@cabaltrading/cli 0.4.2 → 0.4.3

package/dist/index.js

@@ -3872,7 +3872,7 @@ async function createServer() {
       const res = await fetch(`${baseUrl}/skill.json`);
       if (!res.ok)
         throw new Error(`Failed to fetch skill.json: ${res.status}`);
-      const data = await res.json();
+      const data = z22.record(z22.string(), z22.unknown()).parse(await res.json());
       return textResult(data);
     } catch (error) {
       return textResult(toStructuredError(error));
@@ -3971,15 +3971,14 @@ async function loginCommand(options = {}) {
       body: JSON.stringify(options.ref ? { referralCode: options.ref } : {})
     });
     if (!res.ok) {
-      const data2 = await res.json().catch(() => ({}));
       spinner.fail("Failed to get login code");
-      console.log(chalk2.red(`  ${data2?.error?.message || "Server error"}`));
+      console.log(chalk2.red("  Server error"));
       return false;
     }
-    const { data } = await res.json();
-    deviceCode = data.deviceCode;
-    userCode = data.userCode;
-    verificationUrl = data.verificationUrl;
+    const parsed = deviceCodeCreateResponseSchema.parse(await res.json());
+    deviceCode = parsed.data.deviceCode;
+    userCode = parsed.data.userCode;
+    verificationUrl = parsed.data.verificationUrl;
     spinner.stop();
   } catch (error) {
     spinner.fail("Failed to connect to server");
@@ -4013,7 +4012,8 @@ async function loginCommand(options = {}) {
       const res = await fetch(`${apiBase}/auth/device-code/poll?code=${deviceCode}`);
       if (!res.ok)
         continue;
-      const { data } = await res.json();
+      const parsed = deviceCodePollResponseSchema.parse(await res.json());
+      const data = parsed.data;
       if (data.status === "completed") {
         pollSpinner.succeed(chalk2.green("Logged in!"));
         console.log("");
@@ -4066,12 +4066,28 @@ function sleep(ms) {
 }
 var POLL_INTERVAL_MS = 5000, TIMEOUT_MS;
 var init_login = __esm(() => {
+  init_src();
   init_browser();
   init_env();
   init_errors2();
   TIMEOUT_MS = 10 * 60 * 1000;
 });
 
+// src/lib/tty.ts
+function isTTY() {
+  return !!process.stdin.isTTY;
+}
+function exitMissingFlags(command, missing) {
+  console.error(`Error: this command requires an interactive terminal, or provide these flags:
+`);
+  for (const { flag, description } of missing) {
+    console.error(`  ${flag.padEnd(22)} ${description}`);
+  }
+  console.error(`
+Example: cabal-cli ${command} ${missing.map((f) => f.flag + " <value>").join(" ")}`);
+  process.exit(1);
+}
+
 // src/commands/onboard.ts
 var exports_onboard = {};
 __export(exports_onboard, {
@@ -4090,21 +4106,21 @@ async function onboardCommand(options) {
       process.exit(1);
     }
     if (step === "connect") {
-      await stepConnect();
+      await stepConnect(options);
       return;
     }
     const client = requireClient();
     if (step === "profile")
-      await stepProfile(client);
+      await stepProfile(client, options);
     else if (step === "avatar")
-      await stepAvatar(client);
+      await stepAvatar(client, options);
     else if (step === "verify")
-      await stepVerify(client);
+      await stepVerify(client, options);
     return;
   }
-  await runWizard();
+  await runWizard(options);
 }
-async function runWizard() {
+async function runWizard(options) {
   if (isConfigured()) {
     const client2 = requireClient();
     let steps;
@@ -4113,14 +4129,27 @@ async function runWizard() {
     } catch {
       console.log(chalk3.yellow(`Saved API key is invalid. Starting fresh.
 `));
-      const newClient = await stepConnect();
+      const newClient = await stepConnect(options);
       if (!newClient)
         return;
-      await continueWizard(newClient);
+      await continueWizard(newClient, 1, options);
       return;
     }
     const allDone = steps.every((s) => s.done);
     const firstIncomplete = steps.findIndex((s) => !s.done);
+    if (options.confirm) {
+      if (allDone) {
+        console.log(chalk3.green.bold("All onboarding steps already complete."));
+        return;
+      }
+      await continueWizard(client2, firstIncomplete, options);
+      return;
+    }
+    if (!isTTY()) {
+      exitMissingFlags("onboard", [
+        { flag: "-y, --confirm", description: "Auto-continue through wizard (required in non-TTY)" }
+      ]);
+    }
     printProgress(steps);
     if (allDone) {
       const { action: action2 } = await inquirer.prompt([
@@ -4136,10 +4165,10 @@ async function runWizard() {
       ]);
       if (action2 === "quit")
         return;
-      const newClient = await stepConnect();
+      const newClient = await stepConnect(options);
       if (!newClient)
         return;
-      await continueWizard(newClient);
+      await continueWizard(newClient, 1, options);
       return;
     }
     const { action } = await inquirer.prompt([
@@ -4157,25 +4186,30 @@ async function runWizard() {
     if (action === "quit")
       return;
     if (action === "reconfigure") {
-      const newClient = await stepConnect();
+      const newClient = await stepConnect(options);
       if (!newClient)
         return;
-      await continueWizard(newClient);
+      await continueWizard(newClient, 1, options);
       return;
     }
-    await continueWizard(client2, firstIncomplete);
+    await continueWizard(client2, firstIncomplete, options);
     return;
   }
-  const client = await stepConnect();
+  const client = await stepConnect(options);
   if (!client)
     return;
-  await continueWizard(client);
+  await continueWizard(client, 1, options);
 }
-async function continueWizard(client, startIdx = 1) {
+async function continueWizard(client, startIdx = 1, options = {}) {
   for (let i = startIdx;i < STEP_ORDER.length; i++) {
     const step = STEP_ORDER[i];
     console.log("");
-    if (i > startIdx) {
+    if (i > startIdx && !options.confirm) {
+      if (!isTTY()) {
+        exitMissingFlags("onboard", [
+          { flag: "-y, --confirm", description: "Auto-continue through wizard (required in non-TTY)" }
+        ]);
+      }
       const { action } = await inquirer.prompt([
         {
           type: "list",
@@ -4194,22 +4228,38 @@ async function continueWizard(client, startIdx = 1) {
         continue;
     }
     if (step === "profile")
-      await stepProfile(client);
+      await stepProfile(client, options);
     else if (step === "avatar")
-      await stepAvatar(client);
+      await stepAvatar(client, options);
     else if (step === "verify")
-      await stepVerify(client);
+      await stepVerify(client, options);
   }
   console.log("");
   console.log(chalk3.green.bold("Onboarding complete!"));
   console.log(chalk3.dim("Run `cabal-cli status` to check your agent.\n"));
 }
-async function stepConnect(apiKeyArg) {
+async function stepConnect(options, apiKeyArg) {
   console.log(chalk3.bold(`
   Step 1: Connect
 `));
   let apiKey = apiKeyArg;
   if (!apiKey) {
+    if (isConfigured()) {
+      const creds = getCredentials();
+      if (creds.CABAL_API_KEY) {
+        try {
+          const client = new AgentClient(creds.CABAL_API_KEY, creds.NEXT_PUBLIC_SITE_URL);
+          await client.getStatus();
+          console.log(chalk3.dim(`  Already connected. Using existing API key.
+`));
+          return client;
+        } catch {}
+      }
+    }
+    if (!isTTY()) {
+      console.error("Error: No valid API key found. Run `cabal-cli login` in a terminal first.");
+      process.exit(1);
+    }
     console.log("  To connect your agent, you need an API key.");
     console.log("  If you already have one, paste it below.");
     console.log("");
@@ -4300,7 +4350,7 @@ async function stepConnect(apiKeyArg) {
     return null;
   }
 }
-async function stepProfile(client) {
+async function stepProfile(client, options = {}) {
   console.log(chalk3.bold(`
   Step 2: Profile
 `));
@@ -4315,61 +4365,86 @@ async function stepProfile(client) {
     printCliError(error);
     return;
   }
-  console.log(chalk3.dim(`  Press Enter to keep current values.
+  if (!isTTY()) {
+    const missing = [];
+    if (!options.name)
+      missing.push({ flag: "--name", description: "Display name" });
+    if (!options.handle)
+      missing.push({ flag: "--handle", description: "Unique handle" });
+    if (!options.bio)
+      missing.push({ flag: "--bio", description: "Agent bio" });
+    if (!options.strategy)
+      missing.push({ flag: "--strategy", description: "Trading strategy" });
+    if (missing.length > 0)
+      exitMissingFlags("onboard --step profile", missing);
+  }
+  let name, handle, bio, strategy;
+  if (options.name && options.handle && options.bio && options.strategy) {
+    name = options.name;
+    handle = options.handle;
+    bio = options.bio;
+    strategy = options.strategy;
+  } else {
+    console.log(chalk3.dim(`  Press Enter to keep current values.
 `));
-  const answers = await inquirer.prompt([
-    {
-      type: "input",
-      name: "name",
-      message: "Display name:",
-      default: agent2.name
-    },
-    {
-      type: "input",
-      name: "handle",
-      message: "Handle (unique):",
-      default: agent2.handle ?? undefined,
-      validate: async (input) => {
-        if (!input)
-          return true;
-        if (!/^[a-zA-Z0-9_-]+$/.test(input))
-          return "Handle must be alphanumeric with _ or -";
-        if (input.length > 120)
-          return "Handle must be 120 characters or fewer";
-        if (input === agent2.handle)
-          return true;
-        try {
-          const result2 = await client.checkHandle(input);
-          if (!result2.available)
-            return result2.reason ?? "Handle is not available";
-          return true;
-        } catch {
-          return "Could not validate handle — try again";
+    const answers = await inquirer.prompt([
+      {
+        type: "input",
+        name: "name",
+        message: "Display name:",
+        default: options.name ?? agent2.name
+      },
+      {
+        type: "input",
+        name: "handle",
+        message: "Handle (unique):",
+        default: options.handle ?? agent2.handle ?? undefined,
+        validate: async (input) => {
+          if (!input)
+            return true;
+          if (!/^[a-zA-Z0-9_-]+$/.test(input))
+            return "Handle must be alphanumeric with _ or -";
+          if (input.length > 120)
+            return "Handle must be 120 characters or fewer";
+          if (input === agent2.handle)
+            return true;
+          try {
+            const result2 = await client.checkHandle(input);
+            if (!result2.available)
+              return result2.reason ?? "Handle is not available";
+            return true;
+          } catch {
+            return "Could not validate handle — try again";
+          }
         }
+      },
+      {
+        type: "input",
+        name: "bio",
+        message: "Bio:",
+        default: options.bio ?? agent2.bio ?? undefined
+      },
+      {
+        type: "input",
+        name: "strategy",
+        message: "Strategy:",
+        default: options.strategy ?? agent2.strategy ?? undefined
       }
-    },
-    {
-      type: "input",
-      name: "bio",
-      message: "Bio:",
-      default: agent2.bio ?? undefined
-    },
-    {
-      type: "input",
-      name: "strategy",
-      message: "Strategy:",
-      default: agent2.strategy ?? undefined
-    }
-  ]);
+    ]);
+    name = answers.name;
+    handle = answers.handle;
+    bio = answers.bio;
+    strategy = answers.strategy;
+  }
   const updates = {};
-  if (answers.name && answers.name !== agent2.name)
-    updates.name = answers.name;
-  if (answers.handle && answers.handle !== agent2.handle)
-    updates.handle = answers.handle;
-  if (answers.bio && answers.bio !== agent2.bio)
-    updates.bio = answers.bio;
-  if (answers.strategy && answers.strategy !== agent2.strategy)
-    updates.strategy = answers.strategy;
+  if (name && name !== agent2.name)
+    updates.name = name;
+  if (handle && handle !== agent2.handle)
+    updates.handle = handle;
+  if (bio && bio !== agent2.bio)
+    updates.bio = bio;
+  if (strategy && strategy !== agent2.strategy)
+    updates.strategy = strategy;
   if (Object.keys(updates).length === 0) {
     console.log(chalk3.dim(`
   No changes made.
@@ -4386,10 +4461,62 @@ async function stepProfile(client) {
     printCliError(error);
   }
 }
-async function stepAvatar(client) {
+async function stepAvatar(client, options = {}) {
   console.log(chalk3.bold(`
   Step 3: Avatar
 `));
+  if (options.skipAvatar) {
+    console.log(chalk3.dim(`  Skipped avatar step.
+`));
+    return;
+  }
+  if (options.avatarId) {
+    const selectSpinner = ora2("Selecting avatar...").start();
+    try {
+      await client.selectAvatar(options.avatarId);
+      selectSpinner.succeed("Avatar updated!");
+    } catch (error) {
+      selectSpinner.fail("Failed to select avatar");
+      printCliError(error);
+    }
+    console.log("");
+    return;
+  }
+  if (options.avatar) {
+    const genSpinner = ora2("Generating avatar...").start();
+    try {
+      const result2 = await client.generateAvatar(options.avatar);
+      genSpinner.succeed("Avatar generated!");
+      console.log("");
+      if (result2.generationId) {
+        console.log(`  ${chalk3.dim("Generation ID:")} ${result2.generationId}`);
+      }
+      console.log(`  ${chalk3.dim("Image URL:")}     ${chalk3.cyan(result2.imageUrl)}`);
+      console.log(`  ${chalk3.dim("Credits left:")}  ${result2.creditsRemaining}`);
+      if (result2.generationId) {
+        const selectSpinner = ora2("Setting avatar...").start();
+        try {
+          await client.selectAvatar(result2.generationId);
+          selectSpinner.succeed("Avatar set!");
+        } catch (err2) {
+          selectSpinner.fail("Failed to set avatar");
+          printCliError(err2);
+        }
+      }
+    } catch (error) {
+      genSpinner.fail("Failed to generate avatar");
+      printCliError(error);
+    }
+    console.log("");
+    return;
+  }
+  if (!isTTY()) {
+    exitMissingFlags("onboard --step avatar", [
+      { flag: "--avatar", description: "Generate avatar from this description" },
+      { flag: "--avatar-id", description: "Select an existing avatar generation by ID" },
+      { flag: "--skip-avatar", description: "Skip avatar step entirely" }
+    ]);
+  }
   const spinner = ora2("Fetching avatar credits...").start();
   try {
     const credits = await client.getAvatarCredits();
@@ -4504,20 +4631,36 @@ async function stepAvatar(client) {
     printCliError(error);
   }
 }
-async function stepVerify(client) {
+async function stepVerify(client, options = {}) {
   console.log(chalk3.bold(`
   Step 4: Verify (optional)
 `));
-  console.log("  Claim your agent by tweeting a verification post.");
-  console.log(`  ${chalk3.dim("Dashboard:")} ${chalk3.cyan(DASHBOARD_URL)}`);
-  console.log("");
-  const { tweetUrl } = await inquirer.prompt([
-    {
-      type: "input",
-      name: "tweetUrl",
-      message: "Tweet URL (or press Enter to skip):"
-    }
-  ]);
+  if (options.skipVerify) {
+    console.log(chalk3.dim(`  Skipped verification.
+`));
+    return;
+  }
+  let tweetUrl;
+  if (options.tweetUrl) {
+    tweetUrl = options.tweetUrl;
+  } else if (!isTTY()) {
+    exitMissingFlags("onboard --step verify", [
+      { flag: "--tweet-url", description: "Tweet URL for verification" },
+      { flag: "--skip-verify", description: "Skip verification step" }
+    ]);
+  } else {
+    console.log("  Claim your agent by tweeting a verification post.");
+    console.log(`  ${chalk3.dim("Dashboard:")} ${chalk3.cyan(DASHBOARD_URL)}`);
+    console.log("");
+    const answer = await inquirer.prompt([
+      {
+        type: "input",
+        name: "tweetUrl",
+        message: "Tweet URL (or press Enter to skip):"
+      }
+    ]);
+    tweetUrl = answer.tweetUrl;
+  }
   if (!tweetUrl.trim()) {
     console.log(chalk3.dim("\n  Skipped verification. You can verify later with `cabal-cli onboard --step verify`.\n"));
     return;
@@ -4747,6 +4890,13 @@ import chalk5 from "chalk";
 import ora4 from "ora";
 import inquirer2 from "inquirer";
 import { z as z23 } from "zod";
+async function promptOrFlag(flagValue, promptFn) {
+  if (flagValue !== undefined)
+    return flagValue;
+  if (!isTTY())
+    throw new Error("__missing_flag__");
+  return promptFn();
+}
 async function tradeCommand(options) {
   if (!isConfigured()) {
     console.log(chalk5.red("Error: No API key found. Run `cabal-cli init` first."));
@@ -4758,31 +4908,52 @@ async function tradeCommand(options) {
     process.exit(1);
   }
   let request;
-  const chain = options.chain || (await inquirer2.prompt([{
-    type: "list",
-    name: "chain",
-    message: "Chain:",
-    choices: ["solana", "hyperliquid"]
-  }])).chain;
+  let chain;
+  try {
+    chain = await promptOrFlag(options.chain, async () => (await inquirer2.prompt([{
+      type: "list",
+      name: "chain",
+      message: "Chain:",
+      choices: ["solana", "hyperliquid"]
+    }])).chain);
+  } catch {
+    exitMissingFlags("trade", [
+      { flag: "-c, --chain", description: "Chain: solana or hyperliquid" }
+    ]);
+  }
   if (chain === "solana") {
-    const inputToken = options.input || (await inquirer2.prompt([{
+    if (!isTTY()) {
+      const missing = [];
+      if (!options.input)
+        missing.push({ flag: "-i, --input", description: "Input token (e.g. SOL, USDC)" });
+      if (!options.output)
+        missing.push({ flag: "-o, --output", description: "Output token (e.g. PEPE, BONK)" });
+      if (!options.amount)
+        missing.push({ flag: "-a, --amount", description: "Amount of input token" });
+      if (!options.confirm)
+        missing.push({ flag: "-y, --confirm", description: "Skip confirmation prompt" });
+      if (missing.length > 0)
+        exitMissingFlags("trade --chain solana", missing);
+    }
+    const inputToken = await promptOrFlag(options.input, async () => (await inquirer2.prompt([{
       type: "input",
       name: "value",
       message: "Input token (e.g. SOL, USDC):",
       validate: (v) => v.trim() ? true : "Required"
-    }])).value;
-    const outputToken = options.output || (await inquirer2.prompt([{
+    }])).value);
+    const outputToken = await promptOrFlag(options.output, async () => (await inquirer2.prompt([{
       type: "input",
       name: "value",
       message: "Output token (e.g. PEPE, BONK):",
       validate: (v) => v.trim() ? true : "Required"
-    }])).value;
-    const amount = options.amount ? parseFloat(options.amount) : parseFloat((await inquirer2.prompt([{
+    }])).value);
+    const amountStr = options.amount ?? await promptOrFlag(undefined, async () => (await inquirer2.prompt([{
       type: "input",
       name: "value",
       message: `Amount of ${inputToken} to swap:`,
       validate: (v) => parseFloat(v) > 0 ? true : "Must be a positive number"
     }])).value);
+    const amount = parseFloat(amountStr);
     request = {
       chain: "solana",
       inputToken: inputToken.trim().toUpperCase(),
@@ -4791,34 +4962,49 @@ async function tradeCommand(options) {
       ...options.model && { model: modelSchema.parse(options.model) }
     };
   } else if (chain === "hyperliquid") {
-    const coin = options.coin || (await inquirer2.prompt([{
+    if (!isTTY()) {
+      const missing = [];
+      if (!options.coin)
+        missing.push({ flag: "--coin", description: "Coin symbol (e.g. BTC, ETH)" });
+      if (!options.side)
+        missing.push({ flag: "--side", description: "Side: buy or sell" });
+      if (!options.size)
+        missing.push({ flag: "--size", description: "Position size" });
+      if (!options.confirm)
+        missing.push({ flag: "-y, --confirm", description: "Skip confirmation prompt" });
+      if (missing.length > 0)
+        exitMissingFlags("trade --chain hyperliquid", missing);
+    }
+    const coin = await promptOrFlag(options.coin, async () => (await inquirer2.prompt([{
       type: "input",
       name: "value",
       message: "Coin (e.g. BTC, ETH):",
       validate: (v) => v.trim() ? true : "Required"
-    }])).value;
-    const rawSide = options.side || (await inquirer2.prompt([{
+    }])).value);
+    const rawSide = await promptOrFlag(options.side, async () => (await inquirer2.prompt([{
       type: "list",
       name: "value",
       message: "Side:",
       choices: ["buy", "sell"]
-    }])).value;
+    }])).value);
     const side = z23.enum(["buy", "sell"]).parse(rawSide);
-    const size = options.size ? parseFloat(options.size) : parseFloat((await inquirer2.prompt([{
+    const sizeStr = options.size ?? await promptOrFlag(undefined, async () => (await inquirer2.prompt([{
       type: "input",
       name: "value",
       message: "Size:",
       validate: (v) => parseFloat(v) > 0 ? true : "Must be a positive number"
     }])).value);
+    const size = parseFloat(sizeStr);
     const orderType = z23.enum(["limit", "market"]).parse(options.orderType || "market");
     let price;
     if (orderType === "limit") {
-      price = options.price ? parseFloat(options.price) : parseFloat((await inquirer2.prompt([{
+      const priceStr = options.price ?? await promptOrFlag(undefined, async () => (await inquirer2.prompt([{
         type: "input",
         name: "value",
         message: "Limit price:",
         validate: (v) => parseFloat(v) > 0 ? true : "Must be a positive number"
       }])).value);
+      price = parseFloat(priceStr);
     }
     request = {
       chain: "hyperliquid",
@@ -4846,15 +5032,22 @@ async function tradeCommand(options) {
       console.log(`  ${chalk5.dim("Price:")}  $${request.price}`);
   }
   console.log("");
-  const { confirm } = await inquirer2.prompt([{
-    type: "confirm",
-    name: "confirm",
-    message: "Execute this trade?",
-    default: false
-  }]);
-  if (!confirm) {
-    console.log(chalk5.dim("Trade cancelled."));
-    return;
+  if (!options.confirm) {
+    if (!isTTY()) {
+      exitMissingFlags("trade", [
+        { flag: "-y, --confirm", description: "Skip confirmation prompt" }
+      ]);
+    }
+    const { confirm } = await inquirer2.prompt([{
+      type: "confirm",
+      name: "confirm",
+      message: "Execute this trade?",
+      default: false
+    }]);
+    if (!confirm) {
+      console.log(chalk5.dim("Trade cancelled."));
+      return;
+    }
   }
   const spinner = ora4("Executing trade...").start();
   try {
@@ -5449,6 +5642,7 @@ import chalk14 from "chalk";
 import ora13 from "ora";
 import fs2 from "fs";
 import path2 from "path";
+import { z as z26 } from "zod";
 function getBaseUrl() {
   const creds = getCredentials();
   return creds.NEXT_PUBLIC_SITE_URL || "https://cabal.trading";
@@ -5459,8 +5653,7 @@ async function fetchSkillJson() {
   if (!res.ok) {
     throw new Error(`Failed to fetch skill manifest: ${res.status} ${res.statusText}`);
   }
-  const data = await res.json();
-  return { files: data.files || {}, descriptions: data.descriptions || {} };
+  return skillManifestSchema.parse(await res.json());
 }
 function readInstalledManifest(dir) {
   const manifestPath = path2.join(dir, MANIFEST_FILE);
@@ -5608,10 +5801,14 @@ function formatBytes(bytes) {
   const kb = bytes / 1024;
   return `${kb.toFixed(1)} KB`;
 }
-var MANIFEST_FILE = ".cabal-skills.json";
+var MANIFEST_FILE = ".cabal-skills.json", skillManifestSchema;
 var init_skill = __esm(() => {
   init_env();
   init_errors2();
+  skillManifestSchema = z26.object({
+    files: z26.record(z26.string(), z26.string()).optional().default({}),
+    descriptions: z26.record(z26.string(), z26.string()).optional().default({})
+  });
 });
 
 // src/index.ts
@@ -5653,7 +5850,7 @@ if (process.argv.includes("--mcp")) {
     printBanner(chalk15);
     await loginCommand2(options);
   });
-  program.command("onboard").description("Guided setup wizard — connect, profile, avatar, verify").option("--step <step>", "Jump to a specific step: connect, profile, avatar, verify").action(async (options) => {
+  program.command("onboard").description("Guided setup wizard — connect, profile, avatar, verify").option("--step <step>", "Jump to a specific step: connect, profile, avatar, verify").option("--name <name>", "Display name").option("--handle <handle>", "Unique handle").option("--bio <bio>", "Agent bio").option("--strategy <strategy>", "Trading strategy").option("--avatar <description>", "Generate avatar from this description").option("--avatar-id <id>", "Select an existing avatar generation by ID").option("--skip-avatar", "Skip avatar step").option("--tweet-url <url>", "Tweet URL for verification").option("--skip-verify", "Skip verification step").option("-y, --confirm", "Auto-continue through wizard (required in non-TTY)").action(async (options) => {
     printBanner(chalk15);
     await onboardCommand2(options);
   });
@@ -5662,7 +5859,7 @@ if (process.argv.includes("--mcp")) {
 `));
     await statusCommand2();
   });
-  program.command("trade").description("Execute a trade on Solana or Hyperliquid").option("-c, --chain <chain>", "Chain: solana or hyperliquid").option("-i, --input <token>", "Solana: input token symbol").option("-o, --output <token>", "Solana: output token symbol").option("-a, --amount <amount>", "Solana: amount of input token").option("--coin <coin>", "Hyperliquid: coin symbol").option("--side <side>", "Hyperliquid: buy or sell").option("--size <size>", "Hyperliquid: position size").option("--order-type <type>", "Hyperliquid: market or limit").option("--price <price>", "Hyperliquid: limit price").option("--model <model>", "AI model name for attribution").action(async (options) => {
+  program.command("trade").description("Execute a trade on Solana or Hyperliquid").option("-c, --chain <chain>", "Chain: solana or hyperliquid").option("-i, --input <token>", "Solana: input token symbol").option("-o, --output <token>", "Solana: output token symbol").option("-a, --amount <amount>", "Solana: amount of input token").option("--coin <coin>", "Hyperliquid: coin symbol").option("--side <side>", "Hyperliquid: buy or sell").option("--size <size>", "Hyperliquid: position size").option("--order-type <type>", "Hyperliquid: market or limit").option("--price <price>", "Hyperliquid: limit price").option("--model <model>", "AI model name for attribution").option("-y, --confirm", "Skip confirmation prompt").action(async (options) => {
     console.log(chalk15.green.bold("Cabal") + chalk15.dim(` • Trade
 `));
     await tradeCommand2(options);

package/dist/mcp-server.js

@@ -3871,7 +3871,7 @@ async function createServer() {
       const res = await fetch(`${baseUrl}/skill.json`);
       if (!res.ok)
         throw new Error(`Failed to fetch skill.json: ${res.status}`);
-      const data = await res.json();
+      const data = z22.record(z22.string(), z22.unknown()).parse(await res.json());
       return textResult(data);
     } catch (error) {
       return textResult(toStructuredError(error));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabaltrading/cli",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "CLI for Cabal - connect your AI agent and start trading.",
   "keywords": [
     "cabal",
@@ -54,4 +54,4 @@
   "engines": {
     "node": ">=18.0.0"
   }
-}
+}