@thirdfy/agent-cli 0.2.67 → 0.2.69

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## [Unreleased]
 
+## [0.2.69] - 2026-09-16
+
+### Fixed
+
+- Managed `agent_wallet` reads do not fall back to `/execute-intent` on `PARAMS_SCHEMA_INVALID` / unknown-key. Fallback stays limited to `does not support execute rail`. Matches `thirdfy-mcp` **0.0.119**. Pin: `test/agent-wallet-readonly-fallback.test.cjs`.
+
+## [0.2.68] - 2026-09-16
+
+### Fixed
+
+- Merge `--confirmWrites` / `--confirm` into execute params and default `estimatedAmountUsd` to `1` for `complete_avantis_onboarding` when omitted. Matches MCP `walletExecute` so Claude-style root confirmation reaches AgentKit. Pairs with `thirdfy-mcp` **0.0.118** and Thirdfy API **3.14.44**. Pin: `test/avantis-agent-wallet-defaults.test.cjs`.
+
 ## [0.2.67] - 2026-09-15
 
 ### Added

package/README.md

@@ -40,10 +40,10 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.2.67
+## What's new in v0.2.69
 
-- `chat send` and `console-mandate` accept `--network arc-testnet` (chain 5042002), `arc-mainnet`, and `arc` (chain 5042).
-- `actions --provider arc` lists ERC-8183 job actions (`get_arc_job`, `create_arc_job`, budget, fund, submit, complete).
+- Managed `agent_wallet` reads keep `/execute` errors such as Avantis `get_avantis_price` unknown `symbols`. They do not fall back to an empty execute-intent queue.
+- Execute-intent fallback stays limited to `does not support execute rail`.
 - See [CHANGELOG.md](./CHANGELOG.md) and GitHub Releases for older versions.
 
 ## Quick start

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.2.67",
+  "version": "0.2.69",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {

package/src/cli/options/execution.mjs

@@ -9,6 +9,9 @@ export function attachExecutionOptions(cmd) {
     .option('--estimated-amount-usd <usd>', 'estimated amount USD')
     .option('--broadcast', 'with run --run-mode self, sign and broadcast using OWS')
     .option('--skip-preflight', 'skip preflight')
+    .option('--confirm-writes', 'Confirm write execution')
+    .option('--confirmWrites', 'Alias of --confirm-writes')
+    .option('--confirm', 'Alias of --confirm-writes')
     .option('--user-did <did>', 'user DID for managed paths')
     .option('--allow-wallet-mismatch', 'bypass strict funded-wallet vs execution-wallet guard')
     .option('--execution-scope <scope>', 'execution scope')

package/src/runtime/execution/managedReadExecuteRail.mjs

@@ -0,0 +1,22 @@
+/**
+ * Managed `agent_wallet` reads prefer `/execute`. Execute-intent is only a fallback when that
+ * rail rejects the action (`does not support execute rail`). Schema failures must not fall back
+ * to an empty queued execute-intent envelope.
+ *
+ * Keep in sync with `thirdfy-mcp` `src/lib/managedReadExecuteRail.ts`.
+ */
+
+export const EXECUTE_RAIL_UNSUPPORTED_FRAGMENT = 'does not support execute rail';
+
+export function managedReadExecuteErrorText(data) {
+  return String(data?.error || data?.message || data?.code || data?.blockedReason || '').toLowerCase();
+}
+
+export function shouldFallbackManagedReadToExecuteIntent({ isReadOnly, errorText } = {}) {
+  if (!isReadOnly) return false;
+  const err = String(errorText || '').toLowerCase();
+  if (err.includes('params_schema_invalid') || err.includes('invalid paramsschema') || err.includes('unknown key')) {
+    return false;
+  }
+  return err.includes(EXECUTE_RAIL_UNSUPPORTED_FRAGMENT);
+}

package/src/runtime/execution/payloads.mjs

@@ -5,6 +5,35 @@ import { createCliError } from '../../core/envelope.mjs';
 import { normalizeRunMode, normalizeManagedRunMode, normalizeHybridWalletMode } from '../../core/runMode.mjs';
 import { assertEarnclawPolymarketWriteIdempotency } from './earnclawRuntimeWriteGate.mjs';
 import { resolveTokenInForFunding } from '../../core/fundingTokenIn.mjs';
+
+function isTruthyFlag(value) {
+  return value === true || String(value || '').trim().toLowerCase() === 'true';
+}
+
+export function mergeConfirmWritesIntoParams(params, flags) {
+  const next = { ...(params && typeof params === 'object' ? params : {}) };
+  if (
+    isTruthyFlag(flags?.confirmWrites) ||
+    isTruthyFlag(flags?.confirm) ||
+    next.confirmWrites === true ||
+    next.confirm === true
+  ) {
+    next.confirmWrites = true;
+  }
+  return next;
+}
+
+export function resolveExecuteEstimatedAmountUsd(action, flags) {
+  const fromFlags = Number(flags?.estimatedAmountUsd);
+  if (Number.isFinite(fromFlags) && fromFlags > 0) return fromFlags;
+  const key = String(action || '')
+    .trim()
+    .toLowerCase()
+    .replace(/-/g, '_');
+  if (key === 'complete_avantis_onboarding') return 1;
+  return undefined;
+}
+
 export function createExecutionPayloads({ getPreparedParams, rawUnitsToDecimalString }) {
 function buildBuildTxPayload(flags, resolvedAction) {
   const runMode = String(flags.runMode || '').trim().toLowerCase() || 'self';
@@ -74,7 +103,7 @@ function resolveEffectiveUserDid(flags, options = {}) {
 function buildManagedExecutePayload(flags, options) {
   const runMode = String(options.runMode || flags.runMode || 'agent_wallet').trim().toLowerCase();
   const params = getPreparedParams(flags);
-  const managedParams = { ...params };
+  const managedParams = mergeConfirmWritesIntoParams({ ...params }, flags);
   if (flags.__swapInput?.unitSource === 'human' && flags.__swapInput.amountInHuman) {
     delete managedParams.amountInRaw;
     delete managedParams.amountInHuman;
@@ -119,7 +148,8 @@ function buildManagedExecutePayload(flags, options) {
       'Managed wallet execution requires --user-did, --agent-key (solo did:wallet identity), THIRDFY_USER_DID, or a saved userDid from `thirdfy-agent login email`.'
     );
   }
-  if (flags.estimatedAmountUsd) payload.estimatedAmountUsd = Number(flags.estimatedAmountUsd);
+  const estimatedAmountUsd = resolveExecuteEstimatedAmountUsd(payload.action, flags);
+  if (estimatedAmountUsd != null) payload.estimatedAmountUsd = estimatedAmountUsd;
   if (options.forceIdempotency) {
     payload.executionIdempotencyKey = String(
       flags.idempotencyKey || `cli:walletExecute:${payload.action}:${Date.now()}:${randomUUID()}`
@@ -140,11 +170,12 @@ function buildIntentPayload(flags, options) {
   const payload = {
     agentApiKey: resolveAgentApiKey(flags, runMode),
     action: String(options.resolvedAction || requireFlag(flags, 'action', 'Missing --action')).trim(),
-    params: getPreparedParams(flags),
+    params: mergeConfirmWritesIntoParams(getPreparedParams(flags), flags),
   };
   if (flags.catalog) payload.catalog = String(flags.catalog).trim();
   if (flags.chainId) payload.chainId = Number(flags.chainId);
-  if (flags.estimatedAmountUsd) payload.estimatedAmountUsd = Number(flags.estimatedAmountUsd);
+  const estimatedAmountUsd = resolveExecuteEstimatedAmountUsd(payload.action, flags);
+  if (estimatedAmountUsd != null) payload.estimatedAmountUsd = estimatedAmountUsd;
   const intentRunMode = String(options.runMode || flags.runMode || '').trim().toLowerCase();
   const userDid = resolveEffectiveUserDid(flags, {
     runMode: intentRunMode,

package/src/runtime/execution/runners.mjs

@@ -12,6 +12,7 @@ import {
 import { apiGet, apiPost } from '../../core/http.mjs';
 import { withActionTimeout } from '../../core/actionTimeouts.mjs';
 import { isReadOnlyResolvedAction } from '../../core/readOnlyActions.mjs';
+import { shouldFallbackManagedReadToExecuteIntent } from './managedReadExecuteRail.mjs';
 import { createRequire } from 'module';
 
 const require = createRequire(import.meta.url);
@@ -85,9 +86,10 @@ function isReadOnlyAction(resolved) {
 }
 
 function shouldFallbackAgentWalletToExecuteIntent(resolved, response) {
-  if (!isReadOnlyAction(resolved)) return false;
-  const err = String(response?.error || response?.message || '').toLowerCase();
-  return err.includes('does not support execute rail');
+  return shouldFallbackManagedReadToExecuteIntent({
+    isReadOnly: isReadOnlyAction(resolved),
+    errorText: String(response?.error || response?.message || response?.code || response?.blockedReason || ''),
+  });
 }
 
 // Managed /execute often returns provider payloads as JSON strings under data.result. Pack parsers