@thirdfy/agent-cli 0.1.8 → 0.1.9

package/CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## [Unreleased]
 
+### Fixed
+
+- **Self preflight routing for swap-like actions:** `preflight --run-mode self` now selects the validation route by action capability. When an action advertises `supportsExecuteIntent=false` and `supportsBuildTx=true`, preflight uses `build-tx` directly instead of forcing execute-intent validation.
+
 ## [0.1.8] - 2026-04-07
 
 **npm:** [`@thirdfy/agent-cli@0.1.8`](https://www.npmjs.com/package/@thirdfy/agent-cli/v/0.1.8)  

package/README.md

@@ -33,6 +33,13 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
+## What's new in 0.1.8
+
+- Managed custodial lifecycle parity validation is now first-class in CLI E2E/certification.
+- `doctor self` runs as a local diagnostic command without capabilities negotiation.
+- Self-exec effect-check fallback payloads are hardened for deterministic automation parsing.
+- Managed wallet aliases (`managed wallet init/grant`) are wired directly to custodial delegation handlers.
+
 ## Quick start
 
 ```bash
@@ -101,6 +108,9 @@ thirdfy-agent agent register --owner-session-token "$THIRDFY_OWNER_SESSION_TOKEN
 - `run` auto-generates `idempotencyKey` by default when not provided.
 - For deterministic retries across workers/restarts, pass your own stable `--idempotency-key`.
 - `preflight` does not force idempotency keys.
+- `preflight --run-mode self` is capability-aware:
+  - if an action supports execute-intent validation, CLI uses `executionLane=validation_only` before building tx;
+  - if an action advertises `supportsExecuteIntent=false` and `supportsBuildTx=true`, CLI routes preflight directly to `build-tx`.
 
 ## Run modes and profiles
 
@@ -110,6 +120,12 @@ thirdfy-agent agent register --owner-session-token "$THIRDFY_OWNER_SESSION_TOKEN
 - `--run-mode self` -> self-custody rail (`build-tx` flow; default for `profile=personal`)
 - `--run-mode hybrid` -> self-custody + governance mirror metadata (default for `profile=builder`)
 
+| Goal | Recommended mode | Why |
+| --- | --- | --- |
+| BYOW signing and local custody | `self` | Keeps signing and broadcast on your wallet path. |
+| Managed delegated execution | `thirdfy` | Uses delegated governance rail for hosted execution. |
+| Self execution plus governance mirror checks | `hybrid` | Preserves local execution while emitting managed-lane mirrors. |
+
 Auth expectations by mode:
 
 - `self`: requires execution identity (`agentApiKey`) today; keyless self lane is blocked with deterministic `SELF_OPEN_DISABLED`.

package/bin/thirdfy-agent.mjs

@@ -517,7 +517,7 @@ async function commandPreflight(ctx, flags, capabilities) {
   prepareActionParamsForFlags(flags, resolved.resolvedAction);
   const runMode = getEffectiveRunMode(ctx, flags);
   enforceChainCompatibility(capabilities, flags, runMode);
-  const backendResult = await runPreflightByMode(runMode, ctx, flags, resolved.resolvedAction);
+  const backendResult = await runPreflightByMode(runMode, ctx, flags, resolved);
   const normalized = backendResult.normalized;
   printEnvelope({
     success: normalized.success,
@@ -529,6 +529,7 @@ async function commandPreflight(ctx, flags, capabilities) {
       catalog: flags.catalog || null,
       requestedAction: resolved.requestedAction,
       resolvedAction: resolved.resolvedAction,
+      preflightRoute: backendResult.route,
       runMode,
       profile: ctx.profile || null,
       swapInput: flags.__swapInput || null,
@@ -1710,13 +1711,22 @@ function enforceChainCompatibility(capabilities, flags, runMode) {
   }
 }
 
-async function runPreflightByMode(runMode, ctx, flags, resolvedAction) {
+function shouldUseBuildTxPreflight(runMode, resolved) {
+  if (runMode !== 'self') return false;
+  const meta = resolved?.resolvedActionMeta || null;
+  if (!meta || typeof meta !== 'object') return false;
+  return meta.supportsExecuteIntent === false && meta.supportsBuildTx === true;
+}
+
+async function runPreflightByMode(runMode, ctx, flags, resolved) {
+  const resolvedAction = resolved.resolvedAction;
   if (runMode === 'self') {
+    const route = shouldUseBuildTxPreflight(runMode, resolved) ? 'build_tx' : 'execute_intent_validation';
     const normalized = await executeSelfRun(
       ctx,
       flags,
       { resolvedAction },
-      { skipPreflight: false }
+      { skipPreflight: route === 'build_tx' }
     );
     const blockedByGovernance = !normalized.success && Boolean(normalized.preflightBlocked);
     return {
@@ -1725,6 +1735,7 @@ async function runPreflightByMode(runMode, ctx, flags, resolvedAction) {
         : normalized.success
           ? 'Self preflight completed (unsigned transaction ready)'
           : 'Self preflight failed',
+      route,
       normalized,
     };
   }
@@ -1745,6 +1756,7 @@ async function runPreflightByMode(runMode, ctx, flags, resolvedAction) {
       : runMode === 'hybrid'
         ? 'Hybrid mirror preflight failed'
         : 'Preflight failed',
+    route: 'execute_intent_validation',
     normalized,
   };
 }
@@ -2006,18 +2018,19 @@ async function resolveActionSelection(ctx, flags) {
     .map((action) => ({
       key: getActionKey(action),
       aliases: getActionAliases(action),
+      action,
     }))
     .filter((entry) => entry.key);
 
   if (!keyed.length) {
-    return { requestedAction, resolvedAction: requestedAction };
+    return { requestedAction, resolvedAction: requestedAction, resolvedActionMeta: null };
   }
 
   // Prefer direct action id matches over alias matches.
   // This keeps UX simple for commands like `--action swap` when another action aliases to "swap".
   const exactKey = keyed.filter((entry) => entry.key.toLowerCase() === requestedLower);
   if (exactKey.length === 1) {
-    return { requestedAction, resolvedAction: exactKey[0].key };
+    return { requestedAction, resolvedAction: exactKey[0].key, resolvedActionMeta: exactKey[0].action || null };
   }
   if (exactKey.length > 1) {
     throw new Error(
@@ -2029,7 +2042,7 @@ async function resolveActionSelection(ctx, flags) {
 
   const exactAlias = keyed.filter((entry) => entry.aliases.some((a) => a.toLowerCase() === requestedLower));
   if (exactAlias.length === 1) {
-    return { requestedAction, resolvedAction: exactAlias[0].key };
+    return { requestedAction, resolvedAction: exactAlias[0].key, resolvedActionMeta: exactAlias[0].action || null };
   }
   if (exactAlias.length > 1) {
     throw new Error(
@@ -2045,7 +2058,7 @@ async function resolveActionSelection(ctx, flags) {
       entry.aliases.some((a) => a.toLowerCase().includes(requestedLower))
   );
   if (fuzzy.length === 1) {
-    return { requestedAction, resolvedAction: fuzzy[0].key };
+    return { requestedAction, resolvedAction: fuzzy[0].key, resolvedActionMeta: fuzzy[0].action || null };
   }
   if (fuzzy.length > 1) {
     throw new Error(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {