@bankr/cli 0.3.37 → 0.3.43

package/dist/cli.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-import { readFileSync } from "node:fs";
 import { Command } from "commander";
 import { input } from "@inquirer/prompts";
 import { balancesCommand } from "./commands/balances.js";
@@ -9,7 +8,7 @@ import { swapCommand } from "./commands/swap.js";
 import { skillsCommand } from "./commands/capabilities.js";
 import { cancelCommand } from "./commands/cancel.js";
 import { configGetCommand, configSetCommand } from "./commands/config.js";
-import { setConfigPath } from "./lib/config.js";
+import { CLI_VERSION, setConfigPath } from "./lib/config.js";
 import { getErrorMessage } from "./lib/errors.js";
 import { passthroughArgs } from "./lib/passthrough.js";
 import { claudeCommand, creditsCommand, creditsAddCommand, creditsAutoCommand, modelsCommand, opencodeCommand, setupClaudeCodeCommand, setupCursorCommand, setupOpenclawCommand, setupOpenCodeCommand, } from "./commands/llm.js";
@@ -18,7 +17,7 @@ import { launchCommand } from "./commands/launch.js";
 import { launchQuotesCommand } from "./commands/launchQuotes.js";
 import { loginCommand } from "./commands/login.js";
 import { logoutCommand } from "./commands/logout.js";
-import { promptCommand } from "./commands/prompt.js";
+import { MAX_MODE_MODEL_EXAMPLE, promptCommand } from "./commands/prompt.js";
 import { signCommand } from "./commands/sign.js";
 import { soundsDisableCommand, soundsEnableCommand, soundsInstallCommand, soundsListCommand, soundsMuteCommand, soundsSearchCommand, soundsStatusCommand, soundsTestCommand, soundsUnmuteCommand, soundsUseCommand, soundsVolumeCommand, } from "./commands/sounds.js";
 import { statusCommand } from "./commands/status.js";
@@ -28,12 +27,11 @@ import { whoamiCommand } from "./commands/whoami.js";
 import { tokensSearchCommand, tokensInfoCommand } from "./commands/tokens.js";
 import { x402InitCommand, x402AddCommand, x402ConfigureCommand, x402DeployCommand, x402ListCommand, x402PauseResumeCommand, x402DeleteCommand, x402RevenueCommand, x402EnvSetCommand, x402EnvListCommand, x402EnvUnsetCommand, x402SearchCommand, x402SchemaCommand, x402CallCommand, } from "./commands/x402.js";
 import { webhooksInitCommand, webhooksAddCommand, webhooksDeployCommand, webhooksListCommand, webhooksPauseResumeCommand, webhooksDeleteCommand, webhooksLogsCommand, webhooksEnvSetCommand, webhooksEnvListCommand, webhooksEnvUnsetCommand, } from "./commands/webhooks.js";
-import { profileViewCommand, profileCreateCommand, profileUpdateCommand, profileDeleteCommand, profileAddUpdateCommand, } from "./commands/profile.js";
+import { projectViewCommand, projectCreateCommand, projectUpdateCommand, projectDeleteCommand, projectAddUpdateCommand, } from "./commands/project.js";
 import { filesListCommand, filesUploadCommand, filesDownloadCommand, filesMkdirCommand, filesRmCommand, filesStorageCommand, filesCatCommand, filesEditCommand, filesWriteCommand, filesSearchCommand, filesMvCommand, filesRenameCommand, filesInfoCommand, } from "./commands/files.js";
 import { clubStatusCommand, clubSignupCommand, clubCancelCommand, } from "./commands/club.js";
 import * as output from "./lib/output.js";
 import { checkForUpdate } from "./lib/updateCheck.js";
-const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf-8"));
 /**
  * Read prompt text from stdin (piped) or interactively.
  * Bypasses shell expansion so dollar signs and special characters are preserved.
@@ -81,7 +79,7 @@ function colorizeHelp(text) {
 program
     .name("bankr")
     .description("Bankr AI agent CLI\n\n  Docs:   https://docs.bankr.bot\n  Skills: https://docs.bankr.bot/skills/overview")
-    .version(pkg.version, "-v, --version", "Show CLI version")
+    .version(CLI_VERSION, "-v, --version", "Show CLI version")
     .helpOption("-h, --help", "Display help")
     .helpCommand(false)
     .option("--config <path>", "Path to config file (default: ~/.bankr/config.json)")
@@ -123,8 +121,8 @@ loginCmd
     .command("email [address]")
     .description("Sign in with email (sends verification code)")
     .option("--code <otp>", "OTP code (step 2 of headless login)")
-    .option("--accept-terms", "Accept Terms of Service (skips prompt)")
-    .option("--key-name <name>", "API key name (default: CLI)")
+    .option("--accept-terms", "Accept Terms of Service (skips prompt; implied by headless login)")
+    .option("--key-name <name>", "API key name (default: CLI-<date>-<time>)")
     .optionsGroup("API Permissions")
     .option("--read-only", "Restrict the API key to read operations")
     .option("--read-write", "Allow transactions (the default for new keys)")
@@ -302,10 +300,10 @@ walletSubmitCmd
 program.commandsGroup("Agent");
 const agentCmd = program
     .command("agent [text...]")
-    .description("AI agent commands (prompt, status, cancel, profile, skills)")
+    .description("AI agent commands (prompt, status, cancel, skills)")
     .option("--thread <id>", "Continue a specific conversation thread")
     .option("-c, --continue", "Continue the most recent thread")
-    .option("-m, --model <model>", "Use Max Mode with a specific model (e.g. claude-opus-4.6)")
+    .option("-m, --model <model>", `Use Max Mode with a specific model (e.g. ${MAX_MODE_MODEL_EXAMPLE})`)
     .action(async (text, opts, cmd) => {
     opts.model ?? (opts.model = cmd.parent?.opts()?.model);
     const joined = text.join(" ").trim();
@@ -323,7 +321,7 @@ agentCmd
     .description("Send a prompt to the Bankr AI agent")
     .option("--thread <id>", "Continue a specific conversation thread")
     .option("-c, --continue", "Continue the most recent thread")
-    .option("-m, --model <model>", "Use Max Mode with a specific model (e.g. claude-opus-4.6)")
+    .option("-m, --model <model>", `Use Max Mode with a specific model (e.g. ${MAX_MODE_MODEL_EXAMPLE})`)
     .action(async (text, opts, cmd) => {
     // Commander hoists --model to the parent when both define it;
     // fall back to parent/grandparent opts so `bankr agent prompt --model` works.
@@ -334,6 +332,7 @@ agentCmd
 agentCmd
     .command("status <jobId>")
     .description("Check the status of a job")
+    .option("-w, --wait", "Follow the job until it finishes, printing progress as it arrives")
     .action(statusCommand);
 agentCmd
     .command("cancel <jobId>")
@@ -410,76 +409,6 @@ feesCmd
     .option("--all", "Claim all tokens without selection prompt")
     .option("-y, --yes", "Skip confirmation prompt")
     .action(feesClaimWalletCommand);
-// Profile under agent namespace
-const profileCmd = agentCmd
-    .command("profile")
-    .description("Manage your agent profile page")
-    .option("--json", "Output raw JSON")
-    .action(async (opts) => {
-    await profileViewCommand({ json: opts.json });
-});
-profileCmd
-    .command("create")
-    .description("Create a new agent profile")
-    .option("--name <name>", "Project name")
-    .option("--description <text>", "Project description")
-    .option("--token <address>", "Token contract address")
-    .option("--image <url>", "Profile image URL")
-    .option("--website <url>", "Project website URL")
-    .option("--json", "Output raw JSON")
-    .action(async (opts) => {
-    await profileCreateCommand({
-        name: opts.name,
-        description: opts.description,
-        token: opts.token,
-        image: opts.image,
-        website: opts.website,
-        json: opts.json,
-    });
-});
-profileCmd
-    .command("update")
-    .description("Update your agent profile")
-    .option("--slug <slug>", "Project slug (required if multiple profiles)")
-    .option("--name <name>", "Project name")
-    .option("--description <text>", "Project description")
-    .option("--token <address>", "Token contract address")
-    .option("--image <url>", "Profile image URL")
-    .option("--website <url>", "Project website URL")
-    .option("--json", "Output raw JSON")
-    .action(async (opts) => {
-    await profileUpdateCommand({
-        slug: opts.slug,
-        name: opts.name,
-        description: opts.description,
-        token: opts.token,
-        image: opts.image,
-        website: opts.website,
-        json: opts.json,
-    });
-});
-profileCmd
-    .command("delete")
-    .description("Delete your agent profile")
-    .option("--slug <slug>", "Project slug (required if multiple profiles)")
-    .action(async (opts) => {
-    await profileDeleteCommand({ slug: opts.slug });
-});
-profileCmd
-    .command("add-update")
-    .description("Add a project update to your profile")
-    .option("--slug <slug>", "Project slug (required if multiple profiles)")
-    .option("--title <title>", "Update title")
-    .option("--content <text>", "Update content")
-    .option("--json", "Output raw JSON")
-    .action(async (opts) => {
-    await profileAddUpdateCommand({
-        slug: opts.slug,
-        title: opts.title,
-        content: opts.content,
-        json: opts.json,
-    });
-});
 program.commandsGroup("LLM");
 const llmCmd = program
     .command("llm")
@@ -639,76 +568,89 @@ program
     deprecatedCmd("cancel", "agent cancel");
     await cancelCommand(jobId);
 });
-const profileAliasCmd = program
-    .command("profile", { hidden: true })
-    .description("Deprecated: use `bankr agent profile` instead")
-    .option("--json", "Output raw JSON")
-    .action(async (opts) => {
-    deprecatedCmd("profile", "agent profile");
-    await profileViewCommand({ json: opts.json });
-});
-profileAliasCmd
-    .command("create")
-    .option("--name <name>", "Project name")
-    .option("--description <text>", "Project description")
-    .option("--token <address>", "Token contract address")
-    .option("--image <url>", "Profile image URL")
-    .option("--website <url>", "Project website URL")
-    .option("--json", "Output raw JSON")
-    .action(async (opts) => {
-    deprecatedCmd("profile create", "agent profile create");
-    await profileCreateCommand({
-        name: opts.name,
-        description: opts.description,
-        token: opts.token,
-        image: opts.image,
-        website: opts.website,
-        json: opts.json,
+/**
+ * Registers the deprecated `profile` tree on `parent`. It runs the project
+ * commands; `oldPrefix` is the command path the warning tells users to drop.
+ */
+function registerProfileAlias(parent, oldPrefix) {
+    const aliasCmd = parent
+        .command("profile", { hidden: true })
+        .description("Deprecated: use `bankr project` instead")
+        .option("--json", "Output raw JSON")
+        .action(async (opts) => {
+        deprecatedCmd(oldPrefix, "project");
+        await projectViewCommand({ json: opts.json });
     });
-});
-profileAliasCmd
-    .command("update")
-    .option("--slug <slug>", "Project slug")
-    .option("--name <name>", "Project name")
-    .option("--description <text>", "Project description")
-    .option("--token <address>", "Token contract address")
-    .option("--image <url>", "Profile image URL")
-    .option("--website <url>", "Project website URL")
-    .option("--json", "Output raw JSON")
-    .action(async (opts) => {
-    deprecatedCmd("profile update", "agent profile update");
-    await profileUpdateCommand({
-        slug: opts.slug,
-        name: opts.name,
-        description: opts.description,
-        token: opts.token,
-        image: opts.image,
-        website: opts.website,
-        json: opts.json,
+    aliasCmd
+        .command("create")
+        .description("Deprecated: use `bankr project create`")
+        .option("--name <name>", "Project name")
+        .option("--description <text>", "Project description")
+        .option("--token <address>", "Token contract address")
+        .option("--image <url>", "Project image URL")
+        .option("--website <url>", "Project website URL")
+        .option("--json", "Output raw JSON")
+        .action(async (opts) => {
+        deprecatedCmd(`${oldPrefix} create`, "project create");
+        await projectCreateCommand({
+            name: opts.name,
+            description: opts.description,
+            token: opts.token,
+            image: opts.image,
+            website: opts.website,
+            json: opts.json,
+        });
     });
-});
-profileAliasCmd
-    .command("delete")
-    .option("--slug <slug>", "Project slug")
-    .action(async (opts) => {
-    deprecatedCmd("profile delete", "agent profile delete");
-    await profileDeleteCommand({ slug: opts.slug });
-});
-profileAliasCmd
-    .command("add-update")
-    .option("--slug <slug>", "Project slug")
-    .option("--title <title>", "Update title")
-    .option("--content <text>", "Update content")
-    .option("--json", "Output raw JSON")
-    .action(async (opts) => {
-    deprecatedCmd("profile add-update", "agent profile add-update");
-    await profileAddUpdateCommand({
-        slug: opts.slug,
-        title: opts.title,
-        content: opts.content,
-        json: opts.json,
+    aliasCmd
+        .command("update")
+        .description("Deprecated: use `bankr project update`")
+        .option("--slug <slug>", "Project slug")
+        .option("--name <name>", "Project name")
+        .option("--description <text>", "Project description")
+        .option("--token <address>", "Token contract address")
+        .option("--image <url>", "Project image URL")
+        .option("--website <url>", "Project website URL")
+        .option("--json", "Output raw JSON")
+        .action(async (opts) => {
+        deprecatedCmd(`${oldPrefix} update`, "project update");
+        await projectUpdateCommand({
+            slug: opts.slug,
+            name: opts.name,
+            description: opts.description,
+            token: opts.token,
+            image: opts.image,
+            website: opts.website,
+            json: opts.json,
+        });
     });
-});
+    aliasCmd
+        .command("delete")
+        .description("Deprecated: use `bankr project delete`")
+        .option("--slug <slug>", "Project slug")
+        .action(async (opts) => {
+        deprecatedCmd(`${oldPrefix} delete`, "project delete");
+        await projectDeleteCommand({ slug: opts.slug });
+    });
+    aliasCmd
+        .command("add-update")
+        .description("Deprecated: use `bankr project add-update`")
+        .option("--slug <slug>", "Project slug")
+        .option("--title <title>", "Update title")
+        .option("--content <text>", "Update content")
+        .option("--json", "Output raw JSON")
+        .action(async (opts) => {
+        deprecatedCmd(`${oldPrefix} add-update`, "project add-update");
+        await projectAddUpdateCommand({
+            slug: opts.slug,
+            title: opts.title,
+            content: opts.content,
+            json: opts.json,
+        });
+    });
+}
+// `bankr agent profile` (now `bankr project`) and the older top-level `bankr profile`.
+registerProfileAlias(agentCmd, "agent profile");
+registerProfileAlias(program, "profile");
 program
     .command("sign", { hidden: true })
     .description("Deprecated: use `bankr wallet sign` instead")
@@ -863,6 +805,76 @@ clubCmd
     .description("Cancel your Bankr Club subscription")
     .option("-y, --yes", "Skip confirmation prompt")
     .action(clubCancelCommand);
+// ── Project Pages ─────────────────────────────────────────────
+const projectCmd = program
+    .command("project")
+    .description("Manage your project page")
+    .option("--json", "Output raw JSON")
+    .action(async (opts) => {
+    await projectViewCommand({ json: opts.json });
+});
+projectCmd
+    .command("create")
+    .description("Create a new project")
+    .option("--name <name>", "Project name")
+    .option("--description <text>", "Project description")
+    .option("--token <address>", "Token contract address")
+    .option("--image <url>", "Project image URL")
+    .option("--website <url>", "Project website URL")
+    .option("--json", "Output raw JSON")
+    .action(async (opts) => {
+    await projectCreateCommand({
+        name: opts.name,
+        description: opts.description,
+        token: opts.token,
+        image: opts.image,
+        website: opts.website,
+        json: opts.json,
+    });
+});
+projectCmd
+    .command("update")
+    .description("Update your project")
+    .option("--slug <slug>", "Project slug (required if multiple projects)")
+    .option("--name <name>", "Project name")
+    .option("--description <text>", "Project description")
+    .option("--token <address>", "Token contract address")
+    .option("--image <url>", "Project image URL")
+    .option("--website <url>", "Project website URL")
+    .option("--json", "Output raw JSON")
+    .action(async (opts) => {
+    await projectUpdateCommand({
+        slug: opts.slug,
+        name: opts.name,
+        description: opts.description,
+        token: opts.token,
+        image: opts.image,
+        website: opts.website,
+        json: opts.json,
+    });
+});
+projectCmd
+    .command("delete")
+    .description("Delete your project")
+    .option("--slug <slug>", "Project slug (required if multiple projects)")
+    .action(async (opts) => {
+    await projectDeleteCommand({ slug: opts.slug });
+});
+projectCmd
+    .command("add-update")
+    .description("Add a project update to your project page")
+    .option("--slug <slug>", "Project slug (required if multiple projects)")
+    .option("--title <title>", "Update title")
+    .option("--content <text>", "Update content")
+    .option("--json", "Output raw JSON")
+    .action(async (opts) => {
+    await projectAddUpdateCommand({
+        slug: opts.slug,
+        title: opts.title,
+        content: opts.content,
+        json: opts.json,
+    });
+});
 // ── x402 Endpoint Hosting ─────────────────────────────────────────────
 program.commandsGroup("Protocol");
 const x402Cmd = program
@@ -1061,7 +1073,7 @@ program
     .arguments("[text...]")
     .option("--thread <id>", "Continue a specific conversation thread")
     .option("-c, --continue", "Continue the most recent thread")
-    .option("-m, --model <model>", "Use Max Mode with a specific model (e.g. claude-opus-4.6)")
+    .option("-m, --model <model>", `Use Max Mode with a specific model (e.g. ${MAX_MODE_MODEL_EXAMPLE})`)
     .action(async (text, opts) => {
     if (text.length === 0) {
         if (output.isNonInteractive()) {
@@ -1084,7 +1096,7 @@ async function main() {
         }
         output.fatal(getErrorMessage(err));
     }
-    await checkForUpdate(pkg.version);
+    await checkForUpdate(CLI_VERSION);
 }
 main();
 //# sourceMappingURL=cli.js.map

package/dist/commands/fees.js

@@ -3,6 +3,7 @@ import { confirm, password, checkbox } from "@inquirer/prompts";
 import { isAddress } from "viem";
 import { getCreatorFees, getBeneficiaryFeesStreaming, getTokenCreatorFees, getUserInfo, claimTokenLaunchFees, } from "../lib/api.js";
 import { emitCESP } from "../lib/cesp/engine.js";
+import { CHAIN_LABELS } from "../lib/chains.js";
 import { requireApiKey } from "../lib/config.js";
 import { txExplorer } from "../lib/explorer.js";
 import * as output from "../lib/output.js";
@@ -129,7 +130,7 @@ function drawChart(dailyData) {
     const xAxisPadding = " ".repeat(14);
     if (dailyData.length > 0) {
         const first = dailyData[0].date.slice(5);
-        const last = dailyData[dailyData.length - 1].date.slice(5);
+        const last = dailyData.at(-1).date.slice(5);
         const mid = dailyData[Math.floor(dailyData.length / 2)].date.slice(5);
         const gap1 = Math.floor(CHART_WIDTH / 2) - first.length;
         const gap2 = CHART_WIDTH - Math.floor(CHART_WIDTH / 2) - mid.length;
@@ -653,12 +654,21 @@ export async function feesClaimWalletCommand(address, opts) {
             ],
         },
     ];
-    // Robinhood-chain launches can't be claimed here: this flow signs and
-    // broadcasts on Base only, and a Base tx to a robinhood initializer is a
-    // gas-burning no-op. Skip them loudly.
-    const baseChainTokens = selectedTokens.filter((t) => (t.chain ?? "base") === "base");
-    if (baseChainTokens.length < selectedTokens.length) {
-        output.warn(`${selectedTokens.length - baseChainTokens.length} Robinhood Chain token(s) skipped — CLI claiming supports Base only for now. Claim at https://bankr.bot/launches instead.`);
+    // Launches on other chains can't be claimed here: this flow signs and
+    // broadcasts on Base only, and a Base tx to another chain's initializer is a
+    // gas-burning no-op. Skip them loudly, linking each token page's claim flow.
+    const chainOf = (t) => t.chain ?? "base";
+    const baseChainTokens = selectedTokens.filter((t) => chainOf(t) === "base");
+    const skippedTokens = selectedTokens.filter((t) => chainOf(t) !== "base");
+    if (skippedTokens.length > 0) {
+        const names = [...new Set(skippedTokens.map(chainOf))].map((chain) => CHAIN_LABELS[chain] ?? chain);
+        const skippedChains = names.length > 1
+            ? `${names.slice(0, -1).join(", ")} and ${names[names.length - 1]}`
+            : names[0];
+        output.warn(`${skippedTokens.length} ${skippedChains} token(s) skipped — CLI claiming supports Base only for now. Claim them on each token's page instead:`);
+        for (const t of skippedTokens) {
+            output.dim(`  ${t.symbol}: https://bankr.bot/terminal/trade?out=${t.tokenAddress}&chain=${chainOf(t)}`);
+        }
     }
     // Filter to tokens with initializer (required for local tx building)
     const buildableTokens = baseChainTokens.filter((t) => t.initializer);

package/dist/commands/llm.js

@@ -38,6 +38,15 @@ const GATEWAY_MODELS = [
         input: IMAGE_INPUT,
         cost: { input: 10.0, output: 50.0, cacheRead: 1.0, cacheWrite: 12.5 },
     },
+    {
+        id: "claude-opus-5.5",
+        name: "Claude Opus 5.5",
+        owned_by: "anthropic",
+        contextWindow: 1000000,
+        maxTokens: 128000,
+        input: IMAGE_INPUT,
+        cost: { input: 4.0, output: 20.0, cacheRead: 0.2, cacheWrite: 5.0 },
+    },
     {
         id: "claude-opus-5",
         name: "Claude Opus 5",
@@ -83,6 +92,15 @@ const GATEWAY_MODELS = [
         input: IMAGE_INPUT,
         cost: { input: 5.0, output: 25.0, cacheRead: 0.5, cacheWrite: 6.25 },
     },
+    {
+        id: "claude-sonnet-5.5",
+        name: "Claude Sonnet 5.5",
+        owned_by: "anthropic",
+        contextWindow: 1000000,
+        maxTokens: 128000,
+        input: IMAGE_INPUT,
+        cost: { input: 2.0, output: 10.0, cacheRead: 0.2, cacheWrite: 2.5 },
+    },
     {
         id: "claude-sonnet-5",
         name: "Claude Sonnet 5",
@@ -182,6 +200,12 @@ const GATEWAY_MODELS = [
         maxTokens: 65536,
         input: IMAGE_INPUT,
         cost: { input: 1.25, output: 10.0, cacheRead: 0.125, cacheWrite: 0.375 },
+        // Google retires the 2.5 line on 2026-10-20 (published on every Vertex
+        // endpoint). Without this the offline catalog advertises it as active.
+        deprecation: {
+            replaced_by: "gemini-3.1-pro",
+            removed_at: "2026-10-20T00:00:00.000Z",
+        },
     },
     {
         id: "gemini-2.5-flash",
@@ -191,6 +215,10 @@ const GATEWAY_MODELS = [
         maxTokens: 65535,
         input: IMAGE_INPUT,
         cost: { input: 0.3, output: 2.5, cacheRead: 0.03, cacheWrite: 0.0833 },
+        deprecation: {
+            replaced_by: "gemini-3.8-flash",
+            removed_at: "2026-10-20T00:00:00.000Z",
+        },
     },
     // Gemma
     {
@@ -243,6 +271,24 @@ const GATEWAY_MODELS = [
         input: IMAGE_INPUT,
         cost: { input: 10.0, output: 50.0, cacheRead: 1.0, cacheWrite: 12.5 },
     },
+    {
+        id: "gpt-6-sol",
+        name: "GPT 6 Sol",
+        owned_by: "openai",
+        contextWindow: 1050000,
+        maxTokens: 128000,
+        input: IMAGE_INPUT,
+        cost: { input: 2.0, output: 10.0, cacheRead: 0.2, cacheWrite: 2.5 },
+    },
+    {
+        id: "gpt-6-luna",
+        name: "GPT 6 Luna",
+        owned_by: "openai",
+        contextWindow: 1050000,
+        maxTokens: 128000,
+        input: IMAGE_INPUT,
+        cost: { input: 0.1, output: 0.5, cacheRead: 0.01, cacheWrite: 0.125 },
+    },
     {
         id: "gpt-5.6-sol",
         name: "GPT 5.6 Sol",
@@ -355,6 +401,15 @@ const GATEWAY_MODELS = [
         cost: { input: 0.05, output: 0.4, cacheRead: 0.005, cacheWrite: 0 },
     },
     // Other providers
+    {
+        id: "grok-4.7",
+        name: "Grok 4.7",
+        owned_by: "x-ai",
+        contextWindow: 500000,
+        maxTokens: 500000,
+        input: IMAGE_INPUT,
+        cost: { input: 2.0, output: 6.0, cacheRead: 0.5, cacheWrite: 0 },
+    },
     {
         id: "grok-4.6",
         name: "Grok 4.6",
@@ -604,6 +659,15 @@ const GATEWAY_MODELS = [
         input: TEXT_INPUT,
         cost: { input: 0.6, output: 2.4, cacheRead: 0.06, cacheWrite: 0 },
     },
+    {
+        id: "glm-5.3-flashx",
+        name: "GLM-5.3 FlashX",
+        owned_by: "z-ai",
+        contextWindow: 1048576,
+        maxTokens: 131072,
+        input: IMAGE_INPUT,
+        cost: { input: 0.37, output: 1.25, cacheRead: 0.075, cacheWrite: 0 },
+    },
     {
         id: "glm-5.3-flash",
         name: "GLM-5.3 Flash",

package/dist/commands/login.d.ts

@@ -1,3 +1,51 @@
+/**
+ * Thrown when a login-gated call answers with the MFA step-up envelope. A
+ * passkey ceremony can't run in a terminal, so the email flow can't recover;
+ * the caller turns this into the browser-key guidance instead of the server's
+ * fallback text.
+ */
+export declare class MfaStepUpError extends Error {
+    readonly context: string;
+    constructor(context: string);
+}
+/** Keyed on `code`, never on message text, so a server wording change can't
+ * silently turn this back into the opaque failure. */
+export declare function mfaStepUpErrorFrom(body: unknown): MfaStepUpError | null;
+/** Any 5xx: a gateway page (ALB/CloudFront 502/503/504) the API never saw, or
+ * an API catch-all such as a DB blip. Idempotent callers retry it; the API's
+ * own message, when it sent one, is kept for the final report. */
+export declare class TransientHttpError extends Error {
+    readonly status: number;
+    constructor(status: number, apiMessage?: string);
+}
+/** True for a request the API never answered: undici's `fetch failed`, a
+ * socket-level code, or a gateway error page. An API refusal is not one. */
+export declare function isTransientNetworkError(err: unknown, depth?: number): boolean;
+/**
+ * Retry a login step on network blips only. The OTP is already spent by the
+ * time the wallet step runs, so a dropped connection here used to cost the
+ * user a fresh code; three quick attempts ride out the transient case.
+ */
+export declare function withNetworkRetry<T>(run: () => Promise<T>, opts?: {
+    attempts?: number;
+    baseDelayMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}): Promise<T>;
+/** Key names are unique per user, so the default carries the time to the
+ * second: a scripted re-login seconds after a dropped mint response (which
+ * already created the key) must not collide with the earlier default. */
+export declare function defaultCliKeyName(now?: Date): string;
+/** Headless login (`--code` / `--ni`) accepts the Terms of Service as part of
+ * logging in, so the one-time code isn't burned on a missing flag. Interactive
+ * login returns undefined to defer to the prompt. */
+export declare function resolveTermsAcceptance(opts: {
+    headless: boolean;
+    acceptTerms?: boolean;
+}): boolean | undefined;
+/** The web app that fronts an API URL: `BANKR_WEB_URL` when set (local dev,
+ * staging), bankr.bot for the official API, else the API host with its
+ * `api.`/`api-` prefix dropped. */
+export declare function deriveWebOrigin(apiUrl: string): string;
 /**
  * Both Privy credentials minted by the OTP exchange. The identity token alone
  * authenticates, but only the ACCESS token carries the session `sid` claim —
@@ -24,6 +72,33 @@ export declare function resolveKeyPermissionOverrides(opts: {
     readOnly?: boolean;
     agentApiEnabled?: boolean;
 };
+/**
+ * Parse a login-gated response. The body is read as text first so a gateway
+ * HTML error page becomes a `TransientHttpError` instead of a `SyntaxError`
+ * from `res.json()`. Every 5xx is transient (callers that opted into the
+ * retry replay it; others just report it); a 4xx keeps the API's message.
+ */
+export declare function readGatedResponse<T>(res: Response, label: string): Promise<T>;
+declare const CHALLENGE_STATUSES: readonly ["pending", "verified", "expired", "abandoned", "failed"];
+export type ChallengeStatus = (typeof CHALLENGE_STATUSES)[number];
+/**
+ * One poll's outcome from its HTTP status. Only a definitive refusal ends the
+ * wait: the gate (401, an API without this route yet), another wallet's token
+ * (403) or a gone challenge (404). Anything else — 429, 5xx, a dropped
+ * connection — is a blip, so the wait keeps polling as if still pending.
+ */
+export declare function pollOutcome(httpStatus: number, body: unknown): ChallengeStatus;
+/**
+ * Poll until the challenge leaves `pending` or the deadline passes: once at
+ * once, then every 2s for the first 30s, then every 5s. Pure over its
+ * collaborators so the loop is unit-testable without a network.
+ */
+export declare function waitForChallengeApproval(deps: {
+    poll: () => Promise<ChallengeStatus>;
+    sleep: (ms: number) => Promise<void>;
+    deadlineMs: number;
+    now?: () => number;
+}): Promise<ChallengeStatus>;
 export declare function loginCommand(opts: {
     apiUrl?: string;
     apiKey?: string;