@thirdfy/agent-cli 0.1.41 → 0.1.43

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## [Unreleased]
 
+## [0.1.43] - 2026-05-19
+
+### Changed
+
+- Solo `agent_wallet` Hyperliquid account reads inject `userAddress` from the managed execution wallet via preflight when omitted (open orders, user state, funding status). Pairs with thirdfy-api-v2 **v3.4.27**.
+
+## [0.1.42] - 2026-05-19
+
+### Changed
+
+- Email login persists and surfaces API `executionWallets` for `agent_wallet` writes; `whoami`, `wallet list`, and `doctor auth` distinguish owner embedded wallets (auth only) from agent execution wallets to fund.
+- Onboarding help and docs clarify Bridge2 must fund the managed execution wallet, not the owner login wallet, and that Thirdfy credits are separate from Privy gas sponsorship. Pairs with thirdfy-api-v2 **v3.4.25**.
+
 ## [0.1.41] - 2026-05-19
 
 ### Changed

package/README.md

@@ -42,7 +42,7 @@ npx @thirdfy/agent-cli --help
 
 ## Release notes
 
-Version history and highlights: [CHANGELOG.md](./CHANGELOG.md). **v0.1.41** documents Hyperliquid `get_hyperliquid_funding_status` as setup step 0, Bridge2 sender custody, and `deposit_hyperliquid_bridge --estimated-amount-usd` (pairs with API **v3.4.24**). **v0.1.40** fixes email/bootstrap credential persistence when the API returns nested registration payloads, so owner-session onboarding can save the hidden execution identity without exposing a raw agent API key. **v0.1.39** makes `agent_wallet` the fresh solo default, adds framework guidance for Hermes/OpenClaw/Claude Managed Agents, clarifies Gator/ERC-7710 delegation flows, and keeps BYOW/self plus hybrid/thirdfy mode switching explicit. **v0.1.38** is a **documentation and metadata patch**: it republishes to npm so the package homepage matches the updated `README.md` on `main`, and aligns root `package-lock.json` version fields with `package.json`. **v0.1.37** adds **email OTP** `thirdfy-agent login email` (send code, then complete with `--code --accept-terms`), **`help onboarding`**, **`doctor auth`**, **`wallet list`**, and **masked `whoami`** output so agents and operators get first-run guidance without dumping secrets. Earlier releases added provider discovery parity, portfolio analytics, managed-wallet swap normalization, and **self/build-tx** swap human-decimal `amountIn` parity when using `amountInHuman` + `tokenInDecimals`.
+Version history and highlights: [CHANGELOG.md](./CHANGELOG.md). **v0.1.43** injects Hyperliquid `userAddress` from the managed execution wallet for solo `agent_wallet` reads when omitted (pairs with API **v3.4.27**). **v0.1.42** persists API `executionWallets` from email login, updates `doctor auth` / onboarding help for agent execution wallet funding vs owner embedded auth wallet, and documents Bridge2 `FUND_AGENT_EXECUTION_WALLET` remediation (pairs with API **v3.4.25**). **v0.1.41** documents Hyperliquid `get_hyperliquid_funding_status` as setup step 0, Bridge2 sender custody, and `deposit_hyperliquid_bridge --estimated-amount-usd` (pairs with API **v3.4.24**). **v0.1.40** fixes email/bootstrap credential persistence when the API returns nested registration payloads, so owner-session onboarding can save the hidden execution identity without exposing a raw agent API key. **v0.1.39** makes `agent_wallet` the fresh solo default, adds framework guidance for Hermes/OpenClaw/Claude Managed Agents, clarifies Gator/ERC-7710 delegation flows, and keeps BYOW/self plus hybrid/thirdfy mode switching explicit. **v0.1.38** is a **documentation and metadata patch**: it republishes to npm so the package homepage matches the updated `README.md` on `main`, and aligns root `package-lock.json` version fields with `package.json`. **v0.1.37** adds **email OTP** `thirdfy-agent login email` (send code, then complete with `--code --accept-terms`), **`help onboarding`**, **`doctor auth`**, **`wallet list`**, and **masked `whoami`** output so agents and operators get first-run guidance without dumping secrets. Earlier releases added provider discovery parity, portfolio analytics, managed-wallet swap normalization, and **self/build-tx** swap human-decimal `amountIn` parity when using `amountInHuman` + `tokenInDecimals`.
 
 **Maintainers — npm:** follow [docs/releasing.md](./docs/releasing.md). From a clone with gitignored `.env`, use `npm run publish:npm:local -- --dry-run` then `npm run publish:npm:local`. Or run `npm run release:npm` after exporting tokens in the shell. Never commit npm tokens — use [.env.example](./.env.example) as a template only.
 
@@ -104,7 +104,7 @@ thirdfy-agent logout --json
 thirdfy-agent logout --all --json
 ```
 
-`login email` is a two-step headless-safe flow. Without `--code`, the CLI asks the Thirdfy API onboarding broker to send a Privy email OTP and exits with the exact next command. With `--code --accept-terms`, it stores a short-lived owner session in `~/.thirdfy/config.json`, records linked EVM/Solana wallets plus the owner `userDid` when Privy returns them, stores a new agent API key when first-run bootstrap issues one, and defaults new solo profiles to `agent_wallet`. Use `--not-interactive` / `--ni` in automation so missing input fails fast instead of prompting — place **`--ni` after the `login email` subcommand** (for example `thirdfy-agent login email you@example.com --code … --accept-terms --ni`); a leading `thirdfy-agent --ni login email …` is parsed incorrectly because `--ni` would consume the `login` token as its value.
+`login email` is a two-step headless-safe flow. Without `--code`, the CLI asks the Thirdfy API onboarding broker to send a Privy email OTP and exits with the exact next command. With `--code --accept-terms`, it stores a short-lived owner session in `~/.thirdfy/config.json`, records linked EVM/Solana wallets plus the owner `userDid` when Privy returns them, stores a new agent API key when first-run bootstrap issues one, stores the returned `executionWallets` map, and defaults new solo profiles to `agent_wallet`. Email OTP is owner authentication only; fund the returned agent execution wallet for the target chain, not the linked owner embedded wallet. Use `--not-interactive` / `--ni` in automation so missing input fails fast instead of prompting — place **`--ni` after the `login email` subcommand** (for example `thirdfy-agent login email you@example.com --code … --accept-terms --ni`); a leading `thirdfy-agent --ni login email …` is parsed incorrectly because `--ni` would consume the `login` token as its value.
 
 `logout --all` is provider-agnostic: it attempts owner-session revocation when a session token exists, then always clears local credentials.
 
@@ -169,8 +169,8 @@ Auth expectations by mode:
 - `self`: requires execution identity (`agentApiKey`) today; keyless self lane is blocked with deterministic `SELF_OPEN_DISABLED`.
 - `hybrid`: requires execution identity and governed mirror semantics (`--hybrid-wallet-mode self|agent_wallet`, default `self`).
 - `thirdfy`: requires execution identity and delegated governance path.
-- `agent_wallet`: requires execution identity and owner `userDid`, but does not require subscriber delegation when the owner identity matches the agent wallet/creator.
-- Hyperliquid Bridge2 setup is the Arbitrum exception to the Base-focused `agent_wallet` rule: Bridge2 credits the transaction sender. Pass **`--estimated-amount-usd`** as a top-level flag (not inside `--params`). When USDC sits on your linked email-login wallet (`primaryEvmWallet`) instead of the managed execution wallet, Thirdfy API **v3.4.23+** signs from the funded owner wallet when possible; otherwise it returns **`MANUAL_BRIDGE2_DEPOSIT_REQUIRED`** with `fundedWallet` and `executionWalletAddress`.
+- `agent_wallet`: requires execution identity and owner `userDid`, but does not require subscriber delegation when the owner identity matches the agent wallet/creator. Thirdfy credits/free quota still gate execution; Privy gas sponsorship only covers network gas when enabled.
+- Hyperliquid Bridge2 setup is the Arbitrum exception to the Base-focused `agent_wallet` rule: Bridge2 credits the transaction sender. Pass **`--estimated-amount-usd`** as a top-level flag (not inside `--params`). When USDC sits on your linked email-login wallet (`primaryEvmWallet`) instead of the managed execution wallet, Thirdfy API returns **`FUND_AGENT_EXECUTION_WALLET`** / **`MANUAL_BRIDGE2_DEPOSIT_REQUIRED`** with `fundedWallet` and `executionWalletAddress`; move native Arbitrum USDC to `executionWalletAddress` and retry.
 - custody mode defaults are profile-aware:
   - `managed` default for `thirdfy`
   - `external` default for `self` and `hybrid`

package/bin/thirdfy-agent.mjs

@@ -1001,6 +1001,45 @@ function getPreparedParams(flags) {
   return parseJsonFlag(flags, 'params');
 }
 
+function hyperliquidDefaultAddressParamForAction(action) {
+  const canonical = String(action || '').trim().toLowerCase().replace(/_/g, '-');
+  if (
+    canonical === 'get-hyperliquid-open-orders'
+    || canonical === 'get-hyperliquid-user-state'
+    || canonical === 'get-hyperliquid-builder-fee-status'
+    || canonical === 'get-hyperliquid-referral-status'
+  ) {
+    return 'userAddress';
+  }
+  if (
+    canonical === 'get-hyperliquid-setup-status'
+    || canonical === 'get-hyperliquid-funding-status'
+    || canonical === 'get-hyperliquid-onboarding-plan'
+    || canonical === 'prepare-hyperliquid-onboarding'
+  ) {
+    return 'mainWalletAddress';
+  }
+  return null;
+}
+
+async function applyHyperliquidAgentWalletAddressDefault(ctx, flags, resolved, runMode) {
+  if (runMode !== 'agent_wallet') return null;
+  const paramName = hyperliquidDefaultAddressParamForAction(resolved?.resolvedAction);
+  if (!paramName) return null;
+  const params = getPreparedParams(flags);
+  if (String(params?.[paramName] || '').trim()) return null;
+  const preflight = await resolveManagedExecutionPreflight(ctx, flags, resolved, {
+    runMode: 'agent_wallet',
+    requireFundingCheck: false,
+  });
+  if (!preflight.success || !preflight.executionWalletAddress) return preflight;
+  flags.__preparedParams = {
+    ...(params || {}),
+    [paramName]: preflight.executionWalletAddress,
+  };
+  return preflight;
+}
+
 async function commandCatalogsList(ctx, flags, capabilities) {
   const response = await apiGet(ctx, '/api/v1/agent/actions/catalog');
   const actions = extractActions(response);
@@ -1194,7 +1233,8 @@ async function commandPreflight(ctx, flags, capabilities) {
   enforceOffchainVenueLaneCompatibility(resolved.resolvedAction, runMode);
   const hybridWalletMode = runMode === 'hybrid' ? normalizeHybridWalletMode(flags.hybridWalletMode) : null;
   enforceChainCompatibility(capabilities, flags, runMode);
-  const backendResult = await runPreflightByMode(runMode, ctx, flags, resolved, { hybridWalletMode });
+  const managedPreflight = await applyHyperliquidAgentWalletAddressDefault(ctx, flags, resolved, runMode);
+  const backendResult = await runPreflightByMode(runMode, ctx, flags, resolved, { hybridWalletMode, managedPreflight });
   const normalized = applyExecutionFallbackHints(backendResult.normalized, {
     flags,
     runMode,
@@ -1229,10 +1269,12 @@ async function commandRun(ctx, flags, capabilities) {
   enforceOffchainVenueLaneCompatibility(resolved.resolvedAction, runMode);
   const hybridWalletMode = runMode === 'hybrid' ? normalizeHybridWalletMode(flags.hybridWalletMode) : null;
   enforceChainCompatibility(capabilities, flags, runMode);
+  const managedPreflight = await applyHyperliquidAgentWalletAddressDefault(ctx, flags, resolved, runMode);
   const skipPreflight = Boolean(flags.skipPreflight);
   const backendResult = await runExecutionByMode(runMode, ctx, flags, resolved, {
     skipPreflight,
     hybridWalletMode,
+    managedPreflight,
   });
   const normalized = applyExecutionFallbackHints(backendResult.normalized, {
     flags,
@@ -1327,8 +1369,9 @@ async function commandWalletExecute(ctx, flags, capabilities) {
   const resolved = await resolveActionSelection(ctx, normalizedFlags);
   prepareActionParamsForFlags(normalizedFlags, resolved.resolvedAction);
   enforceChainCompatibility(capabilities, normalizedFlags, 'agent_wallet');
+  const managedPreflight = await applyHyperliquidAgentWalletAddressDefault(ctx, normalizedFlags, resolved, 'agent_wallet');
   const skipPreflight = Boolean(normalizedFlags.skipPreflight);
-  const result = await executeManagedWalletRun(ctx, normalizedFlags, resolved, { skipPreflight });
+  const result = await executeManagedWalletRun(ctx, normalizedFlags, resolved, { skipPreflight, managedPreflight });
   printEnvelope({
     success: result.success,
     code: result.success ? 'WALLET_EXECUTED' : result.preflightBlocked ? 'PREFLIGHT_BLOCKED' : 'RUN_FAILED',
@@ -2551,9 +2594,10 @@ function buildOnboardingHelp(ctx) {
           'thirdfy-agent login email user@example.com',
           'thirdfy-agent login email user@example.com --code <otp> --accept-terms --key-name "My Agent"',
           'thirdfy-agent whoami',
-          'thirdfy-agent managed wallet init --chain-id 8453',
+          'thirdfy-agent wallet list --json',
           'thirdfy-agent preflight --run-mode agent_wallet --action <action> --params <json> --json',
         ],
+        note: 'Email OTP authenticates the owner. Fund the returned agent execution wallet for the target chain; do not fund the owner embedded/login wallet for agent_wallet writes.',
       },
       {
         id: 'wallet_sign',
@@ -2587,7 +2631,7 @@ function buildOnboardingHelp(ctx) {
       rule: 'Commands must fail fast instead of waiting for prompts when required input is missing.',
     },
     executionModes: {
-      agent_wallet: 'Solo managed wallet execution through /execution-wallet + /execute; no subscriber binding when owner userDid matches.',
+      agent_wallet: 'Solo managed server-wallet execution through /execution-wallet + /execute; no subscriber binding when owner userDid matches. Network gas may be sponsored, but Thirdfy credits/free-quota gates still apply.',
       self: 'BYOW/OWS local signing through build-tx, wallet sign, and wallet submit.',
       hybrid: 'Primary self or agent_wallet execution with optional Thirdfy mirror validation.',
       thirdfy: 'Publisher/fanout execute-intent; requires active subscriber/delegation bindings for writes.',
@@ -2595,7 +2639,7 @@ function buildOnboardingHelp(ctx) {
     },
     frameworkGuidance: {
       hermes:
-        'Hermes agents should receive a pre-provisioned Thirdfy profile/env, run doctor auth/self at startup, use agent_wallet for managed solo writes, and keep strategy logic separate from CLI secrets.',
+        'Hermes agents should receive a pre-provisioned Thirdfy profile/env, run doctor auth/self at startup, use agent_wallet for managed solo writes, fund the agent execution wallet on the target chain, and keep strategy logic separate from CLI secrets.',
       openclaw:
         'OpenClaw agents should keep Thirdfy credentials in runtime secrets, use actions discovery before planning, prefer run --run-mode agent_wallet for own-wallet execution, and use thirdfy only for publisher/fanout.',
       claudeManagedAgents:
@@ -2646,6 +2690,7 @@ async function commandWhoami(ctx, _flags) {
         primaryEvmWallet: wallets.primaryEvmWallet || null,
         evm: Array.isArray(wallets.evm) ? wallets.evm : [],
         solana: Array.isArray(wallets.solana) ? wallets.solana : [],
+        executionWallets: wallets.executionWallets || config.executionWallets || {},
       },
       configPath: getProfileConfigPath(),
       nextSteps: buildOnboardingHelp(ctx).paths[0].commands,
@@ -2665,7 +2710,8 @@ async function commandWalletList(ctx, _flags) {
       primaryEvmWallet: wallets.primaryEvmWallet || null,
       evm: Array.isArray(wallets.evm) ? wallets.evm : [],
       solana: Array.isArray(wallets.solana) ? wallets.solana : [],
-      hint: 'Run `thirdfy-agent login email <email>` to refresh linked wallets from Privy-backed onboarding.',
+      executionWallets: wallets.executionWallets || config.executionWallets || {},
+      hint: 'Run `thirdfy-agent login email <email>` to refresh linked wallets and agent execution wallets. Fund executionWallets for agent_wallet writes; linked owner wallets are auth identities.',
     },
     meta: { apiBase: ctx.apiBase },
   });
@@ -2720,6 +2766,20 @@ async function commandDoctorAuth(ctx, _flags) {
           ? `${config.wallets.evm.length} linked EVM wallet${config.wallets.evm.length === 1 ? '' : 's'}`
           : 'missing wallet profile; run email onboarding or wallet-sign proof'),
     },
+    {
+      name: 'agent-execution-wallets',
+      optional: runMode !== 'agent_wallet',
+      ok: Boolean(config.wallets?.executionWallets && Object.keys(config.wallets.executionWallets).length),
+      detail: config.wallets?.executionWallets && Object.keys(config.wallets.executionWallets).length
+        ? `agent execution wallets available for chains: ${Object.keys(config.wallets.executionWallets).join(', ')}`
+        : 'missing agent execution wallets; run `thirdfy-agent login email <email> --code <otp> --accept-terms --json` or execution-wallet preflight',
+    },
+    {
+      name: 'thirdfy-credits-vs-gas-sponsorship',
+      optional: true,
+      ok: true,
+      detail: 'Thirdfy credits/free quota gate action access; Privy gas sponsorship only pays network gas when chain/action sponsorship is enabled.',
+    },
   ];
   const ok = checks.every((entry) => entry.optional || entry.ok);
   printEnvelope({
@@ -2970,12 +3030,14 @@ async function commandLoginEmail(ctx, flags) {
   const agentApiKey = extractAgentApiKey(data);
   const agentKey = extractAgentKey(data);
   const wallets = data.wallets && typeof data.wallets === 'object' ? data.wallets : {};
+  const executionWallets = data.executionWallets && typeof data.executionWallets === 'object' ? data.executionWallets : {};
   const userDid = String(data.owner?.creatorDid || wallets.userDid || '').trim();
   const primaryEvmWallet = String(wallets.primaryEvmWallet || data.owner?.creatorWallet || '').trim();
   const persistedWallets = {
     ...wallets,
     ...(userDid ? { userDid } : {}),
     ...(primaryEvmWallet ? { primaryEvmWallet } : {}),
+    ...(Object.keys(executionWallets).length ? { executionWallets } : {}),
   };
   const runMode = normalizeRunMode(flags.runMode || current.runMode || process.env.THIRDFY_RUN_MODE || 'agent_wallet');
   const custodyMode = normalizeCustodyMode(flags.custodyMode || current.custodyMode || process.env.THIRDFY_CUSTODY_MODE, runMode);
@@ -3023,6 +3085,11 @@ async function commandLoginEmail(ctx, flags) {
       evmWallets: Array.isArray(persistedWallets.evm) ? persistedWallets.evm : [],
       solanaWallets: Array.isArray(persistedWallets.solana) ? persistedWallets.solana : [],
       primaryEvmWallet: persistedWallets.primaryEvmWallet || null,
+      executionWallets:
+        persistedWallets.executionWallets && typeof persistedWallets.executionWallets === 'object'
+          ? persistedWallets.executionWallets
+          : {},
+      ownerLinkedWallet: data.ownerLinkedWallet || null,
       configPath: getProfileConfigPath(),
       nextSteps: response?.nextSteps || [],
     },
@@ -3334,6 +3401,7 @@ async function runPreflightByMode(runMode, ctx, flags, resolved, options = {}) {
     const preflight = await resolveManagedExecutionPreflight(ctx, flags, resolved, {
       runMode,
       requireFundingCheck: true,
+      preflightSeed: options.managedPreflight,
     });
     const normalized = normalizeIntentResponse({
       success: preflight.success,
@@ -3545,6 +3613,7 @@ async function executeManagedWalletRun(ctx, flags, resolved, options) {
     preflight = await resolveManagedExecutionPreflight(ctx, flags, resolved, {
       runMode: 'agent_wallet',
       requireFundingCheck: true,
+      preflightSeed: options?.managedPreflight,
     });
     if (!preflight.success) {
       const normalized = normalizeIntentResponse({
@@ -3797,9 +3866,21 @@ async function resolveManagedExecutionPreflight(ctx, flags, resolved, options =
     runMode,
   });
   if (tokenIn) query.set('tokenIn', tokenIn);
-  const response = await apiGet(ctx, `/api/v1/agent/execution-wallet?${query.toString()}`, {
-    'x-agent-api-key': agentApiKey,
-  });
+  const preflightSeed = options.preflightSeed && typeof options.preflightSeed === 'object'
+    ? options.preflightSeed
+    : null;
+  if (preflightSeed && preflightSeed.success === false) {
+    return preflightSeed;
+  }
+  const response = preflightSeed
+    ? {
+      executionWalletAddress: preflightSeed.executionWalletAddress || null,
+      signerMethod: preflightSeed.signerMethod || null,
+      fundingTokenBalance: preflightSeed.fundingTokenBalance || null,
+    }
+    : await apiGet(ctx, `/api/v1/agent/execution-wallet?${query.toString()}`, {
+      'x-agent-api-key': agentApiKey,
+    });
   const executionWalletAddress = String(response?.executionWalletAddress || '').trim().toLowerCase();
   const signerMethod = String(response?.signerMethod || 'managed_wallet_server').trim();
   const rawBalance = String(response?.fundingTokenBalance?.raw || '').trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.1.41",
+  "version": "0.1.43",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {