@thirdfy/agent-cli 0.2.25 → 0.2.29

package/CHANGELOG.md

@@ -4,6 +4,34 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## [Unreleased]
 
+## [0.2.29] - 2026-07-18
+
+### Changed
+
+- Docs: Wave C / W6 CLI reference polish. Quick start is Path A (`personal` + `agent_wallet`); Gator lives under **User wallet authorization**; cross-links to [action inventory](./docs/action-inventory-and-compatibility.md#execution-orchestration-reference-hosted-solo-agents) and the API [CLI reference standard](https://github.com/thirdfy/thirdfy-api-v2/blob/develop/docs-dev/agents/execution-orchestration-scale/cli-reference-standard.md). Solo path does not require MetaMask delegation. Pairs with Thirdfy API **v3.12.0**.
+
+## [0.2.28] - 2026-07-11
+
+### Fixed
+
+- `e2e:base:simulate` Robinhood tier uses `--run-mode agent_wallet` so chain 4663 compatibility passes (Robinhood advertises `self` + `agent_wallet` only).
+
+## [0.2.27] - 2026-07-11
+
+### Changed
+
+- Robinhood partner validator moved to `scripts/e2e/chains/robinhood/delegated-preflight.mjs` with shared `delegation-lane` helper and Robinhood constants.
+- `e2e:base:simulate` includes `actions --chain-id 4663` tier; `docs/partners/robinhood-validation.md` documents CLI vs API validation split.
+- npm alias `validate:robinhood:delegated-preflight`; legacy `validate:robinhood-agent-wallet-preflight` preserved.
+
+## [0.2.26] - 2026-07-11
+
+### Changed
+
+- Robinhood live validator uses Privy subscriber delegation (`THIRDFY_USER_DID` + `managed_wallet_server`) and Robinhood-native WETH/USDG addresses instead of solo `did:wallet:<agentKey>`.
+- Validator requires explicit `THIRDFY_USER_DID` or `ROBINHOOD_SMOKE_USER_DID` (no `~/.thirdfy/config.json` fallback) so partner checks always exercise the delegation lane.
+- Validator probes `GET /api/v1/agent/execution-wallet` and rejects agent-owner bypass when `canonicalUserDid` rewrites to `did:wallet:<agentKey>`.
+
 ## [0.2.25] - 2026-07-11
 
 ### Fixed
@@ -24,7 +52,7 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ### Added
 
-- `npm run validate:robinhood-agent-wallet-preflight` for live API solo agent_wallet preflight on chain 4663.
+- `npm run validate:robinhood-agent-wallet-preflight` for live API delegated agent_wallet preflight on chain 4663 (requires `THIRDFY_USER_DID` + active delegation on 4663).
 
 ## [0.2.22] - 2026-07-10
 

package/README.md

@@ -40,35 +40,46 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.2.25
+## What's new in v0.2.29
 
-- Hybrid and `managed_wallet_server` agent_wallet paths keep Privy delegation identity; solo Robinhood lane still uses `did:wallet:<agentKey>`.
-
-## What's new in v0.2.24
-
-- `agent_wallet` read-only execute-intent fallback keeps solo `did:wallet:<agentKey>` identity (matches preflight and primary execute path).
-
-## What's new in v0.2.23
-
-- Solo `agent_wallet` preflight uses `did:wallet:<agentKey>` so Robinhood and direct agent lanes skip subscriber delegation (`SUBSCRIPTION_NOT_FOUND` fix).
-- `npm run validate:robinhood-agent-wallet-preflight` for live chain 4663 execution-wallet checks.
+- Path A quick start and docs: hosted solo agents use `personal` + `agent_wallet`; MetaMask Gator is under User wallet authorization only.
+- Cross-links to action inventory and the API CLI reference standard (pairs with Thirdfy API v3.12.0).
 
 Older versions: see [CHANGELOG.md](./CHANGELOG.md) and [GitHub Releases](https://github.com/thirdfy/agent-cli/releases).
 
 ## Quick start
 
+Hosted solo agents use profile `personal` and `--run-mode agent_wallet` (Path A). Fund the managed **execution wallet**, complete venue trading setup from the catalog when needed, then preflight and run. MetaMask Gator / `delegation *` is not required on this path.
+
 ```bash
 export AGENT_API_KEY="..."
 export THIRDFY_AUTH_TOKEN="..."
 export THIRDFY_OWNER_SESSION_TOKEN="..."
 
-thirdfy-agent actions --agent-api-key "$AGENT_API_KEY" --json
 thirdfy-agent profile init --profile personal --json
-thirdfy-agent preflight --agent-api-key "$AGENT_API_KEY" --action swap --params '{"tokenIn":"0x...","tokenOut":"0x...","amountInRaw":"1000000","tokenInDecimals":6}' --estimated-amount-usd 25 --json
-thirdfy-agent run --agent-api-key "$AGENT_API_KEY" --action swap --params '{"tokenIn":"0x...","tokenOut":"0x...","amountInRaw":"1000000","tokenInDecimals":6}' --estimated-amount-usd 25 --json
-thirdfy-agent intent-status --intent-id "<intentId>" --json
+thirdfy-agent actions --agent-api-key "$AGENT_API_KEY" --json
+thirdfy-agent wallet list --json
+# Fund the printed execution wallet address for your target chain (not the owner login wallet).
+
+thirdfy-agent preflight \
+  --agent-api-key "$AGENT_API_KEY" \
+  --run-mode agent_wallet \
+  --action swap \
+  --params '{"tokenIn":"0x...","tokenOut":"0x...","amountInRaw":"1000000","tokenInDecimals":6}' \
+  --estimated-amount-usd 25 \
+  --json
+
+thirdfy-agent run \
+  --agent-api-key "$AGENT_API_KEY" \
+  --run-mode agent_wallet \
+  --action swap \
+  --params '{"tokenIn":"0x...","tokenOut":"0x...","amountInRaw":"1000000","tokenInDecimals":6}' \
+  --estimated-amount-usd 25 \
+  --json
 ```
 
+`personal` defaults to `agent_wallet` when `--run-mode` is omitted. Use `intent-status` only for publisher execute-intent fanout (`--run-mode thirdfy`), not for solo `agent_wallet` writes. Full golden paths: [action inventory — execution orchestration](./docs/action-inventory-and-compatibility.md#execution-orchestration-reference-hosted-solo-agents).
+
 By default, the CLI targets production (`https://api.thirdfy.com`). Use `--api-base` (or `THIRDFY_API_BASE`) only for staging/dev/custom deployments.
 
 ### Local API smoke
@@ -317,9 +328,9 @@ Provider and venue guides are kept outside `README` so this page stays stable as
 - Managed signer execution: `wallet execute`, `wallet sign`, `wallet submit`, `agent run`
 - Profiles: `profile init`, `profile use`, `profile show`, `whoami`
 - Onboarding: `login email`, `help onboarding`, `doctor auth`, `wallet list`, `bootstrap begin`, `bootstrap complete`, `onboarding begin`, `onboarding complete`, `agent auth challenge`, `agent auth verify`, `agent register`, `agent key rotate`, `agent key revoke`, `developer bootstrap`
-- Governance readiness: `delegation create`, `delegation activate`, `delegation status`, `credentials upsert`, `credentials status`
-- Delegation operations: `delegation show`, `delegation inspect`, `delegation revoke`
-- Delegation execution helpers: `delegation balance`, `delegation redeem`
+- User wallet authorization (Gator): `delegation create`, `delegation activate`, `delegation status`, `credentials upsert`, `credentials status`
+- Gator operations: `delegation show`, `delegation inspect`, `delegation revoke`
+- Gator execution helpers: `delegation balance`, `delegation redeem` (daily-cap caveats via `--max-usd-per-day`)
 - Account: `credits balance`
 - Console Brain: `brain sections`, `brain suggest`, `brain preflight`, `brain graduate` (read/preflight-first; see [`docs/command-reference.md`](./docs/command-reference.md))
 
@@ -335,9 +346,11 @@ Maintainers validating releases locally: `npm run validate:release-preflight`. A
 - Live action inventory in your environment: [`docs/action-inventory-and-compatibility.md`](./docs/action-inventory-and-compatibility.md)
 - Provider runbooks and provider status: [`docs/providers/index.md`](./docs/providers/index.md)
 
-## Delegation lifecycle (canonical)
+## User wallet authorization (Gator)
+
+Gator / ERC-7710 lives under the `delegation *` command group. Use it when a **user wallet** authorizes spend for `hybrid` or `thirdfy` (subscriber / Console / external-wallet lanes). Hosted solo agents on `personal` + `agent_wallet` skip this section.
 
-Use `create` + `activate` as the default delegated execution lifecycle:
+Use `create` + `activate` as the default user-authority lifecycle (`--max-usd-per-day` sets the period transfer caveat):
 
 ```bash
 thirdfy-agent delegation create \
@@ -393,7 +406,9 @@ thirdfy-agent delegation redeem \
 
 `--auth-token "$THIRDFY_AUTH_TOKEN"` remains supported for all delegation commands, but owner-session token is preferred for least-privilege owner operations.
 
-### MetaMask custodial-compatible lifecycle (new)
+### MetaMask custodial-compatible grant (Gator path only)
+
+This is still user-authority setup, not the solo `agent_wallet` demo path. Solo agents do not need MetaMask delegation.
 
 ```bash
 thirdfy-agent delegation init-custodial \
@@ -411,7 +426,7 @@ thirdfy-agent delegation custodial-grant \
 
 The CLI keeps compatibility with legacy `delegation create` + `delegation activate` during migration.
 
-`delegation show` is a direct alias to `delegation status` for gator-style operator ergonomics.
+`delegation show` is a direct alias to `delegation status` for Gator operator ergonomics.
 
 Managed easy-wallet command group:
 
@@ -440,6 +455,7 @@ Managed-self execution performs strict wallet preflight and returns deterministi
 
 ## More docs
 
+- Execution orchestration (solo `agent_wallet` reference path): [action inventory — execution orchestration](./docs/action-inventory-and-compatibility.md#execution-orchestration-reference-hosted-solo-agents); operator standard in [thirdfy-api-v2 cli-reference-standard](https://github.com/thirdfy/thirdfy-api-v2/blob/develop/docs-dev/agents/execution-orchestration-scale/cli-reference-standard.md)
 - OpenClaw CLI onboarding flow:
   [docs.thirdfy.com/documentation/api/thirdfy-agent-cli#create-an-openclaw-agent-with-the-cli](https://docs.thirdfy.com/documentation/api/thirdfy-agent-cli#create-an-openclaw-agent-with-the-cli)
 - Creator platform (agent registration and keys):

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.2.25",
+  "version": "0.2.29",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {
@@ -47,8 +47,8 @@
     "smoke:cli": "node ./bin/thirdfy-agent.mjs --help && node ./bin/thirdfy-agent.mjs -V && node ./bin/thirdfy-agent.mjs --version --json",
     "validate:release-preflight": "npm run lint && npm run validate:public-docs && npm run validate:cli-contract-schemas && npm run validate:provider-parity && npm run validate:cli-manifest-handlers && npm run validate:runtime-boundaries && npm run test && npm run validate:npm-pack && npm run smoke:cli",
     "validate:live-api-capabilities": "node ./scripts/validate-live-api-capabilities.mjs",
-    "validate:robinhood-agent-wallet-preflight": "node ./scripts/validate-robinhood-agent-wallet-preflight.mjs",
-    "validate:robinhood-agent-wallet-preflight": "node ./scripts/validate-robinhood-agent-wallet-preflight.mjs",
+    "validate:robinhood:delegated-preflight": "node ./scripts/e2e/chains/robinhood/delegated-preflight.mjs",
+    "validate:robinhood-agent-wallet-preflight": "node ./scripts/e2e/chains/robinhood/delegated-preflight.mjs",
     "prepublishOnly": "npm run validate:release-preflight"
   },
   "keywords": [