@darwin.finance/cli 1.0.0 → 1.0.1

package/dist/darwin.js

@@ -1,16 +1,12 @@
 #!/usr/bin/env node
 var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, {
       get: all[name],
       enumerable: true,
       configurable: true,
-      set: __exportSetter.bind(all, name)
+      set: (newValue) => all[name] = () => newValue
     });
 };
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
@@ -68,7 +64,7 @@ Waiting for you to approve… (the code expires in ${minutes} minutes)`,
     updateRequired: (minCli) => `This version of the Darwin CLI is no longer supported. Update to ${minCli} or later: ${INSTALL_LINE}`,
     snapshotUsed: (realm) => `Couldn't load the latest command list from ${realm}; using the one built into this version. Some newer commands may be missing.`,
     mcpNeedsKey: "`darwin mcp` needs an API key: an agent's API key, or one from the MCP page. Chat apps connect to Darwin directly instead.",
-    spotSent: (amount, sell, forTok, agent, nonce) => `Sent: sell ${amount} ${sell} for ${forTok} on ${agent} · counts against today's transaction budget · order ID ${nonce}`,
+    spotSent: (amount, sell, forTok, agent, orderId, nonce) => `Sent: sell ${amount} ${sell} for ${forTok} on ${agent} · ${orderId ? `order ${orderId} · ` : ""}nonce ${nonce}`,
     envKeySet: "DARWIN_API_KEY is set, so this terminal already has a key and there is nowhere to save a new one. Unset it to log in, or keep using it.",
     allAgentsOff: "API keys for all your agents aren't available on this site yet. Use an API key for one agent.",
     printConfigNpx: "Install the Darwin CLI first (`npm i -g @darwin.finance/cli`), then run `darwin mcp --print-config` again. A saved config must point at an installed copy, not npx.",
@@ -253,7 +249,7 @@ function compareVersions(a, b) {
       return x[i] < y[i] ? -1 : 1;
   return 0;
 }
-var VERSION = "1.0.0";
+var VERSION = "1.0.1";
 
 // src/http.ts
 function vendor(env) {
@@ -504,16 +500,16 @@ async function listAgents(ctx, s, opts = {}) {
   const list = res.json?.agents;
   if (res.status !== 200 || !Array.isArray(list))
     throw new CliError(EXIT.unexpected, `Couldn't list your agents (HTTP ${res.status}).`, "bad_response");
-  const agents = list.filter((a) => !!a && typeof a === "object").map((a) => ({
+  const agents2 = list.filter((a) => !!a && typeof a === "object").map((a) => ({
     id: String(a.id ?? ""),
     name: clean(unwrap(a.name)).slice(0, 120),
-    solanaAddress: typeof a.solanaAddress === "string" && BASE58.test(a.solanaAddress) ? a.solanaAddress : undefined,
+    solanaAddress: typeof a.solanaAddress === "string" && BASE582.test(a.solanaAddress) ? a.solanaAddress : undefined,
     status: a.status === "active" || a.status === "paused" ? a.status : undefined
   })).filter((a) => isAgentId(a.id));
   try {
-    writePrivate(file, JSON.stringify({ at: ctx.now(), agents }));
+    writePrivate(file, JSON.stringify({ at: ctx.now(), agents: agents2 }));
   } catch {}
-  return agents;
+  return agents2;
 }
 async function resolveAgent(ctx, s, flag) {
   const raw = (flag ?? ctx.env.DARWIN_AGENT ?? "").trim();
@@ -530,19 +526,19 @@ async function resolveAgent(ctx, s, flag) {
   const want = raw || s.profile?.default_agent || "";
   if (!want)
     throw new CliError(EXIT.usage, copy.needAgent, "agent_required");
-  const agents = await listAgents(ctx, s);
-  const byId = agents.find((a) => a.id === want);
+  const agents2 = await listAgents(ctx, s);
+  const byId = agents2.find((a) => a.id === want);
   if (byId)
     return byId.id;
-  const byName = agents.filter((a) => a.name.trim().toLowerCase() === want.toLowerCase());
+  const byName = agents2.filter((a) => a.name.trim().toLowerCase() === want.toLowerCase());
   if (byName.length === 1)
     return byName[0].id;
   if (byName.length > 1) {
     throw new CliError(EXIT.usage, `More than one of your agents is called that; pass its id with --agent: ${byName.map((a) => a.id).join(", ")}`, "agent_ambiguous", { candidates: byName });
   }
-  throw new CliError(EXIT.usage, "No active agent of yours matches that (a paused, stopped or archived agent isn't listed). Your agents: `darwin agents`.", "agent_not_found", { candidates: agents.map((a) => ({ id: a.id, name: a.name })) });
+  throw new CliError(EXIT.usage, "No active agent of yours matches that (a paused, stopped or archived agent isn't listed). Your agents: `darwin agents`.", "agent_not_found", { candidates: agents2.map((a) => ({ id: a.id, name: a.name })) });
 }
-var BASE58, unwrap = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted) : typeof v === "string" ? v : "";
+var BASE582, unwrap = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted) : typeof v === "string" ? v : "";
 var init_agents = __esm(() => {
   init_context();
   init_copy();
@@ -550,14 +546,14 @@ var init_agents = __esm(() => {
   init_http();
   init_config();
   init_redact();
-  BASE58 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+  BASE582 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
 });
 
 // src/bin.ts
 import { spawn as spawn2 } from "node:child_process";
 import { existsSync } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 import { createInterface } from "node:readline";
 import { fileURLToPath } from "node:url";
 
@@ -590,7 +586,7 @@ function osKeychain(platform) {
 }
 
 // src/main.ts
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 
 // src/args.ts
 init_context();
@@ -3332,7 +3328,7 @@ function cell(v) {
   if (v === null || v === undefined)
     return "";
   if (isUntrusted(v))
-    return `untrusted: ${clean(String(v.untrusted ?? ""))}`;
+    return cell(v.untrusted);
   if (typeof v === "string")
     return clean(v);
   if (typeof v === "number" || typeof v === "boolean")
@@ -3375,189 +3371,1101 @@ function table(rows, indent) {
   return [line(cols.map(clean)), line(widths.map((w) => "-".repeat(w))), ...cells.map(line)];
 }
 
-// src/commands.ts
-init_realms();
+// src/human.ts
 init_redact();
-
-// src/session.ts
-init_context();
-init_config();
-init_realms();
-function realmFromEnv(ctx) {
-  const raw = ctx.env.DARWIN_REALM;
-  if (raw === undefined || raw === "")
-    return "darwin.finance";
-  const r = parseRealm(raw);
-  if (!r)
-    throw new CliError(EXIT.usage, "DARWIN_REALM must be prod or beta.", "usage");
-  return r;
+function txt(v) {
+  if (v === null || v === undefined)
+    return "";
+  if (isUntrusted(v))
+    return txt(v.untrusted);
+  if (typeof v === "string")
+    return clean(v).replace(/\s+/g, " ").trim();
+  if (typeof v === "number" || typeof v === "boolean" || typeof v === "bigint")
+    return String(v);
+  return "";
+}
+function label(v, max = 60) {
+  const t = txt(v);
+  return t.length > max ? `${t.slice(0, max - 1)}…` : t;
+}
+var obj = (v) => v && typeof v === "object" && !Array.isArray(v) && !isUntrusted(v) ? v : {};
+var arr = (v) => Array.isArray(v) ? v : [];
+function toDate(v) {
+  let d = null;
+  if (typeof v === "number" && Number.isFinite(v) && v > 0)
+    d = new Date(v < 100000000000 ? v * 1000 : v);
+  else if (typeof v === "string" && /^[0-9]{9,13}$/.test(v))
+    return toDate(Number(v));
+  else if (typeof v === "string" && /^\d{4}-\d{2}-\d{2}T/.test(v))
+    d = new Date(v);
+  if (!d || Number.isNaN(d.getTime()))
+    return null;
+  const y = d.getUTCFullYear();
+  return y >= 2000 && y < 2100 ? d : null;
 }
-function profileName(ctx, flag) {
-  const n = flag ?? ctx.env.DARWIN_PROFILE;
-  if (n !== undefined && !PROFILE_RE.test(n))
-    throw new CliError(EXIT.usage, "A profile name is 1–40 of a–z, 0–9, _ and -, starting with a letter or digit.", "usage");
-  return n;
+function clock(d) {
+  return d.toLocaleTimeString("en-US", { hour: "numeric", minute: "2-digit", second: "2-digit" });
 }
-function openSession(ctx, flags) {
-  assertInstalled(ctx);
-  const explicit = profileName(ctx, flags.profile);
-  if (!flags.profile) {
-    const fromEnv = envKey(ctx);
-    if (fromEnv !== null) {
-      const { key: key2, kind: kind2 } = acceptKey(fromEnv);
-      return { realm: realmFromEnv(ctx), kind: kind2, key: key2, profileName: "env", profile: null };
-    }
+function when(v, opts = {}) {
+  const d = toDate(v);
+  if (!d)
+    return "";
+  const parts = Object.fromEntries(new Intl.DateTimeFormat("en-US", { weekday: "short", month: "short", day: "numeric", hour: "numeric", minute: "2-digit", timeZoneName: "short" }).formatToParts(d).map((p) => [p.type, p.value]));
+  return `${opts.weekday ? `${parts.weekday}, ` : ""}${parts.month} ${parts.day}, ${parts.hour}:${parts.minute} ${parts.dayPeriod} ${parts.timeZoneName}`;
+}
+function num(v) {
+  if (typeof v === "number" && Number.isFinite(v))
+    return String(v);
+  const t = txt(v);
+  if (!/^-?\d+(\.\d+)?$/.test(t))
+    return t;
+  return t.includes(".") ? t.replace(/0+$/, "").replace(/\.$/, "") : t;
+}
+function usd(v) {
+  const n = typeof v === "number" ? v : typeof v === "string" && /^-?\d+(\.\d+)?$/.test(v.trim()) ? Number(v) : NaN;
+  if (!Number.isFinite(n))
+    return "";
+  const abs = Math.abs(n);
+  const dollars = (x) => x.toLocaleString("en-US", { minimumFractionDigits: 2, maximumFractionDigits: 2 });
+  let s;
+  if (abs === 0 || abs >= 0.995)
+    s = dollars(abs);
+  else if (abs < 0.000000000001)
+    s = abs.toExponential(3);
+  else {
+    const places = Math.max(2, 3 - Math.floor(Math.log10(abs)));
+    s = abs.toFixed(places).replace(/0+$/, "");
+    const [, frac = ""] = s.split(".");
+    if (frac.length < 2)
+      s = `${s.split(".")[0]}.${frac.padEnd(2, "0")}`;
   }
-  const cfg = loadConfig(ctx);
-  const name = explicit ?? cfg.default;
-  const profile = name ? cfg.profiles[name] : undefined;
-  if (!name || !profile) {
-    throw new CliError(EXIT.auth, name ? `There's no profile "${name}". \`darwin profile list\` shows them; \`darwin login\` makes one.` : "This terminal isn't connected to Darwin yet. Run `darwin login` (or set DARWIN_API_KEY).", "no_key");
+  return `${n < 0 ? "−" : ""}$${s}`;
+}
+var HIDDEN_KEYS = new Set(["welcome", "next", "instructions", "instruction", "tellYourUser", "retrySafe", "retryable", "refusal", "ok", "untrustedNote"]);
+var TIME_KEY = /^(?:asOf(?:Ms|Secs?)?|[a-z][A-Za-z0-9]*(?:At|AtMs|AtSecs|AtSec|AsOf|AsOfMs|AsOfSecs|Ts|Time|Timestamp))$/;
+function words(key) {
+  return clean(key).replace(/Iso$/, "").replace(/(Ms|Secs?)$/, "").replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/_/g, " ").toLowerCase();
+}
+function tidy(v, depth = 0) {
+  if (depth > 12)
+    return null;
+  if (isUntrusted(v))
+    return tidy(v.untrusted, depth + 1);
+  if (Array.isArray(v))
+    return v.map((x) => tidy(x, depth + 1));
+  if (!v || typeof v !== "object")
+    return v;
+  const src = v;
+  const out = {};
+  for (const [k, x] of Object.entries(src)) {
+    if (HIDDEN_KEYS.has(k))
+      continue;
+    const has2 = (twin) => src[twin] !== null && src[twin] !== undefined && src[twin] !== "";
+    if (/Atoms$/.test(k) && k !== "atoms" && (has2(k.slice(0, -5)) || has2(`${k.slice(0, -5)}Amount`)))
+      continue;
+    if (k === "atoms" && (has2("amount") || has2("uiAmount")))
+      continue;
+    if (/Iso$/.test(k) && typeof x === "string") {
+      const base = k.slice(0, -3);
+      const label2 = [base, `${base}Ms`, `${base}Sec`, `${base}Secs`].find((b) => (b in src)) ?? base;
+      if (!(label2 in out))
+        out[label2] = when(x) || x;
+      continue;
+    }
+    if (TIME_KEY.test(k) && toDate(x)) {
+      out[k] = when(x);
+      continue;
+    }
+    out[k] = tidy(x, depth + 1);
   }
-  const stored = getKey(ctx, profile.store, profile.realm, name);
-  if (!stored)
-    throw new CliError(EXIT.auth, `The API key for "${name}" is missing from ${profile.store === "keychain" ? ctx.keychain.description : "its file"}. Run \`darwin login\` again.`, "no_key");
-  const { key, kind } = acceptKey(stored);
-  if (kind !== profile.kind)
-    throw new CliError(EXIT.auth, `The key saved for "${name}" is not the kind this profile expects. Run \`darwin login\` again.`, "key_kind_mismatch");
-  return { realm: profile.realm, kind, key, profileName: name, profile };
+  return out;
+}
+function genericLines(v) {
+  return renderText(humanKeys(tidy(v)));
+}
+function humanKeys(v) {
+  if (Array.isArray(v))
+    return v.map(humanKeys);
+  if (!v || typeof v !== "object")
+    return v;
+  return Object.fromEntries(Object.entries(v).map(([k, x]) => [words(k), humanKeys(x)]));
 }
 
-// src/commands.ts
-init_agents();
-var OUT_FLAGS = ["json", "format", "quiet", "no-color", "help"];
-var jsonOut = (ctx, p) => wantsJson(ctx, { json: has(p, "json"), format: one(p, "format") });
-var unwrap2 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
-async function cmdLogout(ctx, p) {
-  onlyFlags(p, ["profile", "all", "revoke", "force-local", ...OUT_FLAGS], "logout");
-  assertInstalled(ctx);
-  if (has(p, "all")) {
-    if (has(p, "revoke"))
-      throw new CliError(EXIT.usage, "--revoke works on one profile at a time.", "usage");
-    let failed = 0;
-    for (const [name2, prof2] of Object.entries(loadConfig(ctx).profiles))
-      failed += forgetProfile(ctx, name2, prof2) ? 0 : 1;
-    return failed ? EXIT.unexpected : EXIT.ok;
-  }
-  const cfg = loadConfig(ctx);
-  const name = profileName(ctx, one(p, "profile")) ?? cfg.default;
-  const prof = name ? cfg.profiles[name] : undefined;
-  if (!name || !prof)
-    throw new CliError(EXIT.usage, "No profile to log out of. `darwin profile list` shows them.", "no_profile");
-  const url = manageUrl(prof.realm, prof.agent_id);
-  if (!has(p, "revoke")) {
-    let key = null;
-    try {
-      key = getKey(ctx, prof.store, prof.realm, name);
-    } catch {
-      key = null;
-    }
-    return forgetProfile(ctx, name, prof, { expectedKey: key }) ? EXIT.ok : EXIT.unexpected;
+// src/help.ts
+init_redact();
+init_copy();
+
+// src/market.ts
+init_context();
+init_http();
+init_realms();
+var MARKET_STATUS_PATH = "/api/agent/v1/market-status/us-equities";
+var MARKET_STATUS_TOOL = "get_us_market_status";
+var MARKET_STATUS_HELP = "Is the US stock market open right now? Shows the session, why it's closed (weekend, holiday, early close), the next open and close in your local time, and whether Darwin accepts agent stock orders now. Tokenized stocks trade 24/7, but liquidity is much lower when the US market is closed. No API key needed.";
+function localTime(iso) {
+  if (typeof iso !== "string")
+    return null;
+  return when(iso, { weekday: true }) || null;
+}
+var SESSION = { pre_market: "pre-market", regular: "open (regular session)", after_hours: "after hours", closed: "closed" };
+var SESSION_ENDS = { pre_market: "Regular session opens", regular: "Regular session closes", after_hours: "After hours ends", closed: "Pre-market opens" };
+var REASON_REPEATS = { pre_market: "pre_market", after_hours: "after_hours" };
+function marketHeadline(s) {
+  const session = SESSION[String(s.session)] ?? cell(s.session).replace(/_/g, " ");
+  const reason = typeof s.reason === "string" ? s.reason : "";
+  let why = "";
+  if (reason && s.session !== "regular" && REASON_REPEATS[reason] !== s.session) {
+    const holiday = reason === "holiday" && typeof s.holidayName === "string" && s.holidayName ? `: ${cell(s.holidayName)}` : "";
+    why = ` (${cell(reason).replace(/_/g, " ")}${holiday})`;
+  }
+  const early = s.earlyClose === true && reason !== "early_close" ? " — early close today" : "";
+  return `US stock market: ${session}${why}${early}`;
+}
+async function cmdMarketStatus(ctx, p) {
+  onlyFlags(p, ["beta", "prod", "json", "format", "quiet", "no-color", "help"], "market-status");
+  if (p.positionals.length > 1)
+    throw new CliError(EXIT.usage, "`darwin market-status` takes no arguments.", "usage");
+  let realm = "darwin.finance";
+  if (has(p, "beta"))
+    realm = "beta.darwin.finance";
+  else if (!has(p, "prod") && ctx.env.DARWIN_REALM) {
+    const r = parseRealm(ctx.env.DARWIN_REALM);
+    if (!r)
+      throw new CliError(EXIT.usage, "DARWIN_REALM must be prod or beta.", "usage");
+    realm = r;
   }
-  const s = openSession(ctx, { profile: name });
-  if (s.kind === "agents")
-    warn(ctx, copy.revokeAllWarning);
-  let keyName = "this API key";
-  try {
-    const w = await request(ctx, s.realm, "GET", "/api/agent/v1/tools/whoami", { key: s.key, timeoutMs: 15000 });
-    const n = w.json?.name;
-    if (w.status === 200 && typeof n === "string" && n)
-      keyName = clean(n).slice(0, 120);
-  } catch {}
-  let confirmed = false;
-  let networkFailed = false;
+  let res;
   try {
-    const res = await request(ctx, s.realm, "POST", "/api/agent/v1/key/revoke", { key: s.key, body: {}, timeoutMs: 20000 });
-    const j = res.json;
-    confirmed = res.status === 200 && mediaType(res.contentType) === "application/json" && !!j && j.revoked === true && typeof j.keyId === "string" && typeof j.changed === "boolean" && Object.keys(j).length === 3;
+    res = await request(ctx, realm, "GET", MARKET_STATUS_PATH, { timeoutMs: 15000 });
   } catch (e) {
-    if (!(e instanceof NetworkError) && !(e instanceof CliError))
-      throw e;
-    networkFailed = e instanceof NetworkError;
+    if (e instanceof NetworkError)
+      throw new CliError(EXIT.network, e.message, "network_error");
+    throw e;
   }
-  const agent = prof.agent_name || prof.agent_id;
-  if (confirmed) {
-    if (!forgetProfile(ctx, name, prof, { expectedKey: s.key, quiet: true }))
-      return EXIT.unexpected;
-    say(ctx, copy.revoked(keyName, agent));
+  const s = res.json;
+  if (res.status === 429)
+    throw new CliError(EXIT.rateLimited, "Too many requests right now; try again in a minute.", "rate_limited");
+  if (res.status !== 200 || !s || typeof s.open !== "boolean")
+    throw new CliError(EXIT.unexpected, `${realm} didn't answer the market status (HTTP ${res.status}).`, "bad_response");
+  if (wantsJson(ctx, { json: has(p, "json"), format: one(p, "format") })) {
+    printJson(ctx, s);
     return EXIT.ok;
   }
-  if (networkFailed && has(p, "force-local")) {
-    forgetProfile(ctx, name, prof, { expectedKey: s.key, quiet: true });
-    warn(ctx, copy.revokeNotConfirmed(agent, url).replace(" and it's still saved here", ""));
-    return EXIT.refused;
-  }
-  warn(ctx, copy.revokeNotConfirmed(agent, url));
-  return EXIT.refused;
+  say(ctx, marketHeadline(s));
+  const line = (label2, v) => {
+    const t = localTime(v);
+    if (t)
+      say(ctx, `${label2}: ${t}`);
+  };
+  line(SESSION_ENDS[String(s.session)] ?? "Session changes", s.sessionEndsAt);
+  line("Next open", s.nextOpenAt);
+  line("Next close", s.nextCloseAt);
+  const a = s.agentStockOrders ?? {};
+  if (a.accepted === true)
+    say(ctx, `Darwin agent stock orders: accepted${localTime(a.closesAt) ? ` until ${localTime(a.closesAt)}` : ""}`);
+  else if (a.accepted === false)
+    say(ctx, `Darwin agent stock orders: not accepted now${localTime(a.opensAt) ? `; next accepted ${localTime(a.opensAt)}` : ""}`);
+  say(ctx, "Tokenized stocks trade 24/7, but liquidity is much lower when the US market is closed.");
+  return EXIT.ok;
 }
-function forgetProfile(ctx, name, prof, opts = {}) {
-  const outcome = updateConfig(ctx, (c) => {
-    const now = c.profiles[name];
-    if (!now || now.realm !== prof.realm || now.store !== prof.store || now.agent_id !== prof.agent_id)
-      return "changed";
-    if (opts.expectedKey !== undefined) {
-      let current;
-      try {
-        current = getKey(ctx, now.store, now.realm, name);
-      } catch {
-        return "unreadable";
-      }
-      if (current !== null && current !== opts.expectedKey)
-        return "changed";
-    }
-    if (!deleteKey(ctx, now.store, now.realm, name))
-      return "stuck";
-    delete c.profiles[name];
-    if (c.default === name)
-      c.default = Object.keys(c.profiles)[0] ?? "";
-    return "ok";
+
+// src/help.ts
+var LOCAL_DESCRIPTION = { [MARKET_STATUS_TOOL]: MARKET_STATUS_HELP };
+var TERMINAL_DESCRIPTION = {
+  hello: "Says hello as this API key: which agent it acts for, the agent's wallet address and its Darwin page. Never counts against the transaction budget.",
+  get_balances: "This agent's wallet balances, in whole tokens. Reporting: reads ONLY this agent's own account. Never counts against the transaction budget."
+};
+var describe = (t) => LOCAL_DESCRIPTION[t.name] ?? clean(t.description);
+function forTerminal(text, c) {
+  let t = clean(text);
+  const byName = new Map((c?.tools ?? []).map((x) => [x.name, `\`darwin ${x.cli.path.join(" ")}\``]));
+  byName.set("get_api_reference", "`darwin docs`");
+  t = t.replace(/(`?)\b([a-z][a-z0-9]*(?:_[a-z0-9]+)+)\b(`?)/g, (m, open, name, close) => {
+    const cmd = byName.get(name);
+    if (!cmd)
+      return m;
+    return open && close ? cmd : `${open}${cmd}${close}`;
   });
-  if (outcome === "changed") {
-    warn(ctx, `Profile "${name}" changed while this ran (another login?), so it was left as it is.`);
-    return false;
-  }
-  if (outcome !== "ok") {
-    warn(ctx, `Couldn't remove the API key for "${name}" from ${prof.store === "keychain" ? ctx.keychain.description : "its file"}, so the profile was kept. Unlock it and try again.`);
-    return false;
-  }
-  if (!opts.quiet)
-    say(ctx, copy.loggedOut(name, manageUrl(prof.realm, prof.agent_id)));
-  return true;
+  t = t.replace(/`darwin docs`\s*§\s?([0-9]{1,2}[a-z]?)/g, "`darwin docs $1`");
+  t = t.replace(/§\s?([0-9]{1,2}[a-z]?)/g, "`darwin docs $1`");
+  t = t.replace(/\(summary\.sell\.amount\)/g, "(the amount the quote shows)");
+  return t;
 }
-async function cmdWhoami(ctx, p) {
-  onlyFlags(p, ["profile", ...OUT_FLAGS], "whoami");
-  const s = openSession(ctx, { profile: one(p, "profile") });
-  let who = null;
-  let note = null;
-  let exit = EXIT.ok;
-  try {
-    const res = await request(ctx, s.realm, "GET", "/api/agent/v1/tools/whoami", { key: s.key, timeoutMs: 15000 });
-    if (res.status === 200 && res.json && typeof res.json === "object")
-      who = res.json;
-    else if (res.status === 401) {
-      note = "Darwin refused this API key — it may have been revoked.";
-      exit = EXIT.auth;
-    } else if (res.status === 429) {
-      note = "Too many requests with this API key right now.";
-      exit = EXIT.rateLimited;
-    } else if (res.status === 426) {
-      note = copy.updateRequired(typeof res.json?.minCli === "string" ? String(res.json.minCli) : "the latest version");
-      exit = EXIT.upgrade;
-    } else if (res.status === 404) {} else if (res.status === 403) {
-      note = "Darwin refused this request.";
-      exit = EXIT.refused;
-    } else {
-      note = `Darwin answered HTTP ${res.status}.`;
-      exit = EXIT.unexpected;
-    }
-  } catch (e) {
-    if (!(e instanceof NetworkError))
-      throw e;
-    note = e.message;
-    exit = EXIT.network;
-  }
-  const keyName = who && typeof who.name === "string" ? clean(who.name) : "name unavailable";
-  const agent = clean(unwrap2(who?.homeAgentName) || s.profile?.agent_name || s.profile?.agent_id || "unknown agent");
+var describeForTerminal = (t, c) => LOCAL_DESCRIPTION[t.name] ?? TERMINAL_DESCRIPTION[t.name] ?? forTerminal(t.description, c).trim();
+var STATIC_HELP = {
+  login: {
+    usage: "darwin login [--beta] [--client-name <name>] [--reconnect] [--start | --wait | --with-key | --key-file <file> | --from-skill] [--profile <name>] [--store keychain|file]",
+    summary: "Connect this terminal to a Darwin agent and keep its API key in your system's secret store.",
+    flags: {
+      beta: "Use beta.darwin.finance instead of darwin.finance.",
+      "client-name": `What Darwin shows your owner as the app asking (never "Darwin"). Default: the coding agent you're in, else "Command line".`,
+      reconnect: "Get a new API key for an agent you already have, instead of creating a new agent.",
+      start: "Start pairing and print the link and code, then exit (for tools whose calls time out).",
+      wait: "Wait for a pairing started with --start, and save the key.",
+      "with-key": "Import an API key from stdin, or paste it at a hidden prompt.",
+      "key-file": "Import the key file downloaded from the agent's Manage tab (add --delete-file to delete it after).",
+      "from-skill": "Import the key the official Darwin skill (darwin.py) saved (add --delete-skill-copy to remove its copy).",
+      "agent-id": "With --from-skill: which saved key, when there are several.",
+      profile: "Profile name for this key (default: from the agent's name).",
+      store: "keychain (default) or file — a plain file only your user can read.",
+      "no-browser": "Don't open the link in a browser."
+    }
+  },
+  logout: {
+    usage: "darwin logout [--profile <name> | --all] [--revoke [--force-local]]",
+    summary: "Remove the API key from this computer. With --revoke, Darwin revokes the key first.",
+    flags: { revoke: "Ask Darwin to revoke this key everywhere, then remove it here.", all: "Every profile.", "force-local": "With --revoke: remove the local copy even if Darwin couldn't be reached." }
+  },
+  whoami: { usage: "darwin whoami [--profile <name>]", summary: "Which agent, site and API key this terminal uses (never any key characters).", flags: {} },
+  profile: {
+    usage: "darwin profile list | use <name> | rename <old> <new> | remove <name> | set-agent <name or id>",
+    summary: "Manage profiles (one per API key). set-agent: the default agent for a key that trades for all your agents.",
+    flags: {}
+  },
+  doctor: { usage: "darwin doctor", summary: "Check the install, the secret store, your profile and both Darwin sites.", flags: {} },
+  api: { usage: "darwin api GET /api/agent/<path>", summary: "Read any agent API endpoint directly (GET only).", flags: {} },
+  mcp: {
+    usage: "darwin mcp [--profile <name>] | darwin mcp --print-config claude|cursor|gemini",
+    summary: "Run Darwin as a local MCP server (stdio) for a desktop AI client, with the API key kept in your secret store.",
+    flags: { "print-config": "Print the registration for a client, pointing at this installed copy." }
+  },
+  help: { usage: "darwin help [command] [--json]", summary: "This help. --json lists every command with its flags.", flags: {} },
+  version: { usage: "darwin version", summary: "Print the Darwin CLI version.", flags: {} }
+};
+var GLOBAL_HELP = {
+  json: "Print JSON (the default when output isn't a terminal).",
+  profile: "Use this profile.",
+  agent: "For an API key that trades for all your agents: which agent (name or id).",
+  "dry-run": "Show what a command would send, and send nothing.",
+  field: "For API fields without their own flag: --field name=value (repeatable).",
+  quiet: "Less output."
+};
+function toolFlags(t) {
+  const req = new Set((t.inputSchema.required ?? []).filter((r) => r !== t.idempotency?.field));
+  return Object.entries(t.cli.args).map(([prop, a]) => {
+    const p = t.inputSchema.properties?.[prop] ?? {};
+    const type = Array.isArray(p.type) ? p.type.join("|") : p.type ?? "string";
+    return { flag: `--${a.flag}`, property: prop, required: req.has(prop), type, description: clean(p.description ?? "") };
+  });
+}
+function usageOf(t) {
+  const pos = t.cli.positional.map((x) => `<${x}>`);
+  const flags = toolFlags(t).map((f) => f.required ? `${f.flag} <${f.property}>` : `[${f.flag} <${f.property}>]`);
+  const open = t.inputSchema.additionalProperties !== false && t.inputSchema.additionalProperties !== undefined;
+  return ["darwin", ...t.cli.path, ...pos, ...flags, ...open ? ["[--field name=value]"] : []].join(" ");
+}
+function helpJson(c) {
+  return {
+    version: VERSION,
+    realm: c.realm,
+    credential: c.credential,
+    catalogVersion: c.catalogVersion,
+    static: Object.entries(STATIC_HELP).map(([command, h]) => ({ command, usage: h.usage, summary: h.summary, flags: h.flags })),
+    globalFlags: GLOBAL_HELP,
+    commands: c.tools.map((t) => ({
+      command: t.cli.path.join(" "),
+      aliases: t.cli.aliases.map((a) => a.join(" ")),
+      tool: t.name,
+      title: clean(t.title),
+      write: t.write,
+      costsTx: t.costsTx,
+      usage: usageOf(t),
+      positional: t.cli.positional,
+      flags: toolFlags(t),
+      description: describe(t),
+      ...t.deprecated ? { deprecated: t.deprecated } : {}
+    }))
+  };
+}
+function printOverview(ctx, c, json) {
+  if (json) {
+    printJson(ctx, helpJson(c));
+    return;
+  }
+  say(ctx, `Darwin CLI ${VERSION} — trade and check your Darwin agent from a terminal.`);
+  say(ctx, "");
+  say(ctx, "Darwin commands (from Darwin's catalogue; W = changes something):");
+  const width = Math.max(...c.tools.map((t) => t.cli.path.join(" ").length)) + 2;
+  for (const t of c.tools)
+    say(ctx, `  ${t.cli.path.join(" ").padEnd(width)}${t.write ? "W " : "  "}${forTerminal(t.title, c)}`);
+  say(ctx, "");
+  say(ctx, "This CLI's own commands:");
+  for (const [k, h] of Object.entries(STATIC_HELP))
+    say(ctx, `  ${k.padEnd(width)}  ${h.summary}`);
+  say(ctx, "");
+  say(ctx, "Global flags: --json  --profile <name>  --agent <name or id>  --dry-run  --field name=value");
+  say(ctx, "`darwin <command> --help` for a command's flags; `darwin help --json` for all of it.");
+  say(ctx, "Output is text in a terminal and JSON when piped or redirected (or with --json); --format table forces text.");
+  say(ctx, "");
+  for (const l of terminalGuide(c.credential))
+    say(ctx, l);
+}
+function terminalGuide(kind) {
+  return [
+    "Spot trades take two steps: `darwin quote --sell <token> --amount <n> --for <token>`, then `darwin order --quote <id>` with the same sell, amount and for, within 30 seconds. `darwin instant` quotes and executes in one step.",
+    "Before your first order, `darwin grant` shows your limits and today's remaining budget. `darwin docs` is the full API reference.",
+    "If an order's result is uncertain (exit code 6), don't run it again — check `darwin orders` to see whether it went through.",
+    kind === "agents" ? "This API key trades for all your active agents: name one with --agent <name or id> (`darwin agents` lists them). `darwin pause --agent <name>` stops one; only you can resume it, on Darwin." : "`darwin pause` stops this agent trading; only you can resume it, on Darwin."
+  ];
+}
+function printCommandHelp(ctx, t, json, c = null) {
+  if (json) {
+    printJson(ctx, helpJson({ tools: [t] }).commands[0]);
+    return;
+  }
+  say(ctx, `${usageOf(t)}`);
+  say(ctx, "");
+  say(ctx, `${clean(t.title)}${t.write ? " — changes something" : ""}${t.costsTx ? "; counts against today's transaction budget" : ""}.`);
+  say(ctx, describeForTerminal(t, c));
+  const flags = toolFlags(t);
+  if (flags.length || t.cli.positional.length)
+    say(ctx, "");
+  for (const p of t.cli.positional)
+    say(ctx, `  <${p}>  ${forTerminal(t.inputSchema.properties?.[p]?.description ?? "", c)}`);
+  for (const f of flags)
+    say(ctx, `  ${f.flag} <${f.type}>${f.required ? " (required)" : ""}  ${forTerminal(f.description, c)}`);
+  if (t.write)
+    say(ctx, `
+There is no confirmation prompt: the command runs when you press enter. Use --dry-run to see what it would send.`);
+  if (t.deprecated)
+    say(ctx, `
+Deprecated since ${t.deprecated.since}; removed after ${t.deprecated.removeAfter}.`);
+}
+function printStaticHelp(ctx, name, json) {
+  const h = STATIC_HELP[name];
+  if (json) {
+    printJson(ctx, { command: name, ...h });
+    return;
+  }
+  say(ctx, h.usage);
+  say(ctx, "");
+  say(ctx, h.summary);
+  for (const [f, d] of Object.entries(h.flags))
+    say(ctx, `  --${f}  ${d}`);
+}
+
+// src/render.ts
+var BASE58 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+var WSOL_MINT = "So11111111111111111111111111111111111111112";
+var ROUTER = { dflow: "dFlow", deflow: "dFlow", jupiter: "Jupiter" };
+var shortMint = (m) => {
+  const s = txt(m);
+  return BASE58.test(s) ? `${s.slice(0, 4)}…${s.slice(-4)}` : s;
+};
+function formatAtoms(atoms, decimals) {
+  const a = txt(atoms);
+  if (!/^[0-9]{1,40}$/.test(a) || typeof decimals !== "number" || !Number.isInteger(decimals) || decimals < 0 || decimals > 30)
+    return "";
+  if (decimals === 0)
+    return BigInt(a).toString();
+  const s = a.padStart(decimals + 1, "0");
+  const whole = BigInt(s.slice(0, -decimals)).toString();
+  const frac = s.slice(-decimals).replace(/0+$/, "");
+  return frac ? `${whole}.${frac}` : whole;
+}
+var yesNo = (v) => v === true ? "yes" : v === false ? "no" : "";
+var router = (v) => ROUTER[txt(v).toLowerCase()] ?? txt(v);
+var plural = (n, one2, many = `${one2}s`) => `${n} ${n === 1 ? one2 : many}`;
+function tokenName(side, mint, x) {
+  const sym = label(side.symbol, 24);
+  if (sym)
+    return sym;
+  const m = txt(mint ?? side.mint);
+  return x?.markets?.get(m)?.symbol || shortMint(m);
+}
+function columns(head, rows, indent = "") {
+  if (rows.length === 0)
+    return [];
+  const widths = head.map((h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length)));
+  const line = (vals) => `${indent}${vals.map((v, i) => i === vals.length - 1 ? v : v.padEnd(widths[i])).join("  ")}`.trimEnd();
+  return [line(head), ...rows.map(line)];
+}
+function welcomeLines(realm, hello, agentName) {
+  const h = hello ?? {};
+  const out = [`Agent: ${label(agentName, 120) || "your agent"} on ${realm}`];
+  const addr = typeof h.solanaAddress === "string" && BASE58.test(h.solanaAddress) ? h.solanaAddress : null;
+  if (addr)
+    out.push(`Agent wallet (fund it to trade): ${addr}`);
+  const page = sameRealmUrl(h.agentPageUrl, realm);
+  if (page)
+    out.push(`Agent page: ${page}`);
+  out.push("Try: darwin market-status · darwin balances · darwin quote --sell USDC --amount 1 --for SOL");
+  return out;
+}
+function sameRealmUrl(v, realm) {
+  if (typeof v !== "string")
+    return null;
+  try {
+    const u = new URL(v);
+    return u.protocol === "https:" && u.host === realm && !u.username && !u.password ? txt(u.toString()) : null;
+  } catch {
+    return null;
+  }
+}
+function hello(r, x) {
+  const name = txt(obj(r.untrusted).agentName) || txt(r.agentName) || x.agentLabel;
+  return welcomeLines(x.realm, r, name);
+}
+function agents(r) {
+  const d = obj(r.data);
+  const list = arr(d.agents).map(obj);
+  if (list.length === 0)
+    return ["No active agents for this API key."];
+  const rows = list.map((a) => [label(a.name, 40) || "(unnamed)", txt(a.id), txt(a.status) || "", BASE58.test(txt(a.solanaAddress)) ? txt(a.solanaAddress) : ""]);
+  const out = columns(["Name", "ID", "Status", "Wallet"], rows);
+  const perms = txt(d.permissions);
+  if (perms)
+    out.push("", `This API key: ${perms}`);
+  return out;
+}
+function capLine(key, c) {
+  const name = words(key).replace(/\busd\b/, "").trim();
+  if (c.refusesAll === true)
+    return `${name}: none allowed`;
+  if (c.unlimited === true || c.value === null)
+    return `${name}: no limit`;
+  return `${name}: ${/Usd$/.test(key) ? usd(c.value) : num(c.value)}`;
+}
+function grant(r) {
+  const d = obj(r.data);
+  const g = obj(d.grant);
+  const t = obj(d.today);
+  const out = [];
+  const paused = g.paused === true;
+  out.push(`Agent: ${label(g.agentName, 80) || "this agent"} · ${paused ? `paused${when(g.pausedAt) ? ` since ${when(g.pausedAt)}` : ""}` : txt(g.status) || "active"}`);
+  if (BASE58.test(txt(g.wallet)))
+    out.push(`Wallet: ${txt(g.wallet)}`);
+  const actions = arr(g.allowedActions).map(txt).filter(Boolean);
+  if (actions.length)
+    out.push(`Can: ${actions.map((a) => a.replace(/_/g, " ")).join(", ")}`);
+  const caps = Object.entries(obj(g.capLimits)).map(([k, c]) => capLine(k, obj(c)));
+  if (caps.length)
+    out.push(`Limits: ${caps.join(" · ")}`);
+  const sl = obj(g.slippage);
+  if (typeof sl.globalMaxBps === "number") {
+    const overrides = arr(sl.overrides).length;
+    out.push(`Max slippage: ${sl.globalMaxBps} bps${overrides ? ` (${plural(overrides, "token-specific override")})` : ""}`);
+  }
+  const rem = obj(t.remaining);
+  const left = [
+    rem.notionalUsd === null ? "no dollar limit" : usd(rem.notionalUsd) ? `${usd(rem.notionalUsd)} to trade` : "",
+    rem.txCount === null ? "no trade-count limit" : typeof rem.txCount === "number" ? plural(rem.txCount, "trade") : "",
+    rem.riskUsd === null ? "" : usd(rem.riskUsd) ? `${usd(rem.riskUsd)} of risk` : ""
+  ].filter(Boolean);
+  if (left.length)
+    out.push(`Left today: ${left.join(" · ")}`);
+  const used = [usd(t.notionalUsd) ? `${usd(t.notionalUsd)} traded` : "", typeof t.txCount === "number" ? plural(t.txCount, "trade") : ""].filter(Boolean);
+  if (used.length)
+    out.push(`Used today: ${used.join(" · ")}${txt(t.day) ? ` (UTC day ${txt(t.day)}; resets at midnight UTC)` : ""}`);
+  const u = obj(g.unlisted);
+  if (u.enabled === true)
+    out.push(`Tokens Darwin doesn't list: allowed — ${usd(u.dailyAcquisitionUsd)} a day to buy, ${usd(u.dailyDisposalUsd)} to sell`);
+  else if (u.enabled === false)
+    out.push("Tokens Darwin doesn't list: not allowed");
+  return out;
+}
+function pause(r, x, kind) {
+  const s = obj(r.summary);
+  const at = when(s.pausedAtIso) || when(s.pausedAt) || when(obj(r.data).pausedAt);
+  const changed = obj(r.data).changed;
+  const head = changed === false ? `${x.agentLabel} was already paused.` : `Paused ${x.agentLabel}${at ? ` at ${at}` : ""}.`;
+  return [
+    head,
+    kind === "agents" ? "It can't trade until you resume it on its Darwin page, and this API key can't act on it until then. It still works for your other active agents." : "It can't trade until you resume it on its Darwin page. This API key still reads its balances and orders."
+  ];
+}
+var typed = (v) => txt(v).replace(/[^A-Za-z0-9._-]/g, "");
+function quote(r, x) {
+  const s = obj(r.summary);
+  const d = obj(r.data);
+  const sell = obj(s.sell);
+  const recv = obj(s.receive);
+  const sellName = tokenName(sell, d.inputMint, x);
+  const getName = tokenName(recv, d.outputMint, x);
+  const amount = num(sell.amount) || num(x.args.amount);
+  const quoted = num(recv.quoted);
+  const atLeast = num(recv.atLeast);
+  const out = [`Sell ${amount} ${sellName} → ${quoted ? `about ${quoted} ${getName}` : getName}${atLeast ? ` (at least ${atLeast} ${getName})` : ""}`];
+  const parts = [];
+  if (typeof d.maxSlippageBps === "number")
+    parts.push(`Max slippage ${d.maxSlippageBps} bps`);
+  if (txt(d.router))
+    parts.push(`route ${router(d.router)}`);
+  const exp = typeof d.expiresAtMs === "number" ? d.expiresAtMs : null;
+  if (exp !== null)
+    parts.push(`quote expires in ${Math.max(0, Math.ceil((exp - x.now) / 1000))}s (${clock(new Date(exp))})`);
+  if (parts.length)
+    out.push(parts.join(" · "));
+  const id = txt(d.quoteId) || txt(s.quoteId);
+  if (id && /^[A-Za-z0-9_-]{1,80}$/.test(id) && sell.amount !== null) {
+    out.push(`To place it: darwin order --quote ${id} --sell ${typed(x.args.sell)} --amount ${amount} --for ${typed(x.args.for)}`);
+  } else if (sell.amount === null) {
+    out.push("This token's decimals aren't known, so this quote can't be placed by amount.");
+  }
+  return out;
+}
+function spotWrite(r, x, instant) {
+  const s = obj(r.summary);
+  const d = obj(r.data);
+  const sell = obj(s.sell);
+  const recv = obj(s.receive);
+  const sellName = tokenName(sell, undefined, x) || typed(x.args.sell);
+  const getName = tokenName(recv, undefined, x) || typed(x.args.for);
+  const amount = num(sell.amount) || num(x.args.amount);
+  const status = txt(s.status) || txt(d.status);
+  const sig = txt(s.txSignature) || txt(d.txSignature);
+  const orderId = txt(s.orderId) || txt(d.orderId);
+  const nonce = x.nonce ?? txt(d.clientOrderNonce);
+  const out = [`Sent: sell ${amount} ${sellName} for ${getName} on ${x.agentLabel} · ${orderId ? `order ${orderId} · ` : ""}nonce ${nonce}`];
+  if (instant && d.replayed === true)
+    out.push("(That nonce was already used, so this is the earlier order — nothing new was sent.)");
+  const quoted = num(recv.quoted);
+  const atLeast = num(recv.atLeast);
+  if (quoted)
+    out.push(`Expected: about ${quoted} ${getName}${atLeast ? ` (at least ${atLeast} ${getName})` : ""}`);
+  if (status === "confirmed")
+    out.push("Status: confirmed on chain");
+  else if (status === "submitted")
+    out.push("Status: sent to the network, not confirmed yet");
+  else if (status)
+    out.push(`Status: ${status}`);
+  if (/^[1-9A-HJ-NP-Za-km-z]{64,90}$/.test(sig))
+    out.push(`Transaction: ${sig}`);
+  return out.filter(Boolean);
+}
+function balances(r, x) {
+  const d = obj(r.data);
+  const rows = arr(d.balances).map(obj);
+  const out = [];
+  if (BASE58.test(txt(d.wallet)))
+    out.push(`Wallet: ${txt(d.wallet)}`);
+  const lamports = txt(d.nativeSolLamports);
+  const body = rows.map((b) => [
+    tokenName(b, b.mint, x),
+    num(b.amount) || formatAtoms(b.atoms, typeof b.decimals === "number" ? b.decimals : null) || `${txt(b.atoms)} (smallest units)`,
+    b.listed === false ? `${txt(b.mint)} (not listed on Darwin)` : txt(b.mint)
+  ]);
+  if (body.length)
+    out.push(...columns(["Token", "Amount", "Mint"], body));
+  else
+    out.push("No token balances.");
+  if (/^[0-9]{1,20}$/.test(lamports))
+    out.push(`SOL for network fees: ${formatAtoms(lamports, 9)}`);
+  if (d.gasSponsored === true)
+    out.push("Network fees: paid by Darwin.");
+  if (d.gasLow === true && d.gasSponsored !== true)
+    out.push("⚠ Low on SOL for network fees — add SOL to keep trading.");
+  if (d.partial === true)
+    out.push("Some balances couldn't be read just now, so this list may be incomplete.");
+  return out;
+}
+var atomsAs = (atoms, mint, x) => {
+  const m = x.markets?.get(txt(mint));
+  const amt = m ? formatAtoms(atoms, m.decimals) : "";
+  return amt ? `${amt} ${m.symbol}` : `${txt(atoms) || "?"} units of ${shortMint(mint)}`;
+};
+function orders(r, x) {
+  const d = obj(r.data);
+  const list = arr(d.orders).map(obj);
+  if (list.length === 0)
+    return ["No spot orders yet."];
+  const rows = list.map((o) => [
+    when(o.createdAt),
+    `${atomsAs(o.inputAtoms, o.inputMint, x)} → ${o.outputAtoms === null ? x.markets?.get(txt(o.outputMint))?.symbol || shortMint(o.outputMint) : atomsAs(o.outputAtoms, o.outputMint, x)}`,
+    `${txt(o.status)}${txt(o.errorCode) ? ` (${txt(o.errorCode)})` : ""}`,
+    txt(o.orderId)
+  ]);
+  const out = columns(["When", "Trade", "Status", "Order"], rows);
+  if (txt(d.nextCursor))
+    out.push("", `More: darwin orders --cursor ${txt(d.nextCursor)}`);
+  return out;
+}
+function tx(r) {
+  const d = obj(r.data);
+  const st = txt(d.status);
+  const what = st === "confirmed" ? "confirmed on chain" : st === "failed" ? "failed" : st === "submitted" ? "sent, not confirmed yet" : st;
+  const out = [`Transaction ${txt(d.signature)}: ${what}${typeof d.slot === "number" ? ` (slot ${d.slot})` : ""}`];
+  if (txt(d.error))
+    out.push(`Reason: ${txt(d.error).replace(/_/g, " ")}`);
+  return out;
+}
+function spotMarkets(r) {
+  const d = obj(r.data);
+  const list = arr(d.instruments).map(obj);
+  if (list.length === 0)
+    return ["No markets."];
+  const rows = list.map((m) => [
+    label(m.symbol, 20),
+    txt(m.instrumentType),
+    txt(m.assetClass).replace(/_/g, " "),
+    m.instrumentType === "perp" ? m.tradeable === false || m.status === "paused" ? "paused" : "open" : m.marketOpen === false ? "closed now" : "open",
+    m.instrumentType === "spot" ? txt(m.mint) : `max ${num(m.maxLeverage)}x`
+  ]);
+  return columns(["Symbol", "Type", "Class", "Market", "Mint / leverage"], rows);
+}
+function unlistedInspect(r) {
+  const d = obj(r.data);
+  const name = label(d.name, 60);
+  const sym = label(d.symbol, 24);
+  const out = [`Token: ${[name, sym ? `(${sym})` : ""].filter(Boolean).join(" ") || "(no name)"}${txt(d.mint) ? ` · ${txt(d.mint)}` : ""}`];
+  if (d.listing === "darwin")
+    out.push("Darwin lists this token: trade it with `darwin quote`.");
+  out.push(`Tradable as an unlisted token: ${d.eligible === true ? "yes" : "no"}`);
+  for (const f of arr(d.refusals).map(obj))
+    out.push(`  ✗ ${txt(f.code).replace(/_/g, " ")}${txt(f.detail) ? ` — ${txt(f.detail)}` : ""}`);
+  for (const f of arr(d.warnings).map(obj))
+    out.push(`  ! ${txt(f.code).replace(/_/g, " ")}${txt(f.detail) ? ` — ${txt(f.detail)}` : ""}`);
+  const facts = [
+    typeof d.decimals === "number" ? `${d.decimals} decimals` : "",
+    typeof d.ageHours === "number" ? `${Math.round(d.ageHours)}h old` : "",
+    typeof d.holders === "number" ? `${d.holders.toLocaleString("en-US")} holders` : "",
+    usd(d.volume24hUsd) ? `24h volume ${usd(d.volume24hUsd)}` : "",
+    usd(d.twapUsd) ? `price ${usd(d.twapUsd)} (${txt(d.twapWindow) || "1h"} average)` : ""
+  ].filter(Boolean);
+  if (facts.length)
+    out.push(facts.join(" · "));
+  const b = obj(d.budget);
+  if (usd(b.acquisitionRemainingUsd))
+    out.push(`Unlisted budget left today: ${usd(b.acquisitionRemainingUsd)} to buy · ${usd(b.disposalRemainingUsd)} to sell`);
+  return out;
+}
+var total = (t) => {
+  const o = obj(t);
+  if (o.usd === null || o.usd === undefined)
+    return o.complete === false ? "unknown" : "";
+  return `${usd(o.usd)}${o.complete === false ? " (incomplete)" : ""}`;
+};
+function trades(r, x) {
+  const d = obj(r.data);
+  const list = arr(d.trades).map(obj);
+  if (list.length === 0)
+    return ["No settled trades yet."];
+  const rows = list.map((t) => {
+    if (t.kind === "perp") {
+      return [when(t.settledAtMs), "perps", `${txt(t.side)} ${num(t.sizeBase)} ${label(t.symbol, 16)}${usd(t.priceUsd) ? ` @ ${usd(t.priceUsd)}` : ""}`, usd(t.realizedPnlUsd)];
+    }
+    const i = obj(t.in);
+    const o = obj(t.out);
+    return [when(t.settledAtMs), "spot", `${atomsAs(i.atoms, i.mint, x)} → ${atomsAs(o.atoms, o.mint, x)}`, t.realizedPnlUsd === undefined ? "" : usd(t.realizedPnlUsd) || "unknown"];
+  });
+  const out = columns(["Settled", "Kind", "Trade", "Realized P&L"], rows);
+  if (txt(d.nextCursor))
+    out.push("", `More: darwin history trades --cursor ${txt(d.nextCursor)}`);
+  return out;
+}
+function pnl(r) {
+  const d = obj(r.data);
+  const s = obj(d.spot);
+  const p = obj(d.perps);
+  const out = [`P&L${txt(d.period) ? ` (${txt(d.period)})` : ""}${when(d.asOfMs) ? ` as of ${when(d.asOfMs)}` : ""}`];
+  const realized = obj(s.realizedUsd);
+  const line = (name, parts) => {
+    const shown = parts.map(([k, v]) => [k, total(v)]).filter(([, v]) => v);
+    if (shown.length)
+      out.push(`${name}: ${shown.map(([k, v]) => `${k} ${v}`).join(" · ")}`);
+  };
+  line("Spot", [["realized", realized.total], ["short-term", realized.shortTerm], ["long-term", realized.longTerm], ["unrealized", s.unrealizedUsd], ["cost basis", s.costBasisUsd], ["market value", s.marketValueUsd], ["cash", s.cashUsd]]);
+  line("Perps", [["realized", p.realizedUsd], ["fees", p.feesUsd], ["funding", p.fundingUsd], ["unrealized", p.unrealizedUsd], ["equity", p.equityUsd]]);
+  const f = obj(d.feesUsd);
+  line("Fees", [["network", f.networkWalletPaid], ["perps trading", f.perpTrading]]);
+  const pos = arr(s.positions).map(obj);
+  if (pos.length) {
+    out.push("", ...columns(["Asset", "Qty", "Avg cost", "Mark", "Unrealized"], pos.map((x) => [label(x.assetId, 24), num(x.qty), usd(x.avgCostUsd), usd(x.markUsd), usd(x.unrealizedUsd) || (x.unpriced === true ? "unpriced" : "")])));
+  }
+  for (const n of arr(d.notes))
+    if (txt(n))
+      out.push(`Note: ${txt(n)}`);
+  return out;
+}
+function lots(r) {
+  const d = obj(r.data);
+  const list = arr(d.lots).map(obj);
+  const out = [`Tax lots${txt(d.method) ? ` (method: ${txt(d.method)})` : ""}`];
+  if (list.length === 0)
+    return [...out, "No open tax lots."];
+  out.push(...columns(["Asset", "Qty", "Available", "Cost basis", "Acquired", "Term", "Unrealized"], list.map((l) => [
+    label(l.assetId, 24),
+    num(l.qty),
+    num(l.availableQty),
+    usd(l.costBasisUsd),
+    when(l.acquiredAtMs),
+    txt(l.term),
+    usd(l.unrealizedUsd) || (l.unpriced === true ? "unpriced" : "")
+  ])));
+  return out;
+}
+function perpMarkets(r) {
+  const list = arr(obj(r.data).markets).map(obj);
+  if (list.length === 0)
+    return ["No perps markets."];
+  return columns(["Symbol", "Name", "Max leverage", "Min size", "Tick", "Status"], list.map((m) => [
+    label(m.symbol, 16),
+    label(m.name, 30),
+    m.maxLeverage === undefined ? "" : `${num(m.maxLeverage)}x`,
+    num(m.minOrderSize),
+    usd(m.tick),
+    m.tradeable === false ? "not tradeable" : txt(m.status)
+  ]));
+}
+function perpQuote(r) {
+  const d = obj(r.data);
+  const f = typeof d.fundingRatePct === "number" ? `${d.fundingRatePct >= 0 ? "+" : "−"}${Math.abs(d.fundingRatePct)}% funding (+ = longs pay)` : "";
+  return [[`${label(d.symbol, 16)} perps: mark ${usd(d.markUsd)}`, usd(d.indexUsd) ? `index ${usd(d.indexUsd)}` : "", f, d.tradeable === false ? "not tradeable now" : ""].filter(Boolean).join(" · ")];
+}
+function perpAccount(r) {
+  const d = obj(r.data);
+  if (d.hasTraderAccount === false)
+    return ["This agent has no perps account yet."];
+  const a = obj(d.account);
+  return [`Equity ${usd(a.equityUsd)} · collateral ${usd(a.collateralUsd)} · free ${usd(a.freeCollateralUsd)} · margin used ${usd(a.marginUsedUsd)} · maintenance ${usd(a.maintenanceMarginUsd)}`];
+}
+function perpPositions(r) {
+  const d = obj(r.data);
+  if (d.hasTraderAccount === false)
+    return ["This agent has no perps account yet."];
+  const list = arr(d.positions).map(obj);
+  if (list.length === 0)
+    return ["No open perps positions."];
+  return columns(["Market", "Side", "Size", "Entry", "Mark", "Unrealized", "Liquidation", "TP / SL"], list.map((p) => [
+    label(p.symbol, 16),
+    txt(p.side),
+    num(p.sizeBase),
+    usd(p.entryUsd),
+    usd(p.markUsd),
+    usd(p.uPnlUsd),
+    usd(p.liqUsd),
+    [usd(p.takeProfitUsd), usd(p.stopLossUsd)].map((v) => v || "—").join(" / ")
+  ]));
+}
+function perpOrders(r) {
+  const d = obj(r.data);
+  if (d.hasTraderAccount === false)
+    return ["This agent has no perps account yet."];
+  const list = arr(d.orders).map(obj);
+  const trig = arr(d.triggers).map(obj);
+  const out = list.length ? columns(["Market", "Side", "Type", "Price", "Size", "Reduce-only", "Order"], list.map((o) => [label(o.symbol, 16), txt(o.side), txt(o.orderType), usd(o.priceUsd), num(o.sizeBase), yesNo(o.reduceOnly), txt(o.orderSequenceNumber)])) : ["No resting perps orders."];
+  if (trig.length)
+    out.push("", ...columns(["Market", "Trigger", "Price"], trig.map((t) => [label(t.symbol, 16), txt(t.kind).replace(/_/g, " "), usd(t.priceUsd)])));
+  return out;
+}
+function perpProtections(r) {
+  const d = obj(r.data);
+  const list = arr(d.protections).map(obj);
+  if (list.length === 0)
+    return ["No TP/SL protections."];
+  const out = columns(["Market", "Kind", "Trigger", "State", "Updated"], list.map((p) => [label(p.symbol, 16), txt(p.kind).replace(/_/g, " "), usd(p.triggerPriceUsd) || num(p.triggerPriceUsd), txt(p.state), when(p.updatedAt)]));
+  if (d.hasMore === true)
+    out.push("", "Only the newest 200 are shown.");
+  return out;
+}
+function indicators(r) {
+  const d = obj(r.data);
+  const bars = arr(d.bars).map(obj);
+  const keys = arr(d.indicators).map((i) => txt(obj(i).key)).filter(Boolean);
+  const out = [`Indicators for ${label(d.asset_id, 40)} on ${txt(d.timeframe)} candles${d.stale === true ? " (stale: the newest candle is old)" : ""}`];
+  if (bars.length === 0)
+    return [...out, "No bars."];
+  const val = (v) => typeof v === "number" ? String(Math.round(v * 1e6) / 1e6) : Object.entries(obj(v)).map(([k, n]) => `${k}=${typeof n === "number" ? Math.round(n * 1e6) / 1e6 : txt(n)}`).join(" ");
+  out.push(...columns(["Bar opened", "Close", ...keys], bars.map((b) => [when(b.open_time_ms), num(b.close), ...keys.map((k) => val(b[k]))])));
+  return out;
+}
+function renderersFor(kind) {
+  return {
+    hello,
+    list_agents: (r) => agents(r),
+    get_grant: (r) => grant(r),
+    pause_agent: (r, x) => pause(r, x, kind),
+    get_spot_quote: quote,
+    quote_unlisted_token: quote,
+    place_spot_order: (r, x) => spotWrite(r, x, false),
+    place_unlisted_order: (r, x) => spotWrite(r, x, false),
+    spot_order_now: (r, x) => spotWrite(r, x, true),
+    get_balances: balances,
+    list_spot_orders: orders,
+    get_tx_status: (r) => tx(r),
+    list_spot_markets: (r) => spotMarkets(r),
+    inspect_unlisted_token: (r) => unlistedInspect(r),
+    list_trades: trades,
+    get_pnl: (r) => pnl(r),
+    list_lots: (r) => lots(r),
+    list_perp_markets: (r) => perpMarkets(r),
+    get_perp_quote: (r) => perpQuote(r),
+    get_perp_account: (r) => perpAccount(r),
+    list_perp_positions: (r) => perpPositions(r),
+    list_perp_orders: (r) => perpOrders(r),
+    list_perp_protections: (r) => perpProtections(r),
+    get_indicators: (r) => indicators(r)
+  };
+}
+function renderResult(tool, kind, result, x) {
+  if (typeof result.text === "string")
+    return forTerminal(result.text, x.catalogue).split(`
+`);
+  const r = renderersFor(kind)[tool];
+  if (r) {
+    try {
+      const lines2 = r(result, x);
+      if (lines2.length)
+        return lines2;
+    } catch {}
+  }
+  const { summary, data } = result;
+  const lines = [];
+  if (summary !== undefined)
+    lines.push(...genericLines(summary));
+  if (data !== undefined)
+    lines.push(...genericLines(data));
+  return lines.length ? lines : ["Done."];
+}
+var NOTHING_SENT = "Nothing was sent.";
+var REFUSAL_TEXT = {
+  market_closed: "That market is closed right now. `darwin market-status` shows when US stocks trade again.",
+  quote_expired: "That quote expired (a quote lasts 30 seconds). Get a new one with `darwin quote`.",
+  quote_not_found: "Darwin doesn't know that quote ID. Get a quote with `darwin quote` and place it within 30 seconds.",
+  quote_required: "An order needs a quote first: run `darwin quote`, then `darwin order --quote <id>`.",
+  quote_mismatch: "The order doesn't match its quote: use the same --sell, --amount and --for as the quote.",
+  quote_already_used: "That quote was already used. Check `darwin orders`, or get a new quote.",
+  quote_price_moved: "The price moved beyond the quote's slippage limit. Get a new quote and try again.",
+  quote_wrong_agent: "That quote was made for a different agent.",
+  quote_wrong_endpoint: "That quote is for a token Darwin doesn't list; it can't be placed with `darwin order`.",
+  slippage_exceeds_grant: "That slippage is looser than your owner's maximum for this pair. Use a smaller --max-slippage-bps (`darwin grant` shows the maximum).",
+  per_trade_cap: "This order is over the agent's per-trade limit. Try a smaller amount (`darwin grant` shows the limits).",
+  per_trade_risk: "This order puts more at risk than the agent's per-trade limit allows. Try a smaller amount.",
+  daily_cap: "This agent has used today's trading budget. It resets at midnight UTC; `darwin grant` shows what's left.",
+  daily_tx_count: "This agent has made today's maximum number of trades. It resets at midnight UTC.",
+  daily_risk: "This agent has used today's risk budget. Selling into a stablecoin still works; it resets at midnight UTC.",
+  asset_daily_acquisition: "Today's budget for buying this token is used up. Another token may still work.",
+  below_min_trade: "That amount is below the minimum trade size.",
+  insufficient_sol: "Not enough SOL: selling that much would leave too little for network fees.",
+  self_pay_insolvent: "This agent's wallet can't pay its network fees. Add SOL to its wallet to trade again.",
+  kill_switch: "Darwin has paused agent trading for now. Try again later.",
+  sanctions_blocked: "Refused for compliance reasons.",
+  account_locked: "The owner's Darwin account is locked, so this agent can't trade.",
+  grant_invalid: "This agent can no longer trade with this API key (revoked or expired). Ask the owner, or run `darwin login` again.",
+  rate_limited: "Too many requests with this API key right now. Wait a minute and try again.",
+  relay_unavailable: "Darwin couldn't send the transaction right now. Try again in a few seconds.",
+  relay_rate_limited: "Too many transactions from this wallet just now. Wait a few seconds and try again.",
+  simulation_unavailable: "Darwin couldn't check the transaction just now. Try again in a few seconds.",
+  quote_unavailable: "No price is available for that trade right now. Try again shortly.",
+  price_sanity: "The quoted price looked wrong compared with the market, so Darwin refused it. Try again shortly.",
+  mint_not_in_scope: "This agent isn't allowed to trade that token.",
+  unlisted_disabled: "This agent isn't allowed to trade tokens Darwin doesn't list.",
+  ambiguous_asset: "That symbol names more than one token. Pass the token's mint address instead:"
+};
+function refusalLines(result, catalogue, write = false) {
+  const d = obj(result.data);
+  const code = [result.error, d.error, d.refusal].map(txt).find((c) => /^[a-z][a-z0-9_]{0,63}$/.test(c)) ?? "";
+  const rawDetail = txt(result.detail) || txt(d.detail) || txt(d.message);
+  const detail = /^[a-z][a-z0-9_]*$/.test(rawDetail) ? "" : forTerminal(rawDetail, catalogue);
+  const retrySafe = d.retrySafe ?? result.retrySafe;
+  const sent = result.sent === false || retrySafe === true && result.sent !== true;
+  const maybeSent = write && !sent;
+  const tail = sent ? ` ${NOTHING_SENT}` : "";
+  const out = [];
+  const known2 = REFUSAL_TEXT[code];
+  if (maybeSent)
+    out.push(`Darwin couldn't confirm this order was sent${detail ? `: ${detail}` : "."}`, "It may have gone through — check `darwin orders` before trying again.");
+  else if (known2)
+    out.push(`${known2}${code === "ambiguous_asset" ? "" : tail}`);
+  else if (detail)
+    out.push(`Darwin refused this: ${detail}${tail}`);
+  else if (code)
+    out.push(`Darwin refused this (${code.replace(/_/g, " ")}).${tail}`);
+  else
+    out.push(`Darwin refused this${typeof result.status === "number" ? ` (HTTP ${result.status})` : ""}.`);
+  if (!maybeSent && known2 && detail && code !== "ambiguous_asset" && code !== "rate_limited")
+    out.push(`Darwin says: ${detail}`);
+  for (const c of [...arr(result.candidates), ...arr(d.candidates)].map(obj).slice(0, 20)) {
+    out.push(`  ${label(c.symbol, 20) || "?"}  ${txt(c.mint)}${label(c.issuer, 40) ? `  (${label(c.issuer, 40)})` : ""}`);
+  }
+  if (code && !out[0].includes(code))
+    out.push(`(${code})`);
+  return out;
+}
+
+// src/commands.ts
+init_realms();
+init_redact();
+
+// src/session.ts
+init_context();
+init_config();
+init_realms();
+function realmFromEnv(ctx) {
+  const raw = ctx.env.DARWIN_REALM;
+  if (raw === undefined || raw === "")
+    return "darwin.finance";
+  const r = parseRealm(raw);
+  if (!r)
+    throw new CliError(EXIT.usage, "DARWIN_REALM must be prod or beta.", "usage");
+  return r;
+}
+function profileName(ctx, flag) {
+  const n = flag ?? ctx.env.DARWIN_PROFILE;
+  if (n !== undefined && !PROFILE_RE.test(n))
+    throw new CliError(EXIT.usage, "A profile name is 1–40 of a–z, 0–9, _ and -, starting with a letter or digit.", "usage");
+  return n;
+}
+function openSession(ctx, flags) {
+  assertInstalled(ctx);
+  const explicit = profileName(ctx, flags.profile);
+  if (!flags.profile) {
+    const fromEnv = envKey(ctx);
+    if (fromEnv !== null) {
+      const { key: key2, kind: kind2 } = acceptKey(fromEnv);
+      return { realm: realmFromEnv(ctx), kind: kind2, key: key2, profileName: "env", profile: null };
+    }
+  }
+  const cfg = loadConfig(ctx);
+  const name = explicit ?? cfg.default;
+  const profile = name ? cfg.profiles[name] : undefined;
+  if (!name || !profile) {
+    throw new CliError(EXIT.auth, name ? `There's no profile "${name}". \`darwin profile list\` shows them; \`darwin login\` makes one.` : "This terminal isn't connected to Darwin yet. Run `darwin login` (or set DARWIN_API_KEY).", "no_key");
+  }
+  const stored = getKey(ctx, profile.store, profile.realm, name);
+  if (!stored)
+    throw new CliError(EXIT.auth, `The API key for "${name}" is missing from ${profile.store === "keychain" ? ctx.keychain.description : "its file"}. Run \`darwin login\` again.`, "no_key");
+  const { key, kind } = acceptKey(stored);
+  if (kind !== profile.kind)
+    throw new CliError(EXIT.auth, `The key saved for "${name}" is not the kind this profile expects. Run \`darwin login\` again.`, "key_kind_mismatch");
+  return { realm: profile.realm, kind, key, profileName: name, profile };
+}
+
+// src/commands.ts
+init_agents();
+var OUT_FLAGS = ["json", "format", "quiet", "no-color", "help"];
+var jsonOut = (ctx, p) => wantsJson(ctx, { json: has(p, "json"), format: one(p, "format") });
+var unwrap2 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
+async function cmdLogout(ctx, p) {
+  onlyFlags(p, ["profile", "all", "revoke", "force-local", ...OUT_FLAGS], "logout");
+  assertInstalled(ctx);
+  if (has(p, "all")) {
+    if (has(p, "revoke"))
+      throw new CliError(EXIT.usage, "--revoke works on one profile at a time.", "usage");
+    let failed = 0;
+    for (const [name2, prof2] of Object.entries(loadConfig(ctx).profiles))
+      failed += forgetProfile(ctx, name2, prof2) ? 0 : 1;
+    return failed ? EXIT.unexpected : EXIT.ok;
+  }
+  const cfg = loadConfig(ctx);
+  const name = profileName(ctx, one(p, "profile")) ?? cfg.default;
+  const prof = name ? cfg.profiles[name] : undefined;
+  if (!name || !prof)
+    throw new CliError(EXIT.usage, "No profile to log out of. `darwin profile list` shows them.", "no_profile");
+  const url = manageUrl(prof.realm, prof.agent_id);
+  if (!has(p, "revoke")) {
+    let key = null;
+    try {
+      key = getKey(ctx, prof.store, prof.realm, name);
+    } catch {
+      key = null;
+    }
+    return forgetProfile(ctx, name, prof, { expectedKey: key }) ? EXIT.ok : EXIT.unexpected;
+  }
+  const s = openSession(ctx, { profile: name });
+  if (s.kind === "agents")
+    warn(ctx, copy.revokeAllWarning);
+  let keyName = "this API key";
+  try {
+    const w = await request(ctx, s.realm, "GET", "/api/agent/v1/tools/whoami", { key: s.key, timeoutMs: 15000 });
+    const n = w.json?.name;
+    if (w.status === 200 && typeof n === "string" && n)
+      keyName = clean(n).slice(0, 120);
+  } catch {}
+  let confirmed = false;
+  let networkFailed = false;
+  try {
+    const res = await request(ctx, s.realm, "POST", "/api/agent/v1/key/revoke", { key: s.key, body: {}, timeoutMs: 20000 });
+    const j = res.json;
+    confirmed = res.status === 200 && mediaType(res.contentType) === "application/json" && !!j && j.revoked === true && typeof j.keyId === "string" && typeof j.changed === "boolean" && Object.keys(j).length === 3;
+  } catch (e) {
+    if (!(e instanceof NetworkError) && !(e instanceof CliError))
+      throw e;
+    networkFailed = e instanceof NetworkError;
+  }
+  const agent = prof.agent_name || prof.agent_id;
+  if (confirmed) {
+    if (!forgetProfile(ctx, name, prof, { expectedKey: s.key, quiet: true }))
+      return EXIT.unexpected;
+    say(ctx, copy.revoked(keyName, agent));
+    return EXIT.ok;
+  }
+  if (networkFailed && has(p, "force-local")) {
+    forgetProfile(ctx, name, prof, { expectedKey: s.key, quiet: true });
+    warn(ctx, copy.revokeNotConfirmed(agent, url).replace(" and it's still saved here", ""));
+    return EXIT.refused;
+  }
+  warn(ctx, copy.revokeNotConfirmed(agent, url));
+  return EXIT.refused;
+}
+function forgetProfile(ctx, name, prof, opts = {}) {
+  const outcome = updateConfig(ctx, (c) => {
+    const now = c.profiles[name];
+    if (!now || now.realm !== prof.realm || now.store !== prof.store || now.agent_id !== prof.agent_id)
+      return "changed";
+    if (opts.expectedKey !== undefined) {
+      let current;
+      try {
+        current = getKey(ctx, now.store, now.realm, name);
+      } catch {
+        return "unreadable";
+      }
+      if (current !== null && current !== opts.expectedKey)
+        return "changed";
+    }
+    if (!deleteKey(ctx, now.store, now.realm, name))
+      return "stuck";
+    delete c.profiles[name];
+    if (c.default === name)
+      c.default = Object.keys(c.profiles)[0] ?? "";
+    return "ok";
+  });
+  if (outcome === "changed") {
+    warn(ctx, `Profile "${name}" changed while this ran (another login?), so it was left as it is.`);
+    return false;
+  }
+  if (outcome !== "ok") {
+    warn(ctx, `Couldn't remove the API key for "${name}" from ${prof.store === "keychain" ? ctx.keychain.description : "its file"}, so the profile was kept. Unlock it and try again.`);
+    return false;
+  }
+  if (!opts.quiet)
+    say(ctx, copy.loggedOut(name, manageUrl(prof.realm, prof.agent_id)));
+  return true;
+}
+async function cmdWhoami(ctx, p) {
+  onlyFlags(p, ["profile", ...OUT_FLAGS], "whoami");
+  const s = openSession(ctx, { profile: one(p, "profile") });
+  let who = null;
+  let note = null;
+  let exit = EXIT.ok;
+  try {
+    const res = await request(ctx, s.realm, "GET", "/api/agent/v1/tools/whoami", { key: s.key, timeoutMs: 15000 });
+    if (res.status === 200 && res.json && typeof res.json === "object")
+      who = res.json;
+    else if (res.status === 401) {
+      note = "Darwin refused this API key — it may have been revoked.";
+      exit = EXIT.auth;
+    } else if (res.status === 429) {
+      note = "Too many requests with this API key right now.";
+      exit = EXIT.rateLimited;
+    } else if (res.status === 426) {
+      note = copy.updateRequired(typeof res.json?.minCli === "string" ? String(res.json.minCli) : "the latest version");
+      exit = EXIT.upgrade;
+    } else if (res.status === 404) {} else if (res.status === 403) {
+      note = "Darwin refused this request.";
+      exit = EXIT.refused;
+    } else {
+      note = `Darwin answered HTTP ${res.status}.`;
+      exit = EXIT.unexpected;
+    }
+  } catch (e) {
+    if (!(e instanceof NetworkError))
+      throw e;
+    note = e.message;
+    exit = EXIT.network;
+  }
+  const keyName = who && typeof who.name === "string" ? clean(who.name) : "name unavailable";
+  const agent = clean(unwrap2(who?.homeAgentName) || s.profile?.agent_name || s.profile?.agent_id || "unknown agent");
   const permissions = s.kind === "agents" ? "Read: all agents · Trade: all active agents" : "Read: this agent · Trade: this agent";
   const store = s.profile ? storeLabel(ctx, s.profile.store, s.realm, s.profileName) : "DARWIN_API_KEY (environment)";
   if (jsonOut(ctx, p))
@@ -3570,6 +4478,18 @@ async function cmdWhoami(ctx, p) {
     warn(ctx, `Reminder: this API key is in a plain file (${storeLabel(ctx, "file", s.realm, s.profileName).slice(8, -1)}).`);
   return exit;
 }
+var DOCTOR_LABEL = {
+  version: "Darwin CLI",
+  node: "Node",
+  platform: "Platform",
+  install: "Install",
+  secretStore: "Secret store",
+  config: "Config",
+  profiles: "Profiles",
+  defaultProfile: "Default profile",
+  key: "API key",
+  catalogue: "Command list"
+};
 async function cmdDoctor(ctx, p) {
   onlyFlags(p, ["profile", ...OUT_FLAGS], "doctor");
   const checks = { version: VERSION, node: process.version, platform: `${ctx.platform}-${process.arch}` };
@@ -3613,9 +4533,11 @@ async function cmdDoctor(ctx, p) {
   }
   if (jsonOut(ctx, p))
     printJson(ctx, checks);
-  else
-    for (const l of renderText(checks))
-      say(ctx, l);
+  else {
+    const width = Math.max(...Object.keys(checks).map((k) => (DOCTOR_LABEL[k] ?? k).length));
+    for (const [k, v] of Object.entries(checks))
+      say(ctx, `${(DOCTOR_LABEL[k] ?? k).padEnd(width)}  ${v === null ? "none" : String(v)}`);
+  }
   return EXIT.ok;
 }
 async function cmdProfile(ctx, p) {
@@ -3635,9 +4557,18 @@ async function cmdProfile(ctx, p) {
         printJson(ctx, { profiles: rows });
       else if (rows.length === 0)
         say(ctx, "No profiles yet. Run `darwin login`.");
-      else
-        for (const l of renderText(rows))
+      else {
+        const table2 = columns(["Profile", "Site", "Agent", "API key for", "Stored in"], rows.map((r) => [
+          `${r.default ? "* " : "  "}${r.profile}`,
+          r.realm,
+          clean(r.agent).slice(0, 40),
+          r.kind === "agents" ? `all agents${r.defaultAgent ? " (default set)" : ""}` : "this agent",
+          r.store === "keychain" ? ctx.keychain.description : "a plain file"
+        ]));
+        for (const l of table2)
           say(ctx, l);
+        say(ctx, "* = the profile commands use. Change it: darwin profile use <name>");
+      }
       return EXIT.ok;
     }
     case "use":
@@ -3694,9 +4625,9 @@ async function cmdProfile(ctx, p) {
         throw new CliError(EXIT.usage, "Only a profile with an API key for all your agents has a default agent.", "usage");
       if (!a)
         throw new CliError(EXIT.usage, "Name the agent: `darwin profile set-agent <name or id>`.", "usage");
-      const agents = await listAgents(ctx, s, { fresh: true });
-      const hit = agents.find((x) => x.id === a) ?? (() => {
-        const m = agents.filter((x) => x.name.toLowerCase() === a.toLowerCase());
+      const agents2 = await listAgents(ctx, s, { fresh: true });
+      const hit = agents2.find((x) => x.id === a) ?? (() => {
+        const m = agents2.filter((x) => x.name.toLowerCase() === a.toLowerCase());
         if (m.length > 1)
           throw new CliError(EXIT.usage, `More than one agent is called that; use its id: ${m.map((x) => x.id).join(", ")}`, "agent_ambiguous");
         return m[0];
@@ -3737,7 +4668,7 @@ async function cmdApi(ctx, p) {
   if (jsonOut(ctx, p))
     printJson(ctx, body);
   else
-    for (const l of renderText(body))
+    for (const l of genericLines(body))
       say(ctx, l);
   return res.status === 200 ? EXIT.ok : res.status === 401 ? EXIT.auth : res.status === 429 ? EXIT.rateLimited : EXIT.refused;
 }
@@ -3746,7 +4677,7 @@ async function cmdApi(ctx, p) {
 init_context();
 import { linkSync, lstatSync as lstatSync3, readFileSync, renameSync as renameSync2, unlinkSync as unlinkSync3 } from "node:fs";
 import { randomBytes as randomBytes3 } from "node:crypto";
-import { join as join7 } from "node:path";
+import { join as join7, sep } from "node:path";
 init_copy();
 init_config();
 init_http();
@@ -4160,7 +5091,7 @@ function chooseStore(ctx, p) {
   if (s === "file") {
     if (!probeFileStore(ctx))
       throw new CliError(EXIT.auth, `Nothing was started: the Darwin CLI can't keep a private file in ${join7(ctx.configDir, "credentials")} (it must be yours and chmod 700).`, "no_secret_store");
-    warn(ctx, copy.fileStoreWarning(join7(ctx.configDir, "credentials", "<realm>__<profile>")));
+    warn(ctx, copy.fileStoreWarning(`${join7(ctx.configDir, "credentials")}${sep}…`));
     return "file";
   }
   if (!probeKeychain(ctx))
@@ -4487,18 +5418,21 @@ async function finishPickup(ctx, p, j, json) {
   if (!saved)
     throw new CliError(EXIT.unexpected, lostKeyLine(k), "store_failed", { agentId, manageUrl: manageUrl(p.realm, agentId) });
   let welcome = null;
+  let hello2 = null;
   try {
     const h = await request(ctx, p.realm, "GET", "/api/agent/v1/hello", { key, agent: kind === "agents" ? agentId : undefined, timeoutMs: 20000 });
     const w = h.json?.welcome;
     if (h.status === 200 && typeof w === "string")
       welcome = clean(w).slice(0, 8000);
+    if (h.status === 200 && h.json && typeof h.json === "object" && !Array.isArray(h.json))
+      hello2 = h.json;
   } catch {}
   if (json)
     printJson(ctx, { status: "connected", profile, realm: p.realm, kind, agentId, agent: agentName, keyName, store: k.store, permissions: kind === "agents" ? "Read: all agents · Trade: all active agents" : "Read: this agent · Trade: this agent", welcome });
   else {
-    if (welcome)
-      say(ctx, welcome);
     say(ctx, connectedLine(ctx, k));
+    for (const l of welcomeLines(p.realm, hello2, agentName || agentId))
+      say(ctx, l);
   }
   return EXIT.ok;
 }
@@ -4513,6 +5447,10 @@ init_context();
 init_copy();
 import { randomBytes as randomBytes4 } from "node:crypto";
 init_http();
+init_fsx();
+init_redact();
+import { createHash as createHash2 } from "node:crypto";
+import { join as join8 } from "node:path";
 init_agents();
 var B62 = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
 function newNonce() {
@@ -4638,7 +5576,7 @@ function exitFor(tool, body) {
     return EXIT.usage;
   return EXIT.refused;
 }
-async function callTool(o, agentId) {
+async function callTool(o, agentId, limits = {}) {
   const { ctx, session, tool } = o;
   const args = { ...o.args };
   let nonce = null;
@@ -4653,12 +5591,12 @@ async function callTool(o, agentId) {
     key: session.key,
     agent: agentId ?? undefined,
     body: { arguments: args },
-    timeoutMs: tool.write ? 30000 : 20000
+    timeoutMs: limits.timeoutMs ?? (tool.write ? 30000 : 20000)
   });
   let res;
   try {
     res = await send();
-    if (!tool.write && res.status === 429) {
+    if (!tool.write && !limits.noRetry && res.status === 429) {
       const ra = Number(res.headers.get("retry-after") ?? "NaN");
       if (Number.isFinite(ra) && ra >= 0 && ra <= 10) {
         await ctx.sleep(ra * 1000);
@@ -4713,30 +5651,8 @@ async function callTool(o, agentId) {
 }
 async function runTool(o) {
   const { ctx, session, tool, flags } = o;
-  if (flags.dryRun) {
-    const named = (flags.agent ?? ctx.env.DARWIN_AGENT ?? "").trim() || (session.kind === "agents" ? session.profile?.default_agent ?? "" : "");
-    if (session.kind === "agents" && tool.name !== "list_agents" && !named)
-      throw new CliError(EXIT.usage, copy.needAgent, "agent_required");
-    const agentId2 = named || null;
-    const preview = {
-      dryRun: true,
-      sent: false,
-      command: `darwin ${tool.cli.path.join(" ")}`,
-      tool: tool.name,
-      write: tool.write,
-      costsTx: tool.costsTx,
-      realm: session.realm,
-      agent: agentId2,
-      arguments: o.args,
-      note: tool.idempotency ? "An order ID (nonce) is generated when the command really runs." : undefined
-    };
-    if (o.json)
-      printJson(ctx, preview);
-    else
-      for (const l of renderText(preview))
-        say(ctx, l);
-    return EXIT.ok;
-  }
+  if (flags.dryRun)
+    return dryRun(o);
   const agentId = tool.name === "list_agents" ? null : await resolveAgent(ctx, session, flags.agent);
   const out = await callTool(o, agentId);
   if (out.message === "unknown_tool") {
@@ -4745,41 +5661,157 @@ async function runTool(o) {
     out.message = `\`darwin ${tool.cli.path.join(" ")}\` isn't available on ${session.realm} right now. Nothing was done. The command list was refreshed — see \`darwin help\`.`;
   }
   const result = out.body?.result ?? null;
+  if (out.exit === EXIT.ok && result && QUOTE_TOOLS.has(tool.name))
+    rememberQuote(o, result);
   if (o.json) {
     printJson(ctx, result ? { ...result, ...out.nonce ? { nonce: out.nonce } : {} } : { error: out.body?.error ?? "failed", detail: out.message, ...out.nonce ? { nonce: out.nonce } : {} });
     if (out.message)
       warn(ctx, out.message);
+    if (out.exit === EXIT.ok)
+      jsonFooter(o, out, result);
+    else if (out.nonce && tool.write)
+      warn(ctx, `Order nonce: ${out.nonce}`);
+    return out.exit;
+  }
+  const x = await renderCtx(o, out, agentId);
+  if (out.exit === EXIT.ok && result) {
+    for (const l of renderResult(tool.name, session.kind, result, x))
+      say(ctx, l);
+    try {
+      if (await afterHumanSuccess(o, result, agentId) === "failed")
+        return EXIT.refused;
+    } catch {}
   } else {
-    if (result && !(out.exit !== EXIT.ok && !result.data && !result.summary)) {
-      if (typeof result.text === "string")
-        say(ctx, cell(result.text));
-      else {
-        const { summary, data, welcome, ...rest } = result;
-        if (typeof welcome === "string")
-          say(ctx, cell(welcome));
-        if (summary !== undefined)
-          for (const l of renderText(summary))
-            say(ctx, l);
-        if (data !== undefined)
-          for (const l of renderText(data))
-            say(ctx, l);
-        for (const l of renderText(Object.fromEntries(Object.entries(rest).filter(([k]) => k !== "status"))))
-          if (l.trim())
-            say(ctx, l);
-      }
-    } else if (result) {
-      warn(ctx, `${cell(result.detail ?? result.error ?? "Refused.")}${typeof result.error === "string" ? ` (${cell(result.error)})` : ""}`);
-    }
+    const covered = out.exit === EXIT.paused || out.exit === EXIT.uncertain || out.message === copy.nonceConflict;
+    if (result && !covered)
+      for (const l of refusalLines(result, o.catalogue, tool.write))
+        warn(ctx, l);
     if (out.message)
       warn(ctx, out.message);
+    if (out.nonce && tool.write)
+      warn(ctx, `Order nonce: ${out.nonce}`);
   }
-  if (out.exit === EXIT.ok)
-    afterSuccess(o, out, result);
-  else if (out.nonce && tool.write)
-    warn(ctx, `Order ID: ${out.nonce}`);
   return out.exit;
 }
-function afterSuccess(o, out, result) {
+var QUOTE_TOOLS = new Set(["get_spot_quote"]);
+var EXTRA_READ_MS = 5000;
+var CONFIRM_BUDGET_MS = 12000;
+var SPOT_WRITES = new Set(["place_spot_order", "spot_order_now"]);
+async function readTool(o, name, args, agentId, deadline) {
+  const t = o.catalogue.tools.find((x) => x.name === name);
+  if (!t || t.write)
+    return null;
+  const left = deadline === undefined ? EXTRA_READ_MS : Math.min(EXTRA_READ_MS, deadline - o.ctx.now());
+  if (left < 500)
+    return null;
+  try {
+    const r = await callTool({ ctx: o.ctx, session: o.session, catalogue: o.catalogue, tool: t, args, flags: o.flags }, agentId, { timeoutMs: left, noRetry: true });
+    return r.exit === EXIT.ok && r.body?.result && typeof r.body.result === "object" ? r.body.result : null;
+  } catch {
+    return null;
+  }
+}
+async function renderCtx(o, out, agentId) {
+  const { ctx, session, tool } = o;
+  const agentLabel = session.kind === "agents" ? clean(o.flags.agent || (agentId && agentId === session.profile?.agent_id ? session.profile.agent_name : "") || agentId || "this agent") : clean(session.profile?.agent_name || "this agent");
+  const x = { realm: session.realm, now: ctx.now(), args: o.args, catalogue: o.catalogue, agentLabel, nonce: out.nonce };
+  if (out.exit === EXIT.ok && (tool.name === "list_spot_orders" || tool.name === "list_trades")) {
+    const m = await readTool(o, "list_spot_markets", {}, agentId);
+    if (m) {
+      try {
+        x.markets = marketsByMint(m);
+      } catch {}
+    }
+  }
+  return x;
+}
+function marketsByMint(result) {
+  const map = new Map;
+  const list = result.data?.instruments ?? [];
+  if (!Array.isArray(list))
+    return map;
+  for (const i of list) {
+    if (!i || typeof i !== "object" || Array.isArray(i))
+      continue;
+    const r = i;
+    const mint = typeof r.mint === "string" ? r.mint : "";
+    if (!mint || r.instrumentType === "perp")
+      continue;
+    map.set(mint, { symbol: cell(r.symbol).slice(0, 24) || mint.slice(0, 4), decimals: typeof r.decimals === "number" ? r.decimals : null });
+  }
+  return map;
+}
+async function afterHumanSuccess(o, result, agentId) {
+  const { ctx, tool } = o;
+  const data = result.data ?? {};
+  if (QUOTE_TOOLS.has(tool.name)) {
+    const inMint = typeof data.inputMint === "string" ? data.inputMint : null;
+    const inAtoms = typeof data.inAtoms === "string" && /^[0-9]{1,40}$/.test(data.inAtoms) ? BigInt(data.inAtoms) : null;
+    if (inMint && inAtoms !== null && inMint !== WSOL_MINT) {
+      const b = await readTool(o, "get_balances", {}, agentId);
+      const bd = b?.data ?? null;
+      const rows = Array.isArray(bd?.balances) ? bd.balances : null;
+      if (rows && bd?.partial !== true) {
+        const row = rows.find((r) => r?.mint === inMint);
+        const held = row && typeof row.atoms === "string" && /^[0-9]{1,40}$/.test(row.atoms) ? BigInt(row.atoms) : 0n;
+        if (held < inAtoms) {
+          const sym = cell(result.summary?.sell?.symbol ?? "") || "of this token";
+          const amt = row ? typeof row.amount === "string" ? cell(row.amount) : formatAtoms(row.atoms, typeof row.decimals === "number" ? row.decimals : null) : "0";
+          warn(ctx, `⚠ This agent holds ${amt || "less than that"} ${sym}, so an order for this quote would fail.`);
+        }
+      }
+    }
+    return;
+  }
+  if (!SPOT_WRITES.has(tool.name))
+    return;
+  const summary = result.summary ?? {};
+  const sig = typeof summary.txSignature === "string" ? summary.txSignature : typeof data.txSignature === "string" ? data.txSignature : null;
+  const status = typeof summary.status === "string" ? summary.status : data.status;
+  if (status === "failed") {
+    warn(ctx, `The order failed, so nothing was traded.${sig ? ` Details: darwin tx ${sig}` : ""}`);
+    return "failed";
+  }
+  if (sig && /^[1-9A-HJ-NP-Za-km-z]{64,90}$/.test(sig) && status !== "confirmed") {
+    const deadline = ctx.now() + CONFIRM_BUDGET_MS;
+    let landed = null;
+    for (let i = 0;i < CONFIRM_POLLS && !landed && ctx.now() + CONFIRM_INTERVAL_MS < deadline; i++) {
+      await ctx.sleep(CONFIRM_INTERVAL_MS);
+      const t = await readTool(o, "get_tx_status", { signature: sig }, agentId, deadline);
+      const st = t?.data?.status;
+      if (st === "confirmed" || st === "failed")
+        landed = st;
+    }
+    if (landed === "confirmed") {
+      const got = await receivedFor(o, data.orderId ?? summary.orderId, agentId, ctx.now() + EXTRA_READ_MS);
+      say(ctx, got ? `Confirmed on chain: received ${got}.` : "Confirmed on chain.");
+    } else if (landed === "failed") {
+      warn(ctx, `The transaction failed on chain, so nothing was traded. Details: darwin tx ${sig}`);
+      return "failed";
+    } else {
+      say(ctx, `Not confirmed yet. Check it with: darwin tx ${sig}`);
+    }
+  }
+  const g = await readTool(o, "get_grant", {}, agentId);
+  const left = g?.data?.today?.remaining;
+  if (left && typeof left.txCount === "number")
+    say(ctx, `Trades left today: ${left.txCount}`);
+}
+var CONFIRM_POLLS = 4;
+var CONFIRM_INTERVAL_MS = 2000;
+async function receivedFor(o, orderId, agentId, deadline) {
+  if (typeof orderId !== "string" || !orderId)
+    return null;
+  const [list, markets] = await Promise.all([readTool(o, "list_spot_orders", {}, agentId, deadline), readTool(o, "list_spot_markets", {}, agentId, deadline)]);
+  const rows = list?.data?.orders ?? [];
+  const row = Array.isArray(rows) ? rows.find((r) => r?.orderId === orderId) : undefined;
+  if (!row || typeof row.outputAtoms !== "string")
+    return null;
+  const m = markets ? marketsByMint(markets).get(String(row.outputMint)) : undefined;
+  const amt = m ? formatAtoms(row.outputAtoms, m.decimals) : "";
+  return amt ? `${amt} ${m.symbol}` : null;
+}
+function jsonFooter(o, out, result) {
   const { ctx, tool, args } = o;
   const summary = result?.summary ?? {};
   const data = result?.data ?? {};
@@ -4793,14 +5825,112 @@ function afterSuccess(o, out, result) {
       warn(ctx, copy.quoteFooter(quoteId, secs, text(args.sell), typeof sellAmount === "string" ? text(sellAmount) : text(args.amount), text(args.for)));
     }
   }
-  if ((tool.name === "place_spot_order" || tool.name === "spot_order_now") && out.nonce) {
-    const agent = o.session.kind === "agents" ? o.flags.agent || o.session.profile?.default_agent || out.agentId || "this agent" : o.session.profile?.agent_name || "this agent";
-    const line = copy.spotSent(text(args.amount), text(args.sell), text(args.for), agent, out.nonce);
-    if (o.json)
-      warn(ctx, line);
-    else
-      say(ctx, line);
+  if (SPOT_WRITES.has(tool.name) && out.nonce) {
+    const orderId = typeof data.orderId === "string" ? data.orderId : typeof summary.orderId === "string" ? summary.orderId : null;
+    warn(ctx, copy.spotSent(text(args.amount), text(args.sell), text(args.for), agentFor(o, out), orderId ? cell(orderId) : null, out.nonce));
+  }
+}
+var agentFor = (o, out) => o.session.kind === "agents" ? o.flags.agent || o.session.profile?.default_agent || out.agentId || "this agent" : o.session.profile?.agent_name || "this agent";
+function quotesFile(o) {
+  return join8(o.ctx.configDir, "cache", `quotes-${o.session.realm}-${createHash2("sha256").update(o.session.key).digest("hex").slice(0, 16)}.json`);
+}
+function readQuotes(o) {
+  try {
+    const t = readPrivate(quotesFile(o), 64 * 1024, { requirePrivateMode: false });
+    const v = t ? JSON.parse(t) : [];
+    return Array.isArray(v) ? v.filter((q) => !!q && typeof q.id === "string" && typeof q.expiresAtMs === "number") : [];
+  } catch {
+    return [];
+  }
+}
+function rememberQuote(o, result) {
+  const data = result.data ?? {};
+  const sell = result.summary?.sell ?? {};
+  if (typeof data.quoteId !== "string" || !/^[A-Za-z0-9_-]{1,80}$/.test(data.quoteId) || typeof data.expiresAtMs !== "number")
+    return;
+  const rec = {
+    id: data.quoteId,
+    sell: String(o.args.sell ?? ""),
+    for: String(o.args.for ?? ""),
+    amount: typeof sell.amount === "string" ? sell.amount : String(o.args.amount ?? ""),
+    expiresAtMs: data.expiresAtMs
+  };
+  const now = o.ctx.now();
+  const keep = readQuotes(o).filter((q) => q.expiresAtMs > now - 3600000 && q.id !== rec.id).slice(-19);
+  try {
+    writePrivate(quotesFile(o), JSON.stringify([...keep, rec]));
+  } catch {}
+}
+var sameToken = (a, b) => {
+  const mint = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+  return mint.test(a.trim()) || mint.test(b.trim()) ? a.trim() === b.trim() : a.trim().toLowerCase() === b.trim().toLowerCase();
+};
+var sameAmount = (a, b) => {
+  const n = (s) => (s.includes(".") ? s.replace(/0+$/, "").replace(/\.$/, "") : s).replace(/^0+(?=\d)/, "");
+  return n(a.trim()) === n(b.trim());
+};
+function dryRun(o) {
+  const { ctx, session, tool } = o;
+  const named = (o.flags.agent ?? ctx.env.DARWIN_AGENT ?? "").trim() || (session.kind === "agents" ? session.profile?.default_agent ?? "" : "");
+  if (session.kind === "agents" && tool.name !== "list_agents" && !named)
+    throw new CliError(EXIT.usage, copy.needAgent, "agent_required");
+  const agentId = named || null;
+  const checked = [];
+  const problems = [];
+  const unchecked = [];
+  if (tool.name === "place_spot_order" && typeof o.args.quoteId === "string") {
+    const q = readQuotes(o).find((r) => r.id === o.args.quoteId);
+    if (!q) {
+      unchecked.push("the quote: this terminal didn't make it (or made it over an hour ago), so only Darwin can say whether it exists");
+    } else {
+      if (q.expiresAtMs <= ctx.now())
+        problems.push(`the quote expired at ${new Date(q.expiresAtMs).toLocaleTimeString("en-US")}; get a new one with \`darwin quote\``);
+      else
+        checked.push(`the quote is one this terminal made, and it has ${Math.ceil((q.expiresAtMs - ctx.now()) / 1000)}s left`);
+      const diffs = [
+        !sameToken(String(o.args.sell ?? ""), q.sell) ? `--sell (quote: ${clean(q.sell)})` : "",
+        !sameToken(String(o.args.for ?? ""), q.for) ? `--for (quote: ${clean(q.for)})` : "",
+        !sameAmount(String(o.args.amount ?? ""), q.amount) ? `--amount (quote: ${q.amount})` : ""
+      ].filter(Boolean);
+      if (diffs.length)
+        problems.push(`this doesn't match the quote: ${diffs.join(", ")}`);
+      else
+        checked.push("--sell, --amount and --for match the quote");
+    }
+  }
+  if (tool.write)
+    unchecked.push("the balance, the agent's limits and the price — Darwin checks those when the command really runs");
+  const preview = {
+    dryRun: true,
+    sent: false,
+    command: `darwin ${tool.cli.path.join(" ")}`,
+    tool: tool.name,
+    write: tool.write,
+    costsTx: tool.costsTx,
+    realm: session.realm,
+    agent: agentId,
+    arguments: o.args,
+    note: tool.idempotency ? "An order ID (nonce) is generated when the command really runs." : undefined
+  };
+  if (o.json) {
+    printJson(ctx, preview);
+    for (const p of problems)
+      warn(ctx, `Dry run check failed: ${p}`);
+    return EXIT.ok;
+  } else {
+    say(ctx, `Dry run — nothing was sent. Would run: darwin ${tool.cli.path.join(" ")} on ${session.realm}${agentId ? ` for agent ${clean(agentId)}` : ""}`);
+    for (const [k, v] of Object.entries(o.args)) {
+      const flag = tool.cli.args[k]?.flag;
+      say(ctx, flag ? `  --${flag} ${cell(v)}` : tool.cli.positional.includes(k) ? `  <${clean(k)}> ${cell(v)}` : `  --field ${clean(k)}=${cell(v)}`);
+    }
+    for (const c of checked)
+      say(ctx, `✓ ${c}`);
+    for (const p of problems)
+      say(ctx, `✗ ${p}`);
+    for (const u of unchecked)
+      say(ctx, `Not checked: ${u}`);
   }
+  return problems.length ? EXIT.refused : EXIT.ok;
 }
 
 // src/mcp.ts
@@ -4952,219 +6082,58 @@ async function mcpCall(ctx, session, catalogue, params, refresh) {
   return toolResult({ ...result, ...out.nonce ? { nonce: out.nonce } : {} }, out.exit !== EXIT.ok);
 }
 
-// src/market.ts
+// src/local-flags.ts
 init_context();
-init_http();
-init_realms();
-var MARKET_STATUS_PATH = "/api/agent/v1/market-status/us-equities";
-var MARKET_STATUS_TOOL = "get_us_market_status";
-var MARKET_STATUS_HELP = "Is the US stock market open right now? Shows the session, why it's closed (weekend, holiday, early close), the next open and close in your local time, and whether Darwin accepts agent stock orders now. Tokenized stocks trade 24/7, but liquidity is much lower when the US market is closed. No API key needed.";
-function localTime(iso) {
-  if (typeof iso !== "string")
-    return null;
-  const d = new Date(iso);
-  if (Number.isNaN(d.getTime()))
-    return null;
-  return d.toLocaleString("en-US", { weekday: "short", month: "short", day: "numeric", hour: "numeric", minute: "2-digit", timeZoneName: "short" });
-}
-var SESSION = { pre_market: "pre-market", regular: "open (regular session)", after_hours: "after hours", closed: "closed" };
-async function cmdMarketStatus(ctx, p) {
-  onlyFlags(p, ["beta", "prod", "json", "format", "quiet", "no-color", "help"], "market-status");
-  if (p.positionals.length > 1)
-    throw new CliError(EXIT.usage, "`darwin market-status` takes no arguments.", "usage");
-  let realm = "darwin.finance";
-  if (has(p, "beta"))
-    realm = "beta.darwin.finance";
-  else if (!has(p, "prod") && ctx.env.DARWIN_REALM) {
-    const r = parseRealm(ctx.env.DARWIN_REALM);
-    if (!r)
-      throw new CliError(EXIT.usage, "DARWIN_REALM must be prod or beta.", "usage");
-    realm = r;
-  }
-  let res;
-  try {
-    res = await request(ctx, realm, "GET", MARKET_STATUS_PATH, { timeoutMs: 15000 });
-  } catch (e) {
-    if (e instanceof NetworkError)
-      throw new CliError(EXIT.network, e.message, "network_error");
-    throw e;
-  }
-  const s = res.json;
-  if (res.status === 429)
-    throw new CliError(EXIT.rateLimited, "Too many requests right now; try again in a minute.", "rate_limited");
-  if (res.status !== 200 || !s || typeof s.open !== "boolean")
-    throw new CliError(EXIT.unexpected, `${realm} didn't answer the market status (HTTP ${res.status}).`, "bad_response");
-  if (wantsJson(ctx, { json: has(p, "json"), format: one(p, "format") })) {
-    printJson(ctx, s);
-    return EXIT.ok;
-  }
-  const session = SESSION[String(s.session)] ?? cell(s.session);
-  const why = typeof s.reason === "string" && s.reason ? ` (${cell(s.reason).replace(/_/g, " ")}${typeof s.holidayName === "string" && s.holidayName ? `: ${cell(s.holidayName)}` : ""})` : "";
-  say(ctx, `US stock market: ${session}${why}${s.earlyClose === true ? " — early close today" : ""}`);
-  const line = (label, v) => {
-    const t = localTime(v);
-    if (t)
-      say(ctx, `${label}: ${t}`);
-  };
-  line("Session changes", s.sessionEndsAt);
-  line("Next open", s.nextOpenAt);
-  line("Next close", s.nextCloseAt);
-  const a = s.agentStockOrders ?? {};
-  if (a.accepted === true)
-    say(ctx, `Darwin agent stock orders: accepted${localTime(a.closesAt) ? ` until ${localTime(a.closesAt)}` : ""}`);
-  else if (a.accepted === false)
-    say(ctx, `Darwin agent stock orders: not accepted now${localTime(a.opensAt) ? `; next accepted ${localTime(a.opensAt)}` : ""}`);
-  say(ctx, "Tokenized stocks trade 24/7, but liquidity is much lower when the US market is closed.");
-  return EXIT.ok;
-}
-
-// src/help.ts
-init_redact();
-init_copy();
-var LOCAL_DESCRIPTION = { [MARKET_STATUS_TOOL]: MARKET_STATUS_HELP };
-var describe = (t) => LOCAL_DESCRIPTION[t.name] ?? clean(t.description);
-var STATIC_HELP = {
-  login: {
-    usage: "darwin login [--beta] [--client-name <name>] [--reconnect] [--start | --wait | --with-key | --key-file <file> | --from-skill] [--profile <name>] [--store keychain|file]",
-    summary: "Connect this terminal to a Darwin agent and keep its API key in your system's secret store.",
-    flags: {
-      beta: "Use beta.darwin.finance instead of darwin.finance.",
-      "client-name": `What Darwin shows your owner as the app asking (never "Darwin"). Default: the coding agent you're in, else "Command line".`,
-      reconnect: "Get a new API key for an agent you already have, instead of creating a new agent.",
-      start: "Start pairing and print the link and code, then exit (for tools whose calls time out).",
-      wait: "Wait for a pairing started with --start, and save the key.",
-      "with-key": "Import an API key from stdin, or paste it at a hidden prompt.",
-      "key-file": "Import the key file downloaded from the agent's Manage tab (add --delete-file to delete it after).",
-      "from-skill": "Import the key the official Darwin skill (darwin.py) saved (add --delete-skill-copy to remove its copy).",
-      "agent-id": "With --from-skill: which saved key, when there are several.",
-      profile: "Profile name for this key (default: from the agent's name).",
-      store: "keychain (default) or file — a plain file only your user can read.",
-      "no-browser": "Don't open the link in a browser."
-    }
-  },
-  logout: {
-    usage: "darwin logout [--profile <name> | --all] [--revoke [--force-local]]",
-    summary: "Remove the API key from this computer. With --revoke, Darwin revokes the key first.",
-    flags: { revoke: "Ask Darwin to revoke this key everywhere, then remove it here.", all: "Every profile.", "force-local": "With --revoke: remove the local copy even if Darwin couldn't be reached." }
-  },
-  whoami: { usage: "darwin whoami [--profile <name>]", summary: "Which agent, site and API key this terminal uses (never any key characters).", flags: {} },
-  profile: {
-    usage: "darwin profile list | use <name> | rename <old> <new> | remove <name> | set-agent <name or id>",
-    summary: "Manage profiles (one per API key). set-agent: the default agent for a key that trades for all your agents.",
-    flags: {}
-  },
-  doctor: { usage: "darwin doctor", summary: "Check the install, the secret store, your profile and both Darwin sites.", flags: {} },
-  api: { usage: "darwin api GET /api/agent/<path>", summary: "Read any agent API endpoint directly (GET only).", flags: {} },
-  mcp: {
-    usage: "darwin mcp [--profile <name>] | darwin mcp --print-config claude|cursor|gemini",
-    summary: "Run Darwin as a local MCP server (stdio) for a desktop AI client, with the API key kept in your secret store.",
-    flags: { "print-config": "Print the registration for a client, pointing at this installed copy." }
-  },
-  help: { usage: "darwin help [command] [--json]", summary: "This help. --json lists every command with its flags.", flags: {} },
-  version: { usage: "darwin version", summary: "Print the Darwin CLI version.", flags: {} }
-};
-var GLOBAL_HELP = {
-  json: "Print JSON (the default when output isn't a terminal).",
-  profile: "Use this profile.",
-  agent: "For an API key that trades for all your agents: which agent (name or id).",
-  "dry-run": "Show what a command would send, and send nothing.",
-  field: "For API fields without their own flag: --field name=value (repeatable).",
-  quiet: "Less output."
+var PARAMS = {
+  get_indicators: [
+    { prop: "timeframe", flag: "timeframe", required: true, description: "Candle size: 1m, 5m, 15m, 30m, 1h, 4h, 6h, 12h or 1d." },
+    { prop: "indicators", flag: "indicators", required: true, description: "Comma-separated, e.g. rsi:14,macd:12:26:9." },
+    { prop: "instrumentId", flag: "instrument-id", description: "The market, as `darwin markets` lists it (spot:solana:<mint>). Give this or --asset." },
+    { prop: "asset", flag: "asset", description: "A Darwin asset id instead of --instrument-id." },
+    { prop: "bars", flag: "bars", type: "number", description: "How many bars (default 50)." },
+    { prop: "includeFormingBar", flag: "include-forming-bar", type: "boolean", description: "Also show the bar still forming." }
+  ],
+  list_spot_orders: [
+    { prop: "limit", flag: "limit", type: "number", description: "How many (1–200, default 50)." },
+    { prop: "cursor", flag: "cursor", description: "The next page, from the line a previous page printed." }
+  ],
+  list_trades: [
+    { prop: "kind", flag: "kind", description: "spot, perp or all (default all)." },
+    { prop: "since", flag: "since", type: "number", description: "Only trades settled after this time (epoch milliseconds)." },
+    { prop: "limit", flag: "limit", type: "number", description: "How many (at most 200)." },
+    { prop: "cursor", flag: "cursor", description: "The next page, from the line a previous page printed." }
+  ],
+  get_pnl: [{ prop: "period", flag: "period", description: "ytd (default), 30d, 90d, all, or a tax year such as 2025." }],
+  list_lots: [
+    { prop: "sort", flag: "sort", description: "unrealized_asc, acquired_asc or basis_desc." },
+    { prop: "mint", flag: "mint", description: "Only this token's lots." },
+    { prop: "instrumentId", flag: "instrument-id", description: "Only this market's lots." }
+  ],
+  list_spot_markets: [{ prop: "type", flag: "type", description: "spot or perp (default both)." }]
 };
-function toolFlags(t) {
-  const req = new Set((t.inputSchema.required ?? []).filter((r) => r !== t.idempotency?.field));
-  return Object.entries(t.cli.args).map(([prop, a]) => {
-    const p = t.inputSchema.properties?.[prop] ?? {};
-    const type = Array.isArray(p.type) ? p.type.join("|") : p.type ?? "string";
-    return { flag: `--${a.flag}`, property: prop, required: req.has(prop), type, description: clean(p.description ?? "") };
-  });
-}
-function usageOf(t) {
-  const pos = t.cli.positional.map((x) => `<${x}>`);
-  const flags = toolFlags(t).map((f) => f.required ? `${f.flag} <${f.property}>` : `[${f.flag} <${f.property}>]`);
-  const open = t.inputSchema.additionalProperties !== false && t.inputSchema.additionalProperties !== undefined;
-  return ["darwin", ...t.cli.path, ...pos, ...flags, ...open ? ["[--field name=value]"] : []].join(" ");
-}
-function helpJson(c) {
-  return {
-    version: VERSION,
-    realm: c.realm,
-    credential: c.credential,
-    catalogVersion: c.catalogVersion,
-    static: Object.entries(STATIC_HELP).map(([command, h]) => ({ command, usage: h.usage, summary: h.summary, flags: h.flags })),
-    globalFlags: GLOBAL_HELP,
-    commands: c.tools.map((t) => ({
-      command: t.cli.path.join(" "),
-      aliases: t.cli.aliases.map((a) => a.join(" ")),
-      tool: t.name,
-      title: clean(t.title),
-      write: t.write,
-      costsTx: t.costsTx,
-      usage: usageOf(t),
-      positional: t.cli.positional,
-      flags: toolFlags(t),
-      description: describe(t),
-      ...t.deprecated ? { deprecated: t.deprecated } : {}
-    }))
-  };
-}
-function printOverview(ctx, c, json) {
-  if (json) {
-    printJson(ctx, helpJson(c));
-    return;
-  }
-  say(ctx, `Darwin CLI ${VERSION} — trade and check your Darwin agent from a terminal.`);
-  say(ctx, "");
-  say(ctx, "Darwin commands (from Darwin's catalogue; W = changes something):");
-  const width = Math.max(...c.tools.map((t) => t.cli.path.join(" ").length)) + 2;
-  for (const t of c.tools)
-    say(ctx, `  ${t.cli.path.join(" ").padEnd(width)}${t.write ? "W " : "  "}${clean(t.title)}`);
-  say(ctx, "");
-  say(ctx, "This CLI's own commands:");
-  for (const [k, h] of Object.entries(STATIC_HELP))
-    say(ctx, `  ${k.padEnd(width)}  ${h.summary}`);
-  say(ctx, "");
-  say(ctx, "Global flags: --json  --profile <name>  --agent <name or id>  --dry-run  --field name=value");
-  say(ctx, "`darwin <command> --help` for a command's flags; `darwin help --json` for all of it.");
-  say(ctx, "");
-  for (const l of clean(c.instructions).split(`
-`))
-    say(ctx, l);
-}
-function printCommandHelp(ctx, t, json) {
-  if (json) {
-    printJson(ctx, helpJson({ tools: [t] }).commands[0]);
-    return;
+function withLocalFlags(tool) {
+  const extra = PARAMS[tool.name];
+  if (!extra || tool.write)
+    return tool;
+  const props = { ...tool.inputSchema.properties ?? {} };
+  const args = { ...tool.cli.args };
+  const required = [...tool.inputSchema.required ?? []];
+  const taken = new Set(Object.values(args).map((a) => a.flag));
+  for (const p of extra) {
+    if (props[p.prop] || taken.has(p.flag))
+      continue;
+    props[p.prop] = { type: p.type ?? "string", description: p.description };
+    args[p.prop] = { flag: p.flag };
+    taken.add(p.flag);
+    if (p.required && !required.includes(p.prop))
+      required.push(p.prop);
   }
-  say(ctx, `${usageOf(t)}`);
-  say(ctx, "");
-  say(ctx, `${clean(t.title)}${t.write ? " — changes something" : ""}${t.costsTx ? "; counts against today's transaction budget" : ""}.`);
-  say(ctx, describe(t));
-  const flags = toolFlags(t);
-  if (flags.length || t.cli.positional.length)
-    say(ctx, "");
-  for (const p of t.cli.positional)
-    say(ctx, `  <${p}>  ${clean(t.inputSchema.properties?.[p]?.description ?? "")}`);
-  for (const f of flags)
-    say(ctx, `  ${f.flag} <${f.type}>${f.required ? " (required)" : ""}  ${f.description}`);
-  if (t.write)
-    say(ctx, `
-There is no confirmation prompt: the command runs when you press enter. Use --dry-run to see what it would send.`);
-  if (t.deprecated)
-    say(ctx, `
-Deprecated since ${t.deprecated.since}; removed after ${t.deprecated.removeAfter}.`);
+  return { ...tool, cli: { ...tool.cli, args }, inputSchema: { ...tool.inputSchema, properties: props, required } };
 }
-function printStaticHelp(ctx, name, json) {
-  const h = STATIC_HELP[name];
-  if (json) {
-    printJson(ctx, { command: name, ...h });
-    return;
+function checkLocalArguments(tool, args) {
+  if (tool.name === "get_indicators" && PARAMS.get_indicators && args.instrumentId === undefined === (args.asset === undefined)) {
+    throw new CliError(EXIT.usage, "`darwin indicators` needs exactly one of --instrument-id (from `darwin markets`) or --asset. See `darwin indicators --help`.", "usage");
   }
-  say(ctx, h.usage);
-  say(ctx, "");
-  say(ctx, h.summary);
-  for (const [f, d] of Object.entries(h.flags))
-    say(ctx, `  --${f}  ${d}`);
 }
 
 // src/main.ts
@@ -5222,10 +6191,10 @@ async function dispatch(p, ctx) {
       printStaticHelp(ctx, rest[0], json);
       return EXIT.ok;
     }
-    const t = resolve(c, rest)?.tool;
+    const t = resolve(c, rest, !json)?.tool;
     if (!t)
       throw new CliError(EXIT.usage, `No command "${rest.join(" ").slice(0, 60)}". \`darwin help\` lists them.`, "unknown_command");
-    printCommandHelp(ctx, t, json);
+    printCommandHelp(ctx, t, json, c);
     return EXIT.ok;
   }
   if (STATIC_HELP[first] && has(p, "help")) {
@@ -5254,20 +6223,20 @@ async function dispatch(p, ctx) {
     throw new CliError(EXIT.usage, `\`darwin ${first}\` isn't in this version of the Darwin CLI.`, "unknown_command");
   if (has(p, "help")) {
     const c = await catalogueForHelp(ctx, p);
-    const t = resolve(c, p.positionals)?.tool;
+    const t = resolve(c, p.positionals, !json)?.tool;
     if (!t)
       throw new CliError(EXIT.usage, `No command "${p.positionals.join(" ").slice(0, 60)}". \`darwin help\` lists them.`, "unknown_command");
-    printCommandHelp(ctx, t, json);
+    printCommandHelp(ctx, t, json, c);
     return EXIT.ok;
   }
   return runCatalogueCommand(ctx, p, json);
 }
-function resolve(c, words) {
+function resolve(c, words2, localFlags = true) {
   const idx = commandIndex(c);
-  for (let n = Math.min(3, words.length);n >= 1; n--) {
-    const t = idx.get(words.slice(0, n).join(" "));
+  for (let n = Math.min(3, words2.length);n >= 1; n--) {
+    const t = idx.get(words2.slice(0, n).join(" "));
     if (t)
-      return { tool: t, rest: words.slice(n) };
+      return { tool: localFlags ? withLocalFlags(t) : t, rest: words2.slice(n) };
   }
   return null;
 }
@@ -5286,10 +6255,10 @@ async function catalogueForHelp(ctx, p) {
 }
 async function runCatalogueCommand(ctx, p, json) {
   const session = openSession(ctx, { profile: one(p, "profile") });
-  const dryRun = has(p, "dry-run");
-  let { catalogue } = await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: dryRun ? "offline" : "never" });
+  const dryRun2 = has(p, "dry-run");
+  let { catalogue } = await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: dryRun2 ? "offline" : "never" });
   let hit = resolve(catalogue, p.positionals);
-  if (!hit && !dryRun) {
+  if (!hit && !dryRun2) {
     catalogue = (await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: "force" })).catalogue;
     hit = resolve(catalogue, p.positionals);
   }
@@ -5298,6 +6267,7 @@ async function runCatalogueCommand(ctx, p, json) {
   if (compareVersions(VERSION, catalogue.minCli) < 0)
     throw new CliError(EXIT.upgrade, copy.updateRequired(catalogue.minCli), "cli_upgrade_required");
   const args = buildArguments(hit.tool, hit.rest, p, GLOBALS);
+  checkLocalArguments(hit.tool, args);
   if (hit.tool.deprecated)
     warn(ctx, `\`darwin ${hit.tool.cli.path.join(" ")}\` is deprecated and goes away after ${hit.tool.deprecated.removeAfter}.`);
   const code = await runTool({
@@ -5307,7 +6277,7 @@ async function runCatalogueCommand(ctx, p, json) {
     tool: hit.tool,
     args,
     json,
-    flags: { json, dryRun, agent: one(p, "agent"), quiet: has(p, "quiet") },
+    flags: { json, dryRun: dryRun2, agent: one(p, "agent"), quiet: has(p, "quiet") },
     onStaleCatalogue: async () => {
       await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: "force" });
     },
@@ -5323,7 +6293,7 @@ function updateNotice(ctx, c) {
     return;
   if (compareVersions(VERSION, c.latestCli) >= 0)
     return;
-  const stamp = join8(ctx.configDir, "cache", "update-notice");
+  const stamp = join9(ctx.configDir, "cache", "update-notice");
   try {
     const last = Number(readPrivate(stamp, 64, { requirePrivateMode: false }) ?? "0");
     if (ctx.now() - last < 24 * 3600000)
@@ -5340,8 +6310,8 @@ function configDir() {
   if (process.env.DARWIN_CONFIG_DIR)
     return process.env.DARWIN_CONFIG_DIR;
   if (process.platform === "win32")
-    return join9(process.env.APPDATA || join9(homedir2(), "AppData", "Roaming"), "darwin");
-  return join9(process.env.XDG_CONFIG_HOME || join9(homedir2(), ".config"), "darwin");
+    return join10(process.env.APPDATA || join10(homedir2(), "AppData", "Roaming"), "darwin");
+  return join10(process.env.XDG_CONFIG_HOME || join10(homedir2(), ".config"), "darwin");
 }
 async function readAll() {
   const chunks = [];
@@ -5396,7 +6366,7 @@ var ctx = {
   cwd: process.cwd(),
   platform: process.platform,
   openUrl: (url) => {
-    const [cmd, args] = process.platform === "darwin" ? ["/usr/bin/open", [url]] : process.platform === "win32" ? [join9(process.env.SystemRoot || "C:\\Windows", "System32", "rundll32.exe"), ["url.dll,FileProtocolHandler", url]] : ["/usr/bin/xdg-open", [url]];
+    const [cmd, args] = process.platform === "darwin" ? ["/usr/bin/open", [url]] : process.platform === "win32" ? [join10(process.env.SystemRoot || "C:\\Windows", "System32", "rundll32.exe"), ["url.dll,FileProtocolHandler", url]] : ["/usr/bin/xdg-open", [url]];
     if (!existsSync(cmd))
       return;
     spawn2(cmd, args, { stdio: "ignore", detached: true }).unref();