@thirdfy/agent-cli 0.2.79 → 0.2.81

package/CHANGELOG.md

@@ -4,6 +4,27 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## Unreleased
 
+## [0.2.81] - 2026-10-01
+
+### Added
+
+- **`dogeos-laika-sell-token`** is inferred as provider `dogeos-laika` for catalog rows without a `providerId`, like `dogeos-laika-buy-token`. The action ships in Thirdfy API 3.18.1 (`tokenAddress`, `tokenAmountRaw` in raw 18-decimal units, optional `minDogeWei`, `maxSlippageBps` default 100).
+- **`src/core/chainRegistry.mjs`**: verified chain facts only: Base 8453 (`https://mainnet.base.org`) and DogeOS 6281971 (RPC `https://rpc.testnet.dogeos.com`, user-paid DOGE gas, faucet link). Other chains need `--rpc-url` or `RPC_URL`.
+
+### Fixed
+
+- **`wallet submit` broadcast on Base for every chain.** It used `https://mainnet.base.org` (or `BASE_RPC_URL` / `RPC_URL`) whatever `--chain-id` said, and `--chain-id` itself was rejected as an unknown option although help listed it. It now accepts `--chain-id`; without it, the chain comes from the signed transaction, and a `--chain-id` that differs from the signed transaction fails with `CHAIN_ID_MISMATCH`. The RPC is `--rpc-url` first. On Base (or no chain) the order is unchanged: `BASE_RPC_URL`, `BASE_RPC_HTTP_URL`, `RPC_URL`, then `https://mainnet.base.org`. On any other chain it is `RPC_URL`, then the chain registry; `BASE_RPC_URL` is never used off Base. With none of these it fails with `RPC_URL_REQUIRED`. `doctor self` resolves its RPC the same way, accepts `--chain-id`, and checks that the RPC is on that chain.
+- **`run --run-mode self --broadcast` / `self-exec` signed and broadcast through a Base RPC on every chain.** It now resolves the RPC for the transaction's chain the same way as `wallet submit`.
+- **Gas note was always "Network gas may be sponsored".** `help onboarding` and `doctor auth` now take `--chain-id`; on a user-pays chain (DogeOS 6281971) they say gas is paid in native DOGE by the sending wallet and point to the faucet. Without a chain, the note names the user-pays chains. Pin: `test/dogeos-onboarding.test.cjs`.
+- **DogeOS quickstart and provider runbook** now start with email onboarding (`login email`, then `--code <otp> --accept-terms --key-name`, which saves the agent key), warn not to use `managed wallet init` for `agent_wallet` (it creates a separate custodial delegation wallet), say the faucet also gives 100 test USDC, explain that Barkswap swaps are ERC-20 only so the first swap is USDC to WDOGE, and add a `dogeos-laika-sell-token` example after the buy.
+
+## [0.2.80] - 2026-10-01
+
+### Fixed
+
+- **`actions --chain-id <id>` now filters.** It returned the whole catalog (359 rows) for any chain. It now keeps rows whose `supportedChains` includes the chain, plus rows with no `supportedChains` (chain-agnostic; several offchain venues have none yet). `run` and `preflight` are unchanged. Pin: `test/dogeos-provider-discovery.test.cjs`.
+- **DogeOS quickstart and provider runbook used an action that does not exist.** `barkswap.swap` with `amountInRaw` failed with `PARAMS_SCHEMA_INVALID`. The docs now use the live catalog names (`dogeos-barkswap-get-quote`, `dogeos-barkswap-execute-swap` with `amountIn` in token units, `dogeos-laika-buy-token` with `dogeAmountWei`), list all 19 DogeOS actions across `dogeos-barkswap`, `dogeos-laika` and `dogeos-ecosystem`, and add the public testnet facts: RPC, explorer, faucet, WDOGE/USDC addresses, user-paid DOGE gas, and the allowlist 403.
+
 ## [0.2.79] - 2026-09-30
 
 ### Added

package/README.md

@@ -40,13 +40,11 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.2.79
+## What's new in v0.2.81
 
-- **`thirdfy-agent signals`** lists the data provider apps (CoinMarketCap, Nansen, Allora, ...) and the signals they publish: what each measures, its fields and units, freshness, roles, the read that returns it, credits per call and attribution. Filter with `--provider <id>` and `--role direction|filter|context`; add `--json` for the envelope. No key is needed to browse.
-- **`thirdfy-agent actions --data-category <category[,category]>`** keeps only data reads of those categories (`market_data`, `signal`, `research`, `wallet`).
-- **`run` shows a data read's typed reading first** in human mode (`typed`, `parseIssues`, `freshness`, `attribution`), then the full result. `--json` is unchanged.
-- Large `--json` output piped to another program is no longer cut at the pipe buffer size. Exit codes are unchanged.
-- Signals and typed readings need Thirdfy API 3.17.0 or later; an older API lists no signals.
+- **DogeOS onboarding**: the quickstart starts with `login email`, warns not to use `managed wallet init` for `agent_wallet`, funds gas and test USDC from the DogeOS faucet, starts with a USDC→WDOGE swap, and adds `dogeos-laika-sell-token`. See [docs/dogeos-quickstart.md](./docs/dogeos-quickstart.md).
+- **Chain-aware gas notes**: `help onboarding --chain-id` and `doctor auth --chain-id` say when the sending wallet pays gas (DogeOS) and link the faucet.
+- **`wallet submit --chain-id` works**, reads the chain from the signed transaction when `--chain-id` is omitted, and picks the RPC for that chain. Base keeps its order (`BASE_RPC_URL`, `BASE_RPC_HTTP_URL`, `RPC_URL`); other chains use `--rpc-url`, then `RPC_URL`, then the built-in DogeOS RPC. Self-mode broadcast (`self-exec`) uses the same rule. A Base RPC is never used on DogeOS.
 - See [CHANGELOG.md](./CHANGELOG.md) and GitHub Releases for older versions.
 
 ## Quick start

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.2.79",
+  "version": "0.2.81",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {

package/src/cli/help.mjs

@@ -11,7 +11,7 @@ Core commands:
   thirdfy-agent login email <address> [--code <otp>] [--accept-terms] [--key-name <name>] [--agent-key <key>] [--not-interactive|--ni] [--json]
   thirdfy-agent logout [--all] [--clear-agent-key] [--json]
   thirdfy-agent whoami [--json]
-  thirdfy-agent help onboarding [--json]
+  thirdfy-agent help onboarding [--chain-id <id>] [--json]
   thirdfy-agent catalogs list [--json]
   thirdfy-agent actions [--catalog <id>] [--provider <id>] [--agent-api-key <key>] [--chain-id <id>] [--run-mode <mode>] [--json]
   thirdfy-agent data summary --agent-key <key> [--chain-id <id>] [--network <id>] [--category trading|yield|prediction] [--limit <n>] [--json]
@@ -69,8 +69,8 @@ Core commands:
   thirdfy-agent preflight --agent-api-key <key> --action <id> --params <json> [--run-mode <mode>] [--json]
   thirdfy-agent run --agent-api-key <key> --action <id> --params <json> [--run-mode <mode>] [--broadcast] [--idempotency-key <key>] [--json]
   thirdfy-agent self-exec --agent-api-key <key> --action <id> --params <json> --wallet-address <addr> --ows-wallet-name <name> [--rpc-url <url>] [--effect-check strict|relaxed|off] [--json]
-  thirdfy-agent doctor self [--wallet-address <addr>] [--ows-wallet-name <name>] [--rpc-url <url>] [--json]
-  thirdfy-agent doctor auth [--json]
+  thirdfy-agent doctor self [--wallet-address <addr>] [--ows-wallet-name <name>] [--chain-id <id>] [--rpc-url <url>] [--json]
+  thirdfy-agent doctor auth [--chain-id <id>] [--json]
   thirdfy-agent doctor certify execution [--no-write] [--run-mode <mode>] [--schema-digest <digest>] [--required-actions <csv>] [--json]
   thirdfy-agent jeff preflight --agent-api-key <key> --action <id> --params <json> [--run-mode <mode>] [--json]
   thirdfy-agent jeff trade --agent-api-key <key> --action <id> --params <json> [--run-mode <mode>] [--json]

package/src/cli/manifest.mjs

@@ -60,8 +60,8 @@ export const CLI_MANIFEST = [
   },
   { path: ['logout'], handler: 'commandLogout', options: ['bootstrap'], description: 'Logout and clear local credentials' },
   { path: ['whoami'], handler: 'commandWhoami', description: 'Show masked local identity' },
-  { path: ['doctor', 'self'], handler: 'commandDoctorSelf', options: ['wallet'], description: 'Self-mode wallet diagnostics' },
-  { path: ['doctor', 'auth'], handler: 'commandDoctorAuth', description: 'Auth and onboarding diagnostics' },
+  { path: ['doctor', 'self'], handler: 'commandDoctorSelf', options: ['wallet', 'chains'], description: 'Self-mode wallet diagnostics' },
+  { path: ['doctor', 'auth'], handler: 'commandDoctorAuth', options: ['chains'], description: 'Auth and onboarding diagnostics' },
   {
     path: ['doctor', 'certify', 'execution'],
     handler: 'commandDoctorCertifyExecution',
@@ -72,11 +72,13 @@ export const CLI_MANIFEST = [
   {
     path: ['help', 'onboarding'],
     handler: 'commandHelpOnboarding',
+    options: ['chains'],
     description: 'Structured onboarding help (JSON envelope)',
   },
   {
     path: ['onboarding', 'help'],
     handler: 'commandHelpOnboarding',
+    options: ['chains'],
     description: 'Structured onboarding help (JSON envelope)',
   },
   { path: ['wallet', 'list'], handler: 'commandWalletList', description: 'List configured wallets' },
@@ -592,7 +594,7 @@ export const CLI_MANIFEST = [
     path: ['wallet', 'submit'],
     handler: 'commandWalletSubmit',
     tier: 'online',
-    options: ['wallet'],
+    options: ['wallet', 'chains'],
     description: 'Submit signed transaction',
   },
   {

package/src/commands/bootstrap.mjs

@@ -153,12 +153,12 @@ async function commandConfigSet(ctx, flags) {
 }
 
 
-async function commandHelpOnboarding(ctx, _flags) {
+async function commandHelpOnboarding(ctx, flags) {
   printEnvelope({
     success: true,
     code: 'ONBOARDING_HELP_OK',
     message: 'Thirdfy onboarding help',
-    data: buildOnboardingHelp(ctx),
+    data: buildOnboardingHelp(ctx, flags),
     meta: { apiBase: ctx.apiBase },
   });
 }

package/src/commands/discovery.mjs

@@ -3,6 +3,7 @@ import { apiGet, apiPost } from '../core/http.mjs';
 import { extractActions, getCachedActionsCatalog } from '../core/context.mjs';
 import { getEffectiveRunMode } from '../core/runMode.mjs';
 import { formatCreditsBalanceSummary } from '../lib/creditsUsdSummary.mjs';
+import { filterActionsByChain } from '../runtime/actions/chainFilter.mjs';
 export function createDiscoveryCommands({ printEnvelope, applyActionFilters, getTradingProviderHint, resolveChainSupport, getAuthToken, resolveAgentApiKey }) {
 async function commandCatalogsList(ctx, flags, capabilities) {
   const response = await apiGet(ctx, '/api/v1/agent/actions/catalog');
@@ -32,10 +33,10 @@ async function commandCatalogsList(ctx, flags, capabilities) {
 
 async function commandActions(ctx, flags, capabilities) {
   const policyAware = Boolean(flags.agentApiKey);
-  const actions = applyActionFilters(await getCachedActionsCatalog(ctx, flags), flags);
+  const chainIdFilter = Number(flags.chainId || 0) || undefined;
+  const actions = filterActionsByChain(applyActionFilters(await getCachedActionsCatalog(ctx, flags), flags), chainIdFilter);
   const providerHint = getTradingProviderHint(flags.provider);
   const effectiveRunMode = getEffectiveRunMode(ctx, flags);
-  const chainIdFilter = Number(flags.chainId || 0) || undefined;
   const chainSupport = resolveChainSupport(capabilities, chainIdFilter, effectiveRunMode);
   printEnvelope({
     success: true,

package/src/commands/doctor.mjs

@@ -3,6 +3,7 @@ import { requireFlag } from '../core/args.mjs';
 import { apiGet, requestWithRouteFallback } from '../core/http.mjs';
 import { loadProfileConfig, getProfileConfigPath, getCachedActionsCatalog } from '../core/context.mjs';
 import { DEFAULT_API_BASE, PROFILE_DEFAULTS } from '../core/constants.mjs';
+import { describeChainGas, parseChainIdFlag, resolveChainRpcUrl } from '../core/chainRegistry.mjs';
 import { exitAfterOutput } from '../core/envelope.mjs';
 import { normalizeRunMode, normalizeManagedRunMode } from '../core/runMode.mjs';
 import { buildExecutionCertificationReport } from '../runtime/certification/executionCertify.mjs';
@@ -25,9 +26,7 @@ export function createDoctorCommands({
 async function commandDoctorSelf(ctx, flags) {
   const walletAddress = String(flags.walletAddress || process.env.MARKET_MAKER_WALLET_ADDRESS || '').trim();
   const owsWalletName = String(flags.owsWalletName || process.env.OWS_WALLET_NAME || '').trim();
-  const rpcUrl = String(
-    flags.rpcUrl || process.env.BASE_RPC_URL || process.env.BASE_RPC_HTTP_URL || process.env.RPC_URL || 'https://mainnet.base.org'
-  ).trim();
+  const rpcUrl = resolveChainRpcUrl({ chainId: flags.chainId, rpcUrl: flags.rpcUrl });
   const passphrasePresent = Boolean(String(process.env.OWS_PASSPHRASE || process.env.OWS_API_KEY || '').trim());
   const checks = [];
 
@@ -62,10 +61,23 @@ async function commandDoctorSelf(ctx, flags) {
   }
 
   try {
+    if (!rpcUrl) throw new Error(`no known RPC for chain ${flags.chainId}; pass --rpc-url <url>`);
     const ethers = await loadEthers();
     const provider = new ethers.JsonRpcProvider(rpcUrl);
     const block = await provider.getBlockNumber();
     checks.push({ name: 'rpc-connectivity', ok: Number.isFinite(block), detail: `latestBlock=${block}` });
+    const expectedChainId = parseChainIdFlag(flags.chainId);
+    if (expectedChainId) {
+      const network = await provider.getNetwork();
+      const rpcChainId = Number(network.chainId);
+      checks.push({
+        name: 'rpc-chain-id',
+        ok: rpcChainId === expectedChainId,
+        detail: rpcChainId === expectedChainId
+          ? `chainId=${rpcChainId}`
+          : `RPC is on chain ${rpcChainId}, expected ${expectedChainId}; pass --rpc-url for chain ${expectedChainId}`,
+      });
+    }
   } catch (error) {
     checks.push({ name: 'rpc-connectivity', ok: false, detail: error?.message || 'rpc check failed' });
   }
@@ -91,7 +103,8 @@ async function commandDoctorSelf(ctx, flags) {
   if (!ok) await exitAfterOutput(1);
 }
 
-function buildOnboardingHelp(ctx) {
+function buildOnboardingHelp(ctx, flags = {}) {
+  const chainId = Number(flags?.chainId || 0) || null;
   return {
     title: 'Thirdfy Agent CLI onboarding',
     summary: 'Use email OTP, wallet-sign, or existing credentials to create owner auth, wallets, and hidden agent execution credentials. Fresh solo profiles default to agent_wallet.',
@@ -140,8 +153,9 @@ function buildOnboardingHelp(ctx) {
         'thirdfy-agent login email user@example.com --code 123456 --accept-terms --ni (place --ni after the subcommand so it is not parsed as a flag value)',
       rule: 'Commands must fail fast instead of waiting for prompts when required input is missing.',
     },
+    gas: describeChainGas(chainId),
     executionModes: {
-      agent_wallet: 'Solo managed server-wallet execution through /execution-wallet + /execute; no subscriber binding when owner userDid matches. Network gas may be sponsored, but Thirdfy credits/free-quota gates still apply.',
+      agent_wallet: `Solo managed server-wallet execution through /execution-wallet + /execute; no subscriber binding when owner userDid matches. ${describeChainGas(chainId)}`,
       self: 'BYOW/OWS local signing through build-tx, wallet sign, and wallet submit.',
       hybrid: 'Primary self or agent_wallet execution with optional Thirdfy mirror validation.',
       thirdfy: 'Publisher/fanout execute-intent; requires active subscriber/delegation bindings for writes.',
@@ -159,7 +173,7 @@ function buildOnboardingHelp(ctx) {
   };
 }
 
-async function commandDoctorAuth(ctx, _flags) {
+async function commandDoctorAuth(ctx, flags = {}) {
   const config = loadProfileConfig();
   const auth = config.auth && typeof config.auth === 'object' ? config.auth : {};
   const agent = config.agent && typeof config.agent === 'object' ? config.agent : {};
@@ -220,7 +234,7 @@ async function commandDoctorAuth(ctx, _flags) {
       name: 'thirdfy-credits-vs-gas-sponsorship',
       optional: true,
       ok: true,
-      detail: 'Thirdfy credits/free quota gate action access; Privy gas sponsorship only pays network gas when chain/action sponsorship is enabled.',
+      detail: `Thirdfy credits/free quota gate action access; Privy gas sponsorship only pays network gas when chain/action sponsorship is enabled. ${describeChainGas(flags?.chainId)}`,
     },
   ];
   const ok = checks.every((entry) => entry.optional || entry.ok);
@@ -230,7 +244,7 @@ async function commandDoctorAuth(ctx, _flags) {
     message: ok ? 'Auth profile is ready' : 'Auth profile needs setup',
     data: {
       checks,
-      help: buildOnboardingHelp(ctx),
+      help: buildOnboardingHelp(ctx, flags),
     },
     meta: { apiBase: ctx.apiBase },
   });

package/src/commands/wallet.mjs

@@ -1,6 +1,8 @@
 import { requireFlag } from '../core/args.mjs';
 import { createCliError, exitAfterOutput } from '../core/envelope.mjs';
 import { loadProfileConfig } from '../core/context.mjs';
+import { DEFAULT_CHAIN_ID, parseChainIdFlag, resolveChainRpcUrl } from '../core/chainRegistry.mjs';
+import { readSignedTxChainId } from '../core/signedTx.mjs';
 
 export function createWalletCommands(deps) {
   const {
@@ -85,10 +87,27 @@ async function commandWalletSubmit(ctx, flags, capabilities) {
   if (!signedTxHex) {
     throw createCliError('MISSING_SIGNED_TX', 'wallet submit requires --signed-tx-hex');
   }
-  const chainId = Number(flags.chainId || 8453);
-  const rpcUrl = String(
-    flags.rpcUrl || process.env.BASE_RPC_URL || process.env.BASE_RPC_HTTP_URL || process.env.RPC_URL || 'https://mainnet.base.org'
-  ).trim();
+  const flagChainId = parseChainIdFlag(flags.chainId);
+  if (Number.isNaN(flagChainId)) {
+    throw createCliError('INVALID_CHAIN_ID', `wallet submit --chain-id must be a positive integer (got ${flags.chainId})`);
+  }
+  // The signed tx carries its chain id (EIP-155 / typed tx). Use it when --chain-id is absent,
+  // and refuse a mismatch so a DogeOS-signed tx is never sent to a Base RPC (or vice versa).
+  const txChainId = readSignedTxChainId(signedTxHex);
+  if (flagChainId && txChainId && flagChainId !== txChainId) {
+    throw createCliError(
+      'CHAIN_ID_MISMATCH',
+      `wallet submit --chain-id ${flagChainId} does not match the signed transaction chain id ${txChainId}`
+    );
+  }
+  const chainId = flagChainId || txChainId || DEFAULT_CHAIN_ID;
+  const rpcUrl = resolveChainRpcUrl({ chainId, rpcUrl: flags.rpcUrl });
+  if (!rpcUrl) {
+    throw createCliError(
+      'RPC_URL_REQUIRED',
+      `wallet submit has no known RPC for chain ${chainId}; pass --rpc-url <url> for that chain`
+    );
+  }
   const txHash = await submitSignedTx({ rpcUrl, chainId, signedTxHex });
   printEnvelope({
     success: true,

package/src/core/chainRegistry.mjs

@@ -0,0 +1,82 @@
+// Chain facts the CLI needs locally: a public RPC for BYOW submit / balance reads, and
+// whether network gas is paid by the sending wallet (no sponsorship on that chain).
+// The API capabilities document stays the source of truth for lane support.
+
+export const DEFAULT_CHAIN_ID = 8453;
+
+// Only chains whose RPC we have verified. Other chains need --rpc-url or RPC_URL.
+export const CHAIN_REGISTRY = {
+  8453: { chainKey: 'base-mainnet', displayName: 'Base', rpcUrl: 'https://mainnet.base.org', nativeSymbol: 'ETH' },
+  6281971: {
+    chainKey: 'dogeos-testnet',
+    displayName: 'DogeOS Chikyu testnet',
+    rpcUrl: 'https://rpc.testnet.dogeos.com',
+    nativeSymbol: 'DOGE',
+    userPaysGas: true,
+    faucetUrl: 'https://faucet.testnet.dogeos.com',
+  },
+};
+
+function positiveChainId(value) {
+  const n = Number(value);
+  if (!Number.isFinite(n) || n <= 0) return undefined;
+  return Math.trunc(n);
+}
+
+export function getChainInfo(chainId) {
+  const id = positiveChainId(chainId);
+  return id ? CHAIN_REGISTRY[id] || null : null;
+}
+
+/** Chains where the sending wallet pays network gas in the native token (never sponsored). */
+export function chainUserPaysGas(chainId) {
+  return Boolean(getChainInfo(chainId)?.userPaysGas);
+}
+
+/** Chain ids where the sending wallet pays gas. */
+export const USER_PAYS_GAS_CHAIN_IDS = Object.entries(CHAIN_REGISTRY)
+  .filter(([, info]) => info.userPaysGas)
+  .map(([id]) => Number(id));
+
+/**
+ * One-line gas note for a chain. Without a chain id it describes the generic case.
+ */
+export function describeChainGas(chainId) {
+  const info = getChainInfo(chainId);
+  if (info?.userPaysGas) {
+    const faucet = info.faucetUrl ? ` Fund it from ${info.faucetUrl}.` : '';
+    return `Network gas on ${info.displayName} (${positiveChainId(chainId)}) is paid in native ${info.nativeSymbol} by the sending wallet; it is not sponsored.${faucet}`;
+  }
+  const userPays = USER_PAYS_GAS_CHAIN_IDS.map((id) => `${CHAIN_REGISTRY[id].displayName} ${id}`).join(', ');
+  return `Network gas may be sponsored on supported chains, but Thirdfy credits/free-quota gates still apply. On user-pays chains (${userPays}) the sending wallet pays gas in the native token.`;
+}
+
+/**
+ * RPC for a chain. The --rpc-url flag always wins. Then:
+ * - Base (or no chain given): BASE_RPC_URL, BASE_RPC_HTTP_URL, RPC_URL, then the registry.
+ *   This is the pre-0.2.81 order, so existing Base setups keep the same RPC.
+ * - Any other chain: RPC_URL, then the registry. BASE_RPC_URL / BASE_RPC_HTTP_URL are never used.
+ * Returns '' when nothing matches; the caller asks for --rpc-url.
+ */
+export function resolveChainRpcUrl({ chainId, rpcUrl, env = process.env } = {}) {
+  const explicit = String(rpcUrl || '').trim();
+  if (explicit) return explicit;
+  const id = positiveChainId(chainId) || DEFAULT_CHAIN_ID;
+  const generic = String(env.RPC_URL || '').trim();
+  if (id === DEFAULT_CHAIN_ID) {
+    const baseEnv = String(env.BASE_RPC_URL || env.BASE_RPC_HTTP_URL || '').trim();
+    if (baseEnv) return baseEnv;
+  }
+  if (generic) return generic;
+  return getChainInfo(id)?.rpcUrl || '';
+}
+
+/**
+ * Parse a --chain-id value. Returns null when absent, a positive integer when valid,
+ * and NaN when present but not a positive integer (the caller rejects it).
+ */
+export function parseChainIdFlag(value) {
+  if (value === undefined || value === null || String(value).trim() === '') return null;
+  const n = Number(String(value).trim());
+  return Number.isInteger(n) && n > 0 ? n : NaN;
+}

package/src/core/signedTx.mjs

@@ -0,0 +1,23 @@
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+
+/**
+ * Chain id encoded in a signed raw transaction (EIP-155 / typed tx), or null when the
+ * hex does not parse or carries no chain id (legacy pre-EIP-155).
+ */
+export function readSignedTxChainId(signedTxHex) {
+  let Transaction;
+  try {
+    ({ Transaction } = require('ethers'));
+  } catch {
+    return null;
+  }
+  try {
+    const tx = Transaction.from(String(signedTxHex || '').trim());
+    const id = Number(tx.chainId);
+    return Number.isInteger(id) && id > 0 ? id : null;
+  } catch {
+    return null;
+  }
+}

package/src/runtime/actions/chainFilter.mjs

@@ -0,0 +1,13 @@
+/**
+ * `actions --chain-id <id>` keeps catalog rows that run on that chain.
+ * A row without `supportedChains` is chain-agnostic and stays.
+ */
+export function filterActionsByChain(actions, chainId) {
+  const wanted = Number(chainId || 0);
+  if (!wanted || !Array.isArray(actions)) return actions;
+  return actions.filter((action) => {
+    const chains = action?.supportedChains;
+    if (!Array.isArray(chains) || chains.length === 0) return true;
+    return chains.some((value) => Number(value) === wanted);
+  });
+}

package/src/runtime/actions/selection.mjs

@@ -77,6 +77,7 @@ function inferActionProvider(action) {
     'dogeos-laika-execute-raw': 'dogeos-laika',
     'dogeos-laika-launch-token': 'dogeos-laika',
     'dogeos-laika-buy-token': 'dogeos-laika',
+    'dogeos-laika-sell-token': 'dogeos-laika',
     'dogeos-laika-claim': 'dogeos-laika',
     'dogeos-laika-token-state': 'dogeos-laika',
     'get-governance-v2-overview': 'governance-v2',

package/src/runtime/execution/runners.mjs

@@ -14,6 +14,7 @@ import { idempotentReplayFields } from '../../core/hostedRuntimeIdempotency.mjs'
 import { withActionTimeout } from '../../core/actionTimeouts.mjs';
 import { isReadOnlyResolvedAction } from '../../core/readOnlyActions.mjs';
 import { resolveWalletExecuteChainId } from '../../core/walletExecuteChainId.mjs';
+import { resolveChainRpcUrl } from '../../core/chainRegistry.mjs';
 import { isEmptyQueuedExecuteIntent, shouldFallbackManagedReadToExecuteIntent } from './managedReadExecuteRail.mjs';
 import { createRequire } from 'module';
 
@@ -850,9 +851,10 @@ async function performSelfBroadcast(ctx, flags, resolvedAction, selfResult) {
   const chainId = Number(txd.chainId || flags.chainId || 8453);
   const walletAddress = String(flags.walletAddress || process.env.MARKET_MAKER_WALLET_ADDRESS || '').trim();
   const owsWalletName = String(flags.owsWalletName || process.env.OWS_WALLET_NAME || '').trim();
-  const rpcUrl = String(
-    flags.rpcUrl || process.env.BASE_RPC_URL || process.env.BASE_RPC_HTTP_URL || process.env.RPC_URL || 'https://mainnet.base.org'
-  ).trim();
+  const rpcUrl = resolveChainRpcUrl({ chainId, rpcUrl: flags.rpcUrl });
+  if (!rpcUrl) {
+    throw createCliError('RPC_URL_REQUIRED', `self-exec has no known RPC for chain ${chainId}; pass --rpc-url <url> for that chain`);
+  }
   if (!walletAddress) {
     throw createCliError('SIGNING_FAILED', 'Missing --wallet-address (or MARKET_MAKER_WALLET_ADDRESS) for self-exec signing.');
   }