@arp-protocol/cli 0.0.1 → 0.0.4

package/dist/chunks/{cli-0z6f3603.js → cli-8m56jsfx.js}

@@ -1,9 +1,15 @@
 #!/usr/bin/env node
+import {
+  "13579_default" as _13579_default
+} from "./cli-7c393v47.js";
+import {
+  domain_aliases_default
+} from "./cli-00qp1sj2.js";
 import {
   arpHome,
   loadOrCreateKeyFile,
   stateFile
-} from "./cli-tyey74p3.js";
+} from "./cli-n4qagybd.js";
 import {
   ARP_DOMAIN_ATTESTORS,
   HAS_TAG,
@@ -12,6 +18,8 @@ import {
   bundleMatchesReceipt,
   contentIndexOf,
   contentRequestTypedData,
+  contentsFileOf,
+  contentsLines,
   createErc8004Client,
   createPublicClient,
   createWalletClient,
@@ -23,12 +31,18 @@ import {
   intuitionToolAtomLookup,
   multiVaultDeclareAbi,
   multiVaultReads,
+  paymentAtomLabel,
+  readDomainTree,
+  readSkillContents,
   receiptMatchesContent,
   recoverContentRequester,
+  redactEndpointUrl,
   renderSkillPrompt,
+  resolveDomain,
   reviewSkill,
   serveContent,
   serveSkillBundle,
+  signCategoryRequest,
   signLineRequest,
   signListToolRequest,
   signMintGasRequest,
@@ -36,19 +50,19 @@ import {
   skillRefFromUrl,
   sponsorProofDigest,
   verifyContentReceipt
-} from "./cli-74hv4etk.js";
+} from "./cli-wer26exb.js";
 import {
   encodeFunctionData
-} from "./cli-c8568g4c.js";
+} from "./cli-0gsbnq5w.js";
 import {
   privateKeyToAccount
-} from "./cli-v446mw5v.js";
+} from "./cli-fbwpcfvp.js";
 import {
   getAddress,
   isHex,
   keccak256,
   stringToBytes
-} from "./cli-0hqxver6.js";
+} from "./cli-mhzh9z8k.js";
 
 // ../mcp/src/content.ts
 import { existsSync, writeFileSync } from "node:fs";
@@ -96,175 +110,6 @@ var _1155_default = {
   deployedAt: "2026-09-16",
   gasCost: "0.0000228 TRUST for both enforcers"
 };
-// ../../data/deployments/13579.json
-var _13579_default = {
-  chain: {
-    name: "Intuition Testnet",
-    chainId: 13579,
-    chainIdHex: "0x350b",
-    nativeCurrency: {
-      name: "Test Trust",
-      symbol: "tTRUST",
-      decimals: 18
-    },
-    rpcUrl: "https://testnet.rpc.intuition.systems/http",
-    explorerUrl: "https://testnet.explorer.intuition.systems",
-    graphqlUrl: "https://testnet.intuition.sh/v1/graphql",
-    _source: [
-      "Intuition skill: .claude/skills/intuition/SKILL.md (table at line 149, Viem chain config at line 184)",
-      "MetaMask deployments: ~/Project/metamask-smart-accounts-kit/packages/delegation-deployments/src/index.ts (CHAIN_ID.intuitionTestnet = 0x350b)"
-    ]
-  },
-  intuition: {
-    _source: ".claude/skills/intuition/SKILL.md line 152",
-    multiVault: "0x2Ece8D4dEdcB9918A398528f3fa4688b1d2CAB91"
-  },
-  metamaskDelegationFramework: {
-    version: "1.3.0",
-    _source: "MetaMask deployments package (~/Project/metamask-smart-accounts-kit/packages/delegation-deployments/src/contractAddresses.ts → DEPLOYMENTS_1_3_0). All addresses are deterministic CREATE2 — same value on every chain MetaMask supports. Intuition Testnet (chainId 0x350b) is explicitly mapped to DEPLOYMENTS_1_3_0 at packages/delegation-deployments/src/index.ts line 148.",
-    delegationManager: "0xdb9B1e94B5b69Df7e401DDbedE43491141047dB3",
-    entryPoint: "0x0000000071727De22E5E9d8BAf0edAc6f37da032",
-    simpleFactory: "0x69Aa2f9fe1572F1B640E1bbc512f5c3a734fc77c",
-    implementations: {
-      hybridDeleGator: "0x48dBe696A4D990079e039489bA2053B36E8FFEC4",
-      multiSigDeleGator: "0x56a9EdB16a0105eb5a4C54f4C062e2868844f3A7",
-      eip7702StatelessDeleGator: "0x63c0c19a282a1B52b07dD5a65b58948A07DAE32B"
-    },
-    enforcers: {
-      _note: "Standard caveat enforcers. ARP composes its custom DomainScopeEnforcer + TrustStakeCapEnforcer alongside a subset of these.",
-      allowedCalldata: "0xc2b0d624c1c4319760C96503BA27C347F3260f55",
-      allowedMethods: "0x2c21fD0Cb9DC8445CB3fb0DC5E7Bb0Aca01842B5",
-      allowedTargets: "0x7F20f61b1f09b08D970938F6fa563634d65c4EeB",
-      approvalRevocation: "0xe264F1f09A19505a1ca1a86D5b01E8bFdb64324A",
-      blockNumber: "0x5d9818dF0AE3f66e9c3D0c5029DAF99d1823ca6c",
-      deployed: "0x24ff2AA430D53a8CD6788018E902E098083dcCd2",
-      erc20BalanceChange: "0xcdF6aB796408598Cea671d79506d7D48E97a5437",
-      erc20TransferAmount: "0xf100b0819427117EcF76Ed94B358B1A5b5C6D2Fc",
-      erc20PeriodTransfer: "0x474e3Ae7E169e940607cC624Da8A15Eb120139aB",
-      erc20Streaming: "0x56c97aE02f233B29fa03502Ecc0457266d9be00e",
-      erc721BalanceChange: "0x8aFdf96eDBbe7e1eD3f5Cd89C7E084841e12A09e",
-      erc721Transfer: "0x3790e6B7233f779b09DA74C72b6e94813925b9aF",
-      erc1155BalanceChange: "0x63c322732695cAFbbD488Fc6937A0A7B66fC001A",
-      exactCalldataBatch: "0x982FD5C86BBF425d7d1451f974192d4525113DfD",
-      exactCalldata: "0x99F2e9bF15ce5eC84685604836F71aB835DBBdED",
-      exactExecutionBatch: "0x1e141e455d08721Dd5BCDA1BaA6Ea5633Afd5017",
-      exactExecution: "0x146713078D39eCC1F5338309c28405ccf85Abfbb",
-      id: "0xC8B5D93463c893401094cc70e66A206fb5987997",
-      logicalOrWrapper: "0xE1302607a3251AF54c3a6e69318d6aa07F5eB46c",
-      limitedCalls: "0x04658B29F6b82ed55274221a06Fc97D318E25416",
-      nativeBalanceChange: "0xbD7B277507723490Cd50b12EaaFe87C616be6880",
-      argsEqualityCheck: "0x44B8C6ae3C304213c3e298495e12497Ed3E56E41",
-      nativeTokenPayment: "0x4803a326ddED6dDBc60e659e5ed12d85c7582811",
-      nativeTokenTransferAmount: "0xF71af580b9c3078fbc2BBF16FbB8EEd82b330320",
-      nativeTokenStreaming: "0xD10b97905a320b13a0608f7E9cC506b56747df19",
-      nativeTokenPeriodTransfer: "0x9BC0FAf4Aca5AE429F4c06aEEaC517520CB16BD9",
-      nonce: "0xDE4f2FAC4B3D87A1d9953Ca5FC09FCa7F366254f",
-      ownershipTransfer: "0x7EEf9734E7092032B5C56310Eb9BbD1f4A524681",
-      redeemer: "0xE144b0b2618071B4E56f746313528a669c7E65c5",
-      specificActionERC20TransferBatch: "0x6649b61c873F6F9686A1E1ae9ee98aC380c7bA13",
-      timestamp: "0x1046bb45C8d673d4ea75321280DB34899413c069",
-      valueLte: "0x92Bf12322527cAA612fd31a0e810472BBB106A8F",
-      multiTokenPeriod: "0xFB2f1a9BD76d3701B730E5d69C3219D42D80eBb7"
-    }
-  },
-  arp: {
-    endpointBinding: {
-      _note: "Task 39c, ADR 0094/0095. The two predicates the endpoint binding is written with: (agent identity atom) has endpoint (endpoint atom), and (pinned binding document) in context of (that triple). Both READ FROM THE GRAPH, neither minted by ARP: scripts/measure/endpoint-predicate.ts, run 2026-10-30, found `has endpoint` (Thing, 6 triples) and `in context of` (Thing, 29 triples) on testnet 13579, and none of `reachable at`, `is reachable at`, `served at`, `hosted at`. `in context of` differs from mainnet's 0x892054b0… (scripts/measure/nested-triples.ts), so never copy it across chains.",
-      measuredAt: "2026-10-30",
-      hasEndpoint: "0xa4488686eb3702e4e972a971ea008d6832a7f935b942366f1091566d1993a5f1",
-      inContextOf: "0x61a88b9c372c0d164d2caf66947b67ed0fcb4c457178a271b6b3dc39fb1f8862"
-    },
-    _note: "Written by scripts/deploy/deploy.sh --broadcast. Addresses are EOA-nonce-derived (CREATE). deploy.sh skips a contract whose address here already has code unless --force, and on a redeploy keeps the replaced address under <name>V<n>. ModuleRegistry and DomainScopeEnforcer were removed from src/ in 59ac83a; their entries are the record.",
-    deployer: "0xE596096F4176b682E300d73963e7B04B383C1AA1",
-    deployedAt: "2026-06-01T13:30:00Z",
-    moduleRegistry: "0xc9a2f66775828017e984E8be077fA2d17e0A41F4",
-    moduleRegistryV1: "0x777C28eCb4688D647B535098d11fB87A9746334f",
-    _moduleRegistryNote: "Redeployed 2026-06-03 with schemaURI uniqueness (ADR 0013). V1 address kept for historical reference; orphan (UI reads V2).",
-    domainScopeEnforcer: "0x516B82E29e3Ca46Ca810FC2EEf348932b198f7f9",
-    trustStakeCapEnforcer: "0x19e07280F1483Aa9aCDb1a7F8C61bfd20c7879Bc",
-    identityRegistry: "0xC165A2AD2E540A4069E02834009161E2b4490d5A",
-    sponsor: "0xE596096F4176b682E300d73963e7B04B383C1AA1",
-    _sponsorNote: "The address ARP's sponsoring service sends from on 13579 (apps/sponsor, ADR 0092, 0094): its GET / answered this on 2026-11-02. /tools counts every deposit it sent in Usage: the proof-gated ones, the edge creations it paid for, and, because the address is also ARP's deployer, 3 deposits written before the service existed (scripts/measure/sponsor-deposit-provenance.ts, 2026-11-03). Not a contract: an EOA whose key is in a 0600 file the agent never reads.",
-    deployedTxs: {
-      moduleRegistry: "0x6ee4f4d76dd55c69ea434f8c3c204cb6149df1c588910b1792db1650681fbc2e",
-      moduleRegistryV1: "0x02abe9a0c598df131995bc40927a4e0be0b86e7bdbfe747cfdf37fb19b069634",
-      domainScopeEnforcer: "0x6ca2c4e680b45eaa37147c2458bd38d756e6ffabb560755657cc9caf893df272",
-      trustStakeCapEnforcer: "0x8dd54ea3eeba14645531c501c3f1b8ec95e6a95788825e00fbe239ff32263159",
-      identityRegistry: "0x60b1f6ff7dbdcbca6864794eb9c5cf1e3ba94770daac6d2e77a4df00d726900c",
-      trustStakeCapEnforcerV1: "0x80e36828202a9c7606b92146076ed123155a94cfda3a2ab53013bd27be71764f"
-    },
-    explorerLinks: {
-      moduleRegistry: "https://testnet.explorer.intuition.systems/address/0xc9a2f66775828017e984E8be077fA2d17e0A41F4",
-      moduleRegistryV1: "https://testnet.explorer.intuition.systems/address/0x777C28eCb4688D647B535098d11fB87A9746334f",
-      domainScopeEnforcer: "https://testnet.explorer.intuition.systems/address/0x516B82E29e3Ca46Ca810FC2EEf348932b198f7f9",
-      trustStakeCapEnforcer: "https://testnet.explorer.intuition.systems/address/0x19e07280F1483Aa9aCDb1a7F8C61bfd20c7879Bc",
-      identityRegistry: "https://testnet.explorer.intuition.systems/address/0xC165A2AD2E540A4069E02834009161E2b4490d5A",
-      trustStakeCapEnforcerV1: "https://testnet.explorer.intuition.systems/address/0x7BB56819E9a413B8B4668C5cAF5C494c41dC0F8E"
-    },
-    modules: [
-      {
-        id: "1",
-        name: "Solidity Audit",
-        domain: "solidity-audit",
-        schemaURI: "ipfs://bafkreiembmtprqzufrdkvig74lskv6iazuatblm4hwmtxkf5a3v67mkdkm",
-        creator: "0xE596096F4176b682E300d73963e7B04B383C1AA1",
-        tx: "0xbd97979b197e4423293180e36d69f72e8eb07d2bb11bdfb2940ec918d6f6af3c"
-      }
-    ],
-    intuitionAtoms: [
-      {
-        atomId: "0xde8890fca8dde322ca57bce0e20dfeb23be67332f9101305ebe72facdee032dc",
-        uri: "ipfs://bafkreiembmtprqzufrdkvig74lskv6iazuatblm4hwmtxkf5a3v67mkdkm",
-        tx: "0x97db7629c6c973d43c0c62325754d750ee262853bdbd87496b4b82c1ea3d0ac7"
-      }
-    ],
-    rigAgents: {
-      _note: "Task 24. ERC-8004 agents on ARP's own testnet registry, minted 2026-10-19 on chain 13579. SIGNED BY THE AGENT SESSION using the operator's PRIVATE_KEY from .env, on the user's explicit authorisation — not by a human at a keyboard. See ADR 0037. security.md scopes its automation prohibition to mainnet, so this is permitted and was previously unwritten. Agents 1 and 2 were left with an EMPTY tokenURI deliberately: no-token-uri is 23% of the real cohort (32/140, scripts/measure/cohort-endpoints.ts), so they exercise a branch the three new agents cannot. Permanent: the ids are taken and setAgentURI leaves the superseded URI in the mint transaction's calldata.",
-      registry: "0xC165A2AD2E540A4069E02834009161E2b4490d5A",
-      agents: {
-        "3": {
-          slug: "rig-confirmed",
-          exercises: "confirmed/serves-declared-protocol + tools/list recovery",
-          endpoint: "http://localhost:3002/mcp",
-          _endpointNote: "ARP's own MCP server, local by default. ARP_MCP_ENDPOINT regenerates the file and setAgentURI can update the agent — but that escape hatch is a rehearsal prop: portability.md rule 4 says any step that works because ARP can write to the registry is not a step, and on mainnet ARP owns no registry. The real fix is a public endpoint.",
-          tx: "0xce4fee69c692ddf57d4537b23479d78384a9e2d06b733b532e419055ed50a086",
-          documentSha256_16: "478ac85cd6b2357f",
-          _documentShaNote: "sha256 of the data: URI, first 16 hex. Lets repo-vs-chain drift be detected: the fixtures in scripts/seed/rig-registration-files.ts are the source of truth for three permanent mints, and an edit to FILES would otherwise diverge silently. Checked by scripts/verify/verify-rig-claims.ts against a gate report. ONLY REPRODUCIBLE WITH ARP_MCP_ENDPOINT UNSET: OWN_ENDPOINT reads the environment and the document is hashed after substitution, so anyone with it exported sees a false DRIFT."
-        },
-        "4": {
-          slug: "rig-dead",
-          exercises: "confirmed/dead",
-          endpoint: "http://192.0.2.1/mcp",
-          _endpointNote: "TEST-NET-1, RFC 5737 — reserved and never routable, so it always times out. A .invalid hostname was tried first and gave inconclusive/transport-error, because a DNS failure is indistinguishable from our own network being down.",
-          tx: "0x87bf71cf0ce55db7f82ca617b8601ee87f870e67018b1097a311ed2d61cc7378",
-          uriUpdatedTx: "0x8f5950a61fca19b6a3f69b26f6c4159e29833689ed4b1623d8610206bfe87100",
-          documentSha256_16: "6db8b769dd551e98"
-        },
-        "5": {
-          slug: "rig-unprobeable",
-          exercises: "not-checkable ×2 — templated and non-http-identifier. Never a defect.",
-          tx: "0x859aff609fa10dba635ffd12d0b60b598c7c3174238f61962edb4b5eee1a0efd",
-          documentSha256_16: "f61a9d7f6637958e"
-        }
-      },
-      gate: {
-        command: "bun run scripts/verify/verify-cohort.ts --target intuition-testnet --ids 1,2,3,4,5 --tools --out /tmp/gate.json && bun run scripts/verify/verify-rig-claims.ts /tmp/gate.json",
-        ranAt: "2026-10-19",
-        result: "5 agents: 2 with no tokenURI (40%), 3 read. 4 endpoints: 2 confirmed (serves-declared-protocol, dead), 2 not-checkable (templated, non-http-identifier), 0 inconclusive, 1 capability list recovered (arp_tool_reputation).",
-        _requires: "apps/mcp/src/server.ts listening on :3002, or agent 3 reports inconclusive. The confirmed branch is therefore reproducible only on a host running that server — a known limit of this gate until ARP has a public endpoint.",
-        _widerThanSpecced: "--ids 1,2,3,4,5 rather than 3,4,5. Including the two empty-tokenURI agents exercises a fifth branch for two extra requests.",
-        _claimsCheck: "verify-rig-claims.ts asserts each fixture's `exercises` prose against the outcome the probe observed, and the document hashes against this file. The unit suite CANNOT close that class: confirmed and inconclusive are both probeable before a request is sent, and the mutation that actually shipped lived exactly there."
-      }
-    },
-    trustStakeCapEnforcerV1: "0x7BB56819E9a413B8B4668C5cAF5C494c41dC0F8E",
-    delegationRegister: {
-      _note: "Task 37c, ADR 0092 item 7. The two predicates a published delegation is written with: (delegator CAIP-10) delegate to (delegate CAIP-10), and (pinned document) in context of (that triple). Both READ FROM THE GRAPH, neither minted by ARP: on testnet 13579 on 2026-11-03 exactly one atom carries each label, a Thing, `delegate to` in 10 triples and `in context of` in 29. `in context of` is the one endpointBinding uses. Never copy either across chains.",
-      measuredAt: "2026-11-03",
-      delegateTo: "0xb56980d42a3b03455bf41ea20fe04ae223fca0b9e688994dc661414e81e6433b",
-      inContextOf: "0x61a88b9c372c0d164d2caf66947b67ed0fcb4c457178a271b6b3dc39fb1f8862"
-    }
-  }
-};
 // ../../data/catalogue/skills-13579.json
 var skills_13579_default = {
   _note: "What ARP wrote on chain for the skill catalogue. A RECORD, not a source of truth: every id here is a pure function of the URL or the word (ADR 0077, 0054), so the whole set is re-derivable with no credential and no network. What is not re-derivable is which ones ARP asserted, and which it later withdrew.",
@@ -6740,10 +6585,69 @@ function text(id, value) {
 var isTermId = (value) => typeof value === "string" && /^0x[0-9a-fA-F]{64}$/.test(value);
 var isAddress = (value) => typeof value === "string" && /^0x[0-9a-fA-F]{40}$/.test(value);
 
+// ../mcp/src/hosted.ts
+var HOSTED_FLAG = "ARP_HOSTED";
+var HOST_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z][a-z0-9-]{0,61}[a-z0-9]$/;
+var REFUSED_WHEN_HOSTED = [
+  "ARP_RECEIPT_KEY",
+  "ARP_AGENT_PRIVATE_KEY",
+  "ARP_ALLOW_PRIVATE_PROBE"
+];
+function isHosted(env = process.env) {
+  return env[HOSTED_FLAG] === "1";
+}
+function publicHost(env = process.env) {
+  const name = (env["ARP_PUBLIC_HOST"] ?? "").trim().toLowerCase();
+  return name === "" ? null : name;
+}
+function hostedRefusal(env = process.env) {
+  const name = publicHost(env);
+  const flag = env[HOSTED_FLAG];
+  if (flag !== undefined && flag !== "" && flag !== "1") {
+    return `${HOSTED_FLAG} must be 1 or unset, not ${flag}`;
+  }
+  if (!isHosted(env)) {
+    return name === null ? null : `ARP_PUBLIC_HOST needs ${HOSTED_FLAG}=1: only the hosted read-only server answers a public name`;
+  }
+  if (env["ARP_TOOLS"] !== "read") {
+    return `${HOSTED_FLAG}=1 serves ARP_TOOLS=read only, not ${env["ARP_TOOLS"] ?? "every tool"}`;
+  }
+  if (env["ARP_TARGET"] !== "testnet") {
+    return `${HOSTED_FLAG}=1 reads testnet 13579 only: set ARP_TARGET=testnet`;
+  }
+  if (env["ARP_TRANSPORT"] === "stdio") {
+    return `${HOSTED_FLAG}=1 serves HTTP; stdio is for a client on the same machine`;
+  }
+  for (const variable of REFUSED_WHEN_HOSTED) {
+    if ((env[variable] ?? "") !== "")
+      return `${HOSTED_FLAG}=1 refuses ${variable}: a hosted server holds no key and probes no private address`;
+  }
+  if (name === null) {
+    return `${HOSTED_FLAG}=1 needs ARP_PUBLIC_HOST, the name the proxy forwards`;
+  }
+  if (!HOST_NAME.test(name)) {
+    return `ARP_PUBLIC_HOST must be a bare host name such as mcp.example.org, not ${env["ARP_PUBLIC_HOST"]}`;
+  }
+  return null;
+}
+function loggable(error, message, env = process.env) {
+  if (!isHosted(env))
+    return message;
+  return error instanceof Error ? error.name : "error";
+}
+
 // ../mcp/src/config.ts
 import { resolve } from "node:path";
+var refusedHosting = hostedRefusal(process.env);
+if (refusedHosting !== null) {
+  console.error(refusedHosting);
+  process.exit(1);
+}
+var HOSTED = isHosted(process.env);
 var PORT = Number(process.env.PORT ?? 3002);
 var RECEIPT_SIGNER = (() => {
+  if (HOSTED)
+    return null;
   try {
     return receiptSigner();
   } catch (error) {
@@ -6758,7 +6662,8 @@ function inProject(path, projectDir = process.env["ARP_PROJECT_DIR"]) {
 var SKILLS_DIR = process.env["ARP_SKILLS_DIR"] === undefined ? undefined : inProject(process.env["ARP_SKILLS_DIR"]);
 var READ_ONLY = process.env["ARP_TOOLS"] === "read" || DESKTOP;
 var CONTENT_URL = process.env["ARP_CONTENT"] ?? "http://127.0.0.1:3002";
-var SPONSOR_URL = process.env["ARP_SPONSOR"] ?? "http://127.0.0.1:3200";
+var SPONSOR_DEFAULT = "https://sponsor.arp.intuition.box";
+var SPONSOR_URL = process.env["ARP_SPONSOR"] ?? SPONSOR_DEFAULT;
 var SESSION_LOG = inProject(process.env["ARP_SESSION_LOG"] ?? ".arp/session.jsonl");
 var RECEIPTS_LOG = inProject(process.env["ARP_RECEIPTS"] ?? ".arp/receipts.jsonl");
 var TARGETS = { mainnet: 1155, testnet: 13579 };
@@ -6793,6 +6698,12 @@ function required(value, what) {
   return value;
 }
 var GRAPHQL = required(GRAPHQL_URL, "a graphqlUrl");
+var SKILLS_INDEX = (() => {
+  const raw2 = process.env.ARP_SKILLS_INDEX_URL?.trim() ?? "";
+  if (raw2 === "off")
+    return null;
+  return raw2 === "" ? "https://skills.sh" : raw2;
+})();
 var RPC = required(RPC_URL, "an rpcUrl");
 var MULTI_VAULT = required(MULTI_VAULT_RAW, "a multiVault");
 var reads = multiVaultReads({ address: MULTI_VAULT, chainId, rpcUrl: RPC });
@@ -6836,7 +6747,8 @@ var IN_CONTEXT_OF = (() => {
 })();
 var LINE_PAYERS = (() => {
   const arp = record.arp;
-  return typeof arp?.deployer === "string" ? [arp.deployer] : [];
+  const wallets = [arp?.deployer, arp?.sponsor].filter((wallet) => typeof wallet === "string");
+  return [...new Set(wallets)];
 })();
 function domainWalk() {
   return {
@@ -6848,6 +6760,11 @@ function domainWalk() {
   };
 }
 
+// ../mcp/src/domain-words.ts
+function domainWords(tree, root = "tool") {
+  return { labels: tree.subtree(root), aliases: domain_aliases_default.aliases };
+}
+
 // ../mcp/src/client-session.ts
 var ASK_TIMEOUT_MS = 15 * 60 * 1000;
 var declaredElicitation = false;
@@ -6978,7 +6895,7 @@ import { dirname as dirname2, join as join2 } from "node:path";
 var SAFE_SKILL_NAME = /^[a-z0-9][a-z0-9._-]*$/i;
 function installPrompt(receipt, files, installPath, context) {
   const ref = skillRefFromUrl(receipt.receipt.url);
-  return renderSkillPrompt(reviewSkill({
+  const prompt = renderSkillPrompt(reviewSkill({
     repo: ref?.repo ?? receipt.receipt.url,
     skill: ref?.skill ?? receipt.receipt.url,
     path: receipt.receipt.path,
@@ -6987,6 +6904,9 @@ function installPrompt(receipt, files, installPath, context) {
     files,
     thirdParty: context.thirdParty
   }), installPath);
+  const contains = contentsLines(readSkillContents(files.map((file) => contentsFileOf(file.path, file.bytes))), 3);
+  return { ...prompt, message: [prompt.message, "", "What its files contain:", ...contains].join(`
+`) };
 }
 function installFiles(skillsDir, skill, files) {
   if (!SAFE_SKILL_NAME.test(skill))
@@ -7153,7 +7073,8 @@ async function getSkill(config, agent, atom) {
   const line = { atom: signed.receipt.atom, url: signed.receipt.url, skill: ref?.skill ?? null, receipt: signed };
   appendFileSync2(join4(config.stateDir, "receipts.jsonl"), `${JSON.stringify(line)}
 `);
-  const served = { atom: signed.receipt.atom, url: signed.receipt.url, name: ref?.skill ?? signed.receipt.url, text: new TextDecoder().decode(skillMd.bytes) };
+  const contains = contentsLines(readSkillContents(files.map((file) => contentsFileOf(file.path, file.bytes))));
+  const served = { atom: signed.receipt.atom, url: signed.receipt.url, name: ref?.skill ?? signed.receipt.url, text: new TextDecoder().decode(skillMd.bytes), contains };
   if (config.skillsDir === undefined || ref === null || !SAFE_SKILL_NAME.test(ref.skill))
     return served;
   const prompt = installPrompt(signed, files, join4(config.skillsDir, ref.skill), config.reviewContext?.(signed.receipt.url) ?? { committedAt: null, thirdParty: [] });
@@ -7221,7 +7142,11 @@ async function approveSponsor(config, agent, ref, approval) {
   const next = gas.body["next"];
   await agent.send({ to: next.to, data: next.data, value: BigInt(next.value), chainId: DESKTOP_CHAIN_ID }, [approval]);
 }
-async function writeLine(config, agent, input) {
+async function writeLine(config, agent, asked) {
+  const input = asked.payment === undefined ? asked : { ...asked, toolUrl: redactEndpointUrl(asked.toolUrl) };
+  if (input.payment !== undefined && input.terms === undefined)
+    throw new Error("a line with a payment names the terms it paid against");
+  const terms = input.payment === undefined ? null : input.terms ?? null;
   const state = await ensureAgent(config, agent);
   const ref = { agentRegistry: registryRef(config), agentId: state.agentId };
   await ensureIdentity(config, state);
@@ -7230,9 +7155,26 @@ async function writeLine(config, agent, input) {
   const listing2 = await signListToolRequest({ address: agent.address, url: input.toolUrl, nonce: keccak256(stringToBytes(`list-${input.toolUrl}-${Date.now()}`)), expiresAt: expiresAt() }, DESKTOP_CHAIN_ID, agent.account);
   const listed = await post(config, "/list-tool", { url: input.toolUrl, request: listing2 });
   if (listed.status !== 200 || typeof listed.body["atomId"] !== "string") {
-    throw new Error(`the tool could not be listed (${listed.status}): ${String(listed.body["error"] ?? "")}`);
+    const rule = typeof listed.body["rule"] === "string" ? `, ${listed.body["rule"]}` : "";
+    throw new Error(`the sponsor would not list ${input.toolUrl} (${listed.status}${rule}): ${String(listed.body["error"] ?? "")}`);
   }
   const tool = listed.body["atomId"];
+  if (input.newDomain !== undefined && input.domain !== undefined) {
+    const category = await signCategoryRequest({
+      agent: agent.address,
+      ...ref,
+      label: input.domain,
+      parent: input.newDomain.parent,
+      subject: tool,
+      reason: input.newDomain.why,
+      nonce: keccak256(stringToBytes(`category-${tool}-${input.domain}-${Date.now()}`)),
+      expiresAt: expiresAt()
+    }, DESKTOP_CHAIN_ID, agent.account);
+    const filed = await post(config, "/propose-category", { request: category });
+    if (filed.status !== 200) {
+      throw new Error(`the domain "${input.domain}" could not be added (${filed.status}): ${String(filed.body["error"] ?? "")}`);
+    }
+  }
   const wait = config.sleep ?? ((ms) => new Promise((done) => setTimeout(done, ms)));
   const deadline = Date.now() + (config.indexerWaitMs ?? 120000);
   let approved = false;
@@ -7244,6 +7186,13 @@ async function writeLine(config, agent, input) {
       domain: input.domain ?? "",
       outcome: input.outcome,
       reason: input.reason ?? "",
+      payment: input.payment === undefined ? "" : paymentAtomLabel(input.payment),
+      endpoint: input.payment === undefined ? "" : input.toolUrl,
+      need: input.need ?? "",
+      payTo: terms?.payTo ?? "",
+      asset: terms?.asset ?? "",
+      price: terms?.price ?? "",
+      termsAt: terms?.receivedAt ?? 0,
       nonce: keccak256(stringToBytes(`line-${tool}-${Date.now()}`)),
       expiresAt: expiresAt()
     }, DESKTOP_CHAIN_ID, agent.account);
@@ -7258,7 +7207,7 @@ async function writeLine(config, agent, input) {
       };
     }
     const error = String(answer.body["error"] ?? "");
-    const notIndexedYet = answer.status === 403 && /no identity atom on the graph/.test(error) || answer.status === 422 && answer.body["retry"] === true || answer.status === 503 && answer.body["retry"] === true;
+    const notIndexedYet = answer.status === 403 && /no identity atom on the graph/.test(error) || answer.status === 422 && answer.body["retry"] === true || answer.status === 503 && answer.body["retry"] === true || answer.status === 422 && answer.body["rule"] === "unknown_domain" && input.newDomain !== undefined;
     if (notIndexedYet && Date.now() < deadline) {
       await wait(5000);
       continue;
@@ -7354,7 +7303,7 @@ Use when: "make a game", "build a browser game",…`, installs: 26583 }, "github
 real-time WebSockets, scheduled tasks, tool integration, and chat capabilities.
 Generates production-ready agent code…`, installs: 3702 }, "github.com/cloudflare/skills?skill=building-mcp-server-on-cloudflare": { description: `Builds remote MCP (Model Context Protocol) servers on Cloudflare Workers
 with tools, OAuth authentication, and production deployment. Generates
-server code, configures auth providers, and deploys to…`, installs: 3424 }, "github.com/easyzoom/aix-skills?skill=webpage-to-markdown": { description: "Use when converting a public webpage URL into clean Markdown content", installs: null }, "github.com/JimLiu/baoyu-skills?skill=baoyu-url-to-markdown": { description: "Fetch any URL and convert to markdown using baoyu-fetch CLI (Chrome CDP with site-specific adapters). Built-in adapters for X/Twitter, YouTube transcripts, Hacker News threads, and generic pages via…", installs: null }, "github.com/WyattBlue/auto-editor?skill=auto-editor": { description: "Record a microphone or edit video/audio with the auto-editor CLI — cut out dead space (silence, motionlessness, black frames), set the pace, make manual cuts, and render the result. Use when someone…", installs: null }, "github.com/Melvynx/video-agent-skills?skill=short-editing": { description: "Edits a talking-head take end to end into a paper-style motion design short (1080x1920, also 1:1 and 16:9) with its own render engine (Node + Chrome + ffmpeg, free, offline). Use when the user says…", installs: null }, "github.com/clueso-ai/skills?skill=remove-filler-words": { description: `Strip ums, ahs, false starts, and rambling from a video's narration - clean the transcript, regenerate the voiceover, and keep the visuals aligned to the new timing. Use when the user says "remove…`, installs: null }, "github.com/browser-use/video-use?skill=video-use": { description: "Edit any video by conversation. Transcribe, cut, color grade, generate overlay animations, burn subtitles — for talking heads, montages, tutorials, travel, interviews. No presets, no menus. Ask…", installs: null }, "github.com/louisedesadeleer/cut-video?skill=cut-video": { description: "Tighten a long recording aggressively — remove silences, fillers, hedges, false starts, and repetitions while preserving laughs and comedic pauses. Cuts are driven by Montreal Forced Aligner (MFA)…", installs: null }, "github.com/softaworks/agent-toolkit?skill=web-to-markdown": { description: "Use ONLY when the user explicitly says: 'use the skill web-to-markdown ...' (or 'use a skill web-to-markdown ...'). Converts webpage URLs to clean Markdown by calling the local web2md CLI (Puppeteer…", installs: null }, "github.com/Wieedze/ARP?skill=arp": { description: "Find the skill, MCP server or API that fits a task, before you pick one yourself, and see which ones other agents actually used. Use whenever a task needs a tool you do not already have — search the…", installs: null } }
+server code, configures auth providers, and deploys to…`, installs: 3424 }, "github.com/easyzoom/aix-skills?skill=webpage-to-markdown": { description: "Use when converting a public webpage URL into clean Markdown content", installs: null }, "github.com/JimLiu/baoyu-skills?skill=baoyu-url-to-markdown": { description: "Fetch any URL and convert to markdown using baoyu-fetch CLI (Chrome CDP with site-specific adapters). Built-in adapters for X/Twitter, YouTube transcripts, Hacker News threads, and generic pages via…", installs: null }, "github.com/WyattBlue/auto-editor?skill=auto-editor": { description: "Record a microphone or edit video/audio with the auto-editor CLI — cut out dead space (silence, motionlessness, black frames), set the pace, make manual cuts, and render the result. Use when someone…", installs: null }, "github.com/Melvynx/video-agent-skills?skill=short-editing": { description: "Edits a talking-head take end to end into a paper-style motion design short (1080x1920, also 1:1 and 16:9) with its own render engine (Node + Chrome + ffmpeg, free, offline). Use when the user says…", installs: null }, "github.com/clueso-ai/skills?skill=remove-filler-words": { description: `Strip ums, ahs, false starts, and rambling from a video's narration - clean the transcript, regenerate the voiceover, and keep the visuals aligned to the new timing. Use when the user says "remove…`, installs: null }, "github.com/browser-use/video-use?skill=video-use": { description: "Edit any video by conversation. Transcribe, cut, color grade, generate overlay animations, burn subtitles — for talking heads, montages, tutorials, travel, interviews. No presets, no menus. Ask…", installs: null }, "github.com/louisedesadeleer/cut-video?skill=cut-video": { description: "Tighten a long recording aggressively — remove silences, fillers, hedges, false starts, and repetitions while preserving laughs and comedic pauses. Cuts are driven by Montreal Forced Aligner (MFA)…", installs: null }, "github.com/softaworks/agent-toolkit?skill=web-to-markdown": { description: "Use ONLY when the user explicitly says: 'use the skill web-to-markdown ...' (or 'use a skill web-to-markdown ...'). Converts webpage URLs to clean Markdown by calling the local web2md CLI (Puppeteer…", installs: null }, "github.com/Wieedze/ARP?skill=arp": { description: "Check a skill, MCP server or API before you install or pay for it, and see what other agents declared about it. Use whenever a task needs a tool you do not already have — search the registry by the…", installs: null }, "github.com/intuition-box/ARP?skill=arp": { description: "Check a skill, MCP server or API before you install or pay for it, and see what other agents declared about it. Use whenever a task needs a tool you do not already have — search the registry by the…", installs: null } }
 };
 
 // ../mcp/src/tool-search.ts
@@ -7455,6 +7404,68 @@ function pageOf(entries, offset, limit) {
     nextOffset: offset + limit < entries.length ? offset + limit : null
   };
 }
+function mergeIndexed(matched, indexed, options) {
+  const out = [];
+  const taken = new Set;
+  const add = (entry) => {
+    const key = options.keyOf(entry);
+    if (key !== null) {
+      if (taken.has(key))
+        return;
+      taken.add(key);
+    }
+    out.push(entry);
+  };
+  for (const entry of matched)
+    if (options.leads(entry))
+      add(entry);
+  indexed.forEach(({ key }, index) => add(options.held(key) ?? options.make(index)));
+  for (const entry of matched)
+    add(entry);
+  return out;
+}
+
+// ../mcp/src/desktop/file-category.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+async function fileCategory(args, deps) {
+  let request;
+  try {
+    request = await deps.sign({
+      label: args.category,
+      parent: args.parent ?? "",
+      subject: args.id,
+      reason: args.reason ?? ""
+    });
+  } catch (error) {
+    return { error: `this agent could not sign the request: ${error instanceof Error ? error.message : String(error)}` };
+  }
+  return submitCategory(request, deps);
+}
+async function submitCategory(request, deps) {
+  let response;
+  try {
+    response = await deps.fetch(`${deps.sponsorUrl}/propose-category`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ request })
+    });
+  } catch {
+    return { error: "ARP's sponsor is not reachable, so the category was not filed." };
+  }
+  const answer = await response.json().catch(() => null);
+  if (response.ok && isRecord(answer) && typeof answer["label"] === "string") {
+    return {
+      filed: answer["label"],
+      new_category: answer["newCategory"] === true,
+      written: answer["created"] === true
+    };
+  }
+  const rule = isRecord(answer) && typeof answer["rule"] === "string" ? answer["rule"] : "unknown";
+  const detail = isRecord(answer) && typeof answer["error"] === "string" ? answer["error"] : `HTTP ${response.status}`;
+  return { refused: rule, detail };
+}
 
 // ../mcp/src/desktop/handlers.ts
 var agent;
@@ -7495,6 +7506,49 @@ async function desktopTool(id, name, args) {
   if (typeof atom !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(atom)) {
     return fail(id, -32602, "id must be the 0x + 32 bytes id from arp_find_tools");
   }
+  if (name === "arp_file_category") {
+    const asked = args["category"];
+    if (typeof asked !== "string" || asked.trim().length === 0) {
+      return fail(id, -32602, "category must be a category name");
+    }
+    const parent = typeof args["parent"] === "string" ? args["parent"] : undefined;
+    let category = asked;
+    const resolved = resolveDomain(asked, domainWords(await readDomainTree(domainWalk())));
+    if (resolved.status === "node")
+      category = resolved.label;
+    else if (parent === undefined) {
+      return text(id, {
+        refused: "unknown_category",
+        detail: `"${asked}" is not a category.${resolved.suggestions.length === 0 ? "" : ` Closest: ${resolved.suggestions.join(", ")}.`} Pick one, or pass parent and reason to add it.`
+      });
+    }
+    const reason = typeof args["reason"] === "string" ? args["reason"] : undefined;
+    return text(id, await fileCategory({
+      id: atom,
+      category,
+      ...parent === undefined ? {} : { parent },
+      ...reason === undefined ? {} : { reason }
+    }, {
+      sponsorUrl: SPONSOR_URL,
+      fetch: globalThis.fetch.bind(globalThis),
+      sign: async (fields) => {
+        const sender = agentFor();
+        const config = loopConfig();
+        const state = await ensureAgent(config, sender);
+        return signCategoryRequest({
+          agent: sender.address,
+          agentRegistry: registryRef(config),
+          agentId: state.agentId,
+          label: fields.label,
+          parent: fields.parent,
+          subject: atom,
+          reason: fields.reason,
+          nonce: keccak256(stringToBytes(`category-${atom}-${Date.now()}`)),
+          expiresAt: Math.floor(Date.now() / 1000) + 600
+        }, DESKTOP_CHAIN_ID, sender.account);
+      }
+    }));
+  }
   const loop = loopConfig();
   try {
     if (name === "arp_get_skill") {
@@ -7502,6 +7556,8 @@ async function desktopTool(id, name, args) {
       return text(id, {
         name: skill.name,
         source: skill.url,
+        contains: skill.contains,
+        show_the_person_first: "Show the person the `contains` lines above as they are before you follow the skill or install it: facts from its files, not a verdict.",
         skill_md: skill.text,
         ...skill.installedAt !== undefined ? {
           installed_at: skill.installedAt,
@@ -7524,4 +7580,4 @@ async function desktopTool(id, name, args) {
   }
 }
 
-export { serveContentRequest, result, fail, text, isTermId, isAddress, PORT, RECEIPT_SIGNER, DESKTOP, READ_ONLY, SESSION_LOG, RECEIPTS_LOG, targetName, chainId, record, sessionCatalogue, acceptedSigners, GRAPHQL, RPC, MULTI_VAULT, reads, toolAtoms, DOMAIN_ROOT, REACHABLE_ATOM, DOMAIN_ATTESTORS, directory, IN_CONTEXT_OF, LINE_PAYERS, domainWalk, skill_facts_default, recordClientCapabilities, stdioRouter, keyOf, describe, matchOf, rankOf, collapseCopies, cachedFor, pageOf, writeLine, loopConfig, agentFor, desktopTool };
+export { serveContentRequest, result, fail, text, isTermId, isAddress, publicHost, loggable, HOSTED, PORT, RECEIPT_SIGNER, DESKTOP, READ_ONLY, SPONSOR_URL, SESSION_LOG, RECEIPTS_LOG, targetName, chainId, record, sessionCatalogue, acceptedSigners, GRAPHQL, SKILLS_INDEX, RPC, MULTI_VAULT, reads, toolAtoms, DOMAIN_ROOT, REACHABLE_ATOM, DOMAIN_ATTESTORS, directory, IN_CONTEXT_OF, LINE_PAYERS, domainWalk, domainWords, skill_facts_default, recordClientCapabilities, stdioRouter, keyOf, describe, matchOf, rankOf, collapseCopies, cachedFor, pageOf, mergeIndexed, submitCategory, sponsorApproval, writeLine, loopConfig, agentFor, desktopTool };