@1claw/cli 0.55.0 → 0.57.0

package/README.md

@@ -1,4 +1,4 @@
-# @1claw/cli (v0.53.2)
+# @1claw/cli (v0.56.3)
 
 Command-line interface for [1Claw](https://1claw.xyz).
 
@@ -258,6 +258,34 @@ When a valid cache exists, `env run` uses it automatically instead of calling th
   --per-environment-guardrails '{"production":{"tx_max_value":"1.0"}}'
 ```
 
+### Graduated HITL & v0.55 guardrails (Intents API)
+
+When Intents API is enabled, configure graduated human-in-the-loop thresholds and extended hard guardrails:
+
+```bash
+1claw agent create my-agent --intents-api \
+  --tx-approval-policy '{"require_above_native":{"ethereum":"0.1"},"require_for_new_recipients":true}' \
+  --typed-data-policy approve \              # EIP-712 → HITL (deny|approve)
+  --simulation-failure-policy approve \      # Tenderly revert → HITL
+  --raw-signing-policy approve \             # Raw digest → HITL (allow|deny|approve)
+  --tx-block-unlimited-approvals \
+  --tx-max-value-usd 1000 \
+  --tx-daily-limit-usd 5000 \
+  --allow-erc4337 \
+  --allow-eip7702 \
+  --address-screening-policy deny          # off | deny | approve (recipient screening)
+
+1claw agent update <id> \
+  --tx-approval-policy '{"require_for_unlimited_approvals":true}' \
+  --clear-auto-suspended                     # Clear circuit-breaker suspension (owner/admin)
+
+# Org emergency stop (owner/admin)
+curl -X POST https://api.1claw.xyz/v1/org/freeze -H "Authorization: Bearer $ONECLAW_TOKEN"
+curl -X POST https://api.1claw.xyz/v1/org/unfreeze -H "Authorization: Bearer $ONECLAW_TOKEN"
+```
+
+Matching transactions return **202** `awaiting_approval` with an `approval_id`. Approve via dashboard or `1claw approval decide <id> --decision approved`.
+
 The CLI's `agent create` always uses `auth_method=api_key` (default; returns an `ocv_` API key). To register an `mtls` or `oidc_client_credentials` agent, use the SDK or `POST /v1/agents` directly — those auth methods don't generate an API key.
 
 All agents automatically receive an Ed25519 SSH keypair for future A2A messaging. The public key is shown in `agent get` output.
@@ -284,6 +312,48 @@ Human-controlled inter-agent delegation. Create, manage, and revoke delegation p
 
 Delegation modes: `caller` (delegate uses own credentials), `target` (delegate uses target's config), `both`.
 
+### Guardrail governance (v0.56)
+
+Convention 6 shadow mode, revision history, and dry-run replay for agent/binding guardrail changes:
+
+```bash
+1claw guardrails shadow-report              # Would-deny violations (owner/admin)
+1claw guardrails shadow-report --since 2026-01-01T00:00:00Z
+1claw guardrails revisions                  # Audit trail of guardrail edits
+1claw guardrails replay <agent-id> \
+  --draft-guardrails '{"tx_max_value_eth":"0.1"}' \
+  --days 7
+```
+
+Widening agent or binding guardrails may return **202** with an `approval_id`. Approve via `1claw approval decide`, then resubmit with `--approval-id <uuid>` on `agent update` or `agent binding update`.
+
+Execution bindings support Convention 6 shadow mode via `--execution-enforcement log|enforce` on `agent create` / `agent update`.
+
+### Agent accounts & Safe (Phase 5, v0.56)
+
+Counterfactual Safe accounts derived from agent EOA owners. On-chain deploy/module broadcast is stubbed (501) pre-Guard audit.
+
+```bash
+1claw agent accounts list <agent-id>
+1claw agent accounts migrate <agent-id> --chain ethereum [--deprecate-eoa]
+1claw agent accounts deprecate-eoa <agent-id> --chain ethereum
+
+1claw safe module-registry ethereum         # Public Guard + Zodiac addresses
+1claw safe sync-allowances                  # Org admin: compile allowance drift report
+```
+
+### Human Factor Auth (HFA, v0.56)
+
+Step-up policies for treasury wallet send/swap/export. Configured per user via API; embedded clients call `GET /v1/treasury/wallets/auth-policy`.
+
+```bash
+# Via API (SDK/dashboard) — not yet a dedicated CLI subcommand:
+# PUT /v1/auth/human-factor-auth  { "policy": { "require_passkey": true } }
+# Passkey tx-assert: POST /v1/auth/passkeys/tx-assert/begin { "tx_digest", "action": "send"|"swap" }
+```
+
+Treasury sends accept `X-Auth-Confirm` (password) or `X-Passkey-Token` (from tx-assert ceremony).
+
 ### Bankr dynamic key vending
 
 Lease short-lived Bankr wallet API keys from your org's partner key (`BANKR_PARTNER_KEY` on Vault). **Privileged** — agents need explicit policy on `agents/{id}/bankr/*` in `__agent-keys`. Human callers receive `api_key` once; agent tokens omit it.

package/dist/src/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAGA,qBAAa,QAAS,SAAQ,KAAK;IAEpB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;IACd,IAAI,CAAC,EAAE,MAAM;gBAFb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,YAAA;CAK3B;AAgBD,wBAAsB,GAAG,CAAC,CAAC,GAAG,OAAO,EACjC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GACP,OAAO,CAAC,CAAC,CAAC,CA8CZ;AAED,wBAAsB,SAAS,CAAC,CAAC,GAAG,OAAO,EACvC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;CAC5D,GACP,OAAO,CAAC,CAAC,CAAC,CAEZ"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAGA,qBAAa,QAAS,SAAQ,KAAK;IAEpB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;IACd,IAAI,CAAC,EAAE,MAAM;gBAFb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,YAAA;CAK3B;AAgBD,wBAAsB,GAAG,CAAC,CAAC,GAAG,OAAO,EACjC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GACP,OAAO,CAAC,CAAC,CAAC,CAiDZ;AAED,wBAAsB,SAAS,CAAC,CAAC,GAAG,OAAO,EACvC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;CAC5D,GACP,OAAO,CAAC,CAAC,CAAC,CAEZ"}

package/dist/src/client.js

@@ -65,7 +65,10 @@ export async function api(path, options = {}) {
     }
     if (res.status === 204)
         return undefined;
-    return res.json();
+    const text = await res.text();
+    if (!text)
+        return undefined;
+    return JSON.parse(text);
 }
 export async function apiNoAuth(path, options = {}) {
     return api(path, { ...options, token: "" });

package/dist/src/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAgB,MAAM,gBAAgB,CAAC;AAEhF,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEpB;IACA;IACA;IAHX,YACW,MAAc,EACd,MAAc,EACd,IAAa;QAEpB,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAJvB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAGpB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IAC3B,CAAC;CACJ;AAED,KAAK,UAAU,cAAc,CACzB,GAAa;IAEb,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAC;QAC1D,OAAO;YACH,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU;YACnE,IAAI,EAAE,IAAI,CAAC,IAAI;SAClB,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CACrB,IAAY,EACZ,UAMI,EAAE;IAEN,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAE3C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,MAAM,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,YAAY;QAC1B,GAAG,OAAO,CAAC,OAAO;KACrB,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACjD,IAAI,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;IAC9C,CAAC;IACD,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACnE,IAAI,kBAAkB,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,uBAAuB,CAAC,GAAG,kBAAkB,CAAC;IAC1D,CAAC;IAED,IAAI,aAAa,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM;QACN,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAc,CAAC;IAE9C,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,IAAY,EACZ,UAII,EAAE;IAEN,OAAO,GAAG,CAAI,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAgB,MAAM,gBAAgB,CAAC;AAEhF,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEpB;IACA;IACA;IAHX,YACW,MAAc,EACd,MAAc,EACd,IAAa;QAEpB,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAJvB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAGpB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IAC3B,CAAC;CACJ;AAED,KAAK,UAAU,cAAc,CACzB,GAAa;IAEb,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAC;QAC1D,OAAO;YACH,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU;YACnE,IAAI,EAAE,IAAI,CAAC,IAAI;SAClB,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CACrB,IAAY,EACZ,UAMI,EAAE;IAEN,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAE3C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,MAAM,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,YAAY;QAC1B,GAAG,OAAO,CAAC,OAAO;KACrB,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACjD,IAAI,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;IAC9C,CAAC;IACD,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACnE,IAAI,kBAAkB,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,uBAAuB,CAAC,GAAG,kBAAkB,CAAC;IAC1D,CAAC;IAED,IAAI,aAAa,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM;QACN,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAc,CAAC;IAE9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAc,CAAC;IAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,IAAY,EACZ,UAII,EAAE;IAEN,OAAO,GAAG,CAAI,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC"}

package/dist/src/commands/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/commands/agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4EpC,eAAO,MAAM,YAAY,SAAoD,CAAC"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/commands/agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsGpC,eAAO,MAAM,YAAY,SAAoD,CAAC"}

package/dist/src/commands/agent.js

@@ -5,6 +5,14 @@ import { api, apiNoAuth } from "../client.js";
 import { requireToken, handleError } from "../middleware.js";
 import { printTable, printKeyValue, printSuccess, printJson, formatDate, resolveExpiresAt, } from "../output.js";
 import { registerAgentBindingCommands } from "./binding.js";
+function mergeExecutionGuardrails(guardrails, enforcement) {
+    if (!enforcement)
+        return guardrails;
+    if (!["log", "enforce"].includes(enforcement)) {
+        throw new Error("execution-enforcement must be log or enforce");
+    }
+    return { ...(guardrails ?? {}), enforcement };
+}
 export const agentCommand = new Command("agent").description("Manage agents");
 agentCommand
     .command("list")
@@ -48,6 +56,7 @@ agentCommand
     .option("--intents-api", "Enable Intents API (on-chain signing)")
     .option("--execution-intents", "Enable Execution Intents (HTTP/GraphQL proxy; Pro+ tier)")
     .option("--execution-guardrails <json>", "Agent execution guardrails JSON (allowed_hosts, allowed_binding_types, max_duration_ms, …)")
+    .option("--execution-enforcement <mode>", "Convention 6 shadow mode on agent execution guardrails: log or enforce")
     .option("--intents-require-tee", "Enforce TEE-only transaction signing (Business+)")
     .option("--execution-require-tee", "Enforce TEE-only execution and block all direct secret reads (Business+)")
     .option("--shroud", "Enable Shroud LLM Proxy")
@@ -65,6 +74,20 @@ agentCommand
     .option('--tx-max-per-day <n>', 'Max transactions per UTC calendar day')
     .option('--tx-overhead-budget <json>', 'Per-chain daily overhead budget JSON (e.g. {"solana":"0.5","xrp":"100"})')
     .option('--solana-ata-allowlist <addrs>', 'Comma-separated Solana addresses whose ATAs may be created', (v) => v.split(',').map(s => s.trim()))
+    .option('--tx-approval-policy <json>', 'Graduated tx HITL policy JSON')
+    .option('--typed-data-policy <mode>', 'EIP-712 escalation: deny or approve (HITL)')
+    .option('--simulation-failure-policy <mode>', 'Simulation failure: deny or approve (HITL)')
+    .option('--tx-block-unlimited-approvals', 'Block unlimited ERC-20 approvals')
+    .option('--tx-per-recipient-max-per-day <n>', 'Max txs to same recipient per UTC day')
+    .option('--tx-per-recipient-daily-limit <amount>', 'Max native spend to same recipient per day')
+    .option('--new-recipient-cap-native <amount>', 'Cap on first-time recipient spend (native units)')
+    .option('--tx-max-value-usd <amount>', 'Per-transaction USD cap')
+    .option('--tx-daily-limit-usd <amount>', 'Rolling 24h USD spend cap')
+    .option('--raw-signing-policy <mode>', 'Raw digest signing: allow, deny, or approve (HITL)')
+    .option('--personal-sign-policy <json>', 'personal_sign guardrails JSON')
+    .option('--address-screening-policy <mode>', 'Recipient screening: off, deny, or approve')
+    .option('--allow-erc4337', 'Allow ERC-4337 gasless UserOperations')
+    .option('--allow-eip7702', 'Allow EIP-7702 type-4 transactions')
     .option("--environment <env>", "Named environment tag (production, preview, development, or custom)")
     .option("--environment-locked", "Lock the environment tag after creation")
     .option("--env-auto-resolve", "Auto-fill env var resolve from agent environment tag")
@@ -79,8 +102,11 @@ agentCommand
             body.intents_api_enabled = true;
         if (opts.executionIntents)
             body.execution_intents_enabled = true;
-        if (opts.executionGuardrails)
-            body.execution_guardrails = JSON.parse(opts.executionGuardrails);
+        if (opts.executionGuardrails || opts.executionEnforcement) {
+            body.execution_guardrails = mergeExecutionGuardrails(opts.executionGuardrails
+                ? JSON.parse(opts.executionGuardrails)
+                : undefined, opts.executionEnforcement);
+        }
         if (opts.intentsRequireTee)
             body.intents_require_tee = true;
         if (opts.executionRequireTee)
@@ -121,6 +147,39 @@ agentCommand
             body.tx_overhead_budget = JSON.parse(opts.txOverheadBudget);
         if (opts.solanaAtaAllowlist)
             body.solana_ata_allowlist = opts.solanaAtaAllowlist;
+        if (opts.txApprovalPolicy)
+            body.tx_approval_policy = JSON.parse(opts.txApprovalPolicy);
+        if (opts.typedDataPolicy)
+            body.typed_data_policy = opts.typedDataPolicy;
+        if (opts.simulationFailurePolicy)
+            body.simulation_failure_policy = opts.simulationFailurePolicy;
+        if (opts.txBlockUnlimitedApprovals)
+            body.tx_block_unlimited_approvals = true;
+        if (opts.txPerRecipientMaxPerDay)
+            body.tx_per_recipient_max_per_day = parseInt(opts.txPerRecipientMaxPerDay, 10);
+        if (opts.txPerRecipientDailyLimit)
+            body.tx_per_recipient_daily_limit = opts.txPerRecipientDailyLimit;
+        if (opts.newRecipientCapNative)
+            body.new_recipient_cap_native = opts.newRecipientCapNative;
+        if (opts.txMaxValueUsd)
+            body.tx_max_value_usd = opts.txMaxValueUsd;
+        if (opts.txDailyLimitUsd)
+            body.tx_daily_limit_usd = opts.txDailyLimitUsd;
+        if (opts.rawSigningPolicy)
+            body.raw_signing_policy = opts.rawSigningPolicy;
+        if (opts.personalSignPolicy)
+            body.personal_sign_policy = JSON.parse(opts.personalSignPolicy);
+        if (opts.allowErc4337)
+            body.allow_erc4337 = true;
+        if (opts.allowEip7702)
+            body.allow_eip7702 = true;
+        if (opts.addressScreeningPolicy) {
+            const mode = opts.addressScreeningPolicy;
+            if (!["off", "deny", "approve"].includes(mode)) {
+                throw new Error("address-screening-policy must be off, deny, or approve");
+            }
+            body.address_screening_policy = { mode };
+        }
         if (opts.environment)
             body.environment = opts.environment;
         if (opts.environmentLocked)
@@ -445,6 +504,37 @@ agentCommand
                     JSON.stringify(agent.per_chain_guardrails),
                 ]);
             }
+            if (agent.tx_approval_policy) {
+                rows.push([
+                    "Tx approval policy (HITL)",
+                    JSON.stringify(agent.tx_approval_policy),
+                ]);
+            }
+            if (agent.typed_data_policy) {
+                rows.push(["Typed data policy", agent.typed_data_policy]);
+            }
+            if (agent.simulation_failure_policy) {
+                rows.push(["Simulation failure policy", agent.simulation_failure_policy]);
+            }
+            if (agent.raw_signing_policy) {
+                rows.push(["Raw signing policy", agent.raw_signing_policy]);
+            }
+            if (agent.tx_block_unlimited_approvals) {
+                rows.push(["Block unlimited approvals", "true"]);
+            }
+            if (agent.tx_max_value_usd) {
+                rows.push(["Max value USD", agent.tx_max_value_usd]);
+            }
+            if (agent.tx_daily_limit_usd) {
+                rows.push(["Daily limit USD", agent.tx_daily_limit_usd]);
+            }
+            if (agent.allow_erc4337)
+                rows.push(["Allow ERC-4337", "true"]);
+            if (agent.allow_eip7702)
+                rows.push(["Allow EIP-7702", "true"]);
+            if (agent.auto_suspended) {
+                rows.push(["Auto-suspended", chalk.red("yes")]);
+            }
         }
         rows.push(["Created by", agent.created_by]);
         rows.push(["Created", formatDate(agent.created_at, "long")]);
@@ -460,6 +550,7 @@ agentCommand
     .option("--intents-api <bool>", "Enable/disable Intents API (true/false)")
     .option("--execution-intents <bool>", "Enable/disable Execution Intents (true/false)")
     .option('--execution-guardrails <json>', 'Agent execution guardrails JSON (use "" to clear)')
+    .option("--execution-enforcement <mode>", "Convention 6 shadow mode on agent execution guardrails: log or enforce")
     .option("--intents-require-tee <bool>", "Enforce TEE-only transaction signing (true/false; Business+)")
     .option("--execution-require-tee <bool>", "Enforce TEE-only execution (true/false; Business+)")
     .option("--shroud <bool>", "Enable/disable Shroud LLM Proxy (true/false)")
@@ -482,6 +573,21 @@ agentCommand
     .option("--environment-locked <bool>", "Lock/unlock environment tag (true/false)")
     .option("--env-auto-resolve <bool>", "Auto-fill env var resolve from agent tag (true/false)")
     .option('--per-environment-guardrails <json>', 'Per-environment guardrail overrides JSON (use "" to clear)')
+    .option('--tx-approval-policy <json>', 'Graduated tx HITL policy JSON (use "" to clear)')
+    .option('--typed-data-policy <mode>', 'EIP-712 escalation: deny or approve (use "" to clear)')
+    .option('--simulation-failure-policy <mode>', 'Simulation failure: deny or approve (use "" to clear)')
+    .option('--tx-block-unlimited-approvals <bool>', 'Block unlimited ERC-20 approvals (true/false)')
+    .option('--tx-per-recipient-max-per-day <n>', 'Max txs to same recipient per UTC day (use "" to clear)')
+    .option('--tx-per-recipient-daily-limit <amount>', 'Per-recipient daily native limit (use "" to clear)')
+    .option('--new-recipient-cap-native <amount>', 'First-time recipient cap (use "" to clear)')
+    .option('--tx-max-value-usd <amount>', 'Per-transaction USD cap (use "" to clear)')
+    .option('--tx-daily-limit-usd <amount>', 'Rolling 24h USD cap (use "" to clear)')
+    .option('--raw-signing-policy <mode>', 'Raw digest: allow, deny, or approve')
+    .option('--personal-sign-policy <json>', 'personal_sign guardrails JSON (use "" to clear)')
+    .option('--address-screening-policy <mode>', 'Recipient screening: off, deny, or approve')
+    .option('--allow-erc4337 <bool>', 'Allow ERC-4337 gasless (true/false)')
+    .option('--allow-eip7702 <bool>', 'Allow EIP-7702 type-4 (true/false)')
+    .option('--clear-auto-suspended', 'Clear circuit-breaker auto-suspension (owner/admin)')
     .action(async (id, opts) => {
     try {
         requireToken();
@@ -490,11 +596,13 @@ agentCommand
             body.intents_api_enabled = opts.intentsApi === "true";
         if (opts.executionIntents !== undefined)
             body.execution_intents_enabled = opts.executionIntents === "true";
-        if (opts.executionGuardrails !== undefined) {
-            body.execution_guardrails =
-                opts.executionGuardrails === ""
+        if (opts.executionGuardrails !== undefined || opts.executionEnforcement !== undefined) {
+            const parsed = opts.executionGuardrails === undefined
+                ? undefined
+                : opts.executionGuardrails === ""
                     ? {}
                     : JSON.parse(opts.executionGuardrails);
+            body.execution_guardrails = mergeExecutionGuardrails(parsed, opts.executionEnforcement);
         }
         if (opts.intentsRequireTee !== undefined)
             body.intents_require_tee = opts.intentsRequireTee === "true";
@@ -580,6 +688,77 @@ agentCommand
                     ? null
                     : JSON.parse(opts.perEnvironmentGuardrails);
         }
+        if (opts.txApprovalPolicy !== undefined) {
+            body.tx_approval_policy =
+                opts.txApprovalPolicy === ""
+                    ? null
+                    : JSON.parse(opts.txApprovalPolicy);
+        }
+        if (opts.typedDataPolicy !== undefined) {
+            body.typed_data_policy =
+                opts.typedDataPolicy === "" ? null : opts.typedDataPolicy;
+        }
+        if (opts.simulationFailurePolicy !== undefined) {
+            body.simulation_failure_policy =
+                opts.simulationFailurePolicy === ""
+                    ? null
+                    : opts.simulationFailurePolicy;
+        }
+        if (opts.txBlockUnlimitedApprovals !== undefined) {
+            body.tx_block_unlimited_approvals =
+                opts.txBlockUnlimitedApprovals === "true";
+        }
+        if (opts.txPerRecipientMaxPerDay !== undefined) {
+            body.tx_per_recipient_max_per_day =
+                opts.txPerRecipientMaxPerDay === ""
+                    ? null
+                    : parseInt(opts.txPerRecipientMaxPerDay, 10);
+        }
+        if (opts.txPerRecipientDailyLimit !== undefined) {
+            body.tx_per_recipient_daily_limit =
+                opts.txPerRecipientDailyLimit === ""
+                    ? null
+                    : opts.txPerRecipientDailyLimit;
+        }
+        if (opts.newRecipientCapNative !== undefined) {
+            body.new_recipient_cap_native =
+                opts.newRecipientCapNative === ""
+                    ? null
+                    : opts.newRecipientCapNative;
+        }
+        if (opts.txMaxValueUsd !== undefined) {
+            body.tx_max_value_usd =
+                opts.txMaxValueUsd === "" ? null : opts.txMaxValueUsd;
+        }
+        if (opts.txDailyLimitUsd !== undefined) {
+            body.tx_daily_limit_usd =
+                opts.txDailyLimitUsd === "" ? null : opts.txDailyLimitUsd;
+        }
+        if (opts.rawSigningPolicy !== undefined) {
+            body.raw_signing_policy = opts.rawSigningPolicy;
+        }
+        if (opts.personalSignPolicy !== undefined) {
+            body.personal_sign_policy =
+                opts.personalSignPolicy === ""
+                    ? null
+                    : JSON.parse(opts.personalSignPolicy);
+        }
+        if (opts.addressScreeningPolicy !== undefined) {
+            const mode = opts.addressScreeningPolicy;
+            if (!["off", "deny", "approve"].includes(mode)) {
+                throw new Error("address-screening-policy must be off, deny, or approve");
+            }
+            body.address_screening_policy = { mode };
+        }
+        if (opts.allowErc4337 !== undefined) {
+            body.allow_erc4337 = opts.allowErc4337 === "true";
+        }
+        if (opts.allowEip7702 !== undefined) {
+            body.allow_eip7702 = opts.allowEip7702 === "true";
+        }
+        if (opts.clearAutoSuspended) {
+            body.clear_auto_suspended = true;
+        }
         if (Object.keys(body).length === 0) {
             console.log(chalk.yellow("No update options provided. Use --help for available flags."));
             return;
@@ -1461,5 +1640,102 @@ delegationCommand
         handleError(err);
     }
 });
+const accountsCommand = agentCommand
+    .command("accounts")
+    .description("Agent EOA/Safe account management (Phase 5)");
+accountsCommand
+    .command("list <agent-id>")
+    .description("List agent accounts (EOA and Safe) per chain")
+    .option("--json", "Output as JSON")
+    .action(async (agentId, opts) => {
+    try {
+        requireToken();
+        const res = await api(`/agents/${agentId}/accounts`);
+        if (opts.json) {
+            printJson(res.accounts);
+            return;
+        }
+        if (!res.accounts.length) {
+            console.log("No accounts provisioned for this agent.");
+            return;
+        }
+        printTable(res.accounts, [
+            { key: "chain", header: "Chain" },
+            { key: "account_type", header: "Type" },
+            { key: "address", header: "Address" },
+            { key: "deploy_status", header: "Deploy" },
+        ]);
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+accountsCommand
+    .command("migrate <agent-id>")
+    .description("Build EOA→Safe migration plan and provision counterfactual Safe (no on-chain broadcast)")
+    .requiredOption("--chain <chain>", "Chain name (e.g. ethereum, base, sepolia)")
+    .option("--deprecate-eoa", "Mark the EOA account deprecated after migration")
+    .option("--json", "Output as JSON")
+    .action(async (agentId, opts) => {
+    try {
+        requireToken();
+        const body = { chain: opts.chain };
+        if (opts.deprecateEoa)
+            body.deprecate_eoa = true;
+        const plan = await api(`/agents/${agentId}/accounts/migrate`, {
+            method: "POST",
+            body,
+        });
+        if (opts.json) {
+            printJson(plan);
+            return;
+        }
+        printKeyValue([
+            ["Chain", plan.chain],
+            ["Safe address", plan.safe_address],
+            ["Safe version", plan.safe_version],
+            ["EOA address", plan.eoa_address ?? "(none)"],
+            ["Deploy status", plan.deploy_status],
+            ["Roles hash", plan.roles_config_hash],
+            ["Allowance hash", plan.allowance_config_hash],
+        ]);
+        if (plan.modules.length) {
+            console.log("\nModules:", plan.modules.join(", "));
+        }
+        if (plan.warnings.length) {
+            console.log("\nWarnings:");
+            for (const w of plan.warnings)
+                console.log(`  • ${w}`);
+        }
+        printSuccess("Migration plan stored (counterfactual — deploy broadcast returns 501)");
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+accountsCommand
+    .command("deprecate-eoa <agent-id> <chain>")
+    .description("Mark the agent EOA account deprecated for a chain (blocks direct EOA signing path)")
+    .option("--json", "Output as JSON")
+    .action(async (agentId, chain, opts) => {
+    try {
+        requireToken();
+        const row = await api(`/agents/${agentId}/accounts/${encodeURIComponent(chain)}/deprecate-eoa`, { method: "POST" });
+        if (opts.json) {
+            printJson(row);
+            return;
+        }
+        printKeyValue([
+            ["Chain", row.chain],
+            ["Type", row.account_type],
+            ["Address", row.address ?? ""],
+            ["Deploy status", row.deploy_status],
+        ]);
+        printSuccess("EOA account marked deprecated");
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
 registerAgentBindingCommands(agentCommand);
 //# sourceMappingURL=agent.js.map