Release v0.1.3

.claude-plugin/marketplace.json

@@ -4,14 +4,14 @@
     "name": "Tempora Labs"
   },
   "metadata": {
-    "description": "Agent Treasury by Tempora Labs — treasury management plugin for AI agents. Open source, starting with yield on idle USDC and USDG: measured vault registry on Base, Arbitrum One and Robinhood Chain, simulation-based pre-flight, unsigned deposit and withdraw calls for your own signer or your own browser wallet. Never holds a key."
+    "description": "Agent Treasury by Tempora Labs — treasury management plugin for AI agents. Open source, starting with yield on idle USDC and USDG: measured vault registry on Base, Arbitrum One, Robinhood Chain, Ethereum, Monad and Solana, simulation-based pre-flight, unsigned deposit and withdraw calls for your own signer or your own browser wallet. Never holds a key."
   },
   "plugins": [
     {
       "name": "treasury",
       "description": "Agent Treasury by Tempora Labs — treasury management plugin for AI agents; your own wallet holds the position. Ships the earn skill: measured vault registry, simulation-based pre-flight, unsigned deposit/withdraw builders, and a local confirm page for your own wallet. Holds no keys.",
       "source": "./plugin",
-      "version": "0.1.2",
+      "version": "0.1.3",
       "category": "finance",
       "homepage": "https://temporalabs.com"
     }

.github/scripts/cli-exit.mjs

@@ -0,0 +1,183 @@
+// Runs the BUILT CLI the way callers do and checks how it exits: the exit code, how long the call took,
+// and that the answer came from the chain. Issue #122: on Windows with Node 24 the health check printed
+// a correct answer and still exited non-zero.
+//
+// Subjects: this tree's bundle, and optionally the published v0.1.2 package (where the failure was
+// first seen), given as `--subject name=<install prefix>`. Each is run directly (`node dist/treasury.mjs`)
+// and through the `treasury` bin npm installs: from cmd and PowerShell on Windows, from sh elsewhere.
+// Every call is reported before the verdict, so a red run shows each one's real exit code (with its hex
+// form, which names a Windows crash), duration and output instead of stopping at the first mismatch.
+import { spawn } from "node:child_process";
+import { createServer } from "node:http";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const WIN = process.platform === "win32";
+const ROOT = fileURLToPath(new URL("../..", import.meta.url));
+const MAX_MS = Number(process.env.CLI_EXIT_MAX_MS ?? 20000);
+const BASE_RPC = "https://mainnet.base.org";
+const EVM_ACCOUNT = "0xBBBBBbbBBb9cC5e90e3b3Af64bdAF62C37EEFFCb"; // a Base address that holds USDC; read only
+const SOLANA_ACCOUNT = "4Nd1mBQtrMJVYVfKf2PJy9NZUZdTAsp7D4xWLs4gDB4T"; // an unfunded Solana address; read only
+const VAULT_2B = "0x91BcEbA5feCB9E92d80F1845B55cC56621E9352F";
+const SLOW_MS = 15000;
+// The slow case's own ceiling. A CLI that waits for the held request instead of ending gives up on it
+// only when viem's 10 s request timeout fires; with Windows's 2 s exit backstop it ends in about 5 s.
+// Below 10 s, this ceiling fails a fix that waits for open handles, which MAX_MS alone does not.
+const SLOW_CASE_MAX_MS = 9000;
+// "0.1.10" sorts before "0.1.3" as a string; compare the numbers.
+const versionAtLeast = (v, min) => {
+  const [a, b] = [v, min].map((x) => x.split(".").map(Number));
+  for (let i = 0; i < Math.max(a.length, b.length); i++) if ((a[i] ?? 0) !== (b[i] ?? 0)) return (a[i] ?? 0) > (b[i] ?? 0);
+  return true;
+};
+
+async function rpc(method, params) {
+  const r = await fetch(BASE_RPC, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ jsonrpc: "2.0", id: 1, method, params }) });
+  return (await r.json()).result;
+}
+
+// An account with real history on the default vault: whoever the chain says owns it (it deposited).
+const owner = `0x${(await rpc("eth_call", [{ to: VAULT_2B, data: "0x8da5cb5b" }, "latest"])).slice(-40)}`;
+
+// A Base endpoint that forwards every request but holds `eth_chainId` back for SLOW_MS: the health
+// check answers without it, so the CLI exits while a request to this endpoint is still open. That is
+// the case its immediate exit exists for, and the one most likely to trip an exit-time defect.
+const slow = createServer((req, res) => {
+  let body = "";
+  req.on("data", (c) => (body += c));
+  req.on("end", async () => {
+    try {
+      if (/"eth_chainId"/.test(body)) await new Promise((r) => setTimeout(r, SLOW_MS));
+      const up = await fetch(BASE_RPC, { method: "POST", headers: { "content-type": "application/json" }, body });
+      res.writeHead(up.status, { "content-type": "application/json" }).end(await up.text());
+    } catch {
+      res.destroy();
+    }
+  });
+});
+await new Promise((r) => slow.listen(0, "127.0.0.1", r));
+const SLOW_URL = `http://127.0.0.1:${slow.address().port}`;
+
+const cases = [
+  { name: "health check", args: ["earn", "status"], code: 0, proof: (o) => o.rpc === "ok" && /^\d+$/.test(o.latestBlock ?? "") },
+  {
+    name: "deposit quote",
+    args: ["earn", "quote", "--direction", "deposit", "--account", EVM_ACCOUNT, "--amount_usdc", "1"],
+    code: 0,
+    proof: (o) => /USDC per share$/.test(o.sharePriceInAssets ?? "") && o.preflight !== undefined,
+  },
+  {
+    name: "Solana quote",
+    args: ["earn", "quote", "--chain", "solana", "--direction", "deposit", "--account", SOLANA_ACCOUNT, "--amount_usdc", "1"],
+    code: 0,
+    since: "0.1.3",
+    proof: (o) => o.chain === "solana" && JSON.stringify(o).includes("slot"),
+  },
+  {
+    name: "balance with history",
+    args: ["earn", "balance", "--account", owner],
+    code: 0,
+    // The event-log scan: many requests, and it may stop at its time budget on a public endpoint.
+    // A failed or partial scan on the public endpoint is fine: the point is that it ran and the CLI exited.
+    proof: (o) => o.scan !== undefined && /^\d+(\.\d+)?$/.test(o.sharesExact ?? "") && Number.isInteger(o.measuredAtBlock),
+  },
+  {
+    name: "health, slow endpoint",
+    args: ["earn", "status"],
+    env: { TREASURY_RPC_BASE: SLOW_URL },
+    code: 0,
+    maxMs: SLOW_CASE_MAX_MS,
+    proof: (o) => o.rpc === "ok" && /^\d+$/.test(o.latestBlock ?? ""),
+  },
+  { name: "refused argument", args: ["earn", "quote", "--direction", "sideways"], code: 1, proof: (_o, err) => typeof JSON.parse(err).error === "string" },
+];
+
+// Subjects: this tree, plus any `--subject name=<prefix>` (an npm install prefix holding the package).
+// A `--reference name=<prefix>` is run and reported the same way but does not decide the verdict: it is
+// a published release kept beside this tree for comparison, and a release that shipped a defect this
+// tree fixes would otherwise keep the job red for good. (A reference that is missing still fails.)
+const subjects = [{ name: "this tree", version: JSON.parse(readFileSync(join(ROOT, "package.json"), "utf8")).version, file: join(ROOT, "dist", "treasury.mjs"), prefix: process.env.CLI_EXIT_PREFIX }];
+for (const a of process.argv.slice(2)) {
+  const m = /^--(subject|reference)=([^=]+)=(.+)$/.exec(a);
+  if (m) subjects.push({ name: m[2], version: m[2].replace(/^v/, ""), file: join(m[3], "node_modules", "@temporalabs", "treasury", "dist", "treasury.mjs"), prefix: m[3], reference: m[1] === "reference" });
+}
+
+function launches(s) {
+  const out = [{ how: "node", cmd: process.execPath, pre: [s.file], shell: false }];
+  if (!s.prefix) return out;
+  const bin = join(s.prefix, "node_modules", ".bin");
+  if (WIN) {
+    out.push({ how: "cmd + npm bin", cmd: join(bin, "treasury.cmd"), pre: [], shell: true });
+    out.push({ how: "PowerShell + npm bin", cmd: "pwsh", pre: ["-NoProfile", "-Command"], shell: false, ps1: join(bin, "treasury.ps1") });
+  } else {
+    out.push({ how: "sh + npm bin", cmd: join(bin, "treasury"), pre: [], shell: true });
+  }
+  return out;
+}
+
+function call(l, args, env) {
+  return new Promise((resolve) => {
+    const started = Date.now();
+    // PowerShell takes one command string: the npm shim, each argument single-quoted, then its exit code.
+    const argv = l.ps1 ? [...l.pre, `& '${l.ps1}' ${args.map((a) => `'${a}'`).join(" ")}; exit $LASTEXITCODE`] : [...l.pre, ...args];
+    const child = spawn(l.cmd, l.shell ? argv.map((a) => (/[\s"]/.test(a) ? `"${a}"` : a)) : argv, {
+      env: { ...process.env, ...env },
+      shell: l.shell,
+      windowsHide: true,
+    });
+    let stdout = "";
+    let stderr = "";
+    child.stdout.on("data", (d) => (stdout += d));
+    child.stderr.on("data", (d) => (stderr += d));
+    const kill = setTimeout(() => child.kill(), 120000);
+    child.on("error", (e) => (stderr += `\nspawn error: ${e.message}`));
+    child.on("close", (status, signal) => {
+      clearTimeout(kill);
+      resolve({ status, signal, ms: Date.now() - started, stdout, stderr });
+    });
+  });
+}
+
+const rows = [];
+for (const s of subjects) {
+  if (!existsSync(s.file)) {
+    console.log(`subject ${s.name}: ${s.file} is missing`);
+    // A subject that did not install fails the job even when it is a reference: a comparison that
+    // silently has nothing to compare against is a broken check, not a passing one.
+    rows.push({ subject: s.name, launch: "-", case: "installed", ok: false, gates: true });
+    continue;
+  }
+  for (const l of launches(s)) {
+    for (const c of cases) {
+      if (c.since && !versionAtLeast(s.version, c.since)) continue;
+      const r = await call(l, c.args, c.env);
+      let proved = false;
+      try {
+        proved = Boolean(c.proof(r.stdout.trim() ? JSON.parse(r.stdout) : {}, r.stderr));
+      } catch {
+        proved = false;
+      }
+      const hex = typeof r.status === "number" && r.status > 255 ? ` (0x${(r.status >>> 0).toString(16).toUpperCase()})` : "";
+      const ok = r.status === c.code && proved && r.ms <= (c.maxMs ?? MAX_MS);
+      rows.push({ subject: s.reference ? `${s.name} (reference)` : s.name, launch: l.how, case: c.name, expected: c.code, exit: `${r.status}${hex}`, signal: r.signal, ms: r.ms, proved, ok, gates: !s.reference });
+      console.log(`--- [${s.name} | ${l.how}] ${c.name}: exit ${r.status}${hex}${r.signal ? ` signal ${r.signal}` : ""}, ${r.ms} ms, expected ${c.code}, answer proved: ${proved}`);
+      if (!ok) {
+        if (r.stdout.trim()) console.log(`stdout:\n${r.stdout.trim().slice(0, 1500)}`);
+        if (r.stderr.trim()) console.log(`stderr:\n${r.stderr.trim().slice(0, 3000)}`);
+      }
+    }
+  }
+}
+slow.close();
+slow.closeAllConnections?.();
+console.log(`\n${process.platform} ${process.arch} ${process.version}`);
+console.table(rows);
+const differs = rows.filter((r) => !r.ok && !r.gates);
+if (differs.length) console.log(`reference, not gating: ${differs.map((r) => `${r.subject} | ${r.launch} | ${r.case}`).join("; ")}`);
+const bad = rows.filter((r) => !r.ok && r.gates);
+if (bad.length) {
+  console.log(`FAILED: ${bad.map((r) => `${r.subject} | ${r.launch} | ${r.case}`).join("; ")}`);
+  process.exit(1);
+}
+console.log("every call exited as expected, in time, with an answer read from the chain");

.github/workflows/ci.yml

@@ -164,6 +164,9 @@ jobs:
             || { echo "::error::dist/treasury.mjs is stale — run npm run build and commit it"; exit 1; }
           git diff --exit-code --stat -- THIRD_PARTY_NOTICES.md \
             || { echo "::error::THIRD_PARTY_NOTICES.md is stale — run npm run build and commit it"; exit 1; }
+          # llms.txt is built from the earn skill and the command descriptions; a drifted copy fails here.
+          git diff --exit-code --stat -- llms.txt \
+            || { echo "::error::llms.txt differs from what the skill and the commands produce — run npm run build and commit it"; exit 1; }
           # Only the files the build WRITES into plugin/; the manifests and the skill there are edited by hand.
           # `git status`, not `git diff`: a copy the commit deleted comes back UNTRACKED, which diff ignores.
           stale=$(git status --porcelain -- plugin/dist plugin/registry plugin/LICENSE plugin/NOTICE plugin/THIRD_PARTY_NOTICES.md plugin/THIRD_PARTY_NOTICES.connect-page.md plugin/package.json)
@@ -184,13 +187,13 @@ jobs:
       # ── Licensing (Apache-2.0). An npm tarball takes what `files` publishes, and a plugin install
       # takes plugin/, so the licence, its NOTICE and the dependency notices must travel INSIDE both.
       # ───────────────────────────────────────────────────────────────────────────────────────────
-      - name: the packed artifact ships LICENSE, NOTICE and the third-party notices
+      - name: the packed artifact ships LICENSE, NOTICE, the third-party notices and llms.txt
         if: steps.pk.outputs.present == 'yes'
         run: |
           npm pack --dry-run --json --ignore-scripts > /tmp/pack.json
           node -e '
             const files = new Set(require("/tmp/pack.json")[0].files.map((f) => f.path));
-            const need = ["LICENSE", "NOTICE", "THIRD_PARTY_NOTICES.md", "THIRD_PARTY_NOTICES.connect-page.md", "dist/treasury.mjs", "dist/connect-page.js"];
+            const need = ["LICENSE", "NOTICE", "THIRD_PARTY_NOTICES.md", "THIRD_PARTY_NOTICES.connect-page.md", "llms.txt", "dist/treasury.mjs", "dist/connect-page.js"];
             const missing = need.filter((f) => !files.has(f));
             if (missing.length) { console.log("::error file=package.json::the packed artifact is missing " + missing.join(", ")); process.exit(1); }
             console.log("packed artifact carries " + need.join(", "));
@@ -227,7 +230,7 @@ jobs:
           cprops = {c["tool"]: {f["flag"].removeprefix("--") for f in c["flags"]} for c in json.loads(con.stdout)["commands"]}
           assert cprops == {
               "connect_status": set(),
-              "connect_wallet": set(),
+              "connect_wallet": {"chain"},
               "connect_disconnect": set(),
               "connect_deposit": {"vault", "chain", "amount_usdc", "receiver", "ack"},
               "connect_withdraw": {"vault", "chain", "receiver", "amount_usdc", "all", "shares_exact", "ack"},
@@ -289,8 +292,8 @@ jobs:
           if phantom: print("::error::SKILL.md names commands the CLI does not have:", sorted(phantom))
           sys.exit(1 if (missing or phantom) else 0)
           PY
-      # A package.json version is a RUNTIME value: the bundle reports the one beside it as
-      # `treasury --version` and `earn status`, and the manifests are what the marketplaces advertise.
+      # The bundle reports the package.json version it was built from as `treasury --version` and
+      # `earn status`, and the manifests are what the marketplaces advertise: this ties them together.
       - name: every declaration of this repository's own version agrees
         if: steps.pk.outputs.present == 'yes'
         run: bash scripts/check-versions.sh
@@ -343,6 +346,42 @@ jobs:
           console.log("LICENSE is the canonical Apache-2.0 text; NOTICE and the third-party notices say what they must");
           JS
 
+  # The BUILT CLI, run as a caller runs it, on each OS the CLI ships to: the exit code, the time the
+  # call takes, and proof the answer came from the chain (.github/scripts/cli-exit.mjs). Issue #122:
+  # on Windows with Node 24 a correct answer came with a non-zero exit. Node 22 is the control, and
+  # 24.0.0 the earliest Node 24.
+  cli-exit:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - { os: windows-latest, node: 24 }
+          - { os: windows-latest, node: 24.0.0 }
+          - { os: windows-latest, node: 22 }
+          - { os: macos-latest, node: 24 }
+          - { os: ubuntu-latest, node: 24 }
+          - { os: ubuntu-latest, node: 22 }
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
+        with:
+          node-version: ${{ matrix.node }}
+      # Installed the way users install it, so the npm `treasury` bin is exercised too: this tree's
+      # package (packed without the build lifecycle; CI's `check` job already holds dist/ to the
+      # source) and the published v0.1.2, the release the failure was first seen with. v0.1.2 is a
+      # reference: reported beside this tree, but it does not decide the verdict, since it ships the defect.
+      - name: install this tree's package and the published v0.1.2
+        shell: bash
+        run: |
+          npm pack --ignore-scripts --pack-destination "$RUNNER_TEMP"
+          npm install --prefix "$RUNNER_TEMP/cur" --ignore-scripts --no-audit --no-fund "$RUNNER_TEMP"/temporalabs-treasury-*.tgz
+          npm install --prefix "$RUNNER_TEMP/v012" --ignore-scripts --no-audit --no-fund @temporalabs/treasury@0.1.2
+      - name: the built CLI exits 0 with a chain-read answer, and 1 on a refused argument
+        shell: bash
+        run: CLI_EXIT_PREFIX="$RUNNER_TEMP/cur" node .github/scripts/cli-exit.mjs "--reference=v0.1.2=$RUNNER_TEMP/v012"
+
   # ── Bundle provenance ──────────────────────────────────────────────────────────────────────────
   # This job attests the COMMITTED root dist/treasury.mjs. A marketplace install runs
   # plugin/dist/treasury.mjs, which the plugin-folder step holds byte-identical to it in the