@thirdfy/agent-cli 0.2.68 → 0.2.69

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## [Unreleased]
 
+## [0.2.69] - 2026-09-16
+
+### Fixed
+
+- Managed `agent_wallet` reads do not fall back to `/execute-intent` on `PARAMS_SCHEMA_INVALID` / unknown-key. Fallback stays limited to `does not support execute rail`. Matches `thirdfy-mcp` **0.0.119**. Pin: `test/agent-wallet-readonly-fallback.test.cjs`.
+
 ## [0.2.68] - 2026-09-16
 
 ### Fixed

package/README.md

@@ -40,10 +40,10 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.2.68
+## What's new in v0.2.69
 
-- Avantis `complete_avantis_onboarding` defaults `estimatedAmountUsd` to `1` when the caller omits it.
-- `--confirmWrites` / `--confirm` merge into execute params so a Claude-style root confirmation reaches AgentKit.
+- Managed `agent_wallet` reads keep `/execute` errors such as Avantis `get_avantis_price` unknown `symbols`. They do not fall back to an empty execute-intent queue.
+- Execute-intent fallback stays limited to `does not support execute rail`.
 - See [CHANGELOG.md](./CHANGELOG.md) and GitHub Releases for older versions.
 
 ## Quick start

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.2.68",
+  "version": "0.2.69",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {

package/src/runtime/execution/managedReadExecuteRail.mjs

@@ -0,0 +1,22 @@
+/**
+ * Managed `agent_wallet` reads prefer `/execute`. Execute-intent is only a fallback when that
+ * rail rejects the action (`does not support execute rail`). Schema failures must not fall back
+ * to an empty queued execute-intent envelope.
+ *
+ * Keep in sync with `thirdfy-mcp` `src/lib/managedReadExecuteRail.ts`.
+ */
+
+export const EXECUTE_RAIL_UNSUPPORTED_FRAGMENT = 'does not support execute rail';
+
+export function managedReadExecuteErrorText(data) {
+  return String(data?.error || data?.message || data?.code || data?.blockedReason || '').toLowerCase();
+}
+
+export function shouldFallbackManagedReadToExecuteIntent({ isReadOnly, errorText } = {}) {
+  if (!isReadOnly) return false;
+  const err = String(errorText || '').toLowerCase();
+  if (err.includes('params_schema_invalid') || err.includes('invalid paramsschema') || err.includes('unknown key')) {
+    return false;
+  }
+  return err.includes(EXECUTE_RAIL_UNSUPPORTED_FRAGMENT);
+}

package/src/runtime/execution/runners.mjs

@@ -12,6 +12,7 @@ import {
 import { apiGet, apiPost } from '../../core/http.mjs';
 import { withActionTimeout } from '../../core/actionTimeouts.mjs';
 import { isReadOnlyResolvedAction } from '../../core/readOnlyActions.mjs';
+import { shouldFallbackManagedReadToExecuteIntent } from './managedReadExecuteRail.mjs';
 import { createRequire } from 'module';
 
 const require = createRequire(import.meta.url);
@@ -85,9 +86,10 @@ function isReadOnlyAction(resolved) {
 }
 
 function shouldFallbackAgentWalletToExecuteIntent(resolved, response) {
-  if (!isReadOnlyAction(resolved)) return false;
-  const err = String(response?.error || response?.message || '').toLowerCase();
-  return err.includes('does not support execute rail');
+  return shouldFallbackManagedReadToExecuteIntent({
+    isReadOnly: isReadOnlyAction(resolved),
+    errorText: String(response?.error || response?.message || response?.code || response?.blockedReason || ''),
+  });
 }
 
 // Managed /execute often returns provider payloads as JSON strings under data.result. Pack parsers