@candledottv/cli 0.11.14 → 0.11.15

package/dist/index.js

@@ -42842,20 +42842,20 @@ var require_resolve = __commonJS((exports) => {
     return false;
   }
   function countKeys(schema) {
-    let count = 0;
+    let count2 = 0;
     for (const key in schema) {
       if (key === "$ref")
         return Infinity;
-      count++;
+      count2++;
       if (SIMPLE_INLINED.has(key))
         continue;
       if (typeof schema[key] == "object") {
-        (0, util_1.eachItem)(schema[key], (sch) => count += countKeys(sch));
+        (0, util_1.eachItem)(schema[key], (sch) => count2 += countKeys(sch));
       }
-      if (count === Infinity)
+      if (count2 === Infinity)
         return Infinity;
     }
-    return count;
+    return count2;
   }
   function getFullPath(resolver, id = "", normalize4) {
     if (normalize4 !== false)
@@ -45910,8 +45910,8 @@ var require_contains = __commonJS((exports) => {
       cxt.result(valid, () => cxt.reset());
       function validateItemsWithCount() {
         const schValid = gen2.name("_valid");
-        const count = gen2.let("count", 0);
-        validateItems(schValid, () => gen2.if(schValid, () => checkLimits(count)));
+        const count2 = gen2.let("count", 0);
+        validateItems(schValid, () => gen2.if(schValid, () => checkLimits(count2)));
       }
       function validateItems(_valid, block2) {
         gen2.forRange("i", 0, len, (i) => {
@@ -45924,16 +45924,16 @@ var require_contains = __commonJS((exports) => {
           block2();
         });
       }
-      function checkLimits(count) {
-        gen2.code((0, codegen_1._)`${count}++`);
+      function checkLimits(count2) {
+        gen2.code((0, codegen_1._)`${count2}++`);
         if (max === undefined) {
-          gen2.if((0, codegen_1._)`${count} >= ${min}`, () => gen2.assign(valid, true).break());
+          gen2.if((0, codegen_1._)`${count2} >= ${min}`, () => gen2.assign(valid, true).break());
         } else {
-          gen2.if((0, codegen_1._)`${count} > ${max}`, () => gen2.assign(valid, false).break());
+          gen2.if((0, codegen_1._)`${count2} > ${max}`, () => gen2.assign(valid, false).break());
           if (min === 1)
             gen2.assign(valid, true);
           else
-            gen2.if((0, codegen_1._)`${count} >= ${min}`, () => gen2.assign(valid, true));
+            gen2.if((0, codegen_1._)`${count2} >= ${min}`, () => gen2.assign(valid, true));
         }
       }
     }
@@ -49845,7 +49845,7 @@ var init_convert = __esm(() => {
 });
 
 // ../mcp/src/version.ts
-var SERVER_VERSION = "0.10.5";
+var SERVER_VERSION = "0.10.6";
 
 // ../mcp/src/update-notice.ts
 function newer(a, b) {
@@ -49881,7 +49881,7 @@ var init_update_notice = __esm(() => {
 });
 
 // ../mcp/src/orchestrate.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 function requireApiKey(cfg) {
   if (!cfg.apiKey) {
     throw new Error("CANDLE_AGENT_API_KEY is required for this tool. Set it in the environment or MCP client config.");
@@ -49993,7 +49993,7 @@ async function readPaperInventory(cfg, doFetch, extra) {
 }
 async function executeTrade(args, cfg, doFetch) {
   const apiKey = requireApiKey(cfg);
-  const clientTradeId = args.clientTradeId ?? randomUUID5();
+  const clientTradeId = args.clientTradeId ?? randomUUID6();
   if (args.amount !== undefined && args.percent !== undefined) {
     return errText("pass exactly one of amount or percent, not both", { clientTradeId });
   }
@@ -50131,7 +50131,7 @@ async function executeTrade(args, cfg, doFetch) {
 }
 async function executeLaunchAndSeed(args, cfg, doFetch) {
   const apiKey = requireApiKey(cfg);
-  const clientLaunchId = args.clientLaunchId ?? randomUUID5();
+  const clientLaunchId = args.clientLaunchId ?? randomUUID6();
   const { devBuy, dryRun, buyAmount: _rawBuyAmount, ...launchFields } = args;
   let buyAmount;
   if (devBuy !== undefined) {
@@ -50860,7 +50860,164 @@ async function executePerps(tool, args, cfg, env, fetch2) {
     return fail3("MCP_TRANSPORT", error instanceof Error ? error.message : "The perps call failed.");
   }
 }
-var decimal3, wallet, submit, perpsShapes, PATHS, Refusal;
+function rawUnits(amount, decimals) {
+  const [whole = "", fraction = ""] = amount.split(".");
+  if (fraction.length > decimals)
+    return null;
+  const raw = BigInt(whole + fraction.padEnd(decimals, "0"));
+  return raw > 0n ? raw.toString() : null;
+}
+function pickWallet(rows, chain2, name2, what) {
+  const onChain = rows.filter((row) => row.chain === chain2);
+  const matches2 = name2 === undefined ? onChain : onChain.filter((row) => row.id === name2 || row.label === name2 || row.address.toLowerCase() === name2.toLowerCase());
+  if (matches2.length !== 1)
+    throw new Refusal(fail3("TEE_WALLET_REQUIRED", onChain.length === 0 ? `This key has no ${what} bound to it.` : `Name exactly one ${what}: ${onChain.map((row) => row.label ?? row.id).join(", ")}`));
+  return matches2[0];
+}
+function depositProblem(build, expect) {
+  const destination = build.destination ?? {};
+  const fee = build.fee ?? {};
+  const same = (a, b) => typeof a === "string" && a.toLowerCase() === b.toLowerCase();
+  if (build.walletId !== expect.walletId)
+    return "the build names another paying wallet";
+  if (build.asset !== expect.asset || build.amountRaw !== expect.amountRaw)
+    return "the build is for another amount";
+  if (destination.chainId !== HYPERLIQUID_RELAY_CHAIN_ID2)
+    return "the build does not land on Hyperliquid";
+  if (destination.currency !== HYPERLIQUID_RELAY_USDC2)
+    return "the build does not deliver Hyperliquid USDC";
+  if (!same(destination.address, expect.account))
+    return "the build lands on another account";
+  if (fee.bps !== 0 || fee.feeRaw !== "0")
+    return "the build carries a Candle fee";
+  if (expect.hood !== (build.chain === "hood"))
+    return "the build pays from the wrong chain";
+  if (!expect.hood && !(Array.isArray(build.transactionsBase64) && build.transactionsBase64.length === 1))
+    return "the build is not one Solana deposit";
+  return null;
+}
+async function executePerpsDeposit(args, cfg, env, fetch2) {
+  if (!cfg.apiKey)
+    return fail3("MCP_VALIDATION", "CANDLE_AGENT_API_KEY is required for this tool.");
+  const asset = args.asset;
+  const spec = DEPOSIT_ASSETS[asset];
+  if (!spec)
+    return fail3("MCP_VALIDATION", "asset must be SOL, USDC, ETH or USDG.");
+  const amountRaw = typeof args.amount === "string" ? rawUnits(args.amount, spec.decimals) : null;
+  if (!amountRaw)
+    return fail3("MCP_VALIDATION", `amount must be a positive ${asset} amount with at most ${spec.decimals} decimals.`);
+  const hood = spec.chain === "evm";
+  const clientDepositId = typeof args.clientDepositId === "string" ? args.clientDepositId : `deposit-${crypto.randomUUID()}`;
+  const willSubmit = args.submit !== false;
+  let signerPem = null;
+  if (willSubmit) {
+    const pemFile = env.CANDLE_KEY_SIGNER_PEM_FILE?.trim();
+    if (!pemFile)
+      return fail3("SIGNER_UNAVAILABLE", "Set CANDLE_KEY_SIGNER_PEM_FILE to the key signer PEM (candle tee signer new --out <pem>) to sign a deposit.");
+    try {
+      signerPem = await readFile9(pemFile, "utf8");
+      createPrivateKey2(signerPem);
+    } catch {
+      return fail3("SIGNER_UNAVAILABLE", "CANDLE_KEY_SIGNER_PEM_FILE does not hold a readable private key PEM.");
+    }
+  }
+  try {
+    const listed = await call(cfg, fetch2, "GET", "/api/v1/agent/wallets/trading");
+    if (!(Array.isArray(listed.scopes) && listed.scopes.includes("swap:write")))
+      throw new Refusal(fail3("SCOPE_MISSING", "A deposit needs swap:write on the key."));
+    const rows = Array.isArray(listed.page) ? listed.page : [];
+    const appId = typeof listed.privyAppId === "string" ? listed.privyAppId : "";
+    const name2 = typeof args.wallet === "string" ? args.wallet : undefined;
+    const source = pickWallet(rows, spec.chain, name2, `${hood ? "Hood" : "Solana"} TEE wallet`);
+    if (hood && args.perpsWallet !== undefined)
+      return fail3("MCP_VALIDATION", "From a Hood TEE wallet the deposit lands on that wallet's own account; omit perpsWallet.");
+    const account = hood ? source : pickWallet(rows, "evm", typeof args.perpsWallet === "string" ? args.perpsWallet : undefined, "EVM TEE wallet");
+    const build = await call(cfg, fetch2, "POST", "/api/v1/agent/perps/deposit", {
+      clientDepositId,
+      walletId: source.id,
+      asset,
+      amountRaw,
+      ...typeof args.maxSlippageBps === "number" ? { maxSlippageBps: args.maxSlippageBps } : {},
+      ...hood ? {} : { perpsWalletId: account.id }
+    });
+    if (build.job !== undefined)
+      return { text: JSON.stringify(build) };
+    const problem = depositProblem(build, { walletId: source.id, asset, amountRaw, account: account.address, hood });
+    if (problem)
+      return fail3("PERPS_BUILD_REFUSED", `Refused to sign this deposit: ${problem}. Nothing was signed.`);
+    if (!willSubmit || signerPem === null)
+      return { text: JSON.stringify({ ...build, signed: false, submitted: false }) };
+    if (!appId || !source.privyWalletId)
+      return fail3("SIGNER_UNAVAILABLE", "The server did not return its relay identifiers.");
+    const pem = signerPem;
+    const relaySign2 = async (body2) => {
+      const payload = hyperliquidCanonicalJson2({
+        body: body2,
+        headers: { "privy-app-id": appId },
+        method: "POST",
+        url: `https://api.privy.io/v1/wallets/${source.privyWalletId}/rpc`,
+        version: 1
+      });
+      const authorizationSignature2 = sign5("sha256", Buffer.from(payload), pem).toString("base64");
+      const relay = await call(cfg, fetch2, "POST", `/api/v1/agent/wallets/${encodeURIComponent(source.id)}/sign`, {
+        authorizationSignature: authorizationSignature2,
+        body: body2
+      });
+      if (typeof relay.signedTransaction !== "string")
+        throw new Refusal(fail3("INVALID_RESPONSE", "The relay did not return a signed transaction."));
+      return relay.signedTransaction;
+    };
+    const ids = { clientDepositId, depositId: build.depositId };
+    const submitPath = "/api/v1/agent/perps/deposit/submit";
+    if (!hood) {
+      const transaction = build.transactionsBase64[0];
+      const signed = await relaySign2({ method: "signTransaction", params: { encoding: "base64", transaction } });
+      return {
+        text: JSON.stringify(await call(cfg, fetch2, "POST", submitPath, { ...ids, signedTransactionsBase64: [signed] }))
+      };
+    }
+    const allowed = asset === "USDG" ? ["approval", "bridgeDeposit"] : ["bridgeDeposit"];
+    const planned = build.plannedLegCount;
+    const hex4 = (value) => `0x${BigInt(String(value)).toString(16)}`;
+    const signedKinds = new Set;
+    let body = build;
+    while (body.mode === "sequenced") {
+      const leg = body.nextLeg;
+      const kind = String(body.legKind);
+      if (!leg || body.operationId !== build.operationId || body.plannedLegCount !== planned || typeof planned !== "number" || planned > allowed.length || !allowed.includes(kind) || signedKinds.has(kind) || leg.chainId !== 4663)
+        return fail3("PERPS_BUILD_REFUSED", `Refused to sign deposit leg ${kind}: it is not the plan this deposit was built with.`, { clientDepositId, operationId: build.operationId });
+      signedKinds.add(kind);
+      const signed = await relaySign2({
+        method: "eth_signTransaction",
+        params: {
+          transaction: {
+            chain_id: leg.chainId,
+            data: leg.data,
+            from: source.address,
+            gas_limit: hex4(leg.gas),
+            max_fee_per_gas: hex4(leg.maxFeePerGas),
+            max_priority_fee_per_gas: hex4(leg.maxPriorityFeePerGas),
+            nonce: leg.nonce,
+            to: leg.to,
+            type: 2,
+            value: hex4(leg.value)
+          }
+        }
+      });
+      body = await call(cfg, fetch2, "POST", submitPath, {
+        ...ids,
+        operationId: build.operationId,
+        signedTransaction: signed
+      });
+    }
+    return { text: JSON.stringify({ ...body, clientDepositId }) };
+  } catch (error) {
+    if (error instanceof Refusal)
+      return error.tool;
+    return fail3("MCP_TRANSPORT", error instanceof Error ? error.message : "The deposit call failed.");
+  }
+}
+var decimal3, wallet, submit, perpsShapes, PATHS, Refusal, HYPERLIQUID_RELAY_CHAIN_ID2 = 1337, HYPERLIQUID_RELAY_USDC2 = "0x00000000000000000000000000000000", DEPOSIT_ASSETS, perpsDepositShape;
 var init_perps = __esm(() => {
   init_zod();
   init_hyperliquid();
@@ -50919,6 +51076,97 @@ var init_perps = __esm(() => {
       this.tool = tool;
     }
   };
+  DEPOSIT_ASSETS = {
+    SOL: { chain: "solana", decimals: 9 },
+    USDC: { chain: "solana", decimals: 6 },
+    ETH: { chain: "evm", decimals: 18 },
+    USDG: { chain: "evm", decimals: 6 }
+  };
+  perpsDepositShape = {
+    asset: exports_external.enum(["SOL", "USDC", "ETH", "USDG"]).describe("What to deposit. SOL or USDC pay from the key's Solana TEE wallet; ETH or USDG from its Hood one."),
+    amount: decimal3.describe('Amount of the asset, decimal (e.g. "25")'),
+    wallet: exports_external.string().optional().describe("The paying TEE wallet by id, address or label. Omit when the key has exactly one on that chain."),
+    perpsWallet: exports_external.string().optional().describe("From Solana only: the EVM TEE wallet whose Hyperliquid account receives it. Omit when the key has one."),
+    clientDepositId: exports_external.string().regex(/^[A-Za-z0-9._:-]{1,128}$/).optional().describe("Idempotency id; the same id answers the deposit it already built. Default: a new one."),
+    maxSlippageBps: exports_external.number().int().min(1).max(1000).optional().describe("Relay slippage (default 100)"),
+    submit
+  };
+});
+
+// ../mcp/src/plans.ts
+function planLabel2(plan) {
+  return Object.hasOwn(PLAN_LABELS2, plan) ? PLAN_LABELS2[plan] : plan;
+}
+function formatPlanBps2(bps) {
+  return bps === 0 ? "none" : `${Number((bps / 100).toFixed(4))}%`;
+}
+function count2(n) {
+  return n.toLocaleString("en-US");
+}
+function priceCell2(entry) {
+  if (entry.price)
+    return `$${count2(entry.price.pricePerMonthUsd)} a month`;
+  return entry.plan === "free" ? "free" : "not sold";
+}
+function planTableRows2(table) {
+  const plans2 = table.plans;
+  const row = (label, cell) => [label, ...plans2.map(cell)];
+  const rows = [
+    row("Price", priceCell2),
+    row("Agent trade fee", (e) => formatPlanBps2(e.feeBps)),
+    row("Perps builder fee", (e) => formatPlanBps2(e.perpFeeBps)),
+    row("Requests per minute", (e) => count2(e.limits.rateLimitPerMin)),
+    row("Launches per day", (e) => count2(e.limits.dailyLaunchCap)),
+    row("Uploads per minute", (e) => count2(e.limits.uploadsPerMin)),
+    row("Linked wallets", (e) => count2(e.limits.linkedWallets))
+  ];
+  const known = Object.keys(PLAN_CAPABILITY_LABELS2);
+  const served = new Set;
+  for (const entry of plans2)
+    for (const key of Object.keys(entry.capabilities ?? {}))
+      served.add(key);
+  const keys = [
+    ...known.filter((k) => served.has(k)),
+    ...[...served].filter((k) => !Object.hasOwn(PLAN_CAPABILITY_LABELS2, k))
+  ];
+  for (const key of keys) {
+    const label = Object.hasOwn(PLAN_CAPABILITY_LABELS2, key) ? PLAN_CAPABILITY_LABELS2[key] : key;
+    rows.push(row(label, (e) => {
+      const value = e.capabilities?.[key];
+      return value === true ? "yes" : value === false ? "no" : "-";
+    }));
+  }
+  return { headers: ["", ...plans2.map((e) => planLabel2(e.plan))], rows };
+}
+function planPromotionLine2(table) {
+  if (!(table.promoMaxDays > 0))
+    return null;
+  const days = table.promoMaxDays === 1 ? "1 day" : `${table.promoMaxDays} days`;
+  return `A first Pro purchase includes Max for its first ${days}, then continues on Pro.`;
+}
+function planTableMarkdown(table) {
+  const { headers: headers2, rows } = planTableRows2(table);
+  const line = (cells) => `| ${cells.map((c) => c.replace(/\|/g, "\\|")).join(" | ")} |`;
+  return [line(headers2), line(headers2.map(() => "---")), ...rows.map(line)].join(`
+`);
+}
+var PLAN_CAPABILITY_NOTE2 = "A capability marked yes is what the plan allows. It is subject to the deployment's own switches (perps and own-wallet bridges each have one) and to the wallet, scopes and setup the feature needs.", PLAN_CAPABILITY_LABELS2, PLAN_LABELS2;
+var init_plans = __esm(() => {
+  PLAN_CAPABILITY_LABELS2 = {
+    tradeCandleTokens: "Trade Candle-launched tokens",
+    tradeBaseAssets: "Trade base assets",
+    freeBaseTransfers: "Base-pair swaps and own-wallet bridges (when enabled), no Candle fee",
+    sellExternalTokens: "Sell tokens not launched on Candle",
+    buyExternalTokens: "Buy tokens not launched on Candle",
+    hyperliquidPerps: "Hyperliquid perps (when enabled)",
+    selfLaunch: "Self-launch from a linked wallet",
+    atomicLaunch: "Atomic launch with first buys",
+    createLinkedWallets: "Create linked wallets",
+    importLinkedWallets: "Import linked wallets",
+    limitOrders: "Limit orders",
+    quant: "Quant on Telegram"
+  };
+  PLAN_LABELS2 = { free: "Free", believer: "Believer", pro: "Pro", max: "Max" };
 });
 
 // ../mcp/src/tools.ts
@@ -51019,6 +51267,9 @@ function buildRequest(name2, args, cfg) {
         init: { method: "GET", headers: jsonHeaders() }
       };
     }
+    case "candle_get_plans": {
+      return { url: `${base2}/api/v1/agent/plans`, init: { method: "GET", headers: jsonHeaders() } };
+    }
     case "candle_swap": {
       const apiKey = requireApiKey2(cfg);
       return {
@@ -51088,6 +51339,22 @@ function buildRequest(name2, args, cfg) {
     }
   }
 }
+function plansMarkdown(body) {
+  try {
+    const table = JSON.parse(body);
+    if (!Array.isArray(table.plans))
+      return "";
+    const promotion = planPromotionLine2(table);
+    const markdown = `${planTableMarkdown(table)}
+
+${PLAN_CAPABILITY_NOTE2}`;
+    return promotion ? `${markdown}
+
+${promotion}` : markdown;
+  } catch {
+    return "";
+  }
+}
 async function callAndRelay(name2, args, cfg) {
   const { url, init } = buildRequest(name2, args, cfg);
   const res = await fetch(url, init);
@@ -51142,6 +51409,24 @@ MARKET_NOT_FOUND means Candle has no market for that token and this could not ru
     description: "Read a Candle user's public agent profile: whether agent features are enabled and launch counts.",
     inputSchema: getAgentProfileShape
   }, async (args) => callAndRelay("candle_get_agent_profile", args, cfg));
+  register("candle_get_plans", {
+    title: "Plans: prices, fees, limits and what each can do",
+    description: "The plan table this Candle deployment serves (GET /api/v1/agent/plans). No key needed. Reads only. For " + "each plan: price (null when not sold), feeBps (the agent fee charged on top of every trade or dev buy the " + "API builds), perpFeeBps (the Hyperliquid builder fee), limits for a new key (requests per minute, launches " + "per day, uploads per minute, linked wallets) and capabilities: buyExternalTokens, sellExternalTokens, " + "tradeBaseAssets, tradeCandleTokens, selfLaunch, atomicLaunch, createLinkedWallets, importLinkedWallets, " + "hyperliquidPerps, limitOrders, quant, freeBaseTransfers. promoMaxDays is the days of Max a first Pro " + "purchase includes (0: no promotion). Quote prices and fees from here, never from memory: they differ by " + "deployment and change at the three-plan launch (Free, Pro, Max). The account's own plan and fee are in " + "candle_execution_status's tier. A TIER_REQUIRED refusal names a capability this table shows the account's " + "plan lacks. A capability true here is plan eligibility, not deployment availability: perps and own-wallet bridges " + "are each behind a deployment switch and need their wallet, scopes and setup. Returns the server's JSON, then the same table as Markdown.",
+    inputSchema: {}
+  }, async () => {
+    const { url, init } = buildRequest("candle_get_plans", {}, cfg);
+    const res = await fetch(url, init);
+    noteVersionHeaders(res);
+    const text = await res.text();
+    if (!res.ok)
+      return { content: [{ type: "text", text }], isError: true };
+    return {
+      content: [
+        { type: "text", text },
+        { type: "text", text: plansMarkdown(text) }
+      ]
+    };
+  });
   register("candle_get_operation", {
     title: "What happened to a write",
     description: "Look up a trade or launch by the id its write used, and find out whether it landed. " + `Reads only; moves nothing.
@@ -51172,7 +51457,7 @@ MARKET_NOT_FOUND means Candle has no market for that token and this could not ru
   }, async (args) => callAndRelay("candle_set_profile_wallets", args, cfg));
   register("candle_get_profile_pnl", {
     title: "Read an agent profile's P&L",
-    description: "Realized profit for this profile's own fills, the Candle fees charged against it, and the " + "positions it still holds with their cost basis, each MARKED at Candle's current price where one " + "exists: `markPriceUsd`, `marketValueUsd` and `unrealizedUsd` per position, and `unrealizedUsd` " + "overall. A position with no price is counted in `unmarkedPositions` and left out of unrealized, " + "never valued at zero; `oldestMarkAt` says how old the marks are. Deposits, withdrawals and " + "transfers are excluded: funding a wallet is not profit. Check `unvalued` and `truncated` before " + "quoting the number; they mean the total is partial. `pnl.byWallet` splits the same fills by the " + "wallet that paid for each trade (main or linked, with the linked wallet's label), one row per " + "wallet with the same figures, for tracking one strategy per wallet. Each row is an independent " + "average-cost pool over its own fills, so the rows need not sum to the total (a token moved " + "between wallets, or two wallets holding one token at different costs); the total stays correct. " + "Every open position and every `byWallet` row (and its positions) carries `chain` ('solana' or " + "'hood'), and `pnl.byChain` has the total's figures over each chain's fills alone, both chains " + "always present, with `openPositions` there a count (the positions are in `pnl.openPositions`, by " + "`chain`). Each chain is its own average-cost pool, so the two need not sum exactly to the total. A " + "server that predates per-chain P&L omits `chain` and `byChain`. Reads only.",
+    description: "This profile's share of the account's P&L: realized profit on the sales it made, the Candle fees " + "charged against it, and the positions that belong to it (the wallet's bound key, else the key " + "whose buy opened them) with their cost basis, each MARKED at Candle's current price where one " + "exists: `markPriceUsd`, `marketValueUsd` and `unrealizedUsd` per position, and `unrealizedUsd` " + "overall. A position with no price is counted in `unmarkedPositions` and left out of unrealized, " + "never valued at zero; `oldestMarkAt` says how old the marks are. Deposits and withdrawals are " + "excluded: funding a wallet is not profit. Check `unvalued` and `truncated` before quoting the " + "number; they mean the total is partial. The figures come from the account's one P&L read, the " + "same as the console's, to the cent: `pnl.totalUsd` (realized net plus unrealized) is the " + "console's P&L. Positions live in wallets: each wallet is its own average-cost pool, the total " + "is the sum of `pnl.byWallet` (one row per wallet, main or linked, with the linked wallet's " + "label; `unknown:solana` or `unknown:hood` is the row for fills no record places in a wallet), " + "and one token held in two wallets is two positions, each with its `wallet`. A recorded move " + "between the account's wallets carries its cost and realizes nothing. Each position carries " + "`agent` (the key it belongs to) and `dust` when it is worth under one cent; dust stays listed " + "and counted, and `openPositionsExDust` leaves it out. `closed` gives the closed positions as " + "`madeUsd` + `lostUsd` + `partialSellsUsd` = `realizedNetUsd`, with `wins` and `losses`. " + "`lookback` and `truncated` are the account's activity bound, and `tradesConsidered` counts this " + "key's ledger fills. Since 2026-10-02 the total is the sum of wallets rather than one pool across " + "them, so realized figures can differ from earlier reads; a server that predates it omits " + "`totalUsd`, `closed`, `openPositionsExDust`, `wallet`, `agent` and `dust`. " + "Every open position and every `byWallet` row (and its positions) carries `chain` ('solana' or " + "'hood'), and `pnl.byChain` has the total's figures over each chain's fills alone, both chains " + "always present, with `openPositions` there a count (the positions are in `pnl.openPositions`, by " + "`chain`). The two chains sum to the total. A " + "server that predates per-chain P&L omits `chain` and `byChain`. While Hyperliquid is enabled, " + "`hyperliquid` separately reports main-perp realized gross, signed funding, fees (inclusive of builder fees), " + "and net = gross + funding - fees, for currently bound EVM TEE wallets since the current TEE binding. " + "Check `read` and `truncated`; historical bindings and unrealized perps are excluded. Reads only.",
     inputSchema: profilePnlShape
   }, async (args) => callAndRelay("candle_get_profile_pnl", args, cfg));
   register("candle_get_profile_trades", {
@@ -51242,6 +51527,8 @@ MARKET_NOT_FOUND means Candle has no market for that token and this could not ru
 
 ` + "Arguments: `mint` and `side` are required. Amounts are DECIMAL, never raw base units " + '(amount: "0.5", not lamports). Omitting the amount on a sell sells the whole ' + `position.
 
+` + "Plans: every plan can buy and sell Candle-launched tokens and base assets, and SELL a token it holds that " + "Candle did not launch. BUYING such a token needs Pro or Max (TIER_REQUIRED otherwise). Each trade pays the " + `plan's agent fee on top (feeBps in candle_get_plans).
+
 ` + "Pass `paper: true` to rehearse: every admission rule runs and the quote is recorded, but " + "nothing broadcasts and no funds move. A paper buy credits this key's paper inventory, " + "including for external Solana mints routed through Jupiter. A later sell by amount or " + "percent closes that book without reading the live wallet and without MARKET_NOT_FOUND " + "-- including when `paper` is omitted on the exit, as long as the paper position exists. " + "Do this before the first live trade of a new strategy, and whenever you are unsure a " + `trade would be admitted at all.
 
 ` + `After the call:
@@ -51272,7 +51559,7 @@ MARKET_NOT_FOUND means Candle has no market for that token and this could not ru
   }, perpsTool("candle_perps_setup"));
   register("candle_perps_open", {
     title: "Open a perps position",
-    description: "Open or add to a perpetual position on Hyperliquid's main perp exchange: a market order (IOC within " + "slippageBps of the mid) without `price`, a limit order with it, and optional reduce-only takeProfit and " + "stopLoss triggers. Free, Believer and Pro pay a 0.1% builder fee; Max pays none." + perpsWrite,
+    description: "Open or add to a perpetual position on Hyperliquid's main perp exchange: a market order (IOC within " + "slippageBps of the mid) without `price`, a limit order with it, and optional reduce-only takeProfit and " + "stopLoss triggers. Every plan except Max pays Candle a builder fee on each order (0.1% today; perpFeeBps in " + "candle_get_plans); Max pays none." + perpsWrite,
     inputSchema: perpsShapes.candle_perps_open
   }, perpsTool("candle_perps_open"));
   register("candle_perps_close", {
@@ -51300,6 +51587,14 @@ MARKET_NOT_FOUND means Candle has no market for that token and this could not ru
     description: "Set a market's leverage and margin mode (cross or isolated) on the account, within the key's maximum leverage." + perpsWrite,
     inputSchema: perpsShapes.candle_perps_leverage
   }, perpsTool("candle_perps_leverage"));
+  register("candle_perps_deposit", {
+    title: "Deposit to Hyperliquid",
+    description: "MOVES REAL FUNDS unless submit is false. Deposit onto the key's Hyperliquid account through Relay: SOL or " + "USDC from its Solana TEE wallet, or ETH or USDG from its Hood TEE wallet, credited as Hyperliquid perps " + "USDC at the key's EVM TEE wallet's own address (Candle resolves it; no recipient is taken). Refused below a " + "floor that covers Hyperliquid's 1 USDC first-deposit charge. No Candle fee. Needs swap:write and a raw cap " + "on the asset, and CANDLE_KEY_SIGNER_PEM_FILE to sign. There is no withdrawal from Hyperliquid yet.",
+    inputSchema: perpsDepositShape
+  }, async (args) => {
+    const result = await executePerpsDeposit(args, cfg, env, fetch);
+    return { content: [{ type: "text", text: result.text }], ...result.isError ? { isError: true } : {} };
+  });
 }
 var TOOL_NAMES, launchTokenShape, getMarketShape, tokenForensicsShape, getFeedShape, reportActivityShape, getAgentProfileShape, getOperationShape, resolveTokenShape, profileWalletsShape, profilePnlShape, profileTradesShape, setProfileWalletsShape, swapShape, tradeShape, _rawBuyAmount, seedableLaunchShape, launchAndSeedShape, transferShape, sweepShape;
 var init_tools = __esm(() => {
@@ -51307,6 +51602,7 @@ var init_tools = __esm(() => {
   init_convert();
   init_orchestrate();
   init_perps();
+  init_plans();
   init_update_notice();
   TOOL_NAMES = [
     "candle_launch_token",
@@ -51315,6 +51611,7 @@ var init_tools = __esm(() => {
     "candle_token_forensics",
     "candle_report_activity",
     "candle_get_agent_profile",
+    "candle_get_plans",
     "candle_trade",
     "candle_launch_and_seed",
     "candle_swap",
@@ -51335,7 +51632,8 @@ var init_tools = __esm(() => {
     "candle_perps_cancel",
     "candle_perps_orders",
     "candle_perps_positions",
-    "candle_perps_leverage"
+    "candle_perps_leverage",
+    "candle_perps_deposit"
   ];
   launchTokenShape = {
     clientLaunchId: exports_external.string().describe("Caller-chosen idempotency key, unique per account"),
@@ -51411,7 +51709,7 @@ var init_tools = __esm(() => {
     side: exports_external.enum(["buy", "sell"]),
     amount: exports_external.string().optional().describe("Decimal amount. Buys: how much of THIS TOKEN'S OWN quote asset to spend (SOL for a " + 'SOL-launched token, USDC for a USDC-quoted one, and so on: e.g. "0.5"). Sells: how many ' + "TOKENS to sell. Pass exactly one of amount or percent."),
     percent: exports_external.number().optional().describe("Sells only: sell this percent (integer 1-100) of the holding. Live trades size against the " + "embedded wallet. Paper trades (`paper: true`) size against this key's paper inventory -- " + "the position a previous paper buy credited -- because paper never moves the live wallet."),
-    quoteAsset: exports_external.string().optional().describe('What the wallet spends on a buy or receives on a sell: "sol", "usdc" or "cndl" on Solana, ' + '"eth" or "usdg" on Hood. Safe to pass through from candle_quote. On Solana it applies only ' + "to an arbitrary mint Candle never launched (Pro/Max) and is ignored for a Candle token, " + "whose quote comes from the token itself. On Hood it is the settlement asset of a DEX " + "trade; a USDG buy adds an approval transaction an ETH buy does not. It is not the route: " + "the cheapest path to the asset is chosen separately. Defaults to sol / ETH settlement."),
+    quoteAsset: exports_external.string().optional().describe('What the wallet spends on a buy or receives on a sell: "sol", "usdc" or "cndl" on Solana, ' + '"eth" or "usdg" on Hood. Echoing the `quoteAsset` a quote (POST /api/v1/trade/agent/quote) returned is safe. On Solana it applies only ' + "to an arbitrary mint Candle never launched (a buy needs Pro or Max; a sell works on any plan) and is ignored for a Candle token, " + "whose quote comes from the token itself. On Hood it is the settlement asset of a DEX " + "trade; a USDG buy adds an approval transaction an ETH buy does not. It is not the route: " + "the cheapest path to the asset is chosen separately. Defaults to sol / ETH settlement."),
     maxSlippageBps: exports_external.number().optional().describe("Max slippage in basis points; API default applies when omitted"),
     clientTradeId: exports_external.string().optional().describe("Idempotency key. Auto-generated when omitted and echoed in the result. Retrying with the " + "SAME id is safe (idempotent replay); a new id is a SECOND trade."),
     paper: exports_external.preprocess((value) => value === "true" || value === 1 || value === "1" ? true : value === "false" || value === 0 || value === "0" ? false : value, exports_external.boolean().optional().describe("Rehearse instead of trading. The request passes every admission rule a live trade passes " + "-- the same planner, spend gate, key cap and loss limits -- and records the quote, but " + "nothing is ever broadcast and no funds move. Use it to check that a strategy is admitted " + "before risking anything on it. A paper fill is optimistic by construction: it books the " + "quoted price, so the gap between a paper arm and a live one IS the execution cost. " + "A sell of a mint this key already paper-bought also closes that paper book when the " + "live wallet is empty, even if this flag is omitted."))
@@ -51461,12 +51759,13 @@ async function runStdioServer(env = process.env, transport = new StdioServerTran
 }
 var INSTRUCTIONS = `Candle is a trading and token-launch rail for agents. You hold a scoped API key, never a private key; signing and funding stay with the key owner's wallet.
 
-START HERE — five tools need NO credential. Call these first to confirm the server is wired before asking anyone for anything:
+START HERE — six tools need NO credential. Call these first to confirm the server is wired before asking anyone for anything:
   candle_get_market       price, market cap, volume, curve state for one token
   candle_get_feed         the roster: hot streak, new pairs, graduated, blue chip
   candle_resolve_token    a ticker or partial name -> mint address + chain
   candle_token_forensics  call this before quoting or buying. Returns the on-chain developer (never a launchpad shared authority; deployer.attribution names the launchpad or issuer when no developer is on chain), their went-to-zero rate and last coins, who bought in the deploy window (strangers in the same slot are the bundle signal), same-funder insider share, same-funder cluster, and safety.summary with six sourced flags. Refuse an unprompted buy when flagged; incomplete or unknown is not clearance. launch.deployerLaunches is an inclusive informational count, never a warning
   candle_get_agent_profile  your own tier, caps and verified activity
+  candle_get_plans        every plan's price, fees, limits and what it can do; quote these, never from memory
 
 COVERAGE — read this before you treat an error as a broken server.
 candle_get_feed indexes the wider market (pump.fun, pons.family and other external launchpads).
@@ -51558,7 +51857,7 @@ init_render();
 init_secret_store();
 
 // src/version.ts
-var CLI_VERSION = "0.11.14";
+var CLI_VERSION = "0.11.15";
 
 // src/commands/auth.ts
 init_keys_embedded_wallet();
@@ -52051,7 +52350,7 @@ var HELP = {
   doctor: {
     group: "Start here",
     summary: "Diagnose CLI setup: credentials, storage backend, API reachability, security key helper",
-    description: "One PASS/FAIL/SKIP table over the runtime, the storage backend, both credentials, API reachability, wallet delegation, the install method and whether the security key helper (candle-fido2) is beside the binary. Its output is meant to be pasted into a bug report. Exits nonzero on any FAIL.",
+    description: "One PASS/FAIL/SKIP table over the runtime, the storage backend, both credentials, API reachability, wallet delegation, the install method, the account's plan and its trade fee, and whether the security key helper (candle-fido2) is beside the binary. Its output is meant to be pasted into a bug report. Exits nonzero on any FAIL.",
     usage: ["candle doctor [--role owner|bot|auto]"],
     rows: [],
     examples: ["candle doctor", "candle doctor --json"],
@@ -52060,7 +52359,7 @@ var HELP = {
   swap: {
     group: "Trade",
     summary: "Quote, confirm and swap on Solana or Hood, bridge between them; read an operation by id",
-    description: "Swaps run through a TEE wallet's bound key: the quote is shown and confirmed before anything is sent, and the first buy after a launch is this command rather than part of the launch. The assets decide the chain (ETH, USDG or a 0x token is Hood; SOL, USDC, CNDL or a mint is Solana) and a named wallet must be on it. A Hood TEE wallet signs one leg at a time: approve, Permit2, trade, then the fee, each only after the one before it landed. SOL or USDC to ETH or USDG, or back, is a bridge through Relay from a TEE wallet into this key's own TEE wallet on the other chain (--to names it when there are several); Candle charges no fee, the key needs a raw cap on the origin asset, and this machine checks Relay's deposit before it is signed. The bridge prints its deposit and returns while Relay fills; --wait follows it for up to ten minutes. While it is open, a sweep of either wallet refuses BRIDGE_IN_FLIGHT for two hours. Vault to vault: fund the Solana TEE wallet from the vault, bridge, then disable and sweep the Hood TEE wallet into its vault.",
+    description: "Swaps run through a TEE wallet's bound key: the quote is shown and confirmed before anything is sent, and the first buy after a launch is this command rather than part of the launch. The assets decide the chain (ETH, USDG or a 0x token is Hood; SOL, USDC, CNDL or a mint is Solana) and a named wallet must be on it. A Hood TEE wallet signs one leg at a time: approve, Permit2, trade, then the fee, each only after the one before it landed. SOL or USDC to ETH or USDG, or back, is a bridge through Relay from a TEE wallet into this key's own TEE wallet on the other chain (--to names it when there are several); Candle charges no fee, the key needs a raw cap on the origin asset, and this machine checks Relay's deposit before it is signed. The bridge prints its deposit and returns while Relay fills; --wait follows it for up to ten minutes. While it is open, a sweep of either wallet refuses BRIDGE_IN_FLIGHT for two hours. Vault to vault: fund the Solana TEE wallet from the vault, bridge, then disable and sweep the Hood TEE wallet into its vault. Every plan can trade Candle-launched tokens and base assets, and sell a token it holds that was not launched on Candle; buying such a token needs Pro or Max (TIER_REQUIRED otherwise). Each trade pays the plan's agent fee on top; a base-pair swap or a bridge between this key's own wallets pays none. candle plans shows the fees in force.",
     usage: ["candle swap <from> <to> [flags]", "candle swap status <id>"],
     rows: [
       {
@@ -52126,14 +52425,18 @@ var HELP = {
   },
   perps: {
     group: "Trade",
-    summary: "Hyperliquid perpetuals from your EVM TEE wallet: setup, open, close, cancel, orders, positions, leverage",
-    description: "Trade perpetuals on Hyperliquid's main perp exchange from the EVM TEE wallet bound to this key (scope perps:write, opt-in). Candle builds each action within the key's limits; this machine recomputes its hash and checks the action type and Candle's builder before anything is signed, then Candle's relay signs and this machine submits to Hyperliquid. Free, Believer and Pro pay a 0.1% builder fee; Max pays none.",
+    summary: "Hyperliquid perpetuals from your EVM TEE wallet: setup, deposit, open, close, cancel, orders, positions, leverage",
+    description: "Trade perpetuals on Hyperliquid's main perp exchange from the EVM TEE wallet bound to this key (scope perps:write, opt-in). Candle builds each action within the key's limits; this machine recomputes its hash and checks the action type and Candle's builder before anything is signed, then Candle's relay signs and this machine submits to Hyperliquid. Every plan is eligible for perps, once the deployment has perps enabled. Every plan except Max pays Candle a builder fee on each order (0.1% today); Max pays none. candle plans shows the rate in force. Deposits move SOL, USDC, ETH or USDG onto the Hyperliquid account through Relay, and the account's P&L (candle pnl) carries a Hyperliquid section.",
     usage: ["candle perps <subcommand> [flags]"],
     rows: [
       {
         invocation: "setup [--wallet <tee>]",
         description: "Approve Candle's builder fee once; shows the account's mode and balance"
       },
+      {
+        invocation: "deposit <amount> <SOL|USDC|ETH|USDG> [--wallet <tee>] [--to <evm tee>] | deposit status <id>",
+        description: "Move funds onto the Hyperliquid account through Relay, from the key's Solana or Hood TEE wallet (swap:write); status reads one"
+      },
       {
         invocation: "open <coin> <long|short> <size> [--price <px>]",
         description: "Market (IOC) without --price, limit with it; optional --tp and --sl"
@@ -52150,20 +52453,27 @@ var HELP = {
     flags: [
       {
         invocation: "--wallet <tee>",
-        description: "The EVM TEE wallet by id, address or unique label (default: the only one)"
+        description: "The EVM TEE wallet by id, address or unique label (default: the only one); for deposit, the paying TEE wallet"
       },
       { invocation: "--tif <Gtc|Alo|Ioc>", description: "open with --price: time in force (default Gtc)" },
       {
         invocation: "--slippage-bps <n>",
-        description: "open at market and close: the bound against the mid (default 100)"
+        description: "open at market and close: the bound against the mid; deposit: Relay's slippage (default 100)"
       },
       { invocation: "--tp <px> / --sl <px>", description: "open: reduce-only take-profit and stop-loss triggers" },
+      {
+        invocation: "--to <evm tee>",
+        description: "deposit from Solana: the EVM TEE wallet whose account receives it"
+      },
+      { invocation: "--id <clientDepositId>", description: "deposit: the idempotency id (default: a new one)" },
+      { invocation: "--rpc-url <url>", description: "deposit from Solana: the RPC the deposit check reads" },
       { invocation: "--no-submit", description: "Build and check only; sign and submit nothing" },
       { invocation: "--sign-only", description: "Build, check and sign through the relay; submit nothing" },
       { invocation: "--yes", description: "Skip the confirmation prompt" }
     ],
     examples: [
       "candle perps setup",
+      "candle perps deposit 25 USDC",
       "candle perps open BTC long 0.01",
       "candle perps open ETH short 0.5 --price 3200 --tp 2900 --sl 3400",
       "candle perps close BTC",
@@ -52208,7 +52518,7 @@ var HELP = {
   launch: {
     group: "Trade",
     summary: "Create a token on Solana or Hood (the first buy is a separate swap)",
-    description: "Creates a token with no first buy, so the launch and the position are two decisions rather than one. Needs the launch:write scope and an operator-enabled allowLaunch. The wallet decides the chain: a Hood TEE wallet launches on Hood, needs --dex-version, and signs one leg at a time (the curve, then the fee), each only after the one before it landed.",
+    description: "Creates a token with no first buy, so the launch and the position are two decisions rather than one. Needs the launch:write scope and an operator-enabled allowLaunch. The wallet decides the chain: a Hood TEE wallet launches on Hood, needs --dex-version, and signs one leg at a time (the curve, then the fee), each only after the one before it landed. Launching from a TEE wallet needs Pro or Max (TIER_REQUIRED otherwise; candle plans).",
     usage: [
       "candle launch --name <name> --symbol <symbol> --image-url <url> --wallet <tee> [--quote-asset <asset>] [--dex-version v3|v4]"
     ],
@@ -52257,13 +52567,22 @@ var HELP = {
   },
   pnl: {
     group: "Account",
-    summary: "P&L per chain and combined: realized, fees, unrealized and open positions (--profile for one key's own)",
-    description: "Without --profile, the account's books: every profile, the web app and the CLI, one ledger, the same figures the web P&L chart shows. Needs a key with the Read scope (account:read). With --profile <name>, that profile's key reads its own P&L, with a row per paying wallet. Both show a Solana block, a Hood block, then the combined figure, and a CHAIN column on positions and wallet rows. Unpriced positions are shown as unpriced and never valued at zero. A bridge between Solana and Hood is not a trade: it opens and closes nothing, and bridge and Relay costs are not netted from P&L. Where Candle serves LP, DAMM v2 positions are included: realized (withdrawals against the cost basis at the add, plus claimed fees), unrealized (open positions at their share of the pool plus unclaimed fees, against that basis), and vs holding (what the deposited tokens would be worth held); the total then covers tokens and LP.",
+    summary: "P&L per chain and combined: realized, fees, unrealized and open positions (--profile for one key's share)",
+    description: "Without --profile, the account's books: every profile, the web app and the CLI, one ledger, the same figures the console shows, to the cent for the same moment. Needs a key with the Read scope (account:read). With --profile <name>, that profile's key reads its share of the same P&L: realized on the sales it made, and the open positions that belong to it (the wallet's bound key, else the key whose buy opened them), with a row per wallet that sums to the total. Positions live in wallets: each wallet is its own average-cost pool, the account is the sum of its wallets, and a recorded move between two of the account's wallets carries its cost and realizes nothing. Both show a Solana block, a Hood block, then the combined figure, the closed positions as money made, minus money lost, plus partial sells, and a CHAIN column (and WALLET, where the API names it) on positions. The account's books add a By agent table (each key, then Manual for web-app trades, then the account total). Unpriced positions are shown as unpriced and never valued at zero; a position worth under one cent is marked dust and still counted. A bridge between Solana and Hood is not a trade: it opens and closes nothing, and bridge and Relay costs are not netted from P&L. Where Candle serves LP, DAMM v2 positions are included: realized (withdrawals against the cost basis at the add, plus claimed fees), unrealized (open positions at their share of the pool plus unclaimed fees, against that basis), and vs holding (what the deposited tokens would be worth held); Total stays the console's token figure, and Total with LP covers tokens and LP.",
     usage: ["candle pnl [--profile <name>] [--json]"],
     rows: [],
     examples: ["candle pnl", "candle pnl --profile scalper --json"],
     env: ENV_API
   },
+  plans: {
+    group: "Account",
+    summary: "The plans this API serves: prices, fees, limits and what each can do",
+    description: "The plan table in force on the API this profile points at (GET /api/v1/agent/plans): each plan's monthly price, the agent trade fee, the Hyperliquid perps builder fee, the limits a new key gets, and one row per capability (buying and selling tokens not launched on Candle, self-launch, atomic launch, linked wallets, perps, limit orders). Every number is the server's; the CLI bundles none. Needs no key and sends none. Which plan this account is on is candle doctor's Plan row.",
+    usage: ["candle plans [--json]"],
+    rows: [],
+    examples: ["candle plans", "candle plans --json", "candle plans --api-url https://staging.api.candle.tv"],
+    env: ["CANDLE_API_URL"]
+  },
   keys: {
     group: "Account",
     summary: "API keys, and the wallets each key may use",
@@ -52673,9 +52992,16 @@ var HELP = {
     group: "Maintain",
     summary: "Verify a release asset's Sigstore bundle",
     description: "Verifies a release asset against the trusted root compiled into this binary. No network, no credentials, and nothing else installed: the bundle carries the certificate and the transparency-log entry.",
-    usage: ["candle verify <file> --bundle <path>"],
+    usage: ["candle verify <file> --bundle <path> [--identity <uri>] [--issuer <url>]"],
     rows: [],
-    flags: [{ invocation: "--bundle <path>", description: "The .sigstore.json bundle beside the asset" }],
+    flags: [
+      { invocation: "--bundle <path>", description: "The .sigstore.json bundle beside the asset" },
+      {
+        invocation: "--identity <uri>",
+        description: "The signing identity to require; defaults to the release identity for the version in a latest.json beside the bundle"
+      },
+      { invocation: "--issuer <url>", description: "The certificate issuer to require; defaults to GitHub Actions'" }
+    ],
     examples: ["candle verify ./candle-darwin-arm64 --bundle ./candle-darwin-arm64.sigstore.json"]
   },
   completion: {
@@ -60047,6 +60373,7 @@ var MCP_TOOL_NAMES = [
   "candle_get_feed",
   "candle_token_forensics",
   "candle_get_agent_profile",
+  "candle_get_plans",
   "candle_report_activity",
   "candle_trade",
   "candle_swap",
@@ -60067,14 +60394,16 @@ var MCP_TOOL_NAMES = [
   "candle_perps_cancel",
   "candle_perps_orders",
   "candle_perps_positions",
-  "candle_perps_leverage"
+  "candle_perps_leverage",
+  "candle_perps_deposit"
 ];
 var READ_ONLY_TOOL_NAMES = [
   "candle_get_market",
   "candle_get_feed",
   "candle_token_forensics",
   "candle_get_agent_profile",
-  "candle_resolve_token"
+  "candle_resolve_token",
+  "candle_get_plans"
 ];
 var CREDENTIAL_ENV_NAMES = [
   "CANDLE_API_KEY",
@@ -60177,7 +60506,9 @@ async function mcp(args, ctx) {
 
 // src/commands/perps.ts
 init_args();
-import { sign as sign3 } from "node:crypto";
+init_bridge();
+init_evm_lite();
+import { randomUUID as randomUUID4, sign as sign3 } from "node:crypto";
 
 // src/hyperliquid.ts
 init_sha3();
@@ -60995,6 +61326,318 @@ async function perpsOrders(args, ctx) {
     return tradingFailure(ctx, error);
   }
 }
+var HYPERLIQUID_RELAY_CHAIN_ID = 1337;
+var HYPERLIQUID_RELAY_USDC = "0x00000000000000000000000000000000";
+var DEPOSIT_ID_RE = /^[A-Za-z0-9._:-]{1,128}$/;
+var DEPOSIT_USAGE = "Usage: candle perps deposit <amount> <SOL|USDC|ETH|USDG> [--wallet <tee>] [--to <evm tee>] [--id <clientDepositId>] [--slippage-bps <n>] [--rpc-url <url>] [--yes] [--no-submit] | candle perps deposit status <clientDepositId>";
+function isDepositAsset(value) {
+  return value !== undefined && Object.hasOwn(BRIDGE_ASSETS, value);
+}
+function depositBuildProblem(build, expect) {
+  const destination = build.destination ?? {};
+  if (build.walletId !== expect.walletId)
+    return "the build names another paying wallet";
+  if (build.asset !== expect.asset || build.amountRaw !== expect.amountRaw)
+    return "the build is for another amount";
+  if (destination.chainId !== HYPERLIQUID_RELAY_CHAIN_ID)
+    return `the build lands on chain ${safeText(destination.chainId)}`;
+  if (destination.currency !== HYPERLIQUID_RELAY_USDC)
+    return "the build does not deliver Hyperliquid USDC";
+  if (typeof destination.address !== "string" || !sameEvmAddress(destination.address, expect.destination))
+    return `the build lands on ${safeText(destination.address)}, not ${expect.destination}`;
+  const fee = build.fee ?? {};
+  if (fee.bps !== 0 || fee.feeRaw !== "0")
+    return "the build carries a Candle fee";
+  return null;
+}
+async function perpsDepositStatus(ctx, id) {
+  const key = await tradingKey(ctx);
+  const result = await perpsRequest(ctx, key, `/api/v1/agent/perps/deposit/${encodeURIComponent(id)}`);
+  if (ctx.json)
+    return printTradingResult(ctx, result);
+  const job = result.job ?? {};
+  const destination = job.destination ?? {};
+  const relay = job.relay;
+  ctx.deps.stdout.write(`Deposit ${safeText(id)}: ${safeText(job.status)}${job.signature ? ` (${safeText(job.signature)})` : ""}, ${safeText(job.amountRaw)} raw ${safeText(job.asset)} to ${safeText(destination.address)} on Hyperliquid. Relay: ${relay ? safeText(relay.status) : "not sent yet, or unknown"}.
+`);
+  return 0;
+}
+async function perpsDeposit(args, ctx) {
+  if (args[0] === "status") {
+    if (args.length !== 2 || !DEPOSIT_ID_RE.test(args[1]))
+      return usage4(ctx, DEPOSIT_USAGE);
+    try {
+      return await perpsDepositStatus(ctx, args[1]);
+    } catch (error) {
+      return tradingFailure(ctx, error);
+    }
+  }
+  const parsed = parseArgs(args, {
+    valueFlags: ["--wallet", "--to", "--id", "--slippage-bps", "--rpc-url"],
+    booleanFlags: ["--yes", "--no-submit"]
+  });
+  if ("error" in parsed)
+    return usage4(ctx, parsed.error);
+  const [amount, asset] = parsed.positionals;
+  if (parsed.positionals.length !== 2 || !amount || !DEC_RE.test(amount) || !isDepositAsset(asset))
+    return usage4(ctx, DEPOSIT_USAGE);
+  const { values } = parsed;
+  const id = values["--id"] ?? `deposit-${randomUUID4()}`;
+  if (!DEPOSIT_ID_RE.test(id))
+    return usage4(ctx, "--id must be 1 to 128 letters, digits, '.', '_', ':' or '-'.");
+  const slippageBps = Number(values["--slippage-bps"] ?? "100");
+  if (!Number.isInteger(slippageBps) || slippageBps < 1 || slippageBps > 1000)
+    return usage4(ctx, "--slippage-bps must be a whole number from 1 to 1000.");
+  const origin = BRIDGE_ASSETS[asset].chain;
+  try {
+    const key = await tradingKey(ctx);
+    const payer = await tradingPayer(ctx, key, values["--wallet"], "swap:write", origin);
+    if (payer.kind !== "tee")
+      throw new TradingError("TEE_WALLET_REQUIRED", `A Hyperliquid deposit pays only from this key's ${origin === "hood" ? "Hood" : "Solana"} TEE wallet, and ${safeText(payer.address)} is the embedded wallet. Name the TEE wallet with --wallet. Nothing was built.`);
+    const wallet = payer.wallet;
+    let destination;
+    if (origin === "hood") {
+      if (values["--to"] !== undefined)
+        throw new TradingError("BRIDGE_DESTINATION_MISSING", "From a Hood TEE wallet the deposit lands on that wallet's own Hyperliquid account; drop --to. Nothing was built.");
+      destination = { id: wallet.id, address: wallet.address };
+    } else {
+      destination = (await perpsWallet(ctx, key, values["--to"])).row;
+    }
+    const amountRaw = rawAmount(amount, BRIDGE_ASSETS[asset].decimals);
+    ctx.deps.stderr.write(`Deposit: ${id}
+`);
+    const build = await perpsRequest(ctx, key, "/api/v1/agent/perps/deposit", {
+      clientDepositId: id,
+      walletId: wallet.id,
+      asset,
+      amountRaw,
+      maxSlippageBps: slippageBps,
+      ...origin === "solana" ? { perpsWalletId: destination.id } : {}
+    });
+    if (build.job)
+      return printTradingResult(ctx, build);
+    const refused = (problem2) => new TradingError("PERPS_BUILD_REFUSED", `Refused to sign this deposit: ${problem2}. Nothing was signed.`);
+    const problem = depositBuildProblem(build, {
+      walletId: wallet.id,
+      asset,
+      amountRaw,
+      destination: destination.address
+    });
+    if (problem)
+      throw refused(problem);
+    let sequenced;
+    let transaction;
+    const hoodOrigin = asset === "ETH" || asset === "USDG" ? asset : undefined;
+    if (hoodOrigin) {
+      const parsedLeg = sequencedSchema.safeParse(build);
+      if (!parsedLeg.success)
+        throw refused("Candle did not answer with a sequenced Hood leg");
+      sequenced = parsedLeg.data;
+      const plan = plannedLegKinds(sequenced.legKind, sequenced.plannedLegCount, false, "bridgeDeposit");
+      if (!bridgePlanAdmitted(hoodOrigin, plan))
+        throw refused(`the plan is ${sequenced.plannedLegCount} leg(s) starting with ${sequenced.legKind}`);
+      const legProblem = relayHoodLegProblem(sequenced.legKind, sequenced.nextLeg, {
+        origin: hoodOrigin,
+        payer: wallet.address,
+        amountRaw
+      });
+      if (legProblem)
+        throw refused(legProblem);
+    } else {
+      const txs = Array.isArray(build.transactionsBase64) ? build.transactionsBase64 : [];
+      if (txs.length !== 1 || typeof txs[0] !== "string")
+        throw refused(`Candle returned ${txs.length} transactions, not one deposit`);
+      transaction = txs[0];
+      const reader = await lazySolanaClient(ctx, values["--rpc-url"])();
+      const solanaProblem = await tradingRead(ctx, reader, () => relaySolanaDepositProblem(transaction, wallet.address, reader.rpc));
+      if (solanaProblem)
+        throw refused(solanaProblem);
+    }
+    const decimals = Number(build.outDecimals);
+    const minimum = decimalAmount(String(build.minimumOutRaw), decimals);
+    const estimate2 = decimalAmount(String(build.expectedOutRaw), decimals);
+    const output = ctx.json ? ctx.deps.stderr : ctx.deps.stdout;
+    output.write(`Deposit ${amount} ${asset} from ${safeText(wallet.address)} (${origin === "hood" ? "Hood" : "Solana"} TEE wallet) to Hyperliquid account ${safeText(destination.address)} through Relay.
+`);
+    output.write(`Relay delivers at least ${minimum} USDC (estimate ${estimate2})${build.firstDeposit ? "; Hyperliquid keeps 1 USDC to activate this new account" : ""}. Candle fee: none.
+`);
+    output.write("There is no withdrawal from Hyperliquid in this release, and `candle tee disable` or `tee sweep` do not reach it.\n");
+    if (sequenced)
+      output.write(`Legs, signed one at a time: ${sequenced.plannedLegCount === 2 ? "approval, bridgeDeposit" : "bridgeDeposit"}
+`);
+    if (parsed.booleans.has("--no-submit"))
+      return printTradingResult(ctx, { ...build, signed: false, submitted: false });
+    if (!parsed.booleans.has("--yes")) {
+      if (!ctx.deps.isTTY.stdin)
+        throw new TradingError("CONFIRMATION_REQUIRED", "Run interactively to confirm, or use --yes.");
+      if ((await ctx.deps.promptLine("Sign and send? [y/N] ")).trim().toLowerCase() !== "y") {
+        if (sequenced)
+          ctx.deps.stderr.write(`Nothing was signed. Operation ${sequenced.operationId} holds this wallet until ${new Date(sequenced.expiresAt).toISOString()}.
+`);
+        throw new TradingError("CANCELLED", "Nothing was signed.");
+      }
+    }
+    if (typeof build.expiresAt !== "number" || build.expiresAt <= ctx.deps.now())
+      throw new TradingError("QUOTE_EXPIRED", "The deposit build expired before signing. Start again with a new --id.");
+    let result;
+    if (sequenced && hoodOrigin) {
+      const run2 = await runSequencedLegs(ctx, key, {
+        wallet,
+        first: sequenced,
+        submitPath: "/api/v1/agent/perps/deposit/submit",
+        submitFields: { clientDepositId: id, depositId: build.depositId },
+        unwrap: (answer) => answer,
+        primaryLeg: "bridgeDeposit",
+        allowedLegs: bridgeLegKinds(hoodOrigin),
+        checkLeg: (kind, leg) => relayHoodLegProblem(kind, leg, { origin: hoodOrigin, payer: wallet.address, amountRaw }) === null,
+        onLanded: async () => {}
+      });
+      result = { ...run2.final, landedLegs: run2.landed };
+    } else {
+      const signed = await relaySign(ctx, key, wallet, transaction);
+      result = await perpsRequest(ctx, key, "/api/v1/agent/perps/deposit/submit", {
+        clientDepositId: id,
+        depositId: build.depositId,
+        signedTransactionsBase64: [signed]
+      });
+    }
+    ctx.deps.stderr.write(`Deposit sent; Relay fills it on Hyperliquid. Check it with candle perps deposit status ${id}.
+`);
+    return printTradingResult(ctx, {
+      ...result,
+      clientDepositId: id,
+      expectedOutRaw: build.expectedOutRaw,
+      minimumOutRaw: build.minimumOutRaw,
+      outDecimals: build.outDecimals
+    });
+  } catch (error) {
+    return tradingFailure(ctx, error);
+  }
+}
+
+// src/commands/plans.ts
+init_args();
+
+// src/plans.ts
+var PLAN_CAPABILITY_NOTE = "A capability marked yes is what the plan allows. It is subject to the deployment's own switches (perps and own-wallet bridges each have one) and to the wallet, scopes and setup the feature needs.";
+var PLAN_CAPABILITY_LABELS = {
+  tradeCandleTokens: "Trade Candle-launched tokens",
+  tradeBaseAssets: "Trade base assets",
+  freeBaseTransfers: "Base-pair swaps and own-wallet bridges (when enabled), no Candle fee",
+  sellExternalTokens: "Sell tokens not launched on Candle",
+  buyExternalTokens: "Buy tokens not launched on Candle",
+  hyperliquidPerps: "Hyperliquid perps (when enabled)",
+  selfLaunch: "Self-launch from a linked wallet",
+  atomicLaunch: "Atomic launch with first buys",
+  createLinkedWallets: "Create linked wallets",
+  importLinkedWallets: "Import linked wallets",
+  limitOrders: "Limit orders",
+  quant: "Quant on Telegram"
+};
+var PLAN_LABELS = { free: "Free", believer: "Believer", pro: "Pro", max: "Max" };
+function planLabel(plan) {
+  return Object.hasOwn(PLAN_LABELS, plan) ? PLAN_LABELS[plan] : plan;
+}
+function formatPlanBps(bps) {
+  return bps === 0 ? "none" : `${Number((bps / 100).toFixed(4))}%`;
+}
+function count(n) {
+  return n.toLocaleString("en-US");
+}
+function priceCell(entry) {
+  if (entry.price)
+    return `$${count(entry.price.pricePerMonthUsd)} a month`;
+  return entry.plan === "free" ? "free" : "not sold";
+}
+function planTableRows(table) {
+  const plans = table.plans;
+  const row = (label, cell) => [label, ...plans.map(cell)];
+  const rows = [
+    row("Price", priceCell),
+    row("Agent trade fee", (e) => formatPlanBps(e.feeBps)),
+    row("Perps builder fee", (e) => formatPlanBps(e.perpFeeBps)),
+    row("Requests per minute", (e) => count(e.limits.rateLimitPerMin)),
+    row("Launches per day", (e) => count(e.limits.dailyLaunchCap)),
+    row("Uploads per minute", (e) => count(e.limits.uploadsPerMin)),
+    row("Linked wallets", (e) => count(e.limits.linkedWallets))
+  ];
+  const known = Object.keys(PLAN_CAPABILITY_LABELS);
+  const served = new Set;
+  for (const entry of plans)
+    for (const key of Object.keys(entry.capabilities ?? {}))
+      served.add(key);
+  const keys = [
+    ...known.filter((k) => served.has(k)),
+    ...[...served].filter((k) => !Object.hasOwn(PLAN_CAPABILITY_LABELS, k))
+  ];
+  for (const key of keys) {
+    const label = Object.hasOwn(PLAN_CAPABILITY_LABELS, key) ? PLAN_CAPABILITY_LABELS[key] : key;
+    rows.push(row(label, (e) => {
+      const value = e.capabilities?.[key];
+      return value === true ? "yes" : value === false ? "no" : "-";
+    }));
+  }
+  return { headers: ["", ...plans.map((e) => planLabel(e.plan))], rows };
+}
+function planPromotionLine(table) {
+  if (!(table.promoMaxDays > 0))
+    return null;
+  const days = table.promoMaxDays === 1 ? "1 day" : `${table.promoMaxDays} days`;
+  return `A first Pro purchase includes Max for its first ${days}, then continues on Pro.`;
+}
+
+// src/commands/plans.ts
+init_render();
+var USAGE3 = "Usage: candle plans";
+async function plans(args, ctx) {
+  const parsed = parseArgs(args, {});
+  if ("error" in parsed || parsed.positionals.length > 0) {
+    writeUsageFailure(ctx.deps, "error" in parsed ? `${parsed.error}
+${USAGE3}` : USAGE3, ctx.json);
+    return 2;
+  }
+  const result = await apiRequest("/api/v1/agent/plans", {
+    auth: "none",
+    credentials: {},
+    apiUrl: ctx.apiUrl,
+    fetch: ctx.deps.fetch,
+    env: ctx.deps.env
+  });
+  if (!result.ok) {
+    if (result.status === 404 && !ctx.json) {
+      ctx.deps.stderr.write(`${ctx.apiUrl} does not serve the plan table yet (GET /api/v1/agent/plans answered 404).
+`);
+      return 1;
+    }
+    writeFailure(ctx.deps, result, { apiUrl: ctx.apiUrl, authType: "none" }, ctx.json);
+    return 1;
+  }
+  const body = result.body;
+  if (ctx.json) {
+    ctx.deps.stdout.write(`${JSON.stringify(body)}
+`);
+    return 0;
+  }
+  const { headers, rows } = planTableRows(body);
+  const out = ctx.deps.stdout;
+  out.write(`Plans served by ${ctx.apiUrl}
+
+`);
+  out.write(`${renderTable(headers.map(terminalText), rows.map((row) => row.map(terminalText)))}
+`);
+  const promotion = planPromotionLine(body);
+  if (promotion)
+    out.write(`
+${promotion}
+`);
+  out.write(`
+${PLAN_CAPABILITY_NOTE}
+`);
+  out.write(`
+The agent trade fee is charged on top of each trade or dev buy the API builds. Your account's plan: candle doctor.
+`);
+  return 0;
+}
 
 // src/commands/plugins.ts
 init_args();
@@ -61417,6 +62060,44 @@ function shortAddress2(address) {
   return address.length > 12 ? `${address.slice(0, 4)}…${address.slice(-4)}` : address;
 }
 
+// src/commands/pnl-hyperliquid.ts
+init_render();
+function writeHyperliquidPnl(ctx, section) {
+  if (!section)
+    return;
+  const out = ctx.deps.stdout;
+  out.write(`
+Hyperliquid
+`);
+  if (!section.read) {
+    out.write(`Unavailable: ${terminalText(section.reason)}
+`);
+    return;
+  }
+  out.write(`Network: ${section.network}
+`);
+  out.write(`Realized gross  ${formatUsd(section.realizedGrossUsd)}
+`);
+  out.write(`Funding         ${formatUsd(section.fundingUsd)} (received positive, paid negative)
+`);
+  out.write(`Fees            ${formatUsd(section.feesUsd)} (includes builder fees)
+`);
+  out.write(`Realized net    ${formatUsd(section.realizedNetUsd)} (gross + funding - fees)
+`);
+  out.write(`${section.fills} fills; ${section.fundingPayments} funding payments. Unrealized perps are excluded.
+`);
+  out.write(`Coverage: currently bound EVM TEE wallets since the current TEE binding; previous bindings excluded.
+`);
+  for (const wallet of section.byWallet) {
+    out.write(`${terminalText(wallet.address)} since ${new Date(wallet.startTime).toISOString()}
+`);
+  }
+  if (section.truncated) {
+    out.write(`History is truncated: at most ${section.fillsLimit} recent fills and ${section.fundingLimit} funding rows per wallet, ${section.walletsLimit} wallets. This is a partial figure.
+`);
+  }
+}
+
 // src/commands/pnl.ts
 var CHAINS = ["solana", "hood"];
 var CHAIN_TITLES = { solana: "Solana", hood: "Hood" };
@@ -61483,8 +62164,11 @@ async function pnl(args, ctx) {
     return 0;
   }
   if (perProfile) {
-    const { pnl: p, lp } = body;
-    deps.stdout.write(`P&L for profile ${ctx.profileFlag} (key ${keyPrefix}): this key's own fills
+    const { pnl: p, lp, hyperliquid } = body;
+    const engine = typeof p.totalUsd === "number";
+    deps.stdout.write(engine ? `P&L for profile ${ctx.profileFlag} (key ${keyPrefix}): this key's share of the account's P&L
+
+` : `P&L for profile ${ctx.profileFlag} (key ${keyPrefix}): this key's own fills
 
 `);
     writeChainBlocks(ctx, p.byChain);
@@ -61496,16 +62180,20 @@ async function pnl(args, ctx) {
       unmarked: p.unmarkedPositions,
       unvalued: p.unvalued,
       counted: p.counted,
+      totalUsd: p.totalUsd,
+      openPositionsExDust: p.openPositionsExDust,
+      closed: p.closed,
       positions: p.openPositions.length,
       truncated: p.truncated,
       lookback: p.lookback,
-      lookbackUnit: "trades",
+      lookbackUnit: engine ? "of the account's ledger rows" : "trades",
       oldestMarkAt: p.oldestMarkAt,
       lp
     });
     writePositions(ctx, p.openPositions, false);
-    writeWallets(ctx, p.byWallet);
+    writeWallets(ctx, p.byWallet, engine);
     writeLpPositions(ctx, lp, false);
+    writeHyperliquidPnl(ctx, hyperliquid);
     return 0;
   }
   const books = body;
@@ -61522,6 +62210,8 @@ async function pnl(args, ctx) {
     oldestMarkAt: books.oldestMarkAt,
     lp: books.lp
   });
+  writeWalletEvents(ctx, books);
+  writeAgents(ctx, books.byAgent, books.all);
   writePositions(ctx, books.positions, true);
   writeLpPositions(ctx, books.lp, true);
   return 0;
@@ -61552,7 +62242,7 @@ function writeChainBlocks(ctx, byChain) {
         formatUsd(s.unrealizedUsd),
         `${marked} of ${s.openPositions} open ${s.openPositions === 1 ? "position" : "positions"} marked${unmarked > 0 ? `; ${unmarked} unpriced, not counted` : ""}`
       ],
-      ["Total", formatUsd(s.realizedNetUsd + s.unrealizedUsd), "realized net plus unrealized"]
+      ["Total", formatUsd(totalOf(s)), "realized net plus unrealized"]
     ]);
     if (s.unvalued > 0) {
       ctx.deps.stdout.write(`${s.unvalued} ${s.unvalued === 1 ? "fill" : "fills"} could not be valued and are not in these figures.
@@ -61564,6 +62254,12 @@ function writeChainBlocks(ctx, byChain) {
   ctx.deps.stdout.write(`All chains
 `);
 }
+function totalOf(s) {
+  return typeof s.totalUsd === "number" ? s.totalUsd : s.realizedNetUsd + s.unrealizedUsd;
+}
+function isUnplacedWallet(wallet) {
+  return wallet.startsWith("unknown:");
+}
 function writeLines(ctx, lines) {
   const width = Math.max(...lines.map(([label]) => label.length));
   const valueWidth = Math.max(...lines.map(([, value]) => value.length));
@@ -61572,19 +62268,20 @@ function writeLines(ctx, lines) {
 `);
   }
 }
-function writeWallets(ctx, wallets2) {
+function writeWallets(ctx, wallets2, engine) {
   if (!wallets2 || wallets2.length === 0)
     return;
   const rows = wallets2.map((w) => [
-    `${w.label?.trim() ? `${w.label.trim()} ` : w.payerType === "main" ? "main " : ""}(${shortAddress2(w.wallet)})`,
+    isUnplacedWallet(w.wallet) ? "not placed in a wallet" : `${w.label?.trim() ? `${w.label.trim()} ` : w.payerType === "main" ? "main " : ""}(${shortAddress2(w.wallet)})`,
     w.chain ?? "-",
     String(w.tradesConsidered),
     formatUsd(w.realizedNetUsd),
     formatUsd(w.unrealizedUsd),
     `${w.openPositions.length}${w.unmarkedPositions > 0 ? ` (${w.unmarkedPositions} unpriced)` : ""}`
   ]);
+  const heading = engine ? "By wallet (each its own cost basis; the rows sum to the total)" : "By wallet (each its own cost basis, so the rows need not sum to the total)";
   ctx.deps.stdout.write(`
-By wallet (each its own cost basis, so the rows need not sum to the total)
+${heading}
 ${renderTable(["WALLET", "CHAIN", "TRADES", "REALIZED NET", "UNREALIZED", "OPEN"], rows.map((row) => row.map(terminalText)))}
 `);
 }
@@ -61602,6 +62299,7 @@ function writeSummary(ctx, s) {
       `${marked} of ${s.positions} open ${s.positions === 1 ? "position" : "positions"} marked${s.unmarked > 0 ? `; ${s.unmarked} unpriced, not counted` : ""}`
     ]
   ];
+  const total = totalOf(s);
   const lp = s.lp;
   if (lp?.read) {
     const plural2 = (n, one, many) => `${n} ${n === 1 ? one : many}`;
@@ -61617,17 +62315,24 @@ function writeSummary(ctx, s) {
       "LP vs holding",
       lp.vsHoldingPositions > 0 ? formatUsd(lp.vsHoldingUsd) : "-",
       lp.vsHoldingPositions > 0 ? `${lp.vsHoldingPositions} of ${lp.valued} valued, against holding the deposited tokens (now ${formatUsd(lp.holdValueUsd)})` : "no valued LP position with every deposit priced"
-    ], [
-      "Total",
-      formatUsd(s.realizedNetUsd + s.unrealizedUsd + lp.realizedUsd + lp.unrealizedUsd),
-      "realized net plus unrealized, tokens and LP"
+    ], ["Total", formatUsd(total), "realized net plus unrealized, tokens only, as the console shows it"], [
+      "Total with LP",
+      formatUsd(total + lp.realizedUsd + lp.unrealizedUsd),
+      "the total plus LP realized and unrealized"
     ]);
   } else if (lp) {
-    lines.push(["LP", "not read", `${terminalText(lp.reason)}; not in the total`], ["Total", formatUsd(s.realizedNetUsd + s.unrealizedUsd), "realized net plus unrealized, tokens only"]);
+    lines.push(["LP", "not read", `${terminalText(lp.reason)}; not in the total`], ["Total", formatUsd(total), "realized net plus unrealized, tokens only"]);
   } else {
-    lines.push(["Total", formatUsd(s.realizedNetUsd + s.unrealizedUsd), "realized net plus unrealized"]);
+    lines.push(["Total", formatUsd(total), "realized net plus unrealized"]);
   }
   writeLines(ctx, lines);
+  if (s.closed)
+    writeClosed(ctx, s.closed);
+  const dust = s.openPositionsExDust !== undefined ? s.positions - s.openPositionsExDust : 0;
+  if (dust > 0) {
+    ctx.deps.stdout.write(`${dust} open ${dust === 1 ? "position is" : "positions are"} dust (worth under one cent): listed and marked, and counted in the figures.
+`);
+  }
   if (s.oldestMarkAt !== undefined) {
     ctx.deps.stdout.write(`Marks as old as ${new Date(s.oldestMarkAt).toISOString()}.
 `);
@@ -61655,6 +62360,50 @@ function writeSummary(ctx, s) {
     }
   }
 }
+function writeClosed(ctx, c) {
+  const counts = [`${c.wins} won`, `${c.losses} lost`];
+  if (c.costUnknown > 0)
+    counts.push(`${c.costUnknown} with unknown cost`);
+  ctx.deps.stdout.write(`Closed: ${c.closed} ${c.closed === 1 ? "position" : "positions"} (${counts.join(", ")}). Money made ${formatUsd(c.madeUsd)}, money lost ${formatUsd(c.lostUsd)} and partial sells ${formatUsd(c.partialSellsUsd)} add up to the realized net.
+`);
+}
+function writeWalletEvents(ctx, books) {
+  const unknown = books.costUnknown?.length ?? 0;
+  if (unknown > 0) {
+    ctx.deps.stdout.write(`${unknown} ${unknown === 1 ? "arrival" : "arrivals"} of tokens came with no cost anyone can state: selling them realizes nothing (--json lists them).
+`);
+  }
+  const out = books.movedOutUntracked?.length ?? 0;
+  if (out > 0) {
+    ctx.deps.stdout.write(`${out} ${out === 1 ? "move" : "moves"} out of a wallet went where Candle does not follow: the tokens left at cost, not as a sale (--json lists them).
+`);
+  }
+}
+function writeAgents(ctx, agents, all) {
+  if (!agents || agents.length === 0)
+    return;
+  const open4 = (count2, unmarked) => `${count2}${unmarked > 0 ? ` (${unmarked} unpriced)` : ""}`;
+  const rows = agents.map((a) => [
+    a.keyPrefix === null ? "Manual (web app)" : a.label && a.label !== a.keyPrefix ? `${a.label} (${a.keyPrefix})` : a.keyPrefix,
+    formatUsd(a.realizedNetUsd),
+    formatUsd(a.unrealizedUsd),
+    formatUsd(totalOf(a)),
+    open4(a.openPositions, a.unmarked),
+    String(a.closedRounds)
+  ]);
+  rows.push([
+    "Account total",
+    formatUsd(all.realizedNetUsd),
+    formatUsd(all.unrealizedUsd),
+    formatUsd(totalOf(all)),
+    open4(all.openPositions, all.unmarked),
+    all.closedRounds !== undefined ? String(all.closedRounds) : "-"
+  ]);
+  ctx.deps.stdout.write(`
+By agent (each key, then Manual; the rows sum to the account total)
+${renderTable(["AGENT", "REALIZED NET", "UNREALIZED", "TOTAL", "OPEN", "CLOSED"], rows.map((row) => row.map(terminalText)))}
+`);
+}
 function writeLpPositions(ctx, lp, withBook) {
   if (!lp?.read || lp.positions.length === 0)
     return;
@@ -61688,13 +62437,16 @@ No open positions.
 `);
     return;
   }
-  const headers = ["TOKEN", "CHAIN", "QUANTITY", "AVG ENTRY", "MARK", "UNREALIZED"];
+  const withWallet = positions.some((p) => p.wallet !== undefined);
+  const headers = ["TOKEN", "CHAIN", ...withWallet ? ["WALLET"] : [], "QUANTITY", "AVG ENTRY", "MARK", "UNREALIZED"];
   if (withBook)
     headers.push("BOOK");
+  const wallet = (w) => w === undefined || isUnplacedWallet(w) ? "-" : shortAddress2(w);
   const rows = positions.map((p) => {
     const row = [
-      p.symbol?.trim() || shortAddress2(p.mint),
+      `${p.symbol?.trim() || shortAddress2(p.mint)}${p.dust === true ? " (dust)" : ""}`,
       p.chain ?? "-",
+      ...withWallet ? [wallet(p.wallet)] : [],
       formatQuantity(p.quantity),
       formatPrice(p.avgEntryUsd),
       p.markPriceUsd !== undefined ? formatPrice(p.markPriceUsd) : "unpriced",
@@ -62326,11 +63078,11 @@ function writeTable(ctx, groups, totals) {
         rows.push([g.group, w.chain, name2, UNREAD_LABELS[part], "not read", "-", "-"]);
     }
     const empty = g.wallets.length - shown.length;
-    const count = `${g.wallets.length} ${g.wallets.length === 1 ? "wallet" : "wallets"}`;
+    const count2 = `${g.wallets.length} ${g.wallets.length === 1 ? "wallet" : "wallets"}`;
     notes.push([
       g.group,
       g.read ? formatUsd(g.valueUsd) : "-",
-      g.read ? `${count}${empty > 0 ? `, ${empty} empty not shown` : ""}${lpCount > 0 ? `, ${lpCount} LP ${lpCount === 1 ? "position" : "positions"}` : ""}${lpUnread > 0 ? `, ${lpUnread} LP not read` : ""}${g.unpriced > 0 ? `, ${g.unpriced} unpriced` : ""}` : g.reason ?? "not read"
+      g.read ? `${count2}${empty > 0 ? `, ${empty} empty not shown` : ""}${lpCount > 0 ? `, ${lpCount} LP ${lpCount === 1 ? "position" : "positions"}` : ""}${lpUnread > 0 ? `, ${lpUnread} LP not read` : ""}${g.unpriced > 0 ? `, ${g.unpriced} unpriced` : ""}` : g.reason ?? "not read"
     ]);
   }
   if (rows.length > 0)
@@ -63210,7 +63962,7 @@ init_evm_lite();
 init_profiles();
 init_render();
 init_trading();
-var USAGE3 = "Usage: candle transfer --to <address|wallet name|vault> --asset <SOL|USDC|CNDL|ETH|USDG>|--mint <mint>|--token <0x...> --amount <decimal|max> [--wallet <name>] [--rpc-url <url>] [--yes] [--json]";
+var USAGE4 = "Usage: candle transfer --to <address|wallet name|vault> --asset <SOL|USDC|CNDL|ETH|USDG>|--mint <mint>|--token <0x...> --amount <decimal|max> [--wallet <name>] [--rpc-url <url>] [--yes] [--json]";
 var TRANSFER_ASSETS = [...Object.keys(BASES), ...Object.keys(HOOD_BASES)];
 var BASE58_ADDRESS = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
 async function readLinkedWallets(ctx, key) {
@@ -63296,7 +64048,7 @@ async function transfer(args, ctx) {
   const flags = parsed.values;
   const asset = flags["--asset"]?.toUpperCase();
   if (parsed.positionals.length !== 0 || !flags["--to"] || !flags["--amount"] || [flags["--asset"], flags["--mint"], flags["--token"]].filter(Boolean).length !== 1 || asset !== undefined && !TRANSFER_ASSETS.includes(asset) || flags["--mint"] !== undefined && !BASE58_ADDRESS.test(flags["--mint"]) || flags["--token"] !== undefined && !checkEvmAddress(flags["--token"]).ok) {
-    writeUsageFailure(ctx.deps, USAGE3, ctx.json);
+    writeUsageFailure(ctx.deps, USAGE4, ctx.json);
     return 2;
   }
   const to = flags["--to"];
@@ -65938,11 +66690,11 @@ Anyone who reads them can move every derived key's funds.
 `);
   return 0;
 }
-function randomPositions(count, of = PHRASE_WORDS) {
+function randomPositions(count2, of = PHRASE_WORDS) {
   const chosen = new Set;
   const scratch = new Uint32Array(1);
   const limit = Math.floor(4294967296 / of) * of;
-  while (chosen.size < count) {
+  while (chosen.size < count2) {
     crypto.getRandomValues(scratch);
     const draw = scratch[0] ?? 0;
     if (draw >= limit)
@@ -67350,8 +68102,8 @@ async function readEvmBalances(addresses, rpcUrl, fetchFn) {
   }
   return read;
 }
-function evmRequestsPlanned(count) {
-  return `${1 + count} to ${1 + 2 * count}`;
+function evmRequestsPlanned(count2) {
+  return `${1 + count2} to ${1 + 2 * count2}`;
 }
 async function vaultList(args, ctx) {
   const parsed = parseArgs(args, {
@@ -69978,9 +70730,9 @@ function resolveTarget(index, old, id) {
     throw new VaultError("VAULT_LABEL_NOT_FOUND", id === undefined ? `No key in this vault is called ${old}, and no key has that address or id.` : `No key in this vault has the id ${id}.`, { suggestion: "List them with their labels: `candle vault status --unlock`" });
   }
   const candidates = match.candidates.map((entry) => `${entry.address} (${entry.id})`).join(", ");
-  const count = match.candidates.length;
+  const count2 = match.candidates.length;
   const first = match.candidates[0];
-  throw new VaultError("VAULT_LABEL_AMBIGUOUS", match.by === "label" ? `${count} keys in this vault are called ${old}, so this rename would not say which one it meant. Nothing was written.` : `${count} keys in this vault have the address ${old}, so this rename would not say which one it meant. Nothing was written.`, {
+  throw new VaultError("VAULT_LABEL_AMBIGUOUS", match.by === "label" ? `${count2} keys in this vault are called ${old}, so this rename would not say which one it meant. Nothing was written.` : `${count2} keys in this vault have the address ${old}, so this rename would not say which one it meant. Nothing was written.`, {
     suggestion: match.by === "label" ? `Name one by address or id. The candidates are ${candidates}.` : `Name one by id. The candidates are ${candidates}. Re-run: \`candle vault rename ${old} <new-label> --id ${first.id}\`.`
   });
 }
@@ -70144,7 +70896,7 @@ async function discardIncompleteRestore(ctx, path, sidecarExisted) {
   }
 }
 var RESTORED_BRANCHES = ["solanaVault", "solanaTee", "solanaExternal"];
-function parseCounts(count, teeCount, externalCount, rpcUrl, evmCount, evmTeeCount) {
+function parseCounts(count2, teeCount, externalCount, rpcUrl, evmCount, evmTeeCount) {
   const parse = (raw, flag) => {
     if (raw === undefined)
       return;
@@ -70153,7 +70905,7 @@ function parseCounts(count, teeCount, externalCount, rpcUrl, evmCount, evmTeeCou
       return { error: `${flag} must be a whole number, zero or greater.` };
     return value;
   };
-  const vaultCount = parse(count, "--count");
+  const vaultCount = parse(count2, "--count");
   if (typeof vaultCount === "object" && vaultCount !== null)
     return vaultCount;
   const teeParsed = parse(teeCount, "--tee-count");
@@ -71283,7 +72035,7 @@ init_args();
 init_release();
 import { dirname as dirname10, join as join11 } from "node:path";
 init_render();
-var USAGE4 = "Usage: candle verify <file> --bundle <path> [--identity <uri>] [--issuer <url>]";
+var USAGE5 = "Usage: candle verify <file> --bundle <path> [--identity <uri>] [--issuer <url>]";
 async function resolveIdentity(deps, bundlePath, flag) {
   if (flag)
     return { kind: "ok", uri: flag, provenance: "identity from --identity" };
@@ -71315,19 +72067,19 @@ async function verify(args, ctx) {
   });
   if ("error" in parsed) {
     writeUsageFailure(deps, `${parsed.error}
-${USAGE4}`, json);
+${USAGE5}`, json);
     return 2;
   }
   const file = parsed.positionals[0];
   if (parsed.positionals.length !== 1 || file === undefined) {
     writeUsageFailure(deps, `verify takes exactly one file.
-${USAGE4}`, json);
+${USAGE5}`, json);
     return 2;
   }
   const bundlePath = parsed.values["--bundle"];
   if (!bundlePath) {
     writeUsageFailure(deps, `--bundle is required.
-${USAGE4}`, json);
+${USAGE5}`, json);
     return 2;
   }
   const resolved = await resolveIdentity(deps, bundlePath, parsed.values["--identity"]);
@@ -71341,7 +72093,7 @@ ${USAGE4}`, json);
   }
   if (resolved.kind === "absent") {
     writeUsageFailure(deps, `--identity is required: there is no latest.json beside ${bundlePath} to take the release version from.
-${USAGE4}`, json);
+${USAGE5}`, json);
     return 2;
   }
   const identity = resolved.uri;
@@ -71389,8 +72141,8 @@ init_wallets();
 init_args();
 init_render();
 init_trading();
-import { randomUUID as randomUUID4 } from "node:crypto";
-var USAGE5 = "Usage: candle wallet close-empty [--wallet embedded] [--keep <mint>]... [--client-trade-id <id>] [--yes] [--json]";
+import { randomUUID as randomUUID5 } from "node:crypto";
+var USAGE6 = "Usage: candle wallet close-empty [--wallet embedded] [--keep <mint>]... [--client-trade-id <id>] [--yes] [--json]";
 var BASE58_ADDRESS2 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
 var LISTED_ROWS = 50;
 function splitKeep(args) {
@@ -71465,7 +72217,7 @@ async function embeddedSolana(ctx, key, wallet) {
 async function walletsCloseEmpty(args, ctx) {
   const lifted = splitKeep(args);
   if ("error" in lifted) {
-    writeUsageFailure(ctx.deps, `${lifted.error}. ${USAGE5}`, ctx.json);
+    writeUsageFailure(ctx.deps, `${lifted.error}. ${USAGE6}`, ctx.json);
     return 2;
   }
   const parsed = parseArgs(lifted.rest, { valueFlags: ["--wallet", "--client-trade-id"], booleanFlags: ["--yes"] });
@@ -71474,9 +72226,9 @@ async function walletsCloseEmpty(args, ctx) {
     return 2;
   }
   const named = parsed.values["--client-trade-id"];
-  const id = named ?? `close-${randomUUID4()}`;
+  const id = named ?? `close-${randomUUID5()}`;
   if (parsed.positionals.length !== 0 || !validClientId(id) || !lifted.keep.every((m) => BASE58_ADDRESS2.test(m))) {
-    writeUsageFailure(ctx.deps, USAGE5, ctx.json);
+    writeUsageFailure(ctx.deps, USAGE6, ctx.json);
     return 2;
   }
   const keep = lifted.keep;
@@ -71883,10 +72635,12 @@ var COMMANDS = {
   launch: { bare: launch },
   pnl: { bare: pnl },
   portfolio: { bare: portfolio },
+  plans: { bare: plans },
   lp: { subcommands: { pools: lpPools, add: lpAdd, positions: lpPositions, remove: lpRemove, claim: lpClaim } },
   perps: {
     subcommands: {
       setup: perpsSetup,
+      deposit: perpsDeposit,
       open: perpsOpen,
       close: perpsClose,
       cancel: perpsCancel,
@@ -72008,6 +72762,7 @@ var NEVER_GUARDED = new Set([
   "profile",
   "doctor",
   "verify",
+  "plans",
   "update",
   "help",
   "completion",