@candledottv/cli 0.11.37 → 0.11.39

package/dist/index.js

@@ -46,6 +46,43 @@ var __export = (target, all) => {
 };
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
+var __dispose = Symbol.dispose || /* @__PURE__ */ Symbol.for("Symbol.dispose");
+var __asyncDispose = Symbol.asyncDispose || /* @__PURE__ */ Symbol.for("Symbol.asyncDispose");
+var __using = (stack, value, async) => {
+  if (value != null) {
+    if (typeof value !== "object" && typeof value !== "function")
+      throw TypeError('Object expected to be assigned to "using" declaration');
+    var dispose;
+    if (async)
+      dispose = value[__asyncDispose];
+    if (dispose === undefined)
+      dispose = value[__dispose];
+    if (typeof dispose !== "function")
+      throw TypeError("Object not disposable");
+    stack.push([async, dispose, value]);
+  } else if (async) {
+    stack.push([async]);
+  }
+  return value;
+};
+var __callDispose = (stack, error, hasError) => {
+  var E = typeof SuppressedError === "function" ? SuppressedError : function(e, s, m, _) {
+    return _ = Error(m), _.name = "SuppressedError", _.error = e, _.suppressed = s, _;
+  }, fail = (e) => error = hasError ? new E(e, error, "An error was suppressed during disposal") : (hasError = true, e), next = (it) => {
+    while (it = stack.pop()) {
+      try {
+        var result = it[1] && it[1].call(it[2]);
+        if (it[0])
+          return Promise.resolve(result).then(next, (e) => (fail(e), next()));
+      } catch (e) {
+        fail(e);
+      }
+    }
+    if (hasError)
+      throw error;
+  };
+  return next();
+};
 
 // src/client.ts
 function trimTrailingSlashes(url) {
@@ -37368,7 +37405,7 @@ var init_convert = __esm(() => {
 });
 
 // ../mcp/src/version.ts
-var SERVER_VERSION = "0.10.20";
+var SERVER_VERSION = "0.10.21";
 
 // ../mcp/src/update-notice.ts
 function newer(a, b) {
@@ -39647,18 +39684,53 @@ function perpsCandleWindow(opts, now) {
     return usage3(`interval must be one of ${PERPS_CANDLE_INTERVALS.join(" ")}.`);
   const count = bounded(opts.count, 100, 1, 5000, "count");
   const raw = opts.end;
-  const endTime = raw === undefined ? now : typeof raw === "number" || /^\d+$/.test(raw) ? Number(raw) : /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/.test(raw) ? Date.parse(raw) : NaN;
+  const endTime = raw === undefined ? now : epoch(raw);
   const startTime = endTime - count * at(INTERVAL_MS, index);
   if (!Number.isSafeInteger(endTime) || endTime < 0 || endTime > now || startTime < 0)
     return usage3("end must be an ISO 8601 time or epoch milliseconds, no later than now.");
   return { interval, count, startTime, endTime };
 }
+function epoch(raw) {
+  return typeof raw === "number" || /^\d+$/.test(raw) ? Number(raw) : /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/.test(raw) ? Date.parse(raw) : NaN;
+}
+function perpsFundingWindow(opts, now) {
+  const endTime = opts.end === undefined ? now : epoch(opts.end);
+  if (!Number.isSafeInteger(endTime) || endTime < 0 || endTime > now)
+    return usage3("end must be an ISO 8601 time or epoch milliseconds, no later than now.");
+  const startTime = opts.start === undefined ? endTime - 86400000 : epoch(opts.start);
+  if (!Number.isSafeInteger(startTime) || startTime < 0 || startTime > endTime)
+    return usage3("start must be an ISO 8601 time or epoch milliseconds, no later than end.");
+  if (endTime - startTime > PERPS_FUNDING_HISTORY_MAX_MS)
+    return usage3("start must be at most 30 days before end.");
+  return { startTime, endTime };
+}
 function bounded(value, fallback, min, max, name) {
   const n = value ?? fallback;
   if (!Number.isInteger(n) || n < min || n > max)
     return usage3(`${name} must be an integer from ${min} to ${max}.`);
   return n;
 }
+function parsePerpsFundingHistory(value, coin, window) {
+  if (!Array.isArray(value))
+    return unavailable2();
+  const funding = [];
+  for (const row of value) {
+    if (!object(row) || row.coin !== coin || !integer(row.time) || !decimal2(row.fundingRate) || !decimal2(row.premium))
+      return unavailable2();
+    if (row.time >= window.startTime && row.time <= window.endTime)
+      funding.push({
+        time: row.time,
+        fundingRate: row.fundingRate,
+        fundingAprPct: fixed(scaled(row.fundingRate) * 876000n, 2),
+        premium: row.premium
+      });
+  }
+  funding.sort((a, b) => a.time - b.time);
+  return {
+    funding: funding.slice(0, PERPS_FUNDING_HISTORY_MAX_ROWS),
+    truncated: funding.length > PERPS_FUNDING_HISTORY_MAX_ROWS
+  };
+}
 
 class PerpsMarketReader {
   opts;
@@ -39936,8 +40008,46 @@ class PerpsMarketReader {
       candles: candles.slice(-window.count)
     };
   }
+  async fundingHistory(coin, opts = {}) {
+    this.key();
+    const window = perpsFundingWindow(opts, this.now());
+    const [config, core] = await Promise.all([this.config(), this.core()]);
+    const canonical2 = at(core.universe, resolve(core, coin)).name;
+    const value = await info(this.opts.fetcher, this.opts.network, {
+      type: "fundingHistory",
+      coin: canonical2,
+      startTime: window.startTime,
+      endTime: window.endTime
+    });
+    return {
+      ...this.envelope(config),
+      coin: canonical2,
+      startTime: window.startTime,
+      endTime: window.endTime,
+      ...parsePerpsFundingHistory(value, canonical2, window)
+    };
+  }
+  async predictedFunding() {
+    this.key();
+    const [config, core, extras] = await Promise.all([this.config(), this.core(), this.extras()]);
+    if (extras.predicted === null)
+      return unavailable2();
+    const predicted = [];
+    for (const meta of core.universe) {
+      const row = extras.predicted.get(meta.name);
+      if (row)
+        predicted.push({
+          coin: meta.name,
+          fundingRate: row.fundingRate,
+          fundingAprPct: fixed(scaled(row.fundingRate) * 876000n, 2),
+          nextFundingTime: row.nextFundingTime
+        });
+    }
+    predicted.sort((a, b) => a.coin < b.coin ? -1 : a.coin > b.coin ? 1 : 0);
+    return { ...this.envelope(config, extras.warnings, this.extrasCache?.at ?? this.now()), predicted };
+  }
 }
-var INFO_URLS, ONE, DECIMAL, PerpsMarketError, PERPS_CANDLE_INTERVALS, INTERVAL_MS;
+var INFO_URLS, ONE, DECIMAL, PerpsMarketError, PERPS_CANDLE_INTERVALS, INTERVAL_MS, PERPS_FUNDING_HISTORY_MAX_MS, PERPS_FUNDING_HISTORY_MAX_ROWS = 500;
 var init_hyperliquid_markets = __esm(() => {
   INFO_URLS = {
     mainnet: "https://api.hyperliquid.xyz/info",
@@ -39987,6 +40097,7 @@ var init_hyperliquid_markets = __esm(() => {
     604800000,
     2678400000
   ];
+  PERPS_FUNDING_HISTORY_MAX_MS = 30 * 86400000;
 });
 
 // ../mcp/src/perps-history.ts
@@ -42466,7 +42577,7 @@ MARKET_NOT_FOUND means Candle has no market for that token and this could not ru
   for (const name of PERPS_MARKET_TOOL_NAMES) {
     register(name, {
       title: name.replace("candle_perps_", "Hyperliquid "),
-      description: "Read live market data directly from Hyperliquid's public API on this machine. Needs a Candle agent key of any scope, no signer. candle.tradeable is Candle's build gate at read time, not a promise; OI caps may still refuse an order. The hosted connector does not carry these tools.",
+      description: "Read live market data directly from Hyperliquid's public API on this machine. Needs a Candle agent key of any scope, no signer. candle.tradeable is Candle's build gate at read time, not a promise; OI caps may still refuse an order. The hosted connector offers the same four reads at its Read level, read by Candle's server instead of this machine.",
       inputSchema: perpsMarketShapes[name],
       annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }
     }, async (args) => {
@@ -42628,7 +42739,7 @@ var init_tools = __esm(() => {
   init_plans();
   init_update_notice();
   VAMP_CANDIDATES_DESCRIPTION = "Lists Solana tokens that are close to graduating or graduated in the last 6 hours whose ticker other tokens " + "are copying, most-copied in the last 24 hours first. Each entry carries a launch draft (name, ticker, image URL) " + "for `candle_launch_token` or `candle_launch_and_seed`; draft notes identify fields you must supply or adjust. " + "Upload your own image through the agent image upload when the image is unavailable. Use `dryRun: true` first. " + "Counts exclude the candidate itself and cover both Solana and Hood launches at the venues returned in " + "`coverage`, not Candle's own. `coverage.since` is the returned Solana coverage date; Hood history may differ.";
-  CUSTOM_CURVE_RULE = 'mode "exp-custom" with curve { virtualQuote, threshold } launches a Solana curve with your own V (the virtual ' + "quote it starts with) and G (the quote it raises before graduating), in whole SOL or CNDL as decimal strings, " + "accepted when V is 1 to 100 SOL and G 1 to 250 SOL (66,000 to 6,600,000 and 66,000 to 16,500,000 CNDL), when " + "every price up to 20 x G stays under the ceiling (V + 20G)^2 < V x X at this stakerAllocationBps, when neither " + "is finer than the quote's decimals, and when the dev buy is at most 10% of G; a curve past a limit is " + "CURVE_OUT_OF_RANGE, and at the ceiling it carries maxThresholdRaw, the largest G that fits. " + "Dry-run it first (dryRun: true): the dry run spends nothing and returns curveTerms, the market cap at start and " + "at graduation and the supply sold by graduation. Only where the API has EXP_CUSTOM_CURVES on; " + "elsewhere exp-custom is refused as an unknown mode.";
+  CUSTOM_CURVE_RULE = 'mode "exp-custom" with curve { virtualQuote, threshold } launches a Solana curve with your own V (the virtual ' + "quote it starts with) and G (the quote it raises before graduating), in whole SOL or CNDL as decimal strings, " + "accepted when V is 1 to 100 SOL and G 1 to 250 SOL (66,000 to 6,600,000 and 66,000 to 16,500,000 CNDL), when " + "every price up to 20 x G stays under the ceiling (V + 20G)^2 < V x X at this stakerAllocationBps, when neither " + "is finer than the quote's decimals, and when the dev buy is at most 0.5 SOL (2,000,000 CNDL), or 10% of G when " + "that is lower (every exp- mode; an operator may set the 0.5 SOL lower); a curve past a limit is " + "CURVE_OUT_OF_RANGE, and at the ceiling it carries maxThresholdRaw, the largest G that fits. " + "Dry-run it first (dryRun: true): the dry run spends nothing and returns curveTerms, the market cap at start and " + "at graduation, the supply sold by graduation, the share your own buyAmount takes, the fees and the migration " + "terms, and devBuyMax, the dev-buy ceiling that applies. Only where the API has EXP_CUSTOM_CURVES on; " + "elsewhere exp-custom is refused as an unknown mode.";
   localProfileTools = new WeakMap;
   stakingWriteShape = {
     payer: exports_external.enum(["main", "linked"]).optional().describe("main is the embedded wallet; linked names a linked or TEE wallet"),
@@ -42707,12 +42818,23 @@ var init_tools = __esm(() => {
     bannerUrl: exports_external.string().optional().describe("Optional https URL to WIDE artwork for the token page's banner strip (wider than 1.5:1, " + "e.g. 1200x630). This is where a share card or OG image belongs. A square image here is " + "rejected with BANNER_WRONG_SHAPE: send the wide original, not a cropped copy. Omit it and the strip " + "falls back to imageUrl"),
     chain: exports_external.string().optional().describe('"solana" or "hood"; defaults to solana'),
     quoteAsset: exports_external.string().optional().describe("Quote asset symbol; defaults per chain"),
-    mode: exports_external.string().optional().describe('"open" or "exclusive"; defaults to open. "test-open" / "test-exclusive" launch the ' + "low-threshold test curves (~1/80 economics) where the API has ENABLE_TEST_CURVES on. " + '"exp-custom" launches a Solana curve with your own V and G, given in curve, where the API has it ' + "switched on"),
+    mode: exports_external.string().optional().describe('"open" or "exclusive"; defaults to open. "test-open" / "test-exclusive" launch the ' + "low-threshold test curves (~1/80 economics) where the API has ENABLE_TEST_CURVES on. " + '"exp-a", "exp-b" and "exp-c" are the experimental fast Solana curves (sol or cndl). ' + '"exp-custom" launches a Solana curve with your own V and G, given in curve, where the API has it ' + "switched on"),
     curve: exports_external.object({
       virtualQuote: exports_external.string().describe('V: the virtual quote the curve starts with, in whole quote units, e.g. "12" SOL'),
       threshold: exports_external.string().describe('G: the quote the curve raises before it graduates, in whole quote units, e.g. "40" SOL')
     }).strict().optional().describe('mode "exp-custom" only, and required there. Decimal strings in whole units of the quote asset (sol or ' + "cndl), never raw units. Dry-run first: the API checks the limits and returns the curve's terms"),
+    creatorFeeBps: exports_external.union([exports_external.literal(0), exports_external.literal(100), exports_external.literal(200)]).optional().describe("An exp- mode only: an extra creator fee of 100 or 200 basis points on top of the curve's 1% and the " + "pool's 0.5%, paid to the creator in full. 0 is the same as leaving it out"),
     stakerAllocationBps: exports_external.number().optional().describe("Staker allocation in basis points"),
+    poolFee: exports_external.union([
+      exports_external.object({ tier: exports_external.union([exports_external.literal(25), exports_external.literal(50), exports_external.literal(100)]) }).strict(),
+      exports_external.object({
+        startBps: exports_external.number().int().max(2500),
+        endBps: exports_external.union([exports_external.literal(25), exports_external.literal(50), exports_external.literal(100)]),
+        minutes: exports_external.number().positive().max(30)
+      }).strict()
+    ]).optional().describe("Solana only: the graduated pool's fee. { tier: 25 | 50 | 100 } is a flat fee in bps (default 50), or " + "{ startBps, endBps, minutes } is an anti-snipe fall from startBps (at most 2500, at least endBps) to " + "endBps (25, 50 or 100) over minutes (at most 30). Cannot be combined with creatorFeeBps unless the tier is 50. " + "Omit for the standard 50 bps pool"),
+    poolOpen: exports_external.enum(["legacy", "curve_price"]).optional().describe(`Solana preset tiers only. "curve_price" opens the pool at the curve's last price (the whole reserve is ` + "seeded and the remaining base burned); stakerAllocationBps plus the team allocation must fit the tier's limit, " + "which the dry run returns as graduation.maxStakerCarveBps. Omit for legacy"),
+    expPoolShape: exports_external.enum(["floor", "full_range"]).optional().describe('Solana exp- curves only. "full_range" opens the pool across the whole price range. Omit for floor'),
     dexVersion: exports_external.string().nullable().optional().describe('"v3" or "v4"; required for hood launches'),
     buyAmount: exports_external.union([exports_external.string(), exports_external.number()]).optional().describe("Initial buy, in quote base units (string or number)"),
     description: exports_external.string().optional(),
@@ -70366,7 +70488,7 @@ init_render();
 init_secret_store();
 
 // src/version.ts
-var CLI_VERSION = "0.11.37";
+var CLI_VERSION = "0.11.39";
 
 // src/commands/auth.ts
 init_keys_embedded_wallet();
@@ -70766,6 +70888,86 @@ async function authStatus(args, ctx) {
   return exitCode;
 }
 
+// src/terminal-theme.ts
+var TERMINAL_TOKENS = {
+  web: {
+    primary: "#32fe9f",
+    positive: "#32d583",
+    negative: "#f2536d",
+    warning: "#f5a524",
+    edge: "#26262b"
+  },
+  dark: {
+    brand: { hex: "#32fe9f", ansi256: 48, ansi16: 92 },
+    positive: { hex: "#32d583", ansi256: 42, ansi16: 92 },
+    negative: { hex: "#f2536d", ansi256: 204, ansi16: 91 },
+    warning: { hex: "#f5a524", ansi256: 214, ansi16: 93 }
+  },
+  light: {
+    brand: { hex: "#006b40", ansi256: 22, ansi16: 32 },
+    positive: { hex: "#087443", ansi256: 22, ansi16: 32 },
+    negative: { hex: "#b4233c", ansi256: 125, ansi16: 31 },
+    warning: { hex: "#875400", ansi256: 94, ansi16: 33 }
+  }
+};
+
+// src/presentation.ts
+function terminalStyle(deps, stream, machine = false) {
+  const { env, presentation } = deps;
+  const styled = !(machine || presentation?.plain || env.CANDLE_PLAIN === "1" || !deps.isTTY[stream] || env.CI || env.TERM === "dumb");
+  const noColor = presentation?.noColor || Boolean(env.NO_COLOR);
+  const color = !styled || noColor ? 0 : /truecolor|24bit/i.test(env.COLORTERM ?? "") ? 24 : /256color/i.test(env.TERM ?? "") ? 256 : env.TERM ? 16 : 0;
+  const background = Number(env.COLORFGBG?.split(";").at(-1));
+  const theme = Number.isFinite(background) && background >= 0 && background <= 6 ? "dark" : "light";
+  const columns = deps.columns?.[stream];
+  return {
+    width: columns && Number.isFinite(columns) ? Math.max(20, Math.floor(columns)) : 118,
+    styled,
+    color,
+    theme,
+    motion: styled && !noColor
+  };
+}
+function accent(text, style, role = "brand") {
+  if (!style.color)
+    return text;
+  const token = TERMINAL_TOKENS[style.theme][role];
+  const code = style.color === 24 ? `38;2;${token.hex.slice(1).match(/../g)?.map((part) => Number.parseInt(part, 16)).join(";")}` : style.color === 256 ? `38;5;${token.ansi256}` : `${token.ansi16}`;
+  return `\x1B[${code}m${text}\x1B[0m`;
+}
+function wrapText(text, width) {
+  const lines = [];
+  let line = "";
+  for (const word3 of text.split(" ")) {
+    if (!line || line.length + word3.length + 1 <= width)
+      line += `${line ? " " : ""}${word3}`;
+    else {
+      lines.push(line);
+      line = word3;
+    }
+  }
+  lines.push(line);
+  return lines;
+}
+var WORDMARK = ["█▀▀ ▄▀█ █▄░█ █▀▄ █░░ █▀▀", "█▄▄ █▀█ █░▀█ █▄▀ █▄▄ ██▄"];
+function brandHeader(style) {
+  if (!style.styled)
+    return [];
+  const lines = [
+    ...style.width >= 80 ? WORDMARK : ["CANDLE"],
+    `CLI ${CLI_VERSION}`,
+    "",
+    ...wrapText("Your wallets and agent tools, one command away.", style.width - 6)
+  ];
+  const width = Math.min(style.width - 2, 68);
+  return [
+    accent(`┌${"─".repeat(width - 2)}┐`, style),
+    ...lines.map((line) => `│ ${accent(line, style)}${" ".repeat(Math.max(0, width - 4 - line.length))} │`),
+    accent(`└${"─".repeat(width - 2)}┘`, style),
+    ""
+  ];
+}
+
 // src/help.ts
 var GROUPS = [
   "Start here",
@@ -70776,6 +70978,7 @@ var GROUPS = [
   "Maintain"
 ];
 var ENVIRONMENT = [
+  { name: "CANDLE_PLAIN", description: "Set to 1 for --plain output" },
   {
     name: "CANDLE_CONFIG_DIR",
     description: "Where vault.enc, tee-wallets.enc, credentials and config live (default ~/.config/candle). Set it once instead of passing --keystore."
@@ -70838,6 +71041,8 @@ var KEYSTORE_FLAG = {
   description: "The vault file for this invocation. For a permanent location set CANDLE_CONFIG_DIR instead."
 };
 var GLOBAL_FLAGS = [
+  { invocation: "--plain", description: "Plain ASCII: no banner, boxes, color or animation" },
+  { invocation: "--no-color", description: "Suppress color and decorative animation; keep terminal layout" },
   { invocation: "--profile <name>", description: "Act as a named profile" },
   { invocation: "--api-url <url>", description: "Override the API base URL" },
   { invocation: "--json", description: "Machine-readable output: exactly one JSON value on stdout" },
@@ -71006,7 +71211,7 @@ var HELP = {
   perps: {
     group: "Trade",
     summary: "Hyperliquid perpetuals: markets, market, book, candles; deposit, setup, withdraw, open, close, cancel, modify, margin, tpsl, schedule-cancel, flatten, reduce-only, orders, positions, fills, funding, leverage, account, risk, watch, thresholds",
-    description: "markets, market, book and candles read directly from Hyperliquid with any Candle agent key and no signer or wallet. Candle supplies only the OI gate config; its build gate is not an execution promise. Trade perpetuals on Hyperliquid's main perp exchange from the EVM TEE wallet bound to this key (scope perps:write, opt-in). A key gets an EVM TEE wallet by promoting one from the vault: candle vault new-key --chain evm, then candle vault promote --from <cold> --to-key <prefix>, and candle tee signer new --key <prefix> on the machine that trades it; candle tee new is Solana only. Candle builds each action within the key's limits; this machine recomputes its hash and checks the action type and Candle's builder before anything is signed, then Candle's relay signs and this machine submits to Hyperliquid. Every plan is eligible for perps, once the deployment has perps enabled. Every plan except Max pays Candle a builder fee on each order (0.1% today); Max pays none. candle plans shows the rate in force. Deposits move SOL, USDC, ETH or USDG onto the Hyperliquid account through Relay; withdrawals move USDC back through Relay to the key's own Solana or Hood TEE wallet (scope perps:withdraw, opt-in, after one vault unlock and a typed confirm). candle pnl --profile <name> shows the profile key's Hyperliquid realized P&L, funding and fees, separately from spot and LP totals. Unrealized perps P&L is shown by candle perps positions and candle portfolio. Account-wide candle pnl and its By agent table cover ledger trades only; a key with only perps activity has no row there. account, positions, risk and watch read Hyperliquid's public API directly from this machine and sign nothing: risk and watch exit 0 (ok), 10 (warn) or 11 (critical), and 1 with a PERPS_* code when no level could be read (unknown), so a script never mistakes \"could not tell\" for ok. A position is warn under its key's warn distance from liquidation (default 15%) or when the cross margin ratio is above the warn ratio (default 0.6); critical under 7% or above 0.8; a position with no Hyperliquid mark is at least warn. risk is one stateless read; watch adds hysteresis (a level clears only past its threshold by the clear band, default 2 points). One watcher at the default 10 s interval spends about 136 of the 1,200 request weight per minute Hyperliquid allows per IP. Funding paid since open is Hyperliquid's sign: positive is paid. Until Candle's server-side monitor exists, nothing warns you unless you poll candle perps risk or run candle perps watch. modify, margin, tpsl, schedule-cancel, flatten and close --pct are built, checked against this machine's own read of Hyperliquid, signed and submitted like every other write; tpsl and flatten are plans of several such steps, confirmed once (or --yes), and a plan that does not finish says so and exits 1 (3 when a signed step's submit did not answer). A key that is reduce-only (reduce-only on) can close, cancel, protect, schedule a cancel and add isolated margin, and nothing that opens or grows exposure; only the owner's device token turns it off, and it cancels no resting order and revokes no signed action.",
+    description: "markets, market, book and candles read directly from Hyperliquid with any Candle agent key and no signer or wallet. Candle supplies only the OI gate config; its build gate is not an execution promise. Trade perpetuals on Hyperliquid's main perp exchange from the EVM TEE wallet bound to this key (scope perps:write, opt-in). A key gets an EVM TEE wallet by promoting one from the vault: candle vault new-key --chain evm, then candle vault promote --from <cold> --to-key <prefix>, and candle tee signer new --key <prefix> on the machine that trades it; candle tee new is Solana only. Candle builds each action within the key's limits; this machine recomputes its hash and checks the action type and Candle's builder before anything is signed, then Candle's relay signs and this machine submits to Hyperliquid. Every plan is eligible for perps, once the deployment has perps enabled. Every plan except Max pays Candle a builder fee on each order (0.1% today); Max pays none. candle plans shows the rate in force. Deposits move SOL, USDC, ETH or USDG onto the Hyperliquid account through Relay; withdrawals move USDC back through Relay to the key's own Solana or Hood TEE wallet (scope perps:withdraw, opt-in, after one vault unlock and a typed confirm). candle pnl --profile <name> shows the profile key's Hyperliquid realized P&L, funding and fees, separately from spot and LP totals. Unrealized perps P&L is shown by candle perps positions and candle portfolio. Account-wide candle pnl and its By agent table cover ledger trades only; a key with only perps activity has no row there. account, positions, risk and watch read Hyperliquid's public API directly from this machine and sign nothing: risk and watch exit 0 (ok), 10 (warn) or 11 (critical), and 1 with a PERPS_* code when no level could be read (unknown), so a script never mistakes \"could not tell\" for ok. A position is warn under its key's warn distance from liquidation (default 15%) or when the cross margin ratio is above the warn ratio (default 0.6); critical under 7% or above 0.8; a position with no Hyperliquid mark is at least warn. risk is one stateless read; watch adds hysteresis (a level clears only past its threshold by the clear band, default 2 points). One watcher at the default 10 s interval spends about 136 of the 1,200 request weight per minute Hyperliquid allows per IP. Funding paid since open is Hyperliquid's sign: positive is paid. Until Candle's server-side monitor exists, nothing warns you unless you poll candle perps risk or run candle perps watch. Candle's server may also watch this wallet; GET /perps/risk reports whether it does. modify, margin, tpsl, schedule-cancel, flatten and close --pct are built, checked against this machine's own read of Hyperliquid, signed and submitted like every other write; tpsl and flatten are plans of several such steps, confirmed once (or --yes), and a plan that does not finish says so and exits 1 (3 when a signed step's submit did not answer). A key that is reduce-only (reduce-only on) can close, cancel, protect, schedule a cancel and add isolated margin, and nothing that opens or grows exposure; only the owner's device token turns it off, and it cancels no resting order and revokes no signed action.",
     usage: ["candle perps <subcommand> [flags]"],
     rows: [
       {
@@ -71241,9 +71446,9 @@ var HELP = {
   launch: {
     group: "Trade",
     summary: "Create a token on Solana or Hood, with an optional first buy",
-    description: "Creates a token from a TEE wallet. Without --buy it makes no first buy, so the launch and the position are two decisions, and the buy is a separate candle swap. --buy <amount> adds a first buy from the same wallet, in whole units of the quote asset (SOL, USDC or CNDL on Solana, ETH on Hood; not USDG), within the dev-buy ceilings: on Solana it is its own transaction, sent with the launch as one Jito bundle (an atomic launch), so the launch and the first buy land together or not at all and the bundle pays a Jito tip; on Hood it is a last leg after the curve and the fee. On Solana it also needs the swap:write scope and a Candle deployment with a Jito block engine. Only configured raw caps and USD limits apply; unset means unlimited and zero still binds. When a USD limit is set, Candle reserves the buy against the key's spend window before anything is signed. --buy needs a server with TEE_LAUNCH_BUYS_ENABLED on, which is off by default; while it is off Candle refuses the buy and nothing is built. Needs the launch:write scope and allowLaunch on the wallet, which only the account owner can turn on (candle wallets allow-launch <wallet>, over the device token; an agent key cannot). The wallet decides the chain: a Hood TEE wallet launches on Hood, needs --dex-version, and signs one leg at a time (the curve, then the fee, then the buy with --buy), each only after the one before it landed. Launching from a TEE wallet needs Pro or Max (TIER_REQUIRED otherwise; candle plans). Every plan, Free included, can launch from its embedded wallet with an optional dev buy (same transaction on Solana; best-effort follow-up on Hood), through the MCP tool candle_launch_and_seed or the SDK's launch(); this command does not use that path. The image is one of two flags, never both: --image-url <https-url> for one already hosted, or --image <path> for a PNG, JPEG, GIF or WebP file on this machine, at most 10MB. With --image the file is uploaded to Candle first and the launch is made with the URL that comes back, which --json reports as imageUrl. The upload happens before the confirm prompt and cannot be undone: the file becomes public and permanent even if you then decline or the launch fails. Re-running with the same --client-trade-id resumes the launch without uploading again. --image-url takes only an https:// URL. --banner <file|URL> adds a wide banner: an https URL is passed through; a local file uses the same publication notice and 10MB limit, uploaded with kind=banner so it is never cropped. Banners must be wider than 1.5:1. The result reports bannerUrl, and an atomic retry reuses the saved URL.",
+    description: "Creates a token from a TEE wallet. Without --buy it makes no first buy, so the launch and the position are two decisions, and the buy is a separate candle swap. --buy <amount> adds a first buy from the same wallet, in whole units of the quote asset (SOL, USDC or CNDL on Solana, ETH on Hood; not USDG), within the dev-buy ceilings: on Solana it is its own transaction, sent with the launch as one Jito bundle (an atomic launch), so the launch and the first buy land together or not at all and the bundle pays a Jito tip; on Hood it is a last leg after the curve and the fee. On Solana it also needs the swap:write scope and a Candle deployment with a Jito block engine. Only configured raw caps and USD limits apply; unset means unlimited and zero still binds. When a USD limit is set, Candle reserves the buy against the key's spend window before anything is signed. --buy needs a server with TEE_LAUNCH_BUYS_ENABLED on, which is off by default; while it is off Candle refuses the buy and nothing is built. Needs the launch:write scope and allowLaunch on the wallet, which only the account owner can turn on (candle wallets allow-launch <wallet>, over the device token; an agent key cannot). The wallet decides the chain: a Hood TEE wallet launches on Hood, needs --dex-version, and signs one leg at a time (the curve, then the fee, then the buy with --buy), each only after the one before it landed. Launching from a TEE wallet needs Pro or Max (TIER_REQUIRED otherwise; candle plans). Every plan, Free included, can launch from its embedded wallet with an optional dev buy (same transaction on Solana; best-effort follow-up on Hood), through the MCP tool candle_launch_and_seed or the SDK's launch(); this command does not use that path. The image is one of two flags, never both: --image-url <https-url> for one already hosted, or --image <path> for a PNG, JPEG, GIF or WebP file on this machine, at most 10MB. With --image the file is uploaded to Candle first and the launch is made with the URL that comes back, which --json reports as imageUrl. The upload happens before the confirm prompt and cannot be undone: the file becomes public and permanent even if you then decline or the launch fails. Re-running with the same --client-trade-id resumes the launch without uploading again. --image-url takes only an https:// URL. --banner <file|URL> adds a wide banner: an https URL is passed through; a local file uses the same publication notice and 10MB limit, uploaded with kind=banner so it is never cropped. Banners must be wider than 1.5:1. The result reports bannerUrl, and an atomic retry reuses the saved URL. --mode picks the curve: open or exclusive (the default tier for the pair), test-open or test-exclusive where the server has ENABLE_TEST_CURVES on, or on Solana with sol or cndl the experimental curves exp-a, exp-b, exp-c and exp-custom. exp-custom takes your own curve: --curve-v <V> (the virtual quote it starts with) and --curve-g <G> (what it raises before graduating), in whole units of the quote asset, within limits Candle checks; it works only where the server has EXP_CUSTOM_CURVES on. --creator-fee-bps 100 or 200 adds an extra creator fee on an exp- mode, paid to the creator in full. On an exp- curve the first buy is at most 0.5 SOL (2,000,000 CNDL), or 10% of the threshold when that is lower. --dry-run sends the launch's body to Candle's dry run and prints the preview (the curve's terms, the first buy's share, the fees, how the pool opens at graduation and the dev-buy ceiling) without building, signing or recording anything; the id stays unused. With --image it still uploads the file, which is public and permanent.",
     usage: [
-      "candle launch --name <name> --symbol <symbol> --image <path>|--image-url <url> --wallet <tee> [--banner <file|URL>] [--buy <amount>] [--quote-asset <asset>] [--dex-version v3|v4]"
+      "candle launch --name <name> --symbol <symbol> --image <path>|--image-url <url> --wallet <tee> [--banner <file|URL>] [--buy <amount>] [--quote-asset <asset>] [--dex-version v3|v4] [--mode <mode>] [--curve-v <V> --curve-g <G>] [--creator-fee-bps 0|100|200] [--pool-fee <25|50|100>] [--pool-open <shape>] [--exp-pool-shape <shape>] [--dry-run]"
     ],
     rows: [],
     flags: [
@@ -71267,13 +71472,46 @@ var HELP = {
       {
         invocation: "--dex-version v3|v4",
         description: "Hood only, required there: the Uniswap version the curve graduates to"
+      },
+      {
+        invocation: "--pool-fee 25|50|100",
+        description: "Solana only: the graduated pool's fee in bps (default 50), or with --pool-fee-from the rate a falling fee settles at"
+      },
+      {
+        invocation: "--pool-fee-from <bps> --pool-fee-minutes <min>",
+        description: "Solana only, with --pool-fee: an anti-snipe fee that starts at <bps> (at most 2500) and falls to the --pool-fee rate over <min> minutes (at most 30)"
+      },
+      {
+        invocation: "--pool-open legacy|curve_price",
+        description: "Solana preset tiers: curve_price opens the pool at the curve's last price and burns the rest; the staker carve plus team allocation must fit the tier's limit (the dry run returns it)"
+      },
+      {
+        invocation: "--exp-pool-shape floor|full_range",
+        description: "Solana exp- curves: full_range opens the pool across the whole price range"
+      },
+      {
+        invocation: "--mode <mode>",
+        description: "open or exclusive; test-open or test-exclusive (ENABLE_TEST_CURVES); exp-a, exp-b, exp-c or exp-custom (Solana, sol or cndl)"
+      },
+      {
+        invocation: "--curve-v <V> --curve-g <G>",
+        description: "exp-custom only, and required there: the curve's virtual quote and threshold, in whole units of the quote asset"
+      },
+      {
+        invocation: "--creator-fee-bps 0|100|200",
+        description: "An exp- mode only: an extra creator fee on the curve and the pool, paid to the creator in full"
+      },
+      {
+        invocation: "--dry-run",
+        description: "Print Candle's preview of this launch, with the dev-buy ceiling (0.5 SOL, or 10% of the threshold when lower, on an exp- curve), and build, sign and record nothing"
       }
     ],
     examples: [
       "candle launch --name Demo --symbol DEMO --image ./logo.png --wallet AgentOne",
       "candle launch --name Demo --symbol DEMO --image-url https://example.com/d.png --wallet AgentOne",
       "candle launch --name Demo --symbol DEMO --image-url https://example.com/d.png --wallet HoodAgent --dex-version v4",
-      "candle launch --name Demo --symbol DEMO --image-url https://example.com/d.png --wallet AgentOne --buy 0.1"
+      "candle launch --name Demo --symbol DEMO --image-url https://example.com/d.png --wallet AgentOne --buy 0.1",
+      "candle launch --name Demo --symbol DEMO --image-url https://example.com/d.png --wallet AgentOne --mode exp-custom --curve-v 4 --curve-g 20 --creator-fee-bps 100 --dry-run"
     ],
     env: ENV_API
   },
@@ -71953,36 +72191,15 @@ function documentedFlags(topic) {
   return [...flags].sort();
 }
 var WIDTH = 118;
-function wrap(text, width) {
-  if (text === "")
-    return [""];
-  if (width < 20)
-    return [text];
-  const lines = [];
-  let line = "";
-  for (const word3 of text.split(" ")) {
-    if (line === "")
-      line = word3;
-    else if (`${line} ${word3}`.length <= width)
-      line = `${line} ${word3}`;
-    else {
-      lines.push(line);
-      line = word3;
-    }
-  }
-  if (line !== "")
-    lines.push(line);
-  return lines;
-}
-function renderRows(rows, maxColumn) {
+function renderRows(rows, maxColumn, width = WIDTH) {
   if (rows.length === 0)
     return [];
   const longest = Math.max(...rows.map((row) => row.invocation.length));
-  const column = Math.min(2 + longest + 2, maxColumn);
+  const column = Math.min(2 + longest + 2, maxColumn, Math.max(4, width - 24));
   const pad = " ".repeat(column);
   const out = [];
   for (const row of rows) {
-    const [first = "", ...rest] = wrap(row.description, WIDTH - column);
+    const [first = "", ...rest] = wrapText(row.description, width - column);
     if (2 + row.invocation.length + 2 <= column)
       out.push(`  ${row.invocation.padEnd(column - 2)}${first}`);
     else
@@ -71992,11 +72209,13 @@ function renderRows(rows, maxColumn) {
   }
   return out;
 }
-function renderEnv(names) {
+function renderEnv(names, width = WIDTH) {
   const vars = names.map((name) => ENVIRONMENT.find((entry) => entry.name === name)).filter((entry) => entry !== undefined);
-  return renderRows(vars.map((entry) => ({ invocation: entry.name, description: entry.description })), 32);
+  return renderRows(vars.map((entry) => ({ invocation: entry.name, description: entry.description })), 32, width);
 }
-function renderTopLevel() {
+function renderTopLevel(style) {
+  if (style)
+    return renderPresentedTopLevel(style);
   const out = [
     "candle: Candle from the terminal: trade, launch, and hold your keys on your own machine",
     "",
@@ -72021,24 +72240,67 @@ function renderTopLevel() {
 `)}
 `;
 }
-function renderTopic(word3) {
+function renderTopic(word3, style) {
   const topic = topicFor(word3);
   if (!topic)
     return;
   const canonical = Object.keys(HELP).find((key) => HELP[key] === topic) ?? word3;
   const display = displayName(canonical);
-  const out = [wrap(`candle ${display}: ${topic.description}`, WIDTH).join(`
+  const width = style?.width ?? WIDTH;
+  const out = [wrapText(`candle ${display}: ${topic.description}`, width).join(`
 `)];
   out.push("", `Usage: ${topic.usage.join(`
        `)}`);
   if (topic.rows.length > 0)
-    out.push("", ...renderRows(topic.rows, 58));
+    out.push("", ...renderRows(topic.rows, 58, width));
   if (topic.flags && topic.flags.length > 0) {
-    out.push("", `Flags every ${display} subcommand takes`, ...renderRows(topic.flags, 28));
+    out.push("", `Flags every ${display} subcommand takes`, ...renderRows(topic.flags, 28, width));
   }
   out.push("", "Examples", ...topic.examples.map((example) => `  ${example}`));
   if (topic.env && topic.env.length > 0)
-    out.push("", "Environment", ...renderEnv(topic.env));
+    out.push("", "Environment", ...renderEnv(topic.env, width));
+  return `${out.join(`
+`)}
+`;
+}
+function renderPresentedTopLevel(style) {
+  const { width } = style;
+  const heading = (text) => accent(text, style);
+  const out = [
+    ...brandHeader(style),
+    ...!style.styled ? [...wrapText("Candle CLI: Your wallets and agent tools, one command away.", width), ""] : [],
+    heading("Start here"),
+    ...renderRows([
+      { invocation: "candle setup", description: "Connect your account" },
+      { invocation: "candle portfolio", description: "Read your holdings after setup" },
+      { invocation: "candle mcp", description: "Connect an MCP client using this install" }
+    ], 24, width),
+    "",
+    ...wrapText("Usage: candle <command> [<subcommand>] [flags]", width),
+    "       candle help <command>"
+  ];
+  const group = (name, available) => [
+    heading(name),
+    ...renderRows(Object.entries(HELP).filter(([, topic]) => topic.group === name).map(([word3, topic]) => ({ invocation: displayName(word3), description: topic.summary })), 18, available)
+  ];
+  for (let i = 0;i < GROUPS.length; i++) {
+    const name = GROUPS[i];
+    if (width >= 100 && (name === "Trade" || name === "Custody, on this machine")) {
+      const column = Math.floor((width - 4) / 2);
+      const left = group(name, column);
+      const right = group(GROUPS[++i], column);
+      out.push("");
+      for (let row = 0;row < Math.max(left.length, right.length); row++) {
+        const first = left[row] ?? "";
+        const visible = first.replace(/\x1b\[[0-9;]*m/g, "").length;
+        out.push(`${first}${" ".repeat(Math.max(4, column - visible + 4))}${right[row] ?? ""}`.trimEnd());
+      }
+    } else
+      out.push("", ...group(name, width));
+  }
+  out.push("", heading("Global flags"), ...renderRows(GLOBAL_FLAGS, 28, width));
+  out.push("", heading("Environment"), ...renderEnv(ENVIRONMENT.map((entry) => entry.name), width));
+  out.push("", heading("Plug-ins"), ...renderRows([PLUGIN_LINE], 26, width));
   return `${out.join(`
 `)}
 `;
@@ -76876,9 +77138,9 @@ async function planTransfer(input) {
   }
   const feeLines = [];
   if (profile.newerTransferFee || profile.olderTransferFee) {
-    const epoch = await rpc.getEpoch();
-    const { feeRaw, postFeeAmountRaw } = transferFeeFor(profile, raw, epoch);
-    feeLines.push(`post-fee    ${postFeeAmountRaw} raw arrives (${feeRaw} raw withheld by the mint at epoch ${epoch})`);
+    const epoch2 = await rpc.getEpoch();
+    const { feeRaw, postFeeAmountRaw } = transferFeeFor(profile, raw, epoch2);
+    feeLines.push(`post-fee    ${postFeeAmountRaw} raw arrives (${feeRaw} raw withheld by the mint at epoch ${epoch2})`);
   }
   instructions.push(tokenTransferChecked({
     source,
@@ -83029,7 +83291,7 @@ async function sweepEverythingTo(input) {
       });
     }
   }
-  let epoch;
+  let epoch2;
   for (const acct of tokenAccounts) {
     const token2022 = acct.programId === TOKEN_2022_PROGRAM_ID;
     if (acct.state !== "initialized") {
@@ -83072,9 +83334,9 @@ async function sweepEverythingTo(input) {
           for (const risk of profile.risks)
             say(`  ${acct.mint}: ${risk.message}`);
           if (profile.newerTransferFee || profile.olderTransferFee) {
-            epoch ??= await rpc.getEpoch();
-            const { feeRaw, postFeeAmountRaw } = transferFeeFor(profile, amount, epoch);
-            say(`  ${acct.mint}: ${postFeeAmountRaw} raw will arrive; ${feeRaw} raw is withheld by the mint at epoch ${epoch}`);
+            epoch2 ??= await rpc.getEpoch();
+            const { feeRaw, postFeeAmountRaw } = transferFeeFor(profile, amount, epoch2);
+            say(`  ${acct.mint}: ${postFeeAmountRaw} raw will arrive; ${feeRaw} raw is withheld by the mint at epoch ${epoch2}`);
           }
         }
         const existing = await rpc.getAccountInfo(encodePubkey(destinationAta));
@@ -83844,10 +84106,10 @@ async function feesClaim(args, ctx) {
 async function help(args, ctx) {
   const word3 = args[0];
   if (word3 === undefined) {
-    ctx.deps.stdout.write(renderTopLevel());
+    ctx.deps.stdout.write(renderTopLevel(terminalStyle(ctx.deps, "stdout", ctx.json)));
     return 0;
   }
-  const topic = renderTopic(word3);
+  const topic = renderTopic(word3, terminalStyle(ctx.deps, "stdout", ctx.json));
   if (topic === undefined) {
     ctx.deps.stderr.write(`Unknown command: ${word3}
 `);
@@ -84496,8 +84758,51 @@ init_render();
 init_solana_endpoint();
 init_solana_lite();
 init_trading();
+
+// src/commands/pool-options.ts
+var POOL_FLAGS = ["--pool-fee", "--pool-fee-from", "--pool-fee-minutes", "--pool-open", "--exp-pool-shape"];
+var TIERS = ["25", "50", "100"];
+function poolRequestFields(flags) {
+  const out = {};
+  const fee = flags["--pool-fee"];
+  const from = flags["--pool-fee-from"];
+  const minutes = flags["--pool-fee-minutes"];
+  if ((from !== undefined || minutes !== undefined) && fee === undefined)
+    throw new Error("--pool-fee-from and --pool-fee-minutes need --pool-fee <25|50|100>, the rate the fall ends at");
+  if (fee !== undefined) {
+    if (!TIERS.includes(fee))
+      throw new Error("--pool-fee takes 25, 50 or 100 (bps)");
+    if (from === undefined !== (minutes === undefined))
+      throw new Error("A falling pool fee needs both --pool-fee-from <bps> and --pool-fee-minutes <minutes>");
+    if (from === undefined)
+      out.poolFee = { tier: Number(fee) };
+    else {
+      if (!/^\d+$/.test(from))
+        throw new Error("--pool-fee-from takes whole bps");
+      const m = Number(minutes);
+      if (!Number.isFinite(m) || m <= 0)
+        throw new Error("--pool-fee-minutes takes a positive number of minutes");
+      out.poolFee = { startBps: Number(from), endBps: Number(fee), minutes: m };
+    }
+  }
+  const open8 = flags["--pool-open"];
+  if (open8 !== undefined) {
+    if (open8 !== "legacy" && open8 !== "curve_price")
+      throw new Error("--pool-open takes legacy or curve_price");
+    out.poolOpen = open8;
+  }
+  const shape = flags["--exp-pool-shape"];
+  if (shape !== undefined) {
+    if (shape !== "floor" && shape !== "full_range")
+      throw new Error("--exp-pool-shape takes floor or full_range");
+    out.expPoolShape = shape;
+  }
+  return out;
+}
+
+// src/commands/launch.ts
 init_swap();
-var USAGE6 = "Usage: candle launch --name <name> --symbol <symbol> --image <path>|--image-url <https-url> --wallet <tee> [--banner <file|URL>] [--buy <amount>] [--client-trade-id <id>] [--quote-asset sol|usdc|cndl|eth|usdg] [--dex-version v3|v4] [--mode <mode>] [--rpc-url <url>] [--yes]. A Hood TEE wallet launches on Hood and needs --dex-version.";
+var USAGE6 = "Usage: candle launch --name <name> --symbol <symbol> --image <path>|--image-url <https-url> --wallet <tee> [--banner <file|URL>] [--buy <amount>] [--client-trade-id <id>] [--quote-asset sol|usdc|cndl|eth|usdg] [--dex-version v3|v4] [--mode <mode>] [--curve-v <V> --curve-g <G>] [--creator-fee-bps 0|100|200] [--pool-fee <25|50|100> [--pool-fee-from <bps> --pool-fee-minutes <min>]] [--pool-open legacy|curve_price] [--exp-pool-shape floor|full_range] [--dry-run] [--rpc-url <url>] [--yes]. A Hood TEE wallet launches on Hood and needs --dex-version.";
 var QUOTE_CHAIN = {
   sol: "solana",
   usdc: "solana",
@@ -84530,6 +84835,36 @@ function buyRefusal(error) {
     details: error.details
   });
 }
+function curveFlagProblem(flags) {
+  const mode = flags["--mode"];
+  const v = flags["--curve-v"];
+  const g = flags["--curve-g"];
+  if (v === undefined !== (g === undefined))
+    return "--curve-v and --curve-g go together: a curve is its V and its G.";
+  if (v !== undefined && mode !== "exp-custom")
+    return "--curve-v and --curve-g take --mode exp-custom.";
+  if (mode === "exp-custom" && v === undefined)
+    return "--mode exp-custom needs --curve-v and --curve-g: the curve's V and G in whole units of the quote asset.";
+  for (const [flag, value] of [
+    ["--curve-v", v],
+    ["--curve-g", g]
+  ]) {
+    if (value !== undefined && !/^\d+(\.\d+)?$/.test(value))
+      return `${flag} takes a whole-unit decimal amount of the quote asset, such as 4 or 0.5.`;
+  }
+  const fee = flags["--creator-fee-bps"];
+  if (fee !== undefined && fee !== "0" && fee !== "100" && fee !== "200")
+    return "--creator-fee-bps takes 0, 100 or 200.";
+  if (fee !== undefined && !mode?.startsWith("exp-"))
+    return "--creator-fee-bps takes an exp- --mode.";
+  return;
+}
+function launchCurveFields(flags) {
+  return {
+    ...flags["--curve-v"] !== undefined && flags["--curve-g"] !== undefined ? { curve: { virtualQuote: flags["--curve-v"], threshold: flags["--curve-g"] } } : {},
+    ...flags["--creator-fee-bps"] !== undefined ? { creatorFeeBps: Number(flags["--creator-fee-bps"]) } : {}
+  };
+}
 function buyNotice(buy, chain2) {
   if (!buy)
     return `Launch creates the token only. Make the first buy with a separate candle swap. Price impact does not apply to creation.
@@ -84570,9 +84905,13 @@ async function launch(args, ctx) {
       "--quote-asset",
       "--mode",
       "--dex-version",
-      "--buy"
+      "--buy",
+      ...POOL_FLAGS,
+      "--curve-v",
+      "--curve-g",
+      "--creator-fee-bps"
     ],
-    booleanFlags: ["--yes"],
+    booleanFlags: ["--yes", "--dry-run"],
     pathFlags: ["--image", "--banner"]
   });
   if ("error" in parsed) {
@@ -84581,6 +84920,12 @@ async function launch(args, ctx) {
   }
   const flags = parsed.values;
   const id = flags["--client-trade-id"] ?? `launch-${randomUUID5()}`;
+  const dryRun = parsed.booleans.has("--dry-run");
+  const curveProblem = curveFlagProblem(flags);
+  if (curveProblem) {
+    writeUsageFailure(ctx.deps, `${curveProblem} ${USAGE6}`, ctx.json);
+    return 2;
+  }
   if (flags["--image"] !== undefined && flags["--image-url"] !== undefined) {
     writeUsageFailure(ctx.deps, `Pass --image <path> or --image-url <https-url>, not both: a launch has one image. ${USAGE6}`, ctx.json);
     return 2;
@@ -84597,6 +84942,12 @@ async function launch(args, ctx) {
     writeUsageFailure(ctx.deps, USAGE6, ctx.json);
     return 2;
   }
+  try {
+    poolRequestFields(flags);
+  } catch (error) {
+    writeUsageFailure(ctx.deps, `${error.message}. ${USAGE6}`, ctx.json);
+    return 2;
+  }
   try {
     if (flags["--buy"] !== undefined)
       rawAmount(flags["--buy"], 18);
@@ -84616,7 +84967,7 @@ async function launch(args, ctx) {
       return tradingFailure(ctx, error);
     }
     const key = await tradingKey(ctx);
-    const prior = await lookupOperation(ctx, key, id, "launch");
+    const prior = dryRun ? null : await lookupOperation(ctx, key, id, "launch");
     let retry;
     if (prior) {
       const local = await savedOperation(ctx, key, id);
@@ -84648,7 +84999,7 @@ async function launch(args, ctx) {
     const atomic = chain2 === "solana" && buy !== undefined;
     if (atomic)
       atomicPreflight(ctx, flags, wallet3, buy);
-    const solana = chain2 === "solana" && !atomic ? await tradingSolanaClient(ctx, flags["--rpc-url"]) : undefined;
+    const solana = chain2 === "solana" && !atomic && !dryRun ? await tradingSolanaClient(ctx, flags["--rpc-url"]) : undefined;
     let imageUrl = flags["--image-url"] ?? "";
     if (image && retry?.imageUrl)
       imageUrl = retry.imageUrl;
@@ -84681,6 +85032,8 @@ async function launch(args, ctx) {
       ...image ? { imageUrl: safeText(imageUrl) } : {},
       ...bannerUrl ? { bannerUrl: safeText(bannerUrl) } : {}
     };
+    if (dryRun)
+      return await dryRunLaunch(ctx, key, { flags, id, wallet: wallet3, chain: chain2, atomic, buy, imageUrl, bannerUrl, used });
     if (atomic)
       return await atomicLaunch(ctx, key, {
         flags,
@@ -84708,19 +85061,7 @@ async function launch(args, ctx) {
       throw new TradingError("OPERATION_ALREADY_STARTED", "This machine already started this launch id; no write was resent.");
     ctx.deps.stderr.write(`Operation: ${id}
 `);
-    const built = launchBuildSchema.parse(await request(ctx, key, "/api/v1/launch/self/build", {
-      clientLaunchId: id,
-      chain: "solana",
-      buyAmount: buy ? buy.raw : 0,
-      name: flags["--name"],
-      symbol: flags["--symbol"],
-      imageUrl,
-      ...bannerUrl ? { bannerUrl } : {},
-      linkedWalletId: wallet3.id,
-      ...flags["--description"] ? { description: flags["--description"] } : {},
-      ...flags["--quote-asset"] ? { quoteAsset: flags["--quote-asset"] } : {},
-      ...flags["--mode"] ? { mode: flags["--mode"] } : {}
-    }).catch((error) => {
+    const built = launchBuildSchema.parse(await request(ctx, key, "/api/v1/launch/self/build", solanaSelfBody({ flags, id, wallet: wallet3, buy, imageUrl, bannerUrl })).catch((error) => {
       throw buyRefusal(error);
     }));
     if (!built.transaction || !/^\d+$/.test(built.maxDebitLamports ?? ""))
@@ -84764,9 +85105,109 @@ async function launch(args, ctx) {
     const result = await request(ctx, key, "/api/v1/launch/self/confirm", { clientLaunchId: id, signature });
     return printTradingResult(ctx, { ...result, clientTradeId: id, kind: "launch", quote, ...used });
   } catch (error) {
-    return tradingFailure(ctx, error, id);
+    return tradingFailure(ctx, error, dryRun ? undefined : id);
   }
 }
+function launchFields(args) {
+  const { flags } = args;
+  return {
+    clientLaunchId: args.id,
+    name: flags["--name"],
+    symbol: flags["--symbol"],
+    imageUrl: args.imageUrl,
+    ...args.bannerUrl ? { bannerUrl: args.bannerUrl } : {},
+    ...flags["--description"] ? { description: flags["--description"] } : {},
+    ...flags["--mode"] ? { mode: flags["--mode"] } : {},
+    ...launchCurveFields(flags),
+    ...poolRequestFields(flags)
+  };
+}
+function solanaSelfBody(args) {
+  const quoteAsset = args.flags["--quote-asset"];
+  return {
+    ...launchFields(args),
+    chain: "solana",
+    buyAmount: args.buy ? args.buy.raw : 0,
+    linkedWalletId: args.wallet.id,
+    ...quoteAsset ? { quoteAsset } : {}
+  };
+}
+function atomicBody(args) {
+  const payer = { type: "linked", linkedWalletId: args.wallet.id };
+  const quoteAsset = args.flags["--quote-asset"];
+  return {
+    ...launchFields(args),
+    chain: "solana",
+    ...quoteAsset ? { quoteAsset } : {},
+    payer,
+    firstBuys: [{ payer, amountRaw: args.buy.raw }]
+  };
+}
+function hoodBody(args) {
+  const quoteAsset = args.flags["--quote-asset"];
+  return {
+    ...launchFields(args),
+    chain: "hood",
+    buyAmount: args.buy ? args.buy.raw : 0,
+    linkedWalletId: args.wallet.id,
+    dexVersion: args.flags["--dex-version"],
+    ...quoteAsset ? { quoteAsset: quoteAsset.toLowerCase() } : {}
+  };
+}
+var previewSchema = exports_external.object({
+  resolved: exports_external.object({ mode: exports_external.string(), quoteAsset: exports_external.string() }).passthrough().optional(),
+  curveTerms: exports_external.object({
+    symbol: exports_external.string(),
+    raise: exports_external.number(),
+    startFdv: exports_external.number(),
+    bondingFdv: exports_external.number(),
+    supplySoldPct: exports_external.number(),
+    firstBuy: exports_external.object({ basis: exports_external.string(), amountRaw: exports_external.string(), supplyPct: exports_external.number() }).passthrough().optional(),
+    fees: exports_external.object({ curve: exports_external.object({ feeBps: exports_external.number() }), pool: exports_external.object({ feeBps: exports_external.number() }) }).passthrough().optional(),
+    migration: exports_external.object({ venue: exports_external.string(), poolShape: exports_external.string(), openingPriceStepPct: exports_external.number() }).passthrough().optional()
+  }).passthrough().optional(),
+  devBuyMax: exports_external.string().nullable().optional(),
+  fills: exports_external.array(exports_external.object({ index: exports_external.number(), amountRaw: exports_external.string(), supplyPct: exports_external.number() }).passthrough()).optional()
+}).passthrough();
+var percent = (value) => `${Number(value.toFixed(4))}%`;
+function previewLines(answer2, chain2) {
+  const parsed = previewSchema.safeParse(answer2);
+  if (!parsed.success)
+    return "";
+  const { resolved, curveTerms: terms, devBuyMax, fills } = parsed.data;
+  const quote = (resolved?.quoteAsset ?? (chain2 === "hood" ? "eth" : "sol")).toUpperCase();
+  const decimals = (chain2 === "hood" ? HOOD_BASES[quote] : BASES[quote])?.decimals;
+  const whole = (raw) => decimals === undefined ? `${raw} raw` : `${shortAmount(raw, decimals)} ${quote}`;
+  const lines = [];
+  if (terms) {
+    lines.push(`Curve${resolved ? ` (${safeText(resolved.mode)})` : ""}: raises ${terms.raise} ${safeText(terms.symbol)}; market cap ${terms.startFdv} at start and ${terms.bondingFdv} at graduation; ${percent(terms.supplySoldPct)} of the supply sold by graduation.`);
+    if (terms.firstBuy)
+      lines.push(`First buy (${terms.firstBuy.basis === "buyAmount" ? "your --buy" : "a reference buy"}): ${whole(terms.firstBuy.amountRaw)} takes ${percent(terms.firstBuy.supplyPct)} of the supply after the curve fee.`);
+    if (terms.fees)
+      lines.push(`Fees: ${terms.fees.curve.feeBps / 100}% on the curve, ${terms.fees.pool.feeBps / 100}% in the pool after graduation.`);
+    if (terms.migration)
+      lines.push(`Graduation: a ${safeText(terms.migration.poolShape)} pool on ${safeText(terms.migration.venue)}, opening ${percent(terms.migration.openingPriceStepPct)} against the curve's last price, its liquidity locked for good.`);
+  }
+  for (const fill of fills ?? [])
+    lines.push(`First buy ${fill.index}: ${whole(fill.amountRaw)} takes ${percent(fill.supplyPct)} of the supply.`);
+  if (devBuyMax)
+    lines.push(`Dev-buy ceiling: ${whole(devBuyMax)}.`);
+  return lines.length ? `${lines.join(`
+`)}
+` : "";
+}
+async function dryRunLaunch(ctx, key, args) {
+  const { chain: chain2, buy } = args;
+  const atomic = args.atomic && buy !== undefined;
+  const path = atomic ? "/api/v1/launch/atomic/dry-run" : "/api/v1/launch/self/dry-run";
+  const body = atomic ? atomicBody({ ...args, buy }) : chain2 === "hood" ? hoodBody(args) : solanaSelfBody(args);
+  const answer2 = await request(ctx, key, path, body).catch((error) => {
+    throw atomic ? atomicRefusal(error) : buyRefusal(error);
+  });
+  ctx.deps.stderr.write(`Dry run: nothing was built, signed or recorded, and launch id ${args.id} is unused.
+${previewLines(answer2, chain2)}`);
+  return printTradingResult(ctx, { ...answer2, clientTradeId: args.id, kind: "launch", ...args.used });
+}
 var DEV_BUY_CEILINGS = {
   sol: { env: "DEV_BUY_MAX_LAMPORTS", fallback: 500000000n, unit: "lamports" },
   usdc: { env: "DEV_BUY_MAX_USDC_RAW", fallback: 500000000n, unit: "USDC raw units" },
@@ -84780,9 +85221,34 @@ function devBuyCeiling(env, quoteAsset) {
   const value = raw && /^\d+$/.test(raw) ? BigInt(raw) : 0n;
   return { ceiling: value > 0n ? value : bounds.fallback, unit: bounds.unit };
 }
+function shortAmount(raw, decimals) {
+  const full = decimalAmount(raw, decimals);
+  return full.includes(".") ? full.replace(/0+$/, "").replace(/\.$/, "") : full;
+}
+var EXP_DEV_BUY_MAX_THRESHOLD_BPS = 1000n;
+var EXP_PRESET_THRESHOLD_RAW = { sol: 5000000000n, cndl: 330000000000n };
+function expThresholdRaw(flags, quoteAsset) {
+  const mode = flags["--mode"];
+  if (mode === "exp-custom") {
+    const g = flags["--curve-g"];
+    const decimals = BASES[quoteAsset.toUpperCase()]?.decimals;
+    return g === undefined || decimals === undefined ? undefined : BigInt(rawAmount(g, decimals));
+  }
+  return mode === "exp-a" || mode === "exp-b" || mode === "exp-c" ? EXP_PRESET_THRESHOLD_RAW[quoteAsset] : undefined;
+}
 function atomicPreflight(ctx, flags, wallet3, buy) {
   const quoteAsset = (flags["--quote-asset"] ?? "sol").toLowerCase();
   const { ceiling, unit } = devBuyCeiling(ctx.deps.env, quoteAsset);
+  const threshold = expThresholdRaw(flags, quoteAsset);
+  if (threshold !== undefined) {
+    const curveCap = threshold * EXP_DEV_BUY_MAX_THRESHOLD_BPS / 10000n;
+    const applies = curveCap < ceiling ? curveCap : ceiling;
+    if (BigInt(buy.raw) > applies) {
+      const symbol = quoteAsset.toUpperCase();
+      const decimals = BASES[symbol]?.decimals ?? 9;
+      throw new TradingError("DEV_BUY_TOO_HIGH", `buyAmount exceeds this launch's dev-buy ceiling of ${shortAmount(applies.toString(), decimals)} ${symbol} (${applies} ${unit}): at most ${shortAmount(ceiling.toString(), decimals)} ${symbol}, or 10% of the threshold when that is lower`, { details: { field: "buyAmount" } });
+    }
+  }
   if (BigInt(buy.raw) > ceiling)
     throw new TradingError("DEV_BUY_TOO_HIGH", `buyAmount exceeds the per-launch dev-buy ceiling of ${ceiling} ${unit} for ${quoteAsset} on solana`, { details: { field: "buyAmount" } });
   if (wallet3.scopes !== undefined && !wallet3.scopes.includes("swap:write"))
@@ -84827,20 +85293,7 @@ async function atomicLaunch(ctx, key, args) {
     throw new TradingError("OPERATION_ALREADY_STARTED", "This machine already started this launch id; no write was resent.");
   ctx.deps.stderr.write(`Operation: ${id}
 `);
-  const payer = { type: "linked", linkedWalletId: wallet3.id };
-  const built = atomicBuildSchema.parse(await request(ctx, key, "/api/v1/launch/atomic/build", {
-    clientLaunchId: id,
-    chain: "solana",
-    name: flags["--name"],
-    symbol: flags["--symbol"],
-    imageUrl: args.imageUrl,
-    ...args.bannerUrl ? { bannerUrl: args.bannerUrl } : {},
-    ...flags["--description"] ? { description: flags["--description"] } : {},
-    ...flags["--quote-asset"] ? { quoteAsset: flags["--quote-asset"] } : {},
-    ...flags["--mode"] ? { mode: flags["--mode"] } : {},
-    payer,
-    firstBuys: [{ payer, amountRaw: buy.raw }]
-  }).catch((error) => {
+  const built = atomicBuildSchema.parse(await request(ctx, key, "/api/v1/launch/atomic/build", atomicBody(args)).catch((error) => {
     throw atomicRefusal(error);
   }));
   const [launchLeg, buyLeg] = built.legs;
@@ -84957,25 +85410,14 @@ function resumeAtomicLaunch(ctx, id, local, prior) {
 }
 async function hoodLaunch(ctx, key, args) {
   const { flags, id, wallet: wallet3, buy } = args;
+  if (Object.keys(poolRequestFields(flags)).length)
+    throw new TradingUsage("Pool fee and pool shape choices are Solana only; a Hood launch cannot take them.");
   const allowedLegs = buy ? HOOD_LAUNCH_BUY_LEGS : HOOD_LAUNCH_LEGS;
   if (!await claimOperation(ctx, key, id, "launch"))
     throw new TradingError("OPERATION_ALREADY_STARTED", "This machine already started this launch id; no write was resent.");
   ctx.deps.stderr.write(`Operation: ${id}
 `);
-  const built = await request(ctx, key, "/api/v1/launch/self/build", {
-    clientLaunchId: id,
-    chain: "hood",
-    buyAmount: buy ? buy.raw : 0,
-    name: flags["--name"],
-    symbol: flags["--symbol"],
-    imageUrl: args.imageUrl,
-    ...args.bannerUrl ? { bannerUrl: args.bannerUrl } : {},
-    linkedWalletId: wallet3.id,
-    dexVersion: flags["--dex-version"],
-    ...flags["--description"] ? { description: flags["--description"] } : {},
-    ...flags["--quote-asset"] ? { quoteAsset: flags["--quote-asset"].toLowerCase() } : {},
-    ...flags["--mode"] ? { mode: flags["--mode"] } : {}
-  }).catch((error) => {
+  const built = await request(ctx, key, "/api/v1/launch/self/build", hoodBody(args)).catch((error) => {
     throw buyRefusal(error);
   });
   const parsed = sequencedSchema.safeParse(built);
@@ -85454,8 +85896,8 @@ async function lpRemove(args, ctx) {
     return usage4(ctx, parsed.error);
   const flags = parsed.values;
   const id = flags["--client-trade-id"] ?? `lp-${randomUUID6()}`;
-  const percent = Number(flags["--percent"]);
-  if (parsed.positionals.length !== 1 || !flags["--percent"] || !/^\d+(\.\d{1,2})?$/.test(flags["--percent"]) || !(percent > 0 && percent <= 100) || !validClientId(id))
+  const percent2 = Number(flags["--percent"]);
+  if (parsed.positionals.length !== 1 || !flags["--percent"] || !/^\d+(\.\d{1,2})?$/.test(flags["--percent"]) || !(percent2 > 0 && percent2 <= 100) || !validClientId(id))
     return usage4(ctx, "Usage: candle lp remove <position> --percent <0.01-100> [--wallet <tee>] [--slippage-bps 100] [--client-trade-id <id>] [--rpc-url <url>] [--yes]");
   try {
     const position = solanaAddress(parsed.positionals[0], "The position");
@@ -85470,8 +85912,8 @@ async function lpRemove(args, ctx) {
       wallet: wallet3,
       solana,
       yes: parsed.booleans.has("--yes"),
-      intent: percent === 100 ? `Remove all liquidity from position ${position}, claim its fees and close it (rent returns to the wallet)` : `Remove ${percent}% of the liquidity in position ${position}`,
-      body: { position, percent, slippageBps }
+      intent: percent2 === 100 ? `Remove all liquidity from position ${position}, claim its fees and close it (rent returns to the wallet)` : `Remove ${percent2}% of the liquidity in position ${position}`,
+      body: { position, percent: percent2, slippageBps }
     });
   } catch (error) {
     return tradingFailure(ctx, error, id);
@@ -86836,18 +87278,55 @@ function perpsCandleWindow2(opts, now) {
     return usage5(`interval must be one of ${PERPS_CANDLE_INTERVALS2.join(" ")}.`);
   const count2 = bounded2(opts.count, 100, 1, 5000, "count");
   const raw = opts.end;
-  const endTime = raw === undefined ? now : typeof raw === "number" || /^\d+$/.test(raw) ? Number(raw) : /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/.test(raw) ? Date.parse(raw) : NaN;
+  const endTime = raw === undefined ? now : epoch2(raw);
   const startTime = endTime - count2 * at2(INTERVAL_MS2, index);
   if (!Number.isSafeInteger(endTime) || endTime < 0 || endTime > now || startTime < 0)
     return usage5("end must be an ISO 8601 time or epoch milliseconds, no later than now.");
   return { interval, count: count2, startTime, endTime };
 }
+function epoch2(raw) {
+  return typeof raw === "number" || /^\d+$/.test(raw) ? Number(raw) : /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/.test(raw) ? Date.parse(raw) : NaN;
+}
+var PERPS_FUNDING_HISTORY_MAX_MS2 = 30 * 86400000;
+var PERPS_FUNDING_HISTORY_MAX_ROWS2 = 500;
+function perpsFundingWindow2(opts, now) {
+  const endTime = opts.end === undefined ? now : epoch2(opts.end);
+  if (!Number.isSafeInteger(endTime) || endTime < 0 || endTime > now)
+    return usage5("end must be an ISO 8601 time or epoch milliseconds, no later than now.");
+  const startTime = opts.start === undefined ? endTime - 86400000 : epoch2(opts.start);
+  if (!Number.isSafeInteger(startTime) || startTime < 0 || startTime > endTime)
+    return usage5("start must be an ISO 8601 time or epoch milliseconds, no later than end.");
+  if (endTime - startTime > PERPS_FUNDING_HISTORY_MAX_MS2)
+    return usage5("start must be at most 30 days before end.");
+  return { startTime, endTime };
+}
 function bounded2(value, fallback, min, max, name2) {
   const n = value ?? fallback;
   if (!Number.isInteger(n) || n < min || n > max)
     return usage5(`${name2} must be an integer from ${min} to ${max}.`);
   return n;
 }
+function parsePerpsFundingHistory2(value, coin, window) {
+  if (!Array.isArray(value))
+    return unavailable4();
+  const funding = [];
+  for (const row of value) {
+    if (!object3(row) || row.coin !== coin || !integer2(row.time) || !decimal5(row.fundingRate) || !decimal5(row.premium))
+      return unavailable4();
+    if (row.time >= window.startTime && row.time <= window.endTime)
+      funding.push({
+        time: row.time,
+        fundingRate: row.fundingRate,
+        fundingAprPct: fixed2(scaled2(row.fundingRate) * 876000n, 2),
+        premium: row.premium
+      });
+  }
+  funding.sort((a, b) => a.time - b.time);
+  return {
+    funding: funding.slice(0, PERPS_FUNDING_HISTORY_MAX_ROWS2),
+    truncated: funding.length > PERPS_FUNDING_HISTORY_MAX_ROWS2
+  };
+}
 
 class PerpsMarketReader2 {
   opts;
@@ -87125,6 +87604,44 @@ class PerpsMarketReader2 {
       candles: candles.slice(-window.count)
     };
   }
+  async fundingHistory(coin, opts = {}) {
+    this.key();
+    const window = perpsFundingWindow2(opts, this.now());
+    const [config, core] = await Promise.all([this.config(), this.core()]);
+    const canonical4 = at2(core.universe, resolve3(core, coin)).name;
+    const value = await info2(this.opts.fetcher, this.opts.network, {
+      type: "fundingHistory",
+      coin: canonical4,
+      startTime: window.startTime,
+      endTime: window.endTime
+    });
+    return {
+      ...this.envelope(config),
+      coin: canonical4,
+      startTime: window.startTime,
+      endTime: window.endTime,
+      ...parsePerpsFundingHistory2(value, canonical4, window)
+    };
+  }
+  async predictedFunding() {
+    this.key();
+    const [config, core, extras] = await Promise.all([this.config(), this.core(), this.extras()]);
+    if (extras.predicted === null)
+      return unavailable4();
+    const predicted = [];
+    for (const meta of core.universe) {
+      const row = extras.predicted.get(meta.name);
+      if (row)
+        predicted.push({
+          coin: meta.name,
+          fundingRate: row.fundingRate,
+          fundingAprPct: fixed2(scaled2(row.fundingRate) * 876000n, 2),
+          nextFundingTime: row.nextFundingTime
+        });
+    }
+    predicted.sort((a, b) => a.coin < b.coin ? -1 : a.coin > b.coin ? 1 : 0);
+    return { ...this.envelope(config, extras.warnings, this.extrasCache?.at ?? this.now()), predicted };
+  }
 }
 
 // src/perps-history.ts
@@ -88785,7 +89302,7 @@ function typedDataAuthorization(wallet3, typedData) {
   });
   return { body, authorizationSignature: sign4("sha256", Buffer.from(payload), wallet3.signer).toString("base64") };
 }
-function previewLines(build) {
+function previewLines2(build) {
   const action = build.action;
   const preview = build.preview ?? {};
   const notes = [
@@ -88829,7 +89346,7 @@ async function confirm(ctx, build, address, yes) {
   if (ctx.deps.env.CANDLE_HYPERLIQUID_BUILDER !== undefined)
     output.write(`Builder trust override: ${builderPin2(ctx)} (replaces this release's pin).
 `);
-  for (const line of previewLines(build))
+  for (const line of previewLines2(build))
     output.write(`${line}
 `);
   if (yes)
@@ -92883,7 +93400,7 @@ var SKILLS_CLAUDE_COMMAND = "/plugin marketplace add candledottv/agentic";
 var CODING_AGENTS_DOCS = "https://docs.candle.tv/developers/coding-agents";
 function section(deps, title) {
   deps.stdout.write(`
-== ${title} ==
+${accent(`== ${title} ==`, terminalStyle(deps, "stdout"))}
 `);
 }
 async function setup(args, ctx) {
@@ -92901,6 +93418,10 @@ async function setup(args, ctx) {
     writeUsageFailure(deps, "setup is an interactive wizard; for machine use, compose `auth login --json` and `doctor --json` directly", json);
     return 2;
   }
+  const style = terminalStyle(deps, "stdout");
+  if (deps.isTTY.stdin)
+    deps.stdout.write(brandHeader(style).join(`
+`));
   await printIdentity(ctx);
   deps.stdout.write(`candle setup: this wizard authorizes the device, shows funding, and verifies everything.
 `);
@@ -94557,6 +95078,14 @@ async function tui(args, ctx) {
 Usage: candle tui [--profile <name>]`, json);
     return 2;
   }
+  if (json || !deps.isTTY.stdin || !deps.isTTY.stdout || deps.env.TERM === "dumb" || deps.presentation?.plain || deps.env.CANDLE_PLAIN === "1") {
+    writeLocalFailure(deps, {
+      code: "TUI_REQUIRES_TERMINAL",
+      message: "The Candle TUI needs an interactive terminal.",
+      suggestion: "Use candle portfolio or candle help for command-line output."
+    }, json);
+    return 1;
+  }
   const path = findPlugin("tui", deps.env.PATH);
   if (path === undefined) {
     writeLocalFailure(deps, {
@@ -94572,6 +95101,8 @@ Usage: candle tui [--profile <name>]`, json);
     if (value !== undefined)
       env[name2] = value;
   }
+  if (deps.presentation?.noColor)
+    env.NO_COLOR = "1";
   const candle = deps.execPath.endsWith("/node") || deps.execPath.endsWith("/bun") ? "candle" : deps.execPath;
   return deps.runPlugin(path, [...ctx.profile ? ["--profile", ctx.profile] : [], "--candle", candle], env);
 }
@@ -94583,11 +95114,13 @@ import { randomBytes as randomBytes11 } from "node:crypto";
 // src/progress.ts
 var FRAMES = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
 var INTERVAL_MS3 = 80;
-function stepReporter(write, tty) {
+function stepReporter(write, tty, ascii = false) {
+  let detach = () => {};
   let timer = null;
   let frame = 0;
   let current = null;
   const clearSpinner = () => {
+    detach();
     if (timer !== null)
       clearInterval(timer);
     timer = null;
@@ -94606,6 +95139,19 @@ function stepReporter(write, tty) {
       }
       write(`${FRAMES[0]} ${label}`);
       frame = 1;
+      const interrupt = (signal) => {
+        clearSpinner();
+        if (process.listenerCount(signal) === 0)
+          process.kill(process.pid, signal);
+      };
+      const sigint = () => interrupt("SIGINT");
+      const sigterm = () => interrupt("SIGTERM");
+      process.once("SIGINT", sigint);
+      process.once("SIGTERM", sigterm);
+      detach = () => {
+        process.off("SIGINT", sigint);
+        process.off("SIGTERM", sigterm);
+      };
       timer = setInterval(() => {
         write(`\r\x1B[2K${FRAMES[frame % FRAMES.length]} ${current}`);
         frame++;
@@ -94615,17 +95161,22 @@ function stepReporter(write, tty) {
     },
     done(label) {
       clearSpinner();
-      write(`✓ ${label}
+      write(`${ascii ? "OK" : "✓"} ${label}
 `);
     },
     fail(label) {
       clearSpinner();
-      write(`✗ ${label}
+      write(`${ascii ? "FAIL" : "✗"} ${label}
 `);
     },
     stop: clearSpinner
   };
 }
+function commandSteps(ctx) {
+  const style = terminalStyle(ctx.deps, "stderr", ctx.json);
+  const reporter = stepReporter(ctx.json ? () => {} : (text3) => ctx.deps.stderr.write(text3), style.motion, !style.styled);
+  return { ...reporter, [Symbol.dispose ?? Symbol.for("Symbol.dispose")]: () => reporter.stop() };
+}
 function formatBytes(n) {
   if (n >= 1024 * 1024)
     return `${(n / (1024 * 1024)).toFixed(1)} MB`;
@@ -94932,226 +95483,233 @@ init_fido2();
 var SIGNATURE_VERIFIED = "signature verified (Sigstore, keyless; signer pinned to the release workflow)";
 var INSTALLER_LINE = "curl -fsSL https://candle.tv/install.sh | bash";
 async function update(args, ctx) {
-  const { deps, json } = ctx;
-  const parsed = parseArgs(args, { valueFlags: ["--to"], booleanFlags: ["--check"] });
-  if ("error" in parsed) {
-    writeUsageFailure(deps, parsed.error, json);
-    return 2;
-  }
-  if (parsed.positionals.length > 0) {
-    writeUsageFailure(deps, `Unexpected argument: ${parsed.positionals[0]}`, json);
-    return 2;
-  }
-  const check = parsed.booleans.has("--check");
-  const pinned = parsed.values["--to"];
-  const realExec = await deps.realpath(deps.execPath).catch(() => deps.execPath);
-  const method = detectInstall(deps.execPath, realExec);
-  if (method === "homebrew") {
-    if (json) {
-      const payload = { current: CLI_VERSION, latest: null, updated: false, path: realExec, method };
-      deps.stdout.write(`${JSON.stringify(payload)}
+  let __stack = [];
+  try {
+    const { deps, json } = ctx;
+    const parsed = parseArgs(args, { valueFlags: ["--to"], booleanFlags: ["--check"] });
+    if ("error" in parsed) {
+      writeUsageFailure(deps, parsed.error, json);
+      return 2;
+    }
+    if (parsed.positionals.length > 0) {
+      writeUsageFailure(deps, `Unexpected argument: ${parsed.positionals[0]}`, json);
+      return 2;
+    }
+    const check = parsed.booleans.has("--check");
+    const pinned = parsed.values["--to"];
+    const realExec = await deps.realpath(deps.execPath).catch(() => deps.execPath);
+    const method = detectInstall(deps.execPath, realExec);
+    if (method === "homebrew") {
+      if (json) {
+        const payload = { current: CLI_VERSION, latest: null, updated: false, path: realExec, method };
+        deps.stdout.write(`${JSON.stringify(payload)}
 `);
-    } else {
-      deps.stdout.write(`Installed by Homebrew. Run: brew upgrade candle
+      } else {
+        deps.stdout.write(`Installed by Homebrew. Run: brew upgrade candle
 `);
+      }
+      return 0;
     }
-    return 0;
-  }
-  if (method === "script") {
-    if (json) {
-      const payload = { current: CLI_VERSION, latest: null, updated: false, path: realExec, method };
-      deps.stdout.write(`${JSON.stringify(payload)}
+    if (method === "script") {
+      if (json) {
+        const payload = { current: CLI_VERSION, latest: null, updated: false, path: realExec, method };
+        deps.stdout.write(`${JSON.stringify(payload)}
 `);
-    } else {
-      deps.stdout.write(`Installed with npm (or a dev checkout). Run: npm i -g @candledottv/cli@latest
+      } else {
+        deps.stdout.write(`Installed with npm (or a dev checkout). Run: npm i -g @candledottv/cli@latest
 `);
+      }
+      return 0;
     }
-    return 0;
-  }
-  const base2 = releaseBaseUrl(deps.env);
-  const fetched = pinned ? await fetchPinned(deps, base2, pinned) : await fetchLatest(deps, base2);
-  if (!fetched.ok) {
-    const code = fetched.kind === "invalid" ? "MANIFEST_INVALID" : "UPDATE_UNREACHABLE";
-    writeLocalFailure(deps, { code, message: fetched.message }, json);
-    return 1;
-  }
-  const target = fetched.manifest;
-  let identityUri;
-  try {
-    identityUri = releaseIdentityUri(target.version);
-  } catch (error) {
-    writeLocalFailure(deps, {
-      code: "MANIFEST_INVALID",
-      message: `Refusing the release manifest at ${base2}: ${messageOf2(error)}.`,
-      suggestion: "Nothing was downloaded or installed."
-    }, json);
-    return 1;
-  }
-  const order = compareVersions(CLI_VERSION, target.version);
-  if (check) {
-    if (json) {
-      const payload = { current: CLI_VERSION, latest: target.version, updated: false, path: realExec };
-      deps.stdout.write(`${JSON.stringify(payload)}
+    const base2 = releaseBaseUrl(deps.env);
+    const fetched = pinned ? await fetchPinned(deps, base2, pinned) : await fetchLatest(deps, base2);
+    if (!fetched.ok) {
+      const code = fetched.kind === "invalid" ? "MANIFEST_INVALID" : "UPDATE_UNREACHABLE";
+      writeLocalFailure(deps, { code, message: fetched.message }, json);
+      return 1;
+    }
+    const target = fetched.manifest;
+    let identityUri;
+    try {
+      identityUri = releaseIdentityUri(target.version);
+    } catch (error) {
+      writeLocalFailure(deps, {
+        code: "MANIFEST_INVALID",
+        message: `Refusing the release manifest at ${base2}: ${messageOf2(error)}.`,
+        suggestion: "Nothing was downloaded or installed."
+      }, json);
+      return 1;
+    }
+    const order = compareVersions(CLI_VERSION, target.version);
+    if (check) {
+      if (json) {
+        const payload = { current: CLI_VERSION, latest: target.version, updated: false, path: realExec };
+        deps.stdout.write(`${JSON.stringify(payload)}
 `);
-    } else if (order < 0) {
-      deps.stdout.write(`candle ${CLI_VERSION}; ${target.version} available. Run: candle update
+      } else if (order < 0) {
+        deps.stdout.write(`candle ${CLI_VERSION}; ${target.version} available. Run: candle update
 `);
-    } else {
-      deps.stdout.write(`candle ${CLI_VERSION} is up to date (latest ${target.version})
+      } else {
+        deps.stdout.write(`candle ${CLI_VERSION} is up to date (latest ${target.version})
 `);
+      }
+      return 0;
     }
-    return 0;
-  }
-  if (order === 0 || order > 0 && !pinned) {
-    if (json) {
-      const payload = { current: CLI_VERSION, latest: target.version, updated: false, path: realExec };
-      deps.stdout.write(`${JSON.stringify(payload)}
+    if (order === 0 || order > 0 && !pinned) {
+      if (json) {
+        const payload = { current: CLI_VERSION, latest: target.version, updated: false, path: realExec };
+        deps.stdout.write(`${JSON.stringify(payload)}
 `);
-    } else {
-      deps.stdout.write(`candle ${CLI_VERSION} is up to date
+      } else {
+        deps.stdout.write(`candle ${CLI_VERSION} is up to date
 `);
+      }
+      return 0;
     }
-    return 0;
-  }
-  if (order > 0 && pinned)
-    deps.stderr.write(`Warning: ${target.version} is a downgrade from ${CLI_VERSION}
+    if (order > 0 && pinned)
+      deps.stderr.write(`Warning: ${target.version} is a downgrade from ${CLI_VERSION}
 `);
-  if (!deps.platformKey) {
-    writeLocalFailure(deps, {
-      code: "UPDATE_UNSUPPORTED_PLATFORM",
-      message: "No release binary for this platform.",
-      suggestion: "Run: npm i -g @candledottv/cli@latest"
-    }, json);
-    return 1;
-  }
-  const expectedName = `candle-${deps.platformKey}`;
-  const asset = target.assets[deps.platformKey];
-  if (!asset) {
-    writeLocalFailure(deps, {
-      code: "UPDATE_UNSUPPORTED_PLATFORM",
-      message: `Release ${target.tag} has no asset for ${deps.platformKey}.`
-    }, json);
-    return 1;
-  }
-  if (asset.name !== expectedName) {
-    writeLocalFailure(deps, {
-      code: "MANIFEST_INVALID",
-      message: `Release ${target.tag} names ${asset.name} as the ${deps.platformKey} asset; this platform installs ${expectedName}.`,
-      suggestion: "Nothing was downloaded or installed."
-    }, json);
-    return 1;
-  }
-  const helperName = helperAssetName(deps.platformKey);
-  const helperAsset = target.helpers?.[deps.platformKey];
-  if (helperAsset !== undefined && helperAsset.name !== helperName) {
-    writeLocalFailure(deps, {
-      code: "MANIFEST_INVALID",
-      message: `Release ${target.tag} names ${helperAsset.name} as the ${deps.platformKey} security key helper; this platform installs ${helperName}.`,
-      suggestion: "Nothing was downloaded or installed."
-    }, json);
-    return 1;
-  }
-  const steps = json ? stepReporter(() => {}, false) : stepReporter((text3) => deps.stderr.write(text3), process.stderr.isTTY === true);
-  if (!json) {
-    const total = asset.size + (helperAsset?.size ?? 0);
-    deps.stderr.write(`Updating candle ${CLI_VERSION} -> ${target.version} (${formatBytes(total)})
+    if (!deps.platformKey) {
+      writeLocalFailure(deps, {
+        code: "UPDATE_UNSUPPORTED_PLATFORM",
+        message: "No release binary for this platform.",
+        suggestion: "Run: npm i -g @candledottv/cli@latest"
+      }, json);
+      return 1;
+    }
+    const expectedName = `candle-${deps.platformKey}`;
+    const asset = target.assets[deps.platformKey];
+    if (!asset) {
+      writeLocalFailure(deps, {
+        code: "UPDATE_UNSUPPORTED_PLATFORM",
+        message: `Release ${target.tag} has no asset for ${deps.platformKey}.`
+      }, json);
+      return 1;
+    }
+    if (asset.name !== expectedName) {
+      writeLocalFailure(deps, {
+        code: "MANIFEST_INVALID",
+        message: `Release ${target.tag} names ${asset.name} as the ${deps.platformKey} asset; this platform installs ${expectedName}.`,
+        suggestion: "Nothing was downloaded or installed."
+      }, json);
+      return 1;
+    }
+    const helperName = helperAssetName(deps.platformKey);
+    const helperAsset = target.helpers?.[deps.platformKey];
+    if (helperAsset !== undefined && helperAsset.name !== helperName) {
+      writeLocalFailure(deps, {
+        code: "MANIFEST_INVALID",
+        message: `Release ${target.tag} names ${helperAsset.name} as the ${deps.platformKey} security key helper; this platform installs ${helperName}.`,
+        suggestion: "Nothing was downloaded or installed."
+      }, json);
+      return 1;
+    }
+    const steps = __using(__stack, commandSteps(ctx), 0);
+    if (!json) {
+      const total = asset.size + (helperAsset?.size ?? 0);
+      deps.stderr.write(`Updating candle ${CLI_VERSION} -> ${target.version} (${formatBytes(total)})
 `);
-  }
-  steps.start("downloading SHA256SUMS");
-  const sums = await downloadSums(deps, base2, target.tag);
-  if (!sums.ok) {
-    steps.fail("downloading SHA256SUMS");
-    writeLocalFailure(deps, { code: "UPDATE_UNREACHABLE", message: sums.message }, json);
-    return 1;
-  }
-  steps.done("downloaded SHA256SUMS");
-  const dir = realExec.slice(0, realExec.lastIndexOf("/")) || ".";
-  const staged = [];
-  const discardAll = async () => {
-    for (const path of staged)
-      await discard(deps, path);
-  };
-  const binary = await stage(deps, steps, {
-    base: base2,
-    tag: target.tag,
-    name: expectedName,
-    expectedSha256: asset.sha256,
-    sums: sums.sums,
-    identityUri,
-    dir,
-    version: target.version,
-    staged,
-    label: ""
-  });
-  if (!binary.ok) {
-    await discardAll();
-    writeLocalFailure(deps, binary.failure, json);
-    return 1;
-  }
-  let helper = null;
-  if (helperAsset !== undefined) {
-    const fetched2 = await stage(deps, steps, {
+    }
+    steps.start("downloading SHA256SUMS");
+    const sums = await downloadSums(deps, base2, target.tag);
+    if (!sums.ok) {
+      steps.fail("downloading SHA256SUMS");
+      writeLocalFailure(deps, { code: "UPDATE_UNREACHABLE", message: sums.message }, json);
+      return 1;
+    }
+    steps.done("downloaded SHA256SUMS");
+    const dir = realExec.slice(0, realExec.lastIndexOf("/")) || ".";
+    const staged = [];
+    const discardAll = async () => {
+      for (const path of staged)
+        await discard(deps, path);
+    };
+    const binary = await stage(deps, steps, {
       base: base2,
       tag: target.tag,
-      name: helperName,
-      expectedSha256: helperAsset.sha256,
+      name: expectedName,
+      expectedSha256: asset.sha256,
       sums: sums.sums,
       identityUri,
       dir,
       version: target.version,
       staged,
-      label: `${helperName} `
+      label: ""
     });
-    if (!fetched2.ok) {
+    if (!binary.ok) {
       await discardAll();
-      writeLocalFailure(deps, fetched2.failure, json);
+      writeLocalFailure(deps, binary.failure, json);
       return 1;
     }
-    helper = { tmpPath: fetched2.tmpPath, target: `${dir}/${HELPER_NAME}` };
-  }
-  steps.start("installing");
-  try {
-    await deps.rename(binary.tmpPath, realExec);
-  } catch (error) {
-    steps.fail("installing");
-    await discardAll();
-    writeLocalFailure(deps, notWritable(dir, error), json);
-    return 1;
-  }
-  if (helper !== null) {
+    let helper = null;
+    if (helperAsset !== undefined) {
+      const fetched2 = await stage(deps, steps, {
+        base: base2,
+        tag: target.tag,
+        name: helperName,
+        expectedSha256: helperAsset.sha256,
+        sums: sums.sums,
+        identityUri,
+        dir,
+        version: target.version,
+        staged,
+        label: `${helperName} `
+      });
+      if (!fetched2.ok) {
+        await discardAll();
+        writeLocalFailure(deps, fetched2.failure, json);
+        return 1;
+      }
+      helper = { tmpPath: fetched2.tmpPath, target: `${dir}/${HELPER_NAME}` };
+    }
+    steps.start("installing");
     try {
-      await deps.rename(helper.tmpPath, helper.target);
+      await deps.rename(binary.tmpPath, realExec);
     } catch (error) {
       steps.fail("installing");
-      await discard(deps, helper.tmpPath);
-      const failure = notWritable(dir, error);
-      writeLocalFailure(deps, {
-        ...failure,
-        message: `${failure.message} candle ${target.version} was installed to ${realExec}, but its security key helper could not be renamed to ${helper.target}.`
-      }, json);
+      await discardAll();
+      writeLocalFailure(deps, notWritable(dir, error), json);
       return 1;
     }
-  }
-  steps.done(`installed to ${realExec}${helper !== null ? ` and ${helper.target}` : ""}`);
-  const helperReport2 = helper !== null ? { name: HELPER_NAME, updated: true } : null;
-  if (json) {
-    const payload = {
-      current: CLI_VERSION,
-      latest: target.version,
-      updated: true,
-      path: realExec,
-      helper: helperReport2
-    };
-    deps.stdout.write(`${JSON.stringify(payload)}
+    if (helper !== null) {
+      try {
+        await deps.rename(helper.tmpPath, helper.target);
+      } catch (error) {
+        steps.fail("installing");
+        await discard(deps, helper.tmpPath);
+        const failure = notWritable(dir, error);
+        writeLocalFailure(deps, {
+          ...failure,
+          message: `${failure.message} candle ${target.version} was installed to ${realExec}, but its security key helper could not be renamed to ${helper.target}.`
+        }, json);
+        return 1;
+      }
+    }
+    steps.done(`installed to ${realExec}${helper !== null ? ` and ${helper.target}` : ""}`);
+    const helperReport2 = helper !== null ? { name: HELPER_NAME, updated: true } : null;
+    if (json) {
+      const payload = {
+        current: CLI_VERSION,
+        latest: target.version,
+        updated: true,
+        path: realExec,
+        helper: helperReport2
+      };
+      deps.stdout.write(`${JSON.stringify(payload)}
 `);
-  } else {
-    deps.stdout.write(`Updated candle ${CLI_VERSION} -> ${target.version}
+    } else {
+      deps.stdout.write(`Updated candle ${CLI_VERSION} -> ${target.version}
 `);
-    if (helper !== null)
-      deps.stdout.write(`Installed ${HELPER_NAME} ${target.version} to ${helper.target}
+      if (helper !== null)
+        deps.stdout.write(`Installed ${HELPER_NAME} ${target.version} to ${helper.target}
 `);
+    }
+    return 0;
+  } catch (_catch) {
+    var _err = _catch, _hasErr = 1;
+  } finally {
+    __callDispose(__stack, _err, _hasErr);
   }
-  return 0;
 }
 async function stage(deps, steps, opts) {
   const { name: name2, label } = opts;
@@ -96267,13 +96825,13 @@ async function addPasskeyFactor(ctx, parsed, resolvedVault, hold) {
   let committed;
   try {
     const prfOutput = await assertPlatformPrf(deps, session, envelope, vaultId, "derive this vault's key on it");
-    let wrap2;
+    let wrap;
     try {
-      wrap2 = await wrapDekForPrf(vault.dek, prfOutput, envelope, vault.file);
+      wrap = await wrapDekForPrf(vault.dek, prfOutput, envelope, vault.file);
     } finally {
       wipe(prfOutput);
     }
-    sealed = { ...envelope, wrap: wrap2 };
+    sealed = { ...envelope, wrap };
     committed = hold(await commitVault(vault, { index: vault.index, envelopes: [...vault.file.envelopes, sealed] }, deps));
   } catch (error) {
     deps.stderr.write(`${PASSKEY_LEFTOVER_NOTE}
@@ -96358,86 +96916,93 @@ import { randomBytes as randomBytes12 } from "node:crypto";
 init_release();
 init_fido2();
 async function installHelperForThisRelease(ctx) {
-  const { deps, json } = ctx;
-  const location = await locateFido2Helper(deps);
-  if (location.state === "ready")
-    return { ok: true, path: location.path, installed: false };
-  if (!location.installable)
-    return { ok: false, message: location.reason };
-  const realExec = await deps.realpath(deps.execPath).catch(() => deps.execPath);
-  if (detectInstall(deps.execPath, realExec) === "homebrew") {
-    return { ok: false, message: `candle is installed by Homebrew at ${realExec}. Run: brew reinstall candle` };
-  }
-  if (!deps.platformKey)
-    return { ok: false, message: "this CLI ships no security key helper for this platform" };
-  const base2 = releaseBaseUrl(deps.env);
-  const tag = `cli-v${CLI_VERSION}`;
-  const name2 = helperAssetName(deps.platformKey);
-  const steps = json ? stepReporter(() => {}, false) : stepReporter((text3) => deps.stderr.write(text3), process.stderr.isTTY === true);
-  steps.start(`reading the ${tag} release manifest`);
-  const fetched = await fetchPinned(deps, base2, tag);
-  if (!fetched.ok) {
-    steps.fail(`reading the ${tag} release manifest`);
-    return { ok: false, message: fetched.message };
-  }
-  const asset = fetched.manifest.helpers?.[deps.platformKey];
-  if (asset === undefined) {
-    steps.fail(`reading the ${tag} release manifest`);
-    return { ok: false, message: `release ${tag} declares no ${name2}` };
-  }
-  if (asset.name !== name2) {
-    steps.fail(`reading the ${tag} release manifest`);
-    return {
-      ok: false,
-      message: `release ${tag} names ${asset.name} as the ${deps.platformKey} security key helper; this platform installs ${name2}`
-    };
-  }
-  steps.done(`release ${tag} declares ${name2} (${formatBytes(asset.size)})`);
-  steps.start(`downloading ${name2}`);
-  const sums = await downloadSums(deps, base2, tag);
-  if (!sums.ok) {
-    steps.fail(`downloading ${name2}`);
-    return { ok: false, message: sums.message };
-  }
-  const download = await downloadReleaseAsset(deps, base2, tag, name2);
-  if (!download.ok) {
-    steps.fail(`downloading ${name2}`);
-    return { ok: false, message: download.message };
-  }
-  steps.done(`downloaded ${name2} (${formatBytes(download.bytes.length)})`);
-  steps.start("verifying checksum and signature");
-  const checked = checkReleaseAsset(deps, {
-    name: name2,
-    bytes: download.bytes,
-    sums: sums.sums,
-    bundle: download.bundle,
-    expectedSha256: asset.sha256,
-    identityUri: releaseIdentityUri(CLI_VERSION)
-  });
-  if (!checked.ok) {
-    steps.fail("verifying checksum and signature");
-    return { ok: false, message: `${checked.message}${checked.suggestion ? ` ${checked.suggestion}` : ""}` };
-  }
-  steps.done("checksum and signature verified (Sigstore, keyless; signer pinned to the release workflow)");
-  const dir = realExec.slice(0, realExec.lastIndexOf("/")) || ".";
-  const target = `${dir}/${HELPER_NAME}`;
-  const tmpPath = `${dir}/.candle-fido2-${CLI_VERSION}-${randomBytes12(6).toString("hex")}`;
-  steps.start(`installing ${HELPER_NAME}`);
+  let __stack = [];
   try {
-    await deps.writeBytes(tmpPath, download.bytes);
-  } catch (error) {
-    steps.fail(`installing ${HELPER_NAME}`);
-    return { ok: false, message: `cannot write ${dir}: ${messageOf2(error)}` };
-  }
-  try {
-    await deps.rename(tmpPath, target);
-  } catch (error) {
-    steps.fail(`installing ${HELPER_NAME}`);
-    await discard2(deps, tmpPath);
-    return { ok: false, message: `cannot write ${dir}: ${messageOf2(error)}` };
+    const { deps } = ctx;
+    const location = await locateFido2Helper(deps);
+    if (location.state === "ready")
+      return { ok: true, path: location.path, installed: false };
+    if (!location.installable)
+      return { ok: false, message: location.reason };
+    const realExec = await deps.realpath(deps.execPath).catch(() => deps.execPath);
+    if (detectInstall(deps.execPath, realExec) === "homebrew") {
+      return { ok: false, message: `candle is installed by Homebrew at ${realExec}. Run: brew reinstall candle` };
+    }
+    if (!deps.platformKey)
+      return { ok: false, message: "this CLI ships no security key helper for this platform" };
+    const base2 = releaseBaseUrl(deps.env);
+    const tag = `cli-v${CLI_VERSION}`;
+    const name2 = helperAssetName(deps.platformKey);
+    const steps = __using(__stack, commandSteps(ctx), 0);
+    steps.start(`reading the ${tag} release manifest`);
+    const fetched = await fetchPinned(deps, base2, tag);
+    if (!fetched.ok) {
+      steps.fail(`reading the ${tag} release manifest`);
+      return { ok: false, message: fetched.message };
+    }
+    const asset = fetched.manifest.helpers?.[deps.platformKey];
+    if (asset === undefined) {
+      steps.fail(`reading the ${tag} release manifest`);
+      return { ok: false, message: `release ${tag} declares no ${name2}` };
+    }
+    if (asset.name !== name2) {
+      steps.fail(`reading the ${tag} release manifest`);
+      return {
+        ok: false,
+        message: `release ${tag} names ${asset.name} as the ${deps.platformKey} security key helper; this platform installs ${name2}`
+      };
+    }
+    steps.done(`release ${tag} declares ${name2} (${formatBytes(asset.size)})`);
+    steps.start(`downloading ${name2}`);
+    const sums = await downloadSums(deps, base2, tag);
+    if (!sums.ok) {
+      steps.fail(`downloading ${name2}`);
+      return { ok: false, message: sums.message };
+    }
+    const download = await downloadReleaseAsset(deps, base2, tag, name2);
+    if (!download.ok) {
+      steps.fail(`downloading ${name2}`);
+      return { ok: false, message: download.message };
+    }
+    steps.done(`downloaded ${name2} (${formatBytes(download.bytes.length)})`);
+    steps.start("verifying checksum and signature");
+    const checked = checkReleaseAsset(deps, {
+      name: name2,
+      bytes: download.bytes,
+      sums: sums.sums,
+      bundle: download.bundle,
+      expectedSha256: asset.sha256,
+      identityUri: releaseIdentityUri(CLI_VERSION)
+    });
+    if (!checked.ok) {
+      steps.fail("verifying checksum and signature");
+      return { ok: false, message: `${checked.message}${checked.suggestion ? ` ${checked.suggestion}` : ""}` };
+    }
+    steps.done("checksum and signature verified (Sigstore, keyless; signer pinned to the release workflow)");
+    const dir = realExec.slice(0, realExec.lastIndexOf("/")) || ".";
+    const target = `${dir}/${HELPER_NAME}`;
+    const tmpPath = `${dir}/.candle-fido2-${CLI_VERSION}-${randomBytes12(6).toString("hex")}`;
+    steps.start(`installing ${HELPER_NAME}`);
+    try {
+      await deps.writeBytes(tmpPath, download.bytes);
+    } catch (error) {
+      steps.fail(`installing ${HELPER_NAME}`);
+      return { ok: false, message: `cannot write ${dir}: ${messageOf2(error)}` };
+    }
+    try {
+      await deps.rename(tmpPath, target);
+    } catch (error) {
+      steps.fail(`installing ${HELPER_NAME}`);
+      await discard2(deps, tmpPath);
+      return { ok: false, message: `cannot write ${dir}: ${messageOf2(error)}` };
+    }
+    steps.done(`installed ${HELPER_NAME} ${CLI_VERSION} to ${target}`);
+    return { ok: true, path: target, installed: true };
+  } catch (_catch) {
+    var _err = _catch, _hasErr = 1;
+  } finally {
+    __callDispose(__stack, _err, _hasErr);
   }
-  steps.done(`installed ${HELPER_NAME} ${CLI_VERSION} to ${target}`);
-  return { ok: true, path: target, installed: true };
 }
 async function discard2(deps, path) {
   try {
@@ -96573,13 +97138,13 @@ async function addSecurityKeyFactor(ctx, parsed, resolvedVault, hold) {
     wrap: { alg: VAULT_CIPHER, iv: "", ciphertext: "" }
   };
   const prfOutput = await assertPrf(deps, session, envelope, vault.file.vaultId, "derive this vault's key on it");
-  let wrap2;
+  let wrap;
   try {
-    wrap2 = await wrapDekForPrf(vault.dek, prfOutput, envelope, vault.file);
+    wrap = await wrapDekForPrf(vault.dek, prfOutput, envelope, vault.file);
   } finally {
     wipe(prfOutput);
   }
-  const sealed = { ...envelope, wrap: wrap2 };
+  const sealed = { ...envelope, wrap };
   await commitVault(vault, { index: vault.index, envelopes: [...vault.file.envelopes, sealed] }, deps);
   const written = await readVaultRaw(path);
   if (written === null)
@@ -96775,13 +97340,13 @@ async function addTouchIdFactor(ctx, parsed, resolvedVault, hold) {
       kek: { alg: SECURE_ENCLAVE_KEK_ALG, ciphertext },
       wrap: { alg: VAULT_CIPHER, iv: "", ciphertext: "" }
     };
-    let wrap2;
+    let wrap;
     try {
-      wrap2 = await wrapDekForKek(vault.dek, kek, envelope, vault.file);
+      wrap = await wrapDekForKek(vault.dek, kek, envelope, vault.file);
     } finally {
       wipe(kek);
     }
-    sealed = { ...envelope, wrap: wrap2 };
+    sealed = { ...envelope, wrap };
     committed = hold(await commitVault(vault, { index: vault.index, envelopes: [...vault.file.envelopes, sealed] }, deps));
   } catch (error) {
     await removeKey();
@@ -96896,8 +97461,8 @@ async function createVault(request2, clock) {
   }
   const dek = freshDek();
   const file = await withSecret(dek, async (dekBytes) => {
-    const wrap2 = await wrapDekForPassphrase(dekBytes, request2.passphrase, envelope, { vaultId }, request2.notice);
-    const sealedEnvelope = { ...envelope, wrap: wrap2 };
+    const wrap = await wrapDekForPassphrase(dekBytes, request2.passphrase, envelope, { vaultId }, request2.notice);
+    const sealedEnvelope = { ...envelope, wrap };
     const payloadKey = await derivePayloadKey(dekBytes, unb64u(vaultId, "vaultId"));
     const root = await seal(payloadKey, request2.rootEntropy, rootAad(vaultId));
     let index = seedIndex;
@@ -97333,8 +97898,8 @@ async function vaultFactorAdd(args, ctx) {
       strength: strengthFor(ownPassphrase),
       wrap: { alg: VAULT_CIPHER, iv: "", ciphertext: "" }
     };
-    const wrap2 = await wrapDekForPassphrase(vault.dek, passphrase, envelope, vault.file, (line) => deps.stderr.write(line));
-    const sealed = { ...envelope, wrap: wrap2 };
+    const wrap = await wrapDekForPassphrase(vault.dek, passphrase, envelope, vault.file, (line) => deps.stderr.write(line));
+    const sealed = { ...envelope, wrap };
     await commitVault(vault, { index: vault.index, envelopes: [...vault.file.envelopes, sealed] }, deps);
     const written = await readVaultRaw(path);
     if (written === null)
@@ -102277,7 +102842,7 @@ function solOf(lamports) {
   const digits = lamports.padStart(10, "0");
   return `${digits.slice(0, -9)}.${digits.slice(-9)}`.replace(/\.?0+$/, "");
 }
-function previewLines2(preview, walletName) {
+function previewLines3(preview, walletName) {
   const lines = [
     `Close ${preview.accountCount} empty token account${preview.accountCount === 1 ? "" : "s"} on the ${walletName}`,
     `Rent returned to that same wallet: ${safeText(preview.totalSol)} SOL in ${preview.transactions} transaction${preview.transactions === 1 ? "" : "s"}, network fee about ${solOf(preview.estimatedFeeLamports)} SOL, net ${safeText(preview.netSol)} SOL`
@@ -102313,7 +102878,7 @@ async function previewAndConfirm(ctx, preview, walletName, yes) {
     const output = ctx.json ? ctx.deps.stderr : ctx.deps.stdout;
     output.write(`No empty token accounts to close on the ${walletName}.
 `);
-    for (const line of previewLines2(preview, walletName).slice(2))
+    for (const line of previewLines3(preview, walletName).slice(2))
       output.write(`${line}
 `);
     return printTradingResult(ctx, {
@@ -102323,7 +102888,7 @@ async function previewAndConfirm(ctx, preview, walletName, yes) {
       preview
     });
   }
-  if (!await confirmClose(ctx, previewLines2(preview, walletName), yes))
+  if (!await confirmClose(ctx, previewLines3(preview, walletName), yes))
     return printTradingResult(ctx, {
       success: true,
       status: "cancelled",
@@ -102819,7 +103384,7 @@ async function maybeWriteUpdateNotice(deps, opts = {}) {
     if (prior && prior.version === latest && deps.now() - prior.shownAt < DAY_MS)
       return;
     const line = `Update available: candle ${CLI_VERSION} -> ${latest}. Run: candle update`;
-    const tty = process.stderr.isTTY === true;
+    const tty = terminalStyle(deps, "stderr", opts.json).color !== 0;
     deps.stderr.write(tty ? `\x1B[2m${line}\x1B[0m
 ` : `${line}
 `);
@@ -102850,6 +103415,10 @@ function extractGlobalFlags(argv) {
     const arg = argv[i];
     if (arg === "--json")
       flags2.json = true;
+    else if (arg === "--plain")
+      flags2.plain = true;
+    else if (arg === "--no-color")
+      flags2.noColor = true;
     else if (arg === "--help" || arg === "-h")
       flags2.help = true;
     else if (arg === "--version" || arg === "-v")
@@ -103059,6 +103628,16 @@ var NEVER_GUARDED = new Set([
   "tui"
 ]);
 async function run2(argv, deps) {
+  const cosmetic = extractGlobalFlags(argv);
+  if (!("error" in cosmetic)) {
+    deps = {
+      ...deps,
+      presentation: {
+        plain: cosmetic.flags.plain ?? deps.presentation?.plain,
+        noColor: cosmetic.flags.noColor ?? deps.presentation?.noColor
+      }
+    };
+  }
   let code;
   try {
     code = await runCommand(argv, deps);
@@ -103076,7 +103655,8 @@ async function run2(argv, deps) {
   }
   const extractedForNotice = extractGlobalFlags(argv);
   const word3 = "error" in extractedForNotice ? undefined : canonicalCommand(extractedForNotice.rest[0] === "candle" ? extractedForNotice.rest[1] : extractedForNotice.rest[0]);
-  await maybeWriteUpdateNotice(deps, { command: word3 });
+  if (!("error" in extractedForNotice) && !extractedForNotice.flags.help && !extractedForNotice.flags.version && word3 !== undefined && word3 !== "help" && word3 !== "completion" && word3 !== "mcp" && !(word3 === "core" && extractedForNotice.rest.includes("mcp")))
+    await maybeWriteUpdateNotice(deps, { command: word3, json: extractedForNotice.flags.json });
   return code;
 }
 async function runCommand(argv, deps) {
@@ -103124,9 +103704,14 @@ async function runCommand(argv, deps) {
     return 0;
   }
   if (flags2.help) {
-    deps.stdout.write(renderTopic(canonicalCommand(tokens[0]) ?? "") ?? renderTopLevel());
+    const style = terminalStyle(deps, "stdout", flags2.json);
+    deps.stdout.write(renderTopic(canonicalCommand(tokens[0]) ?? "", style) ?? renderTopLevel(style));
     return 0;
   }
+  if (tokens.length === 0) {
+    deps.stderr.write(renderTopLevel(terminalStyle(deps, "stderr", flags2.json)));
+    return 1;
+  }
   const [rawCmd, sub, ...cmdArgs] = tokens;
   const cmd = canonicalCommand(rawCmd);
   if (cmd === "help" || cmd === "completion") {
@@ -103356,6 +103941,7 @@ async function buildRealDeps() {
       stdout: Boolean(process.stdout.isTTY),
       stderr: Boolean(process.stderr.isTTY)
     },
+    columns: { stdout: process.stdout.columns, stderr: process.stderr.columns },
     execPath: process.execPath,
     argv1: process.argv[1] ?? "",
     platformKey: platformKey(process.platform, process.arch),