@thirdfy/agent-cli 0.2.31 → 0.2.33

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## [Unreleased]
 
+## [0.2.33] - 2026-07-24
+
+### Fixed
+
+- `login email` always prints `executionWallets` / `executionWalletsError` and fails closed with `LOGIN_EMAIL_INCOMPLETE` when `runMode=agent_wallet` and execution wallets are missing or errored. Fund the managed execution wallet, not the owner embed.
+
+## [0.2.32] - 2026-07-23
+
+### Fixed
+
+- `doctor certify execution` now keys live catalog and fixture rows by normalized action id (kebab/snake). Catalog `place-hyperliquid-perps-order` (and siblings) overwrite fixtures so required write actions resolve `source=catalog` instead of failing with `CATALOG_SCHEMA_UNAVAILABLE` / write-policy mismatch.
+
 ## [0.2.31] - 2026-07-23
 
 ### Added

package/README.md

@@ -40,10 +40,9 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.2.31
+## What's new in v0.2.33
 
-- Validates action `--params` against catalog `paramsSchema` locally on `preflight`, `run`, and `wallet execute` before HTTP writes. Failures return `PARAMS_SCHEMA_INVALID` with field-level errors.
-- Adds `doctor certify execution` for a no-write certification report (CLI version, command availability, venue schema matrix, authority inputs). EarnClaw passes `--no-write`, `--run-mode`, `--schema-digest`, and `--required-actions` for fail-closed pack certification.
+- `login email` always surfaces `executionWallets` (and `executionWalletsError` when present) and fails closed for `agent_wallet` when execution wallets are missing. Fund the printed execution address, not the owner login wallet.
 
 Older versions: see [CHANGELOG.md](./CHANGELOG.md) and [GitHub Releases](https://github.com/thirdfy/agent-cli/releases).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.2.31",
+  "version": "0.2.33",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {

package/src/commands/bootstrap.mjs

@@ -450,13 +450,18 @@ async function commandLoginEmail(ctx, flags) {
   const agentKey = extractAgentKey(data);
   const wallets = data.wallets && typeof data.wallets === 'object' ? data.wallets : {};
   const executionWallets = data.executionWallets && typeof data.executionWallets === 'object' ? data.executionWallets : {};
+  const executionWalletsError = data.executionWalletsError
+    ? String(data.executionWalletsError)
+    : data.execution_wallets_error
+      ? String(data.execution_wallets_error)
+      : null;
   const userDid = String(data.owner?.creatorDid || wallets.userDid || '').trim();
   const primaryEvmWallet = String(wallets.primaryEvmWallet || data.owner?.creatorWallet || '').trim();
   const persistedWallets = {
     ...wallets,
     ...(userDid ? { userDid } : {}),
     ...(primaryEvmWallet ? { primaryEvmWallet } : {}),
-    ...(Object.keys(executionWallets).length ? { executionWallets } : {}),
+    executionWallets,
   };
   const runMode = normalizeRunMode(flags.runMode || current.runMode || process.env.THIRDFY_RUN_MODE || 'agent_wallet');
   const custodyMode = normalizeCustodyMode(flags.custodyMode || current.custodyMode || process.env.THIRDFY_CUSTODY_MODE, runMode);
@@ -491,7 +496,27 @@ async function commandLoginEmail(ctx, flags) {
       ...(agentKey ? { agentKey } : {}),
     };
   }
+  // Persist first so operators keep session tokens even when wallet provisioning failed.
   persistProfileConfig(next);
+
+  const executionWalletAddresses = Object.values(executionWallets)
+    .map((row) => (row && typeof row === 'object' ? String(row.walletAddress || '').trim() : ''))
+    .filter((addr) => /^0x[a-fA-F0-9]{40}$/.test(addr));
+  const hasExecutionWallet = executionWalletAddresses.length > 0;
+  if (runMode === 'agent_wallet' && (executionWalletsError || !hasExecutionWallet)) {
+    const fundHint = executionWalletAddresses[0] || 'the managed execution wallet address for each chain';
+    throw createCliError(
+      'LOGIN_EMAIL_INCOMPLETE',
+      executionWalletsError
+        ? `Email login completed but execution wallets failed: ${executionWalletsError}. Fund the managed execution wallet (${fundHint}), not the owner embedded login wallet.`
+        : `Email login completed without execution wallets. Fund the managed execution wallet for agent_wallet trading (${fundHint}), not the owner embedded login wallet. Re-run login email or call /api/v1/agent/onboarding/cli/email/complete and confirm executionWallets is returned.`,
+      {
+        executionWallets,
+        executionWalletsError: executionWalletsError || null,
+      }
+    );
+  }
+
   printEnvelope({
     success: true,
     code: 'LOGIN_EMAIL_OK',
@@ -504,13 +529,17 @@ async function commandLoginEmail(ctx, flags) {
       evmWallets: Array.isArray(persistedWallets.evm) ? persistedWallets.evm : [],
       solanaWallets: Array.isArray(persistedWallets.solana) ? persistedWallets.solana : [],
       primaryEvmWallet: persistedWallets.primaryEvmWallet || null,
-      executionWallets:
-        persistedWallets.executionWallets && typeof persistedWallets.executionWallets === 'object'
-          ? persistedWallets.executionWallets
-          : {},
+      executionWallets,
+      executionWalletsError: executionWalletsError || null,
       ownerLinkedWallet: data.ownerLinkedWallet || null,
       configPath: getProfileConfigPath(),
       nextSteps: response?.nextSteps || [],
+      ...(runMode === 'agent_wallet'
+        ? {
+            fundingReminder:
+              'Fund executionWallets addresses for agent_wallet. Do not fund the owner embedded wallet for Path A trading.',
+          }
+        : {}),
     },
     meta: { apiBase: ctx.apiBase },
   });

package/src/runtime/certification/executionCertify.mjs

@@ -76,9 +76,10 @@ export function computeActionSchemaDigest(actions) {
 }
 
 function mergeCatalogWithFixtures(liveActions) {
+  // Key by normalized action id so catalog kebab-case overwrites fixture snake_case.
   const byAction = new Map();
   for (const fixture of VENUE_WRITE_ACTION_FIXTURES) {
-    byAction.set(fixture.action, {
+    byAction.set(normalizeActionKey(fixture.action), {
       action: fixture.action,
       aliases: fixture.aliases,
       provider: fixture.provider,
@@ -90,10 +91,12 @@ function mergeCatalogWithFixtures(liveActions) {
   for (const row of liveActions || []) {
     const action = String(row?.action || '').trim();
     if (!action) continue;
-    const existing = byAction.get(action);
-    byAction.set(action, {
+    const key = normalizeActionKey(action);
+    const existing = byAction.get(key);
+    const aliases = Array.isArray(row.aliases) ? row.aliases : existing?.aliases || [];
+    byAction.set(key, {
       action,
-      aliases: Array.isArray(row.aliases) ? row.aliases : existing?.aliases || [],
+      aliases,
       provider: row.provider || row.providerId || existing?.provider || null,
       paramsSchema: row.paramsSchema || existing?.paramsSchema || null,
       requiredParams: Array.isArray(row.requiredParams) ? row.requiredParams : existing?.requiredParams || [],
@@ -104,9 +107,9 @@ function mergeCatalogWithFixtures(liveActions) {
 }
 
 function resolveCatalogRow(catalogByAction, action) {
-  const direct = catalogByAction.get(action);
-  if (direct) return direct;
   const normalized = normalizeActionKey(action);
+  const direct = catalogByAction.get(normalized) || catalogByAction.get(action);
+  if (direct) return direct;
   for (const row of catalogByAction.values()) {
     if (normalizeActionKey(row.action) === normalized) return row;
     for (const alias of row.aliases || []) {
@@ -117,9 +120,11 @@ function resolveCatalogRow(catalogByAction, action) {
 }
 
 function runSchemaCompatibilityChecks(catalogByAction, actionsToCheck, { requireLiveCatalog = false } = {}) {
-  const fixturesByAction = new Map(VENUE_WRITE_ACTION_FIXTURES.map((fixture) => [fixture.action, fixture]));
+  const fixturesByAction = new Map(
+    VENUE_WRITE_ACTION_FIXTURES.map((fixture) => [normalizeActionKey(fixture.action), fixture]),
+  );
   return actionsToCheck.map((actionName) => {
-    const fixture = fixturesByAction.get(actionName) || null;
+    const fixture = fixturesByAction.get(normalizeActionKey(actionName)) || null;
     const catalogRow = resolveCatalogRow(catalogByAction, actionName);
     const liveSchema = catalogRow?.source === 'catalog' ? catalogRow.paramsSchema : null;
     const schema = requireLiveCatalog ? liveSchema : catalogRow?.paramsSchema || fixture?.paramsSchema || null;