@darwin.finance/cli 1.0.1 → 1.1.0

package/README.md

@@ -7,10 +7,13 @@ your computer's secret store, and turns every agent action into a command — fo
 
 Chat apps like Claude or ChatGPT don't use the CLI — they connect to Darwin directly instead.
 
-> **Not on npm yet.** `@darwin.finance/cli` has not been published. Until it is, install from source
-> (below) for testing only.
+## Install
 
-## Install (from source, for testing)
+```sh
+npm i -g @darwin.finance/cli
+```
+
+## Install from source (for testing)
 
 Requires Node.js 20+ and [Bun](https://bun.sh) to build.
 
@@ -23,7 +26,7 @@ npm i -g .
 darwin --version
 ```
 
-Once published, the install line is `npm i -g @darwin.finance/cli`. Always install it — never run it
+Always install it — never run it
 through `npx`: the CLI refuses to read a saved key when it runs from npx or from a project's
 `node_modules`, because a project you are merely working in could substitute its own copy.
 
@@ -43,7 +46,30 @@ What each command does is documented by Darwin itself: the command list is fetch
 logged in to (`darwin help`, `darwin <command> --help`, `darwin help --json`), so new commands appear
 without a new release of this program. The API reference: <https://darwin.finance/agents/docs>.
 
-`darwin mcp` runs the same commands as a local MCP server for desktop AI clients;
+### Trading (1.1)
+
+```sh
+darwin quote --sell USDC --amount 5 --for SOL      # then: darwin order --quote <id> …
+darwin instant --sell SOL --amount 0.1 --for USDC --max-slippage-bps 50
+darwin perps collateral deposit --amount 5         # USDC: agent wallet → its own perps account
+darwin perps order SOL --side long --size 0.01 --type market
+darwin perps protect SOL --sl 120 --tp 160 [--percent 50]   # or --cancel tp|sl|both
+darwin perps close SOL [--size 0.01]
+darwin perps collateral withdraw --amount 5        # back to the agent's own wallet
+```
+
+On a site that supports it, every order is two steps behind the scenes: Darwin first **checks** it
+(the agent can trade, perps is set up, there is free collateral, the position or quote is there) and
+stores exactly what it will send — pinning a close's size and side, and which TP/SL a change
+replaces — then sends it **once**. After sending, the CLI waits a few seconds (reading only) and
+says whether it went through. `--dry-run` runs Darwin's real checks and sends nothing.
+
+If an order's answer is lost (exit 6), **don't run the command again**: run the `darwin retry <id>`
+it printed. It only reads what happened — went through, still pending, failed or never sent — and
+never sends anything. `darwin cancel <id>` makes sure an order that hasn't started never runs.
+
+`darwin mcp` runs the same commands as a local MCP server for desktop AI clients (writes go through
+the same check-then-send; `check_prepared` is the read-only recovery tool, `cancel_prepared` the cancel);
 `darwin mcp --print-config claude|cursor|gemini` prints the registration.
 
 ## Security model
@@ -59,9 +85,10 @@ without a new release of this program. The API reference: <https://darwin.financ
 - **No more than the key.** Every command is an ordinary agent API call under the key's own limits;
   Darwin signs server-side under the agent's policy. Nothing here can withdraw or move funds between
   your accounts — no such command exists.
-- **No silent retries, no prompts.** A write is never re-sent. If its answer is lost, the CLI exits 6
-  and says to check `darwin orders` rather than run it again. There is no `[y/N]` prompt; use
-  `--dry-run` to see what a command would send. Writes and reads are distinct commands, so your
+- **No silent retries, no prompts.** A write is never re-sent. If its answer is lost, the CLI reads
+  what happened (never re-sends), and if that is still unknown exits 6 with the `darwin retry <id>`
+  to run later (on a site without checked orders: check `darwin orders`). There is no `[y/N]`
+  prompt; use `--dry-run` to have Darwin check a command without sending anything. Writes and reads are distinct commands, so your
   agent harness can allow reads and ask before writes.
 - **Server text is data.** Text a third party can influence (a token's name, a venue's message) is
   stripped of terminal escapes, control and bidi characters before it reaches a terminal. In JSON
@@ -79,7 +106,7 @@ without a new release of this program. The API reference: <https://darwin.financ
 | 3 | no key / key refused |
 | 4 | refused by Darwin |
 | 5 | rate limited |
-| 6 | a write's outcome is uncertain — don't re-run; check `darwin orders` |
+| 6 | a write's outcome is uncertain — don't re-run; `darwin retry <id>` (or `darwin orders`) |
 | 7 | this CLI is too old |
 | 8 | network unreachable before sending |
 | 10 | the agent is paused |

package/dist/darwin.js

@@ -58,6 +58,7 @@ Waiting for you to approve… (the code expires in ${minutes} minutes)`,
     needAgent: "This API key trades for all your active agents. Name one with --agent <name or id>, or set a default: `darwin profile set-agent <name>`. Your agents: `darwin agents`.",
     mcpPageKey: "This API key is from the MCP page: it reads your whole account and can't run agent commands. Log in with an agent's API key.",
     uncertainWrite: "Darwin may have received this order, but the answer didn't arrive. Don't run the command again — check `darwin orders` to see whether it went through.",
+    uncertainWritePrepared: "Darwin may have received this order, but its result didn't come back.",
     paused: "This agent is paused, so it can't trade. Reads still work. Only you can resume it, on the agent's Darwin page.",
     quoteFooter: (quoteId, seconds, sell, amount, forTok) => `Quote ${quoteId} expires in ${seconds}s. To place it: darwin order --quote ${quoteId} --sell ${sell} --amount ${amount} --for ${forTok}`,
     updateAvailable: (latest, current) => `Darwin CLI ${latest} is available (you have ${current}). Update: ${INSTALL_LINE}`,
@@ -249,7 +250,7 @@ function compareVersions(a, b) {
       return x[i] < y[i] ? -1 : 1;
   return 0;
 }
-var VERSION = "1.0.1";
+var VERSION = "1.1.0";
 
 // src/http.ts
 function vendor(env) {
@@ -469,6 +470,7 @@ var init_config = __esm(() => {
 var exports_agents = {};
 __export(exports_agents, {
   resolveAgent: () => resolveAgent,
+  recoveryAgent: () => recoveryAgent,
   listAgents: () => listAgents
 });
 import { createHash } from "node:crypto";
@@ -538,6 +540,16 @@ async function resolveAgent(ctx, s, flag) {
   }
   throw new CliError(EXIT.usage, "No active agent of yours matches that (a paused, stopped or archived agent isn't listed). Your agents: `darwin agents`.", "agent_not_found", { candidates: agents2.map((a) => ({ id: a.id, name: a.name })) });
 }
+async function recoveryAgent(ctx, s, flag) {
+  const raw = ((flag ?? ctx.env.DARWIN_AGENT ?? "").trim() || (s.kind === "agents" ? s.profile?.default_agent ?? "" : "")).trim();
+  try {
+    return await resolveAgent(ctx, s, flag);
+  } catch (e) {
+    if (s.kind === "agents" && e instanceof CliError && e.code === "agent_not_found" && /^agr_[A-Za-z0-9_-]{1,64}$/.test(raw) && isAgentId(raw))
+      return raw;
+    throw e;
+  }
+}
 var BASE582, unwrap = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted) : typeof v === "string" ? v : "";
 var init_agents = __esm(() => {
   init_context();
@@ -553,7 +565,7 @@ var init_agents = __esm(() => {
 import { spawn as spawn2 } from "node:child_process";
 import { existsSync } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { join as join10 } from "node:path";
+import { join as join9 } from "node:path";
 import { createInterface } from "node:readline";
 import { fileURLToPath } from "node:url";
 
@@ -586,7 +598,7 @@ function osKeychain(platform) {
 }
 
 // src/main.ts
-import { join as join9 } from "node:path";
+import { join as join8 } from "node:path";
 
 // src/args.ts
 init_context();
@@ -3629,6 +3641,16 @@ var STATIC_HELP = {
     summary: "Run Darwin as a local MCP server (stdio) for a desktop AI client, with the API key kept in your secret store.",
     flags: { "print-config": "Print the registration for a client, pointing at this installed copy." }
   },
+  retry: {
+    usage: "darwin retry <id> [--agent <name or id>]",
+    summary: "What happened to an order whose result didn't come back: it went through, is still pending, failed, or was never sent. It only reads — it never sends anything again.",
+    flags: {}
+  },
+  cancel: {
+    usage: "darwin cancel <id> [--agent <name or id>]",
+    summary: "Make sure an order that hasn't started never runs. One that already started can't be cancelled; it says what happened instead.",
+    flags: {}
+  },
   help: { usage: "darwin help [command] [--json]", summary: "This help. --json lists every command with its flags.", flags: {} },
   version: { usage: "darwin version", summary: "Print the Darwin CLI version.", flags: {} }
 };
@@ -3636,7 +3658,7 @@ var GLOBAL_HELP = {
   json: "Print JSON (the default when output isn't a terminal).",
   profile: "Use this profile.",
   agent: "For an API key that trades for all your agents: which agent (name or id).",
-  "dry-run": "Show what a command would send, and send nothing.",
+  "dry-run": "Have Darwin check what a command would do — the real checks — and send nothing.",
   field: "For API fields without their own flag: --field name=value (repeatable).",
   quiet: "Less output."
 };
@@ -3704,7 +3726,7 @@ function terminalGuide(kind) {
   return [
     "Spot trades take two steps: `darwin quote --sell <token> --amount <n> --for <token>`, then `darwin order --quote <id>` with the same sell, amount and for, within 30 seconds. `darwin instant` quotes and executes in one step.",
     "Before your first order, `darwin grant` shows your limits and today's remaining budget. `darwin docs` is the full API reference.",
-    "If an order's result is uncertain (exit code 6), don't run it again — check `darwin orders` to see whether it went through.",
+    "If an order's result is uncertain (exit code 6), don't run it again — run the `darwin retry <id>` it printed to see what happened (on a site without it, check `darwin orders`).",
     kind === "agents" ? "This API key trades for all your active agents: name one with --agent <name or id> (`darwin agents` lists them). `darwin pause --agent <name>` stops one; only you can resume it, on Darwin." : "`darwin pause` stops this agent trading; only you can resume it, on Darwin."
   ];
 }
@@ -3726,7 +3748,7 @@ function printCommandHelp(ctx, t, json, c = null) {
     say(ctx, `  ${f.flag} <${f.type}>${f.required ? " (required)" : ""}  ${forTerminal(f.description, c)}`);
   if (t.write)
     say(ctx, `
-There is no confirmation prompt: the command runs when you press enter. Use --dry-run to see what it would send.`);
+There is no confirmation prompt: the command runs when you press enter. Use --dry-run to have Darwin check it without sending anything.`);
   if (t.deprecated)
     say(ctx, `
 Deprecated since ${t.deprecated.since}; removed after ${t.deprecated.removeAfter}.`);
@@ -4333,9 +4355,364 @@ function openSession(ctx, flags) {
 
 // src/commands.ts
 init_agents();
+
+// src/prepared.ts
+init_context();
+init_http();
+init_redact();
+init_copy();
+var PREPARED_ID = /^prp_[0-9A-Za-z]{24}$/;
+var SIG = /^[1-9A-HJ-NP-Za-km-z]{64,90}$/;
+function isPreparedWrite(tool) {
+  return tool.write && tool.name !== "pause_agent";
+}
+var VERDICTS = new Set(["sent", "landed", "pending", "failed", "refused", "replayed", "uncertain", "never_sent", "not_started"]);
+var LAND_WAIT_MS = 8000;
+var POLL_MS = 2000;
+var obj2 = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
+var unwrap2 = (v) => v && typeof v === "object" && !Array.isArray(v) && ("untrusted" in v) ? v.untrusted : v;
+function cliLines(body, key = "lines") {
+  const l = obj2(obj2(body).cli)[key];
+  return Array.isArray(l) ? l.filter((x) => typeof x === "string").map((x) => clean(x).slice(0, 600)).filter(Boolean).slice(0, 12) : [];
+}
+function verdictOf(body) {
+  const v = obj2(body).verdict;
+  return typeof v === "string" && VERDICTS.has(v) ? v : null;
+}
+function refusalCode(body) {
+  const r = obj2(obj2(body).result);
+  const d = obj2(r.data);
+  const or = obj2(obj2(obj2(body).outcome).result);
+  const od = obj2(or.data);
+  for (const c of [r.error, d.refusal, d.error, or.error, od.refusal, od.error, obj2(body).error]) {
+    const s = unwrap2(c);
+    if (typeof s === "string" && /^[a-z][a-z0-9_]{0,63}$/.test(s))
+      return s;
+  }
+  return "";
+}
+function resultStatus(body) {
+  for (const r of [obj2(obj2(body).result), obj2(obj2(obj2(body).outcome).result)])
+    if (typeof r.status === "number")
+      return r.status;
+  return null;
+}
+function exitForVerdict(v, body) {
+  switch (v) {
+    case "sent":
+    case "landed":
+    case "replayed":
+      return EXIT.ok;
+    case "refused":
+    case "failed":
+    case "never_sent": {
+      const code = refusalCode(body);
+      if (code === "grant_paused")
+        return EXIT.paused;
+      if (code === "rate_limited" || resultStatus(body) === 429)
+        return EXIT.rateLimited;
+      return EXIT.refused;
+    }
+    default:
+      return EXIT.uncertain;
+  }
+}
+function orderIdOf(body) {
+  const r = obj2(obj2(body).result);
+  const data = obj2(r.data);
+  const summary = obj2(r.summary);
+  const id = unwrap2(data.orderId) ?? unwrap2(summary.orderId);
+  if (typeof id === "string" && /^[A-Za-z0-9_-]{1,80}$/.test(id))
+    return id;
+  const sig = unwrap2(data.txSignature) ?? unwrap2(summary.txSignature) ?? unwrap2(data.signature);
+  if (typeof sig === "string" && SIG.test(sig))
+    return `${sig.slice(0, 4)}…${sig.slice(-4)}`;
+  return null;
+}
+function retryCommand(preparedId, ctxFlags = [], verb = "retry") {
+  return ["darwin", verb, preparedId, ...ctxFlags].join(" ");
+}
+var SAFE = /^[A-Za-z0-9_-]{1,64}$/;
+function recoveryFlags(session, agentId) {
+  const out = [];
+  if (session.profile && SAFE.test(session.profileName))
+    out.push("--profile", session.profileName);
+  if (agentId && SAFE.test(agentId))
+    out.push("--agent", agentId);
+  return out;
+}
+async function post(o, path, body, timeoutMs) {
+  return request(o.ctx, o.session.realm, "POST", path, { key: o.session.key, agent: o.agentId ?? undefined, body, timeoutMs });
+}
+function plainRefusal(res, catalogue, command, realm) {
+  const err = typeof obj2(res.json).error === "string" ? String(obj2(res.json).error) : "";
+  if (res.status === 401)
+    return { exit: EXIT.auth, message: "Darwin refused this API key (or the agent it named). It may have been revoked or the agent paused; run `darwin whoami`, or ask the owner. Nothing was done." };
+  if (res.status === 426) {
+    const min = typeof obj2(res.json).minCli === "string" && /^\d+\.\d+\.\d+$/.test(String(obj2(res.json).minCli)) ? String(obj2(res.json).minCli) : catalogue.minCli;
+    return { exit: EXIT.upgrade, message: copy.updateRequired(min) };
+  }
+  if (res.status === 429)
+    return { exit: EXIT.rateLimited, message: "Too many requests with this API key right now. Wait a minute and try again. Nothing was done." };
+  if (res.status === 404 && err === "cli_unavailable")
+    return { exit: EXIT.refused, message: "The Darwin CLI isn't available on this site yet. Nothing was done." };
+  if (res.status === 404 && err === "unknown_tool")
+    return { exit: EXIT.usage, message: `\`${command}\` isn't available on ${realm} right now. Nothing was done. Run \`darwin help\` for the current list.` };
+  if (res.status === 400 && err === "invalid_request")
+    return { exit: EXIT.usage, message: "Darwin couldn't read that request. Nothing was done." };
+  return null;
+}
+async function runPrepared(o) {
+  const { tool } = o;
+  const path = `/api/agent/v1/tools/call/${encodeURIComponent(tool.name)}/prepare`;
+  let res;
+  try {
+    res = await post(o, path, { arguments: o.args, ...o.dryRun ? { dryRun: true } : {} }, 30000);
+  } catch (e) {
+    if (!(e instanceof NetworkError))
+      throw e;
+    return done(o, EXIT.network, null, { error: "network_error", detail: `${e.message} Nothing was sent; try again.`, sent: false }, [`${clean(e.message)} Nothing was sent; try again.`]);
+  }
+  const pj = obj2(res.json);
+  if (res.status === 404 && pj.error !== "unknown_tool" && pj.error !== "cli_unavailable") {
+    if (!o.dryRun)
+      return { kind: "fallback" };
+    const line = `Darwin can't check orders ahead of time on ${o.session.realm} yet, so nothing was checked or sent.`;
+    return done(o, EXIT.ok, null, { dryRun: true, sent: false, checked: false, detail: line }, [line]);
+  }
+  const plain = plainRefusal(res, o.catalogue, `darwin ${tool.cli.path.join(" ")}`, o.session.realm);
+  if (plain)
+    return done(o, plain.exit, null, { error: pj.error ?? "refused", detail: plain.message, sent: false, status: res.status }, [plain.message]);
+  const result = obj2(pj.result);
+  if (res.status !== 200 || typeof pj.isError !== "boolean") {
+    return done(o, EXIT.unexpected, null, { error: "bad_response", status: res.status, sent: false }, [`Darwin answered HTTP ${res.status}. Nothing was sent.`]);
+  }
+  if (pj.isError) {
+    const code = refusalCode(pj);
+    const exit = code === "grant_paused" ? EXIT.paused : code === "invalid_arguments" || code === "nonce_not_accepted" ? EXIT.usage : code === "rate_limited" ? EXIT.rateLimited : EXIT.refused;
+    return done(o, exit, null, { ...pj }, cliLines(pj).length ? cliLines(pj) : [`Darwin refused this${code ? ` (${code})` : ""}. Nothing was sent.`]);
+  }
+  if (o.dryRun) {
+    const lines = cliLines(pj);
+    if (tool.costsTx)
+      lines.push("Running it for real counts against today's transaction budget.");
+    return done(o, EXIT.ok, null, { ...pj }, lines.length ? lines : ["Dry run: Darwin checked it, and nothing was sent."]);
+  }
+  const preparedId = typeof result.preparedId === "string" && PREPARED_ID.test(result.preparedId) ? result.preparedId : null;
+  if (!preparedId)
+    return done(o, EXIT.unexpected, null, { error: "bad_response", sent: false }, ["Darwin's answer didn't name the prepared order. Nothing was sent."]);
+  return execute(o, preparedId, pj);
+}
+async function execute(o, preparedId, prepareBody) {
+  let res = null;
+  let lostAnswer = false;
+  try {
+    res = await post(o, "/api/agent/v1/tools/execute", { preparedId }, 70000);
+  } catch (e) {
+    if (e instanceof CliError && e.code === "redirect_refused") {
+      lostAnswer = true;
+    } else if (!(e instanceof NetworkError)) {
+      throw e;
+    } else if (!e.maybeSent) {
+      return done(o, EXIT.network, preparedId, { error: "network_error", preparedId, sent: false, detail: `${e.message} Nothing was sent.` }, [`${clean(e.message)} Nothing was sent. (It can't run later by itself; \`${retryCommand(preparedId, o.recovery, "cancel")}\` makes sure.)`]);
+    } else {
+      lostAnswer = true;
+    }
+  }
+  const ej = obj2(res?.json);
+  if (res && !lostAnswer) {
+    if (res.status === 409 && ej.executed === false)
+      return finish(o, preparedId, prepareBody, ej, null);
+    if (res.status === 401) {
+      return done(o, EXIT.auth, preparedId, { error: "unauthorized", preparedId, sent: false }, ["Darwin refused this API key (or the agent it named), so the order was not sent. Run `darwin whoami`, or ask the owner."]);
+    }
+    const plain = plainRefusal(res, o.catalogue, `darwin ${o.tool.cli.path.join(" ")}`, o.session.realm);
+    if (plain)
+      return done(o, plain.exit, preparedId, { error: ej.error ?? "refused", preparedId, sent: false, status: res.status }, [plain.message.replace("Nothing was done.", "The order was not sent.")]);
+    if (res.status === 404) {
+      return done(o, EXIT.refused, preparedId, { error: ej.error ?? "not_found", preparedId, sent: false, status: 404 }, ["Darwin couldn't find this checked order to send, so nothing was sent. Run the command again."]);
+    }
+    if (res.status === 200 && verdictOf(ej)) {
+      const v = verdictOf(ej);
+      if (v !== "uncertain")
+        return finish(o, preparedId, prepareBody, ej, null);
+    }
+  }
+  const lines = res && verdictOf(ej) === "uncertain" ? cliLines(ej) : [];
+  const status = await pollStatus(o, preparedId, (v) => v !== "pending" && v !== "uncertain" && v !== "not_started", LAND_WAIT_MS);
+  return finish(o, preparedId, prepareBody, Object.keys(ej).length ? ej : { preparedId, state: "unknown", verdict: "uncertain" }, status, lines);
+}
+async function pollStatus(o, preparedId, stop, budgetMs) {
+  if (o.quietForMcp)
+    budgetMs = Math.min(budgetMs, 4000);
+  const deadline = o.ctx.now() + budgetMs;
+  let last = null;
+  while (o.ctx.now() + POLL_MS <= deadline) {
+    await o.ctx.sleep(POLL_MS);
+    try {
+      const r = await post(o, "/api/agent/v1/tools/status", { preparedId }, Math.max(1000, Math.min(5000, deadline - o.ctx.now())));
+      if (r.status === 200 && verdictOf(r.json)) {
+        last = obj2(r.json);
+        if (stop(verdictOf(last)))
+          return last;
+      }
+    } catch {}
+  }
+  return last;
+}
+async function finish(o, preparedId, prepareBody, executeBody, status, firstLines = []) {
+  let st = status;
+  let v = verdictOf(executeBody) ?? "uncertain";
+  const lines = [...firstLines.length ? firstLines : cliLines(executeBody)];
+  if (!st && v === "sent")
+    st = await pollStatus(o, preparedId, (x) => x === "landed" || x === "failed" || x === "refused", LAND_WAIT_MS);
+  const sv = verdictOf(st);
+  if (st && sv) {
+    const stillWaiting = v === "sent" && (sv === "sent" || sv === "pending");
+    if (!stillWaiting) {
+      for (const l of cliLines(st))
+        if (!lines.includes(l))
+          lines.push(l);
+      v = sv;
+    }
+  }
+  const exit = exitForVerdict(v, st ?? executeBody);
+  if (exit === EXIT.uncertain && !lines.some((l) => l.startsWith("Darwin may have received")))
+    lines.unshift(copy.uncertainWritePrepared);
+  const orderId = orderIdOf(executeBody) ?? orderIdOf(st);
+  if (orderId && (v === "sent" || v === "landed" || v === "replayed"))
+    lines.push(`Order ID: ${orderId}`);
+  if (v === "sent")
+    lines.push(`Not confirmed yet. Check it with: ${retryCommand(preparedId, o.recovery)}`);
+  if (exit === EXIT.uncertain)
+    lines.push(`Don't run the command again. Check it with: ${retryCommand(preparedId, o.recovery)}`);
+  const doc = {
+    preparedId,
+    tool: o.tool.name,
+    verdict: v ?? "uncertain",
+    prepare: obj2(prepareBody.result),
+    execute: executeBody,
+    ...st && st !== executeBody ? { status: st } : {},
+    ...exit === EXIT.uncertain || v === "sent" ? { next: { command: retryCommand(preparedId, o.recovery) } } : {}
+  };
+  return done(o, exit, preparedId, doc, lines);
+}
+function done(o, exit, preparedId, doc, lines, toStderr = exit !== EXIT.ok) {
+  if (!o.quietForMcp) {
+    if (o.json) {
+      printJson(o.ctx, doc);
+      if (exit !== EXIT.ok)
+        for (const l of lines)
+          warn(o.ctx, l);
+    } else {
+      for (const l of lines)
+        (toStderr ? warn : say)(o.ctx, l);
+    }
+  }
+  return { kind: "done", exit, preparedId, doc: { ...doc, lines } };
+}
+async function checkPrepared(o) {
+  const { ctx, preparedId } = o;
+  const flags = recoveryFlags(o.session, o.agentId);
+  const again = retryCommand(preparedId, flags);
+  let res;
+  try {
+    res = await post(o, o.cancel ? "/api/agent/v1/tools/cancel" : "/api/agent/v1/tools/status", { preparedId }, 20000);
+  } catch (e) {
+    if (e instanceof CliError && e.code === "redirect_refused") {
+      const msg2 = `${clean(e.message)} ${o.cancel ? "Whether it was cancelled is unknown" : "Its outcome is still unknown"}; check again in a moment with \`${again}\`.`;
+      if (o.json)
+        printJson(ctx, { error: "redirect_refused", preparedId, detail: msg2 });
+      warn(ctx, msg2);
+      return EXIT.uncertain;
+    }
+    if (!(e instanceof NetworkError))
+      throw e;
+    const reached = e.maybeSent;
+    const msg = o.cancel && !reached ? `${clean(e.message)} The cancel didn't reach Darwin; try again.` : `${clean(e.message)} ${o.cancel ? "Whether it was cancelled is unknown" : "Its outcome is still unknown"}; check again in a moment with \`${again}\`.`;
+    if (o.json)
+      printJson(ctx, { error: "network_error", preparedId, detail: msg });
+    warn(ctx, msg);
+    return o.cancel && !reached ? EXIT.network : EXIT.uncertain;
+  }
+  const j = obj2(res.json);
+  const err = typeof j.error === "string" ? j.error : "";
+  if (res.status === 401) {
+    const msg = "Can't check this order with this API key and agent right now. Its outcome is still unknown, not failed. A paused agent is one possible cause. Check the agent's History on Darwin.";
+    if (o.json)
+      printJson(ctx, { error: "unauthorized", preparedId, detail: msg });
+    warn(ctx, msg);
+    return EXIT.uncertain;
+  }
+  if (res.status === 404 && (err === "not_found" || err === "prepared_unavailable" || err === "cli_unavailable")) {
+    const msg = err === "not_found" ? "Darwin has no order with that ID for this API key and agent. (Use the ID this terminal printed, with the same profile and --agent.)" : `This site doesn't keep checked orders yet, so there's nothing to look up. Check \`darwin orders\` instead.`;
+    if (o.json)
+      printJson(ctx, { error: err, preparedId, detail: msg });
+    warn(ctx, msg);
+    return EXIT.refused;
+  }
+  if (res.status === 426) {
+    const min = typeof j.minCli === "string" && /^\d+\.\d+\.\d+$/.test(j.minCli) ? j.minCli : "the latest version";
+    const msg = copy.updateRequired(min);
+    if (o.json)
+      printJson(ctx, { error: "cli_upgrade_required", status: 426, preparedId, minCli: min, detail: msg });
+    warn(ctx, msg);
+    return EXIT.upgrade;
+  }
+  if (res.status === 429) {
+    const msg = "Too many requests with this API key right now. Wait a minute and try again.";
+    if (o.json)
+      printJson(ctx, { error: "rate_limited", status: 429, preparedId, detail: msg });
+    warn(ctx, msg);
+    return EXIT.rateLimited;
+  }
+  const v = verdictOf(j);
+  if (res.status !== 200 || !v) {
+    if (o.json)
+      printJson(ctx, { error: "bad_response", status: res.status, preparedId });
+    warn(ctx, `Darwin answered HTTP ${res.status}. The order's outcome is still unknown; try again in a moment.`);
+    return EXIT.uncertain;
+  }
+  const lines = cliLines(j);
+  if (o.cancel && j.cancelled === false)
+    lines.push("It had already started, so it couldn't be cancelled.");
+  const exit = o.cancel ? j.cancelled === true ? EXIT.ok : exitForVerdict(v, j) : exitForVerdict(v, j);
+  const orderId = orderIdOf(obj2(j.outcome));
+  if (orderId && (v === "landed" || v === "sent"))
+    lines.push(`Order ID: ${orderId}`);
+  if (v === "pending" || v === "uncertain")
+    lines.push(`Don't place it again. Check again in a minute: ${again}`);
+  if (v === "not_started" && !o.cancel)
+    lines.push(`To make sure it never runs: ${retryCommand(preparedId, flags, "cancel")}`);
+  if (o.json)
+    printJson(ctx, j);
+  else
+    for (const l of lines)
+      say(ctx, l);
+  return exit;
+}
+async function preparedRead(o, preparedId, cancel) {
+  if (!PREPARED_ID.test(preparedId))
+    return { ok: false, body: { error: "invalid_arguments", detail: "preparedId is the prp_… id a write returned." } };
+  try {
+    const r = await post(o, cancel ? "/api/agent/v1/tools/cancel" : "/api/agent/v1/tools/status", { preparedId }, 20000);
+    const j = obj2(r.json);
+    if (r.status === 200 && verdictOf(j))
+      return { ok: true, body: j };
+    if (r.status === 401)
+      return { ok: false, body: { error: "unauthorized", preparedId, outcome: "unknown", detail: "Can't check this order with this API key and agent right now. Its outcome is still unknown, not failed. A paused agent is one possible cause." } };
+    return { ok: false, body: { error: typeof j.error === "string" ? j.error : "bad_response", status: r.status, preparedId, detail: typeof j.detail === "string" ? j.detail : "Darwin couldn't answer that just now." } };
+  } catch (e) {
+    if (!(e instanceof NetworkError))
+      throw e;
+    return { ok: false, body: { error: "network_error", preparedId, outcome: "unknown", detail: `${e.message} Its outcome is still unknown.` } };
+  }
+}
+
+// src/commands.ts
 var OUT_FLAGS = ["json", "format", "quiet", "no-color", "help"];
 var jsonOut = (ctx, p) => wantsJson(ctx, { json: has(p, "json"), format: one(p, "format") });
-var unwrap2 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
+var unwrap3 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
 async function cmdLogout(ctx, p) {
   onlyFlags(p, ["profile", "all", "revoke", "force-local", ...OUT_FLAGS], "logout");
   assertInstalled(ctx);
@@ -4465,7 +4842,7 @@ async function cmdWhoami(ctx, p) {
     exit = EXIT.network;
   }
   const keyName = who && typeof who.name === "string" ? clean(who.name) : "name unavailable";
-  const agent = clean(unwrap2(who?.homeAgentName) || s.profile?.agent_name || s.profile?.agent_id || "unknown agent");
+  const agent = clean(unwrap3(who?.homeAgentName) || s.profile?.agent_name || s.profile?.agent_id || "unknown agent");
   const permissions = s.kind === "agents" ? "Read: all agents · Trade: all active agents" : "Read: this agent · Trade: this agent";
   const store = s.profile ? storeLabel(ctx, s.profile.store, s.realm, s.profileName) : "DARWIN_API_KEY (environment)";
   if (jsonOut(ctx, p))
@@ -4672,6 +5049,18 @@ async function cmdApi(ctx, p) {
       say(ctx, l);
   return res.status === 200 ? EXIT.ok : res.status === 401 ? EXIT.auth : res.status === 429 ? EXIT.rateLimited : EXIT.refused;
 }
+async function cmdCheckPrepared(ctx, p, cancel) {
+  const name = cancel ? "cancel" : "retry";
+  onlyFlags(p, ["profile", "agent", ...OUT_FLAGS], name);
+  const id = p.positionals[1];
+  if (!id || p.positionals.length > 2 || !PREPARED_ID.test(id)) {
+    throw new CliError(EXIT.usage, `\`darwin ${name}\` takes the ID the order printed: \`darwin ${name} prp_…\`.`, "usage");
+  }
+  const s = openSession(ctx, { profile: one(p, "profile") });
+  const { recoveryAgent: recoveryAgent2 } = await Promise.resolve().then(() => (init_agents(), exports_agents));
+  const agentId = await recoveryAgent2(ctx, s, one(p, "agent"));
+  return checkPrepared({ ctx, session: s, agentId, json: jsonOut(ctx, p), preparedId: id, cancel });
+}
 
 // src/login.ts
 init_context();
@@ -5203,7 +5592,7 @@ function readKeyFile(path) {
   rememberSecret(j.key);
   return { realm, agentId: j.agent_id, key: j.key };
 }
-var unwrap3 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
+var unwrap4 = (v) => v && typeof v === "object" && ("untrusted" in v) ? String(v.untrusted ?? "") : typeof v === "string" ? v : "";
 async function identify(ctx, realm, key, kind) {
   let res;
   try {
@@ -5219,7 +5608,7 @@ async function identify(ctx, realm, key, kind) {
     throw new CliError(EXIT.rateLimited, "Too many requests with this API key right now. Wait a minute and try again. Nothing was saved.", "rate_limited");
   const w = res.json;
   if (res.status === 200 && w && isAgentId(w.homeAgentId)) {
-    return { kind: w.kind === "agents" ? "agents" : w.kind === "agent" ? "agent" : null, agentId: w.homeAgentId, agentName: clean(unwrap3(w.homeAgentName)).slice(0, 120), keyName: typeof w.name === "string" ? clean(w.name).slice(0, 120) : null };
+    return { kind: w.kind === "agents" ? "agents" : w.kind === "agent" ? "agent" : null, agentId: w.homeAgentId, agentName: clean(unwrap4(w.homeAgentName)).slice(0, 120), keyName: typeof w.name === "string" ? clean(w.name).slice(0, 120) : null };
   }
   if (res.status !== 404)
     throw new CliError(EXIT.unexpected, `Couldn't check this key with ${realm} (HTTP ${res.status}). Nothing was saved.`, "bad_response");
@@ -5238,7 +5627,7 @@ async function identify(ctx, realm, key, kind) {
   const first = list[0];
   if (!isAgentId(first.id))
     throw new CliError(EXIT.unexpected, "Darwin's answer was not what the CLI expected. Nothing was saved.", "bad_response");
-  return { kind, agentId: first.id, agentName: clean(unwrap3(first.name)).slice(0, 120), keyName: null };
+  return { kind, agentId: first.id, agentName: clean(unwrap4(first.name)).slice(0, 120), keyName: null };
 }
 async function importKey(ctx, o) {
   const who = await identify(ctx, o.realm, o.key, o.kind);
@@ -5394,7 +5783,7 @@ async function finishPickup(ctx, p, j, json) {
   rememberSecret(raw);
   const agent = j.agent ?? {};
   const agentId = isAgentId(agent.id) ? agent.id : "";
-  const agentName = clean(unwrap3(agent.name)).slice(0, 120);
+  const agentName = clean(unwrap4(agent.name)).slice(0, 120);
   const keyName = typeof j.key_name === "string" ? clean(j.key_name).slice(0, 120) : null;
   if (!agentId)
     throw new CliError(EXIT.unexpected, "Darwin's pairing answer had no agent id. Revoke the newest key on the agent's Manage tab and pair again.", "bad_response");
@@ -5447,10 +5836,7 @@ init_context();
 init_copy();
 import { randomBytes as randomBytes4 } from "node:crypto";
 init_http();
-init_fsx();
 init_redact();
-import { createHash as createHash2 } from "node:crypto";
-import { join as join8 } from "node:path";
 init_agents();
 var B62 = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
 function newNonce() {
@@ -5554,10 +5940,10 @@ function buildArguments(tool, positionals, p, globals) {
   }
   return args;
 }
-var unwrap4 = (v) => v && typeof v === "object" && !Array.isArray(v) && ("untrusted" in v) ? v.untrusted : v;
+var unwrap5 = (v) => v && typeof v === "object" && !Array.isArray(v) && ("untrusted" in v) ? v.untrusted : v;
 var isPaused = (r) => {
   const data = r.data ?? {};
-  return [r.error, data.error, data.refusal].some((x) => unwrap4(x) === "grant_paused");
+  return [r.error, data.error, data.refusal].some((x) => unwrap5(x) === "grant_paused");
 };
 function exitFor(tool, body) {
   if (body.isError !== true)
@@ -5625,7 +6011,7 @@ async function callTool(o, agentId, limits = {}) {
       message = copy.uncertainWrite;
     else if (exit === EXIT.paused)
       message = copy.paused;
-    else if (unwrap4(data.refusal) === "duplicate" && unwrap4(data.detail) === "nonce_used_by_a_different_order") {
+    else if (unwrap5(data.refusal) === "duplicate" && unwrap5(data.detail) === "nonce_used_by_a_different_order") {
       message = copy.nonceConflict;
       exit = EXIT.refused;
     }
@@ -5651,9 +6037,25 @@ async function callTool(o, agentId, limits = {}) {
 }
 async function runTool(o) {
   const { ctx, session, tool, flags } = o;
+  if (isPreparedWrite(tool)) {
+    const agentId2 = await resolveAgent(ctx, session, flags.agent);
+    const r = await runPrepared({ ctx, session, catalogue: o.catalogue, tool, args: o.args, agentId: agentId2, json: o.json, dryRun: flags.dryRun, recovery: recoveryFlags(session, agentId2) });
+    if (r.kind === "done") {
+      if (r.doc.error === "unknown_tool" && o.onUnknownTool)
+        await o.onUnknownTool().catch(() => {});
+      return r.exit;
+    }
+    if (flags.dryRun)
+      return EXIT.ok;
+    return runDirect(o, agentId2);
+  }
   if (flags.dryRun)
     return dryRun(o);
   const agentId = tool.name === "list_agents" ? null : await resolveAgent(ctx, session, flags.agent);
+  return runDirect(o, agentId);
+}
+async function runDirect(o, agentId) {
+  const { ctx, session, tool } = o;
   const out = await callTool(o, agentId);
   if (out.message === "unknown_tool") {
     if (o.onUnknownTool)
@@ -5661,12 +6063,12 @@ async function runTool(o) {
     out.message = `\`darwin ${tool.cli.path.join(" ")}\` isn't available on ${session.realm} right now. Nothing was done. The command list was refreshed — see \`darwin help\`.`;
   }
   const result = out.body?.result ?? null;
-  if (out.exit === EXIT.ok && result && QUOTE_TOOLS.has(tool.name))
-    rememberQuote(o, result);
   if (o.json) {
     printJson(ctx, result ? { ...result, ...out.nonce ? { nonce: out.nonce } : {} } : { error: out.body?.error ?? "failed", detail: out.message, ...out.nonce ? { nonce: out.nonce } : {} });
     if (out.message)
       warn(ctx, out.message);
+    for (const l of cliLines(out.body, "notes"))
+      warn(ctx, l);
     if (out.exit === EXIT.ok)
       jsonFooter(o, out, result);
     else if (out.nonce && tool.write)
@@ -5677,6 +6079,8 @@ async function runTool(o) {
   if (out.exit === EXIT.ok && result) {
     for (const l of renderResult(tool.name, session.kind, result, x))
       say(ctx, l);
+    for (const l of cliLines(out.body, "notes"))
+      say(ctx, l);
     try {
       if (await afterHumanSuccess(o, result, agentId) === "failed")
         return EXIT.refused;
@@ -5815,7 +6219,7 @@ function jsonFooter(o, out, result) {
   const { ctx, tool, args } = o;
   const summary = result?.summary ?? {};
   const data = result?.data ?? {};
-  const text = (v) => cell(unwrap4(v));
+  const text = (v) => cell(unwrap5(v));
   if (tool.name === "get_spot_quote") {
     const quoteId = typeof data.quoteId === "string" ? data.quoteId : typeof summary.quoteId === "string" ? summary.quoteId : null;
     const exp = typeof data.expiresAtMs === "number" ? data.expiresAtMs : null;
@@ -5831,75 +6235,12 @@ function jsonFooter(o, out, result) {
   }
 }
 var agentFor = (o, out) => o.session.kind === "agents" ? o.flags.agent || o.session.profile?.default_agent || out.agentId || "this agent" : o.session.profile?.agent_name || "this agent";
-function quotesFile(o) {
-  return join8(o.ctx.configDir, "cache", `quotes-${o.session.realm}-${createHash2("sha256").update(o.session.key).digest("hex").slice(0, 16)}.json`);
-}
-function readQuotes(o) {
-  try {
-    const t = readPrivate(quotesFile(o), 64 * 1024, { requirePrivateMode: false });
-    const v = t ? JSON.parse(t) : [];
-    return Array.isArray(v) ? v.filter((q) => !!q && typeof q.id === "string" && typeof q.expiresAtMs === "number") : [];
-  } catch {
-    return [];
-  }
-}
-function rememberQuote(o, result) {
-  const data = result.data ?? {};
-  const sell = result.summary?.sell ?? {};
-  if (typeof data.quoteId !== "string" || !/^[A-Za-z0-9_-]{1,80}$/.test(data.quoteId) || typeof data.expiresAtMs !== "number")
-    return;
-  const rec = {
-    id: data.quoteId,
-    sell: String(o.args.sell ?? ""),
-    for: String(o.args.for ?? ""),
-    amount: typeof sell.amount === "string" ? sell.amount : String(o.args.amount ?? ""),
-    expiresAtMs: data.expiresAtMs
-  };
-  const now = o.ctx.now();
-  const keep = readQuotes(o).filter((q) => q.expiresAtMs > now - 3600000 && q.id !== rec.id).slice(-19);
-  try {
-    writePrivate(quotesFile(o), JSON.stringify([...keep, rec]));
-  } catch {}
-}
-var sameToken = (a, b) => {
-  const mint = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;
-  return mint.test(a.trim()) || mint.test(b.trim()) ? a.trim() === b.trim() : a.trim().toLowerCase() === b.trim().toLowerCase();
-};
-var sameAmount = (a, b) => {
-  const n = (s) => (s.includes(".") ? s.replace(/0+$/, "").replace(/\.$/, "") : s).replace(/^0+(?=\d)/, "");
-  return n(a.trim()) === n(b.trim());
-};
 function dryRun(o) {
   const { ctx, session, tool } = o;
   const named = (o.flags.agent ?? ctx.env.DARWIN_AGENT ?? "").trim() || (session.kind === "agents" ? session.profile?.default_agent ?? "" : "");
   if (session.kind === "agents" && tool.name !== "list_agents" && !named)
     throw new CliError(EXIT.usage, copy.needAgent, "agent_required");
   const agentId = named || null;
-  const checked = [];
-  const problems = [];
-  const unchecked = [];
-  if (tool.name === "place_spot_order" && typeof o.args.quoteId === "string") {
-    const q = readQuotes(o).find((r) => r.id === o.args.quoteId);
-    if (!q) {
-      unchecked.push("the quote: this terminal didn't make it (or made it over an hour ago), so only Darwin can say whether it exists");
-    } else {
-      if (q.expiresAtMs <= ctx.now())
-        problems.push(`the quote expired at ${new Date(q.expiresAtMs).toLocaleTimeString("en-US")}; get a new one with \`darwin quote\``);
-      else
-        checked.push(`the quote is one this terminal made, and it has ${Math.ceil((q.expiresAtMs - ctx.now()) / 1000)}s left`);
-      const diffs = [
-        !sameToken(String(o.args.sell ?? ""), q.sell) ? `--sell (quote: ${clean(q.sell)})` : "",
-        !sameToken(String(o.args.for ?? ""), q.for) ? `--for (quote: ${clean(q.for)})` : "",
-        !sameAmount(String(o.args.amount ?? ""), q.amount) ? `--amount (quote: ${q.amount})` : ""
-      ].filter(Boolean);
-      if (diffs.length)
-        problems.push(`this doesn't match the quote: ${diffs.join(", ")}`);
-      else
-        checked.push("--sell, --amount and --for match the quote");
-    }
-  }
-  if (tool.write)
-    unchecked.push("the balance, the agent's limits and the price — Darwin checks those when the command really runs");
   const preview = {
     dryRun: true,
     sent: false,
@@ -5909,28 +6250,18 @@ function dryRun(o) {
     costsTx: tool.costsTx,
     realm: session.realm,
     agent: agentId,
-    arguments: o.args,
-    note: tool.idempotency ? "An order ID (nonce) is generated when the command really runs." : undefined
+    arguments: o.args
   };
-  if (o.json) {
+  if (o.json)
     printJson(ctx, preview);
-    for (const p of problems)
-      warn(ctx, `Dry run check failed: ${p}`);
-    return EXIT.ok;
-  } else {
+  else {
     say(ctx, `Dry run — nothing was sent. Would run: darwin ${tool.cli.path.join(" ")} on ${session.realm}${agentId ? ` for agent ${clean(agentId)}` : ""}`);
     for (const [k, v] of Object.entries(o.args)) {
       const flag = tool.cli.args[k]?.flag;
       say(ctx, flag ? `  --${flag} ${cell(v)}` : tool.cli.positional.includes(k) ? `  <${clean(k)}> ${cell(v)}` : `  --field ${clean(k)}=${cell(v)}`);
     }
-    for (const c of checked)
-      say(ctx, `✓ ${c}`);
-    for (const p of problems)
-      say(ctx, `✗ ${p}`);
-    for (const u of unchecked)
-      say(ctx, `Not checked: ${u}`);
   }
-  return problems.length ? EXIT.refused : EXIT.ok;
+  return EXIT.ok;
 }
 
 // src/mcp.ts
@@ -5950,7 +6281,29 @@ function printConfig(ctx, client, profile) {
 `;
   throw new CliError(EXIT.usage, "--print-config takes claude, cursor or gemini.", "usage");
 }
+var PREPARED_TOOL_DEFS = [
+  {
+    name: "check_prepared",
+    title: "What happened to a write",
+    description: "READ-ONLY. What happened to a write whose result was uncertain, by the preparedId the write returned: it went through, is still pending, failed, or was never sent. Never sends anything; call it instead of repeating a write.",
+    inputSchema: { type: "object", properties: { preparedId: { type: "string", pattern: "^prp_[0-9A-Za-z]{24}$" } }, required: ["preparedId"], additionalProperties: false },
+    annotations: { title: "What happened to a write", readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
+  },
+  {
+    name: "cancel_prepared",
+    title: "Make sure a write never runs",
+    description: "Make sure a prepared write that has not started never runs (by its preparedId). A write that already started can't be cancelled; the answer says what happened instead.",
+    inputSchema: { type: "object", properties: { preparedId: { type: "string", pattern: "^prp_[0-9A-Za-z]{24}$" } }, required: ["preparedId"], additionalProperties: false },
+    annotations: { title: "Make sure a write never runs", readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false }
+  }
+];
 function toolDefs(c) {
+  return [...catalogueToolDefs(c), ...PREPARED_TOOL_DEFS.map((d) => ({
+    ...d,
+    inputSchema: c.globals.agentParam ? { ...d.inputSchema, properties: { ...d.inputSchema.properties, agent: AGENT_PROP } } : d.inputSchema
+  }))];
+}
+function catalogueToolDefs(c) {
   return c.tools.map((t) => {
     let schema = t.inputSchema;
     if (c.globals.agentParam && t.name !== "list_agents") {
@@ -6055,6 +6408,20 @@ function toolResult(value, isError) {
   return { content: [{ type: "text", text: JSON.stringify(v) }], structuredContent: v, isError };
 }
 async function mcpCall(ctx, session, catalogue, params, refresh) {
+  if (params.name === "check_prepared" || params.name === "cancel_prepared") {
+    const raw2 = params.arguments ?? {};
+    if (!raw2 || typeof raw2 !== "object" || Array.isArray(raw2) || typeof raw2.preparedId !== "string")
+      return toolResult({ error: "invalid_arguments", detail: "preparedId is required." }, true);
+    let agentArg2;
+    if (raw2.agent !== undefined) {
+      if (typeof raw2.agent !== "string" || !raw2.agent.trim())
+        return toolResult({ error: "invalid_arguments", detail: "`agent` must be an agent id or name." }, true);
+      agentArg2 = raw2.agent.trim();
+    }
+    const agentId2 = await recoveryAgent(ctx, session, agentArg2);
+    const r = await preparedRead({ ctx, session, agentId: agentId2 }, raw2.preparedId, params.name === "cancel_prepared");
+    return toolResult(r.body, !r.ok);
+  }
   const tool = catalogue.tools.find((t) => t.name === params.name);
   if (!tool)
     return toolResult({ error: "unknown_tool", detail: "No such tool; list the tools again.", sent: false }, true);
@@ -6072,6 +6439,24 @@ async function mcpCall(ctx, session, catalogue, params, refresh) {
     delete args.agent;
   }
   const agentId = tool.name === "list_agents" ? null : await resolveAgent(ctx, session, agentArg);
+  if (isPreparedWrite(tool)) {
+    const r = await runPrepared({ ctx, session, catalogue, tool, args, agentId, json: true, dryRun: false, quietForMcp: true, recovery: recoveryFlags(session, agentId) });
+    if (r.kind === "done") {
+      if (r.exit === EXIT.ok)
+        return toolResult(r.doc, false);
+      if (r.exit === EXIT.uncertain && r.preparedId) {
+        return toolResult({
+          ...r.doc,
+          error: "outcome_unknown",
+          sent: "maybe",
+          preparedId: r.preparedId,
+          ...agentId ? { agent: agentId } : {},
+          detail: `Darwin may have received this write, but its result didn't come back. Do NOT call this tool again — call check_prepared with preparedId "${r.preparedId}"${agentId ? ` and agent "${agentId}"` : ""} to see what happened.`
+        }, true);
+      }
+      return toolResult(r.doc, true);
+    }
+  }
   const out = await callTool({ ctx, session, catalogue, tool, args, flags: { json: true, dryRun: false, quiet: true }, onStaleCatalogue: refresh }, agentId);
   const result = out.body?.result ?? null;
   if (out.exit === EXIT.uncertain) {
@@ -6216,6 +6601,10 @@ async function dispatch(p, ctx) {
       return cmdApi(ctx, p);
     case "mcp":
       return cmdMcp(ctx, p);
+    case "retry":
+      return cmdCheckPrepared(ctx, p, false);
+    case "cancel":
+      return cmdCheckPrepared(ctx, p, true);
   }
   if (first === "market-status" && !has(p, "help"))
     return cmdMarketStatus(ctx, p);
@@ -6258,7 +6647,7 @@ async function runCatalogueCommand(ctx, p, json) {
   const dryRun2 = has(p, "dry-run");
   let { catalogue } = await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: dryRun2 ? "offline" : "never" });
   let hit = resolve(catalogue, p.positionals);
-  if (!hit && !dryRun2) {
+  if (!hit) {
     catalogue = (await loadCatalogue(ctx, session.realm, session.kind, { key: session.key, refresh: "force" })).catalogue;
     hit = resolve(catalogue, p.positionals);
   }
@@ -6293,7 +6682,7 @@ function updateNotice(ctx, c) {
     return;
   if (compareVersions(VERSION, c.latestCli) >= 0)
     return;
-  const stamp = join9(ctx.configDir, "cache", "update-notice");
+  const stamp = join8(ctx.configDir, "cache", "update-notice");
   try {
     const last = Number(readPrivate(stamp, 64, { requirePrivateMode: false }) ?? "0");
     if (ctx.now() - last < 24 * 3600000)
@@ -6310,8 +6699,8 @@ function configDir() {
   if (process.env.DARWIN_CONFIG_DIR)
     return process.env.DARWIN_CONFIG_DIR;
   if (process.platform === "win32")
-    return join10(process.env.APPDATA || join10(homedir2(), "AppData", "Roaming"), "darwin");
-  return join10(process.env.XDG_CONFIG_HOME || join10(homedir2(), ".config"), "darwin");
+    return join9(process.env.APPDATA || join9(homedir2(), "AppData", "Roaming"), "darwin");
+  return join9(process.env.XDG_CONFIG_HOME || join9(homedir2(), ".config"), "darwin");
 }
 async function readAll() {
   const chunks = [];
@@ -6366,7 +6755,7 @@ var ctx = {
   cwd: process.cwd(),
   platform: process.platform,
   openUrl: (url) => {
-    const [cmd, args] = process.platform === "darwin" ? ["/usr/bin/open", [url]] : process.platform === "win32" ? [join10(process.env.SystemRoot || "C:\\Windows", "System32", "rundll32.exe"), ["url.dll,FileProtocolHandler", url]] : ["/usr/bin/xdg-open", [url]];
+    const [cmd, args] = process.platform === "darwin" ? ["/usr/bin/open", [url]] : process.platform === "win32" ? [join9(process.env.SystemRoot || "C:\\Windows", "System32", "rundll32.exe"), ["url.dll,FileProtocolHandler", url]] : ["/usr/bin/xdg-open", [url]];
     if (!existsSync(cmd))
       return;
     spawn2(cmd, args, { stdio: "ignore", detached: true }).unref();

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@darwin.finance/cli",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@darwin.finance/cli",
-      "version": "1.0.1",
+      "version": "1.1.0",
       "license": "MIT",
       "dependencies": {
         "@napi-rs/keyring": "2.1.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darwin.finance/cli",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Darwin CLI \u2014 trade and check your Darwin agent from a terminal",
   "license": "MIT",
   "type": "module",