@absol-labs/agent 0.9.0 → 0.10.0

package/README.md

@@ -25,7 +25,18 @@ Docs: [metrik.live](https://metrik.live). Frontdoor: [github.com/Absol-Labs](htt
 pnpm add @absol-labs/agent
 ```
 
-The package is **ESM-only** (`"type": "module"`) and targets **Node `>=20 <21`**. It ships
+The package ships four executables. Run the CLI with no install at all:
+
+```bash
+npx --package @absol-labs/agent metrik discover
+```
+
+`metrik` is the CLI below; `metrik-mcp` starts the MCP server over stdio
+(`metrik mcp --print-config` prints the client config that runs it);
+`metrik-mcp-http` starts the hosted multi-tenant MCP transport; `metrik-gateway`
+starts the reference caller-auth gateway a seller puts in front of their service.
+
+The package is **ESM-only** (`"type": "module"`) and targets **Node `>=20.19 <25`** (verified on 20.19, 22 LTS and 24). It ships
 `@absol-labs/sdk`, `@absol-labs/shared`, `viem`, `zod`, the Reclaim zkTLS SDKs, the
 Coinbase CDP SDK, and the MCP SDK as dependencies. The autonomous wallet path also
 installs a prebuilt native OS-keyring binding; it is
@@ -224,15 +235,78 @@ const { streamId } = await facilitator.open(header); // mandate-gated, opens on-
 The scheme name is exported as `X402_SCHEME`; `parseX402ChallengeJson`,
 `parseX402PayloadHeader`, and `encodeX402PayloadHeader` handle the wire format on both sides.
 
+### The CLI
+
+`metrik` runs the whole product loop from a terminal — the first surface that does.
+Every command is the same mandate-gated SDK path the library exposes; nothing is
+reimplemented.
+
+```bash
+metrik discover --min-tier 2
+metrik open   --service <serviceRef> --rate 0.000001 --budget 0.27 --duration 1h [--dry-run]
+metrik status  <streamId>
+metrik streams --role buyer --limit 5
+metrik watch   <streamId> --interval 15
+metrik invoke  <streamId> --method POST --path /transform --body '{"text":"hi"}'
+metrik close   <streamId>
+metrik reclaim <streamId>
+metrik mcp --print-config
+```
+
+- **Testnet only.** The CLI refuses any chain outside Base Sepolia (`84532`), and
+  re-reads the chain id the RPC endpoint actually serves before it signs anything.
+  There is no override flag.
+- **`open --dry-run` needs no wallet at all.** It broadcasts nothing, so it prints the
+  intended call (and says which parts it could not produce without a key) rather than
+  demanding one. `invoke` does need the key even though it broadcasts nothing: it signs
+  an off-chain EIP-712 invocation capability as the stream's buyer.
+- **A wallet with no gas is caught before anything is signed**, with the faucet named,
+  instead of surfacing the node's `gas required exceeds allowance (0)`. So is a wallet
+  that cannot cover `--budget` in USDC — a separate balance, and otherwise a revert you
+  pay for the approval to discover.
+- **Two wallet sources**, resolved in a fixed order: `METRIK_AGENT_PRIVATE_KEY`, then a
+  Coinbase CDP Server Wallet v2 account. Both are read from the environment only.
+- **`metrik streams` lists a wallet's streams** from the escrow's indexed `StreamOpened`
+  logs, anchored at the deploy block — and reports a partial or untrustworthy scan as
+  partial rather than as "you have no streams".
+- **The key is read from `METRIK_AGENT_PRIVATE_KEY` only** — never from a flag, which
+  would land it in shell history and process listings. Commands print the derived
+  address, never the key.
+- **Settlement config defaults to the live Base Sepolia deployment** and is overridable
+  per command with `--rpc-url`, `--escrow`, `--usdc`, `--oracle-url`, `--registry-url`,
+  `--chain-id`.
+- **Amounts are decimal USDC by default**; pass `--units atomic` for raw 6-decimal base
+  units (what `METRIK_E2E_*` and the escrow use).
+- **`--json`** puts a machine-readable document on stdout; warnings and progress always
+  go to stderr, so the stream stays parseable. `metrik watch --json` emits **JSON Lines**
+  — one compact object per poll, each parseable on its own line.
+- **`reclaim` waits for you.** `reclaimWithProof` reverts with `SettlementWindowOpen`
+  until a checkpoint covering the stream's stop time has posted — in practice that means
+  the first attempt fails and one ~30s later succeeds. The CLI retries that one
+  condition on a bounded schedule (`--attempts`, `--interval`) and narrates the wait;
+  every other failure is surfaced immediately.
+- **Accrual comes from the oracle**, not from the stream tuple: `getStream` reports
+  `claimedCumulative`/`settledCumulative` as `0` for a stream's entire active life, so
+  `status` and `watch` read `GET /checkpoint/proof` instead.
+
+`metrik --help`, or `metrik <command> --help`, prints the full flag surface. The runner
+is also importable (`@absol-labs/agent/cli`) if you want to embed it.
+
 ### Run the MCP server
 
 The server runs over stdio and reads its settlement config from the environment; it never
 asks for a raw key in a tool argument.
 
 ```bash
-pnpm mcp:stdio   # or: pnpm mcp:http
+metrik-mcp                  # installed, or: npx --package @absol-labs/agent metrik-mcp
+metrik-mcp-http             # the hosted, multi-tenant Streamable-HTTP transport
+pnpm mcp:stdio              # inside this repo; `pnpm mcp:http` for the hosted transport
 ```
 
+`metrik mcp --print-config` prints the `mcpServers` block to paste into Claude Desktop
+(or any MCP client), already carrying every variable the server fails closed without.
+Credentials in it are placeholders: the CLI never prints a key back.
+
 Programmatically:
 
 ```ts
@@ -429,7 +503,7 @@ Per-framework guides: [`docs/langchain.md`](./docs/langchain.md),
 
 ## Requirements
 
-- Node **`>=20 <21`**, package manager `pnpm@9.15.x`.
+- Node **`>=20.19 <25`** (20.19+, 22 LTS and 24 all supported), package manager `pnpm@9.15.x`.
 - **ESM only** — this package has no CommonJS build; consume it from an ESM context.
 - Framework adapters need their matching optional peer dependency installed. Known caveat:
   the AgentKit adapter pulls a heavy graph (`@coinbase/agentkit` / ZeroDev) that can break a

package/dist/cli/amounts.d.ts

@@ -0,0 +1,26 @@
+/** Circle USDC — 6 decimals on every deployment Metrik settles against. */
+export declare const USDC_DECIMALS = 6;
+/**
+ * How `--budget` / `--rate` are interpreted.
+ *
+ *  - `"usdc"` (default): decimal USDC, e.g. `--budget 0.27`.
+ *  - `"atomic"`: raw 6-decimal base units, e.g. `--budget 270000`.
+ *
+ * Both are offered because the two audiences count differently: a human reads
+ * USDC, while the escrow, the oracle and every `METRIK_E2E_*` fixture are in
+ * atomic units. Guessing from the magnitude of the number would be a silent
+ * 1,000,000x mistake on a fund-moving command, so the unit is explicit.
+ */
+export type AmountUnits = "usdc" | "atomic";
+export declare function parseAmountUnits(raw: string | undefined): AmountUnits;
+/** Parses a `--budget`/`--rate` value into atomic USDC units. */
+export declare function parseUsdcAmount(raw: string, units: AmountUnits, flagName: string): bigint;
+/** `270000n` -> `"0.27 USDC (270000 atomic)"`. */
+export declare function formatUsdc(atomic: bigint): string;
+/**
+ * Parses `--duration`: bare seconds, or a `s`/`m`/`h`/`d` suffix.
+ */
+export declare function parseDurationSeconds(raw: string): number;
+/** Seconds -> a compact human duration (`3600` -> `1h`). */
+export declare function formatDuration(seconds: number): string;
+//# sourceMappingURL=amounts.d.ts.map

package/dist/cli/amounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amounts.d.ts","sourceRoot":"","sources":["../../src/cli/amounts.ts"],"names":[],"mappings":"AAIA,2EAA2E;AAC3E,eAAO,MAAM,aAAa,IAAI,CAAC;AAE/B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5C,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAIrE;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,MAAM,GACf,MAAM,CAuBR;AAED,kDAAkD;AAClD,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAmBxD;AAED,4DAA4D;AAC5D,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAetD"}

package/dist/cli/amounts.js

@@ -0,0 +1,71 @@
+import { formatUnits, parseUnits } from "viem";
+import { usageError } from "./errors.js";
+/** Circle USDC — 6 decimals on every deployment Metrik settles against. */
+export const USDC_DECIMALS = 6;
+export function parseAmountUnits(raw) {
+    if (raw === undefined || raw === "usdc")
+        return "usdc";
+    if (raw === "atomic")
+        return "atomic";
+    throw usageError(`--units must be "usdc" or "atomic" (got "${raw}")`);
+}
+/** Parses a `--budget`/`--rate` value into atomic USDC units. */
+export function parseUsdcAmount(raw, units, flagName) {
+    if (units === "atomic") {
+        if (!/^\d+$/.test(raw)) {
+            throw usageError(`--${flagName} must be a non-negative integer of atomic USDC units (got "${raw}")`);
+        }
+        return BigInt(raw);
+    }
+    if (!/^\d+(\.\d+)?$/.test(raw)) {
+        throw usageError(`--${flagName} must be a decimal USDC amount (got "${raw}")`, "pass --units atomic to supply raw 6-decimal base units instead.");
+    }
+    const fraction = raw.split(".")[1];
+    if (fraction !== undefined && fraction.length > USDC_DECIMALS) {
+        throw usageError(`--${flagName} has more precision than USDC supports (${USDC_DECIMALS} decimals): ${raw}`);
+    }
+    return parseUnits(raw, USDC_DECIMALS);
+}
+/** `270000n` -> `"0.27 USDC (270000 atomic)"`. */
+export function formatUsdc(atomic) {
+    return `${formatUnits(atomic, USDC_DECIMALS)} USDC (${atomic.toString()} atomic)`;
+}
+/**
+ * Parses `--duration`: bare seconds, or a `s`/`m`/`h`/`d` suffix.
+ */
+export function parseDurationSeconds(raw) {
+    const match = /^(\d+)([smhd]?)$/.exec(raw);
+    if (match === null) {
+        throw usageError(`--duration must be seconds, optionally suffixed s/m/h/d (got "${raw}")`);
+    }
+    const value = Number(match[1]);
+    const multiplier = { "": 1, s: 1, m: 60, h: 3_600, d: 86_400 }[match[2] ?? ""];
+    if (multiplier === undefined) {
+        throw usageError(`--duration has an unsupported unit: ${raw}`);
+    }
+    const seconds = value * multiplier;
+    if (!Number.isSafeInteger(seconds) || seconds <= 0) {
+        throw usageError(`--duration must be a positive number of seconds: ${raw}`);
+    }
+    return seconds;
+}
+/** Seconds -> a compact human duration (`3600` -> `1h`). */
+export function formatDuration(seconds) {
+    if (seconds <= 0)
+        return "0s";
+    const parts = [];
+    let remaining = seconds;
+    for (const [unit, size] of [
+        ["d", 86_400],
+        ["h", 3_600],
+        ["m", 60],
+        ["s", 1],
+    ]) {
+        const count = Math.floor(remaining / size);
+        if (count > 0)
+            parts.push(`${count}${unit}`);
+        remaining -= count * size;
+    }
+    return parts.join(" ");
+}
+//# sourceMappingURL=amounts.js.map

package/dist/cli/amounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amounts.js","sourceRoot":"","sources":["../../src/cli/amounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAe/B,MAAM,UAAU,gBAAgB,CAAC,GAAuB;IACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACvD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACtC,MAAM,UAAU,CAAC,4CAA4C,GAAG,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,KAAkB,EAClB,QAAgB;IAEhB,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,UAAU,CACd,KAAK,QAAQ,8DAA8D,GAAG,IAAI,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,UAAU,CACd,KAAK,QAAQ,wCAAwC,GAAG,IAAI,EAC5D,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QAC9D,MAAM,UAAU,CACd,KAAK,QAAQ,2CAA2C,aAAa,eAAe,GAAG,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;AACpF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,UAAU,CACd,iEAAiE,GAAG,IAAI,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAC5D,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CACf,CAAC;IACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,UAAU,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,GAAG,UAAU,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,CAAC,oDAAoD,GAAG,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,OAAO,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI;QACzB,CAAC,GAAG,EAAE,MAAM,CAAC;QACb,CAAC,GAAG,EAAE,KAAK,CAAC;QACZ,CAAC,GAAG,EAAE,EAAE,CAAC;QACT,CAAC,GAAG,EAAE,CAAC,CAAC;KACA,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC,CAAC;QAC7C,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/cli/args.d.ts

@@ -0,0 +1,32 @@
+/**
+ * A deliberately small GNU-style argument parser. The CLI ships no argument
+ * parsing dependency: the surface is seven commands with a handful of flags, and
+ * the packed tarball should stay as light as the library it wraps.
+ *
+ * Supported forms: `--flag`, `--flag value`, `--flag=value`, `--no-flag`, and
+ * positional arguments. `--` ends flag parsing.
+ */
+export interface ParsedArgs {
+    readonly command: string | null;
+    readonly positionals: readonly string[];
+    /**
+     * Every occurrence of each flag, in order. Repeats are kept rather than
+     * overwritten so `--header` can be given more than once; scalar readers take
+     * the last occurrence.
+     */
+    readonly flags: ReadonlyMap<string, readonly (string | boolean)[]>;
+}
+export declare function parseArgs(argv: readonly string[]): ParsedArgs;
+/** Reads a flag that must carry a string value. */
+export declare function stringFlag(args: ParsedArgs, name: string): string | undefined;
+/** Every occurrence of a repeatable string flag (e.g. `--header`). */
+export declare function stringFlags(args: ParsedArgs, name: string): string[];
+export declare function requiredStringFlag(args: ParsedArgs, name: string): string;
+export declare function booleanFlag(args: ParsedArgs, name: string): boolean;
+export declare function integerFlag(args: ParsedArgs, name: string): number | undefined;
+/**
+ * Rejects flags the command does not understand. A silently ignored `--budgt`
+ * on a fund-moving command is how someone spends more than they meant to.
+ */
+export declare function assertKnownFlags(args: ParsedArgs, known: readonly string[]): void;
+//# sourceMappingURL=args.d.ts.map

package/dist/cli/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;CACpE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAiD7D;AAQD,mDAAmD;AACnD,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQ7E;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAQpE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMzE;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CASnE;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAOpB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,IAAI,CAWN"}

package/dist/cli/args.js

@@ -0,0 +1,119 @@
+import { usageError } from "./errors.js";
+export function parseArgs(argv) {
+    const positionals = [];
+    const flags = new Map();
+    const push = (name, value) => {
+        const existing = flags.get(name);
+        if (existing === undefined)
+            flags.set(name, [value]);
+        else
+            existing.push(value);
+    };
+    let passthrough = false;
+    for (let index = 0; index < argv.length; index++) {
+        const token = argv[index];
+        if (token === undefined)
+            continue;
+        if (passthrough || !token.startsWith("--")) {
+            positionals.push(token);
+            continue;
+        }
+        if (token === "--") {
+            passthrough = true;
+            continue;
+        }
+        const body = token.slice(2);
+        const equals = body.indexOf("=");
+        if (equals !== -1) {
+            const name = body.slice(0, equals);
+            assertFlagName(name, token);
+            push(name, body.slice(equals + 1));
+            continue;
+        }
+        assertFlagName(body, token);
+        if (body.startsWith("no-")) {
+            push(body.slice(3), false);
+            continue;
+        }
+        const next = argv[index + 1];
+        if (next === undefined || next.startsWith("--")) {
+            push(body, true);
+            continue;
+        }
+        push(body, next);
+        index++;
+    }
+    const [command = null, ...rest] = positionals;
+    return { command, positionals: rest, flags };
+}
+function assertFlagName(name, token) {
+    if (name.length === 0) {
+        throw usageError(`not a valid flag: ${token}`);
+    }
+}
+/** Reads a flag that must carry a string value. */
+export function stringFlag(args, name) {
+    const values = args.flags.get(name);
+    if (values === undefined)
+        return undefined;
+    const value = values[values.length - 1];
+    if (typeof value !== "string") {
+        throw usageError(`--${name} requires a value`);
+    }
+    return value;
+}
+/** Every occurrence of a repeatable string flag (e.g. `--header`). */
+export function stringFlags(args, name) {
+    const values = args.flags.get(name) ?? [];
+    return values.map((value) => {
+        if (typeof value !== "string") {
+            throw usageError(`--${name} requires a value`);
+        }
+        return value;
+    });
+}
+export function requiredStringFlag(args, name) {
+    const value = stringFlag(args, name);
+    if (value === undefined) {
+        throw usageError(`--${name} is required`);
+    }
+    return value;
+}
+export function booleanFlag(args, name) {
+    const values = args.flags.get(name);
+    if (values === undefined)
+        return false;
+    const value = values[values.length - 1];
+    if (value === undefined)
+        return false;
+    if (typeof value === "boolean")
+        return value;
+    if (value === "true")
+        return true;
+    if (value === "false")
+        return false;
+    throw usageError(`--${name} takes no value (got "${value}")`);
+}
+export function integerFlag(args, name) {
+    const raw = stringFlag(args, name);
+    if (raw === undefined)
+        return undefined;
+    if (!/^\d+$/.test(raw)) {
+        throw usageError(`--${name} must be a non-negative integer (got "${raw}")`);
+    }
+    return Number(raw);
+}
+/**
+ * Rejects flags the command does not understand. A silently ignored `--budgt`
+ * on a fund-moving command is how someone spends more than they meant to.
+ */
+export function assertKnownFlags(args, known) {
+    const allowed = new Set(known);
+    const unknown = [...args.flags.keys()].filter((name) => !allowed.has(name));
+    if (unknown.length > 0) {
+        throw usageError(`unknown flag${unknown.length > 1 ? "s" : ""}: ${unknown
+            .map((name) => `--${name}`)
+            .join(", ")}`, `known flags: ${known.map((name) => `--${name}`).join(", ")}`);
+    }
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqBzC,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAuB,EAAQ,EAAE;QAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;;YAChD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAElC,IAAI,WAAW,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACnC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAE5B,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjB,KAAK,EAAE,CAAC;IACV,CAAC;IAED,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC;IAC9C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,UAAU,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,IAAgB,EAAE,IAAY;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,IAAY;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,UAAU,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAgB,EAAE,IAAY;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,UAAU,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,IAAY;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,UAAU,CAAC,KAAK,IAAI,yBAAyB,KAAK,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAgB,EAChB,IAAY;IAEZ,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,CAAC,KAAK,IAAI,yCAAyC,GAAG,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAgB,EAChB,KAAwB;IAExB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,CACd,eAAe,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO;aACrD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;aAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,EACf,gBAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/attesters.d.ts

@@ -0,0 +1,51 @@
+import type { CliReadClient } from "./deps.js";
+/**
+ * Who attests, read off the escrow.
+ *
+ * Metrik's whole claim is that money moves only for delivery that a NEUTRAL
+ * verifier checked. On the live Base Sepolia deployment that neutrality is
+ * partial: `getOracleSigners()` returns three addresses, and one of them is the
+ * operator of the listings a buyer is being offered. A tool that prints
+ * "cryptographically verified" and "tier 2" without saying so is letting the
+ * buyer assume something the deployment does not provide.
+ *
+ * This is DISCLOSURE, not enforcement. The CLI does not refuse such a listing
+ * and does not score it — it states the fact and leaves the judgement to the
+ * buyer. Fixing the deployment is a deployment decision, not a CLI one.
+ */
+export interface AttesterSet {
+    /** The signer set, lowercased. `null` when the escrow would not answer. */
+    readonly signers: readonly string[] | null;
+    /** Why the set could not be read, when applicable. */
+    readonly unavailable: string | null;
+}
+/**
+ * Read the signer set, failing SOFT.
+ *
+ * An unreadable set must never render as "no overlap": "we checked and the
+ * operator does not attest" and "we could not check" are different facts, and
+ * conflating them would turn an outage into a false assurance. `signers: null`
+ * is carried through to every caller and printed as UNKNOWN.
+ */
+export declare function readAttesterSet(read: Pick<CliReadClient, "oracleSigners">): Promise<AttesterSet>;
+/**
+ * Is this operator also one of the escrow's attesters?
+ *
+ * `null` means unknown (the set could not be read) and must be rendered as
+ * unknown, never as `false`.
+ */
+export declare function operatorAttestsOwnDelivery(set: AttesterSet, operator: string): boolean | null;
+/**
+ * One factual stderr line, or `null` when there is nothing to disclose.
+ *
+ * Deliberately not alarming and deliberately not a verdict: it reports a
+ * configuration fact and what that fact means, and stops there.
+ */
+export declare function attesterDisclosure(set: AttesterSet, operator: string): string | null;
+/**
+ * The one warning that belongs to the ESCROW rather than to any one listing:
+ * the signer set could not be read at all. Printed once per command, not once
+ * per row, and never as "no overlap".
+ */
+export declare function attesterSetUnavailableWarning(set: AttesterSet): string | null;
+//# sourceMappingURL=attesters.d.ts.map

package/dist/cli/attesters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attesters.d.ts","sourceRoot":"","sources":["../../src/cli/attesters.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3C,sDAAsD;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,GACzC,OAAO,CAAC,WAAW,CAAC,CAUtB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,WAAW,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,GAAG,IAAI,CAGhB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,WAAW,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAMf;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAG7E"}

package/dist/cli/attesters.js

@@ -0,0 +1,58 @@
+import { describeError } from "./errors.js";
+/**
+ * Read the signer set, failing SOFT.
+ *
+ * An unreadable set must never render as "no overlap": "we checked and the
+ * operator does not attest" and "we could not check" are different facts, and
+ * conflating them would turn an outage into a false assurance. `signers: null`
+ * is carried through to every caller and printed as UNKNOWN.
+ */
+export async function readAttesterSet(read) {
+    try {
+        const signers = await read.oracleSigners();
+        return {
+            signers: signers.map((signer) => signer.toLowerCase()),
+            unavailable: null,
+        };
+    }
+    catch (error) {
+        return { signers: null, unavailable: describeError(error) };
+    }
+}
+/**
+ * Is this operator also one of the escrow's attesters?
+ *
+ * `null` means unknown (the set could not be read) and must be rendered as
+ * unknown, never as `false`.
+ */
+export function operatorAttestsOwnDelivery(set, operator) {
+    if (set.signers === null)
+        return null;
+    return set.signers.includes(operator.toLowerCase());
+}
+/**
+ * One factual stderr line, or `null` when there is nothing to disclose.
+ *
+ * Deliberately not alarming and deliberately not a verdict: it reports a
+ * configuration fact and what that fact means, and stops there.
+ */
+export function attesterDisclosure(set, operator) {
+    const overlap = operatorAttestsOwnDelivery(set, operator);
+    if (overlap === null)
+        return attesterSetUnavailableWarning(set);
+    if (!overlap)
+        return null;
+    const total = set.signers?.length ?? 0;
+    return `warning: operator ${operator} is also one of the ${total} oracle signer${total === 1 ? "" : "s"} configured on this escrow. The party being paid is among the parties attesting that delivery happened. Verification here is not independent of the seller.`;
+}
+/**
+ * The one warning that belongs to the ESCROW rather than to any one listing:
+ * the signer set could not be read at all. Printed once per command, not once
+ * per row, and never as "no overlap".
+ */
+export function attesterSetUnavailableWarning(set) {
+    if (set.signers !== null)
+        return null;
+    return `warning: the escrow's oracle signer set could not be read (${set.unavailable ?? "no reason given"}) — whether the operator being paid is also one of the parties attesting to its own delivery is UNKNOWN, not "no overlap".`;
+}
+//# sourceMappingURL=attesters.js.map

package/dist/cli/attesters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attesters.js","sourceRoot":"","sources":["../../src/cli/attesters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAwB5C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAA0C;IAE1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACtD,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAgB,EAChB,QAAgB;IAEhB,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAgB,EAChB,QAAgB;IAEhB,MAAM,OAAO,GAAG,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;IACvC,OAAO,qBAAqB,QAAQ,uBAAuB,KAAK,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,6JAA6J,CAAC;AACvQ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAgB;IAC5D,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,8DAA8D,GAAG,CAAC,WAAW,IAAI,iBAAiB,4HAA4H,CAAC;AACxO,CAAC"}

package/dist/cli/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/cli/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":""}

package/dist/cli/bin.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { runCli } from "./run.js";
+const exitCode = await runCli({ argv: process.argv.slice(2) });
+process.exitCode = exitCode;
+//# sourceMappingURL=bin.js.map

package/dist/cli/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/D,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC"}

package/dist/cli/commands/claim.d.ts

@@ -0,0 +1,13 @@
+import type { CommandSpec } from "../context.js";
+/**
+ * The seller's side of the loop.
+ *
+ * `status` has always computed and printed an `operator claimable` row — a
+ * redeemable balance the CLI could see and could not act on. `claimWithProof` is
+ * operator-gated on-chain, so this command refuses a wallet that is not the
+ * stream's operator BEFORE it broadcasts: an address mismatch is knowable with
+ * one read, and letting it become a raw `NotOperator()` revert would cost gas to
+ * learn a fact that was already available.
+ */
+export declare const claimCommand: CommandSpec;
+//# sourceMappingURL=claim.d.ts.map

package/dist/cli/commands/claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/claim.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAkB,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjE;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,EAAE,WAiF1B,CAAC"}

package/dist/cli/commands/claim.js

@@ -0,0 +1,86 @@
+import { formatUsdc } from "../amounts.js";
+import { assertTestnetRpc, parseBytes32 } from "../config.js";
+import { CliError, describeError, usageError } from "../errors.js";
+import { signClaimMandate } from "../mandate.js";
+import { assertCanPayGas } from "../preflight.js";
+import { PRIVATE_KEY_ENV, resolveCliWallet } from "../wallet.js";
+/**
+ * The seller's side of the loop.
+ *
+ * `status` has always computed and printed an `operator claimable` row — a
+ * redeemable balance the CLI could see and could not act on. `claimWithProof` is
+ * operator-gated on-chain, so this command refuses a wallet that is not the
+ * stream's operator BEFORE it broadcasts: an address mismatch is knowable with
+ * one read, and letting it become a raw `NotOperator()` revert would cost gas to
+ * learn a fact that was already available.
+ */
+export const claimCommand = {
+    name: "claim",
+    summary: "Operator: redeem what this stream has verifiably earned",
+    usage: "metrik claim <streamId>",
+    flags: [],
+    signs: true,
+    async run(context) {
+        const { args, config, env, out, deps } = context;
+        const [streamIdArg] = args.positionals;
+        if (streamIdArg === undefined) {
+            throw usageError("metrik claim requires a <streamId>");
+        }
+        const streamId = parseBytes32(streamIdArg, "<streamId>");
+        const { account } = await resolveCliWallet(env, { note: out.note });
+        const read = deps.createReadClient(config);
+        await assertTestnetRpc(config, () => read.getChainId());
+        await assertCanPayGas(read, account.address);
+        const stream = await read.getStreamV2(streamId);
+        if (stream.operator.toLowerCase() !== account.address.toLowerCase()) {
+            throw new CliError(`wallet ${account.address} is not the operator of this stream`, {
+                exitCode: 3,
+                hint: `only ${stream.operator} can claim it — the escrow enforces this, so no other wallet can. Set ${PRIVATE_KEY_ENV} to the operator's key. (The buyer's side of this stream is \`metrik reclaim ${streamId}\`.)`,
+            });
+        }
+        // Accrual lives in the oracle's checkpoint proof, never in the stream tuple.
+        // No proof means no claim is possible yet, and saying that is better than
+        // paying gas for a `NothingToClaim()` revert.
+        let cumulativeAmount;
+        try {
+            cumulativeAmount = (await read.checkpointProof(streamId))
+                .cumulativeAmount;
+        }
+        catch (error) {
+            throw new CliError("no checkpoint covers this stream yet, so there is nothing provable to claim", {
+                exitCode: 4,
+                hint: `the oracle publishes roughly every 15-22s and pays only for intervals that verified; ${describeError(error)}`,
+                cause: error,
+            });
+        }
+        const claimable = await read.claimableForV2(streamId, cumulativeAmount);
+        if (claimable === 0n) {
+            throw new CliError("this stream has nothing claimable right now", {
+                exitCode: 4,
+                hint: `everything checkpointed so far has already been claimed. See where it stands:  metrik status ${streamId}`,
+            });
+        }
+        const write = deps.createWriteClient(config, account);
+        const result = await write.claimStream({
+            streamId,
+            signedMandate: await signClaimMandate(account, config.chainId),
+            spentSoFarUsdc: 0n,
+            nowSeconds: deps.nowSeconds(),
+        });
+        out.result({
+            streamId,
+            txHash: result.txHash,
+            operator: stream.operator,
+            claimed: claimable,
+            verifiedCumulative: cumulativeAmount,
+        });
+        out.print("Claimed.");
+        out.table([
+            ["streamId", streamId],
+            ["tx", result.txHash],
+            ["operator", stream.operator],
+            ["claimed", `${formatUsdc(claimable)} (net of protocol fee)`],
+        ]);
+    },
+};
+//# sourceMappingURL=claim.js.map

package/dist/cli/commands/claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim.js","sourceRoot":"","sources":["../../../src/cli/commands/claim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,yDAAyD;IAClE,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,IAAI;IACX,KAAK,CAAC,GAAG,CAAC,OAAuB;QAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QACjD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QACvC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,UAAU,CAAC,oCAAoC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAEzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACxD,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YACpE,MAAM,IAAI,QAAQ,CAChB,UAAU,OAAO,CAAC,OAAO,qCAAqC,EAC9D;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,QAAQ,MAAM,CAAC,QAAQ,yEAAyE,eAAe,gFAAgF,QAAQ,MAAM;aACpN,CACF,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,0EAA0E;QAC1E,8CAA8C;QAC9C,IAAI,gBAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,gBAAgB,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;iBACtD,gBAAgB,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,QAAQ,CAChB,6EAA6E,EAC7E;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,wFAAwF,aAAa,CACzG,KAAK,CACN,EAAE;gBACH,KAAK,EAAE,KAAK;aACb,CACF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACxE,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,QAAQ,CAAC,6CAA6C,EAAE;gBAChE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,gGAAgG,QAAQ,EAAE;aACjH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YACrC,QAAQ;YACR,aAAa,EAAE,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;YAC9D,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;SAC9B,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC;YACT,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,SAAS;YAClB,kBAAkB,EAAE,gBAAgB;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC;YACR,CAAC,UAAU,EAAE,QAAQ,CAAC;YACtB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC;YAC7B,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,wBAAwB,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/cli/commands/close.d.ts

@@ -0,0 +1,3 @@
+import type { CommandSpec } from "../context.js";
+export declare const closeCommand: CommandSpec;
+//# sourceMappingURL=close.d.ts.map

package/dist/cli/commands/close.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"close.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/close.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAkB,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjE,eAAO,MAAM,YAAY,EAAE,WA6C1B,CAAC"}