@arp-protocol/cli 0.0.1 → 0.0.3

package/dist/chunks/{cli-0z6f3603.js → cli-10wacn76.js}

@@ -1,9 +1,12 @@
 #!/usr/bin/env node
+import {
+  domain_aliases_default
+} from "./cli-00qp1sj2.js";
 import {
   arpHome,
   loadOrCreateKeyFile,
   stateFile
-} from "./cli-tyey74p3.js";
+} from "./cli-n4qagybd.js";
 import {
   ARP_DOMAIN_ATTESTORS,
   HAS_TAG,
@@ -12,6 +15,8 @@ import {
   bundleMatchesReceipt,
   contentIndexOf,
   contentRequestTypedData,
+  contentsFileOf,
+  contentsLines,
   createErc8004Client,
   createPublicClient,
   createWalletClient,
@@ -23,12 +28,17 @@ import {
   intuitionToolAtomLookup,
   multiVaultDeclareAbi,
   multiVaultReads,
+  paymentAtomLabel,
+  readDomainTree,
+  readSkillContents,
   receiptMatchesContent,
   recoverContentRequester,
   renderSkillPrompt,
+  resolveDomain,
   reviewSkill,
   serveContent,
   serveSkillBundle,
+  signCategoryRequest,
   signLineRequest,
   signListToolRequest,
   signMintGasRequest,
@@ -36,19 +46,19 @@ import {
   skillRefFromUrl,
   sponsorProofDigest,
   verifyContentReceipt
-} from "./cli-74hv4etk.js";
+} from "./cli-wev0jgf7.js";
 import {
   encodeFunctionData
-} from "./cli-c8568g4c.js";
+} from "./cli-0gsbnq5w.js";
 import {
   privateKeyToAccount
-} from "./cli-v446mw5v.js";
+} from "./cli-fbwpcfvp.js";
 import {
   getAddress,
   isHex,
   keccak256,
   stringToBytes
-} from "./cli-0hqxver6.js";
+} from "./cli-mhzh9z8k.js";
 
 // ../mcp/src/content.ts
 import { existsSync, writeFileSync } from "node:fs";
@@ -183,8 +193,9 @@ var _13579_default = {
     domainScopeEnforcer: "0x516B82E29e3Ca46Ca810FC2EEf348932b198f7f9",
     trustStakeCapEnforcer: "0x19e07280F1483Aa9aCDb1a7F8C61bfd20c7879Bc",
     identityRegistry: "0xC165A2AD2E540A4069E02834009161E2b4490d5A",
-    sponsor: "0xE596096F4176b682E300d73963e7B04B383C1AA1",
-    _sponsorNote: "The address ARP's sponsoring service sends from on 13579 (apps/sponsor, ADR 0092, 0094): its GET / answered this on 2026-11-02. /tools counts every deposit it sent in Usage: the proof-gated ones, the edge creations it paid for, and, because the address is also ARP's deployer, 3 deposits written before the service existed (scripts/measure/sponsor-deposit-provenance.ts, 2026-11-03). Not a contract: an EOA whose key is in a 0600 file the agent never reads.",
+    sponsor: "0x77939A4c276f3E549276CEB3A09CDa1fF58b7ec9",
+    sponsorV1: "0xE596096F4176b682E300d73963e7B04B383C1AA1",
+    _sponsorNote: "The address ARP's sponsoring service sends from on 13579 (apps/sponsor, ADR 0092, 0094). Since 2026-11-09 a key of its own, for the hosted service (task 78, ADR 0149): sponsorV1 is the deployer's key, which sent for it before and also holds mainnet funds. Not a contract: an EOA whose key is a file mounted into the service's container, never read by an agent. Before 2026-11-09: The address ARP's sponsoring service sends from on 13579 (apps/sponsor, ADR 0092, 0094): its GET / answered this on 2026-11-02. /tools counts every deposit it sent in Usage: the proof-gated ones, the edge creations it paid for, and, because the address is also ARP's deployer, 3 deposits written before the service existed (scripts/measure/sponsor-deposit-provenance.ts, 2026-11-03). Not a contract: an EOA whose key is in a 0600 file the agent never reads.",
     deployedTxs: {
       moduleRegistry: "0x6ee4f4d76dd55c69ea434f8c3c204cb6149df1c588910b1792db1650681fbc2e",
       moduleRegistryV1: "0x02abe9a0c598df131995bc40927a4e0be0b86e7bdbfe747cfdf37fb19b069634",
@@ -6740,10 +6751,69 @@ function text(id, value) {
 var isTermId = (value) => typeof value === "string" && /^0x[0-9a-fA-F]{64}$/.test(value);
 var isAddress = (value) => typeof value === "string" && /^0x[0-9a-fA-F]{40}$/.test(value);
 
+// ../mcp/src/hosted.ts
+var HOSTED_FLAG = "ARP_HOSTED";
+var HOST_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z][a-z0-9-]{0,61}[a-z0-9]$/;
+var REFUSED_WHEN_HOSTED = [
+  "ARP_RECEIPT_KEY",
+  "ARP_AGENT_PRIVATE_KEY",
+  "ARP_ALLOW_PRIVATE_PROBE"
+];
+function isHosted(env = process.env) {
+  return env[HOSTED_FLAG] === "1";
+}
+function publicHost(env = process.env) {
+  const name = (env["ARP_PUBLIC_HOST"] ?? "").trim().toLowerCase();
+  return name === "" ? null : name;
+}
+function hostedRefusal(env = process.env) {
+  const name = publicHost(env);
+  const flag = env[HOSTED_FLAG];
+  if (flag !== undefined && flag !== "" && flag !== "1") {
+    return `${HOSTED_FLAG} must be 1 or unset, not ${flag}`;
+  }
+  if (!isHosted(env)) {
+    return name === null ? null : `ARP_PUBLIC_HOST needs ${HOSTED_FLAG}=1: only the hosted read-only server answers a public name`;
+  }
+  if (env["ARP_TOOLS"] !== "read") {
+    return `${HOSTED_FLAG}=1 serves ARP_TOOLS=read only, not ${env["ARP_TOOLS"] ?? "every tool"}`;
+  }
+  if (env["ARP_TARGET"] !== "testnet") {
+    return `${HOSTED_FLAG}=1 reads testnet 13579 only: set ARP_TARGET=testnet`;
+  }
+  if (env["ARP_TRANSPORT"] === "stdio") {
+    return `${HOSTED_FLAG}=1 serves HTTP; stdio is for a client on the same machine`;
+  }
+  for (const variable of REFUSED_WHEN_HOSTED) {
+    if ((env[variable] ?? "") !== "")
+      return `${HOSTED_FLAG}=1 refuses ${variable}: a hosted server holds no key and probes no private address`;
+  }
+  if (name === null) {
+    return `${HOSTED_FLAG}=1 needs ARP_PUBLIC_HOST, the name the proxy forwards`;
+  }
+  if (!HOST_NAME.test(name)) {
+    return `ARP_PUBLIC_HOST must be a bare host name such as mcp.example.org, not ${env["ARP_PUBLIC_HOST"]}`;
+  }
+  return null;
+}
+function loggable(error, message, env = process.env) {
+  if (!isHosted(env))
+    return message;
+  return error instanceof Error ? error.name : "error";
+}
+
 // ../mcp/src/config.ts
 import { resolve } from "node:path";
+var refusedHosting = hostedRefusal(process.env);
+if (refusedHosting !== null) {
+  console.error(refusedHosting);
+  process.exit(1);
+}
+var HOSTED = isHosted(process.env);
 var PORT = Number(process.env.PORT ?? 3002);
 var RECEIPT_SIGNER = (() => {
+  if (HOSTED)
+    return null;
   try {
     return receiptSigner();
   } catch (error) {
@@ -6758,7 +6828,8 @@ function inProject(path, projectDir = process.env["ARP_PROJECT_DIR"]) {
 var SKILLS_DIR = process.env["ARP_SKILLS_DIR"] === undefined ? undefined : inProject(process.env["ARP_SKILLS_DIR"]);
 var READ_ONLY = process.env["ARP_TOOLS"] === "read" || DESKTOP;
 var CONTENT_URL = process.env["ARP_CONTENT"] ?? "http://127.0.0.1:3002";
-var SPONSOR_URL = process.env["ARP_SPONSOR"] ?? "http://127.0.0.1:3200";
+var SPONSOR_DEFAULT = "http://127.0.0.1:3200";
+var SPONSOR_URL = process.env["ARP_SPONSOR"] ?? SPONSOR_DEFAULT;
 var SESSION_LOG = inProject(process.env["ARP_SESSION_LOG"] ?? ".arp/session.jsonl");
 var RECEIPTS_LOG = inProject(process.env["ARP_RECEIPTS"] ?? ".arp/receipts.jsonl");
 var TARGETS = { mainnet: 1155, testnet: 13579 };
@@ -6793,6 +6864,12 @@ function required(value, what) {
   return value;
 }
 var GRAPHQL = required(GRAPHQL_URL, "a graphqlUrl");
+var SKILLS_INDEX = (() => {
+  const raw2 = process.env.ARP_SKILLS_INDEX_URL?.trim() ?? "";
+  if (raw2 === "off")
+    return null;
+  return raw2 === "" ? "https://skills.sh" : raw2;
+})();
 var RPC = required(RPC_URL, "an rpcUrl");
 var MULTI_VAULT = required(MULTI_VAULT_RAW, "a multiVault");
 var reads = multiVaultReads({ address: MULTI_VAULT, chainId, rpcUrl: RPC });
@@ -6836,7 +6913,8 @@ var IN_CONTEXT_OF = (() => {
 })();
 var LINE_PAYERS = (() => {
   const arp = record.arp;
-  return typeof arp?.deployer === "string" ? [arp.deployer] : [];
+  const wallets = [arp?.deployer, arp?.sponsor].filter((wallet) => typeof wallet === "string");
+  return [...new Set(wallets)];
 })();
 function domainWalk() {
   return {
@@ -6848,6 +6926,11 @@ function domainWalk() {
   };
 }
 
+// ../mcp/src/domain-words.ts
+function domainWords(tree, root = "tool") {
+  return { labels: tree.subtree(root), aliases: domain_aliases_default.aliases };
+}
+
 // ../mcp/src/client-session.ts
 var ASK_TIMEOUT_MS = 15 * 60 * 1000;
 var declaredElicitation = false;
@@ -6978,7 +7061,7 @@ import { dirname as dirname2, join as join2 } from "node:path";
 var SAFE_SKILL_NAME = /^[a-z0-9][a-z0-9._-]*$/i;
 function installPrompt(receipt, files, installPath, context) {
   const ref = skillRefFromUrl(receipt.receipt.url);
-  return renderSkillPrompt(reviewSkill({
+  const prompt = renderSkillPrompt(reviewSkill({
     repo: ref?.repo ?? receipt.receipt.url,
     skill: ref?.skill ?? receipt.receipt.url,
     path: receipt.receipt.path,
@@ -6987,6 +7070,9 @@ function installPrompt(receipt, files, installPath, context) {
     files,
     thirdParty: context.thirdParty
   }), installPath);
+  const contains = contentsLines(readSkillContents(files.map((file) => contentsFileOf(file.path, file.bytes))), 3);
+  return { ...prompt, message: [prompt.message, "", "What its files contain:", ...contains].join(`
+`) };
 }
 function installFiles(skillsDir, skill, files) {
   if (!SAFE_SKILL_NAME.test(skill))
@@ -7153,7 +7239,8 @@ async function getSkill(config, agent, atom) {
   const line = { atom: signed.receipt.atom, url: signed.receipt.url, skill: ref?.skill ?? null, receipt: signed };
   appendFileSync2(join4(config.stateDir, "receipts.jsonl"), `${JSON.stringify(line)}
 `);
-  const served = { atom: signed.receipt.atom, url: signed.receipt.url, name: ref?.skill ?? signed.receipt.url, text: new TextDecoder().decode(skillMd.bytes) };
+  const contains = contentsLines(readSkillContents(files.map((file) => contentsFileOf(file.path, file.bytes))));
+  const served = { atom: signed.receipt.atom, url: signed.receipt.url, name: ref?.skill ?? signed.receipt.url, text: new TextDecoder().decode(skillMd.bytes), contains };
   if (config.skillsDir === undefined || ref === null || !SAFE_SKILL_NAME.test(ref.skill))
     return served;
   const prompt = installPrompt(signed, files, join4(config.skillsDir, ref.skill), config.reviewContext?.(signed.receipt.url) ?? { committedAt: null, thirdParty: [] });
@@ -7230,9 +7317,26 @@ async function writeLine(config, agent, input) {
   const listing2 = await signListToolRequest({ address: agent.address, url: input.toolUrl, nonce: keccak256(stringToBytes(`list-${input.toolUrl}-${Date.now()}`)), expiresAt: expiresAt() }, DESKTOP_CHAIN_ID, agent.account);
   const listed = await post(config, "/list-tool", { url: input.toolUrl, request: listing2 });
   if (listed.status !== 200 || typeof listed.body["atomId"] !== "string") {
-    throw new Error(`the tool could not be listed (${listed.status}): ${String(listed.body["error"] ?? "")}`);
+    const rule = typeof listed.body["rule"] === "string" ? `, ${listed.body["rule"]}` : "";
+    throw new Error(`the sponsor would not list ${input.toolUrl} (${listed.status}${rule}): ${String(listed.body["error"] ?? "")}`);
   }
   const tool = listed.body["atomId"];
+  if (input.newDomain !== undefined && input.domain !== undefined) {
+    const category = await signCategoryRequest({
+      agent: agent.address,
+      ...ref,
+      label: input.domain,
+      parent: input.newDomain.parent,
+      subject: tool,
+      reason: input.newDomain.why,
+      nonce: keccak256(stringToBytes(`category-${tool}-${input.domain}-${Date.now()}`)),
+      expiresAt: expiresAt()
+    }, DESKTOP_CHAIN_ID, agent.account);
+    const filed = await post(config, "/propose-category", { request: category });
+    if (filed.status !== 200) {
+      throw new Error(`the domain "${input.domain}" could not be added (${filed.status}): ${String(filed.body["error"] ?? "")}`);
+    }
+  }
   const wait = config.sleep ?? ((ms) => new Promise((done) => setTimeout(done, ms)));
   const deadline = Date.now() + (config.indexerWaitMs ?? 120000);
   let approved = false;
@@ -7244,6 +7348,9 @@ async function writeLine(config, agent, input) {
       domain: input.domain ?? "",
       outcome: input.outcome,
       reason: input.reason ?? "",
+      payment: input.payment === undefined ? "" : paymentAtomLabel(input.payment),
+      endpoint: input.payment === undefined ? "" : input.toolUrl,
+      need: input.need ?? "",
       nonce: keccak256(stringToBytes(`line-${tool}-${Date.now()}`)),
       expiresAt: expiresAt()
     }, DESKTOP_CHAIN_ID, agent.account);
@@ -7258,7 +7365,7 @@ async function writeLine(config, agent, input) {
       };
     }
     const error = String(answer.body["error"] ?? "");
-    const notIndexedYet = answer.status === 403 && /no identity atom on the graph/.test(error) || answer.status === 422 && answer.body["retry"] === true || answer.status === 503 && answer.body["retry"] === true;
+    const notIndexedYet = answer.status === 403 && /no identity atom on the graph/.test(error) || answer.status === 422 && answer.body["retry"] === true || answer.status === 503 && answer.body["retry"] === true || answer.status === 422 && answer.body["rule"] === "unknown_domain" && input.newDomain !== undefined;
     if (notIndexedYet && Date.now() < deadline) {
       await wait(5000);
       continue;
@@ -7354,7 +7461,7 @@ Use when: "make a game", "build a browser game",…`, installs: 26583 }, "github
 real-time WebSockets, scheduled tasks, tool integration, and chat capabilities.
 Generates production-ready agent code…`, installs: 3702 }, "github.com/cloudflare/skills?skill=building-mcp-server-on-cloudflare": { description: `Builds remote MCP (Model Context Protocol) servers on Cloudflare Workers
 with tools, OAuth authentication, and production deployment. Generates
-server code, configures auth providers, and deploys to…`, installs: 3424 }, "github.com/easyzoom/aix-skills?skill=webpage-to-markdown": { description: "Use when converting a public webpage URL into clean Markdown content", installs: null }, "github.com/JimLiu/baoyu-skills?skill=baoyu-url-to-markdown": { description: "Fetch any URL and convert to markdown using baoyu-fetch CLI (Chrome CDP with site-specific adapters). Built-in adapters for X/Twitter, YouTube transcripts, Hacker News threads, and generic pages via…", installs: null }, "github.com/WyattBlue/auto-editor?skill=auto-editor": { description: "Record a microphone or edit video/audio with the auto-editor CLI — cut out dead space (silence, motionlessness, black frames), set the pace, make manual cuts, and render the result. Use when someone…", installs: null }, "github.com/Melvynx/video-agent-skills?skill=short-editing": { description: "Edits a talking-head take end to end into a paper-style motion design short (1080x1920, also 1:1 and 16:9) with its own render engine (Node + Chrome + ffmpeg, free, offline). Use when the user says…", installs: null }, "github.com/clueso-ai/skills?skill=remove-filler-words": { description: `Strip ums, ahs, false starts, and rambling from a video's narration - clean the transcript, regenerate the voiceover, and keep the visuals aligned to the new timing. Use when the user says "remove…`, installs: null }, "github.com/browser-use/video-use?skill=video-use": { description: "Edit any video by conversation. Transcribe, cut, color grade, generate overlay animations, burn subtitles — for talking heads, montages, tutorials, travel, interviews. No presets, no menus. Ask…", installs: null }, "github.com/louisedesadeleer/cut-video?skill=cut-video": { description: "Tighten a long recording aggressively — remove silences, fillers, hedges, false starts, and repetitions while preserving laughs and comedic pauses. Cuts are driven by Montreal Forced Aligner (MFA)…", installs: null }, "github.com/softaworks/agent-toolkit?skill=web-to-markdown": { description: "Use ONLY when the user explicitly says: 'use the skill web-to-markdown ...' (or 'use a skill web-to-markdown ...'). Converts webpage URLs to clean Markdown by calling the local web2md CLI (Puppeteer…", installs: null }, "github.com/Wieedze/ARP?skill=arp": { description: "Find the skill, MCP server or API that fits a task, before you pick one yourself, and see which ones other agents actually used. Use whenever a task needs a tool you do not already have — search the…", installs: null } }
+server code, configures auth providers, and deploys to…`, installs: 3424 }, "github.com/easyzoom/aix-skills?skill=webpage-to-markdown": { description: "Use when converting a public webpage URL into clean Markdown content", installs: null }, "github.com/JimLiu/baoyu-skills?skill=baoyu-url-to-markdown": { description: "Fetch any URL and convert to markdown using baoyu-fetch CLI (Chrome CDP with site-specific adapters). Built-in adapters for X/Twitter, YouTube transcripts, Hacker News threads, and generic pages via…", installs: null }, "github.com/WyattBlue/auto-editor?skill=auto-editor": { description: "Record a microphone or edit video/audio with the auto-editor CLI — cut out dead space (silence, motionlessness, black frames), set the pace, make manual cuts, and render the result. Use when someone…", installs: null }, "github.com/Melvynx/video-agent-skills?skill=short-editing": { description: "Edits a talking-head take end to end into a paper-style motion design short (1080x1920, also 1:1 and 16:9) with its own render engine (Node + Chrome + ffmpeg, free, offline). Use when the user says…", installs: null }, "github.com/clueso-ai/skills?skill=remove-filler-words": { description: `Strip ums, ahs, false starts, and rambling from a video's narration - clean the transcript, regenerate the voiceover, and keep the visuals aligned to the new timing. Use when the user says "remove…`, installs: null }, "github.com/browser-use/video-use?skill=video-use": { description: "Edit any video by conversation. Transcribe, cut, color grade, generate overlay animations, burn subtitles — for talking heads, montages, tutorials, travel, interviews. No presets, no menus. Ask…", installs: null }, "github.com/louisedesadeleer/cut-video?skill=cut-video": { description: "Tighten a long recording aggressively — remove silences, fillers, hedges, false starts, and repetitions while preserving laughs and comedic pauses. Cuts are driven by Montreal Forced Aligner (MFA)…", installs: null }, "github.com/softaworks/agent-toolkit?skill=web-to-markdown": { description: "Use ONLY when the user explicitly says: 'use the skill web-to-markdown ...' (or 'use a skill web-to-markdown ...'). Converts webpage URLs to clean Markdown by calling the local web2md CLI (Puppeteer…", installs: null }, "github.com/Wieedze/ARP?skill=arp": { description: "Check a skill, MCP server or API before you install or pay for it, and see what other agents declared about it. Use whenever a task needs a tool you do not already have — search the registry by the…", installs: null }, "github.com/intuition-box/ARP?skill=arp": { description: "Check a skill, MCP server or API before you install or pay for it, and see what other agents declared about it. Use whenever a task needs a tool you do not already have — search the registry by the…", installs: null } }
 };
 
 // ../mcp/src/tool-search.ts
@@ -7455,6 +7562,68 @@ function pageOf(entries, offset, limit) {
     nextOffset: offset + limit < entries.length ? offset + limit : null
   };
 }
+function mergeIndexed(matched, indexed, options) {
+  const out = [];
+  const taken = new Set;
+  const add = (entry) => {
+    const key = options.keyOf(entry);
+    if (key !== null) {
+      if (taken.has(key))
+        return;
+      taken.add(key);
+    }
+    out.push(entry);
+  };
+  for (const entry of matched)
+    if (options.leads(entry))
+      add(entry);
+  indexed.forEach(({ key }, index) => add(options.held(key) ?? options.make(index)));
+  for (const entry of matched)
+    add(entry);
+  return out;
+}
+
+// ../mcp/src/desktop/file-category.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+async function fileCategory(args, deps) {
+  let request;
+  try {
+    request = await deps.sign({
+      label: args.category,
+      parent: args.parent ?? "",
+      subject: args.id,
+      reason: args.reason ?? ""
+    });
+  } catch (error) {
+    return { error: `this agent could not sign the request: ${error instanceof Error ? error.message : String(error)}` };
+  }
+  return submitCategory(request, deps);
+}
+async function submitCategory(request, deps) {
+  let response;
+  try {
+    response = await deps.fetch(`${deps.sponsorUrl}/propose-category`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ request })
+    });
+  } catch {
+    return { error: "ARP's sponsor is not reachable, so the category was not filed." };
+  }
+  const answer = await response.json().catch(() => null);
+  if (response.ok && isRecord(answer) && typeof answer["label"] === "string") {
+    return {
+      filed: answer["label"],
+      new_category: answer["newCategory"] === true,
+      written: answer["created"] === true
+    };
+  }
+  const rule = isRecord(answer) && typeof answer["rule"] === "string" ? answer["rule"] : "unknown";
+  const detail = isRecord(answer) && typeof answer["error"] === "string" ? answer["error"] : `HTTP ${response.status}`;
+  return { refused: rule, detail };
+}
 
 // ../mcp/src/desktop/handlers.ts
 var agent;
@@ -7495,6 +7664,49 @@ async function desktopTool(id, name, args) {
   if (typeof atom !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(atom)) {
     return fail(id, -32602, "id must be the 0x + 32 bytes id from arp_find_tools");
   }
+  if (name === "arp_file_category") {
+    const asked = args["category"];
+    if (typeof asked !== "string" || asked.trim().length === 0) {
+      return fail(id, -32602, "category must be a category name");
+    }
+    const parent = typeof args["parent"] === "string" ? args["parent"] : undefined;
+    let category = asked;
+    const resolved = resolveDomain(asked, domainWords(await readDomainTree(domainWalk())));
+    if (resolved.status === "node")
+      category = resolved.label;
+    else if (parent === undefined) {
+      return text(id, {
+        refused: "unknown_category",
+        detail: `"${asked}" is not a category.${resolved.suggestions.length === 0 ? "" : ` Closest: ${resolved.suggestions.join(", ")}.`} Pick one, or pass parent and reason to add it.`
+      });
+    }
+    const reason = typeof args["reason"] === "string" ? args["reason"] : undefined;
+    return text(id, await fileCategory({
+      id: atom,
+      category,
+      ...parent === undefined ? {} : { parent },
+      ...reason === undefined ? {} : { reason }
+    }, {
+      sponsorUrl: SPONSOR_URL,
+      fetch: globalThis.fetch.bind(globalThis),
+      sign: async (fields) => {
+        const sender = agentFor();
+        const config = loopConfig();
+        const state = await ensureAgent(config, sender);
+        return signCategoryRequest({
+          agent: sender.address,
+          agentRegistry: registryRef(config),
+          agentId: state.agentId,
+          label: fields.label,
+          parent: fields.parent,
+          subject: atom,
+          reason: fields.reason,
+          nonce: keccak256(stringToBytes(`category-${atom}-${Date.now()}`)),
+          expiresAt: Math.floor(Date.now() / 1000) + 600
+        }, DESKTOP_CHAIN_ID, sender.account);
+      }
+    }));
+  }
   const loop = loopConfig();
   try {
     if (name === "arp_get_skill") {
@@ -7502,6 +7714,8 @@ async function desktopTool(id, name, args) {
       return text(id, {
         name: skill.name,
         source: skill.url,
+        contains: skill.contains,
+        show_the_person_first: "Show the person the `contains` lines above as they are before you follow the skill or install it: facts from its files, not a verdict.",
         skill_md: skill.text,
         ...skill.installedAt !== undefined ? {
           installed_at: skill.installedAt,
@@ -7524,4 +7738,4 @@ async function desktopTool(id, name, args) {
   }
 }
 
-export { serveContentRequest, result, fail, text, isTermId, isAddress, PORT, RECEIPT_SIGNER, DESKTOP, READ_ONLY, SESSION_LOG, RECEIPTS_LOG, targetName, chainId, record, sessionCatalogue, acceptedSigners, GRAPHQL, RPC, MULTI_VAULT, reads, toolAtoms, DOMAIN_ROOT, REACHABLE_ATOM, DOMAIN_ATTESTORS, directory, IN_CONTEXT_OF, LINE_PAYERS, domainWalk, skill_facts_default, recordClientCapabilities, stdioRouter, keyOf, describe, matchOf, rankOf, collapseCopies, cachedFor, pageOf, writeLine, loopConfig, agentFor, desktopTool };
+export { serveContentRequest, result, fail, text, isTermId, isAddress, publicHost, loggable, HOSTED, PORT, RECEIPT_SIGNER, DESKTOP, READ_ONLY, SPONSOR_URL, SESSION_LOG, RECEIPTS_LOG, targetName, chainId, record, sessionCatalogue, acceptedSigners, GRAPHQL, SKILLS_INDEX, RPC, MULTI_VAULT, reads, toolAtoms, DOMAIN_ROOT, REACHABLE_ATOM, DOMAIN_ATTESTORS, directory, IN_CONTEXT_OF, LINE_PAYERS, domainWalk, domainWords, skill_facts_default, recordClientCapabilities, stdioRouter, keyOf, describe, matchOf, rankOf, collapseCopies, cachedFor, pageOf, mergeIndexed, submitCategory, sponsorApproval, writeLine, loopConfig, agentFor, desktopTool };

package/dist/chunks/{cli-zpft011j.js → cli-64fx73kx.js}

@@ -2,13 +2,13 @@
 import {
   arpHome,
   loadOrCreateKeyFile
-} from "./cli-tyey74p3.js";
+} from "./cli-n4qagybd.js";
 import {
   privateKeyToAccount
-} from "./cli-v446mw5v.js";
+} from "./cli-fbwpcfvp.js";
 import {
   isHex
-} from "./cli-0hqxver6.js";
+} from "./cli-mhzh9z8k.js";
 
 // ../node/src/node-key.ts
 import { homedir } from "node:os";