@ametyst/cli 0.3.11 → 0.3.12

package/dist/index.js

@@ -112487,7 +112487,7 @@ var init_version5 = __esm({
   "src/version.ts"() {
     "use strict";
     init_esm_shims();
-    CLI_VERSION = true ? "0.3.11" : "0.0.0-dev";
+    CLI_VERSION = true ? "0.3.12" : "0.0.0-dev";
   }
 });
 
@@ -118708,6 +118708,21 @@ function estimateBlastRadius(task) {
   return { steps, paidSteps, estCostEur };
 }
 
+// src/tasks/ownership.ts
+init_esm_shims();
+async function resolveTaskOwnership(sdk, apiKey, entity) {
+  try {
+    const createdBy = typeof entity?.createdBy === "string" ? entity.createdBy.trim() : "";
+    if (!createdBy) return { resolved: false };
+    const res = await sdk.compoundedSkills.getSyncSelection(apiKey);
+    const name = res?.status === "ok" && typeof res.self?.name === "string" ? res.self.name.trim() : "";
+    if (!name) return { resolved: false };
+    return { resolved: true, isOwner: name === createdBy, createdBy };
+  } catch {
+    return { resolved: false };
+  }
+}
+
 // src/tasks/dashboard-template.ts
 init_esm_shims();
 var DEFAULT_DASHBOARD_FILES = [
@@ -123135,6 +123150,18 @@ var GET_TASK_BASE_DESCRIPTION = "Search the workspace's TASKS by intent and RETU
 function buildGetTaskDescription(items) {
   return `${GET_TASK_BASE_DESCRIPTION}${buildTaskIndexSection(items, "task")}`;
 }
+function pickExactSlugFromIntent(intent, index2, category) {
+  if (!index2 || index2.length === 0) return null;
+  const tokens = new Set(intent.toLowerCase().match(/[a-z0-9-]+/g) ?? []);
+  if (tokens.size === 0) return null;
+  const hits = /* @__PURE__ */ new Set();
+  for (const item of index2) {
+    if (typeof item.slug !== "string" || item.slug === "") continue;
+    if (category !== void 0 && (item.category ?? void 0) !== category) continue;
+    if (tokens.has(item.slug.toLowerCase())) hits.add(item.slug);
+  }
+  return hits.size === 1 ? [...hits][0] : null;
+}
 var refreshGetAllowlistDescriptionInFlight = false;
 var pendingRefreshTimer = null;
 async function refreshGetAllowlistDescription() {
@@ -123523,8 +123550,8 @@ function buildPolicyActiveOnchainReader(sdk) {
     }
   };
 }
-var DEFAULT_POLICY_POLL_INTERVAL_MS = 2e4;
-var DEFAULT_POLICY_POLL_WINDOW_MS = 30 * 6e4;
+var DEFAULT_POLICY_POLL_INTERVAL_MS = 5e3;
+var DEFAULT_POLICY_POLL_WINDOW_MS = 25e3;
 function parsePollEnvMs(raw, fallback2) {
   const n = Number(raw?.trim());
   return Number.isFinite(n) && n > 0 ? Math.floor(n) : fallback2;
@@ -123547,6 +123574,7 @@ var approvalWaitConfig = (() => {
     delay: (ms) => new Promise((resolve3) => setTimeout(resolve3, ms))
   };
 })();
+var pendingAccessRequest = null;
 async function tryResolvePendingApproval(probe) {
   if (currentCredentials.authorizationStatus === "approved") return true;
   if (currentCredentials.authorizationStatus !== "pending" || !currentCredentials.apiKey || !currentCredentials.eoaAddress) {
@@ -124078,9 +124106,10 @@ server.tool(
 server.tool(
   {
     name: "requestAccess",
-    description: "Request wallet authorization with a chosen policy. Sends request to admin for approval.",
+    description: "Request wallet authorization with a chosen policy. Sends the request to the admin for approval and waits BRIEFLY for it (~25 s \u2014 short by design, so this call returns before your MCP host times out). If it comes back `pending`, the request stays valid on the admin's side: call getWalletStatus once the user says it was approved, and do NOT call requestAccess again in a loop. While a request from this session is pending, calling requestAccess again RE-CHECKS that request and never submits a new one; `resubmit: true` is the only way to force a fresh request.",
     inputs: [
-      { name: "policy_id", type: "number", required: true, description: "The policy ID to request access with" }
+      { name: "policy_id", type: "number", required: true, description: "The policy ID to request access with" },
+      { name: "resubmit", type: "boolean", required: false, description: "Force a FRESH request even though this session already has one pending (mints a new session key and queues a second approval for the admin). Default false: while a request from this session is pending, requestAccess only re-checks it." }
     ]
   },
   async (params) => {
@@ -124112,6 +124141,56 @@ server.tool(
           content: [{ type: "text", text: JSON.stringify({ success: false, error: "No API key or wallet address. Run ametyst login, then start_session." }) }]
         };
       }
+      const windowSeconds = Math.round(resolveApprovalWaitConfigFromEnv().windowMs / 1e3);
+      const approvedResponse = (signerAddress, forPolicyId) => ({
+        content: [{
+          type: "text",
+          text: JSON.stringify({
+            success: true,
+            data: {
+              eoaAddress: signerAddress,
+              policyId: forPolicyId,
+              status: "approved",
+              walletAddress: currentCredentials.walletAddress,
+              message: "Authorization approved. Wallet is ready to spend."
+            },
+            guidance: {
+              say_to_user: "Your admin approved the policy \u2014 the wallet is ready. Go ahead and tell me what you'd like to do.",
+              next_action: "Proceed with the user's original request (e.g. getAllowlist or spend)."
+            }
+          })
+        }]
+      });
+      const pendingResponse = (signerAddress, forPolicyId, requestId, rechecked) => ({
+        content: [{
+          type: "text",
+          text: JSON.stringify({
+            success: true,
+            data: {
+              eoaAddress: signerAddress,
+              policyId: forPolicyId,
+              status: "pending",
+              ...requestId !== void 0 ? { requestId } : {},
+              alreadyPending: rechecked,
+              message: rechecked ? `This session already has an authorization request pending${requestId ? ` (id ${requestId})` : ""} \u2014 re-checked just now, still awaiting the admin; nothing new was submitted. It stays valid: call getWalletStatus once your admin approves. Pass resubmit: true only to force a fresh request (it mints a new session key and queues a second approval).` : `Authorization request sent and still pending after the ${windowSeconds}s auto-wait window \u2014 short by design, so this call returns before your MCP host times out. The request stays valid: call getWalletStatus once your admin approves. Do NOT call requestAccess again in a loop \u2014 a repeat call only re-checks this same request without submitting a new one; resubmit: true is the only way to force a fresh request.`
+            },
+            guidance: {
+              say_to_user: rechecked ? "Your authorization request is still pending your admin's approval (I re-checked it just now, no new request was sent). Once they approve it, just ask me again or say 'check wallet status' and I'll pick it up." : "I've requested authorization and it's pending your admin's approval. I waited briefly \u2014 the wait is short by design \u2014 and it hasn't been approved yet, but the request stays valid on their side. Once they approve it, just ask me again or say 'check wallet status' and I'll pick it up. No need to do anything else right now.",
+              next_action: "When the user says the admin approved, call getWalletStatus to sync. Do NOT call requestAccess again in a loop: a repeat call re-checks this pending request and never submits a new one (resubmit: true forces a fresh request \u2014 only when the user asks for one).",
+              stop: true
+            }
+          })
+        }]
+      });
+      if (currentCredentials.authorizationStatus === "pending" && pendingAccessRequest !== null && pendingAccessRequest.walletId === currentCredentials.pendingWalletId && params.resubmit !== true) {
+        const pending = pendingAccessRequest;
+        console.error(`\u{1F501} [requestAccess] A request from this session is already pending${pending.walletId ? ` (id ${pending.walletId})` : ""} \u2014 re-checking, not submitting`);
+        if (await tryResolvePendingApproval()) {
+          pendingAccessRequest = null;
+          return approvedResponse(pending.signerAddress, pending.policyId);
+        }
+        return pendingResponse(pending.signerAddress, pending.policyId, pending.walletId, true);
+      }
       const { virtualWalletsManagers: virtualWalletsManagers2 } = await getSDK();
       const result = await submitRotatedAccessRequest(
         virtualWalletsManagers2,
@@ -124125,49 +124204,15 @@ server.tool(
       );
       currentCredentials.authorizationStatus = "pending";
       currentCredentials.pendingWalletId = result.id ? String(result.id) : void 0;
+      pendingAccessRequest = { walletId: currentCredentials.pendingWalletId, policyId, signerAddress: result.signerAddress };
       console.error(`\u2705 [requestAccess] Authorization request sent for ${result.signerAddress}`);
       await emitPendingApprovalNotice();
       const approved = await autoWaitForApproval();
       if (approved) {
-        return {
-          content: [{
-            type: "text",
-            text: JSON.stringify({
-              success: true,
-              data: {
-                eoaAddress: result.signerAddress,
-                policyId,
-                status: "approved",
-                walletAddress: currentCredentials.walletAddress,
-                message: "Authorization approved. Wallet is ready to spend."
-              },
-              guidance: {
-                say_to_user: "Your admin approved the policy \u2014 the wallet is ready. Go ahead and tell me what you'd like to do.",
-                next_action: "Proceed with the user's original request (e.g. getAllowlist or spend)."
-              }
-            })
-          }]
-        };
+        pendingAccessRequest = null;
+        return approvedResponse(result.signerAddress, policyId);
       }
-      return {
-        content: [{
-          type: "text",
-          text: JSON.stringify({
-            success: true,
-            data: {
-              eoaAddress: result.signerAddress,
-              policyId,
-              status: "pending",
-              message: "Authorization request sent and still pending after the auto-wait window elapsed. The request is still valid \u2014 call getWalletStatus to re-check once your admin approves, or re-run requestAccess to wait again."
-            },
-            guidance: {
-              say_to_user: "I've requested authorization and waited a while, but your admin hasn't approved it yet. The request is still pending on their side \u2014 once they approve it, just ask me again (or say 'check wallet status') and I'll pick it up. No need to do anything else right now.",
-              next_action: "When the user is ready, call getWalletStatus to re-check approval, or requestAccess to wait again.",
-              stop: true
-            }
-          })
-        }]
-      };
+      return pendingResponse(result.signerAddress, policyId, currentCredentials.pendingWalletId, false);
     } catch (error) {
       console.error("\u274C Error in requestAccess:", error);
       return {
@@ -124695,6 +124740,17 @@ function categoryGateResponse(params, slug) {
     }) }]
   };
 }
+function renderSingleTaskMarkdown(task) {
+  const updated = typeof task.updatedAt === "string" && task.updatedAt ? task.updatedAt.slice(0, 10) : "unknown";
+  const catSeg = task.category ? `category: ${task.category} \xB7 ` : "";
+  return `## ${task.slug}
+
+> ${catSeg}updated ${updated}
+
+${task.descriptionShort ?? ""}
+
+${task.markdownBody ?? ""}`;
+}
 async function resolveTasksCore(params, flavor) {
   try {
     const intent = typeof params.intent === "string" ? params.intent.trim() : "";
@@ -124703,7 +124759,16 @@ async function resolveTasksCore(params, flavor) {
       return { content: [{ type: "text", text: JSON.stringify({ success: false, error: "No API key configured." }) }] };
     }
     const sdk = await getSDK();
-    const res = await flavor.resolve(sdk, currentCredentials.apiKey, intent, category);
+    let exactTask = null;
+    if (flavor.fetchExact && intent !== "") {
+      if (!taskIndexCache || taskIndexCache.length === 0) await refreshDynamicPrompts();
+      const slug = pickExactSlugFromIntent(intent, taskIndexCache, category);
+      if (slug) {
+        const got = await flavor.fetchExact(sdk, currentCredentials.apiKey, slug).catch(() => null);
+        if (got?.status === "ok" && got.task && typeof got.task.slug === "string") exactTask = got.task;
+      }
+    }
+    const res = exactTask ? { status: "ok", markdown: renderSingleTaskMarkdown(exactTask), markdownBody: String(exactTask.markdownBody ?? "") } : await flavor.resolve(sdk, currentCredentials.apiKey, intent, category);
     if (res.status === "ok") {
       const payload = {
         success: true,
@@ -124717,7 +124782,7 @@ async function resolveTasksCore(params, flavor) {
           if (spilled.filePath) payload.markdownBodyFilePath = spilled.filePath;
           else if (typeof spilled.inline === "string") payload.markdownBody = spilled.inline;
           if (slug && flavor.fetchManifest) {
-            const manifest = await flavor.fetchManifest(sdk, currentCredentials.apiKey, slug);
+            const manifest = exactTask ? normalizeMemoryManifest(exactTask.stateDocs ?? null) : await flavor.fetchManifest(sdk, currentCredentials.apiKey, slug);
             if (manifest) payload.stateDocs = manifest;
             if (manifest !== void 0) payload.memory = memorySummaryLine(manifest);
           }
@@ -124753,24 +124818,13 @@ server.tool(
     sayToUser: "Present these matching tasks to the user, briefly explain them, and ask which one to run before proceeding. Then, before running the one they pick, ASK HOW to run it and wait for an answer \u2014 always ask, never pick one silently: (1) one-time, in this chat, followed here; (2) one-time, headless in its own process via `ametyst task run <slug>`; (3) scheduled, recurring via `ametyst task schedule <slug> --every <dur>` (ask which cadence). Only then call runTask with the chosen mode (`in-chat` for 1, `headless` for 2) \u2014 for 3, hand the user the schedule command instead. When the user gave arguments for the run (a company, a cap, a list), pass them to runTask as `input` \u2014 they reach the task exactly as if the user had typed them in chat.",
     resolverFailedSayToUser: "Couldn't search tasks right now.",
     surfaceRawBodies: true,
-    fetchManifest: (sdk, apiKey, slug) => readTaskManifest(sdk, apiKey, slug)
+    fetchManifest: (sdk, apiKey, slug) => readTaskManifest(sdk, apiKey, slug),
+    fetchExact: (sdk, apiKey, slug) => sdk.tasks.get(apiKey, slug)
   })
 );
 function shellQuote2(s) {
   return `'${s.replace(/'/g, `'\\''`)}'`;
 }
-async function resolveTaskOwnership(sdk, apiKey, entity) {
-  try {
-    const createdBy = typeof entity?.createdBy === "string" ? entity.createdBy.trim() : "";
-    if (!createdBy) return { resolved: false };
-    const res = await sdk.compoundedSkills.getSyncSelection(apiKey);
-    const name = res?.status === "ok" && typeof res.self?.name === "string" ? res.self.name.trim() : "";
-    if (!name) return { resolved: false };
-    return { resolved: true, isOwner: name === createdBy, createdBy };
-  } catch {
-    return { resolved: false };
-  }
-}
 function taskMemoryBlock(slug, docKey) {
   const listRecords = `taskMemoryGet({ taskSlug: "${slug}", records: true, kind: "<kind>" })`;
   return {
@@ -124793,6 +124847,18 @@ function closeAllLiveDashboards() {
   liveDashboards.clear();
 }
 process.once("exit", closeAllLiveDashboards);
+function shutdownForHostClose() {
+  try {
+    fireAutoShareOnShutdown();
+  } catch {
+  }
+  if (liveUnlockListener) {
+    void liveUnlockListener.close("closed").catch(() => {
+    });
+    liveUnlockListener = null;
+  }
+  closeAllLiveDashboards();
+}
 async function startLiveDashboard(entity, dir, sdk, apiKey) {
   const slug = typeof entity?.slug === "string" ? entity.slug : "";
   const html = entity?.dashboardHtml;
@@ -124961,7 +125027,7 @@ server.tool(
     fetch: (sdk, apiKey, ref) => sdk.tasks.get(apiKey, ref),
     pick: (res) => res.task,
     headlessCommand: (ref, input) => `ametyst task run ${ref}${input === void 0 ? "" : ` --input ${shellQuote2(input)}`}`,
-    headlessSayToUser: (_ref, command) => `Run \`${command}\` in a terminal \u2014 it materializes the task, runs it unattended, and ships back improvements on a clean finish. (\`task run\` is the unattended runner for every task row, whatever the task was originally authored as.) Paid steps go through your on-chain policy.`,
+    headlessSayToUser: (_ref, command) => `Run \`${command}\` in a terminal \u2014 it materializes the task, runs it unattended, and ships back improvements on a clean finish. (\`task run\` is the unattended runner for every task row, whatever the task was originally authored as.) Paid steps go through your on-chain policy. If you add \`--max-budget-usd <x>\`, that caps the MODEL's token spend for the headless run (it is forwarded to \`claude -p\`); merchant payments are bounded by your on-chain policy, not by that flag.`,
     honorFrontmatterDefault: true,
     materialize: (task, runId, runRoot) => materializeTask(task, runId, runRoot),
     buildDirective: ({ dir, slug, files, docKey, runRoot }) => {
@@ -126873,6 +126939,18 @@ async function startMCPServer(walletKeystoreJson, eoaAddress, config, versionNot
       }
     };
   }
+  if (hooks?.onTransportClosed) {
+    const inner = server.nativeServer.server;
+    const previousOnClose = inner.onclose;
+    inner.onclose = () => {
+      previousOnClose?.();
+      try {
+        hooks.onTransportClosed?.();
+      } catch (err) {
+        console.error(`\u26A0\uFE0F  onTransportClosed hook failed: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    };
+  }
   const transport = new StdioServerTransport();
   await server.nativeServer.connect(transport);
   console.error("\u2705 MCP Server started on stdio");
@@ -126924,6 +127002,39 @@ function delegateAllowanceRef(merchantSlug, capability) {
   return { permissionId, commerceInfoId };
 }
 
+// src/commands/serve-lifecycle.ts
+init_esm_shims();
+var HOST_CLOSE_GRACE_MS = 1e3;
+var PARENT_WATCHDOG_INTERVAL_MS = 3e4;
+var HOST_CLOSED_MESSAGE = "ametyst serve: host closed the session \u2014 exiting";
+function armHostLifecycle(deps) {
+  const graceMs = deps.graceMs ?? HOST_CLOSE_GRACE_MS;
+  const watchdogMs = deps.watchdogIntervalMs ?? PARENT_WATCHDOG_INTERVAL_MS;
+  let fired = false;
+  const hostClosed = (reason) => {
+    if (fired) return;
+    fired = true;
+    deps.log(`${HOST_CLOSED_MESSAGE} (${reason})`);
+    try {
+      void Promise.resolve(deps.shutdown()).catch(() => {
+      });
+    } catch {
+    }
+    setTimeout(() => deps.exit(0), graceMs);
+  };
+  deps.stdin.once("end", () => hostClosed("stdin ended"));
+  deps.stdin.once("close", () => hostClosed("stdin closed"));
+  const watchdog = setInterval(() => {
+    if (deps.getPpid() === 1) hostClosed("parent process gone");
+  }, watchdogMs);
+  watchdog.unref?.();
+  return {
+    hostClosed,
+    triggered: () => fired,
+    dispose: () => clearInterval(watchdog)
+  };
+}
+
 // src/commands/serve.ts
 init_version5();
 
@@ -127316,7 +127427,19 @@ async function serveCommand() {
   console.error(
     persisted ? isPlaintextVault(persisted) ? "Starting MCP server... (persisted UNENCRYPTED wallet found \u2014 always unlocked, no start_session needed)" : "Starting MCP server... (persisted wallet found \u2014 unlock with start_session)" : "Starting MCP server... (no saved wallet \u2014 one will be created on start_session)"
   );
+  let bridge = null;
+  const lifecycle = armHostLifecycle({
+    stdin: process.stdin,
+    getPpid: () => process.ppid,
+    shutdown: async () => {
+      shutdownForHostClose();
+      if (bridge) await bridge.close();
+    },
+    exit: (code) => process.exit(code),
+    log: (message) => console.error(message)
+  });
   await startMCPServer(keystore, eoa, { ...config, apiKey, apiKeySource: resolved.source ?? void 0 }, versionNotice, {
+    onTransportClosed: () => lifecycle.hostClosed("transport closed"),
     // Best-effort: materialize local `/`-command pointer skills for every published
     // task so they're available without a manual `ametyst task sync-skills`.
     // Deferred from boot to the MCP initialize handshake so the sync is CLIENT-AWARE:
@@ -127330,14 +127453,15 @@ async function serveCommand() {
     console.error("\u{1F512} delegate bridge not started \u2014 this MCP server is running inside a delegated run");
     return;
   }
-  const bridge = await startDelegateBridge({
+  bridge = await startDelegateBridge({
     spend: invokeSpendTool,
     isUnlocked: isWalletUnlockedForDelegate,
     resolveAllowanceRef: () => delegateAllowanceRef(DELEGATE_MERCHANT_SLUG, DELEGATE_CAPABILITY),
     version: CLI_VERSION
   });
   if (bridge) {
-    const closeBridge = () => void bridge.close().catch(() => {
+    const bound = bridge;
+    const closeBridge = () => void bound.close().catch(() => {
     });
     process.on("exit", closeBridge);
     process.on("SIGINT", closeBridge);
@@ -128406,6 +128530,14 @@ blast_radius: steps=${est.steps} paid=${est.paidSteps} estEur=${est.estCostEur ?
   }
   async function shipConstraints() {
     try {
+      const ownership = await resolveTaskOwnership(sdk, apiKey, task);
+      if (ownership.resolved && !ownership.isOwner) {
+        constraintsReport = { outcome: "skipped-not-owner", owner: ownership.createdBy };
+        console.log(
+          `Task ${task.slug}: ship-back skipped: this task is owned by ${ownership.createdBy}; your learnings stay in the run diary (and the member-scoped "learnings" document when declared)`
+        );
+        return;
+      }
       const constraintsPath = join24(dir, "CONSTRAINTS.md");
       const materializedConstraints = existsSync16(constraintsPath) ? readFileSync15(constraintsPath, "utf-8") : void 0;
       if (materializedConstraints === void 0) return;
@@ -128908,6 +129040,60 @@ function plistEnvKeys(xml) {
   if (close < 0) return [];
   return [...xml.slice(open, close).matchAll(/<key>([^<]*)<\/key>/g)].map((m) => unescapeXml(m[1]));
 }
+function plistProgramArguments(xml) {
+  const anchor = xml.indexOf("<key>ProgramArguments</key>");
+  if (anchor < 0) return [];
+  const open = xml.indexOf("<array>", anchor);
+  if (open < 0) return [];
+  const close = xml.indexOf("</array>", open);
+  if (close < 0) return [];
+  return [...xml.slice(open, close).matchAll(/<string>([^<]*)<\/string>/g)].map((m) => unescapeXml(m[1]));
+}
+function cronCommandArgv(line) {
+  const words = shellWords(line);
+  const cd = words.indexOf("cd");
+  const amp = words.indexOf("&&", cd >= 0 ? cd + 2 : 0);
+  if (amp < 0) return [];
+  let i = amp + 1;
+  while (i < words.length && /^[A-Za-z_][A-Za-z0-9_]*=/.test(words[i])) i++;
+  const argv = [];
+  for (; i < words.length; i++) {
+    if (words[i] === "#") break;
+    argv.push(words[i].replace(/\\%/g, "%"));
+  }
+  return argv;
+}
+function parseScheduledArgs(argv) {
+  const out = {};
+  const valueOf = (i, flag) => {
+    const w = argv[i];
+    if (w === flag) return argv[i + 1];
+    if (w.startsWith(`${flag}=`)) return w.slice(flag.length + 1);
+    return void 0;
+  };
+  for (let i = 0; i < argv.length; i++) {
+    const input = valueOf(i, "--input");
+    if (input !== void 0) out.input = input;
+    const budget = valueOf(i, "--max-budget-usd");
+    if (budget !== void 0) {
+      const n = Number(budget);
+      if (Number.isFinite(n)) out.maxBudgetUsd = n;
+    }
+  }
+  return out;
+}
+var SCHEDULE_INPUT_DISPLAY_MAX = 60;
+function formatScheduleEntryLine(e) {
+  const parts2 = [e.namespace, e.slug];
+  if (typeof e.args.input === "string") {
+    const flat = e.args.input.replace(/\s+/g, " ").trim();
+    const shown = flat.length > SCHEDULE_INPUT_DISPLAY_MAX ? `${flat.slice(0, SCHEDULE_INPUT_DISPLAY_MAX)}\u2026` : flat;
+    parts2.push(`input: "${shown}"`);
+  }
+  if (typeof e.args.maxBudgetUsd === "number") parts2.push(`budget: $${e.args.maxBudgetUsd}`);
+  parts2.push(`env: ${e.envKeys.length ? e.envKeys.join(", ") : "\u2014"}`);
+  return parts2.join("  ");
+}
 function shellWords(s) {
   const out = [];
   let i = 0;
@@ -128956,17 +129142,22 @@ function listEntries(kind, opts = {}) {
     return readdirSync6(dir).filter((f) => f.startsWith(prefix) && f.endsWith(".plist")).map((f) => {
       const slug = f.slice(prefix.length, -".plist".length);
       let envKeys = [];
+      let args = {};
       try {
-        envKeys = plistEnvKeys(String(readFileSync16(join25(dir, f), "utf-8")));
+        const xml = String(readFileSync16(join25(dir, f), "utf-8"));
+        envKeys = plistEnvKeys(xml);
+        args = parseScheduledArgs(plistProgramArguments(xml));
       } catch {
         envKeys = [];
+        args = {};
       }
-      return { slug, envKeys: [...envKeys].sort() };
+      return { slug, envKeys: [...envKeys].sort(), args };
     });
   }
   return readCrontab().split("\n").filter((l) => l.includes(`# ${prefix}`)).map((l) => ({
     slug: l.trimEnd().slice(l.trimEnd().lastIndexOf(prefix) + prefix.length),
-    envKeys: cronEnvKeys(l).sort()
+    envKeys: cronEnvKeys(l).sort(),
+    args: parseScheduledArgs(cronCommandArgv(l))
   }));
 }
 function scheduleTask(slug, opts = {}) {
@@ -129113,7 +129304,11 @@ var taskCommand = new Command("task").description(
 );
 taskCommand.command("run <id>").description(
   "Materialize a task and run it headless, then ship back improvements on clean exit. While it runs, the task's dashboard (if it has one) is served on http://localhost:4477 (base port: AMETYST_TASK_DASHBOARD_PORT, walking up when taken) and opened in the browser once when stdout is a TTY (set AMETYST_DASHBOARD_NO_OPEN=1 to skip)"
-).option("--max-budget-usd <x>", "hard spend ceiling in USD", (v) => Number(v)).option(
+).option(
+  "--max-budget-usd <x>",
+  "cap on the MODEL's token spend for this headless run (forwarded to claude -p); merchant payments are bounded by your on-chain policy, not by this flag",
+  (v) => Number(v)
+).option(
   "--max-concurrent-fires <n>",
   "ceiling on simultaneously-live fires of this task; 0 = unlimited (default: AMETYST_TASK_MAX_CONCURRENT_FIRES, else 6)",
   (v) => Number(v)
@@ -129144,7 +129339,7 @@ taskCommand.command("push <path>").description("Publish a task whose body is rea
 );
 taskCommand.command("schedule <slug>").description("Schedule a headless task run (launchd on macOS, crontab on Linux)").option("--at <hhmm>", "daily run time, 24h HH:MM (e.g. 02:30)").option("--every <dur>", "recurring interval, e.g. 30m, 1h, 1d").option(
   "--max-budget-usd <x>",
-  "optional hard spend ceiling per run in USD (opt-in; omitted by default)",
+  "cap on the MODEL's token spend for this headless run (forwarded to claude -p); merchant payments are bounded by your on-chain policy, not by this flag (opt-in; omitted by default)",
   (v) => Number(v)
 ).option(
   "--model <id>",
@@ -129185,11 +129380,7 @@ taskCommand.command("schedules").description(
   "List every scheduled job and the environment each armed job carries \u2014 across every label namespace, the legacy ones an older cli used included"
 ).action(() => {
   const entries = listAllScheduleEntries();
-  console.log(
-    entries.length ? entries.map(
-      (e) => `${e.namespace}  ${e.slug}  env: ${e.envKeys.length ? e.envKeys.join(", ") : "\u2014"}`
-    ).join("\n") : "no scheduled tasks"
-  );
+  console.log(entries.length ? entries.map(formatScheduleEntryLine).join("\n") : "no scheduled tasks");
 });
 taskCommand.command("sync-skills").description(
   "Write a local pointer skill per published task into the host agent's skills directory \u2014 .claude/skills/<slug>/SKILL.md for Claude, .codex/skills/<slug>/SKILL.md for Codex (restores /-slash-command invocation in file-based hosts)"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ametyst/cli",
-  "version": "0.3.11",
+  "version": "0.3.12",
   "private": false,
   "description": "Ametyst CLI — embedded MCP server, wallet ops, agent payments",
   "type": "module",
@@ -90,10 +90,10 @@
     "esbuild@>=0.27.3 <0.28.1": "0.28.1"
   },
   "optionalDependencies": {
-    "@ametyst/cli-darwin-arm64": "0.3.11",
-    "@ametyst/cli-darwin-x64": "0.3.11",
-    "@ametyst/cli-linux-x64-gnu": "0.3.11",
-    "@ametyst/cli-win32-x64-msvc": "0.3.11"
+    "@ametyst/cli-darwin-arm64": "0.3.12",
+    "@ametyst/cli-darwin-x64": "0.3.12",
+    "@ametyst/cli-linux-x64-gnu": "0.3.12",
+    "@ametyst/cli-win32-x64-msvc": "0.3.12"
   },
   "scripts": {
     "build:native": "cd native && cargo build --release && napi build --release",