@arp-protocol/cli 0.0.3 → 0.0.5

package/dist/chunks/{cli-wev0jgf7.js → cli-g3q6fxm0.js}

@@ -1,4 +1,48 @@
 #!/usr/bin/env node
+import {
+  AGENT_EDGE_LIMIT,
+  AGENT_IDENTITIES_QUERY,
+  ALL_HIERARCHY_QUERY,
+  ATTACHED_DOCUMENTS_QUERY,
+  ATTESTED_TOOL_USAGE_QUERY,
+  BY_URL_QUERY,
+  CAPABILITIES_QUERY,
+  COHORT_ORDER_BY,
+  COHORT_QUERY,
+  DEFAULT_MAX_BODY_BYTES,
+  DEFAULT_TIMEOUT_MS,
+  ENDPOINT_SUBJECTS_QUERY,
+  FIND_AGENTS_QUERY,
+  HttpError,
+  IDENTITY_CLAIMS_QUERY,
+  IDENTITY_SAMPLE_LIMIT,
+  OUR_HIERARCHY_QUERY,
+  PULSE_ATOMS_QUERY,
+  PULSE_DOMAIN_EDGES_QUERY,
+  PULSE_EDGE_TOOLS_QUERY,
+  PULSE_EDGE_WRITERS_QUERY,
+  PULSE_QUALIFIERS_QUERY,
+  PULSE_USES_QUERY,
+  REGISTERED_TOOLS_QUERY,
+  RESOLVE_AGENT_QUERY,
+  SPONSORED_WALLETS_QUERY,
+  TAGGED_QUERY,
+  TOOL_LISTING_QUERY,
+  TOOL_LISTING_SPONSORED_QUERY,
+  TOOL_USAGE_QUERY,
+  TRUST_SURFACE_QUERY,
+  createGraphqlTransport,
+  defaultFetch,
+  isRecord,
+  isTimeoutError,
+  readArray,
+  readBigInt,
+  readBodyText,
+  readCount,
+  readNumber,
+  readRecord,
+  readString
+} from "./cli-zehr6kdx.js";
 import {
   AtomicReadyWalletRejectedUpgradeError,
   AtomicityNotSupportedError,
@@ -7701,6 +7745,10 @@ async function recoverTypedDataAddress2(parameters) {
     signature
   });
 }
+// ../../node_modules/.bun/viem@2.52.0+e016764623ac6761/node_modules/viem/_esm/utils/signature/verifyMessage.js
+async function verifyMessage3({ address, message, signature }) {
+  return isAddressEqual(getAddress(address), await recoverMessageAddress2({ message, signature }));
+}
 // ../../node_modules/.bun/viem@2.52.0+e016764623ac6761/node_modules/viem/_esm/errors/unit.js
 class InvalidDecimalNumberError extends BaseError {
   constructor({ value }) {
@@ -7770,6 +7818,56 @@ function isTransactionAbsent(error) {
   return error.walk((cause) => cause instanceof TransactionNotFoundError || cause instanceof TransactionReceiptNotFoundError) !== null;
 }
 
+// ../../packages/protocol/dist/endpoint-redaction.js
+var REDACTED_SEGMENT = ":id";
+
+class EndpointNotRedactableError extends Error {
+  input;
+  constructor(input, why) {
+    super(`${JSON.stringify(input)} cannot be written as an endpoint: ${why}`);
+    this.name = "EndpointNotRedactableError";
+    this.input = input;
+  }
+}
+var PARTS = /^([A-Za-z][A-Za-z0-9+.-]*:\/\/)([^/?#]*)([^?#]*)(?:\?([^#]*))?(?:#.*)?$/;
+var PERSONAL = [
+  (s) => s.includes("@"),
+  (s) => /0x[0-9a-f]{40}/i.test(s),
+  (s) => /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i.test(s),
+  (s) => /\d{6}/.test(s),
+  (s) => (s.match(/[0-9a-f]{16,}/gi) ?? []).some((run) => /\d/.test(run)),
+  (s) => /^[\d\s+().-]+$/.test(s) && (s.match(/\d/g) ?? []).length >= 7,
+  (s) => /\s/.test(s),
+  (s) => s.length > 20 && /^[A-Za-z0-9+/=_-]+$/.test(s) && /[A-Z]/.test(s) && /[a-z]/.test(s) && /\d/.test(s)
+];
+function looksPersonal(segment) {
+  if (segment === REDACTED_SEGMENT)
+    return false;
+  let decoded = segment;
+  try {
+    decoded = decodeURIComponent(segment);
+  } catch {}
+  return [segment, decoded].some((form) => PERSONAL.some((test) => test(form)));
+}
+var reduce = (segment) => segment !== "" && looksPersonal(segment) ? REDACTED_SEGMENT : segment;
+function redactEndpointUrl(url) {
+  const match = PARTS.exec(url);
+  if (match === null)
+    throw new EndpointNotRedactableError(url, "not a URL with a scheme and a host");
+  const scheme = match[1];
+  const authority = match[2];
+  if (!/^https?:\/\/$/i.test(scheme))
+    throw new EndpointNotRedactableError(url, `scheme ${scheme} is not http or https`);
+  if (authority.includes("@"))
+    throw new EndpointNotRedactableError(url, "it carries credentials (user:pass@)");
+  if (authority === "" || authority.startsWith(":"))
+    throw new EndpointNotRedactableError(url, "no host");
+  const path = match[3].split("/").map(reduce).join("/");
+  const names = (match[4] ?? "").split("&").filter((part) => part.indexOf("=") > 0).map((part) => reduce(part.slice(0, part.indexOf("="))));
+  const query = names.length === 0 ? "" : `?${names.map((name) => `${name}=`).join("&")}`;
+  return `${scheme}${authority}${path}${query}`;
+}
+
 // ../../packages/protocol/dist/declare/label.js
 function normaliseCategoryLabel(raw) {
   return raw.normalize("NFKC").normalize("NFD").replace(/[̀-ͯ]/g, "").toLowerCase().trim().replace(/\s+/g, " ");
@@ -8282,897 +8380,239 @@ async function prepareMarketExit(params) {
     ]
   };
 }
-// ../../packages/graphql/dist/http.js
-var DEFAULT_TIMEOUT_MS = 1e4;
-var DEFAULT_MAX_BODY_BYTES = 8 * 1024 * 1024;
-
-class HttpError extends Error {
-  kind;
-  timeoutMs;
-  constructor(kind, message, timeoutMs, cause) {
-    super(message, cause === undefined ? undefined : { cause });
-    this.name = "HttpError";
-    this.kind = kind;
-    this.timeoutMs = timeoutMs;
-  }
+// ../../packages/protocol/dist/declare/thing-cid.js
+function thingDocument(thing) {
+  return JSON.stringify({
+    "@context": "https://schema.org",
+    "@type": "Thing",
+    description: thing.description,
+    image: thing.image,
+    name: thing.name,
+    url: thing.url
+  });
 }
-function isTimeoutError(error) {
-  let cursor = error;
-  for (let depth = 0;depth < 8 && cursor !== null && cursor !== undefined; depth += 1) {
-    if (cursor instanceof HttpError)
-      return cursor.kind === "timeout";
-    cursor = cursor instanceof Error ? cursor.cause : null;
+function base32(bytes) {
+  const alphabet = "abcdefghijklmnopqrstuvwxyz234567";
+  let bits = 0;
+  let value = 0;
+  let out = "";
+  for (const byte of bytes) {
+    value = value << 8 | byte;
+    bits += 8;
+    while (bits >= 5) {
+      out += alphabet[value >>> bits - 5 & 31];
+      bits -= 5;
+    }
   }
-  return false;
+  if (bits > 0)
+    out += alphabet[value << 5 - bits & 31];
+  return out;
 }
-async function readBodyText(response, options = {}) {
-  const maxBytes = options.maxBytes ?? DEFAULT_MAX_BODY_BYTES;
-  const timeoutMs = options.timeoutMs ?? 0;
-  const body = response.body;
-  if (body === null)
-    return "";
-  const reader = body.getReader();
-  const signal = options.signal;
-  let onAbort = null;
-  const aborted = signal === undefined ? null : new Promise((_, reject) => {
-    const fire = () => reject(new HttpError("timeout", `timed out after ${timeoutMs}ms reading the body`, timeoutMs));
-    onAbort = fire;
-    if (signal.aborted)
-      fire();
-    else
-      signal.addEventListener("abort", fire, { once: true });
-  });
-  aborted?.catch(() => {
-    return;
-  });
-  const decoder = new TextDecoder;
-  let total = 0;
-  let text = "";
-  try {
-    for (;; ) {
-      const chunk = await (aborted === null ? reader.read() : Promise.race([reader.read(), aborted]));
-      if (chunk.done)
-        break;
-      total += chunk.value.byteLength;
-      if (total > maxBytes) {
-        throw new HttpError("too-large", `body exceeds ${maxBytes} bytes`, timeoutMs);
-      }
-      text += decoder.decode(chunk.value, { stream: true });
-    }
-    return text + decoder.decode();
-  } catch (error) {
-    reader.cancel().catch(() => {
-      return;
-    });
-    if (error instanceof HttpError)
-      throw error;
-    throw new HttpError("network", error instanceof Error ? error.message : String(error), timeoutMs, error);
-  } finally {
-    if (signal !== undefined && onAbort !== null)
-      signal.removeEventListener("abort", onAbort);
+function thingUriOfDigest(digest) {
+  const cid = new Uint8Array(4 + digest.length);
+  cid.set([1, 85, 18, 32]);
+  cid.set(digest, 4);
+  return `ipfs://b${base32(cid)}`;
+}
+
+// ../../packages/protocol/dist/declare/agent-atom.js
+function canonicalAgentThing(chainId, tokenId, registration) {
+  const normalize = (value) => {
+    if (typeof value !== "string")
+      return null;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : null;
+  };
+  const agentKey = `${chainId}:${tokenId}`;
+  return {
+    name: normalize(registration?.name) ?? `Agent ${agentKey}`,
+    description: normalize(registration?.description) ?? `ERC-8004 agent ${agentKey}`,
+    image: normalize(registration?.image) ?? "",
+    url: normalize(registration?.webEndpoint) ?? `https://8004scan.io/agents/${chainId}/${tokenId}`
+  };
+}
+function thingUri(thing) {
+  return thingUriOfDigest(toBytes(sha256(toBytes(thingDocument(thing)))));
+}
+
+// ../../packages/protocol/dist/declare/tool-thing.js
+class InvalidToolUrlError extends Error {
+  input;
+  constructor(input, why) {
+    super(`${JSON.stringify(input)} is not a usable tool URL: ${why}`);
+    this.name = "InvalidToolUrlError";
+    this.input = input;
   }
 }
-async function fetchTextWithTimeout(fetchImpl, url, init, options) {
-  const { timeoutMs } = options;
-  const controller = new AbortController;
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
+var TOOL_THING_DESCRIPTION = "A tool identified by its URL, so every declaration of its use lands on one atom.";
+function normaliseToolUrl(input) {
+  const trimmed = input.trim();
+  if (trimmed.length === 0)
+    throw new InvalidToolUrlError(input, "empty");
+  const withScheme = /^[a-z][a-z0-9+.-]*:/i.test(trimmed) ? trimmed : `https://${trimmed}`;
+  let url;
   try {
-    let response;
-    try {
-      response = await fetchImpl(url, { ...init, signal: controller.signal });
-    } catch (error) {
-      if (controller.signal.aborted) {
-        throw new HttpError("timeout", `timed out after ${timeoutMs}ms: ${url}`, timeoutMs);
-      }
-      throw new HttpError("network", error instanceof Error ? error.message : String(error), timeoutMs, error);
-    }
-    const text = await readBodyText(response, {
-      signal: controller.signal,
-      timeoutMs,
-      ...options.maxBytes === undefined ? {} : { maxBytes: options.maxBytes }
-    });
-    return { response, text };
-  } finally {
-    clearTimeout(timer);
+    url = new URL(withScheme);
+  } catch {
+    throw new InvalidToolUrlError(input, "not parseable as a URL");
   }
-}
-function defaultFetch() {
-  if (typeof globalThis.fetch !== "function") {
-    throw new TypeError("no global fetch available — pass one via createErc8004Client({fetch})");
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new InvalidToolUrlError(input, `scheme ${url.protocol} is not http or https`);
   }
-  return (input, init) => globalThis.fetch(input, init);
+  if (url.hostname.length === 0)
+    throw new InvalidToolUrlError(input, "no host");
+  const host = url.hostname.replace(/\.+$/, "").replace(/^(?:www\.)+/, "");
+  const path = url.pathname.replace(/(?:\.git|\/)+$/, "");
+  const params = [...new URLSearchParams(url.search).entries()].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+  const query = params.length === 0 ? "" : `?${new URLSearchParams(params).toString()}`;
+  const port = url.port === "" || url.port === "80" || url.port === "443" ? "" : `:${url.port}`;
+  return `https://${host}${port}${path}${query}`;
+}
+function toolThing(url) {
+  const normalised = normaliseToolUrl(url);
+  return {
+    name: normalised.slice("https://".length),
+    description: TOOL_THING_DESCRIPTION,
+    image: "",
+    url: normalised
+  };
 }
-// ../../packages/graphql/dist/json.js
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function toolAtomUri(url) {
+  return thingUri(toolThing(url));
 }
-function readRecord(source, key) {
-  if (!isRecord(source))
-    return null;
-  const child = source[key];
-  return isRecord(child) ? child : null;
+function toolThingDocument(url) {
+  return thingDocument(toolThing(url));
 }
-function readString(source, key) {
-  if (!isRecord(source))
-    return null;
-  const value = source[key];
-  return typeof value === "string" ? value : null;
+function isToolUrl(uri) {
+  try {
+    normaliseToolUrl(uri);
+    return true;
+  } catch {
+    return false;
+  }
 }
-function readNumber(source, key) {
-  if (!isRecord(source))
-    return null;
-  const value = source[key];
-  return typeof value === "number" && Number.isFinite(value) ? value : null;
+
+// ../../packages/protocol/dist/tool-url-values.js
+var GITHUB = /^https?:\/\/(?:www\.)?github\.com(?:[/?#]|$)/i;
+function publishableToolUrl(url) {
+  if (GITHUB.test(url)) {
+    let parsed;
+    try {
+      parsed = new URL(url);
+    } catch {
+      return { ok: false, why: "it is not a URL", listable: null };
+    }
+    const names = [...parsed.searchParams.keys()];
+    const others = [...new Set(names.filter((name) => name !== "skill"))];
+    if (others.length === 0 && names.length <= 1 && parsed.hash === "")
+      return { ok: true };
+    const skill = parsed.searchParams.get("skill");
+    const listable = normaliseToolUrl(`${parsed.origin}${parsed.pathname}${skill === null ? "" : `?skill=${encodeURIComponent(skill)}`}`);
+    const why = others.length > 0 ? `its query carries ${others.join(", ")}` : "its query repeats skill";
+    return { ok: false, why, listable };
+  }
+  let redacted;
+  try {
+    redacted = redactEndpointUrl(url);
+  } catch (error) {
+    if (error instanceof EndpointNotRedactableError)
+      return { ok: false, why: error.message, listable: null };
+    throw error;
+  }
+  if (redacted === url)
+    return { ok: true };
+  const valued = new Set((url.split("#")[0] ?? "").split("?").slice(1).join("?").split("&").filter((part) => part.indexOf("=") > 0 && part.slice(part.indexOf("=") + 1) !== "").map((part) => part.slice(0, part.indexOf("="))));
+  const parts = [];
+  if (valued.size > 0)
+    parts.push(`a value for ${[...valued].join(", ")}`);
+  const pathOf = (u) => u.split(/[?#]/)[0];
+  if (pathOf(redacted) !== pathOf(url))
+    parts.push("a path segment or name that looks personal");
+  if (url.includes("#"))
+    parts.push("a fragment");
+  return { ok: false, why: `it carries ${parts.length === 0 ? "a value" : parts.join(" and ")}`, listable: redacted };
 }
-function readArray(source, key) {
-  if (!isRecord(source))
-    return [];
-  const value = source[key];
-  return Array.isArray(value) ? value : [];
+
+class ToolUrlCarriesValuesError extends Error {
+  listable;
+  constructor(why, listable) {
+    super(`This tool URL cannot be listed: ${why}. A tool's URL is written publicly and for good, so remove it` + (listable === null ? "." : ` and list ${listable}.`));
+    this.name = "ToolUrlCarriesValuesError";
+    this.listable = listable;
+  }
 }
-function readBigInt(source, key) {
-  if (!isRecord(source))
-    return null;
-  const value = source[key];
-  if (typeof value === "bigint")
-    return value;
-  if (typeof value === "number")
-    return Number.isInteger(value) ? BigInt(value) : null;
-  if (typeof value !== "string" || !/^-?\d+$/.test(value))
-    return null;
-  return BigInt(value);
+function assertPublishableToolUrl(url) {
+  const verdict = publishableToolUrl(url);
+  if (!verdict.ok)
+    throw new ToolUrlCarriesValuesError(verdict.why, verdict.listable);
 }
-function readCount(source, key) {
-  if (!isRecord(source))
-    return null;
-  const value = source[key];
-  const parsed = typeof value === "number" ? value : typeof value === "string" && /^\d+$/.test(value) ? Number(value) : null;
-  return parsed !== null && Number.isSafeInteger(parsed) && parsed >= 0 ? parsed : null;
-}
-// ../../packages/graphql/dist/client.js
-class GraphqlError extends Error {
-  url;
-  httpStatus;
-  constructor(message, url, httpStatus, cause) {
-    super(message, cause === undefined ? undefined : { cause });
-    this.name = "GraphqlError";
-    this.url = url;
-    this.httpStatus = httpStatus;
-  }
-}
-function createGraphqlTransport(config) {
-  const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+
+// ../../packages/protocol/dist/declare/tool-atom.js
+function intuitionToolAtomLookup(config) {
+  const transport = config.transport ?? createGraphqlTransport({
+    url: config.graphqlUrl,
+    fetch: config.fetch ?? defaultFetch(),
+    ...config.timeoutMs === undefined ? {} : { timeoutMs: config.timeoutMs }
+  });
   return {
-    async request(query, variables, options) {
-      let response;
-      let text;
-      try {
-        ({ response, text } = await fetchTextWithTimeout(config.fetch, config.url, {
-          method: "POST",
-          headers: {
-            "content-type": "application/json",
-            accept: "application/json"
-          },
-          body: JSON.stringify({ query, variables })
-        }, {
-          timeoutMs: options?.timeoutMs ?? timeoutMs,
-          ...config.maxBodyBytes === undefined ? {} : { maxBytes: config.maxBodyBytes }
-        }));
-      } catch (error) {
-        const message = error instanceof HttpError ? error.message : String(error);
-        throw new GraphqlError(message, config.url, null, error);
-      }
-      if (!response.ok) {
-        throw new GraphqlError(`HTTP ${response.status} ${response.statusText}`, config.url, response.status);
-      }
-      let body = null;
-      try {
-        body = JSON.parse(text);
-      } catch {
-        body = null;
-      }
-      if (!isRecord(body)) {
-        throw new GraphqlError("response body is not a JSON object", config.url, 200);
-      }
-      const errors = readArray(body, "errors");
-      if (errors.length > 0) {
-        const messages = errors.map((entry) => readString(entry, "message") ?? "unknown error").join("; ");
-        throw new GraphqlError(messages, config.url, 200);
-      }
-      const data = body["data"];
-      if (!isRecord(data)) {
-        throw new GraphqlError("response carries no data object", config.url, 200);
+    async findByUrl(url) {
+      const data = await transport.request(BY_URL_QUERY, { url });
+      const rows = Array.isArray(data["atoms"]) ? data["atoms"] : [];
+      const candidates = [];
+      for (const row of rows) {
+        if (!isRecord(row))
+          continue;
+        const termId = readString(row, "term_id");
+        if (termId === null)
+          continue;
+        candidates.push({
+          termId,
+          label: readString(row, "label"),
+          uri: readString(row, "data")
+        });
       }
-      return data;
-    }
-  };
-}
-// ../../packages/graphql/dist/queries/agent.js
-var THING = `value { thing { name description image url } }`;
-var MARKET_SIDE = `
-    total_market_cap
-    total_assets
-    vaults(where: {curve_id: {_eq: $curveId}}, limit: 1) {
-      market_cap
-      total_assets
-      total_shares
-      current_share_price
-      position_count
-    }`;
-var RESOLVE_AGENT_QUERY = `
-query ResolveAgentByCaip($sameAsPredicateId: String!, $caipId: String!) {
-  triples(
-    where: {
-      predicate_id: {_eq: $sameAsPredicateId}
-      object: {value: {thing: {name: {_eq: $caipId}}}}
+      return candidates;
     }
-    limit: 2
-  ) {
-    subject { term_id label data ${THING} }
+  };
+}
+function derivesItsOwnAtom(uri) {
+  return /^(ipfs|ar):\/\//i.test(uri.trim());
+}
+
+// ../../packages/protocol/dist/declare/plan.js
+class EmptyPlanError extends Error {
+  constructor(what) {
+    super(`nothing to plan: ${what}`);
+    this.name = "EmptyPlanError";
   }
-}`;
-var AGENT_EDGE_LIMIT = 250;
-var TRUST_SURFACE_QUERY = `
-query AgentTrustSurface($subjectId: String!, $predicateIds: [String!], $curveId: numeric!, $limit: Int!) {
-  triples(
-    where: {subject_id: {_eq: $subjectId}, predicate_id: {_in: $predicateIds}}
-    order_by: {term: {total_market_cap: desc}}
-    limit: $limit
-  ) {
-    term_id
-    predicate { term_id label }
-    object { term_id label data ${THING} }
-    term {${MARKET_SIDE}
-    }
-    counter_term {${MARKET_SIDE}
-    }
+}
+
+class NonPositiveAmountError extends Error {
+  tripleId;
+  constructor(tripleId, amount) {
+    super(`a deposit of ${amount} on ${tripleId} would put nothing behind the claim; ` + `an edge with no stake carries no weight at all (docs/14)`);
+    this.name = "NonPositiveAmountError";
+    this.tripleId = tripleId;
   }
-}`;
-var CAPABILITIES_QUERY = `
-query AgentCapabilities($subjectId: String!, $predicateIds: [String!], $limit: Int!) {
-  triples(
-    where: {subject_id: {_eq: $subjectId}, predicate_id: {_in: $predicateIds}}
-    order_by: {term_id: asc}
-    limit: $limit
-  ) {
-    term_id
-    predicate { term_id label }
-    object { term_id label ${THING} }
+}
+
+class AmbiguousToolAtomError extends Error {
+  uri;
+  candidates;
+  constructor(uri, candidates) {
+    super(`${candidates.length} atoms already claim ${uri} — ` + candidates.map((c) => `${c.termId} (${c.label ?? "no label"})`).join(", ") + `. Refusing to choose: a \`uses\` edge on the wrong one is permanent. ` + `Pass the \`ipfs://\` URI of the atom you mean.`);
+    this.name = "AmbiguousToolAtomError";
+    this.uri = uri;
+    this.candidates = candidates;
   }
-}`;
-var IDENTITY_SAMPLE_LIMIT = 4;
-var CAPABILITY_SAMPLE_LIMIT = 8;
-var COHORT_QUERY = `
-query AgentCohort($where: triples_bool_exp!, $sameAsPredicateId: String!, $capabilityPredicateIds: [String!], $orderBy: [triples_order_by!]!, $limit: Int!, $offset: Int!) {
-  total: triples_aggregate(
-    where: $where
-  ) {
-    aggregate { count }
-  }
-  triples(
-    where: $where
-    order_by: $orderBy
-    limit: $limit
-    offset: $offset
-  ) {
-    subject {
-      term_id
-      label
-      ${THING}
-      as_subject_triples_aggregate { aggregate { count } }
-      term {
-        total_market_cap
-        vaults_aggregate { aggregate { count sum { position_count } } }
-      }
-      identityCount: as_subject_triples_aggregate(
-        where: {predicate_id: {_eq: $sameAsPredicateId}}
-      ) {
-        aggregate { count }
-      }
-      identity: as_subject_triples(
-        where: {predicate_id: {_eq: $sameAsPredicateId}}
-        limit: ${IDENTITY_SAMPLE_LIMIT}
-      ) {
-        object { label ${THING} }
-      }
-      capabilities: as_subject_triples(
-        where: {predicate_id: {_in: $capabilityPredicateIds}}
-        limit: ${CAPABILITY_SAMPLE_LIMIT}
-      ) {
-        predicate_id
-        object { term_id label }
-      }
-    }
-  }
-}`;
-var COHORT_ORDER_BY = {
-  "evidence-quantity": [
-    { subject: { as_subject_triples_aggregate: { count: "desc" } } },
-    { subject_id: "asc" }
-  ],
-  "economic-conviction": [{ subject: { term: { total_market_cap: "desc" } } }, { subject_id: "asc" }]
-};
-// ../../packages/graphql/dist/queries/atom-standing.js
-var VAULT_SIDE = `
-    total_market_cap
-    total_assets
-    vaults(where: {curve_id: {_eq: $curveId}}, limit: 1) {
-      market_cap
-      total_assets
-      total_shares
-      current_share_price
-      position_count
-    }`;
-var ATOM_STANDING_QUERY = `
-query AtomStanding($atomId: String!, $curveId: numeric!, $limit: Int!, $attestor: [String!]!) {
-  atom: atoms(where: {term_id: {_eq: $atomId}}, limit: 1) {
-    term_id
-    label
-    data
-    type
-    value { thing { url } }
-    term { ${VAULT_SIDE} }
-  }
-  triples(
-    where: {object_id: {_eq: $atomId}}
-    order_by: {term: {total_assets: desc}}
-    limit: $limit
-  ) {
-    term_id
-    predicate { term_id label }
-    subject { term_id label type }
-    term { ${VAULT_SIDE} }
-    counter_term { ${VAULT_SIDE} }
-  }
-  claims: triples(
-    where: {subject_id: {_eq: $atomId}}
-    order_by: {term: {total_assets: desc}}
-    limit: $limit
-  ) {
-    term_id
-    predicate { term_id label }
-    object { term_id label type }
-    term {
-      ${VAULT_SIDE}
-      vaults(where: {curve_id: {_eq: $curveId}}, limit: 1) {
-        positions(where: {account_id: {_in: $attestor}, shares: {_gt: "0"}}, limit: 1) { shares }
-      }
-    }
-  }
-}`;
-var LISTED_CAPABILITIES_FOR_QUERY = `query ListedCapabilitiesFor($subject: String!, $predicates: [String!]) {
-  atoms(where: {term_id: {_eq: $subject}}, limit: 1) {
-    capabilities: as_subject_triples(
-      where: {predicate_id: {_in: $predicates}}
-      limit: ${CAPABILITY_SAMPLE_LIMIT}
-    ) { object { term_id } }
-  }
-}`;
-// ../../packages/graphql/dist/queries/discover.js
-var FIND_AGENTS_QUERY = `
-query FindAgents($domain: String!, $predicates: [String!], $sameAs: String!, $curveId: numeric!, $limit: Int!) {
-  triples(
-    where: {
-      predicate_id: {_in: $predicates}
-      object: {label: {_ilike: $domain}}
-      subject: {as_subject_triples: {predicate_id: {_eq: $sameAs}}}
-    }
-    limit: $limit
-  ) {
-    predicate_id
-    object { label }
-    subject {
-      term_id
-      label
-      term { vaults(where: {curve_id: {_eq: $curveId}}, limit: 1) { position_count total_assets } }
-    }
-  }
-}`;
-// ../../packages/graphql/dist/queries/domains.js
-var OUR_HIERARCHY_QUERY = `query($pid: String!, $who: [String!]!, $curveId: numeric!, $limit: Int!, $offset: Int!) {
-  positions(
-    where: {
-      account_id: {_in: $who}
-      curve_id: {_eq: $curveId}
-      shares: {_gt: "0"}
-      term: {triple: {predicate_id: {_eq: $pid}}}
-    }
-    limit: $limit
-    offset: $offset
-    order_by: {id: asc}
-  ) {
-    shares
-    term {
-      triple {
-        term_id
-        subject { term_id data label }
-        object { term_id data label }
-      }
-    }
-  }
-}`;
-var ALL_HIERARCHY_QUERY = `query($pid: String!, $limit: Int!, $offset: Int!) {
-  triples(where: {predicate_id: {_eq: $pid}}, limit: $limit, offset: $offset, order_by: {term_id: asc}) {
-    term_id
-    subject { term_id data label }
-    object { term_id data label }
-    term { vaults { curve_id position_count total_shares } }
-  }
-}`;
-var TAGGED_QUERY = `query($pid: String!, $domains: [String!], $limit: Int!, $offset: Int!, $who: [String!]!) {
-  triples(
-    where: {predicate_id: {_eq: $pid}, object: {data: {_in: $domains}}}
-    limit: $limit
-    offset: $offset
-    order_by: {term_id: asc}
-  ) {
-    term_id
-    subject { term_id label value { thing { url name } } }
-    object { data }
-    term {
-      vaults {
-        curve_id
-        position_count
-        total_shares
-        positions(where: {account_id: {_in: $who}, shares: {_gt: "0"}}) { shares }
-      }
-    }
-  }
-}`;
-// ../../packages/graphql/dist/queries/registered-tools.js
-var REGISTERED_TOOLS_QUERY = `
-query RegisteredTools($description: String!, $uses: String!, $sameAs: String!, $curveId: numeric!, $limit: Int!, $offset: Int!) {
-  atoms(
-    where: {value: {thing: {description: {_eq: $description}}}}
-    limit: $limit
-    offset: $offset
-    order_by: {term_id: asc}
-  ) {
-    term_id
-    label
-    data
-    value { thing { url } }
-    term {
-      vaults(where: {curve_id: {_eq: $curveId}}, limit: 1) { position_count total_assets }
-    }
-    as_object_triples_aggregate(
-      where: {
-        predicate_id: {_eq: $uses}
-        subject: {as_subject_triples: {predicate_id: {_eq: $sameAs}}}
-      }
-    ) { aggregate { count } }
-  }
-}`;
-// ../../packages/graphql/dist/queries/tool-atom.js
-var BY_URL_QUERY = `
-query ToolAtomByUrl($url: String!) {
-  atoms(where: {value: {thing: {url: {_eq: $url}}}}, limit: 10) {
-    term_id
-    label
-    type
-    data
-  }
-}`;
-// ../../packages/graphql/dist/queries/tool-listing.js
-function toolListingQuery(sponsored) {
-  const variables = sponsored ? "$uses: String!, $sameAs: String!, $curveId: numeric!, $limit: Int!, $sponsor: String!" : "$uses: String!, $sameAs: String!, $curveId: numeric!, $limit: Int!";
-  const sponsoredCount = sponsored ? `
-      sponsored: deposits_aggregate(where: {sender_id: {_ilike: $sponsor}, receiver_id: {_nilike: $sponsor}}) { aggregate { count } }` : "";
-  return `
-query ToolListing(${variables}) {
-  triples(
-    where: {
-      predicate_id: {_eq: $uses}
-      subject: {as_subject_triples: {predicate_id: {_eq: $sameAs}}}
-    }
-    limit: $limit
-  ) {
-    term_id
-    subject_id
-    object {
-      term_id
-      label
-      data
-      type
-      value { thing { url } }
-    }
-    term {
-      total_assets
-      vaults(where: {curve_id: {_eq: $curveId}}, limit: 1) { position_count total_assets }
-      deposits: deposits_aggregate { aggregate { count } }${sponsoredCount}
-    }
-    counter_term {
-      total_assets
-      vaults(where: {curve_id: {_eq: $curveId}}, limit: 1) { position_count total_assets }
-    }
-  }
-}`;
-}
-var TOOL_LISTING_QUERY = toolListingQuery(false);
-var TOOL_LISTING_SPONSORED_QUERY = toolListingQuery(true);
-var SPONSORED_WALLETS_QUERY = `
-query SponsoredWallets($uses: String!, $sponsor: String!, $limit: Int!) {
-  deposits(
-    where: {sender_id: {_eq: $sponsor}, receiver_id: {_neq: $sponsor}, term: {triple: {predicate_id: {_eq: $uses}}}}
-    distinct_on: [term_id, receiver_id]
-    limit: $limit
-  ) { term_id receiver_id }
-}`;
-// ../../packages/graphql/dist/queries/pulse-usage.js
-var PULSE_USES_QUERY = `query PulseUses($tools: [String!]!, $uses: String!, $limit: Int!) {
-    triples(where: {object_id: {_in: $tools}, predicate_id: {_eq: $uses}}, limit: $limit) {
-        term_id
-        object_id
-        creator_id
-        created_at
-        subject {
-            term_id
-            label
-        }
-        positions(where: {shares: {_gt: "0"}}) {
-            account_id
-        }
-    }
-}`;
-var PULSE_QUALIFIERS_QUERY = `query PulseQualifiers($edges: [String!]!, $predicates: [String!]!, $writers: [String!]!, $limit: Int!) {
-    triples(where: {subject_id: {_in: $edges}, predicate_id: {_in: $predicates}}, limit: $limit) {
-        term_id
-        subject_id
-        predicate_id
-        creator_id
-        created_at
-        object {
-            label
-        }
-        positions(where: {shares: {_gt: "0"}, account_id: {_in: $writers}}) {
-            account_id
-        }
-    }
-}`;
-var PULSE_ATOMS_QUERY = `query PulseAtoms($uris: [String!]!, $limit: Int!) {
-    atoms(where: {data: {_in: $uris}}, limit: $limit) {
-        term_id
-        data
-    }
-}`;
-var PULSE_DOMAIN_EDGES_QUERY = `query PulseDomainEdges($domains: [String!]!, $predicate: String!, $limit: Int!) {
-    triples(where: {predicate_id: {_eq: $predicate}, object: {label: {_in: $domains}}}, order_by: {created_at: desc}, limit: $limit) {
-        subject_id
-    }
-}`;
-var PULSE_EDGE_TOOLS_QUERY = `query PulseEdgeTools($edges: [String!]!, $uses: String!, $limit: Int!) {
-    triples(where: {term_id: {_in: $edges}, predicate_id: {_eq: $uses}}, limit: $limit) {
-        object {
-            term_id
-            label
-            data
-        }
-    }
-}`;
-var AGENT_IDENTITIES_QUERY = `query AgentIdentities($atoms: [String!]!, $sameAs: String!, $limit: Int!) {
-    triples(where: {subject_id: {_in: $atoms}, predicate_id: {_eq: $sameAs}}, limit: $limit) {
-        subject_id
-        subject {
-            data
-        }
-        object {
-            label
-            value {
-                thing {
-                    name
-                }
-            }
-        }
-    }
-}`;
-var ATTACHED_DOCUMENTS_QUERY = `query AttachedDocuments($term: String!, $inContextOf: String!, $creators: [String!]!, $limit: Int!) {
-    others: triples_aggregate(where: {predicate_id: {_eq: $inContextOf}, object_id: {_eq: $term}, creator_id: {_nin: $creators}}) {
-        aggregate {
-            count
-        }
-    }
-    triples(where: {predicate_id: {_eq: $inContextOf}, object_id: {_eq: $term}, creator_id: {_in: $creators}}, order_by: {created_at: asc}, limit: $limit) {
-        creator_id
-        subject {
-            data
-            value {
-                json_object {
-                    data
-                }
-            }
-        }
-    }
-}`;
-var IDENTITY_CLAIMS_QUERY = `query IdentityClaims($caip19: String!, $sameAs: String!, $limit: Int!) {
-    triples(where: {predicate_id: {_eq: $sameAs}, object: {label: {_eq: $caip19}}}, limit: $limit) {
-        creator_id
-        subject {
-            term_id
-            data
-        }
-    }
-}`;
-var PULSE_EDGE_WRITERS_QUERY = `query PulseEdgeWriters($edges: [String!]!, $limit: Int!) {
-    triples(where: {term_id: {_in: $edges}}, limit: $limit) {
-        term_id
-        creator_id
-    }
-}`;
-var ENDPOINT_SUBJECTS_QUERY = `query EndpointSubjects($hasEndpoint: String!, $limit: Int!) {
-    triples(where: {predicate_id: {_eq: $hasEndpoint}}, order_by: {created_at: desc}, limit: $limit) {
-        subject_id
-        subject {
-            label
-        }
-    }
-}`;
-// ../../packages/graphql/dist/queries/tool-usage.js
-var VAULT_SIDE2 = `
-    total_market_cap
-    total_assets
-    vaults(where: {curve_id: {_eq: $curveId}}, limit: 1) {
-      market_cap
-      total_assets
-      total_shares
-      current_share_price
-      position_count
-    }`;
-var TOOL_USAGE_QUERY = `
-query ToolUsage($toolId: String!, $uses: String!, $curveId: numeric!) {
-  tool: atoms(where: {term_id: {_eq: $toolId}}, limit: 1) {
-    term_id
-    label
-    data
-  }
-  triples(where: {predicate_id: {_eq: $uses}, object_id: {_eq: $toolId}}, limit: 200) {
-    term_id
-    subject {
-      term_id
-      label
-      type
-    }
-    term { ${VAULT_SIDE2} }
-    counter_term { ${VAULT_SIDE2} }
-  }
-}`;
-var ATTESTED_TOOL_USAGE_QUERY = `
-query AttestedToolUsage($toolId: String!, $uses: String!, $curveId: numeric!, $attestor: String!) {
-  tool: atoms(where: {term_id: {_eq: $toolId}}, limit: 1) {
-    term_id
-    label
-    data
-  }
-  triples(where: {
-    predicate_id: {_eq: $uses},
-    object_id: {_eq: $toolId},
-    term: {positions: {account_id: {_eq: $attestor}}}
-  }, limit: 200) {
-    term_id
-    subject {
-      term_id
-      label
-      type
-    }
-    term { ${VAULT_SIDE2} }
-    counter_term { ${VAULT_SIDE2} }
-  }
-}`;
-// ../../packages/graphql/dist/queries/x402-feed.js
-var LEVEL = `term_id
-        subject_id
-        predicate_id
-        creator_id
-        created_at
-        subject {
-            term_id
-            label
-        }
-        object {
-            term_id
-            label
-            data
-            value {
-                thing {
-                    url
-                }
-            }
-        }
-        positions(where: {shares: {_gt: "0"}}) {
-            account_id
-        }`;
-var X402_PAYMENT_LEVELS_QUERY = `query X402PaymentLevels($paidWith: String!, $limit: Int!, $offset: Int!) {
-    triples(where: {predicate_id: {_eq: $paidWith}}, order_by: {term_id: asc}, limit: $limit, offset: $offset) {
-        ${LEVEL}
-    }
-}`;
-var X402_LEVELS_BY_ID_QUERY = `query X402LevelsById($ids: [String!]!, $limit: Int!) {
-    triples(where: {term_id: {_in: $ids}}, limit: $limit) {
-        ${LEVEL}
-    }
-}`;
-var X402_REASONS_QUERY = `query X402Reasons($ids: [String!]!, $because: String!, $limit: Int!) {
-    triples(where: {subject_id: {_in: $ids}, predicate_id: {_eq: $because}}, order_by: {term_id: asc}, limit: $limit) {
-        ${LEVEL}
-    }
-}`;
-// ../../packages/protocol/dist/declare/tool-atom.js
-function intuitionToolAtomLookup(config) {
-  const transport = config.transport ?? createGraphqlTransport({
-    url: config.graphqlUrl,
-    fetch: config.fetch ?? defaultFetch(),
-    ...config.timeoutMs === undefined ? {} : { timeoutMs: config.timeoutMs }
-  });
-  return {
-    async findByUrl(url) {
-      const data = await transport.request(BY_URL_QUERY, { url });
-      const rows = Array.isArray(data["atoms"]) ? data["atoms"] : [];
-      const candidates = [];
-      for (const row of rows) {
-        if (!isRecord(row))
-          continue;
-        const termId = readString(row, "term_id");
-        if (termId === null)
-          continue;
-        candidates.push({
-          termId,
-          label: readString(row, "label"),
-          uri: readString(row, "data")
-        });
-      }
-      return candidates;
-    }
-  };
-}
-function derivesItsOwnAtom(uri) {
-  return /^(ipfs|ar):\/\//i.test(uri.trim());
-}
-
-// ../../packages/protocol/dist/declare/thing-cid.js
-function thingDocument(thing) {
-  return JSON.stringify({
-    "@context": "https://schema.org",
-    "@type": "Thing",
-    description: thing.description,
-    image: thing.image,
-    name: thing.name,
-    url: thing.url
-  });
-}
-function base32(bytes) {
-  const alphabet = "abcdefghijklmnopqrstuvwxyz234567";
-  let bits = 0;
-  let value = 0;
-  let out = "";
-  for (const byte of bytes) {
-    value = value << 8 | byte;
-    bits += 8;
-    while (bits >= 5) {
-      out += alphabet[value >>> bits - 5 & 31];
-      bits -= 5;
-    }
-  }
-  if (bits > 0)
-    out += alphabet[value << 5 - bits & 31];
-  return out;
-}
-function thingUriOfDigest(digest) {
-  const cid = new Uint8Array(4 + digest.length);
-  cid.set([1, 85, 18, 32]);
-  cid.set(digest, 4);
-  return `ipfs://b${base32(cid)}`;
-}
-
-// ../../packages/protocol/dist/declare/agent-atom.js
-function canonicalAgentThing(chainId, tokenId, registration) {
-  const normalize = (value) => {
-    if (typeof value !== "string")
-      return null;
-    const trimmed = value.trim();
-    return trimmed.length > 0 ? trimmed : null;
-  };
-  const agentKey = `${chainId}:${tokenId}`;
-  return {
-    name: normalize(registration?.name) ?? `Agent ${agentKey}`,
-    description: normalize(registration?.description) ?? `ERC-8004 agent ${agentKey}`,
-    image: normalize(registration?.image) ?? "",
-    url: normalize(registration?.webEndpoint) ?? `https://8004scan.io/agents/${chainId}/${tokenId}`
-  };
-}
-function thingUri(thing) {
-  return thingUriOfDigest(toBytes(sha256(toBytes(thingDocument(thing)))));
-}
-
-// ../../packages/protocol/dist/declare/tool-thing.js
-class InvalidToolUrlError extends Error {
-  input;
-  constructor(input, why) {
-    super(`${JSON.stringify(input)} is not a usable tool URL: ${why}`);
-    this.name = "InvalidToolUrlError";
-    this.input = input;
-  }
-}
-var TOOL_THING_DESCRIPTION = "A tool identified by its URL, so every declaration of its use lands on one atom.";
-function normaliseToolUrl(input) {
-  const trimmed = input.trim();
-  if (trimmed.length === 0)
-    throw new InvalidToolUrlError(input, "empty");
-  const withScheme = /^[a-z][a-z0-9+.-]*:/i.test(trimmed) ? trimmed : `https://${trimmed}`;
-  let url;
-  try {
-    url = new URL(withScheme);
-  } catch {
-    throw new InvalidToolUrlError(input, "not parseable as a URL");
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") {
-    throw new InvalidToolUrlError(input, `scheme ${url.protocol} is not http or https`);
-  }
-  if (url.hostname.length === 0)
-    throw new InvalidToolUrlError(input, "no host");
-  const host = url.hostname.replace(/\.+$/, "").replace(/^(?:www\.)+/, "");
-  const path = url.pathname.replace(/(?:\.git|\/)+$/, "");
-  const params = [...new URLSearchParams(url.search).entries()].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
-  const query = params.length === 0 ? "" : `?${new URLSearchParams(params).toString()}`;
-  const port = url.port === "" || url.port === "80" || url.port === "443" ? "" : `:${url.port}`;
-  return `https://${host}${port}${path}${query}`;
-}
-function toolThing(url) {
-  const normalised = normaliseToolUrl(url);
-  return {
-    name: normalised.slice("https://".length),
-    description: TOOL_THING_DESCRIPTION,
-    image: "",
-    url: normalised
-  };
-}
-function toolAtomUri(url) {
-  return thingUri(toolThing(url));
-}
-function toolThingDocument(url) {
-  return thingDocument(toolThing(url));
-}
-function isToolUrl(uri) {
-  try {
-    normaliseToolUrl(uri);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-// ../../packages/protocol/dist/declare/plan.js
-class EmptyPlanError extends Error {
-  constructor(what) {
-    super(`nothing to plan: ${what}`);
-    this.name = "EmptyPlanError";
-  }
-}
-
-class NonPositiveAmountError extends Error {
-  tripleId;
-  constructor(tripleId, amount) {
-    super(`a deposit of ${amount} on ${tripleId} would put nothing behind the claim; ` + `an edge with no stake carries no weight at all (docs/14)`);
-    this.name = "NonPositiveAmountError";
-    this.tripleId = tripleId;
-  }
-}
-
-class AmbiguousToolAtomError extends Error {
-  uri;
-  candidates;
-  constructor(uri, candidates) {
-    super(`${candidates.length} atoms already claim ${uri} — ` + candidates.map((c) => `${c.termId} (${c.label ?? "no label"})`).join(", ") + `. Refusing to choose: a \`uses\` edge on the wrong one is permanent. ` + `Pass the \`ipfs://\` URI of the atom you mean.`);
-    this.name = "AmbiguousToolAtomError";
-    this.uri = uri;
-    this.candidates = candidates;
-  }
-}
-
-class BelowMinDepositError extends Error {
-  tripleId;
-  constructor(tripleId, amount, minDeposit) {
-    super(`a deposit of ${amount} wei on ${tripleId} is below the protocol's minimum of ` + `${minDeposit} wei on this chain. The floor is chain state and differs 10× between ` + `mainnet and testnet, so an amount that works on one may not on the other.`);
-    this.name = "BelowMinDepositError";
-    this.tripleId = tripleId;
+}
+
+class BelowMinDepositError extends Error {
+  tripleId;
+  constructor(tripleId, amount, minDeposit) {
+    super(`a deposit of ${amount} wei on ${tripleId} is below the protocol's minimum of ` + `${minDeposit} wei on this chain. The floor is chain state and differs 10× between ` + `mainnet and testnet, so an amount that works on one may not on the other.`);
+    this.name = "BelowMinDepositError";
+    this.tripleId = tripleId;
   }
 }
 
@@ -9211,6 +8651,7 @@ async function resolveToolAtom(uri, reads, lookup) {
     });
   }
   const normalised = normaliseToolUrl(uri);
+  assertPublishableToolUrl(normalised);
   if (lookup !== undefined) {
     const candidates = await findExistingToolAtoms(lookup, uri, normalised);
     if (candidates.length > 1)
@@ -9834,50 +9275,6 @@ async function resolveIdentityAtomStrict(params) {
     throw error;
   }
 }
-// ../../packages/protocol/dist/arp/x402-networks.js
-var X402_DEFAULT_NETWORKS = new Map([
-  [
-    "eip155:8453",
-    { assets: [getAddress("0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913")], rpcUrl: "https://mainnet.base.org" }
-  ]
-]);
-
-// ../../packages/protocol/dist/arp/chains.js
-var intuitionTestnet = defineChain2({
-  id: 13579,
-  name: "Intuition Testnet",
-  nativeCurrency: { decimals: 18, name: "Test Trust", symbol: "tTRUST" },
-  rpcUrls: {
-    default: { http: ["https://testnet.rpc.intuition.systems/http"] }
-  },
-  blockExplorers: {
-    default: {
-      name: "Intuition Testnet Explorer",
-      url: "https://testnet.explorer.intuition.systems"
-    }
-  },
-  testnet: true
-});
-var intuitionMainnet = defineChain2({
-  id: 1155,
-  name: "Intuition",
-  nativeCurrency: { decimals: 18, name: "Intuition", symbol: "TRUST" },
-  rpcUrls: {
-    default: { http: ["https://rpc.intuition.systems/http"] }
-  },
-  blockExplorers: {
-    default: {
-      name: "Intuition Explorer",
-      url: "https://explorer.intuition.systems"
-    }
-  }
-});
-// ../../packages/protocol/dist/arp/attestors.js
-var ARP_DOMAIN_ATTESTORS = [
-  "0x906f3A52ec089f8D4E9127F91C6bE5Ae0d18f91f",
-  "0xE596096F4176b682E300d73963e7B04B383C1AA1",
-  "0x77939A4c276f3E549276CEB3A09CDa1fF58b7ec9"
-];
 // ../../packages/protocol/dist/x402-payment.js
 var PAID_WITH_LABEL = "paid with";
 var TRANSFER_TOPIC = keccak256(stringToBytes("Transfer(address,address,uint256)"));
@@ -9965,6 +9362,56 @@ function x402Reading(networks, env) {
   };
 }
 
+// ../../packages/protocol/dist/arp/x402-networks.js
+var X402_DEFAULT_NETWORKS = new Map([
+  [
+    "eip155:8453",
+    { assets: [getAddress("0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913")], rpcUrl: "https://mainnet.base.org" }
+  ]
+]);
+var X402_TEST_NETWORKS = new Map([
+  [
+    "eip155:84532",
+    { assets: [getAddress("0x036CbD53842c5426634e7929541eC2318f3dCF7e")], rpcUrl: "https://sepolia.base.org" }
+  ]
+]);
+
+// ../../packages/protocol/dist/arp/chains.js
+var intuitionTestnet = defineChain2({
+  id: 13579,
+  name: "Intuition Testnet",
+  nativeCurrency: { decimals: 18, name: "Test Trust", symbol: "tTRUST" },
+  rpcUrls: {
+    default: { http: ["https://testnet.rpc.intuition.systems/http"] }
+  },
+  blockExplorers: {
+    default: {
+      name: "Intuition Testnet Explorer",
+      url: "https://testnet.explorer.intuition.systems"
+    }
+  },
+  testnet: true
+});
+var intuitionMainnet = defineChain2({
+  id: 1155,
+  name: "Intuition",
+  nativeCurrency: { decimals: 18, name: "Intuition", symbol: "TRUST" },
+  rpcUrls: {
+    default: { http: ["https://rpc.intuition.systems/http"] }
+  },
+  blockExplorers: {
+    default: {
+      name: "Intuition Explorer",
+      url: "https://explorer.intuition.systems"
+    }
+  }
+});
+// ../../packages/protocol/dist/arp/attestors.js
+var ARP_DOMAIN_ATTESTORS = [
+  "0x906f3A52ec089f8D4E9127F91C6bE5Ae0d18f91f",
+  "0xE596096F4176b682E300d73963e7B04B383C1AA1",
+  "0x77939A4c276f3E549276CEB3A09CDa1fF58b7ec9"
+];
 // ../../packages/protocol/dist/tool-listing.js
 var INTUITION_MAX_PAGE = 250;
 var DEFAULT_EDGE_LIMIT = INTUITION_MAX_PAGE;
@@ -10410,6 +9857,30 @@ function domainInText(text, words) {
   return alias === undefined ? null : words.aliases[alias];
 }
 
+// ../../packages/protocol/dist/sharing-state.js
+var SHARING_HOWS = ["init", "command", "desktop", "asked-once", "asked-always", "asked-no"];
+function sharingChoiceOf(text) {
+  if (text === null)
+    return null;
+  try {
+    const parsed = JSON.parse(text);
+    if (typeof parsed !== "object" || parsed === null)
+      return { on: false, at: null, how: null };
+    const { failures, at, how } = parsed;
+    return {
+      on: failures === true,
+      at: typeof at === "string" ? at : null,
+      how: typeof how === "string" && SHARING_HOWS.includes(how) ? how : null
+    };
+  } catch {
+    return { on: false, at: null, how: null };
+  }
+}
+function sharingFileText(on, how, at) {
+  return `${JSON.stringify({ failures: on, at: at.toISOString(), how })}
+`;
+}
+
 // ../../packages/protocol/dist/declare/line-need.js
 var NEEDS_LABEL2 = "needs";
 var WITH_LABEL2 = "with";
@@ -12654,9 +12125,45 @@ var COMMON = new Set(("awk bash break bun case cat cd chmod command continue cp
 var INSTALL = /\b(?:npm\s+(?:i|install)\s+(?:-g|--global)|pnpm\s+add\s+-g|yarn\s+global\s+add|brew\s+install|pipx\s+install|pip3?\s+install|cargo\s+install)\s+([@a-z0-9][@\w./-]*)/i;
 var PROBE = /\b(?:command\s+-v|which)\s+([a-z][\w-]*)/i;
 var COMMAND = /^[a-z][a-z0-9_-]*$/;
+function shellSegments(line) {
+  const segments = [];
+  let current = "";
+  let quote = null;
+  for (let index2 = 0;index2 < line.length; index2 += 1) {
+    const char = line[index2] ?? "";
+    if (char === "\\" && quote !== "'") {
+      current += char + (line[index2 + 1] ?? "");
+      index2 += 1;
+      continue;
+    }
+    if (quote !== null) {
+      if (char === quote)
+        quote = null;
+      current += char;
+      continue;
+    }
+    if (char === '"' || char === "'") {
+      quote = char;
+      current += char;
+      continue;
+    }
+    if (char === "#" && (index2 === 0 || /\s/.test(line[index2 - 1] ?? "")))
+      break;
+    if (char === "|" || char === ";" || char === "&" && line[index2 + 1] === "&") {
+      segments.push(current);
+      current = "";
+      if (line[index2 + 1] === char)
+        index2 += 1;
+      continue;
+    }
+    current += char;
+  }
+  segments.push(current);
+  return segments;
+}
 function commandsIn(shell, explicitOnly) {
   const found = [];
-  for (const segment of shell.split(/&&|\|\||[|;]/)) {
+  for (const segment of shellSegments(shell)) {
     const line = segment.trim().replace(/^\$\s+/, "");
     if (line === "" || line.startsWith("#"))
       continue;
@@ -12691,7 +12198,7 @@ function shellLinesRun(lines) {
       run.push(line);
     continued = line.trimEnd().endsWith("\\");
     heredocEnd = /<<-?\s*['"]?([A-Za-z_]+)/.exec(line)?.[1] ?? null;
-    for (const char of line) {
+    for (const char of quote === null ? shellSegments(line).join(";") : line) {
       if (quote === null && (char === '"' || char === "'"))
         quote = char;
       else if (char === quote)
@@ -12744,6 +12251,223 @@ function readRequires(markdown) {
   return { cli, runs, login: null, description };
 }
 
+// ../../packages/protocol/dist/skill-needs.js
+var MARKDOWN = /\.(md|mdx|markdown)$/i;
+var SCRIPT = /\.(sh|bash|zsh|py|js|mjs|cjs|ts|rb|pl|ps1|php|lua)$/i;
+var COMMENT_LINE = /^\s*(?:#|\/\/|\*|--|;|rem\s)/i;
+function isTestFile(path) {
+  return /(^|\/)(tests?|__tests__|spec|fixtures?)\/|\.(test|spec)\.[a-z]+$|(^|\/)test_[^/]+\.py$|_test\.(py|go|rb)$/i.test(path);
+}
+function isSecretName(name) {
+  return /(^|_)(API_?KEY|KEY|TOKEN|SECRET|PASSWORD|PASSWD|PASS|CREDENTIALS|CREDS)$/.test(name);
+}
+var SET_IN_SKILL_MD = /(?:^|\s|`)(?:export\s+|set\s+|\$env:)?([A-Z][A-Z0-9_]{2,})=/g;
+function lineAt(text, index2) {
+  let line = 1;
+  for (let at = text.indexOf(`
+`);at !== -1 && at < index2; at = text.indexOf(`
+`, at + 1))
+    line += 1;
+  return line;
+}
+function keysIn(files, settings) {
+  const skillMd = files.find((file) => file.path === "SKILL.md");
+  const toSet = new Set;
+  if (skillMd !== undefined)
+    for (const match of skillMd.text.matchAll(SET_IN_SKILL_MD))
+      toSet.add(match[1] ?? "");
+  const wanted = new Set(settings.filter((name) => isSecretName(name) || toSet.has(name)));
+  const ordered = [
+    ...skillMd === undefined ? [] : [skillMd],
+    ...files.filter((file) => file.path !== "SKILL.md" && !isTestFile(file.path))
+  ];
+  const found = new Map;
+  for (const file of ordered) {
+    for (const [index2, line] of file.text.split(`
+`).entries()) {
+      for (const match of line.matchAll(/\b[A-Z][A-Z0-9_]{2,}\b/g)) {
+        const name = match[0];
+        if (!wanted.has(name) || found.has(name))
+          continue;
+        found.set(name, { name, why: isSecretName(name) ? "secret" : "set in SKILL.md", file: file.path, line: index2 + 1 });
+      }
+    }
+  }
+  return [...found.values()].sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+}
+var EVERYWHERE = new Set("sh bash zsh dash env cat ls echo printf mkdir rm cp mv ln grep sed awk tr cut head tail sort uniq wc find xargs test true false base64 date sleep chmod touch tee kill ps uname which open xdg-open cmd powershell pwsh taskkill taskkill.exe where where.exe".split(" "));
+var ALIASES = {
+  soffice: "LibreOffice",
+  libreoffice: "LibreOffice",
+  "google-chrome": "Chrome",
+  chromium: "Chrome",
+  "chromium-browser": "Chrome",
+  magick: "ImageMagick",
+  convert: "ImageMagick",
+  pdftoppm: "poppler",
+  pdftotext: "poppler",
+  python: "python3",
+  docker: "Docker"
+};
+var SPAWNS = [
+  /\b(?:execFileSync|execFile|spawnSync|spawn|execaSync|execa)\(\s*["'`]([a-z][\w.+-]*)["'`]/g,
+  /\b(?:execSync|exec)\(\s*["'`]([a-z][\w.+-]*)[\s"'`]/g,
+  /\bBun\.spawn(?:Sync)?\(\s*\[\s*["'`]([a-z][\w.+-]*)["'`]/g,
+  /\bnew\s+Deno\.Command\(\s*["'`]([a-z][\w.+-]*)["'`]/g,
+  /\bsubprocess\.(?:run|call|check_call|check_output|Popen)\(\s*\[\s*["']([a-z][\w.+-]*)["']/g,
+  /\bsubprocess\.(?:run|call|check_call|check_output|Popen)\(\s*["']([a-z][\w.+-]*)[\s"']/g,
+  /\bos\.(?:system|popen)\(\s*["']([a-z][\w.+-]*)[\s"']/g
+];
+var DRIVES = {
+  puppeteer: "Chrome",
+  "puppeteer-core": "Chrome",
+  "chrome-launcher": "Chrome",
+  "chrome-remote-interface": "Chrome",
+  pyppeteer: "Chrome",
+  playwright: "a Playwright browser",
+  "playwright-core": "a Playwright browser",
+  "@playwright/test": "a Playwright browser",
+  "selenium-webdriver": "a browser and its driver",
+  selenium: "a browser and its driver",
+  "fluent-ffmpeg": "ffmpeg",
+  "ffmpeg-python": "ffmpeg",
+  ffmpeg: "ffmpeg",
+  pydub: "ffmpeg",
+  moviepy: "ffmpeg",
+  "openai-whisper": "ffmpeg",
+  whisper: "ffmpeg",
+  pytesseract: "tesseract",
+  "node-tesseract-ocr": "tesseract",
+  pdf2image: "poppler",
+  "pdf-poppler": "poppler",
+  wand: "ImageMagick",
+  gm: "ImageMagick",
+  pypandoc: "pandoc",
+  "node-pandoc": "pandoc",
+  docker: "Docker",
+  dockerode: "Docker"
+};
+var IMPORTS = [
+  /\bfrom\s+["']([@\w./-]+)["']/g,
+  /\bimport\s*\(\s*["']([@\w./-]+)["']\s*\)/g,
+  /\bimport\s+["']([@\w./-]+)["']/g,
+  /\brequire\(\s*["']([@\w./-]+)["']\s*\)/g,
+  /^\s*(?:from\s+([\w.]+)\s+import|import\s+([\w.]+))/gm
+];
+function packageRoot(specifier) {
+  if (specifier.startsWith("@"))
+    return specifier.split("/").slice(0, 2).join("/");
+  return specifier.split("/")[0]?.split(".")[0] ?? specifier;
+}
+var NAMED_PROGRAMS = [
+  { name: "ffmpeg", pattern: /\bffmpeg\b/i },
+  { name: "ffprobe", pattern: /\bffprobe\b/i },
+  { name: "Chrome", pattern: /\b(?:Google Chrome|Chrome|Chromium|chrome-headless-shell|google-chrome|chromium-browser)\b/ },
+  { name: "Docker", pattern: /\b[Dd]ocker\b/ },
+  { name: "git", pattern: /\bgit\b(?!\s*(?:hub|lab))/ },
+  { name: "jq", pattern: /\bjq\b/ },
+  { name: "pandoc", pattern: /\bpandoc\b/i },
+  { name: "ImageMagick", pattern: /\b(?:ImageMagick|imagemagick|magick)\b/ },
+  { name: "yt-dlp", pattern: /\byt-dlp\b/ },
+  { name: "tesseract", pattern: /\btesseract\b/i },
+  { name: "poppler", pattern: /\b(?:poppler|pdftoppm|pdftotext)\b/i },
+  { name: "LibreOffice", pattern: /\b(?:LibreOffice|libreoffice|soffice)\b/ },
+  { name: "sox", pattern: /\bsox\b/ },
+  { name: "exiftool", pattern: /\bexiftool\b/i },
+  { name: "ollama", pattern: /\b[Oo]llama\b/ },
+  { name: "gh", pattern: /\bgh\s+(?:CLI|cli)\b|\bGitHub CLI\b/ },
+  { name: "python3", pattern: /\b[Pp]ython\s?3?\b(?![-.\w])/ },
+  { name: "node", pattern: /\b(?:Node\.js|node)\b(?![-.\w])/ },
+  { name: "Java", pattern: /\b(?:Java|JDK|JRE)\b/ }
+];
+var NEEDED = /\b(?:requires?|required|requirements?|needs?|needed|prerequisites?|depends on|must (?:be )?install(?:ed)?|must have|install(?:ed)? first|has to be installed|be installed)\b/i;
+var NEEDED_GLOBAL = new RegExp(NEEDED.source, "gi");
+var NOT_NEEDED = /\b(?:no|not|never|without|doesn't|don't|isn't|aren't|zero)\b[^.;]{0,30}\b(?:requires?|required|needs?|needed|install)/i;
+var NOT_AFTER = /\b(?:requires?|needs?)\s+(?:no|nothing|neither)\b/i;
+function saysWhatItNeeds(path, isScript) {
+  if (isScript)
+    return true;
+  if (!MARKDOWN.test(path))
+    return false;
+  const base2 = path.slice(path.lastIndexOf("/") + 1).toLowerCase();
+  return base2 === "skill.md" || /^(readme|requirements?|prerequisites?|setup|install(ation)?|dependencies|getting-started)\b/.test(base2);
+}
+var COMMENT_OR_STRING = /^\s*(?:#|\/\/|\*|\/\*|"""|''')|["'`][^"'`]*\b(?:requires?|needs?|install)/i;
+function namedAfterVerb(line, program) {
+  for (const verb of line.matchAll(NEEDED_GLOBAL)) {
+    const at = verb.index;
+    const after = line.slice(at + verb[0].length).slice(0, 40).split(/[.;:!?](?:\s|$)/)[0] ?? "";
+    const before = line.slice(Math.max(0, at - 30), at).split(/[.;:!?](?:\s|$)/).at(-1) ?? "";
+    if (program.test(after) || program.test(before))
+      return true;
+  }
+  return false;
+}
+function programsNeededIn(files) {
+  const out = new Map;
+  const add = (program) => {
+    if (!out.has(program.name))
+      out.set(program.name, program);
+  };
+  for (const file of files) {
+    if (isTestFile(file.path))
+      continue;
+    const lines = file.text.split(`
+`);
+    const isScript = SCRIPT.test(file.path) || lines[0]?.startsWith("#!") === true;
+    if (isScript && !/\.(sh|bash|zsh)$/i.test(file.path)) {
+      for (const pattern of SPAWNS) {
+        for (const match of file.text.matchAll(pattern)) {
+          const name = match[1] ?? "";
+          const line = lineAt(file.text, match.index);
+          if (name === "" || EVERYWHERE.has(name) || COMMENT_LINE.test(lines[line - 1] ?? ""))
+            continue;
+          add({ name: ALIASES[name] ?? name, from: "spawned", file: file.path, line });
+        }
+      }
+      for (const pattern of IMPORTS) {
+        for (const match of file.text.matchAll(pattern)) {
+          const root2 = packageRoot(match[1] ?? match[2] ?? "");
+          const driven = DRIVES[root2];
+          const line = lineAt(file.text, match.index);
+          if (driven === undefined || COMMENT_LINE.test(lines[line - 1] ?? ""))
+            continue;
+          add({ name: driven, from: "package", file: file.path, line, via: root2 });
+        }
+      }
+    }
+    if (/(^|\/)package\.json$/.test(file.path)) {
+      for (const [index2, line] of lines.entries()) {
+        const name = /^\s*"(@?[\w./-]+)"\s*:\s*"/.exec(line)?.[1];
+        const driven = name === undefined ? undefined : DRIVES[name];
+        if (driven !== undefined)
+          add({ name: driven, from: "package", file: file.path, line: index2 + 1, via: name ?? "" });
+      }
+    }
+    if (/(^|\/)requirements[\w.-]*\.txt$/i.test(file.path)) {
+      for (const [index2, line] of lines.entries()) {
+        const name = /^\s*([A-Za-z0-9][\w.-]*)/.exec(line.replace(/#.*/, ""))?.[1]?.toLowerCase();
+        const driven = name === undefined ? undefined : DRIVES[name];
+        if (driven !== undefined)
+          add({ name: driven, from: "package", file: file.path, line: index2 + 1, via: name ?? "" });
+      }
+    }
+    if (saysWhatItNeeds(file.path, isScript)) {
+      for (const [index2, line] of lines.entries()) {
+        if (NOT_NEEDED.test(line) || NOT_AFTER.test(line))
+          continue;
+        if (isScript && !COMMENT_OR_STRING.test(line))
+          continue;
+        for (const { name, pattern } of NAMED_PROGRAMS) {
+          if (namedAfterVerb(line, pattern))
+            add({ name, from: "named as needed", file: file.path, line: index2 + 1 });
+        }
+      }
+    }
+  }
+  return [...out.values()];
+}
+
 // ../../packages/protocol/dist/skill-contents.js
 var CONTENTS_LIMITS = {
   files: 200,
@@ -12751,8 +12475,8 @@ var CONTENTS_LIMITS = {
   items: 40,
   lineChars: 160
 };
-var SCRIPT = /\.(sh|bash|zsh|py|js|mjs|cjs|ts|rb|pl|ps1|php|lua)$/i;
-var MARKDOWN = /\.(md|mdx|markdown)$/i;
+var SCRIPT2 = /\.(sh|bash|zsh|py|js|mjs|cjs|ts|rb|pl|ps1|php|lua)$/i;
+var MARKDOWN2 = /\.(md|mdx|markdown)$/i;
 var FENCE = /^\s*(?:```|~~~)/;
 function contentsFileOf(path, bytes) {
   if (bytes.subarray(0, 8192).includes(0))
@@ -12777,10 +12501,10 @@ function interpreterOf(firstLine) {
 }
 var SCRIPT_PROBE = /(?:^|[;&|(!{]|\bif|\bthen|\$\()\s*(?:!\s*)?(?:command\s+-v|which|type\s+-p|hash)\s+([a-z][\w.+-]*)/g;
 var SYSTEM_INSTALL = /\b(?:brew|apt-get|apt|dnf|yum|apk|pacman|choco|winget|scoop|port)\s+(?:install|add|-S)\s+(?:-\S+\s+)*([a-z][\w.+-]*)/g;
-var COMMENT_LINE = /^\s*(?:#|\/\/|\*|--|;|rem\s)/i;
+var COMMENT_LINE2 = /^\s*(?:#|\/\/|\*|--|;|rem\s)/i;
 var PYTHON_PROBE = /\bshutil\.which\(\s*["']([a-z][\w.+-]*)["']/g;
 function programsInScriptLine(line, shell) {
-  if (COMMENT_LINE.test(line))
+  if (COMMENT_LINE2.test(line))
     return [];
   const matches = shell ? [...line.matchAll(SCRIPT_PROBE), ...line.matchAll(SYSTEM_INSTALL)] : [...line.matchAll(PYTHON_PROBE)];
   return matches.map((match) => match[1] ?? "").filter((name) => name !== "");
@@ -12844,7 +12568,7 @@ function settingsIn(path, text, code) {
     for (const match of text.matchAll(pattern))
       found.add((match[1] ?? "").toUpperCase());
   }
-  if (MARKDOWN.test(path)) {
+  if (MARKDOWN2.test(path)) {
     for (const match of text.matchAll(EXPORT_IN_PROSE))
       found.add(match[1] ?? "");
     for (const match of text.matchAll(KEY_NAMED))
@@ -12860,7 +12584,7 @@ function codeOf(path, text, isScript) {
 `);
   if (isScript)
     return lines;
-  if (!MARKDOWN.test(path))
+  if (!MARKDOWN2.test(path))
     return [];
   const out = [];
   let fenced = false;
@@ -13033,7 +12757,7 @@ function readSkillContents(input) {
     if (files.length >= CONTENTS_LIMITS.files)
       skipped.push({ path: file.path, why: "over the file limit" });
     else if (file.text === null)
-      skipped.push({ path: file.path, why: file.notFetched === true ? "not fetched" : "binary" });
+      skipped.push({ path: file.path, why: file.tooLarge === true ? "too large" : file.notFetched === true ? "not fetched" : "binary" });
     else if (file.text.length > CONTENTS_LIMITS.fileChars)
       skipped.push({ path: file.path, why: "too large" });
     else
@@ -13044,7 +12768,7 @@ function readSkillContents(input) {
   const programs = new Map;
   const add = (name, from14) => {
     if (!programs.has(name))
-      programs.set(name, from14);
+      programs.set(name, { name, from: from14 });
   };
   const requires = readRequires(skillMd);
   for (const name of requires.cli)
@@ -13056,11 +12780,11 @@ function readSkillContents(input) {
   const domains = new Set;
   const fetchAndRun = [];
   const hidden = [];
-  const scripts = skipped.filter((file) => file.why === "not fetched" && SCRIPT.test(file.path)).map((file) => ({ path: file.path, namedInSkillMd: namesFile(skillMd, file.path) }));
+  const scripts = skipped.filter((file) => file.why === "not fetched" && SCRIPT2.test(file.path)).map((file) => ({ path: file.path, namedInSkillMd: namesFile(skillMd, file.path) }));
   for (const file of files) {
     const lines = file.text.split(`
 `);
-    const isScript = SCRIPT.test(file.path) || lines[0]?.startsWith("#!") === true;
+    const isScript = SCRIPT2.test(file.path) || lines[0]?.startsWith("#!") === true;
     const code = codeOf(file.path, file.text, isScript);
     const shell = isShell(file.path, file.text);
     for (const line of code) {
@@ -13093,18 +12817,22 @@ function readSkillContents(input) {
       if (run !== undefined)
         fetchAndRun.push({ kind: run.kind, file: file.path, line: index2 + 1, text: cap(line) });
     }
-    if (MARKDOWN.test(file.path))
+    if (MARKDOWN2.test(file.path))
       hidden.push(...hiddenInMarkdown(file.path, file.text));
   }
   const packageNames = new Set([...packages.values()].map((pkg) => pkg.name));
-  for (const [name, from14] of programs)
-    if (from14 !== "declared" && packageNames.has(name))
+  for (const [name, program] of programs)
+    if (program.from !== "declared" && packageNames.has(name))
       programs.delete(name);
+  for (const needed of programsNeededIn(files))
+    if (!programs.has(needed.name))
+      programs.set(needed.name, needed);
   const cut = [];
   return {
-    programs: bounded("programs", [...programs.entries()].map(([name, from14]) => ({ name, from: from14 })).sort((a, b) => compare(a.name, b.name)), cut),
+    programs: bounded("programs", [...programs.values()].sort((a, b) => compare(a.name, b.name)), cut),
     packages: bounded("packages", [...packages.values()].sort((a, b) => compare(`${a.manager} ${a.name}`, `${b.manager} ${b.name}`)), cut),
     settings: bounded("settings", [...settings].sort(compare), cut),
+    keys: bounded("keys", keysIn(files, [...settings]), cut),
     scripts: bounded("scripts", scripts.sort((a, b) => compare(a.path, b.path)), cut),
     fetchAndRun: bounded("fetchAndRun", fetchAndRun, cut),
     domains: bounded("domains", [...domains].sort(compare), cut),
@@ -13117,24 +12845,12 @@ function readSkillContents(input) {
     cut
   };
 }
-function contentsLines(contents, perList = 6) {
-  const list = (items, cut) => items.length === 0 ? "none found" : `${items.slice(0, perList).join(", ")}${items.length > perList || cut ? `, and ${Math.max(0, items.length - perList)}${cut ? "+" : ""} more` : ""}`;
-  const at = (rows, name) => list(rows.map((row) => `${row.kind} at ${row.file}:${row.line} "${row.text}"`), contents.cut.includes(name));
-  return [
-    `Programs: ${list(contents.programs.map((p) => `${p.name} (${p.from})`), contents.cut.includes("programs"))}`,
-    ...contents.packages.length === 0 ? [] : [`Packages: ${list(contents.packages.map((p) => `${p.manager} ${p.name}`), contents.cut.includes("packages"))}`],
-    `Keys and settings it reads: ${list(contents.settings, contents.cut.includes("settings"))}`,
-    `Scripts: ${list(contents.scripts.map((s) => s.namedInSkillMd ? `${s.path} (named in SKILL.md)` : s.path), contents.cut.includes("scripts"))}`,
-    `Fetches and runs code: ${at(contents.fetchAndRun, "fetchAndRun")}`,
-    `Domains named: ${list(contents.domains, contents.cut.includes("domains"))}`,
-    `Hidden or encoded text: ${at(contents.hidden, "hidden")}`,
-    ...contents.read.skipped.length === 0 ? [] : [`Not read: ${list(contents.read.skipped.map((s) => `${s.path} (${s.why})`), false)}`]
-  ];
-}
 
 // ../../packages/protocol/dist/pulse.js
 var MAX_SKILL_FILES_READ = 200;
 var MAX_SCRIPTS_READ = 5;
+var MAX_DIRECTORY_FILES_READ = 80;
+var NOT_TEXT = /\.(png|jpe?g|gif|webp|ico|bmp|tiff?|avif|svgz|pdf|zip|gz|tgz|bz2|xz|7z|rar|jar|woff2?|ttf|otf|eot|mp[34]|m4a|wav|ogg|flac|aac|mov|webm|avi|mkv|pptx|docx|xlsx|psd|ai|sketch|fig|db|sqlite|bin|exe|dll|so|dylib|wasm|pyc|class|hdr|exr|glb|ktx2?)$/i;
 var GITHUB_READ_TIMEOUT_MS = 1e4;
 var INSTALLER_ORDER = [
   "",
@@ -13254,7 +12970,7 @@ var PAID_WORD = /\b(pricing|paid|subscription|credits?|billing|free tier|per min
 var HOST = /https?:\/\/([a-zA-Z0-9.-]+\.[a-zA-Z]{2,})/g;
 var NOT_A_SERVICE = /(^|\.)(github\.com|githubusercontent\.com|example\.(com|org|net))$/;
 var LOOKS_LIKE_A_FILE = /\.(jpe?g|png|gif|webp|mp[34]|wav|mov|webm|pdf|md|json|txt)$/;
-var SCRIPT2 = /\.(sh|bash|py|js|mjs|cjs|ts|rb|pl)$/i;
+var SCRIPT3 = /\.(sh|bash|py|js|mjs|cjs|ts|rb|pl)$/i;
 var RUNS_FILE = /\b(?:node|bun|deno|tsx|python3?|bash|sh)\s+((?:~|\.{1,2})?\/?[\w.@-]+(?:\/[\w.@-]+)*\.(?:mjs|cjs|js|ts|py|sh))\b/g;
 var PLACEHOLDER = /(^|\/)(path|your|my|foo|example|script|file|input|output)(\/|\.|$)/i;
 function filesItRuns(markdown, repositoryFiles) {
@@ -13284,7 +13000,7 @@ function readSkillFacts(markdown, filesInDirectory, repositoryFiles = filesInDir
   return {
     files: filesInDirectory.length,
     bytes: filesInDirectory.reduce((total, file) => total + file.size, 0),
-    scripts: filesInDirectory.filter((file) => SCRIPT2.test(file.path)).length,
+    scripts: filesInDirectory.filter((file) => SCRIPT3.test(file.path)).length,
     keys: [...new Set(markdown.match(KEY_NAME3) ?? [])],
     paidWords: [...new Set((markdown.match(PAID_WORD) ?? []).map((word) => word.toLowerCase()))],
     hosts: [...new Set(hosts)],
@@ -13298,6 +13014,14 @@ function parentOf(path) {
   const at = path.lastIndexOf("/");
   return at === -1 ? "" : path.slice(0, at);
 }
+var MAX_NAME_READS = 12;
+var NAME_BATCH = 6;
+var wordsOf = (text) => text.toLowerCase().split(/[^a-z0-9]+/).filter((word) => word.length > 1);
+function byNearness(files, wanted) {
+  const words = new Set(wordsOf(wanted));
+  const shared = (file) => wordsOf(parentOf(file.path)).filter((word) => words.has(word)).length;
+  return files.map((file) => ({ file, shared: shared(file) })).sort((a, b) => b.shared - a.shared || (a.file.path < b.file.path ? -1 : a.file.path > b.file.path ? 1 : 0));
+}
 async function locate(source, repo, skill, listing) {
   const wanted = normaliseName2(skill);
   const candidates = listing.files.filter((file) => skillFilesIn([file]).length === 1);
@@ -13309,12 +13033,18 @@ async function locate(source, repo, skill, listing) {
     if (others.length > MAX_SKILL_FILES_READ) {
       return { status: "incomplete", reason: "too_many_skill_files" };
     }
-    for (let at = 0;at < others.length && named.length === 0; at += 20) {
-      named = await read(others.slice(at, at + 20));
+    const nearest = byNearness(others, wanted).slice(0, MAX_NAME_READS);
+    const sharing = nearest.filter((entry) => entry.shared > 0).length;
+    let readTo = 0;
+    while (readTo < nearest.length && named.length === 0) {
+      const size7 = readTo < sharing ? sharing - readTo : NAME_BATCH;
+      named = await read(nearest.slice(readTo, readTo + size7).map((entry) => entry.file));
+      readTo += size7;
     }
     if (named.length > 0) {
-      const last = others.findIndex((file) => file === named.at(-1)?.file);
-      named = [...named, ...await read(others.slice(last + 1))];
+      named = [...named, ...await read(nearest.slice(readTo, sharing).map((entry) => entry.file))];
+    } else if (nearest.length < others.length) {
+      return { status: "incomplete", reason: "too_many_skill_files" };
     }
   }
   if (named.length === 0) {
@@ -13354,7 +13084,24 @@ async function readFileOnly(result, source) {
   }
   return null;
 }
-async function readPulse(result, source) {
+var SCRIPT_READ_CAP = { files: MAX_SCRIPTS_READ, bytesEach: 256 * 1024, bytes: 512 * 1024 };
+var NOT_CODE_DIRECTORY = /(^|\/)(examples?|assets?|fonts?|images?|media|samples?|fixtures?)\//i;
+function withinReadCap(paths, listed) {
+  const sizeOf = new Map(listed.map((file) => [file.path, file.size]));
+  const kept = [];
+  let bytes = 0;
+  for (const path of paths) {
+    const size7 = sizeOf.get(path) ?? 0;
+    if (kept.length >= SCRIPT_READ_CAP.files || NOT_CODE_DIRECTORY.test(path))
+      continue;
+    if (size7 > SCRIPT_READ_CAP.bytesEach || bytes + size7 > SCRIPT_READ_CAP.bytes)
+      continue;
+    kept.push(path);
+    bytes += size7;
+  }
+  return kept;
+}
+async function readPulse(result, source, depth) {
   if (!/^(?!\.{1,2}\/)[\w.-]+\/(?!\.{1,2}$)[\w.-]+$/.test(result.source))
     return { ...result, status: "not_github" };
   const listing = await source.listing(result.source);
@@ -13372,15 +13119,20 @@ async function readPulse(result, source) {
   const directory = parentOf(located.file.path);
   const prefix = directory === "" ? "" : `${directory}/`;
   const inDirectory = listing.files.filter((file) => file.path.startsWith(prefix));
-  const scripts = filesItRuns(located.markdown, listing.files).slice(0, MAX_SCRIPTS_READ);
+  const scripts = withinReadCap(filesItRuns(located.markdown, listing.files), listing.files);
   const scriptTexts = await Promise.all(scripts.map(async (file) => ({ file, text: await source.file(result.source, file) })));
   const keysInScriptsItRuns = scriptTexts.map(({ file, text }) => ({ file, keys: [...new Set(text?.match(KEY_NAME3) ?? [])] })).filter((entry) => entry.keys.length > 0);
   const relative = (path) => path.startsWith(prefix) ? path.slice(prefix.length) : path;
   const fetched = new Set(scriptTexts.filter((entry) => entry.text !== null).map((entry) => entry.file));
+  const others = depth === undefined ? [] : await readDirectory(source, result.source, inDirectory, new Set([located.file.path, ...fetched]), depth.directory.by);
+  for (const file of others)
+    if (file.text !== null)
+      fetched.add(file.path);
   const contains = readSkillContents([
     { path: "SKILL.md", text: located.markdown },
     ...scriptTexts.flatMap(({ file, text }) => text === null ? [] : [{ path: relative(file), text }]),
-    ...inDirectory.filter((file) => SCRIPT2.test(file.path) && !fetched.has(file.path)).map((file) => ({ path: relative(file.path), text: null, notFetched: true }))
+    ...others.flatMap(({ path, text }) => text === null ? [] : [{ path: relative(path), text }]),
+    ...inDirectory.filter((file) => !fetched.has(file.path) && file.path !== located.file.path && (depth !== undefined || SCRIPT3.test(file.path))).map((file) => NOT_TEXT.test(file.path) ? { path: relative(file.path), text: null } : file.size > CONTENTS_LIMITS.fileChars ? { path: relative(file.path), text: null, notFetched: true, tooLarge: true } : { path: relative(file.path), text: null, notFetched: true })
   ]);
   return {
     ...result,
@@ -13397,6 +13149,22 @@ async function readPulse(result, source) {
     contains
   };
 }
+async function readDirectory(source, repo, inDirectory, done, by) {
+  let late = false;
+  by.then(() => {
+    late = true;
+  });
+  const plan = inDirectory.filter((file) => !done.has(file.path) && !NOT_TEXT.test(file.path) && file.size <= CONTENTS_LIMITS.fileChars).slice(0, MAX_DIRECTORY_FILES_READ);
+  const out = [];
+  for (let at = 0;at < plan.length && !late; at += 8) {
+    const batch = Promise.all(plan.slice(at, at + 8).map(async (file) => ({ path: file.path, text: await source.file(repo, file.path).catch(() => null) })));
+    const settled = await Promise.race([batch, by.then(() => null)]);
+    if (settled === null)
+      break;
+    out.push(...settled);
+  }
+  return out;
+}
 function groupByContent(pulses) {
   const groups = new Map;
   for (const pulse of pulses) {
@@ -13420,6 +13188,7 @@ function githubPulseSource(options = {}) {
   };
   const listings = new Map;
   const repositories = new Map;
+  const fileReads = new Map;
   const quota = { apiRequests: 0, limited: false, resetsAt: null };
   const noteLimit = (response) => {
     const hit = response.status === 429 || response.status === 403 && (response.headers.get("x-ratelimit-remaining") === "0" || response.headers.has("retry-after"));
@@ -13492,23 +13261,24 @@ function githubPulseSource(options = {}) {
   return {
     listing: (repo) => once2(listings, repo, readListing),
     repository: (repo) => once2(repositories, repo, readRepository),
-    file: async (repo, path) => {
-      const encoded = path.split("/").map(encodeURIComponent).join("/");
-      const response = await get(`https://raw.githubusercontent.com/${repo}/HEAD/${encoded}`, { signal: bounded2() });
-      return response.ok ? response.text() : null;
+    file: (repo, path) => {
+      const key = `${repo}
+${path}`;
+      const kept = options.files?.get(key);
+      if (kept !== undefined)
+        return Promise.resolve(kept);
+      return once2(fileReads, key, async () => {
+        const encoded = path.split("/").map(encodeURIComponent).join("/");
+        const response = await get(`https://raw.githubusercontent.com/${repo}/HEAD/${encoded}`, { signal: bounded2() });
+        const text = response.ok ? await response.text() : null;
+        if (response.ok || response.status === 404)
+          options.files?.set(key, text);
+        return text;
+      });
     },
     quota: () => ({ ...quota })
   };
 }
-// ../../packages/protocol/dist/share-offer.js
-var SHARE_OFFER = {
-  question: "Share this machine's skill failures as public lines?",
-  sends: `When a skill fails here, one public line on Intuition testnet: the skill's public address, its category when known, "failed" and a closed reason (missing-key, missing-program, missing-file).`,
-  signer: "Each line is signed by this machine's own ARP address, created on the first send: it is public and the same on every line, so this machine's lines can be told apart from others' and linked together.",
-  never: "Never your prompts, your files, your paths, your code or your keys.",
-  service: "Sending goes through ARP's sponsoring service, which is not online yet: until it is, nothing is sent and `arp share send` says so.",
-  later: "Off by default. Change it any time with `arp share on` or `arp share off`."
-};
 // ../../packages/protocol/dist/pulse-score.js
 var SCORE_VERSION = "pulse-score-3";
 var PRIOR_TOP = 0.8;
@@ -14749,6 +14519,171 @@ function renderSkillPrompt(review, installPath, maxLines = 3) {
     confirmHelp: "Nothing is written unless you tick this and press Accept."
   };
 }
+// ../../packages/protocol/dist/before-install.js
+var PAID_SERVICES = [
+  { name: "Anthropic", hosts: ["api.anthropic.com"], keyPrefixes: ["ANTHROPIC_"] },
+  { name: "AssemblyAI", hosts: ["api.assemblyai.com"], keyPrefixes: ["ASSEMBLYAI_"] },
+  { name: "Azure OpenAI", hosts: ["openai.azure.com"], keyPrefixes: ["AZURE_OPENAI_"] },
+  { name: "Brave Search", hosts: ["api.search.brave.com"], keyPrefixes: ["BRAVE_"] },
+  { name: "Browserbase", hosts: ["api.browserbase.com"], keyPrefixes: ["BROWSERBASE_"] },
+  { name: "Cohere", hosts: ["api.cohere.ai", "api.cohere.com"], keyPrefixes: ["COHERE_", "CO_API_"] },
+  { name: "Deepgram", hosts: ["api.deepgram.com"], keyPrefixes: ["DEEPGRAM_"] },
+  { name: "DeepSeek", hosts: ["api.deepseek.com"], keyPrefixes: ["DEEPSEEK_"] },
+  { name: "ElevenLabs", hosts: ["api.elevenlabs.io"], keyPrefixes: ["ELEVENLABS_", "ELEVEN_"] },
+  { name: "Exa", hosts: ["api.exa.ai"], keyPrefixes: ["EXA_"] },
+  { name: "fal", hosts: ["fal.run", "queue.fal.run"], keyPrefixes: ["FAL_"] },
+  { name: "Firecrawl", hosts: ["api.firecrawl.dev"], keyPrefixes: ["FIRECRAWL_"] },
+  { name: "Fireworks AI", hosts: ["api.fireworks.ai"], keyPrefixes: ["FIREWORKS_"] },
+  { name: "Google Gemini", hosts: ["generativelanguage.googleapis.com"], keyPrefixes: ["GEMINI_"] },
+  { name: "Google Vertex AI", hosts: ["aiplatform.googleapis.com"], keyPrefixes: ["VERTEX_"] },
+  { name: "Groq", hosts: ["api.groq.com"], keyPrefixes: ["GROQ_"] },
+  { name: "HeyGen", hosts: ["api.heygen.com"], keyPrefixes: ["HEYGEN_"] },
+  { name: "Mistral", hosts: ["api.mistral.ai"], keyPrefixes: ["MISTRAL_"] },
+  { name: "OpenAI", hosts: ["api.openai.com"], keyPrefixes: ["OPENAI_"] },
+  { name: "OpenRouter", hosts: ["openrouter.ai"], keyPrefixes: ["OPENROUTER_"] },
+  { name: "Perplexity", hosts: ["api.perplexity.ai"], keyPrefixes: ["PERPLEXITY_", "PPLX_"] },
+  { name: "Replicate", hosts: ["api.replicate.com"], keyPrefixes: ["REPLICATE_"] },
+  { name: "Resend", hosts: ["api.resend.com"], keyPrefixes: ["RESEND_"] },
+  { name: "Runway", hosts: ["api.dev.runwayml.com", "api.runwayml.com"], keyPrefixes: ["RUNWAY_", "RUNWAYML_"] },
+  { name: "SerpApi", hosts: ["serpapi.com"], keyPrefixes: ["SERPAPI_", "SERP_API_"] },
+  { name: "Stability AI", hosts: ["api.stability.ai"], keyPrefixes: ["STABILITY_"] },
+  { name: "Tavily", hosts: ["api.tavily.com"], keyPrefixes: ["TAVILY_"] },
+  { name: "Together AI", hosts: ["api.together.xyz", "api.together.ai"], keyPrefixes: ["TOGETHER_"] },
+  { name: "Twilio", hosts: ["api.twilio.com"], keyPrefixes: ["TWILIO_"] },
+  { name: "xAI", hosts: ["api.x.ai"], keyPrefixes: ["XAI_"] }
+];
+var STATIC_HOSTS = [
+  "fonts.googleapis.com",
+  "gstatic.com",
+  "cdn.jsdelivr.net",
+  "unpkg.com",
+  "cdnjs.cloudflare.com",
+  "esm.sh",
+  "cdn.skypack.dev",
+  "ga.jspm.io",
+  "githubusercontent.com",
+  "cdn.tailwindcss.com",
+  "code.jquery.com",
+  "use.typekit.net",
+  "fonts.bunny.net",
+  "rsms.me",
+  "cartocdn.com",
+  "tile.openstreetmap.org",
+  "server.arcgisonline.com",
+  "images.unsplash.com"
+];
+var STATIC_SHAPE = /^(?:cdn|static|fonts?|tiles?|assets|img|images|media)\d*[.-]|(?:^|[.-])cdn(?:[.-]|$)|\.cdn\./;
+var API_SHAPE = /^api\d*[.-]|[.-]api\.|^.*\.googleapis\.com$/;
+function under(host, base2) {
+  return host === base2 || host.endsWith(`.${base2}`);
+}
+var ASSET = /\.(woff2?|ttf|otf|eot|png|jpe?g|gif|webp|svgz?|ico|bmp|tiff?|avif|heic|hdr|exr|mp[34]|m4a|wav|ogg|flac|aac|mov|webm|avi|mkv|psd|ai|sketch|fig|glb|gltf|fbx|blend|ktx2?|basis|pdf|zip|gz|tgz)$|(^|\/)\.(gitkeep|keep|DS_Store)$/i;
+function beforeInstall(input) {
+  const services = new Map;
+  const service = (name) => {
+    const found2 = services.get(name) ?? { name, hosts: [], keys: [] };
+    services.set(name, found2);
+    return found2;
+  };
+  const apiHosts = [];
+  const staticHosts = [];
+  const otherHosts = [];
+  for (const host of input.domains) {
+    const known = PAID_SERVICES.find((entry) => entry.hosts.some((base2) => under(host, base2)));
+    if (known !== undefined) {
+      service(known.name).hosts.push(host);
+      apiHosts.push(host);
+    } else if (STATIC_HOSTS.some((base2) => under(host, base2)) || STATIC_SHAPE.test(host))
+      staticHosts.push(host);
+    else if (API_SHAPE.test(host))
+      apiHosts.push(host);
+    else
+      otherHosts.push(host);
+  }
+  for (const key of input.keys) {
+    if (key.why !== "secret")
+      continue;
+    const known = PAID_SERVICES.find((entry) => entry.keyPrefixes.some((prefix) => key.name.startsWith(prefix)));
+    if (known !== undefined)
+      service(known.name).keys.push(key.name);
+  }
+  const asked = new Set(input.keys.map((key) => key.name));
+  return {
+    fetchAndRun: [...input.fetchAndRun],
+    keys: [...input.keys],
+    otherSettings: input.settings.filter((name) => !asked.has(name)).length,
+    services: [...services.values()].sort((a, b) => a.name < b.name ? -1 : 1),
+    programs: [...input.programs],
+    scripts: [...input.scripts],
+    apiHosts,
+    staticHosts,
+    otherHosts,
+    hidden: [...input.hidden],
+    notRead: input.skipped.filter((file) => file.why !== "binary" && !ASSET.test(file.path)),
+    cut: [...input.cut]
+  };
+}
+var plural = (count, one, many = `${one}s`) => `${count} ${count === 1 ? one : many}`;
+function programNames(programs, shown = 4) {
+  const names = programs.map((program) => program.name);
+  return names.length <= shown ? names.join(", ") : `${names.slice(0, shown).join(", ")} +${names.length - shown}`;
+}
+function beforeInstallSummary(view) {
+  const secrets = view.keys.filter((key) => key.why === "secret").length;
+  const toSet = view.keys.length - secrets;
+  const asks = secrets + toSet === 0 ? "no keys" : [secrets === 0 ? null : plural(secrets, "key"), toSet === 0 ? null : plural(toSet, "setting")].filter((part) => part !== null).join(", ");
+  return [
+    ...view.fetchAndRun.length === 0 ? [] : ["fetches and runs code"],
+    asks,
+    view.services.length === 0 ? "no paid services" : plural(view.services.length, "paid service"),
+    view.programs.length === 0 ? "nothing to install named" : `needs ${programNames(view.programs)}`,
+    view.scripts.length === 0 ? "no scripts" : plural(view.scripts.length, "script"),
+    ...view.hidden.length === 0 ? [] : [plural(view.hidden.length, "hidden text", "hidden texts")],
+    ...view.notRead.length === 0 ? [] : [`${plural(view.notRead.length, "file")} not read`]
+  ].join(" · ");
+}
+function programSourceText(program) {
+  const at = program.file === undefined ? "" : `${program.file}${program.line === undefined ? "" : `:${program.line}`}`;
+  switch (program.from) {
+    case "declared":
+      return "declared in SKILL.md";
+    case "runs":
+      return "run in SKILL.md";
+    case "interpreter":
+      return "script interpreter";
+    case "script":
+      return "a script checks for it or installs it";
+    case "spawned":
+      return `run by ${at}`;
+    case "package":
+      return `via ${program.via ?? "a package"}, ${at}`;
+    case "named as needed":
+      return `said to be needed, ${at}`;
+  }
+}
+function contentsLines(contents, perList = 6) {
+  const view = beforeInstall({ ...contents, skipped: contents.read.skipped });
+  const list = (items, cut2) => `${items.slice(0, perList).join(", ")}${items.length > perList || cut2 ? `, and ${Math.max(0, items.length - perList)}${cut2 ? "+" : ""} more` : ""}`;
+  const cut = (name) => view.cut.includes(name);
+  const at = (rows, name) => list(rows.map((row) => `${row.kind} at ${row.file}:${row.line} "${row.text}"`), cut(name));
+  const others = view.otherSettings === 0 ? "" : `; ${plural(view.otherSettings, "other setting")} it reads`;
+  const hostParts = [
+    view.apiHosts.length === 0 ? "no API host" : list(view.apiHosts, false),
+    ...view.staticHosts.length === 0 ? [] : [`fonts, CDNs and map tiles: ${view.staticHosts.length}`],
+    ...view.otherHosts.length === 0 ? [] : [`other sites named: ${view.otherHosts.length}`]
+  ];
+  return [
+    `Before you install: ${beforeInstallSummary(view)}`,
+    ...view.fetchAndRun.length === 0 ? [] : [`Fetches and runs code: ${at(view.fetchAndRun, "fetchAndRun")}`],
+    `Asks for: ${view.keys.length === 0 ? `no keys${others}` : `${list(view.keys.map((key) => `${key.name} (${key.why === "secret" ? "" : "set in SKILL.md, "}${key.file}:${key.line})`), cut("keys"))}${others}`}`,
+    `Paid services: ${view.services.length === 0 ? "none named" : list(view.services.map((entry) => `${entry.name} (${[...entry.hosts, ...entry.keys].join(", ")})`), false)}`,
+    `Needs installed: ${view.programs.length === 0 ? "none named" : list(view.programs.map((program) => `${program.name} (${programSourceText(program)})`), cut("programs"))}`,
+    `Runs on your machine: ${view.scripts.length === 0 ? "no scripts" : `${plural(view.scripts.length, "script")}: ${list(view.scripts.map((script) => script.namedInSkillMd ? `${script.path} (named in SKILL.md)` : script.path), cut("scripts"))}`}${view.fetchAndRun.length === 0 ? "; fetches and runs no code" : ""}`,
+    `Sends data to (hosts its files name, not shown to be contacted): ${hostParts.join("; ")}`,
+    ...view.hidden.length === 0 ? [] : [`Hidden or encoded text: ${at(view.hidden, "hidden")}`],
+    ...view.notRead.length === 0 ? [] : [`Not read: ${list(view.notRead.map((file) => `${file.path} (${file.why})`), false)}`]
+  ];
+}
 // ../../packages/protocol/dist/outside-signals.js
 var TRUST_INDEX_LOOKUP = "https://x402-doctor.fizzl.eu/api/trust?url=";
 var FAILURE_WORDS = ["error", "fail", "failed", "broken", "crash"];
@@ -14796,7 +14731,7 @@ function outsideIndex(file) {
     }
   };
 }
-var plural = (count, one, many) => `${count} ${count === 1 ? one : many}`;
+var plural2 = (count, one, many) => `${count} ${count === 1 ? one : many}`;
 function repoFacts(file, label, skill) {
   const index2 = outsideIndex(file);
   const repoLabel = repoLabelOf(label);
@@ -14818,7 +14753,7 @@ function repoFacts(file, label, skill) {
     const { total, open } = signals.issues;
     const named = skill === undefined ? null : index2.skill(label);
     facts.push({
-      says: `${plural(total, "issue title names", "issue titles name")} a failure (${open} open)` + (named === null ? "" : `; ${named.named} among the newest read name this skill`),
+      says: `${plural2(total, "issue title names", "issue titles name")} a failure (${open} open)` + (named === null ? "" : `; ${named.named} among the newest read name this skill`),
       per: "GitHub search",
       on: issuesRead,
       check: failureIssueSearchUrl(repo)
@@ -14837,7 +14772,7 @@ function endpointFacts(file, url) {
   if (found2.entry !== null) {
     const { verdict, daysChecked, daysPayable, reasons } = found2.entry;
     facts.push({
-      says: `${verdict}, payable on ${daysPayable} of ${plural(daysChecked, "day", "days")} checked` + (reasons.length === 0 ? "" : ` (${reasons.join(", ")})`),
+      says: `${verdict}, payable on ${daysPayable} of ${plural2(daysChecked, "day", "days")} checked` + (reasons.length === 0 ? "" : ` (${reasons.join(", ")})`),
       per: credit,
       on,
       check,
@@ -14846,7 +14781,7 @@ function endpointFacts(file, url) {
   } else if (found2.host !== null) {
     const { endpoints, go, caution, noGo, error } = found2.host;
     facts.push({
-      says: `this address is not listed; its host has ${plural(endpoints, "listed endpoint", "listed endpoints")}: ${go} go, ${caution} caution, ${noGo} no_go${error === 0 ? "" : `, ${error} unreachable`}`,
+      says: `this address is not listed; its host has ${plural2(endpoints, "listed endpoint", "listed endpoints")}: ${go} go, ${caution} caution, ${noGo} no_go${error === 0 ? "" : `, ${error} unreachable`}`,
       per: credit,
       on,
       check,
@@ -14870,16 +14805,21 @@ var BINDINGS_QUERY = `query EndpointBindings($subject: String!, $hasEndpoint: St
     object { term_id data label }
   }
 }`;
-var CONTEXTS_QUERY = `query EndpointProofs($triple: String!, $inContextOf: String!, $limit: Int!) {
-  triples(
-    where: {predicate_id: {_eq: $inContextOf}, object_id: {_eq: $triple}}
+function contextsQuery(claims) {
+  const variables = Array.from({ length: claims }, (_, at) => `$t${at}: String!`).join(", ");
+  const fields = Array.from({ length: claims }, (_, at) => `  c${at}: triples(
+    where: {predicate_id: {_eq: $inContextOf}, object_id: {_eq: $t${at}}}
     order_by: {created_at: asc}
     limit: $limit
   ) {
     object_id
     subject { term_id data value { json_object { data } } }
-  }
+  }`).join(`
+`);
+  return `query EndpointProofs($inContextOf: String!, $limit: Int!, ${variables}) {
+${fields}
 }`;
+}
 var DEFAULT_MAX_PROOFS_PER_CLAIM = 5;
 var RANK = { bound: 0, transferred: 1, unknown: 2, unproven: 3 };
 function gatewayFetch(fetchLike, timeoutMs) {
@@ -14927,12 +14867,13 @@ async function getAgentEndpoints(subject, config) {
   if (claims.length === 0)
     return [];
   const maxProofs = config.maxProofsPerClaim ?? DEFAULT_MAX_PROOFS_PER_CLAIM;
-  return Promise.all(claims.map(async (claim) => {
-    const contexts = await transport.request(CONTEXTS_QUERY, {
-      triple: claim.tripleId,
-      inContextOf: config.predicates.inContextOf,
-      limit: maxProofs
-    });
+  const allContexts = await transport.request(contextsQuery(claims.length), {
+    inContextOf: config.predicates.inContextOf,
+    limit: maxProofs,
+    ...Object.fromEntries(claims.map((claim, at) => [`t${at}`, claim.tripleId]))
+  });
+  return Promise.all(claims.map(async (claim, at) => {
+    const contexts = { triples: allContexts[`c${at}`] };
     const uris = [];
     for (const row of Array.isArray(contexts["triples"]) ? contexts["triples"] : []) {
       if (!isRecord(row))
@@ -15123,16 +15064,21 @@ var LINE_REQUEST_TYPES = {
     { name: "payment", type: "string" },
     { name: "endpoint", type: "string" },
     { name: "need", type: "string" },
+    { name: "payTo", type: "string" },
+    { name: "asset", type: "string" },
+    { name: "price", type: "string" },
+    { name: "termsAt", type: "uint256" },
     { name: "nonce", type: "bytes32" },
     { name: "expiresAt", type: "uint256" }
   ]
 };
+var LINE_REQUEST_VERSION = "5";
 function lineRequestTypedData(request, chainId) {
   return {
-    domain: { name: "ARP Line Request", version: "4", chainId },
+    domain: { name: "ARP Line Request", version: LINE_REQUEST_VERSION, chainId },
     types: LINE_REQUEST_TYPES,
     primaryType: "LineRequest",
-    message: { ...request, expiresAt: BigInt(request.expiresAt) }
+    message: { ...request, termsAt: BigInt(request.termsAt), expiresAt: BigInt(request.expiresAt) }
   };
 }
 async function signLineRequest(request, chainId, signer) {
@@ -15271,4 +15217,4 @@ var RUNG_NAMES = {
 };
 var API_NAMES = new Set(["api", "rest", "openai", "jsonrpc", "grpc"]);
 var ANSWERED = new Set(["live", "serves-declared-protocol", "declared-protocol-not-served"]);
-export { decodeEventLog, createPublicClient, createWalletClient, http, parseEther2 as parseEther, resolveRef, toCaip19, parseCaip19, isTransactionAbsent, HAS_TAG, IS_A_SUB_DOMAIN_OF, USES, intuitionSource, createErc8004Client, IPFS_GATEWAYS, privateProbeTarget, guardedFetchText, probeEndpoint, resolveAgent, listAgents, readDeclaredEndpoints, partitionByCheckability, getToolUsage, multiVaultDeclareAbi, multiVaultReads, prepareMarketPosition, prepareMarketExit, intuitionToolAtomLookup, toolAtomUri, prepareDeclareUsed, prepareStakeOnUsed, resolveDeclarationSubject, normaliseCategoryLabel, isCategoryIn, intuitionTestnet, ARP_DOMAIN_ATTESTORS, X402_DEFAULT_NETWORKS, chainIdOfNetwork, paymentAtomLabel, isExactEndpointUrl, transfersIn, x402NetworksFrom, x402Reading, listTools, listRegisteredTools, verdictOf, readReachabilityState2 as readReachabilityState, planReachability2 as planReachability, readDomainTree, toolsInDomain, findAgents, parseSessionLog, resolveInvocations, skillRefFromUrl, resolveContentPath, readRequires, contentsFileOf, readSkillContents, contentsLines, parseSkillsFind, fuseSearches, readPulse, groupByContent, githubPulseSource, resolveDomain, domainInText, SHARE_OFFER, NEEDS_LABEL2 as NEEDS_LABEL, WITH_LABEL2 as WITH_LABEL, needKindOfReason2 as needKindOfReason, publishableNeed2 as publishableNeed, needShapeProblem2 as needShapeProblem, HAS_OUTCOME_LABEL2 as HAS_OUTCOME_LABEL, USAGE_REASONS2 as USAGE_REASONS, BECAUSE_LABEL2 as BECAUSE_LABEL, isUsageOutcome2 as isUsageOutcome, isUsageReason2 as isUsageReason, prepareUsageContext2 as prepareUsageContext, budgetRefusal2 as budgetRefusal, parseLocalFailures, yourFailures, parseLocalOutcomes, isSharingOn, installedFromSkillLock, installedFromReceipts, sharedLineKey, decideShare, SCORE_VERSION, WALLETS_TO_MOVE, signalOf, entersList, unconfirmedNote, scoreSkill, findToolAtoms, findDeclaredTools, readThingUrl, workedInDomain, readEdgeWriters, getPulseUsage, HIRE_RECEIPT_VERSION, hireDigest, signHireReceipt, atomIsCanonicalFor, resolveAgentAtom, walletControlsSubject, findAgentsInDomains, findAgentsWithEndpoints, wordsMatchingOffer, readLineReceipts, receiptHolds, contentRequestTypedData, recoverContentRequester, verifyContentReceipt, corroborationOf, receiptMatchesContent, serveContent, contentIndexOf, bundleMatchesReceipt, serveSkillBundle, reviewSkill, renderSkillPrompt, repoFacts, endpointFacts, parseAgentRegistry, normaliseEndpoint, validateHandshakeRequest, asEndpointBinding, endpointBindingDocument, getAgentEndpoints, encodeApproveDeposit, sponsorProofDigest, signSponsorRequest, signMintGasRequest, signListToolRequest, signLineRequest, CATEGORY_REQUEST_TYPES, categoryRequestTypedData, signCategoryRequest, verifyCategoryRequest, searchSkillsIndex, RUNG_NAMES };
+export { decodeEventLog, createPublicClient, createWalletClient, http, verifyMessage3 as verifyMessage, parseEther2 as parseEther, resolveRef, toCaip19, parseCaip19, isTransactionAbsent, HAS_TAG, IS_A_SUB_DOMAIN_OF, USES, intuitionSource, createErc8004Client, IPFS_GATEWAYS, privateProbeTarget, guardedFetchText, probeEndpoint, resolveAgent, listAgents, readDeclaredEndpoints, partitionByCheckability, getToolUsage, multiVaultDeclareAbi, multiVaultReads, prepareMarketPosition, prepareMarketExit, toolAtomUri, redactEndpointUrl, intuitionToolAtomLookup, prepareDeclareUsed, prepareStakeOnUsed, resolveDeclarationSubject, normaliseCategoryLabel, isCategoryIn, intuitionTestnet, ARP_DOMAIN_ATTESTORS, chainIdOfNetwork, paymentAtomLabel, isExactEndpointUrl, transfersIn, x402NetworksFrom, x402Reading, X402_DEFAULT_NETWORKS, listTools, listRegisteredTools, verdictOf, readReachabilityState2 as readReachabilityState, planReachability2 as planReachability, readDomainTree, toolsInDomain, findAgents, parseSessionLog, resolveInvocations, skillRefFromUrl, resolveContentPath, readRequires, contentsFileOf, readSkillContents, parseSkillsFind, fuseSearches, readPulse, groupByContent, githubPulseSource, resolveDomain, domainInText, sharingChoiceOf, sharingFileText, NEEDS_LABEL2 as NEEDS_LABEL, WITH_LABEL2 as WITH_LABEL, needKindOfReason2 as needKindOfReason, publishableNeed2 as publishableNeed, needShapeProblem2 as needShapeProblem, HAS_OUTCOME_LABEL2 as HAS_OUTCOME_LABEL, USAGE_REASONS2 as USAGE_REASONS, BECAUSE_LABEL2 as BECAUSE_LABEL, isUsageOutcome2 as isUsageOutcome, isUsageReason2 as isUsageReason, prepareUsageContext2 as prepareUsageContext, budgetRefusal2 as budgetRefusal, parseLocalFailures, yourFailures, parseLocalOutcomes, isSharingOn, installedFromSkillLock, installedFromReceipts, sharedLineKey, decideShare, SCORE_VERSION, WALLETS_TO_MOVE, signalOf, entersList, unconfirmedNote, scoreSkill, findToolAtoms, findDeclaredTools, readThingUrl, workedInDomain, readEdgeWriters, getPulseUsage, HIRE_RECEIPT_VERSION, hireDigest, signHireReceipt, atomIsCanonicalFor, resolveAgentAtom, walletControlsSubject, findAgentsInDomains, findAgentsWithEndpoints, wordsMatchingOffer, readLineReceipts, receiptHolds, contentRequestTypedData, recoverContentRequester, verifyContentReceipt, corroborationOf, receiptMatchesContent, serveContent, contentIndexOf, bundleMatchesReceipt, serveSkillBundle, reviewSkill, renderSkillPrompt, contentsLines, repoFacts, endpointFacts, parseAgentRegistry, normaliseEndpoint, validateHandshakeRequest, asEndpointBinding, endpointBindingDocument, getAgentEndpoints, encodeApproveDeposit, sponsorProofDigest, signSponsorRequest, signMintGasRequest, signListToolRequest, signLineRequest, CATEGORY_REQUEST_TYPES, categoryRequestTypedData, signCategoryRequest, verifyCategoryRequest, searchSkillsIndex, RUNG_NAMES };