open-agents-ai 0.103.43 → 0.103.44

package/dist/index.js

@@ -12754,6 +12754,16 @@ async function handleCmd(cmd) {
               const logFile = join(invocationsDir, Date.now() + '-' + capName + '.json');
               try { writeFileSync(logFile, JSON.stringify(logEntry, null, 2)); } catch {}
 
+              // Safe stream write \u2014 consumer may have timed out and closed the stream
+              var streamClosed = false;
+              async function swrite(msg) {
+                if (streamClosed) return;
+                try { await stream.write(msg); } catch (swErr) {
+                  dlog('stream.write failed (consumer likely timed out): ' + (swErr.message || swErr));
+                  streamClosed = true;
+                }
+              }
+
               // Collect input via stream data events
               // NOTE: auth_key arrives in invoke.chunk data, NOT in invoke.open (request).
               // We must accept + read data FIRST, then validate auth.
@@ -12771,7 +12781,7 @@ async function handleCmd(cmd) {
               });
 
               // Accept the invocation so the consumer sends data
-              await stream.write({
+              await swrite({
                 type: 'invoke.accept', version: 1,
                 requestId: request.requestId, accepted: true,
               });
@@ -12802,9 +12812,9 @@ async function handleCmd(cmd) {
                 }
                 if (reqAuthKey !== exposeAuthKey) {
                   dlog('expose: auth REJECTED for ' + capName + ' from ' + (request.from || 'unknown'));
-                  await stream.write({ type: 'invoke.event', version: 1, requestId: request.requestId, seq: 0, event: 'error', data: 'Unauthorized \u2014 invalid or missing auth key' });
-                  await stream.write({ type: 'invoke.done', version: 1, requestId: request.requestId, usage: { inputBytes: 0, outputBytes: 0 } });
-                  stream.close();
+                  await swrite({ type: 'invoke.event', version: 1, requestId: request.requestId, seq: 0, event: 'error', data: 'Unauthorized \u2014 invalid or missing auth key' });
+                  await swrite({ type: 'invoke.done', version: 1, requestId: request.requestId, usage: { inputBytes: 0, outputBytes: 0 } });
+                  try { stream.close(); } catch {}
                   return;
                 }
                 dlog('expose: auth OK for ' + capName);
@@ -12923,14 +12933,14 @@ async function handleCmd(cmd) {
                 }
 
                 // Stream result back
-                await stream.write({
+                await swrite({
                   type: 'invoke.event', version: 1,
                   requestId: request.requestId, seq: 0,
                   event: 'result',
                   data: JSON.stringify(responsePayload),
                 });
 
-                await stream.write({
+                await swrite({
                   type: 'invoke.done', version: 1,
                   requestId: request.requestId,
                   usage: {
@@ -12940,18 +12950,19 @@ async function handleCmd(cmd) {
                   },
                 });
               } catch (e) {
-                await stream.write({
+                dlog('expose: inference error: ' + (e.message || e));
+                await swrite({
                   type: 'invoke.event', version: 1,
                   requestId: request.requestId, seq: 0,
                   event: 'error', data: 'Inference failed: ' + e.message,
                 });
-                await stream.write({
+                await swrite({
                   type: 'invoke.done', version: 1,
                   requestId: request.requestId,
                   usage: { inputBytes: 0, outputBytes: 0 },
                 });
               }
-              stream.close();
+              try { stream.close(); } catch {}
             }, capOpts);
           }
         }
@@ -13350,7 +13361,7 @@ process.on('SIGINT', () => process.emit('SIGTERM'));
           },
           margin: {
             type: "string",
-            description: "Price margin multiplier for expose (0.5 = 50% of market rate, 0 = free). Default: 0.5"
+            description: "Price margin multiplier for expose (0.5 = 50% of market rate, 0 = free). Default: 0 (free)"
           },
           daily_limit: {
             type: "string",
@@ -13703,6 +13714,7 @@ process.on('SIGINT', () => process.emit('SIGTERM'));
             }
           }
         }
+        await this.ensureWallet();
         const daemonPath = join30(this.nexusDir, "nexus-daemon.mjs");
         await writeFile12(daemonPath, DAEMON_SCRIPT);
         const agentName = args.agent_name || "open-agents-node";
@@ -14019,6 +14031,57 @@ process.on('SIGINT', () => process.emit('SIGTERM'));
           `Free inference (margin=0) works without funding.`
         ].join("\n");
       }
+      /**
+       * Auto-create wallet + x402-wallet.key if none exists.
+       * Called from doConnect() before daemon spawn so the daemon starts x402-ready.
+       * Silent — no user output, just ensures the files exist.
+       */
+      async ensureWallet() {
+        const walletPath = join30(this.nexusDir, "wallet.enc");
+        if (existsSync23(walletPath))
+          return;
+        let address;
+        let privKeyHex;
+        try {
+          const { privateKeyToAccount } = await import("viem/accounts");
+          const privKey = randomBytes6(32);
+          privKeyHex = privKey.toString("hex");
+          const account = privateKeyToAccount(`0x${privKeyHex}`);
+          address = account.address;
+          privKey.fill(0);
+        } catch {
+          const privKey = randomBytes6(32);
+          privKeyHex = privKey.toString("hex");
+          address = "0x" + createHash("sha256").update(privKey).digest("hex").slice(0, 40);
+          privKey.fill(0);
+        }
+        const salt = randomBytes6(32);
+        const key = scryptSync(`${hostname()}:${userInfo().username}:nexus-wallet`, salt, 32, { N: 16384, r: 8, p: 1 });
+        const iv = randomBytes6(16);
+        const cipher = createCipheriv("aes-256-gcm", key, iv);
+        let enc = cipher.update(privKeyHex, "utf8", "hex");
+        enc += cipher.final("hex");
+        const x402KeyPath = join30(this.nexusDir, "x402-wallet.key");
+        const x402Fh = await fsOpen(x402KeyPath, "w", 384);
+        await x402Fh.writeFile("0x" + privKeyHex);
+        await x402Fh.close();
+        privKeyHex = "0".repeat(64);
+        const w = {
+          version: 2,
+          address,
+          encryptedKey: enc,
+          iv: iv.toString("hex"),
+          authTag: cipher.getAuthTag().toString("hex"),
+          salt: salt.toString("hex"),
+          createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+          network: "base",
+          chainId: 8453
+        };
+        const walletFh = await fsOpen(walletPath, "w", 384);
+        await walletFh.writeFile(JSON.stringify(w, null, 2));
+        await walletFh.close();
+        await this.ensureDefaultBudget();
+      }
       // ---------------------------------------------------------------------------
       // Step 2: USDC Balance Query via Base RPC
       // ---------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.103.43",
+  "version": "0.103.44",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",