@thirdfy/agent-cli 0.2.71 → 0.2.73

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## [Unreleased]
 
+## [0.2.73] - 2026-09-21
+
+### Added
+
+- Hyperliquid Circle CCTP ids: `quote_hyperliquid_cctp_deposit` (read) and `deposit_hyperliquid_cctp` (write, 180s timeout). Managed execute signs those on `params.sourceChainId` and fails closed without it. Provider hints follow API `setupHints` and `get_hyperliquid_funding_status` `nextAction` instead of hardcoded Arbitrum / Li.Fi. Pin: `test/walletExecuteChainId.test.cjs`, `test/read-only-action-classifier.test.cjs`. Pairs with `thirdfy-mcp` **0.0.123**.
+
+### Fixed
+
+- Managed execute signs `execute_bridge` / `get_bridge_quote` on `params.fromChain` even when `--chain-id` defaulted to Base. Preflight uses the same chain resolver as the execute payload. `execute_bridge`, `get_bridge_quote`, and `swap` use the 180s timeout. Pin: `test/walletExecuteChainId.test.cjs`, `test/actionTimeouts.test.cjs`. Pairs with `thirdfy-mcp` **0.0.123**.
+
+## [0.2.72] - 2026-09-17
+
+### Added
+
+- Hyperliquid `place_hyperliquid_tp_sl` certification fixture, write lane, and provider hint. Lighter `place_lighter_perps_order` `orderType` enum includes `stop_loss`, `stop_loss_limit`, `take_profit`, `take_profit_limit`. Pin: `test/read-only-action-classifier.test.cjs`. Pairs with `thirdfy-mcp` **0.0.122** and Thirdfy API **3.14.50**.
+
 ## [0.2.71] - 2026-09-16
 
 ### Fixed

package/README.md

@@ -40,10 +40,10 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.2.71
+## What's new in v0.2.73
 
-- Avantis setup-status and onboarding-plan reads wait for the compose timeout instead of falling back early.
-- An empty queued execute-intent fallback fails instead of looking like a successful empty setup payload.
+- Hyperliquid Circle CCTP ids `quote_hyperliquid_cctp_deposit` and `deposit_hyperliquid_cctp`. Managed execute signs those on `params.sourceChainId` with no default chain.
+- Provider hints follow API `setupHints` and `get_hyperliquid_funding_status` `nextAction` instead of hardcoded Arbitrum / Li.Fi.
 - See [CHANGELOG.md](./CHANGELOG.md) and GitHub Releases for older versions.
 
 ## Quick start
@@ -198,7 +198,7 @@ Auth expectations by mode:
 - `hybrid`: requires execution identity and governed mirror semantics (`--hybrid-wallet-mode self|agent_wallet`, default `self`).
 - `thirdfy`: requires execution identity and delegated governance path.
 - `agent_wallet`: requires execution identity and owner `userDid`, but does not require subscriber delegation when the owner identity matches the agent wallet/creator. Thirdfy credits/free quota still gate execution; Privy gas sponsorship only covers network gas when enabled.
-- Hyperliquid setup uses `complete_hyperliquid_onboarding` for runtime-owned funding/setup. It can submit Li.Fi and Bridge2 steps automatically, then return `bridge2_submitted` while Hyperliquid credits the deposit. Bridge2 setup is the Arbitrum exception to the Base-focused `agent_wallet` rule: Bridge2 credits the transaction sender. Pass **`--estimated-amount-usd`** as a top-level flag (not inside `--params`). The normal solo `agent_wallet` path uses the managed execution wallet as the Hyperliquid main wallet. If margin already sits on a different Hyperliquid main wallet, pass that wallet as `mainWalletAddress` / order `userAddress`, and pass the approved execution/API wallet as `apiWalletAddress`. When USDC sits on your linked email-login wallet (`primaryEvmWallet`) instead of the managed execution wallet, Thirdfy API returns **`FUND_AGENT_EXECUTION_WALLET`** / **`MANUAL_BRIDGE2_DEPOSIT_REQUIRED`** with `fundedWallet` and `executionWalletAddress`; move native Arbitrum USDC to `executionWalletAddress` and retry.
+- Hyperliquid setup uses `complete_hyperliquid_onboarding` for runtime-owned funding/setup. Call `get_hyperliquid_funding_status` and follow `nextAction` plus `nextActionParams`. Do not invent a funding chain. Pass **`--estimated-amount-usd`** as a top-level flag (not inside `--params`). The normal solo `agent_wallet` path uses the managed execution wallet as the Hyperliquid main wallet. If margin already sits on a different Hyperliquid main wallet, pass that wallet as `mainWalletAddress` / order `userAddress`, and pass the approved execution/API wallet as `apiWalletAddress`. When USDC sits on your linked email-login wallet (`primaryEvmWallet`) instead of the managed execution wallet, Thirdfy API returns **`FUND_AGENT_EXECUTION_WALLET`** with `fundedWallet` and `executionWalletAddress`; move USDC to `executionWalletAddress` on the chain named by `nextActionParams.sourceChainId` and retry.
 - custody mode defaults are profile-aware:
   - `managed` default for `thirdfy`
   - `external` default for `self` and `hybrid`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.2.71",
+  "version": "0.2.73",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {

package/src/core/actionTimeouts.mjs

@@ -16,6 +16,11 @@ const LONG_RUNNING_ACTIONS = new Set([
   'get_cmc_perp_contract_analysis',
   'get_cmc_market_regime',
   'get_cmc_derivatives_crowding',
+  'execute_bridge',
+  'get_bridge_quote',
+  'swap',
+  'execute_optimal_swap',
+  'deposit_hyperliquid_cctp',
 ]);
 
 function normalizeActionId(action) {

package/src/core/readOnlyActions.mjs

@@ -20,6 +20,7 @@ const READ_ONLY_EXACT = new Set([
   'get_condor_policy_status',
   'get_hummingbot_gateway_networks',
   'get_hummingbot_gateway_connectors',
+  'quote_hyperliquid_cctp_deposit',
 ]);
 
 export function normalizeActionKey(actionKey) {

package/src/core/walletExecuteChainId.mjs

@@ -0,0 +1,49 @@
+const DEFAULT_CHAIN_ID = 8453;
+
+function normalizeActionId(action) {
+  return String(action || '')
+    .trim()
+    .replace(/-/g, '_')
+    .toLowerCase();
+}
+
+function positiveChainId(value) {
+  const n = Number(value);
+  if (!Number.isFinite(n) || n <= 0) return undefined;
+  return Math.trunc(n);
+}
+
+function isBridgeAction(action) {
+  const key = normalizeActionId(action);
+  return key === 'execute_bridge' || key === 'get_bridge_quote' || key === 'check_bridge_status';
+}
+
+function isHyperliquidCctpAction(action) {
+  const key = normalizeActionId(action);
+  return key === 'deposit_hyperliquid_cctp' || key === 'quote_hyperliquid_cctp_deposit';
+}
+
+/**
+ * Signing / wallet-preflight chain for managed execute.
+ * Bridge writes sign on fromChain. CCTP burns sign on sourceChainId. Do not default Base.
+ */
+export function resolveWalletExecuteChainId({ action, chainId, params } = {}) {
+  const record = params && typeof params === 'object' ? params : {};
+  if (isHyperliquidCctpAction(action)) {
+    const sourceChainId = positiveChainId(record.sourceChainId);
+    if (!sourceChainId) {
+      throw new Error('HYPERLIQUID_CCTP_SOURCE_CHAIN_REQUIRED');
+    }
+    return sourceChainId;
+  }
+  if (isBridgeAction(action)) {
+    return (
+      positiveChainId(record.fromChain) ||
+      positiveChainId(record.fromChainId) ||
+      positiveChainId(chainId) ||
+      positiveChainId(record.chainId) ||
+      DEFAULT_CHAIN_ID
+    );
+  }
+  return positiveChainId(chainId) || positiveChainId(record.chainId) || DEFAULT_CHAIN_ID;
+}

package/src/runtime/actions/selection.mjs

@@ -93,6 +93,8 @@ function inferActionProvider(action) {
     'get-hyperliquid-referral-status': 'hyperliquid',
     'deposit-hyperliquid-staking': 'hyperliquid',
     'deposit-hyperliquid-bridge': 'hyperliquid',
+    'deposit-hyperliquid-cctp': 'hyperliquid',
+    'quote-hyperliquid-cctp-deposit': 'hyperliquid',
     'place-hyperliquid-perps-order': 'hyperliquid',
     'cancel-hyperliquid-perps-order': 'hyperliquid',
     'update-hyperliquid-leverage': 'hyperliquid',

package/src/runtime/certification/venueActionSchemas.mjs

@@ -47,6 +47,37 @@ export const VENUE_WRITE_ACTION_FIXTURES = [
     },
     validSample: { coin: 'ETH', orderId: 1 },
   },
+  {
+    action: 'place_hyperliquid_tp_sl',
+    aliases: ['place-hyperliquid-tp-sl'],
+    provider: 'hyperliquid',
+    authorityInputs: ['agentApiKey', 'estimatedAmountUsd'],
+    paramsSchema: {
+      type: 'object',
+      additionalProperties: false,
+      required: ['coin', 'tpsl', 'triggerPx', 'size', 'isBuy'],
+      properties: {
+        coin: { type: 'string', minLength: 1 },
+        tpsl: { type: 'string', enum: ['tp', 'sl'] },
+        triggerPx: { type: 'number', minimum: 0 },
+        isMarket: { type: 'boolean' },
+        limitPx: { type: 'number', minimum: 0 },
+        size: { type: 'number', minimum: 0 },
+        isBuy: { type: 'boolean' },
+        reduceOnly: { type: 'boolean' },
+        grouping: { type: 'string', enum: ['na', 'normalTpsl', 'positionTpsl'] },
+        userAddress: { type: 'string' },
+      },
+    },
+    validSample: {
+      coin: 'ETH',
+      tpsl: 'sl',
+      triggerPx: 3000,
+      size: 0.01,
+      isBuy: false,
+      reduceOnly: true,
+    },
+  },
   {
     action: 'update_hyperliquid_leverage',
     aliases: ['update-hyperliquid-leverage'],
@@ -82,7 +113,11 @@ export const VENUE_WRITE_ACTION_FIXTURES = [
         baseAmount: { type: 'integer', minimum: 1 },
         price: { type: 'integer', minimum: 1 },
         isAsk: { type: 'boolean' },
-        orderType: { type: 'string', enum: ['limit', 'market'] },
+        orderType: {
+          type: 'string',
+          enum: ['limit', 'market', 'stop_loss', 'stop_loss_limit', 'take_profit', 'take_profit_limit'],
+        },
+        triggerPrice: { type: 'integer', minimum: 1 },
         reduceOnly: { type: 'boolean' },
       },
     },

package/src/runtime/execution/lanes.mjs

@@ -3,6 +3,8 @@ export function createExecutionLanes() {
 const OFFCHAIN_VENUE_ORDER_ACTIONS = new Set([
   'place_hyperliquid_perps_order',
   'place-hyperliquid-perps-order',
+  'place_hyperliquid_tp_sl',
+  'place-hyperliquid-tp-sl',
   'cancel_hyperliquid_perps_order',
   'cancel-hyperliquid-perps-order',
   'update_hyperliquid_leverage',

package/src/runtime/execution/payloads.mjs

@@ -7,6 +7,7 @@ import { createCliError } from '../../core/envelope.mjs';
 import { normalizeRunMode, normalizeManagedRunMode, normalizeHybridWalletMode } from '../../core/runMode.mjs';
 import { assertHostedRuntimePolymarketWriteIdempotency } from './hostedRuntimeWriteGate.mjs';
 import { resolveTokenInForFunding } from '../../core/fundingTokenIn.mjs';
+import { resolveWalletExecuteChainId } from '../../core/walletExecuteChainId.mjs';
 
 function isTruthyFlag(value) {
   return value === true || String(value || '').trim().toLowerCase() === 'true';
@@ -129,16 +130,21 @@ function buildManagedExecutePayload(flags, options) {
     delete managedParams.tokenInDecimals;
     managedParams.amountIn = flags.__swapInput.amountInHuman;
   }
+  const action = String(options.resolvedAction || requireFlag(flags, 'action', 'Missing --action')).trim();
   const payload = {
     agentApiKey: resolveAgentApiKey(flags, runMode),
-    action: String(options.resolvedAction || requireFlag(flags, 'action', 'Missing --action')).trim(),
+    action,
     userDid: resolveEffectiveUserDid(flags, {
       runMode,
       hybridWalletMode: options.hybridWalletMode,
       preferDelegationIdentity: options.preferDelegationIdentity,
     }),
     params: managedParams,
-    chainId: Number(flags.chainId || 8453),
+    chainId: resolveWalletExecuteChainId({
+      action,
+      chainId: flags.chainId,
+      params: managedParams,
+    }),
     executionStrategy: {
       runMode,
       mirrorOnly: false,

package/src/runtime/execution/runners.mjs

@@ -12,6 +12,7 @@ import {
 import { apiGet, apiPost } from '../../core/http.mjs';
 import { withActionTimeout } from '../../core/actionTimeouts.mjs';
 import { isReadOnlyResolvedAction } from '../../core/readOnlyActions.mjs';
+import { resolveWalletExecuteChainId } from '../../core/walletExecuteChainId.mjs';
 import { isEmptyQueuedExecuteIntent, shouldFallbackManagedReadToExecuteIntent } from './managedReadExecuteRail.mjs';
 import { createRequire } from 'module';
 
@@ -637,7 +638,13 @@ async function executeHybridRun(ctx, flags, resolved, options) {
 }
 
 async function resolveManagedExecutionPreflight(ctx, flags, resolved, options = {}) {
-  const chainId = Number(flags.chainId || 8453);
+  const action = String(resolved?.resolvedAction || flags.action || '').trim();
+  const params = getPreparedParams(flags);
+  const chainId = resolveWalletExecuteChainId({
+    action,
+    chainId: flags.chainId,
+    params,
+  });
   const runMode = String(options.runMode || 'agent_wallet').trim().toLowerCase();
   const agentApiKey = resolveAgentApiKey(flags, runMode);
   const userDid = resolveEffectiveUserDid(flags, {
@@ -657,10 +664,7 @@ async function resolveManagedExecutionPreflight(ctx, flags, resolved, options =
       signerMethod: 'managed_wallet_server',
     };
   }
-  const tokenIn = resolveTokenInForFunding(
-    getPreparedParams(flags),
-    resolved?.resolvedAction || flags.action
-  );
+  const tokenIn = resolveTokenInForFunding(params, action);
   const query = new URLSearchParams({
     userDid,
     chainId: String(chainId),

package/src/runtime/providerHints.mjs

@@ -5,18 +5,8 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
   function getTradingProviderHint(providerId) {
     const provider = String(providerId || '').trim().toLowerCase();
     const manifestHint = getCachedProviderHintFromCapabilities(provider);
-    if (manifestHint) return manifestHint;
-    if (provider === 'trading') {
-      return {
-        provider,
-        category: 'onchain_spot',
-        canonicalWriteAction: 'swap',
-        supportedChains: [1, 10, 130, 137, 8453, 84532, 42161, 4663],
-        laneCompatibility:
-          'Kyber quote/build is live on Ethereum, Optimism, Unichain, Polygon, Base, and Arbitrum; sponsored Kyber execution is validated on Base only. Robinhood Chain (4663) uses Li.Fi Intents for spot swaps with user-pays gas. Gnosis FX uses the fx provider via CoW.',
-        credentialUx: 'Use normal Thirdfy login/delegation; do not use this provider for Hyperliquid, Lighter, or Polymarket.',
-      };
-    }
+    const setupHints =
+      manifestHint?.setupHints && typeof manifestHint.setupHints === 'object' ? manifestHint.setupHints : {};
     if (provider === 'hyperliquid') {
       return {
         provider,
@@ -34,9 +24,11 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
           'get_hyperliquid_onboarding_plan',
           'get_hyperliquid_referral_status',
           'get_hyperliquid_builder_fee_status',
+          'quote_hyperliquid_cctp_deposit',
         ],
         orderManagementActions: [
           'place_hyperliquid_perps_order',
+          'place_hyperliquid_tp_sl',
           'cancel_hyperliquid_perps_order',
           'update_hyperliquid_leverage',
           'get_hyperliquid_open_orders',
@@ -47,13 +39,16 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
           'get_hyperliquid_onboarding_plan',
           'prepare_hyperliquid_onboarding',
           'complete_hyperliquid_onboarding',
+          'quote_hyperliquid_cctp_deposit',
+          'deposit_hyperliquid_cctp',
+          'deposit_hyperliquid_bridge',
+          'transfer_hyperliquid_spot_to_perps',
           'get_bridge_quote',
           'execute_bridge',
           'approve_hyperliquid_agent',
           'get_hyperliquid_builder_fee_status',
           'approve_hyperliquid_builder_fee',
           'set_hyperliquid_referrer',
-          'deposit_hyperliquid_bridge',
           'deposit_hyperliquid_staking',
           'claim_hyperliquid_testnet_faucet',
         ],
@@ -72,17 +67,14 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
         credentialType: 'hyperliquid_api_wallet',
         credentialUx:
           'Thirdfy manages Hyperliquid API-wallet setup for normal users. Delegated writes require encrypted privateKey-backed hyperliquid_api_wallet credentials; walletAddress-only records are rejected until Privy walletId-backed Hyperliquid signing ships.',
-        recommendedFundingChainId: 42161,
         supportedFundingSourceChains: [
-          { chainId: 42161, name: 'Arbitrum One', path: 'native USDC -> Bridge2' },
-          { chainId: 8453, name: 'Base', path: 'Li.Fi -> Arbitrum native USDC -> Bridge2' },
-          { chainId: 1, name: 'Ethereum', path: 'Li.Fi -> Arbitrum native USDC -> Bridge2' },
-          { chainId: 137, name: 'Polygon', path: 'Li.Fi -> Arbitrum native USDC -> Bridge2' },
+          { chainId: 8453, name: 'Base' },
+          { chainId: 42161, name: 'Arbitrum One' },
+          { chainId: 137, name: 'Polygon' },
+          { chainId: 1, name: 'Ethereum' },
         ],
         setupBlockers: [
           'HYPERLIQUID_SOURCE_FUNDS_REQUIRED',
-          'HYPERLIQUID_ARBITRUM_USDC_REQUIRED',
-          'HYPERLIQUID_BRIDGE2_DEPOSIT_REQUIRED',
           'HYPERLIQUID_API_WALLET_APPROVAL_REQUIRED',
           'HYPERLIQUID_BUILDER_APPROVAL_REQUIRED',
           'HYPERLIQUID_POLICY_REQUIRED',
@@ -93,17 +85,32 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
           'HYPERLIQUID_BUILDER_WALLET_UNFUNDED',
           'HYPERLIQUID_API_WALLET_NOT_PROVIDED',
         ],
-        sourceBridgeProvider: 'lifi',
         funding:
-          'Best path: Base/Ethereum/Polygon USDC -> Li.Fi bridge to native Arbitrum USDC -> Hyperliquid Bridge2. If the user already has native Circle USDC on Arbitrum One (42161), skip Li.Fi and call deposit_hyperliquid_bridge. Minimum 5 USDC; Bridge2 credits the sender/source wallet.',
+          'Follow nextAction and nextActionParams from get_hyperliquid_funding_status. Do not invent a funding chain.',
         laneCompatibility:
-          'Use self/BYOW only for setup signatures or Arbitrum funding transactions. Perps order placement is an offchain venue write and should use thirdfy, hybrid, or agent_wallet. The default solo agent_wallet path uses the managed execution wallet as the Hyperliquid master address. If margin already sits on a distinct Hyperliquid main wallet, pass that as userAddress/mainWalletAddress and pass the approved execution/API wallet as apiWalletAddress.',
+          'Use self/BYOW only for setup signatures or source-chain funding transactions. Perps order placement is an offchain venue write and should use thirdfy, hybrid, or agent_wallet. The default solo agent_wallet path uses the managed execution wallet as the Hyperliquid master address. If margin already sits on a distinct Hyperliquid main wallet, pass that as userAddress/mainWalletAddress and pass the approved execution/API wallet as apiWalletAddress.',
         setupExample:
-          'actions --provider hyperliquid -> get_hyperliquid_funding_status -> complete_hyperliquid_onboarding for runtime-owned setup, or get_hyperliquid_onboarding_plan/prepare_hyperliquid_onboarding for operator previews -> get_bridge_quote/execute_bridge if source is Base/Ethereum/Polygon -> deposit_hyperliquid_bridge on 42161 -> approve_hyperliquid_agent -> approve_hyperliquid_builder_fee only when get_hyperliquid_setup_status shows builder.enabled=true -> get_hyperliquid_setup_status before place_hyperliquid_perps_order',
+          'actions --provider hyperliquid -> get_hyperliquid_funding_status -> complete_hyperliquid_onboarding for runtime-owned setup, or get_hyperliquid_onboarding_plan/prepare_hyperliquid_onboarding for operator previews -> follow nextAction with nextActionParams -> get_hyperliquid_setup_status before place_hyperliquid_perps_order',
         monetization:
           'Builder monetization is active only when the API operator configured a builder address and the builder treasury has Hyperliquid margin. When active, the main wallet signs approve_hyperliquid_builder_fee once and orders attach builder fees. When the treasury is unfunded, get_hyperliquid_setup_status can return ready=true with warning HYPERLIQUID_BUILDER_WALLET_UNFUNDED, get_hyperliquid_builder_fee_status returns monetizationEnabled=false with reason BUILDER_WALLET_UNFUNDED, and place_hyperliquid_perps_order does not require builder approval.',
         example:
           'thirdfy-agent actions --provider hyperliquid && thirdfy-agent preflight --action place_hyperliquid_perps_order --params \'{"coin":"ETH","isBuy":true,"size":0.01,"limitPx":3500,"orderType":"market"}\'',
+        ...(manifestHint || {}),
+        ...setupHints,
+        provider,
+        source: manifestHint ? 'cli_capabilities_manifest' : 'static_provider_hint',
+      };
+    }
+    if (manifestHint) return manifestHint;
+    if (provider === 'trading') {
+      return {
+        provider,
+        category: 'onchain_spot',
+        canonicalWriteAction: 'swap',
+        supportedChains: [1, 10, 130, 137, 8453, 84532, 42161, 4663],
+        laneCompatibility:
+          'Kyber quote/build is live on Ethereum, Optimism, Unichain, Polygon, Base, and Arbitrum; sponsored Kyber execution is validated on Base only. Robinhood Chain (4663) uses Li.Fi Intents for spot swaps with user-pays gas. Gnosis FX uses the fx provider via CoW.',
+        credentialUx: 'Use normal Thirdfy login/delegation; do not use this provider for Hyperliquid, Lighter, or Polymarket.',
       };
     }
     if (provider === 'lighter') {
@@ -951,6 +958,7 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
       custodyMode: match.custodyMode || null,
       description: match.description || null,
       source: 'cli_capabilities_manifest',
+      ...(match.setupHints && typeof match.setupHints === 'object' ? { setupHints: match.setupHints } : {}),
     };
   }