@thirdfy/agent-cli 0.1.12 → 0.1.13

package/CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## [Unreleased]
 
+## [0.1.13] - 2026-04-19
+
+**npm:** [`@thirdfy/agent-cli@0.1.13`](https://www.npmjs.com/package/@thirdfy/agent-cli/v/0.1.13)  
+**Git tag:** `v0.1.13`
+
+### Changed
+
+- **README and onboarding docs refresh:** Updated public README guidance to reflect latest bootstrap/onboarding command surface (`bootstrap begin/complete` plus aliases), session-proof-first issuance behavior, and current release references.
+
 ## [0.1.11] - 2026-04-16
 
 **npm:** [`@thirdfy/agent-cli@0.1.11`](https://www.npmjs.com/package/@thirdfy/agent-cli/v/0.1.11)  

package/README.md

@@ -38,12 +38,12 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in 0.1.8
+## What's new in 0.1.12
 
-- Managed custodial lifecycle parity validation is now first-class in CLI E2E/certification.
-- `doctor self` runs as a local diagnostic command without capabilities negotiation.
-- Self-exec effect-check fallback payloads are hardened for deterministic automation parsing.
-- Managed wallet aliases (`managed wallet init/grant`) are wired directly to custodial delegation handlers.
+- Added Model D onboarding commands: `bootstrap begin` and `bootstrap complete`.
+- Added `onboarding begin` and `onboarding complete` aliases for clearer operator flows.
+- Aligned bootstrap completion to session-proof issuance (`session_token`), with wallet challenge/signature supported as an exchange step into session proof.
+- Hardened bootstrap path behavior for safer timeout and one-time challenge handling.
 
 ## Quick start
 
@@ -112,6 +112,21 @@ Use the returned session token:
 thirdfy-agent agent register --owner-session-token "$THIRDFY_OWNER_SESSION_TOKEN" --agent-key "0xYOUR_AGENT_KEY" --name "my-agent" --json
 ```
 
+### Bootstrap onboarding (Model D)
+
+```bash
+# Start wallet challenge flow
+thirdfy-agent bootstrap begin --agent-key "0xYOUR_AGENT_KEY" --json
+
+# Complete bootstrap with session proof (recommended)
+thirdfy-agent bootstrap complete --agent-key "0xYOUR_AGENT_KEY" --owner-session-token "$THIRDFY_OWNER_SESSION_TOKEN" --lane self --json
+
+# Or use challenge/signature as exchange step to obtain session proof first
+thirdfy-agent bootstrap complete --agent-key "0xYOUR_AGENT_KEY" --challenge-id "<challengeId>" --signature "0x..." --lane self --json
+```
+
+`bootstrap complete` is session-proof-first in the current deployment. Direct `wallet_signature` proof is not accepted as a final issuance proof.
+
 ### Idempotency behavior (`run`)
 
 - `run` auto-generates `idempotencyKey` by default when not provided.
@@ -240,7 +255,7 @@ Provider and venue guides are kept outside `README` so this page stays stable as
 - Discovery: `catalogs list`, `actions`
 - Execution: `preflight`, `run`, `intent-status`, `jeff preflight`, `jeff trade`, `jeff status`
 - Profiles: `profile init`, `profile use`, `profile show`, `whoami`
-- Onboarding: `agent auth challenge`, `agent auth verify`, `agent register`, `agent key rotate`, `agent key revoke`
+- Onboarding: `bootstrap begin`, `bootstrap complete`, `onboarding begin`, `onboarding complete`, `agent auth challenge`, `agent auth verify`, `agent register`, `agent key rotate`, `agent key revoke`, `developer bootstrap`
 - Governance readiness: `delegation create`, `delegation activate`, `delegation status`, `credentials upsert`, `credentials status`
 - Delegation operations: `delegation show`, `delegation inspect`, `delegation revoke`
 - Delegation execution helpers: `delegation balance`, `delegation redeem`
@@ -357,11 +372,11 @@ npm run e2e:managed:delegation:parity
 
 ## Release
 
-Version history and user-facing notes: [CHANGELOG.md](./CHANGELOG.md) (for example [0.1.7](https://github.com/thirdfy/agent-cli/releases/tag/v0.1.7) — login/config UX, custodial delegation helpers, swap and config hardening).
+Version history and user-facing notes: [CHANGELOG.md](./CHANGELOG.md) (for example [0.1.12](https://github.com/thirdfy/agent-cli/releases/tag/v0.1.12) — bootstrap onboarding commands and session-proof alignment).
 
 ```bash
 npm version patch
 npm publish --access public
 ```
 
-After publishing, push the matching tag (for example `v0.1.7`) so the [Release workflow](.github/workflows/release.yml) can create a GitHub release. If the package version is already on npm, the workflow skips republishing and still creates the release when triggered by a tag.
+After publishing, push the matching tag (for example `v0.1.12`) so the [Release workflow](.github/workflows/release.yml) can create a GitHub release. If the package version is already on npm, the workflow skips republishing and still creates the release when triggered by a tag.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {