tollkit-wallet 0.2.1 → 0.2.2

package/extension/inpage.js

@@ -0,0 +1,129 @@
+// Tollkit Wallet provider, injected into pages. It holds no keys and no secrets: every call is
+// passed to the Tollkit extension, which asks the Tollkit Wallet on this computer.
+//   Ethereum (Base and Ethereum): EIP-1193 provider, announced with EIP-6963 (and window.ethereum if no other wallet set it).
+//   Solana: registered with the Wallet Standard (wallet-standard:register-wallet / wallet-standard:app-ready).
+(() => {
+  if (window.__tollkitWallet) return;
+  const TAG = "tollkit-wallet";
+  const ICON = "data:image/svg+xml;base64," + btoa('<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><rect x="1.5" y="1.5" width="97" height="97" rx="20" fill="#0a0a0a" stroke="#2f3442" stroke-width="3"/><path d="M42 22h12v16h16v11H54v17c0 4.5 2 6.5 6.5 6.5H70V83H59C48 83 42 77.5 42 67V49h-9V38h9z" fill="#4a8eff"/></svg>');
+  const pending = new Map();
+  let n = 0;
+
+  function call(method, params) {
+    return new Promise((resolve, reject) => {
+      const id = `${Date.now()}-${++n}-${Math.random().toString(36).slice(2)}`;
+      pending.set(id, { resolve, reject });
+      window.postMessage({ [TAG]: "req", id, method, params }, window.location.origin);
+    });
+  }
+  window.addEventListener("message", (e) => {
+    if (e.source !== window || !e.data || e.data[TAG] !== "res") return;
+    const p = pending.get(e.data.id);
+    if (!p) return;
+    pending.delete(e.data.id);
+    if (e.data.error) {
+      const err = new Error(e.data.error.message || "Tollkit error");
+      err.code = e.data.error.code;
+      p.reject(err);
+    } else p.resolve(e.data.result);
+  });
+
+  // ---- EIP-1193 ------------------------------------------------------------------------------
+  const listeners = {};
+  const emit = (ev, v) => (listeners[ev] || []).slice().forEach((f) => { try { f(v); } catch (x) { console.error(x); } });
+  let chainId = null, accounts = [];
+  const provider = {
+    isTollkit: true,
+    async request(args) {
+      if (!args || typeof args !== "object" || typeof args.method !== "string") { const e = new Error("request() needs { method, params }"); e.code = -32602; throw e; }
+      const { method, params } = args;
+      const result = await call(method, params);
+      if (method === "eth_chainId" && result !== chainId) { const first = chainId === null; chainId = result; if (!first) emit("chainChanged", result); }
+      if ((method === "wallet_switchEthereumChain" || method === "wallet_addEthereumChain") && result === null) {
+        const next = String(params && params[0] && params[0].chainId).toLowerCase();
+        if (next !== chainId) { chainId = next; emit("chainChanged", next); }
+      }
+      if (method === "eth_requestAccounts" || method === "eth_accounts") {
+        const a = Array.isArray(result) ? result.map((x) => String(x).toLowerCase()) : [];
+        if (a.join() !== accounts.join()) { const wasEmpty = !accounts.length; accounts = a; if (wasEmpty && a.length) emit("connect", { chainId: chainId || (await call("eth_chainId")) }); emit("accountsChanged", a); }
+      }
+      if (method === "wallet_revokePermissions") { accounts = []; emit("accountsChanged", []); }
+      return result;
+    },
+    on(ev, f) { (listeners[ev] = listeners[ev] || []).push(f); return provider; },
+    removeListener(ev, f) { listeners[ev] = (listeners[ev] || []).filter((x) => x !== f); return provider; },
+    off(ev, f) { return provider.removeListener(ev, f); },
+    // Older apps
+    enable() { return provider.request({ method: "eth_requestAccounts" }); },
+  };
+  Object.freeze(provider);
+  const info = Object.freeze({ uuid: crypto.randomUUID(), name: "Tollkit", icon: ICON, rdns: "dev.tollkit" });
+  const announce = () => window.dispatchEvent(new CustomEvent("eip6963:announceProvider", { detail: Object.freeze({ info, provider }) }));
+  window.addEventListener("eip6963:requestProvider", announce);
+  announce();
+  if (!("ethereum" in window)) { try { Object.defineProperty(window, "ethereum", { value: provider, configurable: true, writable: false }); } catch { /* another wallet won */ } }
+
+  // ---- Solana Wallet Standard -----------------------------------------------------------------
+  const b64 = (u8) => { let s = ""; for (let i = 0; i < u8.length; i++) s += String.fromCharCode(u8[i]); return btoa(s); };
+  const unb64 = (s) => Uint8Array.from(atob(s), (c) => c.charCodeAt(0));
+  const CHAINS = ["solana:mainnet"];
+  const SOL_FEATURES = ["solana:signAndSendTransaction", "solana:signTransaction", "solana:signMessage"];
+  let solAccounts = [];
+  const solListeners = new Set();
+  const changed = () => solListeners.forEach((f) => { try { f({ accounts: solAccounts }); } catch (x) { console.error(x); } });
+  const makeAccount = (r) => Object.freeze({ address: r.address, publicKey: unb64(r.publicKey), chains: CHAINS, features: SOL_FEATURES, label: "Tollkit", icon: ICON });
+  const mine = (acct) => { if (!acct || !solAccounts.some((a) => a.address === acct.address)) { const e = new Error("Connect this site to Tollkit first."); e.code = 4100; throw e; } };
+  const wallet = {
+    get version() { return "1.0.0"; },
+    get name() { return "Tollkit"; },
+    get icon() { return ICON; },
+    get chains() { return CHAINS.slice(); },
+    get accounts() { return solAccounts.slice(); },
+    get features() {
+      return {
+        "standard:connect": { version: "1.0.0", connect: async (input) => {
+          const r = await call("sol_connect", { silent: !!(input && input.silent) });
+          solAccounts = [makeAccount(r)]; changed();
+          return { accounts: solAccounts.slice() };
+        } },
+        "standard:disconnect": { version: "1.0.0", disconnect: async () => { await call("sol_disconnect"); solAccounts = []; changed(); } },
+        "standard:events": { version: "1.0.0", on: (ev, f) => { if (ev !== "change") return () => {}; solListeners.add(f); return () => solListeners.delete(f); } },
+        "solana:signTransaction": { version: "1.0.0", supportedTransactionVersions: ["legacy", 0], signTransaction: async (...inputs) => {
+          const out = [];
+          for (const i of inputs) { mine(i.account); const r = await call("sol_signTransaction", { transaction: b64(i.transaction) }); out.push({ signedTransaction: unb64(r.signedTransaction) }); }
+          return out;
+        } },
+        "solana:signAndSendTransaction": { version: "1.0.0", supportedTransactionVersions: ["legacy", 0], signAndSendTransaction: async (...inputs) => {
+          const out = [];
+          for (const i of inputs) {
+            mine(i.account);
+            if (i.chain && i.chain !== "solana:mainnet") { const e = new Error("Tollkit works on Solana mainnet only."); e.code = 4901; throw e; }
+            const r = await call("sol_signAndSendTransaction", { transaction: b64(i.transaction), options: i.options ? { skipPreflight: !!i.options.skipPreflight } : undefined });
+            out.push({ signature: unb64(r.signature) });
+          }
+          return out;
+        } },
+        "solana:signMessage": { version: "1.0.0", signMessage: async (...inputs) => {
+          const out = [];
+          for (const i of inputs) { mine(i.account); const r = await call("sol_signMessage", { message: b64(i.message) }); out.push({ signedMessage: i.message, signature: unb64(r.signature), signatureType: "ed25519" }); }
+          return out;
+        } },
+      };
+    },
+  };
+  // Same registration as @wallet-standard/wallet's registerWallet (Apache-2.0).
+  const callback = ({ register }) => register(wallet);
+  class RegisterWalletEvent extends Event {
+    #detail;
+    get detail() { return this.#detail; }
+    get type() { return "wallet-standard:register-wallet"; }
+    constructor(cb) { super("wallet-standard:register-wallet", { bubbles: false, cancelable: false, composed: false }); this.#detail = cb; }
+    preventDefault() { throw new Error("preventDefault cannot be called"); }
+    stopImmediatePropagation() { throw new Error("stopImmediatePropagation cannot be called"); }
+    stopPropagation() { throw new Error("stopPropagation cannot be called"); }
+  }
+  try { window.dispatchEvent(new RegisterWalletEvent(callback)); } catch (x) { console.error("wallet-standard:register-wallet event could not be dispatched", x); }
+  try { window.addEventListener("wallet-standard:app-ready", ({ detail: api }) => callback(api)); } catch (x) { console.error(x); }
+
+  Object.defineProperty(window, "__tollkitWallet", { value: true });
+})();

package/extension/manifest.json

@@ -0,0 +1,15 @@
+{
+  "manifest_version": 3,
+  "name": "Tollkit Wallet",
+  "version": "0.1.0",
+  "description": "Connect websites to the Tollkit Wallet on this computer. Keys stay in Tollkit, and you approve every request there.",
+  "icons": { "16": "icons/icon16.png", "32": "icons/icon32.png", "48": "icons/icon48.png", "128": "icons/icon128.png" },
+  "action": { "default_popup": "popup.html", "default_title": "Tollkit Wallet", "default_icon": { "16": "icons/icon16.png", "32": "icons/icon32.png" } },
+  "background": { "service_worker": "background.js" },
+  "permissions": ["storage"],
+  "host_permissions": ["http://127.0.0.1/*"],
+  "content_scripts": [
+    { "matches": ["https://*/*", "http://localhost/*"], "js": ["inpage.js"], "run_at": "document_start", "world": "MAIN" },
+    { "matches": ["https://*/*", "http://localhost/*"], "js": ["content.js"], "run_at": "document_start" }
+  ]
+}

package/extension/popup.html

@@ -0,0 +1,35 @@
+<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Tollkit Wallet</title>
+<style>
+:root{--bg:#0e1015;--card:#171a21;--surf:#1f232c;--line:#2a2f3a;--tx:#e8eaf0;--mut:#9aa1b2;--acc:#4a8eff;--acc2:#2f6bff;--ok:#2fd27a;--bad:#ff6b6b}
+@media (prefers-color-scheme: light){:root{--bg:#f4f5f8;--card:#fff;--surf:#f1f2f6;--line:#e2e5ec;--tx:#141821;--mut:#5d6474;--ok:#14a05a;--bad:#d93c3c}}
+*{box-sizing:border-box}
+body{margin:0;width:340px;background:var(--bg);color:var(--tx);font:14px/1.45 system-ui,-apple-system,"Segoe UI",sans-serif}
+header{display:flex;align-items:center;gap:10px;padding:14px 16px;border-bottom:1px solid var(--line);background:var(--card)}
+header img{width:28px;height:28px}
+header b{font:700 15px ui-monospace,SFMono-Regular,Menlo,monospace}header b span{color:var(--acc)}
+main{padding:14px 16px 16px}
+p{margin:0 0 10px;color:var(--mut)}
+ol{margin:0 0 12px;padding-left:18px;color:var(--mut)}ol li{margin:3px 0}
+input{width:100%;padding:10px;border-radius:10px;border:1px solid var(--line);background:var(--surf);color:var(--tx);font:15px ui-monospace,Menlo,monospace;letter-spacing:.04em}
+input:focus{outline:2px solid var(--acc);border-color:transparent}
+button{width:100%;margin-top:10px;padding:10px;border:0;border-radius:10px;background:var(--acc2);color:#fff;font:600 14px system-ui,sans-serif;cursor:pointer}
+button.g{background:var(--surf);color:var(--tx)}
+.row{display:flex;align-items:center;gap:8px;padding:9px 11px;background:var(--surf);border-radius:10px;margin-top:8px}
+.row small{display:block;color:var(--mut);font-size:11.5px}
+.addr{font:12px ui-monospace,Menlo,monospace;word-break:break-all}
+.msg{margin-top:10px;padding:8px 10px;border-radius:9px;background:var(--surf);font-size:13px}.err{color:var(--bad)}.okc{color:var(--ok)}
+.dot{width:8px;height:8px;border-radius:50%;background:var(--ok);flex:none}.dot.off{background:var(--bad)}
+h4{margin:14px 0 2px;font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:var(--mut)}
+</style>
+</head>
+<body>
+<header><img src="icons/icon48.png" alt=""><b>Toll<span>kit</span></b></header>
+<main id="main"><p>Loading…</p></main>
+<script src="popup.js"></script>
+</body>
+</html>

package/extension/popup.js

@@ -0,0 +1,39 @@
+const main = document.getElementById("main");
+const esc = (s) => String(s ?? "").replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" }[c]));
+const ask = (m) => new Promise((r) => chrome.runtime.sendMessage(m, r));
+const short = (a) => (a && a.length > 14 ? a.slice(0, 6) + "…" + a.slice(-4) : a || "");
+
+function pairView(err) {
+  main.innerHTML = `<p>Connect this browser to the Tollkit Wallet on this computer.</p>
+<ol><li>Start Tollkit: <b>tollkit-wallet ui</b></li><li>In Tollkit, open <b>Settings</b> and click <b>Pair a browser</b>.</li><li>Paste the code here.</li></ol>
+<input id="code" placeholder="7420-AB12-CD34" autocomplete="off" spellcheck="false">
+<button id="go">Pair</button>${err ? `<div class="msg err">${esc(err)}</div>` : ""}`;
+  const go = async () => {
+    const b = document.getElementById("go"); b.disabled = true; b.textContent = "Pairing…";
+    const r = await ask({ type: "pair", code: document.getElementById("code").value });
+    if (r && r.ok) render(); else pairView((r && r.error) || "Pairing failed.");
+  };
+  document.getElementById("go").onclick = go;
+  document.getElementById("code").onkeydown = (e) => { if (e.key === "Enter") go(); };
+  document.getElementById("code").focus();
+}
+
+async function render() {
+  const s = await ask({ type: "state" });
+  if (!s || !s.paired) return pairView();
+  if (s.error) {
+    main.innerHTML = `<div class="row"><span class="dot off"></span><div>Tollkit isn't answering<small>${esc(s.error)}</small></div></div>
+<p style="margin-top:10px">Start it with <b>tollkit-wallet ui</b>, then reopen this.</p><button class="g" id="un">Unpair this browser</button>`;
+  } else {
+    const sites = (s.sites || []).map((x) => `<div class="row"><div style="min-width:0"><div>${esc(new URL(x.origin).host)}</div><small>${[x.evm ? "Base/Ethereum" : "", x.solana ? "Solana" : ""].filter(Boolean).join(" + ")}</small></div></div>`).join("");
+    main.innerHTML = `<div class="row"><span class="dot"></span><div>Connected to Tollkit<small>127.0.0.1:${esc(s.port)}</small></div></div>
+<h4>Your addresses</h4>
+<div class="row"><div style="min-width:0"><small>Base / Ethereum</small><div class="addr" title="${esc(s.evm)}">${esc(short(s.evm))}</div></div></div>
+<div class="row"><div style="min-width:0"><small>Solana</small><div class="addr" title="${esc(s.solana)}">${esc(short(s.solana))}</div></div></div>
+<h4>Connected sites</h4>${sites || `<p style="margin-top:6px">None yet. When a site asks to connect, approve it in Tollkit's Approvals tab.</p>`}
+<p style="margin-top:12px">Every connect, signature and transaction waits for your OK in Tollkit. Manage sites in Tollkit's Settings.</p>
+<button class="g" id="un">Unpair this browser</button>`;
+  }
+  document.getElementById("un").onclick = async () => { await ask({ type: "unpair" }); pairView(); };
+}
+render();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tollkit-wallet",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Non-custodial wallet for AI trading agents: swaps on Base, Ethereum and Solana, x402 and MPP payments, budgets that hold, Telegram approvals, receipts.",
   "type": "module",
   "license": "MIT",
@@ -11,7 +11,7 @@
   },
   "scripts": {
     "typecheck": "tsc --noEmit",
-    "test": "npm run typecheck && tsx test/run.ts && tsx test/pay.test.ts && tsx test/wallet.test.ts && tsx test/send.test.ts && tsx test/dashboard.test.ts && tsx test/plugins.test.ts && tsx test/watch.test.ts && tsx test/prices.test.ts && tsx test/autopilot.test.ts && tsx test/connect.test.ts && tsx test/ai.test.ts",
+    "test": "npm run typecheck && tsx test/run.ts && tsx test/pay.test.ts && tsx test/wallet.test.ts && tsx test/send.test.ts && tsx test/dashboard.test.ts && tsx test/plugins.test.ts && tsx test/watch.test.ts && tsx test/prices.test.ts && tsx test/autopilot.test.ts && tsx test/connect.test.ts && tsx test/ai.test.ts && tsx test/backup.test.ts && tsx test/holdings.test.ts && tsx test/buy.test.ts && tsx test/stake.test.ts && tsx test/bridge.test.ts && tsx test/sell.test.ts && tsx test/dapp.test.ts",
     "build": "tsc -p tsconfig.build.json",
     "prepublishOnly": "npm test && npm run build"
   },
@@ -57,6 +57,7 @@
   },
   "files": [
     "dist",
+    "extension",
     "README.md",
     "LICENSE",
     "THIRD_PARTY_NOTICES.md"