rejected_reserve(key,seen):
         if key in seen:return False
         node=nodes.get(key);price=known.get(key)
-        if not node or not node.get('is_curve'):return bool(price and price.get('quality')=='unreliable')
+        if not node or not node.get('is_curve'):return bool(price and price.get('quality') in ('unfunded','unreliable'))
         if price and price.get('usd') is not None and price.get('basis')!='Curve spot' and price.get('quality') not in ('unfunded','unreliable'):return False
+        if not node.get('error') and node.get('funded') is False:return True
         return rejected_reserve((key[0],node['reserve_token'].lower()),seen|{key})
     def visit(key,seen):
         if key in cache:return cache[key]
         if key in seen:return None
         existing=known.get(key)
         node=nodes.get(key)
-        if existing and existing.get('quality')=='unreliable' and not (node and node.get('is_curve')):
+        if existing and existing.get('quality') in ('unfunded','unreliable') and not (node and node.get('is_curve')):
             cache[key]={**existing,'usd':None};return cache[key]
         unfunded=node and not node.get('error') and node.get('is_curve') and node.get('funded') is False
         if existing and existing.get('usd') is not None and existing.get('quality') not in ('unfunded','unreliable') and (existing.get('basis')!='Curve spot' or not unfunded and not rejected_reserve(key,set())):
@@ -35,8 +36,8 @@ def resolve(graph, prices):
                     'observed_at':node.get('observed_at'),'block_number':node.get('block_number')}
             cache[key]=record;return record
         parent=visit((key[0],node['reserve_token'].lower()),seen|{key})
-        if parent and parent.get('quality')=='unreliable':
-            record={'chain_id':key[0],'address':node['address'],'usd':None,'basis':'Curve spot','quality':'unreliable',
+        if parent and parent.get('quality') in ('unfunded','unreliable'):
+            record={'chain_id':key[0],'address':node['address'],'usd':None,'basis':'Curve spot','quality':parent['quality'],
                     'source':node.get('source'),'observed_at':node.get('observed_at'),'block_number':node.get('block_number')}
             cache[key]=record;return record
         if not parent or parent.get('usd') is None:return None

package/docs/CLI.md

@@ -158,9 +158,13 @@ kira config import-env --file /absolute/private/rpc.env --key-env ALCHEMY_API_KE
 
 The import references the file instead of copying keys. It configures Alchemy
 RPC and portfolio discovery together, preserving existing custom chain overrides
-and explicit fallback preferences. New configurations allow public fallback. Environment overrides the file. Missing files or keys
-produce limited coverage; malformed configuration fails with safe errors.
+and explicit fallback preferences. New configurations allow public fallback.
+Environment overrides the file. An unreadable file or unavailable selected key
+rejects the import and preserves existing settings, whether applied immediately
+or queued in Activity. Malformed configuration fails with safe errors.
 The import does not contact providers. Private settings are never served.
+Reference names are case-sensitive. Lowercase and mixed-case names work in
+both immediate and queued imports; Kira does not convert them to uppercase.
 
 Analysis output contains wallet addresses and tags. Keep runtime directories
 outside repositories or ignored. Never publish operator holdings as demos.

package/docs/RELEASE.md

@@ -79,7 +79,7 @@ The earlier unpublished 0.1.2 candidate is preserved in the ignored
 `dist/preserved-0.1.2-bad8f02/` directory. Use the current `dist/release.json`
 and its matching archive for publication; do not mix manifests from candidates.
 
-Keep published GitHub tags, release assets and npm versions through 0.1.15
+Keep published GitHub tags, release assets and npm versions through 0.1.17
 immutable. Do not rebuild them from later documentation commits. Future package
 changes need a new version. Release preparation does not publish a GitHub
 release, promote the website or publish to npm.
@@ -95,12 +95,12 @@ python3 scripts/prepare-release.py
 ```
 
 `prepare-release.py` scans the package boundary and creates
-`dist/kira-wallet-0.1.16.tgz`. The ignored `dist/release.json` records its source
+`dist/kira-wallet-0.1.18.tgz`. The ignored `dist/release.json` records its source
 commit, SHA-256 and member count. It never publishes. After reviewing that
 manifest, the operator's final command from the project root is:
 
 ```sh
-npm publish ./dist/kira-wallet-0.1.16.tgz --access public
+npm publish ./dist/kira-wallet-0.1.18.tgz --access public
 ```
 
 Use the operator's npm account and complete authentication or OTP personally.
@@ -433,7 +433,7 @@ personal 0.1.14 installation, credentials, paused history and published archives
 Use a separate private workspace for candidate acceptance. No GitHub release,
 website deployment or personal app upgrade is part of this preparation.
 
-## Release candidate: 0.1.16
+## Published 0.1.16
 
 This version repairs Mint Club symbol routes, including ERC1155 NFT routes and
 encoded symbols, without rewriting historical snapshots. Market lookup attaches
@@ -487,5 +487,56 @@ history privacy checks, exact archive membership, real unchanged natural-languag
 questions and responsive market interactions. Review not selected. Publication
 remains operator-only. A feature-branch candidate is not a merged release or a
 published package; the final manifest must identify the accepted source commit.
-Preserve the superseded unpublished archive before creating the final 0.1.16
-candidate. Only the archive matching the final manifest is a publication target.
+The final 0.1.16 archive was frozen from landed source. Superseded unpublished
+candidates are preserved. Only the archive matching its final manifest was a
+publication target.
+
+The operator published 0.1.16 on October 20, 2026. Its registry archive matched
+the frozen manifest and all 101 installed package members. Live acceptance
+found the agent-context omission addressed in 0.1.17 below. The published
+archive remains immutable.
+
+## Published 0.1.17
+
+After a price refresh saved a full-balance DEX quote, chat could report that no
+estimate existed while the UI displayed it. Detailed agent facts now include
+the same validated `sell_out` projection used by the UI. Compact holdings pages
+retain quote presence and defer the detailed output to a scoped token read.
+The separate legacy Mint Club burn field does not represent every sale route.
+
+Output amounts, quote and price observation times, reference valuations, gas
+exclusions and execution caveats stay intact. Wrong-wallet caches, partial
+inputs and testnet positions remain excluded. Independent wallet estimates
+sharing liquidity cannot be added into portfolio proceeds. This change adds
+no provider calls or quote calculations.
+
+Acceptance includes the full repository suite, clean installation, tracked and
+history privacy checks, and exact archive membership. An isolated exact package
+using the same saved records, model settings, prior conversation and unchanged
+question returned the recorded DEX output and reference valuation without
+starting provider jobs. Product acceptance applies only to identical product
+bytes. Review not selected. Freeze the final archive from the landed source
+and dry-run that archive. npm publication remains operator-only.
+
+## Release candidate: 0.1.18
+
+Lowercase and mixed-case environment references now work in both immediate and
+queued configuration imports, provider settings and custom RPC settings. The
+settings form and job schema accept the same case-sensitive names. Job requests
+retain their 100-character bound and reject malformed names. Missing or
+differently cased keys preserve the previous working configuration.
+
+This candidate also includes the fixes from PR39 through PR44: immutable release
+archives, invalidation of prices backed by unfunded reserves, full-input evidence
+for sell-out estimates, safe failed imports, complete paginated rankings, and
+selection event, menu cleanup and table header corrections. No signing, trading,
+new provider requests or dependency changes are introduced.
+
+Required acceptance is the full repository suite, a clean package installation,
+tracked-source and history privacy checks, the focused browser settings check,
+and exact archive/source/installed-file comparison. Preserve raw history results
+and apply only the exact authorized CLI merge-metadata exception described above.
+Freeze the archive from the landed source, record its SHA-256 and member hashes,
+and dry-run that exact archive. Prior review evidence remains attached to its
+PRs; a new independent review is not selected for this bounded follow-up. npm
+publication remains operator-only.

package/kira_agent.py

@@ -32,7 +32,8 @@ SYSTEM = ('You are Kira, a careful wallet research partner. Answer in the langua
     'Use token_read before judging or retracting market details when pools are omitted. Testnet assets are excluded from portfolio valuation; do not infer a zero market price. '
     'Use holdings_query search for token names or symbols, rank for top-N, and aggregate for counts and sums. These scan every approved saved holding on the host and return bounded results. Never page through inventories for ranking, counting or named-token questions. Use one search per named token, optionally chain-filtered. Report same-symbol ambiguity with chain and contract. Rank group_by asset combines the priced subset by identity; group_by position ranks wallet positions. Unknown prices are excluded from ranks and counted separately. '
     'assets_omitted and next_offset describe a page, not missing holdings. Use wallet_read with offset and limit for more holdings, and token_read for detailed evidence. '
-    'Compact pages defer exit_quote and curve details. exit_quote_recorded true means a validated historical quote exists in the record even if its output is omitted here. Use token_read before judging execution evidence or claiming that a quote is absent. False means no validated quote in this snapshot, not that no exit route exists. '
+    'Compact pages defer sell_out, exit_quote and curve details. exit_quote_recorded true means a validated saved full-balance quote exists, including cached DEX quotes, even if its output is omitted here. Use token_read before judging execution evidence or claiming that a quote is absent. False means no validated quote in these records, not that no exit route exists. '
+    'sell_out is the same saved full-balance estimate shown in the wallet UI. exit_quote is the separate Mint Club burn record; a null exit_quote does not invalidate a sell_out quote. Preserve sell_out output amount, token, quote time, output_price time, valuation and gas/execution flags. Its value_usd is a reference valuation of the received token, not verified dollar sale proceeds. reserve_reference values only the burn output; terminal_reference uses a recorded terminal route. Neither guarantees execution. Keep estimates per wallet and never sum independent quotes using shared liquidity. '
     'Only an unfiltered complete inventory needs every holdings page. For that request, follow next_offset for each approved wallet using limit 100 and state which pages remain unread if the budget prevents completion. '
     'A question about a specific token or native asset across all wallets or networks is a filtered query. token_read already returns that asset across every approved wallet, including saved native observations. Do not enumerate unrelated wallet inventory pages for a token-specific question. Inventory pages defer curve and exit details to token_read. '
     'For USD-threshold questions, pass minimum_value_usd to token_read. Use the exact returned position_count, including the combined records_read count, rather than counting rows yourself. Unpriced and outside-USD positions are reported separately, not valued at zero. '
@@ -202,10 +203,31 @@ def read_completion(message, receipts, tools):
         if not finished and (exhaustive or any(r.get('next_offset') is not None for r in pages)):
             unread.append({'name':name,'arguments':{**json.loads(identity),'offset':offset},'snapshot_id':snapshot})
     if requested_rank:
-        count=requested_rank
+        from decimal import Decimal
         ranked=[r for r in completed if r['name']=='holdings_query' and (r.get('query_scope') or {}).get('mode')=='rank']
-        if not any(q.get('full_inventory_scanned') and q.get('complete') and q.get('offset')==0 and q.get('requested_limit',0)>=count for r in ranked for q in [r['query_scope']]):
-            missing.append('holdings_query rank for the requested top '+str(count))
+        rank_pages={};approved_wallets=None
+        for r in ranked:
+            q=r['query_scope']
+            if not q.get('full_inventory_scanned') or not q.get('complete'):continue
+            identity={'environment':'mainnet','group_by':'asset','query':'',
+                      **{k:v for k,v in r['arguments'].items() if k not in ('offset','limit')}}
+            identity['query']=identity['query'].strip().casefold()
+            if 'minimum_value_usd' in identity:identity['minimum_value_usd']=Decimal(str(identity['minimum_value_usd']))
+            if 'wallet' in identity and tools:
+                try:
+                    if approved_wallets is None:approved_wallets=tools.allowed()[1]
+                    identity['wallet']=tools.wallet(identity['wallet'],approved_wallets)
+                except JobError:continue
+            rank_pages.setdefault((tuple(sorted(identity.items())),q['result_count']),[]).append(q)
+        rank_complete=False
+        for (_,available),pages in rank_pages.items():
+            covered=0
+            for page in sorted(pages,key=lambda q:q['offset']):
+                if page['offset']>covered:break
+                covered=max(covered,page['offset']+page['returned_count'])
+            if covered>=min(requested_rank,available):rank_complete=True;break
+        if not rank_complete:
+            missing.append('holdings_query rank for the requested top '+str(requested_rank))
     for r in completed:
         q=r.get('query_scope')
         if q and not q.get('complete'):missing.append('holdings_query result detail was truncated')
@@ -364,7 +386,8 @@ def wallet_facts(wallets, *, pool_budget=40_000):
             if item['archived']:item['historical_value_usd']=asset.get('historical_value_usd')
             item['price'] = pick(asset['price'],('usd','basis','quality','observed_at')) if asset.get('price') else None
             item['exit_quote'] = asset.get('exit_quote')
-            item['exit_quote_recorded'] = asset.get('exit_quote') is not None
+            item['sell_out'] = asset.get('sell_out')
+            item['exit_quote_recorded'] = item['exit_quote'] is not None or item['sell_out'] is not None
             item['exit_route'] = asset.get('exit_route')
             item['markets'] = asset.get('links',[])
             pools=asset.get('market_pools',[]);item['pools']=[];item['pools_recorded']=len(pools)

package/kira_cli.py

@@ -259,9 +259,8 @@ def main():
             if args.command=='config':
                 file=Path(args.file).expanduser().resolve()
                 if not file.is_file():raise ValueError('Secret environment file does not exist.')
-                from kira_config import provider_config
-                cfg=provider_config(cfg,'alchemy',args.key_env)
-                cfg['secret_env_file']=str(file);cfg['discovery']['explorers']=True
+                from kira_config import import_alchemy_config
+                cfg=import_alchemy_config(cfg,file,args.key_env)
             elif args.command=='discovery':cfg['discovery']={**cfg['discovery'],'provider':args.provider,'key_env':args.key_env,'explorers':args.explorers}
             elif args.setting=='public':cfg['rpc']['mode']='public'
             else:

package/kira_config.py

@@ -8,6 +8,10 @@ from urllib.parse import urlparse
 
 ASSETS = Path(__file__).resolve().parent
 
+def valid_env_reference(name, max_length=None):
+    return (isinstance(name,str) and (max_length is None or len(name)<=max_length)
+            and re.fullmatch(r'[A-Za-z_][A-Za-z0-9_]*',name) is not None)
+
 def data_root():
     # Direct historical scripts keep their workspace. The supported CLI sets this.
     return Path(os.environ.get('KIRA_DATA_DIR', ASSETS)).expanduser().resolve()
@@ -39,6 +43,14 @@ def require_alchemy(root=None):
     if public_status(root).get('discovery_key_available') is not True:
         raise ValueError('Connect Alchemy before researching wallets. Open Workspace settings > Alchemy, or follow the Alchemy setup guide. Saved portfolios remain available.')
 
+def import_alchemy_config(config, file, key_env):
+    """Prepare the same validated import for immediate and queued writers."""
+    result=provider_config(config,'alchemy',key_env)
+    result['secret_env_file']=str(file)
+    if not secret_values(result).get(key_env):
+        raise ValueError('The local file does not contain the selected Alchemy key. Check the file and run import-env again. Existing settings are unchanged.')
+    return result
+
 def load_config(path=None):
     path=Path(path) if path is not None else config_path()
     if not path.exists():return default_config()
@@ -56,7 +68,7 @@ def load_config(path=None):
     if set(rpc)-{'mode','allow_public_fallback','priority','chains'} or set(discovery)-{'provider','key_env','explorers','public'}:raise ValueError('Unknown provider configuration fields.')
     if any(not isinstance(row,dict) or set(row)-{'url_env','alchemy_network'} for row in rpc['chains'].values()):raise ValueError('Unknown RPC endpoint fields.')
     for name in [discovery.get('key_env'),*[row.get('url_env') if isinstance(row,dict) else None for row in rpc['chains'].values()]]:
-        if not isinstance(name,str) or not re.fullmatch(r'[A-Za-z_][A-Za-z0-9_]*',name):raise ValueError('Credentials must use valid environment references.')
+        if not valid_env_reference(name):raise ValueError('Credentials must use valid environment references.')
     if any(not str(cid).isdigit() or int(cid)<=0 for cid in rpc['chains']):raise ValueError('Invalid RPC chain ID.')
     if 'secret_env_file' in cfg and not isinstance(cfg['secret_env_file'],str):raise ValueError('Invalid secret file reference.')
     return cfg

package/kira_jobs.py

@@ -17,6 +17,7 @@ import tempfile
 import time
 from typing import Literal, TypedDict, NotRequired
 import uuid
+from kira_config import valid_env_reference
 
 ASSETS = Path(__file__).resolve().parent
 
@@ -238,13 +239,13 @@ class JobStore:
         if operation == 'settings.importEnv':
             fields(value,['import_id','key_env'])
             identifier(value['import_id'])
-            if not isinstance(value['key_env'],str) or not re.fullmatch(r'[A-Z_][A-Z0-9_]{0,99}',value['key_env']):
+            if not valid_env_reference(value['key_env'],max_length=100):
                 raise JobError('invalid_settings','Use a local credential reference.')
             self.import_reference(value)
             return value.copy()
         if operation == 'settings.provider':
             fields(value,['provider','key_env'])
-            if value['provider']!='alchemy' or not isinstance(value['key_env'],str) or not re.fullmatch(r'[A-Z_][A-Z0-9_]{0,99}',value['key_env']):
+            if value['provider']!='alchemy' or not valid_env_reference(value['key_env'],max_length=100):
                 raise JobError('invalid_settings','Choose a data provider and a local credential reference.')
             return value.copy()
         if operation == 'settings.rpc':
@@ -257,14 +258,14 @@ class JobStore:
             chains={}
             for chain in value['chains']:
                 fields(chain,['chain_id','url_env'])
-                if type(chain['chain_id']) is not int or chain['chain_id'] not in available or not isinstance(chain['url_env'],str) or not re.fullmatch(r'[A-Z_][A-Z0-9_]{0,99}',chain['url_env']) or str(chain['chain_id']) in chains:
+                if type(chain['chain_id']) is not int or chain['chain_id'] not in available or not valid_env_reference(chain['url_env'],max_length=100) or str(chain['chain_id']) in chains:
                     raise JobError('invalid_settings','Use a known chain and a unique environment variable reference.')
                 chains[str(chain['chain_id'])]={'url_env':chain['url_env']}
             if value['mode']=='custom' and not chains:raise JobError('invalid_settings','Custom RPC requires at least one endpoint reference.')
             return {'mode':value['mode'],'chains':chains,'allow_public_fallback':value['allow_public_fallback'],**({'priority':value['priority']} if 'priority' in value else {})}
         if operation == 'settings.discovery':
             fields(value,['provider','key_env'])
-            if value['provider'] not in ('none','alchemy') or not isinstance(value['key_env'],str) or not re.fullmatch(r'[A-Z_][A-Z0-9_]{0,99}',value['key_env']):raise JobError('invalid_settings','Use a supported indexer and environment variable reference.')
+            if value['provider'] not in ('none','alchemy') or not valid_env_reference(value['key_env'],max_length=100):raise JobError('invalid_settings','Use a supported indexer and environment variable reference.')
             return value.copy()
         if operation == 'wallet.add':
             fields(value, ['address', 'tag'])
@@ -308,7 +309,7 @@ class JobStore:
         return record['file']
 
     def queue_import(self, file, key_env):
-        if not isinstance(key_env,str) or not re.fullmatch(r'[A-Z_][A-Z0-9_]{0,99}',key_env):
+        if not valid_env_reference(key_env,max_length=100):
             raise JobError('invalid_settings','Use a local credential reference.')
         file=Path(file).expanduser().resolve()
         if not file.is_file():raise JobError('invalid_import','Secret environment file does not exist.')
@@ -649,11 +650,9 @@ class JobStore:
             from kira_config import config_path,load_config
             config=load_config()
             if job['operation']=='settings.importEnv':
-                from kira_config import provider_config,secret_values
-                config=provider_config(config,'alchemy',job['input']['key_env'])
-                config['secret_env_file']=self.import_reference(job['input']);config['discovery']['explorers']=True
-                if not secret_values(config).get(job['input']['key_env']):
-                    raise JobError('connection_key_missing','The local file does not contain the selected Alchemy key. Check the file and run import-env again. Existing settings are unchanged.')
+                from kira_config import import_alchemy_config
+                try:config=import_alchemy_config(config,self.import_reference(job['input']),job['input']['key_env'])
+                except ValueError as error:raise JobError('connection_key_missing',str(error)) from None
             elif job['operation']=='settings.rpc':
                 updated={**job['input'],'chains':{key:dict(row) for key,row in job['input']['chains'].items()}}
                 updated.setdefault('priority',config['rpc'].get('priority','public_first'))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kira-wallet",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "Manage your wallets with your own AI. Track tokens, research markets and refresh holdings in a local workspace.",
   "license": "MIT",
   "private": false,

package/sources/job-request-v1.schema.json

@@ -269,7 +269,7 @@
                   },
                   "url_env": {
                     "type": "string",
-                    "pattern": "^[A-Z_][A-Z0-9_]{0,99}$"
+                    "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,99}$"
                   }
                 },
                 "required": [
@@ -331,7 +331,7 @@
             },
             "key_env": {
               "type": "string",
-              "pattern": "^[A-Z_][A-Z0-9_]{0,99}$"
+              "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,99}$"
             }
           },
           "required": [
@@ -374,7 +374,7 @@
             },
             "key_env": {
               "type": "string",
-              "pattern": "^[A-Z_][A-Z0-9_]{0,99}$"
+              "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,99}$"
             }
           },
           "required": [
@@ -415,7 +415,7 @@
             },
             "key_env": {
               "type": "string",
-              "pattern": "^[A-Z_][A-Z0-9_]{0,99}$"
+              "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,99}$"
             }
           },
           "required": [

package/viewer/static/index.html

@@ -39,7 +39,7 @@
           <section id="setup-path" class="setup-path" aria-label="Wallet setup checklist" hidden></section>
           <div id="home-empty" class="empty" hidden><img src="/kira-logo.png" width="64" height="64" alt=""><h3>Your notebook starts with a wallet.</h3><p>Use a public EVM address and a name you recognise. You keep your keys.</p><button id="empty-add-wallet" class="primary-button" hidden>Add your first wallet</button></div>
           <div id="home-details">
-            <section id="home-tokens" class="home-tokens" aria-labelledby="home-tokens-title"><div class="section-heading"><h2 id="home-tokens-title">Top tokens <span id="home-token-count"></span></h2><a id="home-view-all" class="quiet-button" href="#/tokens">View all tokens <span aria-hidden="true">↗</span></a></div><div class="table-wrap"><table class="token-table catalog-table"><thead><tr><th scope="col">Token</th><th scope="col">Chain</th><th scope="col">Total balance</th><th scope="col">Wallets</th><th scope="col">Known value</th></tr></thead><tbody id="home-token-body"></tbody></table></div><p id="home-tokens-empty" class="panel-empty" hidden>Tokens appear after holdings research.</p></section>
+            <section id="home-tokens" class="home-tokens" aria-labelledby="home-tokens-title"><div class="section-heading"><h2 id="home-tokens-title">Top tokens <span id="home-token-count"></span></h2><a id="home-view-all" class="quiet-button" href="#/tokens">View all tokens <span aria-hidden="true">↗</span></a></div><div class="table-wrap"><table class="token-table catalog-table"><thead><tr><th scope="col">Token</th><th scope="col">Chain</th><th scope="col">Total balance</th><th scope="col">Wallets</th><th scope="col">Known value</th><th scope="col">Sell-out est.</th></tr></thead><tbody id="home-token-body"></tbody></table></div><p id="home-tokens-empty" class="panel-empty" hidden>Tokens appear after holdings research.</p></section>
             <div class="dashboard-grid">
               <section class="dashboard-panel" aria-labelledby="home-wallets-title"><div class="section-heading"><h2 id="home-wallets-title">Your wallets</h2><span class="section-note">Explore holdings <span aria-hidden="true">↗</span></span></div><div id="wallet-cards" class="wallet-cards"></div></section>
               <section class="dashboard-panel" aria-labelledby="home-networks-title"><div class="section-heading"><h2 id="home-networks-title">By network</h2><span class="section-note">Priced value</span></div><div id="network-allocation" class="network-allocation"></div></section>
@@ -180,7 +180,7 @@
       <p id="provider-key-status" class="form-note" role="status"></p>
       <button id="provider-recheck" class="quiet-button" type="button">Check connection</button>
       <button id="provider-save" class="primary-button" type="submit">Connect Alchemy</button>
-      <details id="connection-advanced"><summary>Use an existing key reference</summary><label>Environment variable name<input id="discovery-key" value="ALCHEMY_API_KEY" pattern="[A-Z_][A-Z0-9_]*" maxlength="100"></label><p class="form-note">Name only. For an existing private environment file, use <code>kira config import-env --file PATH --key-env NAME</code> in your terminal.</p></details>
+      <details id="connection-advanced"><summary>Use an existing key reference</summary><label>Environment variable name<input id="discovery-key" value="ALCHEMY_API_KEY" pattern="[A-Za-z_][A-Za-z0-9_]*" maxlength="100"></label><p class="form-note">Name only. For an existing private environment file, use <code>kira config import-env --file PATH --key-env NAME</code> in your terminal.</p></details>
     </form>
     <p id="provider-status" class="form-note" role="status"></p><p id="settings-error" class="form-error" role="alert"></p>
     <button id="settings-refresh" class="primary-button" type="button" hidden>Refresh holdings</button>

package/viewer/static/selects.js

@@ -3,11 +3,12 @@
 const KiraSelect=(()=>{
   const entries=new Map();let opened=null,search='',searchTimer;
   function close(focus=false){if(!opened)return;opened.popup.hidden=true;opened.button.setAttribute('aria-expanded','false');opened.button.removeAttribute('aria-activedescendant');if(focus)opened.button.focus();opened=null;}
+  function prune(){for(const [select,entry] of entries){if(select.isConnected)continue;if(opened===entry)close();entry.popup.remove();entries.delete(select);}}
   function optionLabel(option){
     const chain=option?.dataset.chainId&&typeof state!=='undefined'?state?.details?.networks.find(c=>String(c.id)===option.dataset.chainId):null;
     return `<span class="select-option-label">${chain?chainIcon(chain):''}<span>${escapeHTML(option?.textContent||'Choose')}</span></span>`;
   }
-  function refresh(){for(const entry of entries.values()){const option=entry.select.selectedOptions[0];entry.label.innerHTML=optionLabel(option);entry.button.disabled=entry.select.disabled;}bindImages();}
+  function refresh(){prune();for(const entry of entries.values()){const option=entry.select.selectedOptions[0];entry.label.innerHTML=optionLabel(option);entry.button.disabled=entry.select.disabled;}bindImages();}
   function focusOption(index){if(!opened)return;const options=[...opened.popup.querySelectorAll('[role="option"]')];if(!options.length)return;opened.index=(index+options.length)%options.length;for(const [i,node] of options.entries())node.classList.toggle('highlighted',i===opened.index);const node=options[opened.index];opened.button.setAttribute('aria-activedescendant',node.id);node.scrollIntoView({block:'nearest'});}
   function open(entry){close();refresh();opened=entry;const options=[...entry.select.options].filter(o=>!o.disabled);
     entry.popup.innerHTML=options.map((o,i)=>`<div role="option" id="${entry.select.id}-option-${i}" aria-selected="${String(o.selected)}" data-value="${escapeHTML(o.value)}">${optionLabel(o)}<span aria-hidden="true">${o.selected?'✓':''}</span></div>`).join('');
@@ -17,8 +18,8 @@ const KiraSelect=(()=>{
     entry.popup.style.top=(below<height&&rect.top>height?rect.top-height-6:Math.min(rect.bottom+6,innerHeight-height-10))+'px';
     bindImages();focusOption(Math.max(0,options.findIndex(o=>o.selected)));
   }
-  function choose(value){if(!opened)return;const select=opened.select;select.value=value;select.dispatchEvent(new Event('change',{bubbles:true}));close(true);refresh();}
-  function enhance(){for(const select of document.querySelectorAll('select')){
+  function choose(value){if(!opened)return;const select=opened.select,previous=select.value;select.value=value;close(true);if(select.value!==previous){select.dispatchEvent(new Event('input',{bubbles:true}));select.dispatchEvent(new Event('change',{bubbles:true}));}refresh();}
+  function enhance(){prune();for(const select of document.querySelectorAll('select')){
     if(entries.has(select)||!select.id)continue;
     const wrapper=document.createElement('div');wrapper.className='kira-select';select.before(wrapper);wrapper.append(select);select.classList.add('custom-select-source');select.tabIndex=-1;select.setAttribute('aria-hidden','true');
     const label=document.createElement('span'),button=document.createElement('button');button.type='button';button.className='kira-select-trigger';button.setAttribute('role','combobox');button.setAttribute('aria-haspopup','listbox');button.setAttribute('aria-expanded','false');button.setAttribute('aria-label',select.closest('label')?.querySelector('span')?.textContent||select.closest('label')?.childNodes[0]?.textContent?.trim()||'Choose an option');
@@ -43,6 +44,6 @@ const KiraSelect=(()=>{
   document.addEventListener('pointerdown',event=>{if(opened&&!opened.button.contains(event.target)&&!opened.popup.contains(event.target))close();});
   document.addEventListener('close',()=>close(),true);
   window.addEventListener('resize',()=>close());window.addEventListener('scroll',event=>{if(opened&&!opened.popup.contains(event.target))close();},true);
-  new MutationObserver(records=>{if(records.some(r=>r.target.tagName==='SELECT'||r.target.closest?.('select')||[...r.addedNodes].some(n=>n.nodeType===1&&(n.matches?.('select')||n.querySelector?.('select')))))enhance();}).observe(document.body,{childList:true,subtree:true,attributes:true,attributeFilter:['disabled']});
+  new MutationObserver(records=>{if(records.some(r=>r.target.tagName==='SELECT'||r.target.closest?.('select')||[...r.addedNodes,...r.removedNodes].some(n=>n.nodeType===1&&(n.matches?.('select')||n.querySelector?.('select')))))enhance();}).observe(document.body,{childList:true,subtree:true,attributes:true,attributeFilter:['disabled']});
   enhance();return {refresh,close};
 })();