@thirdfy/agent-cli 0.2.72 → 0.2.73

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## [Unreleased]
 
+## [0.2.73] - 2026-09-21
+
+### Added
+
+- Hyperliquid Circle CCTP ids: `quote_hyperliquid_cctp_deposit` (read) and `deposit_hyperliquid_cctp` (write, 180s timeout). Managed execute signs those on `params.sourceChainId` and fails closed without it. Provider hints follow API `setupHints` and `get_hyperliquid_funding_status` `nextAction` instead of hardcoded Arbitrum / Li.Fi. Pin: `test/walletExecuteChainId.test.cjs`, `test/read-only-action-classifier.test.cjs`. Pairs with `thirdfy-mcp` **0.0.123**.
+
+### Fixed
+
+- Managed execute signs `execute_bridge` / `get_bridge_quote` on `params.fromChain` even when `--chain-id` defaulted to Base. Preflight uses the same chain resolver as the execute payload. `execute_bridge`, `get_bridge_quote`, and `swap` use the 180s timeout. Pin: `test/walletExecuteChainId.test.cjs`, `test/actionTimeouts.test.cjs`. Pairs with `thirdfy-mcp` **0.0.123**.
+
 ## [0.2.72] - 2026-09-17
 
 ### Added

package/README.md

@@ -40,9 +40,10 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.2.72
+## What's new in v0.2.73
 
-- Hyperliquid `place_hyperliquid_tp_sl` is a write. Lighter `place_lighter_perps_order` accepts stop-loss and take-profit `orderType` values with `triggerPrice`.
+- Hyperliquid Circle CCTP ids `quote_hyperliquid_cctp_deposit` and `deposit_hyperliquid_cctp`. Managed execute signs those on `params.sourceChainId` with no default chain.
+- Provider hints follow API `setupHints` and `get_hyperliquid_funding_status` `nextAction` instead of hardcoded Arbitrum / Li.Fi.
 - See [CHANGELOG.md](./CHANGELOG.md) and GitHub Releases for older versions.
 
 ## Quick start
@@ -197,7 +198,7 @@ Auth expectations by mode:
 - `hybrid`: requires execution identity and governed mirror semantics (`--hybrid-wallet-mode self|agent_wallet`, default `self`).
 - `thirdfy`: requires execution identity and delegated governance path.
 - `agent_wallet`: requires execution identity and owner `userDid`, but does not require subscriber delegation when the owner identity matches the agent wallet/creator. Thirdfy credits/free quota still gate execution; Privy gas sponsorship only covers network gas when enabled.
-- Hyperliquid setup uses `complete_hyperliquid_onboarding` for runtime-owned funding/setup. It can submit Li.Fi and Bridge2 steps automatically, then return `bridge2_submitted` while Hyperliquid credits the deposit. Bridge2 setup is the Arbitrum exception to the Base-focused `agent_wallet` rule: Bridge2 credits the transaction sender. Pass **`--estimated-amount-usd`** as a top-level flag (not inside `--params`). The normal solo `agent_wallet` path uses the managed execution wallet as the Hyperliquid main wallet. If margin already sits on a different Hyperliquid main wallet, pass that wallet as `mainWalletAddress` / order `userAddress`, and pass the approved execution/API wallet as `apiWalletAddress`. When USDC sits on your linked email-login wallet (`primaryEvmWallet`) instead of the managed execution wallet, Thirdfy API returns **`FUND_AGENT_EXECUTION_WALLET`** / **`MANUAL_BRIDGE2_DEPOSIT_REQUIRED`** with `fundedWallet` and `executionWalletAddress`; move native Arbitrum USDC to `executionWalletAddress` and retry.
+- Hyperliquid setup uses `complete_hyperliquid_onboarding` for runtime-owned funding/setup. Call `get_hyperliquid_funding_status` and follow `nextAction` plus `nextActionParams`. Do not invent a funding chain. Pass **`--estimated-amount-usd`** as a top-level flag (not inside `--params`). The normal solo `agent_wallet` path uses the managed execution wallet as the Hyperliquid main wallet. If margin already sits on a different Hyperliquid main wallet, pass that wallet as `mainWalletAddress` / order `userAddress`, and pass the approved execution/API wallet as `apiWalletAddress`. When USDC sits on your linked email-login wallet (`primaryEvmWallet`) instead of the managed execution wallet, Thirdfy API returns **`FUND_AGENT_EXECUTION_WALLET`** with `fundedWallet` and `executionWalletAddress`; move USDC to `executionWalletAddress` on the chain named by `nextActionParams.sourceChainId` and retry.
 - custody mode defaults are profile-aware:
   - `managed` default for `thirdfy`
   - `external` default for `self` and `hybrid`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.2.72",
+  "version": "0.2.73",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {

package/src/core/actionTimeouts.mjs

@@ -16,6 +16,11 @@ const LONG_RUNNING_ACTIONS = new Set([
   'get_cmc_perp_contract_analysis',
   'get_cmc_market_regime',
   'get_cmc_derivatives_crowding',
+  'execute_bridge',
+  'get_bridge_quote',
+  'swap',
+  'execute_optimal_swap',
+  'deposit_hyperliquid_cctp',
 ]);
 
 function normalizeActionId(action) {

package/src/core/readOnlyActions.mjs

@@ -20,6 +20,7 @@ const READ_ONLY_EXACT = new Set([
   'get_condor_policy_status',
   'get_hummingbot_gateway_networks',
   'get_hummingbot_gateway_connectors',
+  'quote_hyperliquid_cctp_deposit',
 ]);
 
 export function normalizeActionKey(actionKey) {

package/src/core/walletExecuteChainId.mjs

@@ -0,0 +1,49 @@
+const DEFAULT_CHAIN_ID = 8453;
+
+function normalizeActionId(action) {
+  return String(action || '')
+    .trim()
+    .replace(/-/g, '_')
+    .toLowerCase();
+}
+
+function positiveChainId(value) {
+  const n = Number(value);
+  if (!Number.isFinite(n) || n <= 0) return undefined;
+  return Math.trunc(n);
+}
+
+function isBridgeAction(action) {
+  const key = normalizeActionId(action);
+  return key === 'execute_bridge' || key === 'get_bridge_quote' || key === 'check_bridge_status';
+}
+
+function isHyperliquidCctpAction(action) {
+  const key = normalizeActionId(action);
+  return key === 'deposit_hyperliquid_cctp' || key === 'quote_hyperliquid_cctp_deposit';
+}
+
+/**
+ * Signing / wallet-preflight chain for managed execute.
+ * Bridge writes sign on fromChain. CCTP burns sign on sourceChainId. Do not default Base.
+ */
+export function resolveWalletExecuteChainId({ action, chainId, params } = {}) {
+  const record = params && typeof params === 'object' ? params : {};
+  if (isHyperliquidCctpAction(action)) {
+    const sourceChainId = positiveChainId(record.sourceChainId);
+    if (!sourceChainId) {
+      throw new Error('HYPERLIQUID_CCTP_SOURCE_CHAIN_REQUIRED');
+    }
+    return sourceChainId;
+  }
+  if (isBridgeAction(action)) {
+    return (
+      positiveChainId(record.fromChain) ||
+      positiveChainId(record.fromChainId) ||
+      positiveChainId(chainId) ||
+      positiveChainId(record.chainId) ||
+      DEFAULT_CHAIN_ID
+    );
+  }
+  return positiveChainId(chainId) || positiveChainId(record.chainId) || DEFAULT_CHAIN_ID;
+}

package/src/runtime/actions/selection.mjs

@@ -93,6 +93,8 @@ function inferActionProvider(action) {
     'get-hyperliquid-referral-status': 'hyperliquid',
     'deposit-hyperliquid-staking': 'hyperliquid',
     'deposit-hyperliquid-bridge': 'hyperliquid',
+    'deposit-hyperliquid-cctp': 'hyperliquid',
+    'quote-hyperliquid-cctp-deposit': 'hyperliquid',
     'place-hyperliquid-perps-order': 'hyperliquid',
     'cancel-hyperliquid-perps-order': 'hyperliquid',
     'update-hyperliquid-leverage': 'hyperliquid',

package/src/runtime/execution/payloads.mjs

@@ -7,6 +7,7 @@ import { createCliError } from '../../core/envelope.mjs';
 import { normalizeRunMode, normalizeManagedRunMode, normalizeHybridWalletMode } from '../../core/runMode.mjs';
 import { assertHostedRuntimePolymarketWriteIdempotency } from './hostedRuntimeWriteGate.mjs';
 import { resolveTokenInForFunding } from '../../core/fundingTokenIn.mjs';
+import { resolveWalletExecuteChainId } from '../../core/walletExecuteChainId.mjs';
 
 function isTruthyFlag(value) {
   return value === true || String(value || '').trim().toLowerCase() === 'true';
@@ -129,16 +130,21 @@ function buildManagedExecutePayload(flags, options) {
     delete managedParams.tokenInDecimals;
     managedParams.amountIn = flags.__swapInput.amountInHuman;
   }
+  const action = String(options.resolvedAction || requireFlag(flags, 'action', 'Missing --action')).trim();
   const payload = {
     agentApiKey: resolveAgentApiKey(flags, runMode),
-    action: String(options.resolvedAction || requireFlag(flags, 'action', 'Missing --action')).trim(),
+    action,
     userDid: resolveEffectiveUserDid(flags, {
       runMode,
       hybridWalletMode: options.hybridWalletMode,
       preferDelegationIdentity: options.preferDelegationIdentity,
     }),
     params: managedParams,
-    chainId: Number(flags.chainId || 8453),
+    chainId: resolveWalletExecuteChainId({
+      action,
+      chainId: flags.chainId,
+      params: managedParams,
+    }),
     executionStrategy: {
       runMode,
       mirrorOnly: false,

package/src/runtime/execution/runners.mjs

@@ -12,6 +12,7 @@ import {
 import { apiGet, apiPost } from '../../core/http.mjs';
 import { withActionTimeout } from '../../core/actionTimeouts.mjs';
 import { isReadOnlyResolvedAction } from '../../core/readOnlyActions.mjs';
+import { resolveWalletExecuteChainId } from '../../core/walletExecuteChainId.mjs';
 import { isEmptyQueuedExecuteIntent, shouldFallbackManagedReadToExecuteIntent } from './managedReadExecuteRail.mjs';
 import { createRequire } from 'module';
 
@@ -637,7 +638,13 @@ async function executeHybridRun(ctx, flags, resolved, options) {
 }
 
 async function resolveManagedExecutionPreflight(ctx, flags, resolved, options = {}) {
-  const chainId = Number(flags.chainId || 8453);
+  const action = String(resolved?.resolvedAction || flags.action || '').trim();
+  const params = getPreparedParams(flags);
+  const chainId = resolveWalletExecuteChainId({
+    action,
+    chainId: flags.chainId,
+    params,
+  });
   const runMode = String(options.runMode || 'agent_wallet').trim().toLowerCase();
   const agentApiKey = resolveAgentApiKey(flags, runMode);
   const userDid = resolveEffectiveUserDid(flags, {
@@ -657,10 +664,7 @@ async function resolveManagedExecutionPreflight(ctx, flags, resolved, options =
       signerMethod: 'managed_wallet_server',
     };
   }
-  const tokenIn = resolveTokenInForFunding(
-    getPreparedParams(flags),
-    resolved?.resolvedAction || flags.action
-  );
+  const tokenIn = resolveTokenInForFunding(params, action);
   const query = new URLSearchParams({
     userDid,
     chainId: String(chainId),

package/src/runtime/providerHints.mjs

@@ -5,18 +5,8 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
   function getTradingProviderHint(providerId) {
     const provider = String(providerId || '').trim().toLowerCase();
     const manifestHint = getCachedProviderHintFromCapabilities(provider);
-    if (manifestHint) return manifestHint;
-    if (provider === 'trading') {
-      return {
-        provider,
-        category: 'onchain_spot',
-        canonicalWriteAction: 'swap',
-        supportedChains: [1, 10, 130, 137, 8453, 84532, 42161, 4663],
-        laneCompatibility:
-          'Kyber quote/build is live on Ethereum, Optimism, Unichain, Polygon, Base, and Arbitrum; sponsored Kyber execution is validated on Base only. Robinhood Chain (4663) uses Li.Fi Intents for spot swaps with user-pays gas. Gnosis FX uses the fx provider via CoW.',
-        credentialUx: 'Use normal Thirdfy login/delegation; do not use this provider for Hyperliquid, Lighter, or Polymarket.',
-      };
-    }
+    const setupHints =
+      manifestHint?.setupHints && typeof manifestHint.setupHints === 'object' ? manifestHint.setupHints : {};
     if (provider === 'hyperliquid') {
       return {
         provider,
@@ -34,6 +24,7 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
           'get_hyperliquid_onboarding_plan',
           'get_hyperliquid_referral_status',
           'get_hyperliquid_builder_fee_status',
+          'quote_hyperliquid_cctp_deposit',
         ],
         orderManagementActions: [
           'place_hyperliquid_perps_order',
@@ -48,13 +39,16 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
           'get_hyperliquid_onboarding_plan',
           'prepare_hyperliquid_onboarding',
           'complete_hyperliquid_onboarding',
+          'quote_hyperliquid_cctp_deposit',
+          'deposit_hyperliquid_cctp',
+          'deposit_hyperliquid_bridge',
+          'transfer_hyperliquid_spot_to_perps',
           'get_bridge_quote',
           'execute_bridge',
           'approve_hyperliquid_agent',
           'get_hyperliquid_builder_fee_status',
           'approve_hyperliquid_builder_fee',
           'set_hyperliquid_referrer',
-          'deposit_hyperliquid_bridge',
           'deposit_hyperliquid_staking',
           'claim_hyperliquid_testnet_faucet',
         ],
@@ -73,17 +67,14 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
         credentialType: 'hyperliquid_api_wallet',
         credentialUx:
           'Thirdfy manages Hyperliquid API-wallet setup for normal users. Delegated writes require encrypted privateKey-backed hyperliquid_api_wallet credentials; walletAddress-only records are rejected until Privy walletId-backed Hyperliquid signing ships.',
-        recommendedFundingChainId: 42161,
         supportedFundingSourceChains: [
-          { chainId: 42161, name: 'Arbitrum One', path: 'native USDC -> Bridge2' },
-          { chainId: 8453, name: 'Base', path: 'Li.Fi -> Arbitrum native USDC -> Bridge2' },
-          { chainId: 1, name: 'Ethereum', path: 'Li.Fi -> Arbitrum native USDC -> Bridge2' },
-          { chainId: 137, name: 'Polygon', path: 'Li.Fi -> Arbitrum native USDC -> Bridge2' },
+          { chainId: 8453, name: 'Base' },
+          { chainId: 42161, name: 'Arbitrum One' },
+          { chainId: 137, name: 'Polygon' },
+          { chainId: 1, name: 'Ethereum' },
         ],
         setupBlockers: [
           'HYPERLIQUID_SOURCE_FUNDS_REQUIRED',
-          'HYPERLIQUID_ARBITRUM_USDC_REQUIRED',
-          'HYPERLIQUID_BRIDGE2_DEPOSIT_REQUIRED',
           'HYPERLIQUID_API_WALLET_APPROVAL_REQUIRED',
           'HYPERLIQUID_BUILDER_APPROVAL_REQUIRED',
           'HYPERLIQUID_POLICY_REQUIRED',
@@ -94,17 +85,32 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
           'HYPERLIQUID_BUILDER_WALLET_UNFUNDED',
           'HYPERLIQUID_API_WALLET_NOT_PROVIDED',
         ],
-        sourceBridgeProvider: 'lifi',
         funding:
-          'Best path: Base/Ethereum/Polygon USDC -> Li.Fi bridge to native Arbitrum USDC -> Hyperliquid Bridge2. If the user already has native Circle USDC on Arbitrum One (42161), skip Li.Fi and call deposit_hyperliquid_bridge. Minimum 5 USDC; Bridge2 credits the sender/source wallet.',
+          'Follow nextAction and nextActionParams from get_hyperliquid_funding_status. Do not invent a funding chain.',
         laneCompatibility:
-          'Use self/BYOW only for setup signatures or Arbitrum funding transactions. Perps order placement is an offchain venue write and should use thirdfy, hybrid, or agent_wallet. The default solo agent_wallet path uses the managed execution wallet as the Hyperliquid master address. If margin already sits on a distinct Hyperliquid main wallet, pass that as userAddress/mainWalletAddress and pass the approved execution/API wallet as apiWalletAddress.',
+          'Use self/BYOW only for setup signatures or source-chain funding transactions. Perps order placement is an offchain venue write and should use thirdfy, hybrid, or agent_wallet. The default solo agent_wallet path uses the managed execution wallet as the Hyperliquid master address. If margin already sits on a distinct Hyperliquid main wallet, pass that as userAddress/mainWalletAddress and pass the approved execution/API wallet as apiWalletAddress.',
         setupExample:
-          'actions --provider hyperliquid -> get_hyperliquid_funding_status -> complete_hyperliquid_onboarding for runtime-owned setup, or get_hyperliquid_onboarding_plan/prepare_hyperliquid_onboarding for operator previews -> get_bridge_quote/execute_bridge if source is Base/Ethereum/Polygon -> deposit_hyperliquid_bridge on 42161 -> approve_hyperliquid_agent -> approve_hyperliquid_builder_fee only when get_hyperliquid_setup_status shows builder.enabled=true -> get_hyperliquid_setup_status before place_hyperliquid_perps_order',
+          'actions --provider hyperliquid -> get_hyperliquid_funding_status -> complete_hyperliquid_onboarding for runtime-owned setup, or get_hyperliquid_onboarding_plan/prepare_hyperliquid_onboarding for operator previews -> follow nextAction with nextActionParams -> get_hyperliquid_setup_status before place_hyperliquid_perps_order',
         monetization:
           'Builder monetization is active only when the API operator configured a builder address and the builder treasury has Hyperliquid margin. When active, the main wallet signs approve_hyperliquid_builder_fee once and orders attach builder fees. When the treasury is unfunded, get_hyperliquid_setup_status can return ready=true with warning HYPERLIQUID_BUILDER_WALLET_UNFUNDED, get_hyperliquid_builder_fee_status returns monetizationEnabled=false with reason BUILDER_WALLET_UNFUNDED, and place_hyperliquid_perps_order does not require builder approval.',
         example:
           'thirdfy-agent actions --provider hyperliquid && thirdfy-agent preflight --action place_hyperliquid_perps_order --params \'{"coin":"ETH","isBuy":true,"size":0.01,"limitPx":3500,"orderType":"market"}\'',
+        ...(manifestHint || {}),
+        ...setupHints,
+        provider,
+        source: manifestHint ? 'cli_capabilities_manifest' : 'static_provider_hint',
+      };
+    }
+    if (manifestHint) return manifestHint;
+    if (provider === 'trading') {
+      return {
+        provider,
+        category: 'onchain_spot',
+        canonicalWriteAction: 'swap',
+        supportedChains: [1, 10, 130, 137, 8453, 84532, 42161, 4663],
+        laneCompatibility:
+          'Kyber quote/build is live on Ethereum, Optimism, Unichain, Polygon, Base, and Arbitrum; sponsored Kyber execution is validated on Base only. Robinhood Chain (4663) uses Li.Fi Intents for spot swaps with user-pays gas. Gnosis FX uses the fx provider via CoW.',
+        credentialUx: 'Use normal Thirdfy login/delegation; do not use this provider for Hyperliquid, Lighter, or Polymarket.',
       };
     }
     if (provider === 'lighter') {
@@ -952,6 +958,7 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
       custodyMode: match.custodyMode || null,
       description: match.description || null,
       source: 'cli_capabilities_manifest',
+      ...(match.setupHints && typeof match.setupHints === 'object' ? { setupHints: match.setupHints } : {}),
     };
   }