@thirdfy/agent-cli 0.2.73 → 0.2.75

package/CHANGELOG.md

@@ -2,7 +2,17 @@
 
 All notable changes to `@thirdfy/agent-cli` are documented here. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.2.75] - 2026-09-21
+
+### Fixed
+
+- World ID complete commands no longer attach the tracking option bundle, which duplicated `--network` and `--proof` and crashed CLI startup. Deposit begin registers `--runtime-id`, `--amount-usd`, and `--destination-address`. Chain id comes from the chains bundle. Pairs with `thirdfy-mcp` **0.0.124**.
+
+## [0.2.74] - 2026-09-21
+
+### Added
+
+- World ID deposit proof commands: `delegation world-id-begin`, `delegation world-id-complete`, `delegation world-id-deposit-begin`, `delegation world-id-deposit-complete`. Pins: `test/delegation-world-id.test.cjs`. Pairs with `thirdfy-mcp` **0.0.124** and Thirdfy API deposit receipt routes.
 
 ## [0.2.73] - 2026-09-21
 

package/README.md

@@ -40,10 +40,10 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.2.73
+## What's new in v0.2.75
 
-- Hyperliquid Circle CCTP ids `quote_hyperliquid_cctp_deposit` and `deposit_hyperliquid_cctp`. Managed execute signs those on `params.sourceChainId` with no default chain.
-- Provider hints follow API `setupHints` and `get_hyperliquid_funding_status` `nextAction` instead of hardcoded Arbitrum / Li.Fi.
+- World ID deposit proof commands load without a duplicate `--network` flag.
+- `delegation world-id-deposit-begin` accepts amount, runtime, and destination flags.
 - See [CHANGELOG.md](./CHANGELOG.md) and GitHub Releases for older versions.
 
 ## Quick start

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.2.73",
+  "version": "0.2.75",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {

package/src/cli/help.mjs

@@ -30,6 +30,10 @@ Core commands:
   thirdfy-agent delegation balance [--auth-token <token> | --owner-session-token <token>] --agent-key <key> [--chain-id <id>] [--json]
   thirdfy-agent delegation revoke [--auth-token <token> | --owner-session-token <token>] --agent-key <key> [--reason <text>] [--chain-id <id>] [--json]
   thirdfy-agent delegation redeem --agent-api-key <key> --action <id> --params <json> [--run-mode thirdfy|hybrid|agent_wallet] [--estimated-amount-usd <usd>] [--json]
+  thirdfy-agent delegation world-id-begin [--auth-token <token> | --owner-session-token <token>] --agent-key <key> [--chain-id <id>] [--json]
+  thirdfy-agent delegation world-id-complete [--auth-token <token> | --owner-session-token <token>] --agent-key <key> --proof <json> [--chain-id <id>] [--json]
+  thirdfy-agent delegation world-id-deposit-begin [--auth-token <token> | --owner-session-token <token>] --org-id <uuid> --runtime-id <uuid> [--amount-usd <usd>] [--destination-address <addr>] [--deposit-signal <id>] [--chain-id <id>] [--json]
+  thirdfy-agent delegation world-id-deposit-complete [--auth-token <token> | --owner-session-token <token>] --org-id <uuid> --proof <json> [--chain-id <id>] [--json]
   thirdfy-agent managed wallet init [--auth-token <token> | --owner-session-token <token>] [--chain-id <id>] [--json]
   thirdfy-agent managed wallet grant [--auth-token <token> | --owner-session-token <token>] --agent-key <key> --token-address <addr> --max-usd-per-day <usd> [--chain-id <id>] [--period-duration <sec>] [--expiry-seconds <sec>] [--json]
   thirdfy-agent managed setup [--auth-token <token> | --owner-session-token <token>] --agent-key <key> [--run-mode thirdfy|hybrid|agent_wallet] [--token-address <addr>] [--max-usd-per-day <usd>] [--chain-id <id>] [--json]

package/src/cli/manifest.mjs

@@ -412,6 +412,34 @@ export const CLI_MANIFEST = [
     options: ['auth', 'delegation'],
     description: 'Revoke delegation',
   },
+  {
+    path: ['delegation', 'world-id-begin'],
+    handler: 'commandDelegationWorldIdBegin',
+    tier: 'online',
+    options: ['auth', 'delegation', 'chains'],
+    description: 'Begin World ID proof for an agent delegation',
+  },
+  {
+    path: ['delegation', 'world-id-complete'],
+    handler: 'commandDelegationWorldIdComplete',
+    tier: 'online',
+    options: ['auth', 'delegation', 'chains'],
+    description: 'Complete World ID proof for an agent delegation',
+  },
+  {
+    path: ['delegation', 'world-id-deposit-begin'],
+    handler: 'commandDelegationWorldIdDepositBegin',
+    tier: 'online',
+    options: ['auth', 'delegation', 'chains'],
+    description: 'Begin World ID deposit proof for an organization',
+  },
+  {
+    path: ['delegation', 'world-id-deposit-complete'],
+    handler: 'commandDelegationWorldIdDepositComplete',
+    tier: 'online',
+    options: ['auth', 'delegation', 'chains'],
+    description: 'Complete World ID deposit proof for an organization',
+  },
   {
     path: ['delegation', 'redeem'],
     handler: 'commandDelegationRedeem',

package/src/cli/options/delegation.mjs

@@ -20,5 +20,11 @@ export function attachDelegationOptions(cmd) {
     .option('--verify', 'verify on-chain')
     .option('--include-onchain', 'include on-chain data')
     .option('--onchain', 'alias for include on-chain')
-    .option('--reason <text>', 'revoke reason');
+    .option('--reason <text>', 'revoke reason')
+    .option('--org-id <id>', 'EarnOrg organization id')
+    .option('--runtime-id <id>', 'EarnOrg runtime id')
+    .option('--amount-usd <usd>', 'deposit amount in USD')
+    .option('--destination-address <addr>', 'agent destination address')
+    .option('--deposit-signal <signal>', 'deposit proof signal (deposit:...)')
+    .option('--proof <json>', 'World ID proof JSON');
 }

package/src/commands/delegation.mjs

@@ -326,6 +326,101 @@ async function commandDelegationBalance(ctx, flags, capabilities) {
 }
 
 
+async function commandDelegationWorldIdBegin(ctx, flags, capabilities) {
+  const authHeaders = buildOwnerAuthHeaders(
+    flags,
+    'Missing --auth-token/--owner-session-token (or THIRDFY_AUTH_TOKEN/THIRDFY_OWNER_SESSION_TOKEN) for delegation world-id-begin'
+  );
+  const payload = {
+    agentKey: requireFlag(flags, 'agentKey', 'Missing --agent-key'),
+    chainId: Number(flags.chainId || 8453),
+  };
+  const response = await apiPost(ctx, '/api/v1/agent/delegation/world-id/begin', payload, {
+    ...authHeaders,
+  });
+  const success = Boolean(response?.success !== false);
+  printEnvelope({
+    success,
+    code: success ? 'DELEGATION_WORLD_ID_BEGIN_OK' : 'DELEGATION_WORLD_ID_BEGIN_FAILED',
+    message: response?.message || (success ? 'World ID agent challenge started' : 'World ID agent begin failed'),
+    data: response,
+    meta: { apiBase: ctx.apiBase, capabilitiesVersion: capabilities?.contractVersion || null },
+  });
+}
+
+async function commandDelegationWorldIdComplete(ctx, flags, capabilities) {
+  const authHeaders = buildOwnerAuthHeaders(
+    flags,
+    'Missing --auth-token/--owner-session-token (or THIRDFY_AUTH_TOKEN/THIRDFY_OWNER_SESSION_TOKEN) for delegation world-id-complete'
+  );
+  const payload = {
+    agentKey: requireFlag(flags, 'agentKey', 'Missing --agent-key'),
+    chainId: Number(flags.chainId || 8453),
+    proof: parseJsonFlag(flags, 'proof'),
+  };
+  const response = await apiPost(ctx, '/api/v1/agent/delegation/world-id/complete', payload, {
+    ...authHeaders,
+  });
+  const success = Boolean(response?.success !== false);
+  printEnvelope({
+    success,
+    code: success ? 'DELEGATION_WORLD_ID_COMPLETE_OK' : 'DELEGATION_WORLD_ID_COMPLETE_FAILED',
+    message: response?.message || (success ? 'World ID agent proof recorded' : 'World ID agent complete failed'),
+    data: response,
+    meta: { apiBase: ctx.apiBase, capabilitiesVersion: capabilities?.contractVersion || null },
+  });
+}
+
+async function commandDelegationWorldIdDepositBegin(ctx, flags, capabilities) {
+  const authHeaders = buildOwnerAuthHeaders(
+    flags,
+    'Missing --auth-token/--owner-session-token (or THIRDFY_AUTH_TOKEN/THIRDFY_OWNER_SESSION_TOKEN) for delegation world-id-deposit-begin'
+  );
+  const payload = {
+    orgId: requireFlag(flags, 'orgId', 'Missing --org-id'),
+    chainId: Number(flags.chainId || 8453),
+  };
+  if (flags.runtimeId) payload.runtimeId = String(flags.runtimeId).trim();
+  if (flags.amountUsd != null) payload.amountUsd = Number(flags.amountUsd);
+  if (flags.destinationAddress) payload.destinationAddress = String(flags.destinationAddress).trim();
+  if (flags.depositSignal) payload.depositSignal = String(flags.depositSignal).trim();
+  if (flags.idempotencyKey) payload.idempotencyKey = String(flags.idempotencyKey).trim();
+  const response = await apiPost(ctx, '/api/v1/agent/delegation/world-id/deposit/begin', payload, {
+    ...authHeaders,
+  });
+  const success = Boolean(response?.success !== false);
+  printEnvelope({
+    success,
+    code: success ? 'DELEGATION_WORLD_ID_DEPOSIT_BEGIN_OK' : 'DELEGATION_WORLD_ID_DEPOSIT_BEGIN_FAILED',
+    message: response?.message || (success ? 'World ID deposit challenge started' : 'World ID deposit begin failed'),
+    data: response,
+    meta: { apiBase: ctx.apiBase, capabilitiesVersion: capabilities?.contractVersion || null },
+  });
+}
+
+async function commandDelegationWorldIdDepositComplete(ctx, flags, capabilities) {
+  const authHeaders = buildOwnerAuthHeaders(
+    flags,
+    'Missing --auth-token/--owner-session-token (or THIRDFY_AUTH_TOKEN/THIRDFY_OWNER_SESSION_TOKEN) for delegation world-id-deposit-complete'
+  );
+  const payload = {
+    orgId: requireFlag(flags, 'orgId', 'Missing --org-id'),
+    chainId: Number(flags.chainId || 8453),
+    proof: parseJsonFlag(flags, 'proof'),
+  };
+  const response = await apiPost(ctx, '/api/v1/agent/delegation/world-id/deposit/complete', payload, {
+    ...authHeaders,
+  });
+  const success = Boolean(response?.success !== false);
+  printEnvelope({
+    success,
+    code: success ? 'DELEGATION_WORLD_ID_DEPOSIT_COMPLETE_OK' : 'DELEGATION_WORLD_ID_DEPOSIT_COMPLETE_FAILED',
+    message: response?.message || (success ? 'World ID deposit proof recorded' : 'World ID deposit complete failed'),
+    data: response,
+    meta: { apiBase: ctx.apiBase, capabilitiesVersion: capabilities?.contractVersion || null },
+  });
+}
+
 async function commandDelegationRedeem(ctx, flags, capabilities) {
   const selectedRunMode = getEffectiveRunMode(ctx, flags);
   if (!['thirdfy', 'hybrid', 'agent_wallet'].includes(selectedRunMode)) {
@@ -350,6 +445,10 @@ async function commandDelegationRedeem(ctx, flags, capabilities) {
     commandDelegationInspect,
     commandDelegationRevoke,
     commandDelegationBalance,
+    commandDelegationWorldIdBegin,
+    commandDelegationWorldIdComplete,
+    commandDelegationWorldIdDepositBegin,
+    commandDelegationWorldIdDepositComplete,
     commandDelegationRedeem,
   };
 }