@thirdfy/agent-cli 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to `@thirdfy/agent-cli` are documented here. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.1] - 2026-10-16
+
+A patch release: `doctor certify execution` works for agents with a narrow allowlist.
+
+### Fixed
+
+- **`doctor certify execution` no longer fails on venue writes outside the agent's allowlist** (THI-201). With an agent key, the CLI reads the agent's own action list, so bare certification flagged every venue write the agent may not call (for example `place_hyperliquid_tp_sl` or `update_lighter_leverage`) as `CATALOG_SCHEMA_UNAVAILABLE` and failed. It now checks only the venue writes the agent may call and lists the rest in `skippedVenueActions`. An allowed action with a broken schema, a `--required-actions` entry the agent can't call, and a public catalog missing a venue write all still fail.
+
 ## [0.5.0] - 2026-10-15
 
 `thirdfy-agent login` signs in with OAuth in the browser (auth.thirdfy.com, the same sign-in the MCP uses), as one agent with read access, plus trade with `--trade`. A minor version because `login` without a token flag now starts that sign-in instead of failing, and `credits balance` / `pricing quote` drop their credit counts for USD. `login email`, token flags and agent API keys work as before.

package/README.md

@@ -39,12 +39,11 @@ Run without global install:
 npx @thirdfy/agent-cli --help
 ```
 
-## What's new in v0.5.0
+## What's new in v0.5.1
 
-- **Sign in with your Thirdfy account:** `thirdfy-agent login` opens your browser at auth.thirdfy.com. You pick one agent and approve read access, and trade access with `thirdfy-agent login --trade`. The CLI then acts as that agent, refreshes the sign-in by itself, and `thirdfy-agent logout` revokes it. Disconnect it any time in Connected apps at auth.thirdfy.com.
-- **Same sign-in as the MCP:** the same consent page and the same Connected apps list as Claude, ChatGPT and Cursor.
-- **Nothing else changes:** `login email`, `--auth-token`, `--owner-session-token` and agent API keys work as before, and an explicit `--agent-api-key` always wins over the sign-in.
-- Older versions: see [CHANGELOG.md](./CHANGELOG.md).
+- **`doctor certify execution` passes for agents with a narrow allowlist.** It now checks only the venue writes your agent may call, and lists the others under `skippedVenueActions` instead of failing. Runtimes that stop on a failed certify (Hermes, OpenClaw) start again.
+- **Still fails closed:** an allowed action with a broken schema, a `--required-actions` entry the agent can't call, or a missing catalog.
+- Browser sign-in (`thirdfy-agent login`, `--trade` for writes) arrived in 0.5.0. Older versions: see [CHANGELOG.md](./CHANGELOG.md).
 
 ## Quick start
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thirdfy/agent-cli",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Thirdfy Agent CLI for onboarding, governance preflight, execute-intent, and status polling.",
   "type": "module",
   "bin": {

package/src/commands/doctor.mjs

@@ -1,7 +1,7 @@
 import { createRequire } from 'module';
 import { requireFlag } from '../core/args.mjs';
 import { apiGet, requestWithRouteFallback } from '../core/http.mjs';
-import { loadProfileConfig, getProfileConfigPath, getCachedActionsCatalog } from '../core/context.mjs';
+import { loadProfileConfig, getProfileConfigPath, getCachedActionsCatalogSnapshot } from '../core/context.mjs';
 import { DEFAULT_API_BASE, PROFILE_DEFAULTS } from '../core/constants.mjs';
 import { DEFAULT_CHAIN_ID, describeChainGas, parseChainIdFlag, pinnedRpcProvider, resolveChainRpcUrl } from '../core/chainRegistry.mjs';
 import { exitAfterOutput } from '../core/envelope.mjs';
@@ -333,9 +333,12 @@ async function commandManagedSetup(ctx, flags, capabilities) {
 
 async function commandDoctorCertifyExecution(ctx, flags) {
   let liveActions = null;
+  let catalogPolicyScoped = false;
   let catalogError = null;
   try {
-    liveActions = await getCachedActionsCatalog(ctx, flags);
+    const snapshot = await getCachedActionsCatalogSnapshot(ctx, flags);
+    liveActions = snapshot.actions;
+    catalogPolicyScoped = snapshot.policyScoped === true;
   } catch (error) {
     catalogError = {
       message: error?.message || 'Actions catalog fetch failed',
@@ -356,6 +359,7 @@ async function commandDoctorCertifyExecution(ctx, flags) {
     runMode,
     expectedSchemaDigest,
     requiredActions,
+    catalogPolicyScoped,
   });
 
   printEnvelope({
@@ -369,6 +373,7 @@ async function commandDoctorCertifyExecution(ctx, flags) {
       catalog: {
         fetched: Array.isArray(liveActions),
         actionCount: Array.isArray(liveActions) ? liveActions.length : 0,
+        policyScoped: catalogPolicyScoped,
         error: catalogError,
       },
     },

package/src/runtime/certification/executionCertify.mjs

@@ -227,6 +227,7 @@ export function buildExecutionCertificationReport({
   runMode = null,
   expectedSchemaDigest = null,
   requiredActions = [],
+  catalogPolicyScoped = false,
 } = {}) {
   const version = String(cliVersion || PACKAGE_VERSION).trim();
   const normalizedRequiredActions = parseRequiredActions(requiredActions);
@@ -259,10 +260,25 @@ export function buildExecutionCertificationReport({
     }
   }
 
+  // A keyed catalog lists only the agent's allowlist. Bare certification then checks the venue
+  // writes this agent may call; the rest are reported as skipped, not as missing schemas.
+  // An unscoped (public) catalog that lacks a venue action still fails closed.
+  const scopeToAllowlist = bareCertification && catalogFetched && catalogPolicyScoped === true;
+  const liveActionKeys = new Set();
+  for (const row of liveActions || []) {
+    for (const name of [row?.action, ...(Array.isArray(row?.aliases) ? row.aliases : [])]) {
+      if (name) liveActionKeys.add(normalizeActionKey(String(name)));
+    }
+  }
+  const skippedVenueActions = [];
   const venueActionNames =
     normalizedRequiredActions.length > 0
       ? normalizedRequiredActions.filter((action) => isWriteAction(action))
-      : VENUE_WRITE_ACTION_FIXTURES.map((fixture) => fixture.action);
+      : VENUE_WRITE_ACTION_FIXTURES.map((fixture) => fixture.action).filter((action) => {
+          if (!scopeToAllowlist || liveActionKeys.has(normalizeActionKey(action))) return true;
+          skippedVenueActions.push({ action, reason: 'NOT_ON_AGENT_ALLOWLIST' });
+          return false;
+        });
 
   const venueActions = runSchemaCompatibilityChecks(catalogByAction, venueActionNames, {
     requireLiveCatalog: bareCertification,
@@ -380,6 +396,7 @@ export function buildExecutionCertificationReport({
     commandAvailability,
     authorityInputs,
     venueActions,
+    skippedVenueActions,
     checks,
   };
 }