build(deps): bump @bankofai/agent-wallet from 2.3.0 to 3.0.0

[dependabot]

Bumps @bankofai/agent-wallet from 2.3.0 to 3.0.0.

Release notes

Sourced from @​bankofai/agent-wallet's releases.

v3.0.0

agent-wallet v3.0.0

Breaking changes

• Removed the local_secure wallet type, agent-wallet master password flow, runtime_secrets.json, and AGENT_WALLET_PASSWORD.
• Wallet.signTransaction() now returns a family-discriminated SignedTransactionArtifact.
• Removed public signRaw(), signMessage(), and CLI sign message APIs.
• Moved low-level adapters, clients, config resolvers, and secret lifecycle APIs to @bankofai/agent-wallet/advanced.
• Removed legacy TRON environment aliases. Use the AGENT_WALLET_* variables.
• Signing networks now require canonical CAIP-2 IDs such as eip155:1 and tron:728126428.
• wallet-cli compatibility now requires @tron-walletcli/wallet-cli >=4.13.0 <5.0.0.
• The Python package has been removed; v3 is TypeScript-only.

Added

• Added the wallet_cli wallet type for delegated TRON and EVM transaction and typed-data signing.
• Added @bankofai/agent-wallet/advanced and @bankofai/agent-wallet/integrations/wallet-cli entry points.
• Added typed transaction payloads and artifacts, cancellable signing, protocol handshake validation, identity and network checks, and bounded subprocess execution.
• Added exec-based secret references for Privy and wallet-cli credentials.

Reliability and security

• Preserves transaction IDs after broadcast when status polling fails.
• Enforces explicit confirmation for canonical TRON mainnet broadcasts.
• Binds transaction building to the injected wallet identity.
• Handles asynchronous stdin failures and descendant process cleanup across platforms.
• Preserves error identity across built CommonJS entry points.

Upgrade

See the 3.0 migration guide and CHANGELOG.

Install with:

npm install @bankofai/agent-wallet@^3.0.0

v2.4.0

agent-wallet v2.4.0

New Features

Privy Wallet Support

• Added Privy-backed wallet adapter for both TypeScript (@bankofai/agent-wallet) and Python (bankofai-agent-wallet)
• Supports EVM and TRON chain types — chain type is auto-detected from Privy wallet metadata
• Implements full signing interface: sign tx, sign msg, sign typed-data
• New CLI subcommands: start privy, add privy with --app-id, --app-secret, --privy-wallet-id flags
• Rate-limit retry with exponential backoff for Privy API requests

... (truncated)

Changelog

Sourced from @​bankofai/agent-wallet's changelog.

[3.0.0] - 2026-09-10

Breaking changes

• 移除 local_secure wallet type、agent-wallet master password、 runtime_secrets.json 與 AGENT_WALLET_PASSWORD 流程。
• Wallet.signTransaction() 不再回傳多態字串，改為以 family 區分的 SignedTransactionArtifact：EVM 使用 rawTransaction，TRON 使用 transaction。
• 從公開契約移除 signRaw()、signMessage() 與 CLI sign message；agent-wallet 目前只提供 transaction 與 typed-data 簽章。
• ConfigWalletProvider constructor 改為 new ConfigWalletProvider(dir, options)， 不再接收 password 與 secret loader positional arguments。
• adapter、client、secret lifecycle 與 config resolver 等低階 API 移至 @bankofai/agent-wallet/advanced；主入口只保留穩定的 wallet/provider API。
• 移除公開的 runtime external-signer registration API。wallet type 由封閉且可驗證的 WalletConfigSchema 定義。
• 移除舊 TRON 環境變數 alias：TRON_PRIVATE_KEY、TRON_MNEMONIC、 TRON_ACCOUNT_INDEX。請改用 AGENT_WALLET_* 變數。
• @tron-walletcli/wallet-cli 的相容範圍改為 >=4.13.0 <5.0.0；不相容 4.12.x。

Added

• 新增 wallet_cli wallet type，支援委派 TRON/EVM transaction 與 typed-data 簽章。
• 新增 @bankofai/agent-wallet/advanced 與 @bankofai/agent-wallet/integrations/wallet-cli subpath exports。
• 新增 typed transaction payload/artifact、可取消的 SignOptions.signal，以及 wallet-cli protocol handshake、identity/network 驗證與受限子程序執行。
• Privy 與 wallet-cli credential 支援 { "exec": "/absolute/script" } secret refs。

Fixed

• 移除 wallet 後會正確驅逐該 ID 的所有 cached adapters，避免同 ID 重建時沿用舊 credential。
• wallet-cli compatibility handshake 會串行執行 metadata probes，辨識 startup migration 完成、取消與需密碼狀態，並在 migration 邊界後允許 caller 明確重試。
• 將 @inquirer/prompts 固定於支援 Node.js 18 的 7.x 系列，使 CLI runtime dependency 與 package 的 Node.js >=18 契約一致。
• Windows .cmd/.bat secret exec 使用固定 quoting，並拒絕可能觸發 cmd.exe expansion/escaping 的不安全路徑。

完整升級步驟請見 3.0 遷移指南。

Commits

• 2734b21 docs: prepare 3.0.0 release
• 469f42e fix(wallet-cli): resolve integration review findings
• 80524b7 test: normalize Windows batch exit codes
• d8c6c45 test: use native secret scripts on Windows
• 31ccc44 fix(ci): align pnpm workspace configuration
• 898e015 fix: align v3 docs and Node runtime support
• 8cb8dc5 fix(wallet-cli): handle startup migration during handshake
• d06438c refactor!: narrow wallet-cli signing surface
• 9875dfe feat!: require wallet-cli 4.13.0
• a54e6e5 feat!: finalize agent-wallet v3 architecture
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by roger.gan, a new releaser for @​bankofai/agent-wallet since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.