@arp-protocol/cli 0.0.3 → 0.0.5

package/dist/chunks/cli-7c393v47.js

@@ -0,0 +1,173 @@
+#!/usr/bin/env node
+// ../../data/deployments/13579.json
+var _13579_default = {
+  chain: {
+    name: "Intuition Testnet",
+    chainId: 13579,
+    chainIdHex: "0x350b",
+    nativeCurrency: {
+      name: "Test Trust",
+      symbol: "tTRUST",
+      decimals: 18
+    },
+    rpcUrl: "https://testnet.rpc.intuition.systems/http",
+    explorerUrl: "https://testnet.explorer.intuition.systems",
+    graphqlUrl: "https://testnet.intuition.sh/v1/graphql",
+    _source: [
+      "Intuition skill: .claude/skills/intuition/SKILL.md (table at line 149, Viem chain config at line 184)",
+      "MetaMask deployments: ~/Project/metamask-smart-accounts-kit/packages/delegation-deployments/src/index.ts (CHAIN_ID.intuitionTestnet = 0x350b)"
+    ]
+  },
+  intuition: {
+    _source: ".claude/skills/intuition/SKILL.md line 152",
+    multiVault: "0x2Ece8D4dEdcB9918A398528f3fa4688b1d2CAB91"
+  },
+  metamaskDelegationFramework: {
+    version: "1.3.0",
+    _source: "MetaMask deployments package (~/Project/metamask-smart-accounts-kit/packages/delegation-deployments/src/contractAddresses.ts → DEPLOYMENTS_1_3_0). All addresses are deterministic CREATE2 — same value on every chain MetaMask supports. Intuition Testnet (chainId 0x350b) is explicitly mapped to DEPLOYMENTS_1_3_0 at packages/delegation-deployments/src/index.ts line 148.",
+    delegationManager: "0xdb9B1e94B5b69Df7e401DDbedE43491141047dB3",
+    entryPoint: "0x0000000071727De22E5E9d8BAf0edAc6f37da032",
+    simpleFactory: "0x69Aa2f9fe1572F1B640E1bbc512f5c3a734fc77c",
+    implementations: {
+      hybridDeleGator: "0x48dBe696A4D990079e039489bA2053B36E8FFEC4",
+      multiSigDeleGator: "0x56a9EdB16a0105eb5a4C54f4C062e2868844f3A7",
+      eip7702StatelessDeleGator: "0x63c0c19a282a1B52b07dD5a65b58948A07DAE32B"
+    },
+    enforcers: {
+      _note: "Standard caveat enforcers. ARP composes its custom DomainScopeEnforcer + TrustStakeCapEnforcer alongside a subset of these.",
+      allowedCalldata: "0xc2b0d624c1c4319760C96503BA27C347F3260f55",
+      allowedMethods: "0x2c21fD0Cb9DC8445CB3fb0DC5E7Bb0Aca01842B5",
+      allowedTargets: "0x7F20f61b1f09b08D970938F6fa563634d65c4EeB",
+      approvalRevocation: "0xe264F1f09A19505a1ca1a86D5b01E8bFdb64324A",
+      blockNumber: "0x5d9818dF0AE3f66e9c3D0c5029DAF99d1823ca6c",
+      deployed: "0x24ff2AA430D53a8CD6788018E902E098083dcCd2",
+      erc20BalanceChange: "0xcdF6aB796408598Cea671d79506d7D48E97a5437",
+      erc20TransferAmount: "0xf100b0819427117EcF76Ed94B358B1A5b5C6D2Fc",
+      erc20PeriodTransfer: "0x474e3Ae7E169e940607cC624Da8A15Eb120139aB",
+      erc20Streaming: "0x56c97aE02f233B29fa03502Ecc0457266d9be00e",
+      erc721BalanceChange: "0x8aFdf96eDBbe7e1eD3f5Cd89C7E084841e12A09e",
+      erc721Transfer: "0x3790e6B7233f779b09DA74C72b6e94813925b9aF",
+      erc1155BalanceChange: "0x63c322732695cAFbbD488Fc6937A0A7B66fC001A",
+      exactCalldataBatch: "0x982FD5C86BBF425d7d1451f974192d4525113DfD",
+      exactCalldata: "0x99F2e9bF15ce5eC84685604836F71aB835DBBdED",
+      exactExecutionBatch: "0x1e141e455d08721Dd5BCDA1BaA6Ea5633Afd5017",
+      exactExecution: "0x146713078D39eCC1F5338309c28405ccf85Abfbb",
+      id: "0xC8B5D93463c893401094cc70e66A206fb5987997",
+      logicalOrWrapper: "0xE1302607a3251AF54c3a6e69318d6aa07F5eB46c",
+      limitedCalls: "0x04658B29F6b82ed55274221a06Fc97D318E25416",
+      nativeBalanceChange: "0xbD7B277507723490Cd50b12EaaFe87C616be6880",
+      argsEqualityCheck: "0x44B8C6ae3C304213c3e298495e12497Ed3E56E41",
+      nativeTokenPayment: "0x4803a326ddED6dDBc60e659e5ed12d85c7582811",
+      nativeTokenTransferAmount: "0xF71af580b9c3078fbc2BBF16FbB8EEd82b330320",
+      nativeTokenStreaming: "0xD10b97905a320b13a0608f7E9cC506b56747df19",
+      nativeTokenPeriodTransfer: "0x9BC0FAf4Aca5AE429F4c06aEEaC517520CB16BD9",
+      nonce: "0xDE4f2FAC4B3D87A1d9953Ca5FC09FCa7F366254f",
+      ownershipTransfer: "0x7EEf9734E7092032B5C56310Eb9BbD1f4A524681",
+      redeemer: "0xE144b0b2618071B4E56f746313528a669c7E65c5",
+      specificActionERC20TransferBatch: "0x6649b61c873F6F9686A1E1ae9ee98aC380c7bA13",
+      timestamp: "0x1046bb45C8d673d4ea75321280DB34899413c069",
+      valueLte: "0x92Bf12322527cAA612fd31a0e810472BBB106A8F",
+      multiTokenPeriod: "0xFB2f1a9BD76d3701B730E5d69C3219D42D80eBb7"
+    }
+  },
+  arp: {
+    endpointBinding: {
+      _note: "Task 39c, ADR 0094/0095. The two predicates the endpoint binding is written with: (agent identity atom) has endpoint (endpoint atom), and (pinned binding document) in context of (that triple). Both READ FROM THE GRAPH, neither minted by ARP: scripts/measure/endpoint-predicate.ts, run 2026-10-30, found `has endpoint` (Thing, 6 triples) and `in context of` (Thing, 29 triples) on testnet 13579, and none of `reachable at`, `is reachable at`, `served at`, `hosted at`. `in context of` differs from mainnet's 0x892054b0… (scripts/measure/nested-triples.ts), so never copy it across chains.",
+      measuredAt: "2026-10-30",
+      hasEndpoint: "0xa4488686eb3702e4e972a971ea008d6832a7f935b942366f1091566d1993a5f1",
+      inContextOf: "0x61a88b9c372c0d164d2caf66947b67ed0fcb4c457178a271b6b3dc39fb1f8862"
+    },
+    _note: "Written by scripts/deploy/deploy.sh --broadcast. Addresses are EOA-nonce-derived (CREATE). deploy.sh skips a contract whose address here already has code unless --force, and on a redeploy keeps the replaced address under <name>V<n>. ModuleRegistry and DomainScopeEnforcer were removed from src/ in 59ac83a; their entries are the record.",
+    deployer: "0xE596096F4176b682E300d73963e7B04B383C1AA1",
+    deployedAt: "2026-06-01T13:30:00Z",
+    moduleRegistry: "0xc9a2f66775828017e984E8be077fA2d17e0A41F4",
+    moduleRegistryV1: "0x777C28eCb4688D647B535098d11fB87A9746334f",
+    _moduleRegistryNote: "Redeployed 2026-06-03 with schemaURI uniqueness (ADR 0013). V1 address kept for historical reference; orphan (UI reads V2).",
+    domainScopeEnforcer: "0x516B82E29e3Ca46Ca810FC2EEf348932b198f7f9",
+    trustStakeCapEnforcer: "0x19e07280F1483Aa9aCDb1a7F8C61bfd20c7879Bc",
+    identityRegistry: "0xC165A2AD2E540A4069E02834009161E2b4490d5A",
+    sponsor: "0x77939A4c276f3E549276CEB3A09CDa1fF58b7ec9",
+    sponsorV1: "0xE596096F4176b682E300d73963e7B04B383C1AA1",
+    _sponsorNote: "The address ARP's sponsoring service sends from on 13579 (apps/sponsor, ADR 0092, 0094). Since 2026-11-09 a key of its own, for the hosted service (task 78, ADR 0149): sponsorV1 is the deployer's key, which sent for it before and also holds mainnet funds. Not a contract: an EOA whose key is a file mounted into the service's container, never read by an agent. Before 2026-11-09: The address ARP's sponsoring service sends from on 13579 (apps/sponsor, ADR 0092, 0094): its GET / answered this on 2026-11-02. /tools counts every deposit it sent in Usage: the proof-gated ones, the edge creations it paid for, and, because the address is also ARP's deployer, 3 deposits written before the service existed (scripts/measure/sponsor-deposit-provenance.ts, 2026-11-03). Not a contract: an EOA whose key is in a 0600 file the agent never reads.",
+    deployedTxs: {
+      moduleRegistry: "0x6ee4f4d76dd55c69ea434f8c3c204cb6149df1c588910b1792db1650681fbc2e",
+      moduleRegistryV1: "0x02abe9a0c598df131995bc40927a4e0be0b86e7bdbfe747cfdf37fb19b069634",
+      domainScopeEnforcer: "0x6ca2c4e680b45eaa37147c2458bd38d756e6ffabb560755657cc9caf893df272",
+      trustStakeCapEnforcer: "0x8dd54ea3eeba14645531c501c3f1b8ec95e6a95788825e00fbe239ff32263159",
+      identityRegistry: "0x60b1f6ff7dbdcbca6864794eb9c5cf1e3ba94770daac6d2e77a4df00d726900c",
+      trustStakeCapEnforcerV1: "0x80e36828202a9c7606b92146076ed123155a94cfda3a2ab53013bd27be71764f"
+    },
+    explorerLinks: {
+      moduleRegistry: "https://testnet.explorer.intuition.systems/address/0xc9a2f66775828017e984E8be077fA2d17e0A41F4",
+      moduleRegistryV1: "https://testnet.explorer.intuition.systems/address/0x777C28eCb4688D647B535098d11fB87A9746334f",
+      domainScopeEnforcer: "https://testnet.explorer.intuition.systems/address/0x516B82E29e3Ca46Ca810FC2EEf348932b198f7f9",
+      trustStakeCapEnforcer: "https://testnet.explorer.intuition.systems/address/0x19e07280F1483Aa9aCDb1a7F8C61bfd20c7879Bc",
+      identityRegistry: "https://testnet.explorer.intuition.systems/address/0xC165A2AD2E540A4069E02834009161E2b4490d5A",
+      trustStakeCapEnforcerV1: "https://testnet.explorer.intuition.systems/address/0x7BB56819E9a413B8B4668C5cAF5C494c41dC0F8E"
+    },
+    modules: [
+      {
+        id: "1",
+        name: "Solidity Audit",
+        domain: "solidity-audit",
+        schemaURI: "ipfs://bafkreiembmtprqzufrdkvig74lskv6iazuatblm4hwmtxkf5a3v67mkdkm",
+        creator: "0xE596096F4176b682E300d73963e7B04B383C1AA1",
+        tx: "0xbd97979b197e4423293180e36d69f72e8eb07d2bb11bdfb2940ec918d6f6af3c"
+      }
+    ],
+    intuitionAtoms: [
+      {
+        atomId: "0xde8890fca8dde322ca57bce0e20dfeb23be67332f9101305ebe72facdee032dc",
+        uri: "ipfs://bafkreiembmtprqzufrdkvig74lskv6iazuatblm4hwmtxkf5a3v67mkdkm",
+        tx: "0x97db7629c6c973d43c0c62325754d750ee262853bdbd87496b4b82c1ea3d0ac7"
+      }
+    ],
+    rigAgents: {
+      _note: "Task 24. ERC-8004 agents on ARP's own testnet registry, minted 2026-10-19 on chain 13579. SIGNED BY THE AGENT SESSION using the operator's PRIVATE_KEY from .env, on the user's explicit authorisation — not by a human at a keyboard. See ADR 0037. security.md scopes its automation prohibition to mainnet, so this is permitted and was previously unwritten. Agents 1 and 2 were left with an EMPTY tokenURI deliberately: no-token-uri is 23% of the real cohort (32/140, scripts/measure/cohort-endpoints.ts), so they exercise a branch the three new agents cannot. Permanent: the ids are taken and setAgentURI leaves the superseded URI in the mint transaction's calldata.",
+      registry: "0xC165A2AD2E540A4069E02834009161E2b4490d5A",
+      agents: {
+        "3": {
+          slug: "rig-confirmed",
+          exercises: "confirmed/serves-declared-protocol + tools/list recovery",
+          endpoint: "http://localhost:3002/mcp",
+          _endpointNote: "ARP's own MCP server, local by default. ARP_MCP_ENDPOINT regenerates the file and setAgentURI can update the agent — but that escape hatch is a rehearsal prop: portability.md rule 4 says any step that works because ARP can write to the registry is not a step, and on mainnet ARP owns no registry. The real fix is a public endpoint.",
+          tx: "0xce4fee69c692ddf57d4537b23479d78384a9e2d06b733b532e419055ed50a086",
+          documentSha256_16: "478ac85cd6b2357f",
+          _documentShaNote: "sha256 of the data: URI, first 16 hex. Lets repo-vs-chain drift be detected: the fixtures in scripts/seed/rig-registration-files.ts are the source of truth for three permanent mints, and an edit to FILES would otherwise diverge silently. Checked by scripts/verify/verify-rig-claims.ts against a gate report. ONLY REPRODUCIBLE WITH ARP_MCP_ENDPOINT UNSET: OWN_ENDPOINT reads the environment and the document is hashed after substitution, so anyone with it exported sees a false DRIFT."
+        },
+        "4": {
+          slug: "rig-dead",
+          exercises: "confirmed/dead",
+          endpoint: "http://192.0.2.1/mcp",
+          _endpointNote: "TEST-NET-1, RFC 5737 — reserved and never routable, so it always times out. A .invalid hostname was tried first and gave inconclusive/transport-error, because a DNS failure is indistinguishable from our own network being down.",
+          tx: "0x87bf71cf0ce55db7f82ca617b8601ee87f870e67018b1097a311ed2d61cc7378",
+          uriUpdatedTx: "0x8f5950a61fca19b6a3f69b26f6c4159e29833689ed4b1623d8610206bfe87100",
+          documentSha256_16: "6db8b769dd551e98"
+        },
+        "5": {
+          slug: "rig-unprobeable",
+          exercises: "not-checkable ×2 — templated and non-http-identifier. Never a defect.",
+          tx: "0x859aff609fa10dba635ffd12d0b60b598c7c3174238f61962edb4b5eee1a0efd",
+          documentSha256_16: "f61a9d7f6637958e"
+        }
+      },
+      gate: {
+        command: "bun run scripts/verify/verify-cohort.ts --target intuition-testnet --ids 1,2,3,4,5 --tools --out /tmp/gate.json && bun run scripts/verify/verify-rig-claims.ts /tmp/gate.json",
+        ranAt: "2026-10-19",
+        result: "5 agents: 2 with no tokenURI (40%), 3 read. 4 endpoints: 2 confirmed (serves-declared-protocol, dead), 2 not-checkable (templated, non-http-identifier), 0 inconclusive, 1 capability list recovered (arp_tool_reputation).",
+        _requires: "apps/mcp/src/server.ts listening on :3002, or agent 3 reports inconclusive. The confirmed branch is therefore reproducible only on a host running that server — a known limit of this gate until ARP has a public endpoint.",
+        _widerThanSpecced: "--ids 1,2,3,4,5 rather than 3,4,5. Including the two empty-tokenURI agents exercises a fifth branch for two extra requests.",
+        _claimsCheck: "verify-rig-claims.ts asserts each fixture's `exercises` prose against the outcome the probe observed, and the document hashes against this file. The unit suite CANNOT close that class: confirmed and inconclusive are both probeable before a request is sent, and the mutation that actually shipped lived exactly there."
+      }
+    },
+    trustStakeCapEnforcerV1: "0x7BB56819E9a413B8B4668C5cAF5C494c41dC0F8E",
+    delegationRegister: {
+      _note: "Task 37c, ADR 0092 item 7. The two predicates a published delegation is written with: (delegator CAIP-10) delegate to (delegate CAIP-10), and (pinned document) in context of (that triple). Both READ FROM THE GRAPH, neither minted by ARP: on testnet 13579 on 2026-11-03 exactly one atom carries each label, a Thing, `delegate to` in 10 triples and `in context of` in 29. `in context of` is the one endpointBinding uses. Never copy either across chains.",
+      measuredAt: "2026-11-03",
+      delegateTo: "0xb56980d42a3b03455bf41ea20fe04ae223fca0b9e688994dc661414e81e6433b",
+      inContextOf: "0x61a88b9c372c0d164d2caf66947b67ed0fcb4c457178a271b6b3dc39fb1f8862"
+    }
+  }
+};
+
+export { _13579_default as "13579_default" };