Production-harden AGW: workspace restructure, delegated signing, and skill catalog

[jarrodwatts]

Summary

• Workspace restructure: Move runtime into packages/agw-core and packages/agw-cli, publish as @abstract-foundation/agw-cli. Remove legacy root src/ entry point and ZeroEx integration.
• Delegated signing via Privy: Full onboarding flow — provision signer + policy, wallet-owner approval via companion app, finalize with attestation token, revoke. RPC proxy forwards signed requests to Privy with server-side policy enforcement (chain, value cap, method allowlist, 30-day expiry).
• Companion app hardening: Fix auth state race conditions (resolving step, primitive dependency arrays, embedded wallet readiness gate). Redesign authorization page as OAuth-style consent screen with safety-limit pills derived from policy defaults. Add callback-key, finalize-init, provision, revoke, and rpc API routes.
• Skill catalog (12 skills): authenticating-with-agw, reading-agw-wallet, executing-agw-transactions, discovering-abstract-portal, trading-on-aborean, trading-on-uniswap, bridging-to-abstract, building-on-abstract, managing-agent-identity, upvoting-on-abstract, mining-with-bigcoin. All ABI examples use full JSON objects per schema validation requirements.
• CI/release: Fix publish workflow filter to @abstract-foundation/agw-cli, add release-please config + manifest, add repo-hygiene test.

Test plan

• 20/20 test suites, 107/107 tests passing
• Build clean (app + packages)
• Two-pass security audit — no high-confidence vulnerabilities found
• Manual: run agw auth init → complete companion app approval → verify session status
• Manual: execute a read-only tool (wallet balances) and a write tool (transfer with preview) end-to-end
• Manual: revoke session via companion app and confirm CLI reflects revocation

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
agw-mcp	Ready	Preview, Comment	Mar 23, 2026 5:21am

[cursor]

PR Summary

Medium Risk
Moderate risk because it changes publishing/release automation and dependency installation paths, which can break CI or npm releases if the workspace/filter assumptions are wrong.

Overview
Release/CI automation is reworked for the new workspace/package layout. CI now runs a root pnpm install for the app job, publishing is narrowed to pnpm --filter @abstract-foundation/agw-cli publish, and release-please is switched to config+manifest mode with a new .release-please-manifest.json.

Repo hygiene and docs are refreshed around AGW CLI + companion app. Adds ignore rules for .tgz and generated docs, replaces the root README with updated AGW CLI onboarding/MCP instructions, updates SECURITY.md/THREAT_MODEL.md, adds CONTEXT.md, expands app/.env.example, adds @privy-io/react-auth + security overrides in app/package.json, and removes legacy files (CHANGELOG.md stub, CLAUDE.md, and the large app/meta/app-registry.seed.json).

^{Written by Cursor Bugbot for commit cef9e63. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Publish workflow triggers undefined lifecycle scripts
  • Updated the CLI package prepublishOnly script to run only existing check-types and build scripts so filtered publish no longer fails on missing lifecycle scripts.

Or push these changes by commenting:

@cursor push d088435fd8

Preview (d088435fd8)

diff --git a/packages/agw-cli/package.json b/packages/agw-cli/package.json
--- a/packages/agw-cli/package.json
+++ b/packages/agw-cli/package.json
@@ -32,7 +32,7 @@
     "check-types": "tsc -p tsconfig.json --noEmit",
     "dev": "tsx src/index.ts",
     "start": "node dist/index.mjs",
-    "prepublishOnly": "pnpm check-types && pnpm lint && pnpm test && pnpm build"
+    "prepublishOnly": "pnpm check-types && pnpm build"
   },
   "dependencies": {
     "@abstract-foundation/agw-client": "1.10.0",

_{This Bugbot Autofix run was free. To enable autofix for future PRs, go to the Cursor dashboard.}