@thirdfy/agent-cli 0.2.83 → 0.2.84

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `@thirdfy/agent-cli` are documented here. The format is b
 
 ## Unreleased
 
+## [0.2.84] - 2026-10-10
+
+### Added
+
+- **Bermuda private actions and `private: true`.** Provider hints list `bermuda_stealth_exit`, `bermuda_stealth_swap` and `bermuda_sweep_burners`, the trading hint documents `private: true` on `swap`, and the earn hint documents `private: true` on `deposit_earn_position` / `withdraw_earn_position` (Thirdfy API: private swap on a fresh burner where a Bermuda pool exists; refused rather than run publicly elsewhere). `docs/providers/bermuda.md` covers the private writes.
+
+### Fixed
+
+- **Private writes no longer fail the public balance check.** `run` checked the execution wallet's `tokenIn` balance before a write, so `swap` with `private: true` and `bermuda_stealth_swap` stopped with `INSUFFICIENT_FUNDS` although they spend the shielded balance. Funding checks now skip `private: true` and every Bermuda write except `bermuda_deposit`. Pin: `test/funding-token-in.test.cjs`.
+
 ## [0.2.83] - 2026-10-08
 
 ### Fixed

package/README.md

@@ -40,10 +40,10 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.2.83
+## What's new in v0.2.84
 
-- **`preflight --run-mode agent_wallet` checks the action, not just the wallet.** The CLI sends `action` and `params` to the API, which checks agent policy, limits and venue readiness (Thirdfy API 3.19.4). A venue that is not ready (for example `HYPERLIQUID_DEPOSIT_REQUIRED`) returns `PREFLIGHT_BLOCKED` with `blockingReasons` and `venueReadiness`, matching `venue readiness <venue>`.
-- **`data.policyEvaluated`** is always present, and venue actions report `data.executionVenue` (where the order settles, next to the chain the wallet was looked up on). `run` is unchanged.
+- **Private actions (Bermuda, Base Sepolia).** Hints cover `bermuda_stealth_exit`, `bermuda_stealth_swap` and `bermuda_sweep_burners`, plus `private: true` on `swap`, `deposit_earn_position` and `withdraw_earn_position` (Thirdfy API: the action runs from the shielded balance on a fresh burner where a Bermuda pool exists, or is refused; it never falls back to a public action). See [docs/providers/bermuda.md](./docs/providers/bermuda.md).
+- **`run` no longer blocks private writes on the public balance check.** `private: true` and Bermuda writes (except `bermuda_deposit`) spend the shielded balance, so the execution wallet's `tokenIn` balance is not checked.
 - See [CHANGELOG.md](./CHANGELOG.md) and GitHub Releases for older versions.
 
 ## Quick start

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.2.83",
+  "version": "0.2.84",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {

package/src/core/fundingTokenIn.mjs

@@ -24,11 +24,21 @@ const POSITION_EXIT_ACTIONS = new Set([
   'dogeos_laika_claim',
 ]);
 
+/**
+ * Shielded spends pay from the Bermuda pool, not the execution wallet: `private: true` on any action,
+ * and every Bermuda write except the public deposit into the pool.
+ */
+function spendsShieldedFunds(params, actionId) {
+  if (params.private === true) return true;
+  return actionId.startsWith('bermuda_') && actionId !== 'bermuda_deposit';
+}
+
 export function resolveTokenInForFunding(params, action) {
   if (!params || typeof params !== 'object') return '';
+  const actionId = normalizeActionKey(action);
+  if (spendsShieldedFunds(params, actionId)) return '';
   const explicit = String(params.tokenIn || '').trim();
   if (explicit) return explicit;
-  const actionId = normalizeActionKey(action);
   if (NATIVE_ETH_SPEND_ACTIONS.has(actionId)) return '';
   if (POSITION_EXIT_ACTIONS.has(actionId)) return '';
   if (params.amountEth != null && String(params.amountEth).trim() !== '') return '';

package/src/runtime/providerHints.mjs

@@ -127,7 +127,7 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
         canonicalWriteAction: 'swap',
         supportedChains: [1, 10, 130, 137, 8453, 84532, 42161, 4663],
         laneCompatibility:
-          'Kyber quote/build is live on Ethereum, Optimism, Unichain, Polygon, Base, and Arbitrum; sponsored Kyber execution is validated on Base only. Robinhood Chain (4663) uses Li.Fi Intents for spot swaps with user-pays gas. Gnosis FX uses the fx provider via CoW.',
+          'Kyber quote/build is live on Ethereum, Optimism, Unichain, Polygon, Base, and Arbitrum; sponsored Kyber execution is validated on Base only. Robinhood Chain (4663) uses Li.Fi Intents for spot swaps with user-pays gas. Gnosis FX uses the fx provider via CoW. Pass private: true to swap from the shielded (Bermuda) balance on a fresh burner where a Bermuda pool exists (Base Sepolia 84532 today); it fails instead of falling back to a public swap.',
         credentialUx: 'Use normal Thirdfy login/delegation; do not use this provider for Hyperliquid, Lighter, or Polymarket.',
       };
     }
@@ -512,7 +512,7 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
         ],
         orderManagementActions: ['deposit_earn_position', 'withdraw_earn_position', 'claim_earn_rewards'],
         laneCompatibility:
-          'Generic earn writes use deposit_earn_position / withdraw_earn_position on normal Thirdfy policy/delegation rails; Yield.xyz incentive claims use claim_earn_rewards (no amount; optional passthrough from get_earn_position.claimableRewards). Routing selects Morpho, Aave, Curve, Vaults.fyi, or Yield.xyz adapters per provider/opportunity.',
+          'Generic earn writes use deposit_earn_position / withdraw_earn_position on normal Thirdfy policy/delegation rails; Yield.xyz incentive claims use claim_earn_rewards (no amount; optional passthrough from get_earn_position.claimableRewards). Routing selects Morpho, Aave, Curve, Vaults.fyi, or Yield.xyz adapters per provider/opportunity. With private: true (deposit_earn_position / withdraw_earn_position) the position is entered or exited from the shielded (Bermuda) USDC balance on allowlisted vaults where a Bermuda pool exists (Base Sepolia MetaMorpho today); a private withdraw without amount exits everything; otherwise it is refused, never run publicly.',
       };
     }
     if (provider === 'capyfi') {
@@ -817,10 +817,13 @@ export function createProviderHints({ getNegotiatedCapabilitiesCache }) {
           'bermuda_transfer',
           'bermuda_withdraw',
           'bermuda_stealth_earn',
+          'bermuda_stealth_exit',
+          'bermuda_stealth_swap',
+          'bermuda_sweep_burners',
         ],
         supportedChains: [84532],
         laneCompatibility:
-          'Base Sepolia shielded USDC lab rail. Catalog is flag-gated on the API host. Deposit is Privy-direct from the execution wallet. Transfer, withdraw, and stealth earn use the Bermuda relayer. Max write size is capped at 5 USD in catalog policy.',
+          'Base Sepolia shielded accounts (USDC, WETH, MetaMorpho vault shares). Catalog is flag-gated on the API host. Deposit is sent from the execution wallet; every other write is proven and relayed, so the execution wallet never appears: transfer, withdraw, private vault entry/exit (stealth earn/exit), private swap (stealth swap, best of Thirdfy routes and Uniswap v3, fresh burner per trade) and burner sweep. The regular swap takes private: true for the same private swap. Writes are capped at 5 USD; the sweep has no cap. Private writes bill the write_private tier and private swaps carry a privacy fee. Responses include privacyNotes.',
         example:
           'thirdfy-agent run --action get_bermuda_setup_status --params \'{"chainId":84532}\' --provider bermuda --json',
       };