@itpay/cli 2.0.29 → 2.0.30

package/dist/src/state/config.js

@@ -12,7 +12,7 @@ import { DeviceAuthority } from "./device_authority.js";
 import { OperationJournal } from "./operation_journal.js";
 export const DEFAULT_BASE_URL = "https://app.itpay.ai";
 export const DEV_BASE_URL = "https://dev.itpay.ai";
-export const CLI_VERSION = "2.0.29";
+export const CLI_VERSION = "2.0.30";
 export const API_CONTRACT_REVISION = "sha256:9e46ee5a429994b3a9b86c94f210995053f78b3971621dbc2629c1a57107b070";
 const CART_SESSION_DEFAULT_DIR = ".itpay-v3";
 const CART_SESSION_FILENAME = "cart.json";

package/dist/src/state/device_authority.js

@@ -108,12 +108,26 @@ export class DeviceAuthority {
     }
     async ensureRegistrationAgentType(registration, agentType, privateKey, forceSession) {
         if (!registration.agentInstances[agentType]) {
-            const existingType = firstAgentType(registration);
-            if (!existingType)
+            const existingTypes = Object.keys(registration.agentInstances).sort();
+            if (existingTypes.length === 0)
                 throw new Error("device has no registered agent instance");
-            const existingSession = await this.ensureSession(registration, existingType, privateKey, forceSession);
-            const registered = await this.signedJSON("/v1/agent-instances", { agent_type: agentType }, registration, existingType, existingSession, privateKey);
-            registration.agentInstances[agentType] = registered.agent_instance_id;
+            let revokedError;
+            for (const existingType of existingTypes) {
+                try {
+                    const existingSession = await this.ensureSession(registration, existingType, privateKey, forceSession);
+                    const registered = await this.signedJSON("/v1/agent-instances", { agent_type: agentType }, registration, existingType, existingSession, privateKey);
+                    registration.agentInstances[agentType] = registered.agent_instance_id;
+                    break;
+                }
+                catch (error) {
+                    if (!(error instanceof DeviceAuthorizationError) || error.code !== "agent_device_revoked")
+                        throw error;
+                    delete registration.sessions[existingType];
+                    revokedError = error;
+                }
+            }
+            if (!registration.agentInstances[agentType])
+                throw revokedError ?? new Error("device has no active registered agent instance");
         }
         return this.ensureSession(registration, agentType, privateKey, forceSession);
     }
@@ -240,7 +254,6 @@ export class DeviceStateError extends Error {
 function emptyDeviceState() {
     return { schemaVersion: "itpay.device.v2", registrations: {} };
 }
-function firstAgentType(state) { return Object.keys(state.agentInstances)[0]; }
 function canMovePastLegacyRegistration(error) {
     return error instanceof DeviceAuthorizationError && (error.code === "agent_device_revoked" || error.status === 404);
 }

package/docs/agent/buyer/identity-and-sessions.json

@@ -20,6 +20,7 @@
     "The CLI reuses a valid cached device session.",
     "On one HTTP 401 with code agent_device_session_required, it invalidates only the current Backend and Agent Type session, renews it, and retries the exact request once.",
     "A second failure is returned to the Agent. The CLI does not loop, switch Agent Type, rotate the key, or create a replacement v2 device.",
+    "When a previously unseen Agent Type is registered under an existing Device, the CLI skips locally known Agent Instances that the Backend reports as revoked and uses the first remaining valid Instance. It never reactivates a revoked Instance or replaces the Device; if none is valid, registration stops.",
     "A revoked v2 registration requires explicit operator recovery; it is never silently replaced."
   ],
   "local_state_recovery": [

package/docs/cli-reference/agent-types.md

@@ -33,6 +33,7 @@
 - OpenClaw 的 IM Host 必须提供 `--target`。缺失时在任何 Checkout 创建前返回 `target_required`。
 - `kimi-code` 是 CLI 型 Agent，复用 `terminal` Host 和现有 CLI 展示，不增加 Kimi 专属交易协议。
 - session 失效时 CLI 只续期并重试原请求一次；再次失败立即返回。revoked v2 Device 不自动换身份。
+- 同一 Device 首次登记新的 Agent Type 时，CLI 只使用本地已登记且 Backend 仍接受的既有 Agent Instance 完成签名登记；被撤销的 Instance 会被跳过且不会恢复。若没有任何既有 Instance 可用，CLI 必须停止，不得重新登记 Device、旋转私钥或借用其他 Backend。
 
 ## Checkout Handoff 最小合同
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@itpay/cli",
-  "version": "2.0.29",
+  "version": "2.0.30",
   "description": "The single ItPay CLI entry point for buy workflows and future sell workflows.",
   "type": "module",
   "bin": {