@darwin.finance/cli 1.0.0 → 1.1.0

package/dist/darwin.js

@@ -1,16 +1,12 @@
 #!/usr/bin/env node
 var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, {
       get: all[name],
       enumerable: true,
       configurable: true,
-      set: __exportSetter.bind(all, name)
+      set: (newValue) => all[name] = () => newValue
     });
 };
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
@@ -62,13 +58,14 @@ Waiting for you to approve… (the code expires in ${minutes} minutes)`,
     needAgent: "This API key trades for all your active agents. Name one with --agent <name or id>, or set a default: `darwin profile set-agent <name>`. Your agents: `darwin agents`.",
     mcpPageKey: "This API key is from the MCP page: it reads your whole account and can't run agent commands. Log in with an agent's API key.",
     uncertainWrite: "Darwin may have received this order, but the answer didn't arrive. Don't run the command again — check `darwin orders` to see whether it went through.",
+    uncertainWritePrepared: "Darwin may have received this order, but its result didn't come back.",
     paused: "This agent is paused, so it can't trade. Reads still work. Only you can resume it, on the agent's Darwin page.",
     quoteFooter: (quoteId, seconds, sell, amount, forTok) => `Quote ${quoteId} expires in ${seconds}s. To place it: darwin order --quote ${quoteId} --sell ${sell} --amount ${amount} --for ${forTok}`,
     updateAvailable: (latest, current) => `Darwin CLI ${latest} is available (you have ${current}). Update: ${INSTALL_LINE}`,
     updateRequired: (minCli) => `This version of the Darwin CLI is no longer supported. Update to ${minCli} or later: ${INSTALL_LINE}`,
     snapshotUsed: (realm) => `Couldn't load the latest command list from ${realm}; using the one built into this version. Some newer commands may be missing.`,
     mcpNeedsKey: "`darwin mcp` needs an API key: an agent's API key, or one from the MCP page. Chat apps connect to Darwin directly instead.",
-    spotSent: (amount, sell, forTok, agent, nonce) => `Sent: sell ${amount} ${sell} for ${forTok} on ${agent} · counts against today's transaction budget · order ID ${nonce}`,
+    spotSent: (amount, sell, forTok, agent, orderId, nonce) => `Sent: sell ${amount} ${sell} for ${forTok} on ${agent} · ${orderId ? `order ${orderId} · ` : ""}nonce ${nonce}`,
     envKeySet: "DARWIN_API_KEY is set, so this terminal already has a key and there is nowhere to save a new one. Unset it to log in, or keep using it.",
     allAgentsOff: "API keys for all your agents aren't available on this site yet. Use an API key for one agent.",
     printConfigNpx: "Install the Darwin CLI first (`npm i -g @darwin.finance/cli`), then run `darwin mcp --print-config` again. A saved config must point at an installed copy, not npx.",
@@ -253,7 +250,7 @@ function compareVersions(a, b) {
       return x[i] < y[i] ? -1 : 1;
   return 0;
 }
-var VERSION = "1.0.0";
+var VERSION = "1.1.0";
 
 // src/http.ts
 function vendor(env) {
@@ -473,6 +470,7 @@ var init_config = __esm(() => {
 var exports_agents = {};
 __export(exports_agents, {
   resolveAgent: () => resolveAgent,
+  recoveryAgent: () => recoveryAgent,
   listAgents: () => listAgents
 });
 import { createHash } from "node:crypto";
@@ -504,16 +502,16 @@ async function listAgents(ctx, s, opts = {}) {
   const list = res.json?.agents;
   if (res.status !== 200 || !Array.isArray(list))
     throw new CliError(EXIT.unexpected, `Couldn't list your agents (HTTP ${res.status}).`, "bad_response");
-  const agents = list.filter((a) => !!a && typeof a === "object").map((a) => ({
+  const agents2 = list.filter((a) => !!a && typeof a === "object").map((a) => ({
     id: String(a.id ?? ""),
     name: clean(unwrap(a.name)).slice(0, 120),
-    solanaAddress: typeof a.solanaAddress === "string" && BASE58.test(a.solanaAddress) ? a.solanaAddress : undefined,
+    solanaAddress: typeof a.solanaAddress === "string" && BASE582.test(a.solanaAddress) ? a.solanaAddress : undefined,
     status: a.status === "active" || a.status === "paused" ? a.status : undefined
   })).filter((a) => isAgentId(a.id));
   try {
-    writePrivate(file, JSON.stringify({ at: ctx.now(), agents }));
+    writePrivate(file, JSON.stringify({ at: ctx.now(), agents: agents2 }));
   } catch {}
-  return agents;
+  return agents2;
 }
 async function resolveAgent(ctx, s, flag) {
   const raw = (flag ?? ctx.env.DARWIN_AGENT ?? "").trim();
@@ -530,19 +528,29 @@ async function resolveAgent(ctx, s, flag) {
   const want = raw || s.profile?.default_agent || "";
   if (!want)
     throw new CliError(EXIT.usage, copy.needAgent, "agent_required");
-  const agents = await listAgents(ctx, s);
-  const byId = agents.find((a) => a.id === want);
+  const agents2 = await listAgents(ctx, s);
+  const byId = agents2.find((a) => a.id === want);
   if (byId)
     return byId.id;
-  const byName = agents.filter((a) => a.name.trim().toLowerCase() === want.toLowerCase());
+  const byName = agents2.filter((a) => a.name.trim().toLowerCase() === want.toLowerCase());
   if (byName.length === 1)
     return byName[0].id;
   if (byName.length > 1) {
     throw new CliError(EXIT.usage, `More than one of your agents is called that; pass its id with --agent: ${byName.map((a) => a.id).join(", ")}`, "agent_ambiguous", { candidates: byName });
   }
-  throw new CliError(EXIT.usage, "No active agent of yours matches that (a paused, stopped or archived agent isn't listed). Your agents: `darwin agents`.", "agent_not_found", { candidates: agents.map((a) => ({ id: a.id, name: a.name })) });
+  throw new CliError(EXIT.usage, "No active agent of yours matches that (a paused, stopped or archived agent isn't listed). Your agents: `darwin agents`.", "agent_not_found", { candidates: agents2.map((a) => ({ id: a.id, name: a.name })) });
+}
+async function recoveryAgent(ctx, s, flag) {
+  const raw = ((flag ?? ctx.env.DARWIN_AGENT ?? "").trim() || (s.kind === "agents" ? s.profile?.default_agent ?? "" : "")).trim();
+  try {
+    return await resolveAgent(ctx, s, flag);
+  } catch (e) {
+    if (s.kind === "agents" && e instanceof CliError && e.code === "agent_not_found" && /^agr_[A-Za-z0-9_-]{1,64}$/.test(raw) && isAgentId(raw))
+      return raw;
+    throw e;
+  }
 }
-var BASE58, unwrap = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted) : typeof v === "string" ? v : "";
+var BASE582, unwrap = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted) : typeof v === "string" ? v : "";
 var init_agents = __esm(() => {
   init_context();
   init_copy();
@@ -550,7 +558,7 @@ var init_agents = __esm(() => {
   init_http();
   init_config();
   init_redact();
-  BASE58 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+  BASE582 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
 });
 
 // src/bin.ts
@@ -3332,7 +3340,7 @@ function cell(v) {
   if (v === null || v === undefined)
     return "";
   if (isUntrusted(v))
-    return `untrusted: ${clean(String(v.untrusted ?? ""))}`;
+    return cell(v.untrusted);
   if (typeof v === "string")
     return clean(v);
   if (typeof v === "number" || typeof v === "boolean")
@@ -3375,189 +3383,1466 @@ function table(rows, indent) {
   return [line(cols.map(clean)), line(widths.map((w) => "-".repeat(w))), ...cells.map(line)];
 }
 
-// src/commands.ts
-init_realms();
+// src/human.ts
 init_redact();
-
-// src/session.ts
-init_context();
-init_config();
-init_realms();
-function realmFromEnv(ctx) {
-  const raw = ctx.env.DARWIN_REALM;
-  if (raw === undefined || raw === "")
-    return "darwin.finance";
-  const r = parseRealm(raw);
-  if (!r)
-    throw new CliError(EXIT.usage, "DARWIN_REALM must be prod or beta.", "usage");
-  return r;
+function txt(v) {
+  if (v === null || v === undefined)
+    return "";
+  if (isUntrusted(v))
+    return txt(v.untrusted);
+  if (typeof v === "string")
+    return clean(v).replace(/\s+/g, " ").trim();
+  if (typeof v === "number" || typeof v === "boolean" || typeof v === "bigint")
+    return String(v);
+  return "";
+}
+function label(v, max = 60) {
+  const t = txt(v);
+  return t.length > max ? `${t.slice(0, max - 1)}…` : t;
+}
+var obj = (v) => v && typeof v === "object" && !Array.isArray(v) && !isUntrusted(v) ? v : {};
+var arr = (v) => Array.isArray(v) ? v : [];
+function toDate(v) {
+  let d = null;
+  if (typeof v === "number" && Number.isFinite(v) && v > 0)
+    d = new Date(v < 100000000000 ? v * 1000 : v);
+  else if (typeof v === "string" && /^[0-9]{9,13}$/.test(v))
+    return toDate(Number(v));
+  else if (typeof v === "string" && /^\d{4}-\d{2}-\d{2}T/.test(v))
+    d = new Date(v);
+  if (!d || Number.isNaN(d.getTime()))
+    return null;
+  const y = d.getUTCFullYear();
+  return y >= 2000 && y < 2100 ? d : null;
 }
-function profileName(ctx, flag) {
-  const n = flag ?? ctx.env.DARWIN_PROFILE;
-  if (n !== undefined && !PROFILE_RE.test(n))
-    throw new CliError(EXIT.usage, "A profile name is 1–40 of a–z, 0–9, _ and -, starting with a letter or digit.", "usage");
-  return n;
+function clock(d) {
+  return d.toLocaleTimeString("en-US", { hour: "numeric", minute: "2-digit", second: "2-digit" });
 }
-function openSession(ctx, flags) {
-  assertInstalled(ctx);
-  const explicit = profileName(ctx, flags.profile);
-  if (!flags.profile) {
-    const fromEnv = envKey(ctx);
-    if (fromEnv !== null) {
-      const { key: key2, kind: kind2 } = acceptKey(fromEnv);
-      return { realm: realmFromEnv(ctx), kind: kind2, key: key2, profileName: "env", profile: null };
-    }
+function when(v, opts = {}) {
+  const d = toDate(v);
+  if (!d)
+    return "";
+  const parts = Object.fromEntries(new Intl.DateTimeFormat("en-US", { weekday: "short", month: "short", day: "numeric", hour: "numeric", minute: "2-digit", timeZoneName: "short" }).formatToParts(d).map((p) => [p.type, p.value]));
+  return `${opts.weekday ? `${parts.weekday}, ` : ""}${parts.month} ${parts.day}, ${parts.hour}:${parts.minute} ${parts.dayPeriod} ${parts.timeZoneName}`;
+}
+function num(v) {
+  if (typeof v === "number" && Number.isFinite(v))
+    return String(v);
+  const t = txt(v);
+  if (!/^-?\d+(\.\d+)?$/.test(t))
+    return t;
+  return t.includes(".") ? t.replace(/0+$/, "").replace(/\.$/, "") : t;
+}
+function usd(v) {
+  const n = typeof v === "number" ? v : typeof v === "string" && /^-?\d+(\.\d+)?$/.test(v.trim()) ? Number(v) : NaN;
+  if (!Number.isFinite(n))
+    return "";
+  const abs = Math.abs(n);
+  const dollars = (x) => x.toLocaleString("en-US", { minimumFractionDigits: 2, maximumFractionDigits: 2 });
+  let s;
+  if (abs === 0 || abs >= 0.995)
+    s = dollars(abs);
+  else if (abs < 0.000000000001)
+    s = abs.toExponential(3);
+  else {
+    const places = Math.max(2, 3 - Math.floor(Math.log10(abs)));
+    s = abs.toFixed(places).replace(/0+$/, "");
+    const [, frac = ""] = s.split(".");
+    if (frac.length < 2)
+      s = `${s.split(".")[0]}.${frac.padEnd(2, "0")}`;
   }
-  const cfg = loadConfig(ctx);
-  const name = explicit ?? cfg.default;
-  const profile = name ? cfg.profiles[name] : undefined;
-  if (!name || !profile) {
-    throw new CliError(EXIT.auth, name ? `There's no profile "${name}". \`darwin profile list\` shows them; \`darwin login\` makes one.` : "This terminal isn't connected to Darwin yet. Run `darwin login` (or set DARWIN_API_KEY).", "no_key");
+  return `${n < 0 ? "−" : ""}$${s}`;
+}
+var HIDDEN_KEYS = new Set(["welcome", "next", "instructions", "instruction", "tellYourUser", "retrySafe", "retryable", "refusal", "ok", "untrustedNote"]);
+var TIME_KEY = /^(?:asOf(?:Ms|Secs?)?|[a-z][A-Za-z0-9]*(?:At|AtMs|AtSecs|AtSec|AsOf|AsOfMs|AsOfSecs|Ts|Time|Timestamp))$/;
+function words(key) {
+  return clean(key).replace(/Iso$/, "").replace(/(Ms|Secs?)$/, "").replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/_/g, " ").toLowerCase();
+}
+function tidy(v, depth = 0) {
+  if (depth > 12)
+    return null;
+  if (isUntrusted(v))
+    return tidy(v.untrusted, depth + 1);
+  if (Array.isArray(v))
+    return v.map((x) => tidy(x, depth + 1));
+  if (!v || typeof v !== "object")
+    return v;
+  const src = v;
+  const out = {};
+  for (const [k, x] of Object.entries(src)) {
+    if (HIDDEN_KEYS.has(k))
+      continue;
+    const has2 = (twin) => src[twin] !== null && src[twin] !== undefined && src[twin] !== "";
+    if (/Atoms$/.test(k) && k !== "atoms" && (has2(k.slice(0, -5)) || has2(`${k.slice(0, -5)}Amount`)))
+      continue;
+    if (k === "atoms" && (has2("amount") || has2("uiAmount")))
+      continue;
+    if (/Iso$/.test(k) && typeof x === "string") {
+      const base = k.slice(0, -3);
+      const label2 = [base, `${base}Ms`, `${base}Sec`, `${base}Secs`].find((b) => (b in src)) ?? base;
+      if (!(label2 in out))
+        out[label2] = when(x) || x;
+      continue;
+    }
+    if (TIME_KEY.test(k) && toDate(x)) {
+      out[k] = when(x);
+      continue;
+    }
+    out[k] = tidy(x, depth + 1);
   }
-  const stored = getKey(ctx, profile.store, profile.realm, name);
-  if (!stored)
-    throw new CliError(EXIT.auth, `The API key for "${name}" is missing from ${profile.store === "keychain" ? ctx.keychain.description : "its file"}. Run \`darwin login\` again.`, "no_key");
-  const { key, kind } = acceptKey(stored);
-  if (kind !== profile.kind)
-    throw new CliError(EXIT.auth, `The key saved for "${name}" is not the kind this profile expects. Run \`darwin login\` again.`, "key_kind_mismatch");
-  return { realm: profile.realm, kind, key, profileName: name, profile };
+  return out;
+}
+function genericLines(v) {
+  return renderText(humanKeys(tidy(v)));
+}
+function humanKeys(v) {
+  if (Array.isArray(v))
+    return v.map(humanKeys);
+  if (!v || typeof v !== "object")
+    return v;
+  return Object.fromEntries(Object.entries(v).map(([k, x]) => [words(k), humanKeys(x)]));
 }
 
-// src/commands.ts
-init_agents();
-var OUT_FLAGS = ["json", "format", "quiet", "no-color", "help"];
-var jsonOut = (ctx, p) => wantsJson(ctx, { json: has(p, "json"), format: one(p, "format") });
-var unwrap2 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
-async function cmdLogout(ctx, p) {
-  onlyFlags(p, ["profile", "all", "revoke", "force-local", ...OUT_FLAGS], "logout");
-  assertInstalled(ctx);
-  if (has(p, "all")) {
-    if (has(p, "revoke"))
-      throw new CliError(EXIT.usage, "--revoke works on one profile at a time.", "usage");
-    let failed = 0;
-    for (const [name2, prof2] of Object.entries(loadConfig(ctx).profiles))
-      failed += forgetProfile(ctx, name2, prof2) ? 0 : 1;
-    return failed ? EXIT.unexpected : EXIT.ok;
-  }
-  const cfg = loadConfig(ctx);
-  const name = profileName(ctx, one(p, "profile")) ?? cfg.default;
-  const prof = name ? cfg.profiles[name] : undefined;
-  if (!name || !prof)
-    throw new CliError(EXIT.usage, "No profile to log out of. `darwin profile list` shows them.", "no_profile");
-  const url = manageUrl(prof.realm, prof.agent_id);
-  if (!has(p, "revoke")) {
-    let key = null;
-    try {
-      key = getKey(ctx, prof.store, prof.realm, name);
-    } catch {
-      key = null;
-    }
-    return forgetProfile(ctx, name, prof, { expectedKey: key }) ? EXIT.ok : EXIT.unexpected;
+// src/help.ts
+init_redact();
+init_copy();
+
+// src/market.ts
+init_context();
+init_http();
+init_realms();
+var MARKET_STATUS_PATH = "/api/agent/v1/market-status/us-equities";
+var MARKET_STATUS_TOOL = "get_us_market_status";
+var MARKET_STATUS_HELP = "Is the US stock market open right now? Shows the session, why it's closed (weekend, holiday, early close), the next open and close in your local time, and whether Darwin accepts agent stock orders now. Tokenized stocks trade 24/7, but liquidity is much lower when the US market is closed. No API key needed.";
+function localTime(iso) {
+  if (typeof iso !== "string")
+    return null;
+  return when(iso, { weekday: true }) || null;
+}
+var SESSION = { pre_market: "pre-market", regular: "open (regular session)", after_hours: "after hours", closed: "closed" };
+var SESSION_ENDS = { pre_market: "Regular session opens", regular: "Regular session closes", after_hours: "After hours ends", closed: "Pre-market opens" };
+var REASON_REPEATS = { pre_market: "pre_market", after_hours: "after_hours" };
+function marketHeadline(s) {
+  const session = SESSION[String(s.session)] ?? cell(s.session).replace(/_/g, " ");
+  const reason = typeof s.reason === "string" ? s.reason : "";
+  let why = "";
+  if (reason && s.session !== "regular" && REASON_REPEATS[reason] !== s.session) {
+    const holiday = reason === "holiday" && typeof s.holidayName === "string" && s.holidayName ? `: ${cell(s.holidayName)}` : "";
+    why = ` (${cell(reason).replace(/_/g, " ")}${holiday})`;
+  }
+  const early = s.earlyClose === true && reason !== "early_close" ? " — early close today" : "";
+  return `US stock market: ${session}${why}${early}`;
+}
+async function cmdMarketStatus(ctx, p) {
+  onlyFlags(p, ["beta", "prod", "json", "format", "quiet", "no-color", "help"], "market-status");
+  if (p.positionals.length > 1)
+    throw new CliError(EXIT.usage, "`darwin market-status` takes no arguments.", "usage");
+  let realm = "darwin.finance";
+  if (has(p, "beta"))
+    realm = "beta.darwin.finance";
+  else if (!has(p, "prod") && ctx.env.DARWIN_REALM) {
+    const r = parseRealm(ctx.env.DARWIN_REALM);
+    if (!r)
+      throw new CliError(EXIT.usage, "DARWIN_REALM must be prod or beta.", "usage");
+    realm = r;
   }
-  const s = openSession(ctx, { profile: name });
-  if (s.kind === "agents")
-    warn(ctx, copy.revokeAllWarning);
-  let keyName = "this API key";
-  try {
-    const w = await request(ctx, s.realm, "GET", "/api/agent/v1/tools/whoami", { key: s.key, timeoutMs: 15000 });
-    const n = w.json?.name;
-    if (w.status === 200 && typeof n === "string" && n)
-      keyName = clean(n).slice(0, 120);
-  } catch {}
-  let confirmed = false;
-  let networkFailed = false;
+  let res;
   try {
-    const res = await request(ctx, s.realm, "POST", "/api/agent/v1/key/revoke", { key: s.key, body: {}, timeoutMs: 20000 });
-    const j = res.json;
-    confirmed = res.status === 200 && mediaType(res.contentType) === "application/json" && !!j && j.revoked === true && typeof j.keyId === "string" && typeof j.changed === "boolean" && Object.keys(j).length === 3;
+    res = await request(ctx, realm, "GET", MARKET_STATUS_PATH, { timeoutMs: 15000 });
   } catch (e) {
-    if (!(e instanceof NetworkError) && !(e instanceof CliError))
-      throw e;
-    networkFailed = e instanceof NetworkError;
+    if (e instanceof NetworkError)
+      throw new CliError(EXIT.network, e.message, "network_error");
+    throw e;
   }
-  const agent = prof.agent_name || prof.agent_id;
-  if (confirmed) {
-    if (!forgetProfile(ctx, name, prof, { expectedKey: s.key, quiet: true }))
-      return EXIT.unexpected;
-    say(ctx, copy.revoked(keyName, agent));
+  const s = res.json;
+  if (res.status === 429)
+    throw new CliError(EXIT.rateLimited, "Too many requests right now; try again in a minute.", "rate_limited");
+  if (res.status !== 200 || !s || typeof s.open !== "boolean")
+    throw new CliError(EXIT.unexpected, `${realm} didn't answer the market status (HTTP ${res.status}).`, "bad_response");
+  if (wantsJson(ctx, { json: has(p, "json"), format: one(p, "format") })) {
+    printJson(ctx, s);
     return EXIT.ok;
   }
-  if (networkFailed && has(p, "force-local")) {
-    forgetProfile(ctx, name, prof, { expectedKey: s.key, quiet: true });
-    warn(ctx, copy.revokeNotConfirmed(agent, url).replace(" and it's still saved here", ""));
-    return EXIT.refused;
-  }
-  warn(ctx, copy.revokeNotConfirmed(agent, url));
-  return EXIT.refused;
+  say(ctx, marketHeadline(s));
+  const line = (label2, v) => {
+    const t = localTime(v);
+    if (t)
+      say(ctx, `${label2}: ${t}`);
+  };
+  line(SESSION_ENDS[String(s.session)] ?? "Session changes", s.sessionEndsAt);
+  line("Next open", s.nextOpenAt);
+  line("Next close", s.nextCloseAt);
+  const a = s.agentStockOrders ?? {};
+  if (a.accepted === true)
+    say(ctx, `Darwin agent stock orders: accepted${localTime(a.closesAt) ? ` until ${localTime(a.closesAt)}` : ""}`);
+  else if (a.accepted === false)
+    say(ctx, `Darwin agent stock orders: not accepted now${localTime(a.opensAt) ? `; next accepted ${localTime(a.opensAt)}` : ""}`);
+  say(ctx, "Tokenized stocks trade 24/7, but liquidity is much lower when the US market is closed.");
+  return EXIT.ok;
 }
-function forgetProfile(ctx, name, prof, opts = {}) {
-  const outcome = updateConfig(ctx, (c) => {
-    const now = c.profiles[name];
-    if (!now || now.realm !== prof.realm || now.store !== prof.store || now.agent_id !== prof.agent_id)
-      return "changed";
-    if (opts.expectedKey !== undefined) {
-      let current;
-      try {
-        current = getKey(ctx, now.store, now.realm, name);
-      } catch {
-        return "unreadable";
-      }
-      if (current !== null && current !== opts.expectedKey)
-        return "changed";
-    }
-    if (!deleteKey(ctx, now.store, now.realm, name))
-      return "stuck";
-    delete c.profiles[name];
-    if (c.default === name)
-      c.default = Object.keys(c.profiles)[0] ?? "";
-    return "ok";
+
+// src/help.ts
+var LOCAL_DESCRIPTION = { [MARKET_STATUS_TOOL]: MARKET_STATUS_HELP };
+var TERMINAL_DESCRIPTION = {
+  hello: "Says hello as this API key: which agent it acts for, the agent's wallet address and its Darwin page. Never counts against the transaction budget.",
+  get_balances: "This agent's wallet balances, in whole tokens. Reporting: reads ONLY this agent's own account. Never counts against the transaction budget."
+};
+var describe = (t) => LOCAL_DESCRIPTION[t.name] ?? clean(t.description);
+function forTerminal(text, c) {
+  let t = clean(text);
+  const byName = new Map((c?.tools ?? []).map((x) => [x.name, `\`darwin ${x.cli.path.join(" ")}\``]));
+  byName.set("get_api_reference", "`darwin docs`");
+  t = t.replace(/(`?)\b([a-z][a-z0-9]*(?:_[a-z0-9]+)+)\b(`?)/g, (m, open, name, close) => {
+    const cmd = byName.get(name);
+    if (!cmd)
+      return m;
+    return open && close ? cmd : `${open}${cmd}${close}`;
   });
-  if (outcome === "changed") {
-    warn(ctx, `Profile "${name}" changed while this ran (another login?), so it was left as it is.`);
-    return false;
-  }
-  if (outcome !== "ok") {
-    warn(ctx, `Couldn't remove the API key for "${name}" from ${prof.store === "keychain" ? ctx.keychain.description : "its file"}, so the profile was kept. Unlock it and try again.`);
-    return false;
-  }
-  if (!opts.quiet)
-    say(ctx, copy.loggedOut(name, manageUrl(prof.realm, prof.agent_id)));
-  return true;
+  t = t.replace(/`darwin docs`\s*§\s?([0-9]{1,2}[a-z]?)/g, "`darwin docs $1`");
+  t = t.replace(/§\s?([0-9]{1,2}[a-z]?)/g, "`darwin docs $1`");
+  t = t.replace(/\(summary\.sell\.amount\)/g, "(the amount the quote shows)");
+  return t;
 }
-async function cmdWhoami(ctx, p) {
-  onlyFlags(p, ["profile", ...OUT_FLAGS], "whoami");
-  const s = openSession(ctx, { profile: one(p, "profile") });
-  let who = null;
-  let note = null;
-  let exit = EXIT.ok;
-  try {
-    const res = await request(ctx, s.realm, "GET", "/api/agent/v1/tools/whoami", { key: s.key, timeoutMs: 15000 });
-    if (res.status === 200 && res.json && typeof res.json === "object")
-      who = res.json;
-    else if (res.status === 401) {
-      note = "Darwin refused this API key — it may have been revoked.";
-      exit = EXIT.auth;
-    } else if (res.status === 429) {
-      note = "Too many requests with this API key right now.";
-      exit = EXIT.rateLimited;
-    } else if (res.status === 426) {
-      note = copy.updateRequired(typeof res.json?.minCli === "string" ? String(res.json.minCli) : "the latest version");
-      exit = EXIT.upgrade;
-    } else if (res.status === 404) {} else if (res.status === 403) {
-      note = "Darwin refused this request.";
-      exit = EXIT.refused;
-    } else {
-      note = `Darwin answered HTTP ${res.status}.`;
-      exit = EXIT.unexpected;
-    }
-  } catch (e) {
-    if (!(e instanceof NetworkError))
-      throw e;
-    note = e.message;
-    exit = EXIT.network;
-  }
-  const keyName = who && typeof who.name === "string" ? clean(who.name) : "name unavailable";
-  const agent = clean(unwrap2(who?.homeAgentName) || s.profile?.agent_name || s.profile?.agent_id || "unknown agent");
+var describeForTerminal = (t, c) => LOCAL_DESCRIPTION[t.name] ?? TERMINAL_DESCRIPTION[t.name] ?? forTerminal(t.description, c).trim();
+var STATIC_HELP = {
+  login: {
+    usage: "darwin login [--beta] [--client-name <name>] [--reconnect] [--start | --wait | --with-key | --key-file <file> | --from-skill] [--profile <name>] [--store keychain|file]",
+    summary: "Connect this terminal to a Darwin agent and keep its API key in your system's secret store.",
+    flags: {
+      beta: "Use beta.darwin.finance instead of darwin.finance.",
+      "client-name": `What Darwin shows your owner as the app asking (never "Darwin"). Default: the coding agent you're in, else "Command line".`,
+      reconnect: "Get a new API key for an agent you already have, instead of creating a new agent.",
+      start: "Start pairing and print the link and code, then exit (for tools whose calls time out).",
+      wait: "Wait for a pairing started with --start, and save the key.",
+      "with-key": "Import an API key from stdin, or paste it at a hidden prompt.",
+      "key-file": "Import the key file downloaded from the agent's Manage tab (add --delete-file to delete it after).",
+      "from-skill": "Import the key the official Darwin skill (darwin.py) saved (add --delete-skill-copy to remove its copy).",
+      "agent-id": "With --from-skill: which saved key, when there are several.",
+      profile: "Profile name for this key (default: from the agent's name).",
+      store: "keychain (default) or file — a plain file only your user can read.",
+      "no-browser": "Don't open the link in a browser."
+    }
+  },
+  logout: {
+    usage: "darwin logout [--profile <name> | --all] [--revoke [--force-local]]",
+    summary: "Remove the API key from this computer. With --revoke, Darwin revokes the key first.",
+    flags: { revoke: "Ask Darwin to revoke this key everywhere, then remove it here.", all: "Every profile.", "force-local": "With --revoke: remove the local copy even if Darwin couldn't be reached." }
+  },
+  whoami: { usage: "darwin whoami [--profile <name>]", summary: "Which agent, site and API key this terminal uses (never any key characters).", flags: {} },
+  profile: {
+    usage: "darwin profile list | use <name> | rename <old> <new> | remove <name> | set-agent <name or id>",
+    summary: "Manage profiles (one per API key). set-agent: the default agent for a key that trades for all your agents.",
+    flags: {}
+  },
+  doctor: { usage: "darwin doctor", summary: "Check the install, the secret store, your profile and both Darwin sites.", flags: {} },
+  api: { usage: "darwin api GET /api/agent/<path>", summary: "Read any agent API endpoint directly (GET only).", flags: {} },
+  mcp: {
+    usage: "darwin mcp [--profile <name>] | darwin mcp --print-config claude|cursor|gemini",
+    summary: "Run Darwin as a local MCP server (stdio) for a desktop AI client, with the API key kept in your secret store.",
+    flags: { "print-config": "Print the registration for a client, pointing at this installed copy." }
+  },
+  retry: {
+    usage: "darwin retry <id> [--agent <name or id>]",
+    summary: "What happened to an order whose result didn't come back: it went through, is still pending, failed, or was never sent. It only reads — it never sends anything again.",
+    flags: {}
+  },
+  cancel: {
+    usage: "darwin cancel <id> [--agent <name or id>]",
+    summary: "Make sure an order that hasn't started never runs. One that already started can't be cancelled; it says what happened instead.",
+    flags: {}
+  },
+  help: { usage: "darwin help [command] [--json]", summary: "This help. --json lists every command with its flags.", flags: {} },
+  version: { usage: "darwin version", summary: "Print the Darwin CLI version.", flags: {} }
+};
+var GLOBAL_HELP = {
+  json: "Print JSON (the default when output isn't a terminal).",
+  profile: "Use this profile.",
+  agent: "For an API key that trades for all your agents: which agent (name or id).",
+  "dry-run": "Have Darwin check what a command would do — the real checks — and send nothing.",
+  field: "For API fields without their own flag: --field name=value (repeatable).",
+  quiet: "Less output."
+};
+function toolFlags(t) {
+  const req = new Set((t.inputSchema.required ?? []).filter((r) => r !== t.idempotency?.field));
+  return Object.entries(t.cli.args).map(([prop, a]) => {
+    const p = t.inputSchema.properties?.[prop] ?? {};
+    const type = Array.isArray(p.type) ? p.type.join("|") : p.type ?? "string";
+    return { flag: `--${a.flag}`, property: prop, required: req.has(prop), type, description: clean(p.description ?? "") };
+  });
+}
+function usageOf(t) {
+  const pos = t.cli.positional.map((x) => `<${x}>`);
+  const flags = toolFlags(t).map((f) => f.required ? `${f.flag} <${f.property}>` : `[${f.flag} <${f.property}>]`);
+  const open = t.inputSchema.additionalProperties !== false && t.inputSchema.additionalProperties !== undefined;
+  return ["darwin", ...t.cli.path, ...pos, ...flags, ...open ? ["[--field name=value]"] : []].join(" ");
+}
+function helpJson(c) {
+  return {
+    version: VERSION,
+    realm: c.realm,
+    credential: c.credential,
+    catalogVersion: c.catalogVersion,
+    static: Object.entries(STATIC_HELP).map(([command, h]) => ({ command, usage: h.usage, summary: h.summary, flags: h.flags })),
+    globalFlags: GLOBAL_HELP,
+    commands: c.tools.map((t) => ({
+      command: t.cli.path.join(" "),
+      aliases: t.cli.aliases.map((a) => a.join(" ")),
+      tool: t.name,
+      title: clean(t.title),
+      write: t.write,
+      costsTx: t.costsTx,
+      usage: usageOf(t),
+      positional: t.cli.positional,
+      flags: toolFlags(t),
+      description: describe(t),
+      ...t.deprecated ? { deprecated: t.deprecated } : {}
+    }))
+  };
+}
+function printOverview(ctx, c, json) {
+  if (json) {
+    printJson(ctx, helpJson(c));
+    return;
+  }
+  say(ctx, `Darwin CLI ${VERSION} — trade and check your Darwin agent from a terminal.`);
+  say(ctx, "");
+  say(ctx, "Darwin commands (from Darwin's catalogue; W = changes something):");
+  const width = Math.max(...c.tools.map((t) => t.cli.path.join(" ").length)) + 2;
+  for (const t of c.tools)
+    say(ctx, `  ${t.cli.path.join(" ").padEnd(width)}${t.write ? "W " : "  "}${forTerminal(t.title, c)}`);
+  say(ctx, "");
+  say(ctx, "This CLI's own commands:");
+  for (const [k, h] of Object.entries(STATIC_HELP))
+    say(ctx, `  ${k.padEnd(width)}  ${h.summary}`);
+  say(ctx, "");
+  say(ctx, "Global flags: --json  --profile <name>  --agent <name or id>  --dry-run  --field name=value");
+  say(ctx, "`darwin <command> --help` for a command's flags; `darwin help --json` for all of it.");
+  say(ctx, "Output is text in a terminal and JSON when piped or redirected (or with --json); --format table forces text.");
+  say(ctx, "");
+  for (const l of terminalGuide(c.credential))
+    say(ctx, l);
+}
+function terminalGuide(kind) {
+  return [
+    "Spot trades take two steps: `darwin quote --sell <token> --amount <n> --for <token>`, then `darwin order --quote <id>` with the same sell, amount and for, within 30 seconds. `darwin instant` quotes and executes in one step.",
+    "Before your first order, `darwin grant` shows your limits and today's remaining budget. `darwin docs` is the full API reference.",
+    "If an order's result is uncertain (exit code 6), don't run it again — run the `darwin retry <id>` it printed to see what happened (on a site without it, check `darwin orders`).",
+    kind === "agents" ? "This API key trades for all your active agents: name one with --agent <name or id> (`darwin agents` lists them). `darwin pause --agent <name>` stops one; only you can resume it, on Darwin." : "`darwin pause` stops this agent trading; only you can resume it, on Darwin."
+  ];
+}
+function printCommandHelp(ctx, t, json, c = null) {
+  if (json) {
+    printJson(ctx, helpJson({ tools: [t] }).commands[0]);
+    return;
+  }
+  say(ctx, `${usageOf(t)}`);
+  say(ctx, "");
+  say(ctx, `${clean(t.title)}${t.write ? " — changes something" : ""}${t.costsTx ? "; counts against today's transaction budget" : ""}.`);
+  say(ctx, describeForTerminal(t, c));
+  const flags = toolFlags(t);
+  if (flags.length || t.cli.positional.length)
+    say(ctx, "");
+  for (const p of t.cli.positional)
+    say(ctx, `  <${p}>  ${forTerminal(t.inputSchema.properties?.[p]?.description ?? "", c)}`);
+  for (const f of flags)
+    say(ctx, `  ${f.flag} <${f.type}>${f.required ? " (required)" : ""}  ${forTerminal(f.description, c)}`);
+  if (t.write)
+    say(ctx, `
+There is no confirmation prompt: the command runs when you press enter. Use --dry-run to have Darwin check it without sending anything.`);
+  if (t.deprecated)
+    say(ctx, `
+Deprecated since ${t.deprecated.since}; removed after ${t.deprecated.removeAfter}.`);
+}
+function printStaticHelp(ctx, name, json) {
+  const h = STATIC_HELP[name];
+  if (json) {
+    printJson(ctx, { command: name, ...h });
+    return;
+  }
+  say(ctx, h.usage);
+  say(ctx, "");
+  say(ctx, h.summary);
+  for (const [f, d] of Object.entries(h.flags))
+    say(ctx, `  --${f}  ${d}`);
+}
+
+// src/render.ts
+var BASE58 = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
+var WSOL_MINT = "So11111111111111111111111111111111111111112";
+var ROUTER = { dflow: "dFlow", deflow: "dFlow", jupiter: "Jupiter" };
+var shortMint = (m) => {
+  const s = txt(m);
+  return BASE58.test(s) ? `${s.slice(0, 4)}…${s.slice(-4)}` : s;
+};
+function formatAtoms(atoms, decimals) {
+  const a = txt(atoms);
+  if (!/^[0-9]{1,40}$/.test(a) || typeof decimals !== "number" || !Number.isInteger(decimals) || decimals < 0 || decimals > 30)
+    return "";
+  if (decimals === 0)
+    return BigInt(a).toString();
+  const s = a.padStart(decimals + 1, "0");
+  const whole = BigInt(s.slice(0, -decimals)).toString();
+  const frac = s.slice(-decimals).replace(/0+$/, "");
+  return frac ? `${whole}.${frac}` : whole;
+}
+var yesNo = (v) => v === true ? "yes" : v === false ? "no" : "";
+var router = (v) => ROUTER[txt(v).toLowerCase()] ?? txt(v);
+var plural = (n, one2, many = `${one2}s`) => `${n} ${n === 1 ? one2 : many}`;
+function tokenName(side, mint, x) {
+  const sym = label(side.symbol, 24);
+  if (sym)
+    return sym;
+  const m = txt(mint ?? side.mint);
+  return x?.markets?.get(m)?.symbol || shortMint(m);
+}
+function columns(head, rows, indent = "") {
+  if (rows.length === 0)
+    return [];
+  const widths = head.map((h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length)));
+  const line = (vals) => `${indent}${vals.map((v, i) => i === vals.length - 1 ? v : v.padEnd(widths[i])).join("  ")}`.trimEnd();
+  return [line(head), ...rows.map(line)];
+}
+function welcomeLines(realm, hello, agentName) {
+  const h = hello ?? {};
+  const out = [`Agent: ${label(agentName, 120) || "your agent"} on ${realm}`];
+  const addr = typeof h.solanaAddress === "string" && BASE58.test(h.solanaAddress) ? h.solanaAddress : null;
+  if (addr)
+    out.push(`Agent wallet (fund it to trade): ${addr}`);
+  const page = sameRealmUrl(h.agentPageUrl, realm);
+  if (page)
+    out.push(`Agent page: ${page}`);
+  out.push("Try: darwin market-status · darwin balances · darwin quote --sell USDC --amount 1 --for SOL");
+  return out;
+}
+function sameRealmUrl(v, realm) {
+  if (typeof v !== "string")
+    return null;
+  try {
+    const u = new URL(v);
+    return u.protocol === "https:" && u.host === realm && !u.username && !u.password ? txt(u.toString()) : null;
+  } catch {
+    return null;
+  }
+}
+function hello(r, x) {
+  const name = txt(obj(r.untrusted).agentName) || txt(r.agentName) || x.agentLabel;
+  return welcomeLines(x.realm, r, name);
+}
+function agents(r) {
+  const d = obj(r.data);
+  const list = arr(d.agents).map(obj);
+  if (list.length === 0)
+    return ["No active agents for this API key."];
+  const rows = list.map((a) => [label(a.name, 40) || "(unnamed)", txt(a.id), txt(a.status) || "", BASE58.test(txt(a.solanaAddress)) ? txt(a.solanaAddress) : ""]);
+  const out = columns(["Name", "ID", "Status", "Wallet"], rows);
+  const perms = txt(d.permissions);
+  if (perms)
+    out.push("", `This API key: ${perms}`);
+  return out;
+}
+function capLine(key, c) {
+  const name = words(key).replace(/\busd\b/, "").trim();
+  if (c.refusesAll === true)
+    return `${name}: none allowed`;
+  if (c.unlimited === true || c.value === null)
+    return `${name}: no limit`;
+  return `${name}: ${/Usd$/.test(key) ? usd(c.value) : num(c.value)}`;
+}
+function grant(r) {
+  const d = obj(r.data);
+  const g = obj(d.grant);
+  const t = obj(d.today);
+  const out = [];
+  const paused = g.paused === true;
+  out.push(`Agent: ${label(g.agentName, 80) || "this agent"} · ${paused ? `paused${when(g.pausedAt) ? ` since ${when(g.pausedAt)}` : ""}` : txt(g.status) || "active"}`);
+  if (BASE58.test(txt(g.wallet)))
+    out.push(`Wallet: ${txt(g.wallet)}`);
+  const actions = arr(g.allowedActions).map(txt).filter(Boolean);
+  if (actions.length)
+    out.push(`Can: ${actions.map((a) => a.replace(/_/g, " ")).join(", ")}`);
+  const caps = Object.entries(obj(g.capLimits)).map(([k, c]) => capLine(k, obj(c)));
+  if (caps.length)
+    out.push(`Limits: ${caps.join(" · ")}`);
+  const sl = obj(g.slippage);
+  if (typeof sl.globalMaxBps === "number") {
+    const overrides = arr(sl.overrides).length;
+    out.push(`Max slippage: ${sl.globalMaxBps} bps${overrides ? ` (${plural(overrides, "token-specific override")})` : ""}`);
+  }
+  const rem = obj(t.remaining);
+  const left = [
+    rem.notionalUsd === null ? "no dollar limit" : usd(rem.notionalUsd) ? `${usd(rem.notionalUsd)} to trade` : "",
+    rem.txCount === null ? "no trade-count limit" : typeof rem.txCount === "number" ? plural(rem.txCount, "trade") : "",
+    rem.riskUsd === null ? "" : usd(rem.riskUsd) ? `${usd(rem.riskUsd)} of risk` : ""
+  ].filter(Boolean);
+  if (left.length)
+    out.push(`Left today: ${left.join(" · ")}`);
+  const used = [usd(t.notionalUsd) ? `${usd(t.notionalUsd)} traded` : "", typeof t.txCount === "number" ? plural(t.txCount, "trade") : ""].filter(Boolean);
+  if (used.length)
+    out.push(`Used today: ${used.join(" · ")}${txt(t.day) ? ` (UTC day ${txt(t.day)}; resets at midnight UTC)` : ""}`);
+  const u = obj(g.unlisted);
+  if (u.enabled === true)
+    out.push(`Tokens Darwin doesn't list: allowed — ${usd(u.dailyAcquisitionUsd)} a day to buy, ${usd(u.dailyDisposalUsd)} to sell`);
+  else if (u.enabled === false)
+    out.push("Tokens Darwin doesn't list: not allowed");
+  return out;
+}
+function pause(r, x, kind) {
+  const s = obj(r.summary);
+  const at = when(s.pausedAtIso) || when(s.pausedAt) || when(obj(r.data).pausedAt);
+  const changed = obj(r.data).changed;
+  const head = changed === false ? `${x.agentLabel} was already paused.` : `Paused ${x.agentLabel}${at ? ` at ${at}` : ""}.`;
+  return [
+    head,
+    kind === "agents" ? "It can't trade until you resume it on its Darwin page, and this API key can't act on it until then. It still works for your other active agents." : "It can't trade until you resume it on its Darwin page. This API key still reads its balances and orders."
+  ];
+}
+var typed = (v) => txt(v).replace(/[^A-Za-z0-9._-]/g, "");
+function quote(r, x) {
+  const s = obj(r.summary);
+  const d = obj(r.data);
+  const sell = obj(s.sell);
+  const recv = obj(s.receive);
+  const sellName = tokenName(sell, d.inputMint, x);
+  const getName = tokenName(recv, d.outputMint, x);
+  const amount = num(sell.amount) || num(x.args.amount);
+  const quoted = num(recv.quoted);
+  const atLeast = num(recv.atLeast);
+  const out = [`Sell ${amount} ${sellName} → ${quoted ? `about ${quoted} ${getName}` : getName}${atLeast ? ` (at least ${atLeast} ${getName})` : ""}`];
+  const parts = [];
+  if (typeof d.maxSlippageBps === "number")
+    parts.push(`Max slippage ${d.maxSlippageBps} bps`);
+  if (txt(d.router))
+    parts.push(`route ${router(d.router)}`);
+  const exp = typeof d.expiresAtMs === "number" ? d.expiresAtMs : null;
+  if (exp !== null)
+    parts.push(`quote expires in ${Math.max(0, Math.ceil((exp - x.now) / 1000))}s (${clock(new Date(exp))})`);
+  if (parts.length)
+    out.push(parts.join(" · "));
+  const id = txt(d.quoteId) || txt(s.quoteId);
+  if (id && /^[A-Za-z0-9_-]{1,80}$/.test(id) && sell.amount !== null) {
+    out.push(`To place it: darwin order --quote ${id} --sell ${typed(x.args.sell)} --amount ${amount} --for ${typed(x.args.for)}`);
+  } else if (sell.amount === null) {
+    out.push("This token's decimals aren't known, so this quote can't be placed by amount.");
+  }
+  return out;
+}
+function spotWrite(r, x, instant) {
+  const s = obj(r.summary);
+  const d = obj(r.data);
+  const sell = obj(s.sell);
+  const recv = obj(s.receive);
+  const sellName = tokenName(sell, undefined, x) || typed(x.args.sell);
+  const getName = tokenName(recv, undefined, x) || typed(x.args.for);
+  const amount = num(sell.amount) || num(x.args.amount);
+  const status = txt(s.status) || txt(d.status);
+  const sig = txt(s.txSignature) || txt(d.txSignature);
+  const orderId = txt(s.orderId) || txt(d.orderId);
+  const nonce = x.nonce ?? txt(d.clientOrderNonce);
+  const out = [`Sent: sell ${amount} ${sellName} for ${getName} on ${x.agentLabel} · ${orderId ? `order ${orderId} · ` : ""}nonce ${nonce}`];
+  if (instant && d.replayed === true)
+    out.push("(That nonce was already used, so this is the earlier order — nothing new was sent.)");
+  const quoted = num(recv.quoted);
+  const atLeast = num(recv.atLeast);
+  if (quoted)
+    out.push(`Expected: about ${quoted} ${getName}${atLeast ? ` (at least ${atLeast} ${getName})` : ""}`);
+  if (status === "confirmed")
+    out.push("Status: confirmed on chain");
+  else if (status === "submitted")
+    out.push("Status: sent to the network, not confirmed yet");
+  else if (status)
+    out.push(`Status: ${status}`);
+  if (/^[1-9A-HJ-NP-Za-km-z]{64,90}$/.test(sig))
+    out.push(`Transaction: ${sig}`);
+  return out.filter(Boolean);
+}
+function balances(r, x) {
+  const d = obj(r.data);
+  const rows = arr(d.balances).map(obj);
+  const out = [];
+  if (BASE58.test(txt(d.wallet)))
+    out.push(`Wallet: ${txt(d.wallet)}`);
+  const lamports = txt(d.nativeSolLamports);
+  const body = rows.map((b) => [
+    tokenName(b, b.mint, x),
+    num(b.amount) || formatAtoms(b.atoms, typeof b.decimals === "number" ? b.decimals : null) || `${txt(b.atoms)} (smallest units)`,
+    b.listed === false ? `${txt(b.mint)} (not listed on Darwin)` : txt(b.mint)
+  ]);
+  if (body.length)
+    out.push(...columns(["Token", "Amount", "Mint"], body));
+  else
+    out.push("No token balances.");
+  if (/^[0-9]{1,20}$/.test(lamports))
+    out.push(`SOL for network fees: ${formatAtoms(lamports, 9)}`);
+  if (d.gasSponsored === true)
+    out.push("Network fees: paid by Darwin.");
+  if (d.gasLow === true && d.gasSponsored !== true)
+    out.push("⚠ Low on SOL for network fees — add SOL to keep trading.");
+  if (d.partial === true)
+    out.push("Some balances couldn't be read just now, so this list may be incomplete.");
+  return out;
+}
+var atomsAs = (atoms, mint, x) => {
+  const m = x.markets?.get(txt(mint));
+  const amt = m ? formatAtoms(atoms, m.decimals) : "";
+  return amt ? `${amt} ${m.symbol}` : `${txt(atoms) || "?"} units of ${shortMint(mint)}`;
+};
+function orders(r, x) {
+  const d = obj(r.data);
+  const list = arr(d.orders).map(obj);
+  if (list.length === 0)
+    return ["No spot orders yet."];
+  const rows = list.map((o) => [
+    when(o.createdAt),
+    `${atomsAs(o.inputAtoms, o.inputMint, x)} → ${o.outputAtoms === null ? x.markets?.get(txt(o.outputMint))?.symbol || shortMint(o.outputMint) : atomsAs(o.outputAtoms, o.outputMint, x)}`,
+    `${txt(o.status)}${txt(o.errorCode) ? ` (${txt(o.errorCode)})` : ""}`,
+    txt(o.orderId)
+  ]);
+  const out = columns(["When", "Trade", "Status", "Order"], rows);
+  if (txt(d.nextCursor))
+    out.push("", `More: darwin orders --cursor ${txt(d.nextCursor)}`);
+  return out;
+}
+function tx(r) {
+  const d = obj(r.data);
+  const st = txt(d.status);
+  const what = st === "confirmed" ? "confirmed on chain" : st === "failed" ? "failed" : st === "submitted" ? "sent, not confirmed yet" : st;
+  const out = [`Transaction ${txt(d.signature)}: ${what}${typeof d.slot === "number" ? ` (slot ${d.slot})` : ""}`];
+  if (txt(d.error))
+    out.push(`Reason: ${txt(d.error).replace(/_/g, " ")}`);
+  return out;
+}
+function spotMarkets(r) {
+  const d = obj(r.data);
+  const list = arr(d.instruments).map(obj);
+  if (list.length === 0)
+    return ["No markets."];
+  const rows = list.map((m) => [
+    label(m.symbol, 20),
+    txt(m.instrumentType),
+    txt(m.assetClass).replace(/_/g, " "),
+    m.instrumentType === "perp" ? m.tradeable === false || m.status === "paused" ? "paused" : "open" : m.marketOpen === false ? "closed now" : "open",
+    m.instrumentType === "spot" ? txt(m.mint) : `max ${num(m.maxLeverage)}x`
+  ]);
+  return columns(["Symbol", "Type", "Class", "Market", "Mint / leverage"], rows);
+}
+function unlistedInspect(r) {
+  const d = obj(r.data);
+  const name = label(d.name, 60);
+  const sym = label(d.symbol, 24);
+  const out = [`Token: ${[name, sym ? `(${sym})` : ""].filter(Boolean).join(" ") || "(no name)"}${txt(d.mint) ? ` · ${txt(d.mint)}` : ""}`];
+  if (d.listing === "darwin")
+    out.push("Darwin lists this token: trade it with `darwin quote`.");
+  out.push(`Tradable as an unlisted token: ${d.eligible === true ? "yes" : "no"}`);
+  for (const f of arr(d.refusals).map(obj))
+    out.push(`  ✗ ${txt(f.code).replace(/_/g, " ")}${txt(f.detail) ? ` — ${txt(f.detail)}` : ""}`);
+  for (const f of arr(d.warnings).map(obj))
+    out.push(`  ! ${txt(f.code).replace(/_/g, " ")}${txt(f.detail) ? ` — ${txt(f.detail)}` : ""}`);
+  const facts = [
+    typeof d.decimals === "number" ? `${d.decimals} decimals` : "",
+    typeof d.ageHours === "number" ? `${Math.round(d.ageHours)}h old` : "",
+    typeof d.holders === "number" ? `${d.holders.toLocaleString("en-US")} holders` : "",
+    usd(d.volume24hUsd) ? `24h volume ${usd(d.volume24hUsd)}` : "",
+    usd(d.twapUsd) ? `price ${usd(d.twapUsd)} (${txt(d.twapWindow) || "1h"} average)` : ""
+  ].filter(Boolean);
+  if (facts.length)
+    out.push(facts.join(" · "));
+  const b = obj(d.budget);
+  if (usd(b.acquisitionRemainingUsd))
+    out.push(`Unlisted budget left today: ${usd(b.acquisitionRemainingUsd)} to buy · ${usd(b.disposalRemainingUsd)} to sell`);
+  return out;
+}
+var total = (t) => {
+  const o = obj(t);
+  if (o.usd === null || o.usd === undefined)
+    return o.complete === false ? "unknown" : "";
+  return `${usd(o.usd)}${o.complete === false ? " (incomplete)" : ""}`;
+};
+function trades(r, x) {
+  const d = obj(r.data);
+  const list = arr(d.trades).map(obj);
+  if (list.length === 0)
+    return ["No settled trades yet."];
+  const rows = list.map((t) => {
+    if (t.kind === "perp") {
+      return [when(t.settledAtMs), "perps", `${txt(t.side)} ${num(t.sizeBase)} ${label(t.symbol, 16)}${usd(t.priceUsd) ? ` @ ${usd(t.priceUsd)}` : ""}`, usd(t.realizedPnlUsd)];
+    }
+    const i = obj(t.in);
+    const o = obj(t.out);
+    return [when(t.settledAtMs), "spot", `${atomsAs(i.atoms, i.mint, x)} → ${atomsAs(o.atoms, o.mint, x)}`, t.realizedPnlUsd === undefined ? "" : usd(t.realizedPnlUsd) || "unknown"];
+  });
+  const out = columns(["Settled", "Kind", "Trade", "Realized P&L"], rows);
+  if (txt(d.nextCursor))
+    out.push("", `More: darwin history trades --cursor ${txt(d.nextCursor)}`);
+  return out;
+}
+function pnl(r) {
+  const d = obj(r.data);
+  const s = obj(d.spot);
+  const p = obj(d.perps);
+  const out = [`P&L${txt(d.period) ? ` (${txt(d.period)})` : ""}${when(d.asOfMs) ? ` as of ${when(d.asOfMs)}` : ""}`];
+  const realized = obj(s.realizedUsd);
+  const line = (name, parts) => {
+    const shown = parts.map(([k, v]) => [k, total(v)]).filter(([, v]) => v);
+    if (shown.length)
+      out.push(`${name}: ${shown.map(([k, v]) => `${k} ${v}`).join(" · ")}`);
+  };
+  line("Spot", [["realized", realized.total], ["short-term", realized.shortTerm], ["long-term", realized.longTerm], ["unrealized", s.unrealizedUsd], ["cost basis", s.costBasisUsd], ["market value", s.marketValueUsd], ["cash", s.cashUsd]]);
+  line("Perps", [["realized", p.realizedUsd], ["fees", p.feesUsd], ["funding", p.fundingUsd], ["unrealized", p.unrealizedUsd], ["equity", p.equityUsd]]);
+  const f = obj(d.feesUsd);
+  line("Fees", [["network", f.networkWalletPaid], ["perps trading", f.perpTrading]]);
+  const pos = arr(s.positions).map(obj);
+  if (pos.length) {
+    out.push("", ...columns(["Asset", "Qty", "Avg cost", "Mark", "Unrealized"], pos.map((x) => [label(x.assetId, 24), num(x.qty), usd(x.avgCostUsd), usd(x.markUsd), usd(x.unrealizedUsd) || (x.unpriced === true ? "unpriced" : "")])));
+  }
+  for (const n of arr(d.notes))
+    if (txt(n))
+      out.push(`Note: ${txt(n)}`);
+  return out;
+}
+function lots(r) {
+  const d = obj(r.data);
+  const list = arr(d.lots).map(obj);
+  const out = [`Tax lots${txt(d.method) ? ` (method: ${txt(d.method)})` : ""}`];
+  if (list.length === 0)
+    return [...out, "No open tax lots."];
+  out.push(...columns(["Asset", "Qty", "Available", "Cost basis", "Acquired", "Term", "Unrealized"], list.map((l) => [
+    label(l.assetId, 24),
+    num(l.qty),
+    num(l.availableQty),
+    usd(l.costBasisUsd),
+    when(l.acquiredAtMs),
+    txt(l.term),
+    usd(l.unrealizedUsd) || (l.unpriced === true ? "unpriced" : "")
+  ])));
+  return out;
+}
+function perpMarkets(r) {
+  const list = arr(obj(r.data).markets).map(obj);
+  if (list.length === 0)
+    return ["No perps markets."];
+  return columns(["Symbol", "Name", "Max leverage", "Min size", "Tick", "Status"], list.map((m) => [
+    label(m.symbol, 16),
+    label(m.name, 30),
+    m.maxLeverage === undefined ? "" : `${num(m.maxLeverage)}x`,
+    num(m.minOrderSize),
+    usd(m.tick),
+    m.tradeable === false ? "not tradeable" : txt(m.status)
+  ]));
+}
+function perpQuote(r) {
+  const d = obj(r.data);
+  const f = typeof d.fundingRatePct === "number" ? `${d.fundingRatePct >= 0 ? "+" : "−"}${Math.abs(d.fundingRatePct)}% funding (+ = longs pay)` : "";
+  return [[`${label(d.symbol, 16)} perps: mark ${usd(d.markUsd)}`, usd(d.indexUsd) ? `index ${usd(d.indexUsd)}` : "", f, d.tradeable === false ? "not tradeable now" : ""].filter(Boolean).join(" · ")];
+}
+function perpAccount(r) {
+  const d = obj(r.data);
+  if (d.hasTraderAccount === false)
+    return ["This agent has no perps account yet."];
+  const a = obj(d.account);
+  return [`Equity ${usd(a.equityUsd)} · collateral ${usd(a.collateralUsd)} · free ${usd(a.freeCollateralUsd)} · margin used ${usd(a.marginUsedUsd)} · maintenance ${usd(a.maintenanceMarginUsd)}`];
+}
+function perpPositions(r) {
+  const d = obj(r.data);
+  if (d.hasTraderAccount === false)
+    return ["This agent has no perps account yet."];
+  const list = arr(d.positions).map(obj);
+  if (list.length === 0)
+    return ["No open perps positions."];
+  return columns(["Market", "Side", "Size", "Entry", "Mark", "Unrealized", "Liquidation", "TP / SL"], list.map((p) => [
+    label(p.symbol, 16),
+    txt(p.side),
+    num(p.sizeBase),
+    usd(p.entryUsd),
+    usd(p.markUsd),
+    usd(p.uPnlUsd),
+    usd(p.liqUsd),
+    [usd(p.takeProfitUsd), usd(p.stopLossUsd)].map((v) => v || "—").join(" / ")
+  ]));
+}
+function perpOrders(r) {
+  const d = obj(r.data);
+  if (d.hasTraderAccount === false)
+    return ["This agent has no perps account yet."];
+  const list = arr(d.orders).map(obj);
+  const trig = arr(d.triggers).map(obj);
+  const out = list.length ? columns(["Market", "Side", "Type", "Price", "Size", "Reduce-only", "Order"], list.map((o) => [label(o.symbol, 16), txt(o.side), txt(o.orderType), usd(o.priceUsd), num(o.sizeBase), yesNo(o.reduceOnly), txt(o.orderSequenceNumber)])) : ["No resting perps orders."];
+  if (trig.length)
+    out.push("", ...columns(["Market", "Trigger", "Price"], trig.map((t) => [label(t.symbol, 16), txt(t.kind).replace(/_/g, " "), usd(t.priceUsd)])));
+  return out;
+}
+function perpProtections(r) {
+  const d = obj(r.data);
+  const list = arr(d.protections).map(obj);
+  if (list.length === 0)
+    return ["No TP/SL protections."];
+  const out = columns(["Market", "Kind", "Trigger", "State", "Updated"], list.map((p) => [label(p.symbol, 16), txt(p.kind).replace(/_/g, " "), usd(p.triggerPriceUsd) || num(p.triggerPriceUsd), txt(p.state), when(p.updatedAt)]));
+  if (d.hasMore === true)
+    out.push("", "Only the newest 200 are shown.");
+  return out;
+}
+function indicators(r) {
+  const d = obj(r.data);
+  const bars = arr(d.bars).map(obj);
+  const keys = arr(d.indicators).map((i) => txt(obj(i).key)).filter(Boolean);
+  const out = [`Indicators for ${label(d.asset_id, 40)} on ${txt(d.timeframe)} candles${d.stale === true ? " (stale: the newest candle is old)" : ""}`];
+  if (bars.length === 0)
+    return [...out, "No bars."];
+  const val = (v) => typeof v === "number" ? String(Math.round(v * 1e6) / 1e6) : Object.entries(obj(v)).map(([k, n]) => `${k}=${typeof n === "number" ? Math.round(n * 1e6) / 1e6 : txt(n)}`).join(" ");
+  out.push(...columns(["Bar opened", "Close", ...keys], bars.map((b) => [when(b.open_time_ms), num(b.close), ...keys.map((k) => val(b[k]))])));
+  return out;
+}
+function renderersFor(kind) {
+  return {
+    hello,
+    list_agents: (r) => agents(r),
+    get_grant: (r) => grant(r),
+    pause_agent: (r, x) => pause(r, x, kind),
+    get_spot_quote: quote,
+    quote_unlisted_token: quote,
+    place_spot_order: (r, x) => spotWrite(r, x, false),
+    place_unlisted_order: (r, x) => spotWrite(r, x, false),
+    spot_order_now: (r, x) => spotWrite(r, x, true),
+    get_balances: balances,
+    list_spot_orders: orders,
+    get_tx_status: (r) => tx(r),
+    list_spot_markets: (r) => spotMarkets(r),
+    inspect_unlisted_token: (r) => unlistedInspect(r),
+    list_trades: trades,
+    get_pnl: (r) => pnl(r),
+    list_lots: (r) => lots(r),
+    list_perp_markets: (r) => perpMarkets(r),
+    get_perp_quote: (r) => perpQuote(r),
+    get_perp_account: (r) => perpAccount(r),
+    list_perp_positions: (r) => perpPositions(r),
+    list_perp_orders: (r) => perpOrders(r),
+    list_perp_protections: (r) => perpProtections(r),
+    get_indicators: (r) => indicators(r)
+  };
+}
+function renderResult(tool, kind, result, x) {
+  if (typeof result.text === "string")
+    return forTerminal(result.text, x.catalogue).split(`
+`);
+  const r = renderersFor(kind)[tool];
+  if (r) {
+    try {
+      const lines2 = r(result, x);
+      if (lines2.length)
+        return lines2;
+    } catch {}
+  }
+  const { summary, data } = result;
+  const lines = [];
+  if (summary !== undefined)
+    lines.push(...genericLines(summary));
+  if (data !== undefined)
+    lines.push(...genericLines(data));
+  return lines.length ? lines : ["Done."];
+}
+var NOTHING_SENT = "Nothing was sent.";
+var REFUSAL_TEXT = {
+  market_closed: "That market is closed right now. `darwin market-status` shows when US stocks trade again.",
+  quote_expired: "That quote expired (a quote lasts 30 seconds). Get a new one with `darwin quote`.",
+  quote_not_found: "Darwin doesn't know that quote ID. Get a quote with `darwin quote` and place it within 30 seconds.",
+  quote_required: "An order needs a quote first: run `darwin quote`, then `darwin order --quote <id>`.",
+  quote_mismatch: "The order doesn't match its quote: use the same --sell, --amount and --for as the quote.",
+  quote_already_used: "That quote was already used. Check `darwin orders`, or get a new quote.",
+  quote_price_moved: "The price moved beyond the quote's slippage limit. Get a new quote and try again.",
+  quote_wrong_agent: "That quote was made for a different agent.",
+  quote_wrong_endpoint: "That quote is for a token Darwin doesn't list; it can't be placed with `darwin order`.",
+  slippage_exceeds_grant: "That slippage is looser than your owner's maximum for this pair. Use a smaller --max-slippage-bps (`darwin grant` shows the maximum).",
+  per_trade_cap: "This order is over the agent's per-trade limit. Try a smaller amount (`darwin grant` shows the limits).",
+  per_trade_risk: "This order puts more at risk than the agent's per-trade limit allows. Try a smaller amount.",
+  daily_cap: "This agent has used today's trading budget. It resets at midnight UTC; `darwin grant` shows what's left.",
+  daily_tx_count: "This agent has made today's maximum number of trades. It resets at midnight UTC.",
+  daily_risk: "This agent has used today's risk budget. Selling into a stablecoin still works; it resets at midnight UTC.",
+  asset_daily_acquisition: "Today's budget for buying this token is used up. Another token may still work.",
+  below_min_trade: "That amount is below the minimum trade size.",
+  insufficient_sol: "Not enough SOL: selling that much would leave too little for network fees.",
+  self_pay_insolvent: "This agent's wallet can't pay its network fees. Add SOL to its wallet to trade again.",
+  kill_switch: "Darwin has paused agent trading for now. Try again later.",
+  sanctions_blocked: "Refused for compliance reasons.",
+  account_locked: "The owner's Darwin account is locked, so this agent can't trade.",
+  grant_invalid: "This agent can no longer trade with this API key (revoked or expired). Ask the owner, or run `darwin login` again.",
+  rate_limited: "Too many requests with this API key right now. Wait a minute and try again.",
+  relay_unavailable: "Darwin couldn't send the transaction right now. Try again in a few seconds.",
+  relay_rate_limited: "Too many transactions from this wallet just now. Wait a few seconds and try again.",
+  simulation_unavailable: "Darwin couldn't check the transaction just now. Try again in a few seconds.",
+  quote_unavailable: "No price is available for that trade right now. Try again shortly.",
+  price_sanity: "The quoted price looked wrong compared with the market, so Darwin refused it. Try again shortly.",
+  mint_not_in_scope: "This agent isn't allowed to trade that token.",
+  unlisted_disabled: "This agent isn't allowed to trade tokens Darwin doesn't list.",
+  ambiguous_asset: "That symbol names more than one token. Pass the token's mint address instead:"
+};
+function refusalLines(result, catalogue, write = false) {
+  const d = obj(result.data);
+  const code = [result.error, d.error, d.refusal].map(txt).find((c) => /^[a-z][a-z0-9_]{0,63}$/.test(c)) ?? "";
+  const rawDetail = txt(result.detail) || txt(d.detail) || txt(d.message);
+  const detail = /^[a-z][a-z0-9_]*$/.test(rawDetail) ? "" : forTerminal(rawDetail, catalogue);
+  const retrySafe = d.retrySafe ?? result.retrySafe;
+  const sent = result.sent === false || retrySafe === true && result.sent !== true;
+  const maybeSent = write && !sent;
+  const tail = sent ? ` ${NOTHING_SENT}` : "";
+  const out = [];
+  const known2 = REFUSAL_TEXT[code];
+  if (maybeSent)
+    out.push(`Darwin couldn't confirm this order was sent${detail ? `: ${detail}` : "."}`, "It may have gone through — check `darwin orders` before trying again.");
+  else if (known2)
+    out.push(`${known2}${code === "ambiguous_asset" ? "" : tail}`);
+  else if (detail)
+    out.push(`Darwin refused this: ${detail}${tail}`);
+  else if (code)
+    out.push(`Darwin refused this (${code.replace(/_/g, " ")}).${tail}`);
+  else
+    out.push(`Darwin refused this${typeof result.status === "number" ? ` (HTTP ${result.status})` : ""}.`);
+  if (!maybeSent && known2 && detail && code !== "ambiguous_asset" && code !== "rate_limited")
+    out.push(`Darwin says: ${detail}`);
+  for (const c of [...arr(result.candidates), ...arr(d.candidates)].map(obj).slice(0, 20)) {
+    out.push(`  ${label(c.symbol, 20) || "?"}  ${txt(c.mint)}${label(c.issuer, 40) ? `  (${label(c.issuer, 40)})` : ""}`);
+  }
+  if (code && !out[0].includes(code))
+    out.push(`(${code})`);
+  return out;
+}
+
+// src/commands.ts
+init_realms();
+init_redact();
+
+// src/session.ts
+init_context();
+init_config();
+init_realms();
+function realmFromEnv(ctx) {
+  const raw = ctx.env.DARWIN_REALM;
+  if (raw === undefined || raw === "")
+    return "darwin.finance";
+  const r = parseRealm(raw);
+  if (!r)
+    throw new CliError(EXIT.usage, "DARWIN_REALM must be prod or beta.", "usage");
+  return r;
+}
+function profileName(ctx, flag) {
+  const n = flag ?? ctx.env.DARWIN_PROFILE;
+  if (n !== undefined && !PROFILE_RE.test(n))
+    throw new CliError(EXIT.usage, "A profile name is 1–40 of a–z, 0–9, _ and -, starting with a letter or digit.", "usage");
+  return n;
+}
+function openSession(ctx, flags) {
+  assertInstalled(ctx);
+  const explicit = profileName(ctx, flags.profile);
+  if (!flags.profile) {
+    const fromEnv = envKey(ctx);
+    if (fromEnv !== null) {
+      const { key: key2, kind: kind2 } = acceptKey(fromEnv);
+      return { realm: realmFromEnv(ctx), kind: kind2, key: key2, profileName: "env", profile: null };
+    }
+  }
+  const cfg = loadConfig(ctx);
+  const name = explicit ?? cfg.default;
+  const profile = name ? cfg.profiles[name] : undefined;
+  if (!name || !profile) {
+    throw new CliError(EXIT.auth, name ? `There's no profile "${name}". \`darwin profile list\` shows them; \`darwin login\` makes one.` : "This terminal isn't connected to Darwin yet. Run `darwin login` (or set DARWIN_API_KEY).", "no_key");
+  }
+  const stored = getKey(ctx, profile.store, profile.realm, name);
+  if (!stored)
+    throw new CliError(EXIT.auth, `The API key for "${name}" is missing from ${profile.store === "keychain" ? ctx.keychain.description : "its file"}. Run \`darwin login\` again.`, "no_key");
+  const { key, kind } = acceptKey(stored);
+  if (kind !== profile.kind)
+    throw new CliError(EXIT.auth, `The key saved for "${name}" is not the kind this profile expects. Run \`darwin login\` again.`, "key_kind_mismatch");
+  return { realm: profile.realm, kind, key, profileName: name, profile };
+}
+
+// src/commands.ts
+init_agents();
+
+// src/prepared.ts
+init_context();
+init_http();
+init_redact();
+init_copy();
+var PREPARED_ID = /^prp_[0-9A-Za-z]{24}$/;
+var SIG = /^[1-9A-HJ-NP-Za-km-z]{64,90}$/;
+function isPreparedWrite(tool) {
+  return tool.write && tool.name !== "pause_agent";
+}
+var VERDICTS = new Set(["sent", "landed", "pending", "failed", "refused", "replayed", "uncertain", "never_sent", "not_started"]);
+var LAND_WAIT_MS = 8000;
+var POLL_MS = 2000;
+var obj2 = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
+var unwrap2 = (v) => v && typeof v === "object" && !Array.isArray(v) && ("untrusted" in v) ? v.untrusted : v;
+function cliLines(body, key = "lines") {
+  const l = obj2(obj2(body).cli)[key];
+  return Array.isArray(l) ? l.filter((x) => typeof x === "string").map((x) => clean(x).slice(0, 600)).filter(Boolean).slice(0, 12) : [];
+}
+function verdictOf(body) {
+  const v = obj2(body).verdict;
+  return typeof v === "string" && VERDICTS.has(v) ? v : null;
+}
+function refusalCode(body) {
+  const r = obj2(obj2(body).result);
+  const d = obj2(r.data);
+  const or = obj2(obj2(obj2(body).outcome).result);
+  const od = obj2(or.data);
+  for (const c of [r.error, d.refusal, d.error, or.error, od.refusal, od.error, obj2(body).error]) {
+    const s = unwrap2(c);
+    if (typeof s === "string" && /^[a-z][a-z0-9_]{0,63}$/.test(s))
+      return s;
+  }
+  return "";
+}
+function resultStatus(body) {
+  for (const r of [obj2(obj2(body).result), obj2(obj2(obj2(body).outcome).result)])
+    if (typeof r.status === "number")
+      return r.status;
+  return null;
+}
+function exitForVerdict(v, body) {
+  switch (v) {
+    case "sent":
+    case "landed":
+    case "replayed":
+      return EXIT.ok;
+    case "refused":
+    case "failed":
+    case "never_sent": {
+      const code = refusalCode(body);
+      if (code === "grant_paused")
+        return EXIT.paused;
+      if (code === "rate_limited" || resultStatus(body) === 429)
+        return EXIT.rateLimited;
+      return EXIT.refused;
+    }
+    default:
+      return EXIT.uncertain;
+  }
+}
+function orderIdOf(body) {
+  const r = obj2(obj2(body).result);
+  const data = obj2(r.data);
+  const summary = obj2(r.summary);
+  const id = unwrap2(data.orderId) ?? unwrap2(summary.orderId);
+  if (typeof id === "string" && /^[A-Za-z0-9_-]{1,80}$/.test(id))
+    return id;
+  const sig = unwrap2(data.txSignature) ?? unwrap2(summary.txSignature) ?? unwrap2(data.signature);
+  if (typeof sig === "string" && SIG.test(sig))
+    return `${sig.slice(0, 4)}…${sig.slice(-4)}`;
+  return null;
+}
+function retryCommand(preparedId, ctxFlags = [], verb = "retry") {
+  return ["darwin", verb, preparedId, ...ctxFlags].join(" ");
+}
+var SAFE = /^[A-Za-z0-9_-]{1,64}$/;
+function recoveryFlags(session, agentId) {
+  const out = [];
+  if (session.profile && SAFE.test(session.profileName))
+    out.push("--profile", session.profileName);
+  if (agentId && SAFE.test(agentId))
+    out.push("--agent", agentId);
+  return out;
+}
+async function post(o, path, body, timeoutMs) {
+  return request(o.ctx, o.session.realm, "POST", path, { key: o.session.key, agent: o.agentId ?? undefined, body, timeoutMs });
+}
+function plainRefusal(res, catalogue, command, realm) {
+  const err = typeof obj2(res.json).error === "string" ? String(obj2(res.json).error) : "";
+  if (res.status === 401)
+    return { exit: EXIT.auth, message: "Darwin refused this API key (or the agent it named). It may have been revoked or the agent paused; run `darwin whoami`, or ask the owner. Nothing was done." };
+  if (res.status === 426) {
+    const min = typeof obj2(res.json).minCli === "string" && /^\d+\.\d+\.\d+$/.test(String(obj2(res.json).minCli)) ? String(obj2(res.json).minCli) : catalogue.minCli;
+    return { exit: EXIT.upgrade, message: copy.updateRequired(min) };
+  }
+  if (res.status === 429)
+    return { exit: EXIT.rateLimited, message: "Too many requests with this API key right now. Wait a minute and try again. Nothing was done." };
+  if (res.status === 404 && err === "cli_unavailable")
+    return { exit: EXIT.refused, message: "The Darwin CLI isn't available on this site yet. Nothing was done." };
+  if (res.status === 404 && err === "unknown_tool")
+    return { exit: EXIT.usage, message: `\`${command}\` isn't available on ${realm} right now. Nothing was done. Run \`darwin help\` for the current list.` };
+  if (res.status === 400 && err === "invalid_request")
+    return { exit: EXIT.usage, message: "Darwin couldn't read that request. Nothing was done." };
+  return null;
+}
+async function runPrepared(o) {
+  const { tool } = o;
+  const path = `/api/agent/v1/tools/call/${encodeURIComponent(tool.name)}/prepare`;
+  let res;
+  try {
+    res = await post(o, path, { arguments: o.args, ...o.dryRun ? { dryRun: true } : {} }, 30000);
+  } catch (e) {
+    if (!(e instanceof NetworkError))
+      throw e;
+    return done(o, EXIT.network, null, { error: "network_error", detail: `${e.message} Nothing was sent; try again.`, sent: false }, [`${clean(e.message)} Nothing was sent; try again.`]);
+  }
+  const pj = obj2(res.json);
+  if (res.status === 404 && pj.error !== "unknown_tool" && pj.error !== "cli_unavailable") {
+    if (!o.dryRun)
+      return { kind: "fallback" };
+    const line = `Darwin can't check orders ahead of time on ${o.session.realm} yet, so nothing was checked or sent.`;
+    return done(o, EXIT.ok, null, { dryRun: true, sent: false, checked: false, detail: line }, [line]);
+  }
+  const plain = plainRefusal(res, o.catalogue, `darwin ${tool.cli.path.join(" ")}`, o.session.realm);
+  if (plain)
+    return done(o, plain.exit, null, { error: pj.error ?? "refused", detail: plain.message, sent: false, status: res.status }, [plain.message]);
+  const result = obj2(pj.result);
+  if (res.status !== 200 || typeof pj.isError !== "boolean") {
+    return done(o, EXIT.unexpected, null, { error: "bad_response", status: res.status, sent: false }, [`Darwin answered HTTP ${res.status}. Nothing was sent.`]);
+  }
+  if (pj.isError) {
+    const code = refusalCode(pj);
+    const exit = code === "grant_paused" ? EXIT.paused : code === "invalid_arguments" || code === "nonce_not_accepted" ? EXIT.usage : code === "rate_limited" ? EXIT.rateLimited : EXIT.refused;
+    return done(o, exit, null, { ...pj }, cliLines(pj).length ? cliLines(pj) : [`Darwin refused this${code ? ` (${code})` : ""}. Nothing was sent.`]);
+  }
+  if (o.dryRun) {
+    const lines = cliLines(pj);
+    if (tool.costsTx)
+      lines.push("Running it for real counts against today's transaction budget.");
+    return done(o, EXIT.ok, null, { ...pj }, lines.length ? lines : ["Dry run: Darwin checked it, and nothing was sent."]);
+  }
+  const preparedId = typeof result.preparedId === "string" && PREPARED_ID.test(result.preparedId) ? result.preparedId : null;
+  if (!preparedId)
+    return done(o, EXIT.unexpected, null, { error: "bad_response", sent: false }, ["Darwin's answer didn't name the prepared order. Nothing was sent."]);
+  return execute(o, preparedId, pj);
+}
+async function execute(o, preparedId, prepareBody) {
+  let res = null;
+  let lostAnswer = false;
+  try {
+    res = await post(o, "/api/agent/v1/tools/execute", { preparedId }, 70000);
+  } catch (e) {
+    if (e instanceof CliError && e.code === "redirect_refused") {
+      lostAnswer = true;
+    } else if (!(e instanceof NetworkError)) {
+      throw e;
+    } else if (!e.maybeSent) {
+      return done(o, EXIT.network, preparedId, { error: "network_error", preparedId, sent: false, detail: `${e.message} Nothing was sent.` }, [`${clean(e.message)} Nothing was sent. (It can't run later by itself; \`${retryCommand(preparedId, o.recovery, "cancel")}\` makes sure.)`]);
+    } else {
+      lostAnswer = true;
+    }
+  }
+  const ej = obj2(res?.json);
+  if (res && !lostAnswer) {
+    if (res.status === 409 && ej.executed === false)
+      return finish(o, preparedId, prepareBody, ej, null);
+    if (res.status === 401) {
+      return done(o, EXIT.auth, preparedId, { error: "unauthorized", preparedId, sent: false }, ["Darwin refused this API key (or the agent it named), so the order was not sent. Run `darwin whoami`, or ask the owner."]);
+    }
+    const plain = plainRefusal(res, o.catalogue, `darwin ${o.tool.cli.path.join(" ")}`, o.session.realm);
+    if (plain)
+      return done(o, plain.exit, preparedId, { error: ej.error ?? "refused", preparedId, sent: false, status: res.status }, [plain.message.replace("Nothing was done.", "The order was not sent.")]);
+    if (res.status === 404) {
+      return done(o, EXIT.refused, preparedId, { error: ej.error ?? "not_found", preparedId, sent: false, status: 404 }, ["Darwin couldn't find this checked order to send, so nothing was sent. Run the command again."]);
+    }
+    if (res.status === 200 && verdictOf(ej)) {
+      const v = verdictOf(ej);
+      if (v !== "uncertain")
+        return finish(o, preparedId, prepareBody, ej, null);
+    }
+  }
+  const lines = res && verdictOf(ej) === "uncertain" ? cliLines(ej) : [];
+  const status = await pollStatus(o, preparedId, (v) => v !== "pending" && v !== "uncertain" && v !== "not_started", LAND_WAIT_MS);
+  return finish(o, preparedId, prepareBody, Object.keys(ej).length ? ej : { preparedId, state: "unknown", verdict: "uncertain" }, status, lines);
+}
+async function pollStatus(o, preparedId, stop, budgetMs) {
+  if (o.quietForMcp)
+    budgetMs = Math.min(budgetMs, 4000);
+  const deadline = o.ctx.now() + budgetMs;
+  let last = null;
+  while (o.ctx.now() + POLL_MS <= deadline) {
+    await o.ctx.sleep(POLL_MS);
+    try {
+      const r = await post(o, "/api/agent/v1/tools/status", { preparedId }, Math.max(1000, Math.min(5000, deadline - o.ctx.now())));
+      if (r.status === 200 && verdictOf(r.json)) {
+        last = obj2(r.json);
+        if (stop(verdictOf(last)))
+          return last;
+      }
+    } catch {}
+  }
+  return last;
+}
+async function finish(o, preparedId, prepareBody, executeBody, status, firstLines = []) {
+  let st = status;
+  let v = verdictOf(executeBody) ?? "uncertain";
+  const lines = [...firstLines.length ? firstLines : cliLines(executeBody)];
+  if (!st && v === "sent")
+    st = await pollStatus(o, preparedId, (x) => x === "landed" || x === "failed" || x === "refused", LAND_WAIT_MS);
+  const sv = verdictOf(st);
+  if (st && sv) {
+    const stillWaiting = v === "sent" && (sv === "sent" || sv === "pending");
+    if (!stillWaiting) {
+      for (const l of cliLines(st))
+        if (!lines.includes(l))
+          lines.push(l);
+      v = sv;
+    }
+  }
+  const exit = exitForVerdict(v, st ?? executeBody);
+  if (exit === EXIT.uncertain && !lines.some((l) => l.startsWith("Darwin may have received")))
+    lines.unshift(copy.uncertainWritePrepared);
+  const orderId = orderIdOf(executeBody) ?? orderIdOf(st);
+  if (orderId && (v === "sent" || v === "landed" || v === "replayed"))
+    lines.push(`Order ID: ${orderId}`);
+  if (v === "sent")
+    lines.push(`Not confirmed yet. Check it with: ${retryCommand(preparedId, o.recovery)}`);
+  if (exit === EXIT.uncertain)
+    lines.push(`Don't run the command again. Check it with: ${retryCommand(preparedId, o.recovery)}`);
+  const doc = {
+    preparedId,
+    tool: o.tool.name,
+    verdict: v ?? "uncertain",
+    prepare: obj2(prepareBody.result),
+    execute: executeBody,
+    ...st && st !== executeBody ? { status: st } : {},
+    ...exit === EXIT.uncertain || v === "sent" ? { next: { command: retryCommand(preparedId, o.recovery) } } : {}
+  };
+  return done(o, exit, preparedId, doc, lines);
+}
+function done(o, exit, preparedId, doc, lines, toStderr = exit !== EXIT.ok) {
+  if (!o.quietForMcp) {
+    if (o.json) {
+      printJson(o.ctx, doc);
+      if (exit !== EXIT.ok)
+        for (const l of lines)
+          warn(o.ctx, l);
+    } else {
+      for (const l of lines)
+        (toStderr ? warn : say)(o.ctx, l);
+    }
+  }
+  return { kind: "done", exit, preparedId, doc: { ...doc, lines } };
+}
+async function checkPrepared(o) {
+  const { ctx, preparedId } = o;
+  const flags = recoveryFlags(o.session, o.agentId);
+  const again = retryCommand(preparedId, flags);
+  let res;
+  try {
+    res = await post(o, o.cancel ? "/api/agent/v1/tools/cancel" : "/api/agent/v1/tools/status", { preparedId }, 20000);
+  } catch (e) {
+    if (e instanceof CliError && e.code === "redirect_refused") {
+      const msg2 = `${clean(e.message)} ${o.cancel ? "Whether it was cancelled is unknown" : "Its outcome is still unknown"}; check again in a moment with \`${again}\`.`;
+      if (o.json)
+        printJson(ctx, { error: "redirect_refused", preparedId, detail: msg2 });
+      warn(ctx, msg2);
+      return EXIT.uncertain;
+    }
+    if (!(e instanceof NetworkError))
+      throw e;
+    const reached = e.maybeSent;
+    const msg = o.cancel && !reached ? `${clean(e.message)} The cancel didn't reach Darwin; try again.` : `${clean(e.message)} ${o.cancel ? "Whether it was cancelled is unknown" : "Its outcome is still unknown"}; check again in a moment with \`${again}\`.`;
+    if (o.json)
+      printJson(ctx, { error: "network_error", preparedId, detail: msg });
+    warn(ctx, msg);
+    return o.cancel && !reached ? EXIT.network : EXIT.uncertain;
+  }
+  const j = obj2(res.json);
+  const err = typeof j.error === "string" ? j.error : "";
+  if (res.status === 401) {
+    const msg = "Can't check this order with this API key and agent right now. Its outcome is still unknown, not failed. A paused agent is one possible cause. Check the agent's History on Darwin.";
+    if (o.json)
+      printJson(ctx, { error: "unauthorized", preparedId, detail: msg });
+    warn(ctx, msg);
+    return EXIT.uncertain;
+  }
+  if (res.status === 404 && (err === "not_found" || err === "prepared_unavailable" || err === "cli_unavailable")) {
+    const msg = err === "not_found" ? "Darwin has no order with that ID for this API key and agent. (Use the ID this terminal printed, with the same profile and --agent.)" : `This site doesn't keep checked orders yet, so there's nothing to look up. Check \`darwin orders\` instead.`;
+    if (o.json)
+      printJson(ctx, { error: err, preparedId, detail: msg });
+    warn(ctx, msg);
+    return EXIT.refused;
+  }
+  if (res.status === 426) {
+    const min = typeof j.minCli === "string" && /^\d+\.\d+\.\d+$/.test(j.minCli) ? j.minCli : "the latest version";
+    const msg = copy.updateRequired(min);
+    if (o.json)
+      printJson(ctx, { error: "cli_upgrade_required", status: 426, preparedId, minCli: min, detail: msg });
+    warn(ctx, msg);
+    return EXIT.upgrade;
+  }
+  if (res.status === 429) {
+    const msg = "Too many requests with this API key right now. Wait a minute and try again.";
+    if (o.json)
+      printJson(ctx, { error: "rate_limited", status: 429, preparedId, detail: msg });
+    warn(ctx, msg);
+    return EXIT.rateLimited;
+  }
+  const v = verdictOf(j);
+  if (res.status !== 200 || !v) {
+    if (o.json)
+      printJson(ctx, { error: "bad_response", status: res.status, preparedId });
+    warn(ctx, `Darwin answered HTTP ${res.status}. The order's outcome is still unknown; try again in a moment.`);
+    return EXIT.uncertain;
+  }
+  const lines = cliLines(j);
+  if (o.cancel && j.cancelled === false)
+    lines.push("It had already started, so it couldn't be cancelled.");
+  const exit = o.cancel ? j.cancelled === true ? EXIT.ok : exitForVerdict(v, j) : exitForVerdict(v, j);
+  const orderId = orderIdOf(obj2(j.outcome));
+  if (orderId && (v === "landed" || v === "sent"))
+    lines.push(`Order ID: ${orderId}`);
+  if (v === "pending" || v === "uncertain")
+    lines.push(`Don't place it again. Check again in a minute: ${again}`);
+  if (v === "not_started" && !o.cancel)
+    lines.push(`To make sure it never runs: ${retryCommand(preparedId, flags, "cancel")}`);
+  if (o.json)
+    printJson(ctx, j);
+  else
+    for (const l of lines)
+      say(ctx, l);
+  return exit;
+}
+async function preparedRead(o, preparedId, cancel) {
+  if (!PREPARED_ID.test(preparedId))
+    return { ok: false, body: { error: "invalid_arguments", detail: "preparedId is the prp_… id a write returned." } };
+  try {
+    const r = await post(o, cancel ? "/api/agent/v1/tools/cancel" : "/api/agent/v1/tools/status", { preparedId }, 20000);
+    const j = obj2(r.json);
+    if (r.status === 200 && verdictOf(j))
+      return { ok: true, body: j };
+    if (r.status === 401)
+      return { ok: false, body: { error: "unauthorized", preparedId, outcome: "unknown", detail: "Can't check this order with this API key and agent right now. Its outcome is still unknown, not failed. A paused agent is one possible cause." } };
+    return { ok: false, body: { error: typeof j.error === "string" ? j.error : "bad_response", status: r.status, preparedId, detail: typeof j.detail === "string" ? j.detail : "Darwin couldn't answer that just now." } };
+  } catch (e) {
+    if (!(e instanceof NetworkError))
+      throw e;
+    return { ok: false, body: { error: "network_error", preparedId, outcome: "unknown", detail: `${e.message} Its outcome is still unknown.` } };
+  }
+}
+
+// src/commands.ts
+var OUT_FLAGS = ["json", "format", "quiet", "no-color", "help"];
+var jsonOut = (ctx, p) => wantsJson(ctx, { json: has(p, "json"), format: one(p, "format") });
+var unwrap3 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
+async function cmdLogout(ctx, p) {
+  onlyFlags(p, ["profile", "all", "revoke", "force-local", ...OUT_FLAGS], "logout");
+  assertInstalled(ctx);
+  if (has(p, "all")) {
+    if (has(p, "revoke"))
+      throw new CliError(EXIT.usage, "--revoke works on one profile at a time.", "usage");
+    let failed = 0;
+    for (const [name2, prof2] of Object.entries(loadConfig(ctx).profiles))
+      failed += forgetProfile(ctx, name2, prof2) ? 0 : 1;
+    return failed ? EXIT.unexpected : EXIT.ok;
+  }
+  const cfg = loadConfig(ctx);
+  const name = profileName(ctx, one(p, "profile")) ?? cfg.default;
+  const prof = name ? cfg.profiles[name] : undefined;
+  if (!name || !prof)
+    throw new CliError(EXIT.usage, "No profile to log out of. `darwin profile list` shows them.", "no_profile");
+  const url = manageUrl(prof.realm, prof.agent_id);
+  if (!has(p, "revoke")) {
+    let key = null;
+    try {
+      key = getKey(ctx, prof.store, prof.realm, name);
+    } catch {
+      key = null;
+    }
+    return forgetProfile(ctx, name, prof, { expectedKey: key }) ? EXIT.ok : EXIT.unexpected;
+  }
+  const s = openSession(ctx, { profile: name });
+  if (s.kind === "agents")
+    warn(ctx, copy.revokeAllWarning);
+  let keyName = "this API key";
+  try {
+    const w = await request(ctx, s.realm, "GET", "/api/agent/v1/tools/whoami", { key: s.key, timeoutMs: 15000 });
+    const n = w.json?.name;
+    if (w.status === 200 && typeof n === "string" && n)
+      keyName = clean(n).slice(0, 120);
+  } catch {}
+  let confirmed = false;
+  let networkFailed = false;
+  try {
+    const res = await request(ctx, s.realm, "POST", "/api/agent/v1/key/revoke", { key: s.key, body: {}, timeoutMs: 20000 });
+    const j = res.json;
+    confirmed = res.status === 200 && mediaType(res.contentType) === "application/json" && !!j && j.revoked === true && typeof j.keyId === "string" && typeof j.changed === "boolean" && Object.keys(j).length === 3;
+  } catch (e) {
+    if (!(e instanceof NetworkError) && !(e instanceof CliError))
+      throw e;
+    networkFailed = e instanceof NetworkError;
+  }
+  const agent = prof.agent_name || prof.agent_id;
+  if (confirmed) {
+    if (!forgetProfile(ctx, name, prof, { expectedKey: s.key, quiet: true }))
+      return EXIT.unexpected;
+    say(ctx, copy.revoked(keyName, agent));
+    return EXIT.ok;
+  }
+  if (networkFailed && has(p, "force-local")) {
+    forgetProfile(ctx, name, prof, { expectedKey: s.key, quiet: true });
+    warn(ctx, copy.revokeNotConfirmed(agent, url).replace(" and it's still saved here", ""));
+    return EXIT.refused;
+  }
+  warn(ctx, copy.revokeNotConfirmed(agent, url));
+  return EXIT.refused;
+}
+function forgetProfile(ctx, name, prof, opts = {}) {
+  const outcome = updateConfig(ctx, (c) => {
+    const now = c.profiles[name];
+    if (!now || now.realm !== prof.realm || now.store !== prof.store || now.agent_id !== prof.agent_id)
+      return "changed";
+    if (opts.expectedKey !== undefined) {
+      let current;
+      try {
+        current = getKey(ctx, now.store, now.realm, name);
+      } catch {
+        return "unreadable";
+      }
+      if (current !== null && current !== opts.expectedKey)
+        return "changed";
+    }
+    if (!deleteKey(ctx, now.store, now.realm, name))
+      return "stuck";
+    delete c.profiles[name];
+    if (c.default === name)
+      c.default = Object.keys(c.profiles)[0] ?? "";
+    return "ok";
+  });
+  if (outcome === "changed") {
+    warn(ctx, `Profile "${name}" changed while this ran (another login?), so it was left as it is.`);
+    return false;
+  }
+  if (outcome !== "ok") {
+    warn(ctx, `Couldn't remove the API key for "${name}" from ${prof.store === "keychain" ? ctx.keychain.description : "its file"}, so the profile was kept. Unlock it and try again.`);
+    return false;
+  }
+  if (!opts.quiet)
+    say(ctx, copy.loggedOut(name, manageUrl(prof.realm, prof.agent_id)));
+  return true;
+}
+async function cmdWhoami(ctx, p) {
+  onlyFlags(p, ["profile", ...OUT_FLAGS], "whoami");
+  const s = openSession(ctx, { profile: one(p, "profile") });
+  let who = null;
+  let note = null;
+  let exit = EXIT.ok;
+  try {
+    const res = await request(ctx, s.realm, "GET", "/api/agent/v1/tools/whoami", { key: s.key, timeoutMs: 15000 });
+    if (res.status === 200 && res.json && typeof res.json === "object")
+      who = res.json;
+    else if (res.status === 401) {
+      note = "Darwin refused this API key — it may have been revoked.";
+      exit = EXIT.auth;
+    } else if (res.status === 429) {
+      note = "Too many requests with this API key right now.";
+      exit = EXIT.rateLimited;
+    } else if (res.status === 426) {
+      note = copy.updateRequired(typeof res.json?.minCli === "string" ? String(res.json.minCli) : "the latest version");
+      exit = EXIT.upgrade;
+    } else if (res.status === 404) {} else if (res.status === 403) {
+      note = "Darwin refused this request.";
+      exit = EXIT.refused;
+    } else {
+      note = `Darwin answered HTTP ${res.status}.`;
+      exit = EXIT.unexpected;
+    }
+  } catch (e) {
+    if (!(e instanceof NetworkError))
+      throw e;
+    note = e.message;
+    exit = EXIT.network;
+  }
+  const keyName = who && typeof who.name === "string" ? clean(who.name) : "name unavailable";
+  const agent = clean(unwrap3(who?.homeAgentName) || s.profile?.agent_name || s.profile?.agent_id || "unknown agent");
   const permissions = s.kind === "agents" ? "Read: all agents · Trade: all active agents" : "Read: this agent · Trade: this agent";
   const store = s.profile ? storeLabel(ctx, s.profile.store, s.realm, s.profileName) : "DARWIN_API_KEY (environment)";
   if (jsonOut(ctx, p))
@@ -3570,6 +4855,18 @@ async function cmdWhoami(ctx, p) {
     warn(ctx, `Reminder: this API key is in a plain file (${storeLabel(ctx, "file", s.realm, s.profileName).slice(8, -1)}).`);
   return exit;
 }
+var DOCTOR_LABEL = {
+  version: "Darwin CLI",
+  node: "Node",
+  platform: "Platform",
+  install: "Install",
+  secretStore: "Secret store",
+  config: "Config",
+  profiles: "Profiles",
+  defaultProfile: "Default profile",
+  key: "API key",
+  catalogue: "Command list"
+};
 async function cmdDoctor(ctx, p) {
   onlyFlags(p, ["profile", ...OUT_FLAGS], "doctor");
   const checks = { version: VERSION, node: process.version, platform: `${ctx.platform}-${process.arch}` };
@@ -3613,9 +4910,11 @@ async function cmdDoctor(ctx, p) {
   }
   if (jsonOut(ctx, p))
     printJson(ctx, checks);
-  else
-    for (const l of renderText(checks))
-      say(ctx, l);
+  else {
+    const width = Math.max(...Object.keys(checks).map((k) => (DOCTOR_LABEL[k] ?? k).length));
+    for (const [k, v] of Object.entries(checks))
+      say(ctx, `${(DOCTOR_LABEL[k] ?? k).padEnd(width)}  ${v === null ? "none" : String(v)}`);
+  }
   return EXIT.ok;
 }
 async function cmdProfile(ctx, p) {
@@ -3635,9 +4934,18 @@ async function cmdProfile(ctx, p) {
         printJson(ctx, { profiles: rows });
       else if (rows.length === 0)
         say(ctx, "No profiles yet. Run `darwin login`.");
-      else
-        for (const l of renderText(rows))
+      else {
+        const table2 = columns(["Profile", "Site", "Agent", "API key for", "Stored in"], rows.map((r) => [
+          `${r.default ? "* " : "  "}${r.profile}`,
+          r.realm,
+          clean(r.agent).slice(0, 40),
+          r.kind === "agents" ? `all agents${r.defaultAgent ? " (default set)" : ""}` : "this agent",
+          r.store === "keychain" ? ctx.keychain.description : "a plain file"
+        ]));
+        for (const l of table2)
           say(ctx, l);
+        say(ctx, "* = the profile commands use. Change it: darwin profile use <name>");
+      }
       return EXIT.ok;
     }
     case "use":
@@ -3694,9 +5002,9 @@ async function cmdProfile(ctx, p) {
         throw new CliError(EXIT.usage, "Only a profile with an API key for all your agents has a default agent.", "usage");
       if (!a)
         throw new CliError(EXIT.usage, "Name the agent: `darwin profile set-agent <name or id>`.", "usage");
-      const agents = await listAgents(ctx, s, { fresh: true });
-      const hit = agents.find((x) => x.id === a) ?? (() => {
-        const m = agents.filter((x) => x.name.toLowerCase() === a.toLowerCase());
+      const agents2 = await listAgents(ctx, s, { fresh: true });
+      const hit = agents2.find((x) => x.id === a) ?? (() => {
+        const m = agents2.filter((x) => x.name.toLowerCase() === a.toLowerCase());
         if (m.length > 1)
           throw new CliError(EXIT.usage, `More than one agent is called that; use its id: ${m.map((x) => x.id).join(", ")}`, "agent_ambiguous");
         return m[0];
@@ -3737,16 +5045,28 @@ async function cmdApi(ctx, p) {
   if (jsonOut(ctx, p))
     printJson(ctx, body);
   else
-    for (const l of renderText(body))
+    for (const l of genericLines(body))
       say(ctx, l);
   return res.status === 200 ? EXIT.ok : res.status === 401 ? EXIT.auth : res.status === 429 ? EXIT.rateLimited : EXIT.refused;
 }
+async function cmdCheckPrepared(ctx, p, cancel) {
+  const name = cancel ? "cancel" : "retry";
+  onlyFlags(p, ["profile", "agent", ...OUT_FLAGS], name);
+  const id = p.positionals[1];
+  if (!id || p.positionals.length > 2 || !PREPARED_ID.test(id)) {
+    throw new CliError(EXIT.usage, `\`darwin ${name}\` takes the ID the order printed: \`darwin ${name} prp_…\`.`, "usage");
+  }
+  const s = openSession(ctx, { profile: one(p, "profile") });
+  const { recoveryAgent: recoveryAgent2 } = await Promise.resolve().then(() => (init_agents(), exports_agents));
+  const agentId = await recoveryAgent2(ctx, s, one(p, "agent"));
+  return checkPrepared({ ctx, session: s, agentId, json: jsonOut(ctx, p), preparedId: id, cancel });
+}
 
 // src/login.ts
 init_context();
 import { linkSync, lstatSync as lstatSync3, readFileSync, renameSync as renameSync2, unlinkSync as unlinkSync3 } from "node:fs";
 import { randomBytes as randomBytes3 } from "node:crypto";
-import { join as join7 } from "node:path";
+import { join as join7, sep } from "node:path";
 init_copy();
 init_config();
 init_http();
@@ -4160,7 +5480,7 @@ function chooseStore(ctx, p) {
   if (s === "file") {
     if (!probeFileStore(ctx))
       throw new CliError(EXIT.auth, `Nothing was started: the Darwin CLI can't keep a private file in ${join7(ctx.configDir, "credentials")} (it must be yours and chmod 700).`, "no_secret_store");
-    warn(ctx, copy.fileStoreWarning(join7(ctx.configDir, "credentials", "<realm>__<profile>")));
+    warn(ctx, copy.fileStoreWarning(`${join7(ctx.configDir, "credentials")}${sep}…`));
     return "file";
   }
   if (!probeKeychain(ctx))
@@ -4272,7 +5592,7 @@ function readKeyFile(path) {
   rememberSecret(j.key);
   return { realm, agentId: j.agent_id, key: j.key };
 }
-var unwrap3 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
+var unwrap4 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
 async function identify(ctx, realm, key, kind) {
   let res;
   try {
@@ -4288,7 +5608,7 @@ async function identify(ctx, realm, key, kind) {
     throw new CliError(EXIT.rateLimited, "Too many requests with this API key right now. Wait a minute and try again. Nothing was saved.", "rate_limited");
   const w = res.json;
   if (res.status === 200 && w && isAgentId(w.homeAgentId)) {
-    return { kind: w.kind === "agents" ? "agents" : w.kind === "agent" ? "agent" : null, agentId: w.homeAgentId, agentName: clean(unwrap3(w.homeAgentName)).slice(0, 120), keyName: typeof w.name === "string" ? clean(w.name).slice(0, 120) : null };
+    return { kind: w.kind === "agents" ? "agents" : w.kind === "agent" ? "agent" : null, agentId: w.homeAgentId, agentName: clean(unwrap4(w.homeAgentName)).slice(0, 120), keyName: typeof w.name === "string" ? clean(w.name).slice(0, 120) : null };
   }
   if (res.status !== 404)
     throw new CliError(EXIT.unexpected, `Couldn't check this key with ${realm} (HTTP ${res.status}). Nothing was saved.`, "bad_response");
@@ -4307,7 +5627,7 @@ async function identify(ctx, realm, key, kind) {
   const first = list[0];
   if (!isAgentId(first.id))
     throw new CliError(EXIT.unexpected, "Darwin's answer was not what the CLI expected. Nothing was saved.", "bad_response");
-  return { kind, agentId: first.id, agentName: clean(unwrap3(first.name)).slice(0, 120), keyName: null };
+  return { kind, agentId: first.id, agentName: clean(unwrap4(first.name)).slice(0, 120), keyName: null };
 }
 async function importKey(ctx, o) {
   const who = await identify(ctx, o.realm, o.key, o.kind);
@@ -4463,7 +5783,7 @@ async function finishPickup(ctx, p, j, json) {
   rememberSecret(raw);
   const agent = j.agent ?? {};
   const agentId = isAgentId(agent.id) ? agent.id : "";
-  const agentName = clean(unwrap3(agent.name)).slice(0, 120);
+  const agentName = clean(unwrap4(agent.name)).slice(0, 120);
   const keyName = typeof j.key_name === "string" ? clean(j.key_name).slice(0, 120) : null;
   if (!agentId)
     throw new CliError(EXIT.unexpected, "Darwin's pairing answer had no agent id. Revoke the newest key on the agent's Manage tab and pair again.", "bad_response");
@@ -4487,18 +5807,21 @@ async function finishPickup(ctx, p, j, json) {
   if (!saved)
     throw new CliError(EXIT.unexpected, lostKeyLine(k), "store_failed", { agentId, manageUrl: manageUrl(p.realm, agentId) });
   let welcome = null;
+  let hello2 = null;
   try {
     const h = await request(ctx, p.realm, "GET", "/api/agent/v1/hello", { key, agent: kind === "agents" ? agentId : undefined, timeoutMs: 20000 });
     const w = h.json?.welcome;
     if (h.status === 200 && typeof w === "string")
       welcome = clean(w).slice(0, 8000);
+    if (h.status === 200 && h.json && typeof h.json === "object" && !Array.isArray(h.json))
+      hello2 = h.json;
   } catch {}
   if (json)
     printJson(ctx, { status: "connected", profile, realm: p.realm, kind, agentId, agent: agentName, keyName, store: k.store, permissions: kind === "agents" ? "Read: all agents · Trade: all active agents" : "Read: this agent · Trade: this agent", welcome });
   else {
-    if (welcome)
-      say(ctx, welcome);
     say(ctx, connectedLine(ctx, k));
+    for (const l of welcomeLines(p.realm, hello2, agentName || agentId))
+      say(ctx, l);
   }
   return EXIT.ok;
 }
@@ -4513,6 +5836,7 @@ init_context();
 init_copy();
 import { randomBytes as randomBytes4 } from "node:crypto";
 init_http();
+init_redact();
 init_agents();
 var B62 = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
 function newNonce() {
@@ -4616,10 +5940,10 @@ function buildArguments(tool, positionals, p, globals) {
   }
   return args;
 }
-var unwrap4 = (v) => v && typeof v === "object" && !Array.isArray(v) && ("untrusted" in v) ? v.untrusted : v;
+var unwrap5 = (v) => v && typeof v === "object" && !Array.isArray(v) && ("untrusted" in v) ? v.untrusted : v;
 var isPaused = (r) => {
   const data = r.data ?? {};
-  return [r.error, data.error, data.refusal].some((x) => unwrap4(x) === "grant_paused");
+  return [r.error, data.error, data.refusal].some((x) => unwrap5(x) === "grant_paused");
 };
 function exitFor(tool, body) {
   if (body.isError !== true)
@@ -4638,7 +5962,7 @@ function exitFor(tool, body) {
     return EXIT.usage;
   return EXIT.refused;
 }
-async function callTool(o, agentId) {
+async function callTool(o, agentId, limits = {}) {
   const { ctx, session, tool } = o;
   const args = { ...o.args };
   let nonce = null;
@@ -4653,12 +5977,12 @@ async function callTool(o, agentId) {
     key: session.key,
     agent: agentId ?? undefined,
     body: { arguments: args },
-    timeoutMs: tool.write ? 30000 : 20000
+    timeoutMs: limits.timeoutMs ?? (tool.write ? 30000 : 20000)
   });
   let res;
   try {
     res = await send();
-    if (!tool.write && res.status === 429) {
+    if (!tool.write && !limits.noRetry && res.status === 429) {
       const ra = Number(res.headers.get("retry-after") ?? "NaN");
       if (Number.isFinite(ra) && ra >= 0 && ra <= 10) {
         await ctx.sleep(ra * 1000);
@@ -4687,7 +6011,7 @@ async function callTool(o, agentId) {
       message = copy.uncertainWrite;
     else if (exit === EXIT.paused)
       message = copy.paused;
-    else if (unwrap4(data.refusal) === "duplicate" && unwrap4(data.detail) === "nonce_used_by_a_different_order") {
+    else if (unwrap5(data.refusal) === "duplicate" && unwrap5(data.detail) === "nonce_used_by_a_different_order") {
       message = copy.nonceConflict;
       exit = EXIT.refused;
     }
@@ -4713,31 +6037,25 @@ async function callTool(o, agentId) {
 }
 async function runTool(o) {
   const { ctx, session, tool, flags } = o;
-  if (flags.dryRun) {
-    const named = (flags.agent ?? ctx.env.DARWIN_AGENT ?? "").trim() || (session.kind === "agents" ? session.profile?.default_agent ?? "" : "");
-    if (session.kind === "agents" && tool.name !== "list_agents" && !named)
-      throw new CliError(EXIT.usage, copy.needAgent, "agent_required");
-    const agentId2 = named || null;
-    const preview = {
-      dryRun: true,
-      sent: false,
-      command: `darwin ${tool.cli.path.join(" ")}`,
-      tool: tool.name,
-      write: tool.write,
-      costsTx: tool.costsTx,
-      realm: session.realm,
-      agent: agentId2,
-      arguments: o.args,
-      note: tool.idempotency ? "An order ID (nonce) is generated when the command really runs." : undefined
-    };
-    if (o.json)
-      printJson(ctx, preview);
-    else
-      for (const l of renderText(preview))
-        say(ctx, l);
-    return EXIT.ok;
+  if (isPreparedWrite(tool)) {
+    const agentId2 = await resolveAgent(ctx, session, flags.agent);
+    const r = await runPrepared({ ctx, session, catalogue: o.catalogue, tool, args: o.args, agentId: agentId2, json: o.json, dryRun: flags.dryRun, recovery: recoveryFlags(session, agentId2) });
+    if (r.kind === "done") {
+      if (r.doc.error === "unknown_tool" && o.onUnknownTool)
+        await o.onUnknownTool().catch(() => {});
+      return r.exit;
+    }
+    if (flags.dryRun)
+      return EXIT.ok;
+    return runDirect(o, agentId2);
   }
+  if (flags.dryRun)
+    return dryRun(o);
   const agentId = tool.name === "list_agents" ? null : await resolveAgent(ctx, session, flags.agent);
+  return runDirect(o, agentId);
+}
+async function runDirect(o, agentId) {
+  const { ctx, session, tool } = o;
   const out = await callTool(o, agentId);
   if (out.message === "unknown_tool") {
     if (o.onUnknownTool)
@@ -4749,41 +6067,159 @@ async function runTool(o) {
     printJson(ctx, result ? { ...result, ...out.nonce ? { nonce: out.nonce } : {} } : { error: out.body?.error ?? "failed", detail: out.message, ...out.nonce ? { nonce: out.nonce } : {} });
     if (out.message)
       warn(ctx, out.message);
+    for (const l of cliLines(out.body, "notes"))
+      warn(ctx, l);
+    if (out.exit === EXIT.ok)
+      jsonFooter(o, out, result);
+    else if (out.nonce && tool.write)
+      warn(ctx, `Order nonce: ${out.nonce}`);
+    return out.exit;
+  }
+  const x = await renderCtx(o, out, agentId);
+  if (out.exit === EXIT.ok && result) {
+    for (const l of renderResult(tool.name, session.kind, result, x))
+      say(ctx, l);
+    for (const l of cliLines(out.body, "notes"))
+      say(ctx, l);
+    try {
+      if (await afterHumanSuccess(o, result, agentId) === "failed")
+        return EXIT.refused;
+    } catch {}
   } else {
-    if (result && !(out.exit !== EXIT.ok && !result.data && !result.summary)) {
-      if (typeof result.text === "string")
-        say(ctx, cell(result.text));
-      else {
-        const { summary, data, welcome, ...rest } = result;
-        if (typeof welcome === "string")
-          say(ctx, cell(welcome));
-        if (summary !== undefined)
-          for (const l of renderText(summary))
-            say(ctx, l);
-        if (data !== undefined)
-          for (const l of renderText(data))
-            say(ctx, l);
-        for (const l of renderText(Object.fromEntries(Object.entries(rest).filter(([k]) => k !== "status"))))
-          if (l.trim())
-            say(ctx, l);
-      }
-    } else if (result) {
-      warn(ctx, `${cell(result.detail ?? result.error ?? "Refused.")}${typeof result.error === "string" ? ` (${cell(result.error)})` : ""}`);
-    }
+    const covered = out.exit === EXIT.paused || out.exit === EXIT.uncertain || out.message === copy.nonceConflict;
+    if (result && !covered)
+      for (const l of refusalLines(result, o.catalogue, tool.write))
+        warn(ctx, l);
     if (out.message)
       warn(ctx, out.message);
+    if (out.nonce && tool.write)
+      warn(ctx, `Order nonce: ${out.nonce}`);
   }
-  if (out.exit === EXIT.ok)
-    afterSuccess(o, out, result);
-  else if (out.nonce && tool.write)
-    warn(ctx, `Order ID: ${out.nonce}`);
   return out.exit;
 }
-function afterSuccess(o, out, result) {
+var QUOTE_TOOLS = new Set(["get_spot_quote"]);
+var EXTRA_READ_MS = 5000;
+var CONFIRM_BUDGET_MS = 12000;
+var SPOT_WRITES = new Set(["place_spot_order", "spot_order_now"]);
+async function readTool(o, name, args, agentId, deadline) {
+  const t = o.catalogue.tools.find((x) => x.name === name);
+  if (!t || t.write)
+    return null;
+  const left = deadline === undefined ? EXTRA_READ_MS : Math.min(EXTRA_READ_MS, deadline - o.ctx.now());
+  if (left < 500)
+    return null;
+  try {
+    const r = await callTool({ ctx: o.ctx, session: o.session, catalogue: o.catalogue, tool: t, args, flags: o.flags }, agentId, { timeoutMs: left, noRetry: true });
+    return r.exit === EXIT.ok && r.body?.result && typeof r.body.result === "object" ? r.body.result : null;
+  } catch {
+    return null;
+  }
+}
+async function renderCtx(o, out, agentId) {
+  const { ctx, session, tool } = o;
+  const agentLabel = session.kind === "agents" ? clean(o.flags.agent || (agentId && agentId === session.profile?.agent_id ? session.profile.agent_name : "") || agentId || "this agent") : clean(session.profile?.agent_name || "this agent");
+  const x = { realm: session.realm, now: ctx.now(), args: o.args, catalogue: o.catalogue, agentLabel, nonce: out.nonce };
+  if (out.exit === EXIT.ok && (tool.name === "list_spot_orders" || tool.name === "list_trades")) {
+    const m = await readTool(o, "list_spot_markets", {}, agentId);
+    if (m) {
+      try {
+        x.markets = marketsByMint(m);
+      } catch {}
+    }
+  }
+  return x;
+}
+function marketsByMint(result) {
+  const map = new Map;
+  const list = result.data?.instruments ?? [];
+  if (!Array.isArray(list))
+    return map;
+  for (const i of list) {
+    if (!i || typeof i !== "object" || Array.isArray(i))
+      continue;
+    const r = i;
+    const mint = typeof r.mint === "string" ? r.mint : "";
+    if (!mint || r.instrumentType === "perp")
+      continue;
+    map.set(mint, { symbol: cell(r.symbol).slice(0, 24) || mint.slice(0, 4), decimals: typeof r.decimals === "number" ? r.decimals : null });
+  }
+  return map;
+}
+async function afterHumanSuccess(o, result, agentId) {
+  const { ctx, tool } = o;
+  const data = result.data ?? {};
+  if (QUOTE_TOOLS.has(tool.name)) {
+    const inMint = typeof data.inputMint === "string" ? data.inputMint : null;
+    const inAtoms = typeof data.inAtoms === "string" && /^[0-9]{1,40}$/.test(data.inAtoms) ? BigInt(data.inAtoms) : null;
+    if (inMint && inAtoms !== null && inMint !== WSOL_MINT) {
+      const b = await readTool(o, "get_balances", {}, agentId);
+      const bd = b?.data ?? null;
+      const rows = Array.isArray(bd?.balances) ? bd.balances : null;
+      if (rows && bd?.partial !== true) {
+        const row = rows.find((r) => r?.mint === inMint);
+        const held = row && typeof row.atoms === "string" && /^[0-9]{1,40}$/.test(row.atoms) ? BigInt(row.atoms) : 0n;
+        if (held < inAtoms) {
+          const sym = cell(result.summary?.sell?.symbol ?? "") || "of this token";
+          const amt = row ? typeof row.amount === "string" ? cell(row.amount) : formatAtoms(row.atoms, typeof row.decimals === "number" ? row.decimals : null) : "0";
+          warn(ctx, `⚠ This agent holds ${amt || "less than that"} ${sym}, so an order for this quote would fail.`);
+        }
+      }
+    }
+    return;
+  }
+  if (!SPOT_WRITES.has(tool.name))
+    return;
+  const summary = result.summary ?? {};
+  const sig = typeof summary.txSignature === "string" ? summary.txSignature : typeof data.txSignature === "string" ? data.txSignature : null;
+  const status = typeof summary.status === "string" ? summary.status : data.status;
+  if (status === "failed") {
+    warn(ctx, `The order failed, so nothing was traded.${sig ? ` Details: darwin tx ${sig}` : ""}`);
+    return "failed";
+  }
+  if (sig && /^[1-9A-HJ-NP-Za-km-z]{64,90}$/.test(sig) && status !== "confirmed") {
+    const deadline = ctx.now() + CONFIRM_BUDGET_MS;
+    let landed = null;
+    for (let i = 0;i < CONFIRM_POLLS && !landed && ctx.now() + CONFIRM_INTERVAL_MS < deadline; i++) {
+      await ctx.sleep(CONFIRM_INTERVAL_MS);
+      const t = await readTool(o, "get_tx_status", { signature: sig }, agentId, deadline);
+      const st = t?.data?.status;
+      if (st === "confirmed" || st === "failed")
+        landed = st;
+    }
+    if (landed === "confirmed") {
+      const got = await receivedFor(o, data.orderId ?? summary.orderId, agentId, ctx.now() + EXTRA_READ_MS);
+      say(ctx, got ? `Confirmed on chain: received ${got}.` : "Confirmed on chain.");
+    } else if (landed === "failed") {
+      warn(ctx, `The transaction failed on chain, so nothing was traded. Details: darwin tx ${sig}`);
+      return "failed";
+    } else {
+      say(ctx, `Not confirmed yet. Check it with: darwin tx ${sig}`);
+    }
+  }
+  const g = await readTool(o, "get_grant", {}, agentId);
+  const left = g?.data?.today?.remaining;
+  if (left && typeof left.txCount === "number")
+    say(ctx, `Trades left today: ${left.txCount}`);
+}
+var CONFIRM_POLLS = 4;
+var CONFIRM_INTERVAL_MS = 2000;
+async function receivedFor(o, orderId, agentId, deadline) {
+  if (typeof orderId !== "string" || !orderId)
+    return null;
+  const [list, markets] = await Promise.all([readTool(o, "list_spot_orders", {}, agentId, deadline), readTool(o, "list_spot_markets", {}, agentId, deadline)]);
+  const rows = list?.data?.orders ?? [];
+  const row = Array.isArray(rows) ? rows.find((r) => r?.orderId === orderId) : undefined;
+  if (!row || typeof row.outputAtoms !== "string")
+    return null;
+  const m = markets ? marketsByMint(markets).get(String(row.outputMint)) : undefined;
+  const amt = m ? formatAtoms(row.outputAtoms, m.decimals) : "";
+  return amt ? `${amt} ${m.symbol}` : null;
+}
+function jsonFooter(o, out, result) {
   const { ctx, tool, args } = o;
   const summary = result?.summary ?? {};
   const data = result?.data ?? {};
-  const text = (v) => cell(unwrap4(v));
+  const text = (v) => cell(unwrap5(v));
   if (tool.name === "get_spot_quote") {
     const quoteId = typeof data.quoteId === "string" ? data.quoteId : typeof summary.quoteId === "string" ? summary.quoteId : null;
     const exp = typeof data.expiresAtMs === "number" ? data.expiresAtMs : null;
@@ -4793,14 +6229,39 @@ function afterSuccess(o, out, result) {
       warn(ctx, copy.quoteFooter(quoteId, secs, text(args.sell), typeof sellAmount === "string" ? text(sellAmount) : text(args.amount), text(args.for)));
     }
   }
-  if ((tool.name === "place_spot_order" || tool.name === "spot_order_now") && out.nonce) {
-    const agent = o.session.kind === "agents" ? o.flags.agent || o.session.profile?.default_agent || out.agentId || "this agent" : o.session.profile?.agent_name || "this agent";
-    const line = copy.spotSent(text(args.amount), text(args.sell), text(args.for), agent, out.nonce);
-    if (o.json)
-      warn(ctx, line);
-    else
-      say(ctx, line);
+  if (SPOT_WRITES.has(tool.name) && out.nonce) {
+    const orderId = typeof data.orderId === "string" ? data.orderId : typeof summary.orderId === "string" ? summary.orderId : null;
+    warn(ctx, copy.spotSent(text(args.amount), text(args.sell), text(args.for), agentFor(o, out), orderId ? cell(orderId) : null, out.nonce));
+  }
+}
+var agentFor = (o, out) => o.session.kind === "agents" ? o.flags.agent || o.session.profile?.default_agent || out.agentId || "this agent" : o.session.profile?.agent_name || "this agent";
+function dryRun(o) {
+  const { ctx, session, tool } = o;
+  const named = (o.flags.agent ?? ctx.env.DARWIN_AGENT ?? "").trim() || (session.kind === "agents" ? session.profile?.default_agent ?? "" : "");
+  if (session.kind === "agents" && tool.name !== "list_agents" && !named)
+    throw new CliError(EXIT.usage, copy.needAgent, "agent_required");
+  const agentId = named || null;
+  const preview = {
+    dryRun: true,
+    sent: false,
+    command: `darwin ${tool.cli.path.join(" ")}`,
+    tool: tool.name,
+    write: tool.write,
+    costsTx: tool.costsTx,
+    realm: session.realm,
+    agent: agentId,
+    arguments: o.args
+  };
+  if (o.json)
+    printJson(ctx, preview);
+  else {
+    say(ctx, `Dry run — nothing was sent. Would run: darwin ${tool.cli.path.join(" ")} on ${session.realm}${agentId ? ` for agent ${clean(agentId)}` : ""}`);
+    for (const [k, v] of Object.entries(o.args)) {
+      const flag = tool.cli.args[k]?.flag;
+      say(ctx, flag ? `  --${flag} ${cell(v)}` : tool.cli.positional.includes(k) ? `  <${clean(k)}> ${cell(v)}` : `  --field ${clean(k)}=${cell(v)}`);
+    }
   }
+  return EXIT.ok;
 }
 
 // src/mcp.ts
@@ -4820,7 +6281,29 @@ function printConfig(ctx, client, profile) {
 `;
   throw new CliError(EXIT.usage, "--print-config takes claude, cursor or gemini.", "usage");
 }
+var PREPARED_TOOL_DEFS = [
+  {
+    name: "check_prepared",
+    title: "What happened to a write",
+    description: "READ-ONLY. What happened to a write whose result was uncertain, by the preparedId the write returned: it went through, is still pending, failed, or was never sent. Never sends anything; call it instead of repeating a write.",
+    inputSchema: { type: "object", properties: { preparedId: { type: "string", pattern: "^prp_[0-9A-Za-z]{24}$" } }, required: ["preparedId"], additionalProperties: false },
+    annotations: { title: "What happened to a write", readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
+  },
+  {
+    name: "cancel_prepared",
+    title: "Make sure a write never runs",
+    description: "Make sure a prepared write that has not started never runs (by its preparedId). A write that already started can't be cancelled; the answer says what happened instead.",
+    inputSchema: { type: "object", properties: { preparedId: { type: "string", pattern: "^prp_[0-9A-Za-z]{24}$" } }, required: ["preparedId"], additionalProperties: false },
+    annotations: { title: "Make sure a write never runs", readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false }
+  }
+];
 function toolDefs(c) {
+  return [...catalogueToolDefs(c), ...PREPARED_TOOL_DEFS.map((d) => ({
+    ...d,
+    inputSchema: c.globals.agentParam ? { ...d.inputSchema, properties: { ...d.inputSchema.properties, agent: AGENT_PROP } } : d.inputSchema
+  }))];
+}
+function catalogueToolDefs(c) {
   return c.tools.map((t) => {
     let schema = t.inputSchema;
     if (c.globals.agentParam && t.name !== "list_agents") {
@@ -4925,6 +6408,20 @@ function toolResult(value, isError) {
   return { content: [{ type: "text", text: JSON.stringify(v) }], structuredContent: v, isError };
 }
 async function mcpCall(ctx, session, catalogue, params, refresh) {
+  if (params.name === "check_prepared" || params.name === "cancel_prepared") {
+    const raw2 = params.arguments ?? {};
+    if (!raw2 || typeof raw2 !== "object" || Array.isArray(raw2) || typeof raw2.preparedId !== "string")
+      return toolResult({ error: "invalid_arguments", detail: "preparedId is required." }, true);
+    let agentArg2;
+    if (raw2.agent !== undefined) {
+      if (typeof raw2.agent !== "string" || !raw2.agent.trim())
+        return toolResult({ error: "invalid_arguments", detail: "`agent` must be an agent id or name." }, true);
+      agentArg2 = raw2.agent.trim();
+    }
+    const agentId2 = await recoveryAgent(ctx, session, agentArg2);
+    const r = await preparedRead({ ctx, session, agentId: agentId2 }, raw2.preparedId, params.name === "cancel_prepared");
+    return toolResult(r.body, !r.ok);
+  }
   const tool = catalogue.tools.find((t) => t.name === params.name);
   if (!tool)
     return toolResult({ error: "unknown_tool", detail: "No such tool; list the tools again.", sent: false }, true);
@@ -4942,6 +6439,24 @@ async function mcpCall(ctx, session, catalogue, params, refresh) {
     delete args.agent;
   }
   const agentId = tool.name === "list_agents" ? null : await resolveAgent(ctx, session, agentArg);
+  if (isPreparedWrite(tool)) {
+    const r = await runPrepared({ ctx, session, catalogue, tool, args, agentId, json: true, dryRun: false, quietForMcp: true, recovery: recoveryFlags(session, agentId) });
+    if (r.kind === "done") {
+      if (r.exit === EXIT.ok)
+        return toolResult(r.doc, false);
+      if (r.exit === EXIT.uncertain && r.preparedId) {
+        return toolResult({
+          ...r.doc,
+          error: "outcome_unknown",
+          sent: "maybe",
+          preparedId: r.preparedId,
+          ...agentId ? { agent: agentId } : {},
+          detail: `Darwin may have received this write, but its result didn't come back. Do NOT call this tool again — call check_prepared with preparedId "${r.preparedId}"${agentId ? ` and agent "${agentId}"` : ""} to see what happened.`
+        }, true);
+      }
+      return toolResult(r.doc, true);
+    }
+  }
   const out = await callTool({ ctx, session, catalogue, tool, args, flags: { json: true, dryRun: false, quiet: true }, onStaleCatalogue: refresh }, agentId);
   const result = out.body?.result ?? null;
   if (out.exit === EXIT.uncertain) {
@@ -4952,219 +6467,58 @@ async function mcpCall(ctx, session, catalogue, params, refresh) {
   return toolResult({ ...result, ...out.nonce ? { nonce: out.nonce } : {} }, out.exit !== EXIT.ok);
 }
 
-// src/market.ts
+// src/local-flags.ts
 init_context();
-init_http();
-init_realms();
-var MARKET_STATUS_PATH = "/api/agent/v1/market-status/us-equities";
-var MARKET_STATUS_TOOL = "get_us_market_status";
-var MARKET_STATUS_HELP = "Is the US stock market open right now? Shows the session, why it's closed (weekend, holiday, early close), the next open and close in your local time, and whether Darwin accepts agent stock orders now. Tokenized stocks trade 24/7, but liquidity is much lower when the US market is closed. No API key needed.";
-function localTime(iso) {
-  if (typeof iso !== "string")
-    return null;
-  const d = new Date(iso);
-  if (Number.isNaN(d.getTime()))
-    return null;
-  return d.toLocaleString("en-US", { weekday: "short", month: "short", day: "numeric", hour: "numeric", minute: "2-digit", timeZoneName: "short" });
-}
-var SESSION = { pre_market: "pre-market", regular: "open (regular session)", after_hours: "after hours", closed: "closed" };
-async function cmdMarketStatus(ctx, p) {
-  onlyFlags(p, ["beta", "prod", "json", "format", "quiet", "no-color", "help"], "market-status");
-  if (p.positionals.length > 1)
-    throw new CliError(EXIT.usage, "`darwin market-status` takes no arguments.", "usage");
-  let realm = "darwin.finance";
-  if (has(p, "beta"))
-    realm = "beta.darwin.finance";
-  else if (!has(p, "prod") && ctx.env.DARWIN_REALM) {
-    const r = parseRealm(ctx.env.DARWIN_REALM);
-    if (!r)
-      throw new CliError(EXIT.usage, "DARWIN_REALM must be prod or beta.", "usage");
-    realm = r;
-  }
-  let res;
-  try {
-    res = await request(ctx, realm, "GET", MARKET_STATUS_PATH, { timeoutMs: 15000 });
-  } catch (e) {
-    if (e instanceof NetworkError)
-      throw new CliError(EXIT.network, e.message, "network_error");
-    throw e;
-  }
-  const s = res.json;
-  if (res.status === 429)
-    throw new CliError(EXIT.rateLimited, "Too many requests right now; try again in a minute.", "rate_limited");
-  if (res.status !== 200 || !s || typeof s.open !== "boolean")
-    throw new CliError(EXIT.unexpected, `${realm} didn't answer the market status (HTTP ${res.status}).`, "bad_response");
-  if (wantsJson(ctx, { json: has(p, "json"), format: one(p, "format") })) {
-    printJson(ctx, s);
-    return EXIT.ok;
-  }
-  const session = SESSION[String(s.session)] ?? cell(s.session);
-  const why = typeof s.reason === "string" && s.reason ? ` (${cell(s.reason).replace(/_/g, " ")}${typeof s.holidayName === "string" && s.holidayName ? `: ${cell(s.holidayName)}` : ""})` : "";
-  say(ctx, `US stock market: ${session}${why}${s.earlyClose === true ? " — early close today" : ""}`);
-  const line = (label, v) => {
-    const t = localTime(v);
-    if (t)
-      say(ctx, `${label}: ${t}`);
-  };
-  line("Session changes", s.sessionEndsAt);
-  line("Next open", s.nextOpenAt);
-  line("Next close", s.nextCloseAt);
-  const a = s.agentStockOrders ?? {};
-  if (a.accepted === true)
-    say(ctx, `Darwin agent stock orders: accepted${localTime(a.closesAt) ? ` until ${localTime(a.closesAt)}` : ""}`);
-  else if (a.accepted === false)
-    say(ctx, `Darwin agent stock orders: not accepted now${localTime(a.opensAt) ? `; next accepted ${localTime(a.opensAt)}` : ""}`);
-  say(ctx, "Tokenized stocks trade 24/7, but liquidity is much lower when the US market is closed.");
-  return EXIT.ok;
-}
-
-// src/help.ts
-init_redact();
-init_copy();
-var LOCAL_DESCRIPTION = { [MARKET_STATUS_TOOL]: MARKET_STATUS_HELP };
-var describe = (t) => LOCAL_DESCRIPTION[t.name] ?? clean(t.description);
-var STATIC_HELP = {
-  login: {
-    usage: "darwin login [--beta] [--client-name <name>] [--reconnect] [--start | --wait | --with-key | --key-file <file> | --from-skill] [--profile <name>] [--store keychain|file]",
-    summary: "Connect this terminal to a Darwin agent and keep its API key in your system's secret store.",
-    flags: {
-      beta: "Use beta.darwin.finance instead of darwin.finance.",
-      "client-name": `What Darwin shows your owner as the app asking (never "Darwin"). Default: the coding agent you're in, else "Command line".`,
-      reconnect: "Get a new API key for an agent you already have, instead of creating a new agent.",
-      start: "Start pairing and print the link and code, then exit (for tools whose calls time out).",
-      wait: "Wait for a pairing started with --start, and save the key.",
-      "with-key": "Import an API key from stdin, or paste it at a hidden prompt.",
-      "key-file": "Import the key file downloaded from the agent's Manage tab (add --delete-file to delete it after).",
-      "from-skill": "Import the key the official Darwin skill (darwin.py) saved (add --delete-skill-copy to remove its copy).",
-      "agent-id": "With --from-skill: which saved key, when there are several.",
-      profile: "Profile name for this key (default: from the agent's name).",
-      store: "keychain (default) or file — a plain file only your user can read.",
-      "no-browser": "Don't open the link in a browser."
-    }
-  },
-  logout: {
-    usage: "darwin logout [--profile <name> | --all] [--revoke [--force-local]]",
-    summary: "Remove the API key from this computer. With --revoke, Darwin revokes the key first.",
-    flags: { revoke: "Ask Darwin to revoke this key everywhere, then remove it here.", all: "Every profile.", "force-local": "With --revoke: remove the local copy even if Darwin couldn't be reached." }
-  },
-  whoami: { usage: "darwin whoami [--profile <name>]", summary: "Which agent, site and API key this terminal uses (never any key characters).", flags: {} },
-  profile: {
-    usage: "darwin profile list | use <name> | rename <old> <new> | remove <name> | set-agent <name or id>",
-    summary: "Manage profiles (one per API key). set-agent: the default agent for a key that trades for all your agents.",
-    flags: {}
-  },
-  doctor: { usage: "darwin doctor", summary: "Check the install, the secret store, your profile and both Darwin sites.", flags: {} },
-  api: { usage: "darwin api GET /api/agent/<path>", summary: "Read any agent API endpoint directly (GET only).", flags: {} },
-  mcp: {
-    usage: "darwin mcp [--profile <name>] | darwin mcp --print-config claude|cursor|gemini",
-    summary: "Run Darwin as a local MCP server (stdio) for a desktop AI client, with the API key kept in your secret store.",
-    flags: { "print-config": "Print the registration for a client, pointing at this installed copy." }
-  },
-  help: { usage: "darwin help [command] [--json]", summary: "This help. --json lists every command with its flags.", flags: {} },
-  version: { usage: "darwin version", summary: "Print the Darwin CLI version.", flags: {} }
-};
-var GLOBAL_HELP = {
-  json: "Print JSON (the default when output isn't a terminal).",
-  profile: "Use this profile.",
-  agent: "For an API key that trades for all your agents: which agent (name or id).",
-  "dry-run": "Show what a command would send, and send nothing.",
-  field: "For API fields without their own flag: --field name=value (repeatable).",
-  quiet: "Less output."
+var PARAMS = {
+  get_indicators: [
+    { prop: "timeframe", flag: "timeframe", required: true, description: "Candle size: 1m, 5m, 15m, 30m, 1h, 4h, 6h, 12h or 1d." },
+    { prop: "indicators", flag: "indicators", required: true, description: "Comma-separated, e.g. rsi:14,macd:12:26:9." },
+    { prop: "instrumentId", flag: "instrument-id", description: "The market, as `darwin markets` lists it (spot:solana:<mint>). Give this or --asset." },
+    { prop: "asset", flag: "asset", description: "A Darwin asset id instead of --instrument-id." },
+    { prop: "bars", flag: "bars", type: "number", description: "How many bars (default 50)." },
+    { prop: "includeFormingBar", flag: "include-forming-bar", type: "boolean", description: "Also show the bar still forming." }
+  ],
+  list_spot_orders: [
+    { prop: "limit", flag: "limit", type: "number", description: "How many (1–200, default 50)." },
+    { prop: "cursor", flag: "cursor", description: "The next page, from the line a previous page printed." }
+  ],
+  list_trades: [
+    { prop: "kind", flag: "kind", description: "spot, perp or all (default all)." },
+    { prop: "since", flag: "since", type: "number", description: "Only trades settled after this time (epoch milliseconds)." },
+    { prop: "limit", flag: "limit", type: "number", description: "How many (at most 200)." },
+    { prop: "cursor", flag: "cursor", description: "The next page, from the line a previous page printed." }
+  ],
+  get_pnl: [{ prop: "period", flag: "period", description: "ytd (default), 30d, 90d, all, or a tax year such as 2025." }],
+  list_lots: [
+    { prop: "sort", flag: "sort", description: "unrealized_asc, acquired_asc or basis_desc." },
+    { prop: "mint", flag: "mint", description: "Only this token's lots." },
+    { prop: "instrumentId", flag: "instrument-id", description: "Only this market's lots." }
+  ],
+  list_spot_markets: [{ prop: "type", flag: "type", description: "spot or perp (default both)." }]
 };
-function toolFlags(t) {
-  const req = new Set((t.inputSchema.required ?? []).filter((r) => r !== t.idempotency?.field));
-  return Object.entries(t.cli.args).map(([prop, a]) => {
-    const p = t.inputSchema.properties?.[prop] ?? {};
-    const type = Array.isArray(p.type) ? p.type.join("|") : p.type ?? "string";
-    return { flag: `--${a.flag}`, property: prop, required: req.has(prop), type, description: clean(p.description ?? "") };
-  });
-}
-function usageOf(t) {
-  const pos = t.cli.positional.map((x) => `<${x}>`);
-  const flags = toolFlags(t).map((f) => f.required ? `${f.flag} <${f.property}>` : `[${f.flag} <${f.property}>]`);
-  const open = t.inputSchema.additionalProperties !== false && t.inputSchema.additionalProperties !== undefined;
-  return ["darwin", ...t.cli.path, ...pos, ...flags, ...open ? ["[--field name=value]"] : []].join(" ");
-}
-function helpJson(c) {
-  return {
-    version: VERSION,
-    realm: c.realm,
-    credential: c.credential,
-    catalogVersion: c.catalogVersion,
-    static: Object.entries(STATIC_HELP).map(([command, h]) => ({ command, usage: h.usage, summary: h.summary, flags: h.flags })),
-    globalFlags: GLOBAL_HELP,
-    commands: c.tools.map((t) => ({
-      command: t.cli.path.join(" "),
-      aliases: t.cli.aliases.map((a) => a.join(" ")),
-      tool: t.name,
-      title: clean(t.title),
-      write: t.write,
-      costsTx: t.costsTx,
-      usage: usageOf(t),
-      positional: t.cli.positional,
-      flags: toolFlags(t),
-      description: describe(t),
-      ...t.deprecated ? { deprecated: t.deprecated } : {}
-    }))
-  };
-}
-function printOverview(ctx, c, json) {
-  if (json) {
-    printJson(ctx, helpJson(c));
-    return;
-  }
-  say(ctx, `Darwin CLI ${VERSION} — trade and check your Darwin agent from a terminal.`);
-  say(ctx, "");
-  say(ctx, "Darwin commands (from Darwin's catalogue; W = changes something):");
-  const width = Math.max(...c.tools.map((t) => t.cli.path.join(" ").length)) + 2;
-  for (const t of c.tools)
-    say(ctx, `  ${t.cli.path.join(" ").padEnd(width)}${t.write ? "W " : "  "}${clean(t.title)}`);
-  say(ctx, "");
-  say(ctx, "This CLI's own commands:");
-  for (const [k, h] of Object.entries(STATIC_HELP))
-    say(ctx, `  ${k.padEnd(width)}  ${h.summary}`);
-  say(ctx, "");
-  say(ctx, "Global flags: --json  --profile <name>  --agent <name or id>  --dry-run  --field name=value");
-  say(ctx, "`darwin <command> --help` for a command's flags; `darwin help --json` for all of it.");
-  say(ctx, "");
-  for (const l of clean(c.instructions).split(`
-`))
-    say(ctx, l);
-}
-function printCommandHelp(ctx, t, json) {
-  if (json) {
-    printJson(ctx, helpJson({ tools: [t] }).commands[0]);
-    return;
+function withLocalFlags(tool) {
+  const extra = PARAMS[tool.name];
+  if (!extra || tool.write)
+    return tool;
+  const props = { ...tool.inputSchema.properties ?? {} };
+  const args = { ...tool.cli.args };
+  const required = [...tool.inputSchema.required ?? []];
+  const taken = new Set(Object.values(args).map((a) => a.flag));
+  for (const p of extra) {
+    if (props[p.prop] || taken.has(p.flag))
+      continue;
+    props[p.prop] = { type: p.type ?? "string", description: p.description };
+    args[p.prop] = { flag: p.flag };
+    taken.add(p.flag);
+    if (p.required && !required.includes(p.prop))
+      required.push(p.prop);
   }
-  say(ctx, `${usageOf(t)}`);
-  say(ctx, "");
-  say(ctx, `${clean(t.title)}${t.write ? " — changes something" : ""}${t.costsTx ? "; counts against today's transaction budget" : ""}.`);
-  say(ctx, describe(t));
-  const flags = toolFlags(t);
-  if (flags.length || t.cli.positional.length)
-    say(ctx, "");
-  for (const p of t.cli.positional)
-    say(ctx, `  <${p}>  ${clean(t.inputSchema.properties?.[p]?.description ?? "")}`);
-  for (const f of flags)
-    say(ctx, `  ${f.flag} <${f.type}>${f.required ? " (required)" : ""}  ${f.description}`);
-  if (t.write)
-    say(ctx, `
-There is no confirmation prompt: the command runs when you press enter. Use --dry-run to see what it would send.`);
-  if (t.deprecated)
-    say(ctx, `
-Deprecated since ${t.deprecated.since}; removed after ${t.deprecated.removeAfter}.`);
+  return { ...tool, cli: { ...tool.cli, args }, inputSchema: { ...tool.inputSchema, properties: props, required } };
 }
-function printStaticHelp(ctx, name, json) {
-  const h = STATIC_HELP[name];
-  if (json) {
-    printJson(ctx, { command: name, ...h });
-    return;
+function checkLocalArguments(tool, args) {
+  if (tool.name === "get_indicators" && PARAMS.get_indicators && args.instrumentId === undefined === (args.asset === undefined)) {
+    throw new CliError(EXIT.usage, "`darwin indicators` needs exactly one of --instrument-id (from `darwin markets`) or --asset. See `darwin indicators --help`.", "usage");
   }
-  say(ctx, h.usage);
-  say(ctx, "");
-  say(ctx, h.summary);
-  for (const [f, d] of Object.entries(h.flags))
-    say(ctx, `  --${f}  ${d}`);
 }
 
 // src/main.ts
@@ -5222,10 +6576,10 @@ async function dispatch(p, ctx) {
       printStaticHelp(ctx, rest[0], json);
       return EXIT.ok;
     }
-    const t = resolve(c, rest)?.tool;
+    const t = resolve(c, rest, !json)?.tool;
     if (!t)
       throw new CliError(EXIT.usage, `No command "${rest.join(" ").slice(0, 60)}". \`darwin help\` lists them.`, "unknown_command");
-    printCommandHelp(ctx, t, json);
+    printCommandHelp(ctx, t, json, c);
     return EXIT.ok;
   }
   if (STATIC_HELP[first] && has(p, "help")) {
@@ -5247,6 +6601,10 @@ async function dispatch(p, ctx) {
       return cmdApi(ctx, p);
     case "mcp":
       return cmdMcp(ctx, p);
+    case "retry":
+      return cmdCheckPrepared(ctx, p, false);
+    case "cancel":
+      return cmdCheckPrepared(ctx, p, true);
   }
   if (first === "market-status" && !has(p, "help"))
     return cmdMarketStatus(ctx, p);
@@ -5254,20 +6612,20 @@ async function dispatch(p, ctx) {
     throw new CliError(EXIT.usage, `\`darwin ${first}\` isn't in this version of the Darwin CLI.`, "unknown_command");
   if (has(p, "help")) {
     const c = await catalogueForHelp(ctx, p);
-    const t = resolve(c, p.positionals)?.tool;
+    const t = resolve(c, p.positionals, !json)?.tool;
     if (!t)
       throw new CliError(EXIT.usage, `No command "${p.positionals.join(" ").slice(0, 60)}". \`darwin help\` lists them.`, "unknown_command");
-    printCommandHelp(ctx, t, json);
+    printCommandHelp(ctx, t, json, c);
     return EXIT.ok;
   }
   return runCatalogueCommand(ctx, p, json);
 }
-function resolve(c, words) {
+function resolve(c, words2, localFlags = true) {
   const idx = commandIndex(c);
-  for (let n = Math.min(3, words.length);n >= 1; n--) {
-    const t = idx.get(words.slice(0, n).join(" "));
+  for (let n = Math.min(3, words2.length);n >= 1; n--) {
+    const t = idx.get(words2.slice(0, n).join(" "));
     if (t)
-      return { tool: t, rest: words.slice(n) };
+      return { tool: localFlags ? withLocalFlags(t) : t, rest: words2.slice(n) };
   }
   return null;
 }
@@ -5286,10 +6644,10 @@ async function catalogueForHelp(ctx, p) {
 }
 async function runCatalogueCommand(ctx, p, json) {
   const session = openSession(ctx, { profile: one(p, "profile") });
-  const dryRun = has(p, "dry-run");
-  let { catalogue } = await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: dryRun ? "offline" : "never" });
+  const dryRun2 = has(p, "dry-run");
+  let { catalogue } = await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: dryRun2 ? "offline" : "never" });
   let hit = resolve(catalogue, p.positionals);
-  if (!hit && !dryRun) {
+  if (!hit) {
     catalogue = (await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: "force" })).catalogue;
     hit = resolve(catalogue, p.positionals);
   }
@@ -5298,6 +6656,7 @@ async function runCatalogueCommand(ctx, p, json) {
   if (compareVersions(VERSION, catalogue.minCli) < 0)
     throw new CliError(EXIT.upgrade, copy.updateRequired(catalogue.minCli), "cli_upgrade_required");
   const args = buildArguments(hit.tool, hit.rest, p, GLOBALS);
+  checkLocalArguments(hit.tool, args);
   if (hit.tool.deprecated)
     warn(ctx, `\`darwin ${hit.tool.cli.path.join(" ")}\` is deprecated and goes away after ${hit.tool.deprecated.removeAfter}.`);
   const code = await runTool({
@@ -5307,7 +6666,7 @@ async function runCatalogueCommand(ctx, p, json) {
     tool: hit.tool,
     args,
     json,
-    flags: { json, dryRun, agent: one(p, "agent"), quiet: has(p, "quiet") },
+    flags: { json, dryRun: dryRun2, agent: one(p, "agent"), quiet: has(p, "quiet") },
     onStaleCatalogue: async () => {
       await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: "force" });
     },