@finchtech/cli 0.5.0 → 0.5.1

package/dist/finch.js

@@ -6619,7 +6619,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@finchtech/cli",
-      version: "0.5.0",
+      version: "0.5.1",
       description: "Finch Agent CLI for wallet custody, Session-owned execution, and MCP OAuth approval.",
       type: "module",
       bin: {
@@ -6954,9 +6954,9 @@ function floatSafeRemainder(val, step) {
     return 0;
   return ratio - roundedRatio;
 }
-function defineLazy(object6, key, getter) {
+function defineLazy(object5, key, getter) {
   let value = void 0;
-  Object.defineProperty(object6, key, {
+  Object.defineProperty(object5, key, {
     get() {
       if (value === EVALUATING) {
         return void 0;
@@ -6968,7 +6968,7 @@ function defineLazy(object6, key, getter) {
       return value;
     },
     set(v) {
-      Object.defineProperty(object6, key, {
+      Object.defineProperty(object5, key, {
         value: v
         // configurable: true,
       });
@@ -22809,6 +22809,39 @@ var init_chains = __esm({
   }
 });
 
+// ../../packages/deployment-manifest/src/platform/dashboard-prices.json
+var dashboard_prices_default;
+var init_dashboard_prices = __esm({
+  "../../packages/deployment-manifest/src/platform/dashboard-prices.json"() {
+    dashboard_prices_default = {
+      schemaVersion: 1,
+      kind: "dashboard_prices",
+      endpoint: "https://api.coingecko.com/api/v3/simple/price",
+      assetIds: {
+        ETH: "ethereum",
+        BNB: "binancecoin",
+        AVAX: "avalanche-2"
+      }
+    };
+  }
+});
+
+// ../../packages/deployment-manifest/src/platform/dashboard-prices.ts
+var manifest;
+var init_dashboard_prices2 = __esm({
+  "../../packages/deployment-manifest/src/platform/dashboard-prices.ts"() {
+    "use strict";
+    init_zod();
+    init_dashboard_prices();
+    manifest = external_exports.strictObject({
+      schemaVersion: external_exports.literal(1),
+      kind: external_exports.literal("dashboard_prices"),
+      endpoint: external_exports.url().refine((value) => new URL(value).protocol === "https:"),
+      assetIds: external_exports.record(external_exports.string(), external_exports.string().regex(/^[a-z0-9-]+$/))
+    }).parse(dashboard_prices_default);
+  }
+});
+
 // ../../packages/deployment-manifest/src/platform/get-help.json
 var get_help_default;
 var init_get_help = __esm({
@@ -22877,7 +22910,7 @@ var init_passkey_safe = __esm({
 function parsePasskeySafeManifest(input) {
   return schema2.parse(input);
 }
-var disabled, enabled, schema2, manifest;
+var disabled, enabled, schema2, manifest2;
 var init_passkey_safe2 = __esm({
   "../../packages/deployment-manifest/src/platform/passkey-safe.ts"() {
     "use strict";
@@ -22903,7 +22936,7 @@ var init_passkey_safe2 = __esm({
         production: disabled
       })
     });
-    manifest = parsePasskeySafeManifest(passkey_safe_default);
+    manifest2 = parsePasskeySafeManifest(passkey_safe_default);
   }
 });
 
@@ -23162,7 +23195,7 @@ var init_agenton_payout = __esm({
 function parseAgentonPayoutManifest(input) {
   return schema3.parse(input);
 }
-var origin, environment, schema3, manifest2;
+var origin, environment, schema3, manifest3;
 var init_agenton_payout2 = __esm({
   "../../packages/deployment-manifest/src/platform/agenton-payout.ts"() {
     "use strict";
@@ -23180,7 +23213,7 @@ var init_agenton_payout2 = __esm({
       walletApiBaseUrl: origin,
       environments: external_exports.strictObject({ local: environment, test: environment, production: environment })
     });
-    manifest2 = parseAgentonPayoutManifest(agenton_payout_default);
+    manifest3 = parseAgentonPayoutManifest(agenton_payout_default);
   }
 });
 
@@ -23214,7 +23247,7 @@ var init_merchant_avatar_video = __esm({
 function parseMerchantAvatarVideoManifest(input) {
   return schema4.parse(input);
 }
-var policy2, schema4, manifest3;
+var policy2, schema4, manifest4;
 var init_merchant_avatar_video2 = __esm({
   "../../packages/deployment-manifest/src/platform/merchant-avatar-video.ts"() {
     "use strict";
@@ -23229,7 +23262,7 @@ var init_merchant_avatar_video2 = __esm({
       kind: external_exports.literal("merchant_avatar_video"),
       environments: external_exports.strictObject({ local: policy2, test: policy2, production: policy2 })
     });
-    manifest3 = parseMerchantAvatarVideoManifest(merchant_avatar_video_default);
+    manifest4 = parseMerchantAvatarVideoManifest(merchant_avatar_video_default);
   }
 });
 
@@ -23247,14 +23280,14 @@ var init_generator = __esm({
 });
 
 // ../../packages/deployment-manifest/src/platform/generator.ts
-var policy3, manifest4;
+var policy3, manifest5;
 var init_generator2 = __esm({
   "../../packages/deployment-manifest/src/platform/generator.ts"() {
     "use strict";
     init_zod();
     init_generator();
     policy3 = external_exports.strictObject({ enabled: external_exports.boolean() });
-    manifest4 = external_exports.strictObject({ schemaVersion: external_exports.literal(1), kind: external_exports.literal("generator"), provider: external_exports.strictObject({ endpoint: external_exports.literal("https://api.tokenrouter.com/v1"), model: external_exports.literal("openai/gpt-6-luna") }), environments: external_exports.strictObject({ local: policy3, test: policy3, production: policy3 }) }).parse(generator_default);
+    manifest5 = external_exports.strictObject({ schemaVersion: external_exports.literal(1), kind: external_exports.literal("generator"), provider: external_exports.strictObject({ endpoint: external_exports.literal("https://api.tokenrouter.com/v1"), model: external_exports.literal("openai/gpt-6-luna") }), environments: external_exports.strictObject({ local: policy3, test: policy3, production: policy3 }) }).parse(generator_default);
   }
 });
 
@@ -23304,6 +23337,7 @@ var init_platform = __esm({
   "../../packages/deployment-manifest/src/platform/index.ts"() {
     "use strict";
     init_zod();
+    init_dashboard_prices2();
     init_get_help2();
     init_passkey_safe2();
     init_web_analytics();
@@ -24129,7 +24163,7 @@ function localFailureMessage(error51) {
   if (publicInputMessages.includes(error51.message)) return error51.message;
   return "Command input does not match the expected schema. Check finch help for this command.";
 }
-var CliAuthorityError, CliProductionUnavailableError, BrowserOpenError, MCP_AUTHORIZATION_FLOW_GUIDANCE, McpAuthorizationFlowError, PUBLIC_RECOVERY_COMMAND, CliRecoveryBlockedError, CliSkillSourceError, CliSkillPresentationStaleError, CliSkillRecoveryUncertainError, CliSkillPublicationError;
+var CliAuthorityError, CliProductionUnavailableError, BrowserOpenError, MCP_AUTHORIZATION_FLOW_GUIDANCE, McpAuthorizationFlowError, CLI_SESSION_RENEWAL_GUIDANCE, CliSkillSourceError, CliSkillPresentationStaleError, CliSkillRecoveryUncertainError, CliSkillPublicationError;
 var init_cli_error = __esm({
   "src/cli-error.ts"() {
     "use strict";
@@ -24179,19 +24213,7 @@ var init_cli_error = __esm({
       code = "MCP_AUTHORIZATION_FLOW_FAILED";
       guidance;
     };
-    PUBLIC_RECOVERY_COMMAND = /^(?:finch purchase (?:submit|recover-approval) [0-9a-f-]+(?: --transaction-hash 0x[0-9a-f]{64})?|finch task recover [0-9a-f-]+ (?:publish|award|reclaim)|finch skill recover (?:publication|intent) [0-9a-f]{64})$/u;
-    CliRecoveryBlockedError = class extends Error {
-      code = "CLI_RECOVERY_BLOCKED";
-      recoveryCommands;
-      constructor(recoveryCommands) {
-        if (recoveryCommands.length === 0 || recoveryCommands.some((command) => !PUBLIC_RECOVERY_COMMAND.test(command))) {
-          throw new TypeError("Recovery commands must contain only supported public recovery syntax.");
-        }
-        super("CLI_RECOVERY_BLOCKED");
-        this.name = "CliRecoveryBlockedError";
-        this.recoveryCommands = Object.freeze([...new Set(recoveryCommands)].sort());
-      }
-    };
+    CLI_SESSION_RENEWAL_GUIDANCE = "The CLI Session is invalid or expired. Run finch login --chain-id <CHAIN_ID> using the same wallet, endpoint and authentication chain. Use finch login --help to list supported authentication chains. Existing recovery journals are preserved.";
     CliSkillSourceError = class extends TypeError {
       constructor(diagnosticCode, details, message) {
         super(message);
@@ -28419,7 +28441,7 @@ async function buildSkillRoot(input) {
     if (contentKey !== null) encrypted[file2.path] = { ciphertext: cid.toString(), plaintextHash: await sha256Hex(file2.content) };
   }
   if (!md) throw new RangeError("SkillRoot primary document is missing.");
-  const manifest5 = jsonBytes({
+  const manifest6 = jsonBytes({
     schemaVersion: "1.0",
     name: input.name,
     skillVersion: String(input.version),
@@ -28428,7 +28450,7 @@ async function buildSkillRoot(input) {
   });
   const root = {
     md,
-    manifest: await put(manifest5),
+    manifest: await put(manifest6),
     entry: { ...md, profile: ENTRY_PROFILE },
     ...Object.keys(files).length ? { files } : {},
     ...input.previousHash === void 0 ? {} : { prev: hashCID(input.previousHash, 113) }
@@ -28442,7 +28464,7 @@ async function buildSkillRoot(input) {
   const proof = {
     scheme: SKILL_ROOT_SCHEME,
     root: toBase64(rootBytes),
-    manifest: toBase64(manifest5),
+    manifest: toBase64(manifest6),
     ...confidentiality === void 0 ? {} : { confidentiality: toBase64(confidentiality) }
   };
   const packageHash = await sha256Hex(rootBytes);
@@ -28479,8 +28501,8 @@ async function verifySkillRootProof(proof, packageHash, version6, previousHash)
   const paths = Object.keys(refs);
   if (paths.length > MAX_SKILL_IMPORT_FILES || paths.some((name) => paths.some((other) => other.startsWith(`${name}/`)))) throw new RangeError("SkillRoot file paths exceed limits or conflict.");
   if (!refs[executable.path]?.equals(executable.cid)) throw new RangeError("SkillRoot entrypoint is outside the committed files.");
-  const manifest5 = await authenticatedJSON(proof.manifest, CID.asCID(root.manifest));
-  if (manifest5.schemaVersion !== "1.0" || typeof manifest5.name !== "string" || typeof manifest5.summary !== "string" || manifest5.skillVersion !== String(version6) || manifest5.entrypoint !== executable.path) throw new RangeError("Invalid SkillRoot manifest.");
+  const manifest6 = await authenticatedJSON(proof.manifest, CID.asCID(root.manifest));
+  if (manifest6.schemaVersion !== "1.0" || typeof manifest6.name !== "string" || typeof manifest6.summary !== "string" || manifest6.skillVersion !== String(version6) || manifest6.entrypoint !== executable.path) throw new RangeError("Invalid SkillRoot manifest.");
   const hashes = /* @__PURE__ */ Object.create(null);
   if (root.confidentiality === void 0) {
     if (proof.confidentiality !== void 0) throw new RangeError("Public SkillRoot declares encrypted transport.");
@@ -28492,10 +28514,10 @@ async function verifySkillRootProof(proof, packageHash, version6, previousHash)
     const objects = record2(descriptor.objects);
     if (Object.keys(objects).length !== Object.keys(refs).length) throw new RangeError("SkillRoot confidentiality paths do not match files.");
     for (const [name, cid] of Object.entries(refs)) {
-      const object6 = record2(objects[name]);
-      exact(object6, ["ciphertext", "plaintextHash"]);
-      if (object6.ciphertext !== cid.toString() || typeof object6.plaintextHash !== "string" || !HASH.test(object6.plaintextHash)) throw new RangeError("SkillRoot ciphertext CID or plaintext hash mismatch.");
-      hashes[name] = object6.plaintextHash;
+      const object5 = record2(objects[name]);
+      exact(object5, ["ciphertext", "plaintextHash"]);
+      if (object5.ciphertext !== cid.toString() || typeof object5.plaintextHash !== "string" || !HASH.test(object5.plaintextHash)) throw new RangeError("SkillRoot ciphertext CID or plaintext hash mismatch.");
+      hashes[name] = object5.plaintextHash;
     }
   }
   return {
@@ -28503,8 +28525,8 @@ async function verifySkillRootProof(proof, packageHash, version6, previousHash)
     mdHash: hashes[md.path],
     primaryPath: md.path,
     plaintext: root.confidentiality === void 0,
-    name: manifest5.name,
-    summary: manifest5.summary,
+    name: manifest6.name,
+    summary: manifest6.summary,
     fileHashes: hashes
   };
 }
@@ -28691,15 +28713,15 @@ function buildDetailDocuments(input) {
     if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
       throw new RangeError(`Skill ${kind} document is invalid.`);
     }
-    const document2 = raw;
-    const shape = Object.keys(document2).sort().join(",");
-    if (shape !== "assets,entry,mode" && shape !== "assets,entry,externalMediaHosts,mode" || document2.mode !== "html" || !Array.isArray(document2.assets) || document2.assets.length > 50) {
+    const document = raw;
+    const shape = Object.keys(document).sort().join(",");
+    if (shape !== "assets,entry,mode" && shape !== "assets,entry,externalMediaHosts,mode" || document.mode !== "html" || !Array.isArray(document.assets) || document.assets.length > 50) {
       throw new RangeError(`Skill ${kind} document is invalid.`);
     }
-    const externalMediaHosts = detailExternalMediaHosts(document2.externalMediaHosts, kind);
-    const entry2 = detailObject(document2.entry, `Skill ${kind} HTML`, "text/html", kind);
+    const externalMediaHosts = detailExternalMediaHosts(document.externalMediaHosts, kind);
+    const entry2 = detailObject(document.entry, `Skill ${kind} HTML`, "text/html", kind);
     const names = /* @__PURE__ */ new Set();
-    const assets = document2.assets.map((rawAsset) => {
+    const assets = document.assets.map((rawAsset) => {
       if (rawAsset === null || typeof rawAsset !== "object" || Array.isArray(rawAsset)) {
         throw new RangeError(`Skill ${kind} asset is invalid.`);
       }
@@ -28757,8 +28779,8 @@ function buildManifest(entries, presentation, documents) {
     ...normalizedDocuments === void 0 ? {} : { documents: normalizedDocuments }
   };
 }
-function serializeManifest(manifest5) {
-  return new TextEncoder().encode(JSON.stringify(manifest5));
+function serializeManifest(manifest6) {
+  return new TextEncoder().encode(JSON.stringify(manifest6));
 }
 function parseManifest2(bytes) {
   let value;
@@ -28780,14 +28802,14 @@ function parseManifest2(bytes) {
     return null;
   }
 }
-function packageForVersion(manifest5, version6) {
-  return manifest5.versions.find((entry2) => entry2.version === version6) ?? null;
+function packageForVersion(manifest6, version6) {
+  return manifest6.versions.find((entry2) => entry2.version === version6) ?? null;
 }
-function withVersion(manifest5, entry2) {
-  return buildManifest([...manifest5?.versions ?? [], entry2], manifest5?.presentation, manifest5?.documents);
+function withVersion(manifest6, entry2) {
+  return buildManifest([...manifest6?.versions ?? [], entry2], manifest6?.presentation, manifest6?.documents);
 }
-function withPresentation(manifest5, presentation) {
-  return buildManifest(manifest5.versions, presentation, manifest5.documents);
+function withPresentation(manifest6, presentation) {
+  return buildManifest(manifest6.versions, presentation, manifest6.documents);
 }
 var MAX_SKILL_MANIFEST_BYTES, SKILL_MANIFEST_SCHEME, SKILL_DETAIL_KINDS, DETAIL_MEDIA_TYPES, DETAIL_HASH, DETAIL_ASSET_PATH, DETAIL_IPFS_URI, DETAIL_STORAGE_URI, DETAIL_BUCKET_BY_KIND, DETAIL_MEDIA_HOST;
 var init_manifest = __esm({
@@ -28848,8 +28870,8 @@ async function createOracleDevice() {
 async function oracleNonce(device) {
   assertOraclePublicKey(device.publicKey);
   if (!Number.isSafeInteger(device.nonceMs) || device.nonceMs <= 0) throw new TypeError("Invalid Oracle request timestamp.");
-  const fingerprint2 = await sha256Hex(new TextEncoder().encode(`${device.publicKey.x}.${device.publicKey.y}`));
-  return `${ORACLE_DELIVERY}:${device.nonceMs}:${fingerprint2.slice(2)}`;
+  const fingerprint = await sha256Hex(new TextEncoder().encode(`${device.publicKey.x}.${device.publicKey.y}`));
+  return `${ORACLE_DELIVERY}:${device.nonceMs}:${fingerprint.slice(2)}`;
 }
 async function openOracleKey(sealed, privateKey3) {
   assertOraclePublicKey(sealed.ephemeralPublicJwk);
@@ -29645,7 +29667,7 @@ var init_validation_input = __esm({
 });
 
 // ../../packages/agent-market-contracts/src/v1/errors.ts
-var creatorRequestReasonCodes, agentMarketErrorCodes, nextActionValues, AGENT_MARKET_ERROR_DEFINITIONS, nullableStringSchema, nullableUuidSchema, nullableRevisionSchema2, agentMarketErrorEnvelopeSchema;
+var creatorRequestReasonCodes, buyerStateReasonCodes, agentMarketErrorCodes, nextActionValues, AGENT_MARKET_ERROR_DEFINITIONS, nullableStringSchema, nullableUuidSchema, nullableRevisionSchema2, agentMarketErrorEnvelopeSchema;
 var init_errors3 = __esm({
   "../../packages/agent-market-contracts/src/v1/errors.ts"() {
     "use strict";
@@ -29658,6 +29680,14 @@ var init_errors3 = __esm({
       "creator_text_invalid_unicode",
       "creator_database_constraint"
     ];
+    buyerStateReasonCodes = [
+      "AGENT_MARKET_INVOCATION_NOT_CONTINUABLE",
+      "AGENT_REVIEW_WALLET_REQUIRED",
+      "AGENT_REVIEW_CREATOR_FORBIDDEN",
+      "AGENT_REVIEW_USAGE_REQUIRED",
+      "AVATAR_VIDEO_ACCOUNT_DAILY_LIMIT_REACHED",
+      "AVATAR_VIDEO_PLATFORM_DAILY_LIMIT_REACHED"
+    ];
     agentMarketErrorCodes = [
       "AGENT_MARKET_AUTH_REQUIRED",
       "AGENT_MARKET_SCOPE_DENIED",
@@ -29736,7 +29766,11 @@ var init_errors3 = __esm({
       error: strictObjectSchema2({
         code: { type: "string", enum: agentMarketErrorCodes },
         message: { type: "string", minLength: 1, maxLength: 500 },
-        reasonCode: { anyOf: [{ type: "string", enum: [...validationInputReasonCodes, ...creatorRequestReasonCodes] }, { type: "null" }] },
+        reasonCode: { anyOf: [{ type: "string", enum: [
+          ...validationInputReasonCodes,
+          ...creatorRequestReasonCodes,
+          ...buyerStateReasonCodes
+        ] }, { type: "null" }] },
         retryable: { type: "boolean" },
         nextAction: { type: "string", enum: nextActionValues },
         state: nullableStringSchema,
@@ -30976,7 +31010,17 @@ function taskMutationReceiptProperties(status) {
 function taskMutationReceipt(status) {
   return strictObjectSchema2(taskMutationReceiptProperties(status));
 }
-var booleanSchema2, jsonValueSchema, nullSchema2, agentOnInitialInputSchema, agentOnFollowUpContentSchema, feeBpsCapSchema, createPurchaseIntentRequestSchema, purchaseIntentAcceptedSchema, PURCHASE_FEE_DECISION_CONTRACT, feeSnapshotCommon, purchaseFeeDecisionSnapshotSchema, PURCHASE_LIFECYCLE_CONTRACT, FINANCIAL_AUTHORIZATION_CONTRACT, nonNegativeIntegerStringSchema2, callRightPurchaseBatchSchema, callRightsListResponseSchema, CALL_RIGHTS_PAGE_CONTRACT, CALL_FUNDING_SOURCES, fundingSourceSchema, callEligibilityQuerySchema, described2, callEligibilityResponseSchema, invocationStartRequestSchema, invocationContinueRequestSchema, runtimeHandoffStateSchema, p1InvocationReceiptProperties, p1InvocationReceiptSchema, p1InvocationAcceptedSchema, directInvocationAcceptedSchema, supplementalQuestionOptionSchema, p1QuestionSchema, p1QuestionsSchema, p1AwaitingCompletionQuestionsSchema, taskQuestionSchema, taskQuestionsSchema, closedPublicFailureSchema, timeoutFailureSchema, invocationCommon, p1InvocationResponseSchema, directInvocationCommon, directPublicFailureSchema, directInvocationResponseSchema, DIRECT_INVOCATION_READ_CONTRACT, invocationResponseSchema, createTaskRequestSchema, TASK_QUANTITY_AUTHORITY_CONTRACT, taskCreateReceiptProperties, taskCreateReceiptSchema, taskCreateAcceptedSchema, taskStrongEtagSchema, taskInputReceiptSchema, taskInputAcceptedSchema, taskCommon, buyerOutputArtifactSchema, buyerOutputArtifactsSchema, taskResponseSchema, BUYER_AGENTON_RECOVERY_CONTRACT, appendTaskInputRequestSchema, directInvocationRequestSchema, TASK_COMPLETED_CANONICALIZATION;
+function taskProjectionSchema(properties) {
+  return strictObjectSchema2({
+    ...properties,
+    failureCode: { anyOf: [taskFailureCodeSchema, nullSchema2] },
+    providerFailureCode: { anyOf: [{ type: "string", minLength: 1, maxLength: 120 }, nullSchema2] },
+    failureMessage: { anyOf: [{ type: "string", maxLength: 4e3 }, nullSchema2] },
+    interimContent: taskPresentationContentSchema,
+    terminalContent: taskPresentationContentSchema
+  }, Object.keys(properties));
+}
+var booleanSchema2, jsonValueSchema, nullSchema2, agentOnInitialInputSchema, agentOnFollowUpContentSchema, feeBpsCapSchema, createPurchaseIntentRequestSchema, purchaseIntentAcceptedSchema, PURCHASE_FEE_DECISION_CONTRACT, feeSnapshotCommon, purchaseFeeDecisionSnapshotSchema, PURCHASE_LIFECYCLE_CONTRACT, FINANCIAL_AUTHORIZATION_CONTRACT, nonNegativeIntegerStringSchema2, callRightPurchaseBatchSchema, callRightsListResponseSchema, CALL_RIGHTS_PAGE_CONTRACT, CALL_FUNDING_SOURCES, fundingSourceSchema, callEligibilityQuerySchema, described2, callEligibilityResponseSchema, invocationStartRequestSchema, invocationContinueRequestSchema, runtimeHandoffStateSchema, p1InvocationReceiptProperties, p1InvocationReceiptSchema, p1InvocationAcceptedSchema, directInvocationAcceptedSchema, supplementalQuestionOptionSchema, p1QuestionSchema, p1QuestionsSchema, p1AwaitingCompletionQuestionsSchema, taskQuestionSchema, taskQuestionsSchema, closedPublicFailureSchema, timeoutFailureSchema, invocationCommon, p1InvocationResponseSchema, directInvocationCommon, directPublicFailureSchema, directInvocationResponseSchema, DIRECT_INVOCATION_READ_CONTRACT, invocationResponseSchema, createTaskRequestSchema, TASK_QUANTITY_AUTHORITY_CONTRACT, taskCreateReceiptProperties, taskCreateReceiptSchema, taskCreateAcceptedSchema, taskStrongEtagSchema, taskInputReceiptSchema, taskInputAcceptedSchema, taskCommon, buyerOutputArtifactSchema, buyerOutputArtifactsSchema, taskFailureCodeSchema, taskFailureSchema, taskPresentationContentSchema, taskResponseSchema, BUYER_AGENTON_RECOVERY_CONTRACT, appendTaskInputRequestSchema, directInvocationRequestSchema, TASK_COMPLETED_CANONICALIZATION;
 var init_buyer = __esm({
   "../../packages/agent-market-contracts/src/v1/buyer.ts"() {
     "use strict";
@@ -31260,7 +31304,7 @@ var init_buyer = __esm({
     });
     timeoutFailureSchema = strictObjectSchema2({
       code: { const: "AGENT_MARKET_RUNTIME_TIMEOUT" },
-      message: nullSchema2
+      message: { anyOf: [{ type: "string", maxLength: 4e3 }, nullSchema2] }
     });
     invocationCommon = {
       operationId: canonicalUuidSchema2,
@@ -31459,40 +31503,56 @@ var init_buyer = __esm({
       maxItems: 100,
       items: buyerOutputArtifactSchema
     });
+    taskFailureCodeSchema = Object.freeze({
+      type: "string",
+      enum: ["AGENT_MARKET_RUNTIME_TIMEOUT", "AGENT_MARKET_RUNTIME_REJECTED", "AGENT_MARKET_RUNTIME_UNAVAILABLE"]
+    });
+    taskFailureSchema = strictObjectSchema2({
+      code: taskFailureCodeSchema,
+      message: { anyOf: [{ type: "string", maxLength: 4e3 }, nullSchema2] }
+    });
+    taskPresentationContentSchema = Object.freeze({
+      anyOf: [nullSchema2, { type: "array", minItems: 1, maxItems: 100, items: { oneOf: [
+        strictObjectSchema2({ type: { const: "text" }, text: { type: "string" } }),
+        strictObjectSchema2({ type: { const: "json" }, json: jsonValueSchema })
+      ] } }]
+    });
     taskResponseSchema = Object.freeze({
       oneOf: [
-        ...["submitted", "working"].map((status) => strictObjectSchema2({
+        ...["submitted", "working"].map((status) => taskProjectionSchema({
           ...taskCommon,
           status: { const: status },
           output: nullSchema2,
           error: nullSchema2
         })),
-        strictObjectSchema2({
+        taskProjectionSchema({
           ...taskCommon,
           status: { const: "input_required" },
+          inputRound: { type: "integer", minimum: 1, maximum: 100 },
+          inputToken: hex32Schema,
           output: strictObjectSchema2({ questions: taskQuestionsSchema }),
           error: nullSchema2
         }),
-        strictObjectSchema2({
+        taskProjectionSchema({
           ...taskCommon,
           status: { const: "completed" },
           output: jsonValueSchema,
           artifacts: buyerOutputArtifactsSchema,
           error: nullSchema2
         }),
-        strictObjectSchema2({
+        taskProjectionSchema({
           ...taskCommon,
           status: { const: "failed" },
           output: nullSchema2,
-          error: closedPublicFailureSchema
+          error: taskFailureSchema
         }),
-        strictObjectSchema2({
+        taskProjectionSchema({
           ...taskCommon,
           status: { const: "canceled" },
           output: nullSchema2,
-          error: nullSchema2
+          error: { anyOf: [taskFailureSchema, nullSchema2] }
         }),
-        strictObjectSchema2({
+        taskProjectionSchema({
           ...taskCommon,
           status: { const: "expired" },
           output: nullSchema2,
@@ -31514,7 +31574,7 @@ var init_buyer = __esm({
       p1ContinueOperationIdIsGenericRecovery: true,
       missingOrForeignOperationError: "AGENT_MARKET_OPERATION_NOT_FOUND"
     });
-    appendTaskInputRequestSchema = strictObjectSchema2({ content: agentOnFollowUpContentSchema });
+    appendTaskInputRequestSchema = strictObjectSchema2({ content: agentOnFollowUpContentSchema, inputToken: hex32Schema });
     directInvocationRequestSchema = strictObjectSchema2({ input: jsonValueSchema });
     TASK_COMPLETED_CANONICALIZATION = Object.freeze({
       omitted: true,
@@ -32374,31 +32434,13 @@ var init_foundation = __esm({
 });
 
 // ../../packages/agent-market-contracts/src/v1/identity.ts
-var PRODUCTION_AUTH_CHAIN_IDS, TEST_AUTH_CHAIN_IDS, identityScopeValues, IDENTITY_SCOPE_ORDER_CONTRACT, identityEnvironmentValues, environmentSchema, chainIdSchema2, dateTimeSchema, grantScopesSchema, identityChallengeRequestSchema, identityChallengeResponseSchema, identityLoginRequestSchema, identitySessionResponseSchema, identitySessionStatusResponseSchema, identityLogoutRequestSchema, identityMcpActorResponseSchema, identityGrantCreateRequestSchema, identityGrantCreateResponseSchema, identityGrantShowResponseSchema, identityGrantRevokeRequestSchema, identityErrorCodes, identityErrorEnvelopeSchema, IDENTITY_V1_ROUTES, IDENTITY_V1_OPERATIONS, IDENTITY_MCP_V1_MANIFEST, CLI_GRANT_SHOW_WIRE;
+var PRODUCTION_AUTH_CHAIN_IDS, TEST_AUTH_CHAIN_IDS, IDENTITY_SCOPE_ORDER_CONTRACT, identityEnvironmentValues, environmentSchema, chainIdSchema2, dateTimeSchema, identityChallengeRequestSchema, identityChallengeResponseSchema, identityLoginRequestSchema, identitySessionResponseSchema, identitySessionStatusResponseSchema, identityLogoutRequestSchema, identityMcpActorResponseSchema, identityErrorCodes, identityErrorEnvelopeSchema, IDENTITY_V1_ROUTES, IDENTITY_V1_OPERATIONS, IDENTITY_MCP_V1_MANIFEST;
 var init_identity = __esm({
   "../../packages/agent-market-contracts/src/v1/identity.ts"() {
     "use strict";
     init_common3();
-    PRODUCTION_AUTH_CHAIN_IDS = Object.freeze([1, 10, 56, 8453, 42161]);
+    PRODUCTION_AUTH_CHAIN_IDS = Object.freeze([1, 10, 56, 8453, 42161, 43114]);
     TEST_AUTH_CHAIN_IDS = Object.freeze([84532]);
-    identityScopeValues = [
-      "account:read",
-      "agent_market:buyer:invoke",
-      "agent_market:buyer:purchase",
-      "agent_market:buyer:read",
-      "agent_market:discover",
-      "agent_market:merchant:read",
-      "agent_market:merchant:write",
-      "agent_market:operations:read",
-      "skill_market:buyer:write",
-      "skill_market:creator:write",
-      "skill_market:discover",
-      "task_market:discover",
-      "task_market:participant:read",
-      "task_market:participant:write",
-      "task_market:requester:read",
-      "task_market:requester:write"
-    ];
     IDENTITY_SCOPE_ORDER_CONTRACT = Object.freeze({
       order: "ascii_lexicographic",
       duplicatesAllowed: false,
@@ -32408,15 +32450,6 @@ var init_identity = __esm({
     environmentSchema = { type: "string", enum: identityEnvironmentValues };
     chainIdSchema2 = { type: "integer", minimum: 1, maximum: 2147483647 };
     dateTimeSchema = { type: "string", format: "date-time" };
-    grantScopesSchema = {
-      type: "array",
-      minItems: 1,
-      maxItems: 16,
-      uniqueItems: true,
-      items: { type: "string", enum: identityScopeValues },
-      description: "Strictly ASCII-lexicographically sorted unique grant scopes.",
-      "x-finch-order": IDENTITY_SCOPE_ORDER_CONTRACT.order
-    };
     identityChallengeRequestSchema = strictObjectSchema2({
       walletAddress: evmAddressSchema,
       chainId: chainIdSchema2
@@ -32463,33 +32496,6 @@ var init_identity = __esm({
         description: "Finch environment serving this MCP request. In normal end-user use, this should be `production`. It does not select the CLI endpoint or transaction chain."
       }
     });
-    identityGrantCreateRequestSchema = strictObjectSchema2({
-      grantId: canonicalUuidSchema2,
-      grantTokenCommitment: hex32Schema,
-      scopes: grantScopesSchema,
-      expiresAt: dateTimeSchema
-    });
-    identityGrantCreateResponseSchema = strictObjectSchema2({
-      grantId: canonicalUuidSchema2,
-      accountId: canonicalUuidSchema2,
-      audience: { const: "finch_mcp" },
-      environment: environmentSchema,
-      scopes: grantScopesSchema,
-      expiresAt: dateTimeSchema,
-      replayed: { type: "boolean" }
-    });
-    identityGrantShowResponseSchema = strictObjectSchema2({
-      grantId: canonicalUuidSchema2,
-      audience: { const: "finch_mcp" },
-      environment: environmentSchema,
-      scopes: grantScopesSchema,
-      createdAt: dateTimeSchema,
-      expiresAt: dateTimeSchema,
-      revokedAt: { type: ["string", "null"], format: "date-time" },
-      status: { type: "string", enum: ["active", "expired", "revoked"] },
-      parentSessionExpiresAt: dateTimeSchema
-    });
-    identityGrantRevokeRequestSchema = emptyStrictObjectSchema;
     identityErrorCodes = [
       "AGENT_AUTH_REQUEST_INVALID",
       "AGENT_AUTH_CHAIN_UNSUPPORTED",
@@ -32519,9 +32525,6 @@ var init_identity = __esm({
       login: "/api/v1/identity/agent-cli/sessions",
       session: "/api/v1/identity/agent-cli/session",
       logout: "/api/v1/identity/agent-cli/session/logout",
-      grantCreate: "/api/v1/identity/agent-cli/grants",
-      grantShow: "/api/v1/identity/agent-cli/grants/{grantId}",
-      grantRevoke: "/api/v1/identity/agent-cli/grants/{grantId}/revoke",
       mcpActor: "/api/v1/identity/mcp/actor"
     });
     IDENTITY_V1_OPERATIONS = Object.freeze({
@@ -32529,9 +32532,6 @@ var init_identity = __esm({
       login: { id: "identity.login", method: "post", path: IDENTITY_V1_ROUTES.login, successStatus: 201, auth: "public", requestSchema: identityLoginRequestSchema, responseSchema: identitySessionResponseSchema },
       session: { id: "identity.session", method: "get", path: IDENTITY_V1_ROUTES.session, successStatus: 200, auth: "agent_cli_session", responseSchema: identitySessionStatusResponseSchema },
       logout: { id: "identity.logout", method: "post", path: IDENTITY_V1_ROUTES.logout, successStatus: 204, auth: "agent_cli_session", requestSchema: identityLogoutRequestSchema },
-      grantCreate: { id: "identity.grant_create", method: "post", path: IDENTITY_V1_ROUTES.grantCreate, successStatus: 201, auth: "agent_cli_session", idempotencySchema: idempotencyHeaderSchema, requestSchema: identityGrantCreateRequestSchema, responseSchema: identityGrantCreateResponseSchema },
-      grantShow: { id: "identity.grant_show", method: "get", path: IDENTITY_V1_ROUTES.grantShow, successStatus: 200, auth: "agent_cli_session", responseSchema: identityGrantShowResponseSchema },
-      grantRevoke: { id: "identity.grant_revoke", method: "post", path: IDENTITY_V1_ROUTES.grantRevoke, successStatus: 204, auth: "agent_cli_session", idempotencySchema: idempotencyHeaderSchema, requestSchema: identityGrantRevokeRequestSchema },
       mcpActor: {
         id: "identity.actor",
         method: "get",
@@ -32557,11 +32557,6 @@ var init_identity = __esm({
         sideEffect: "read"
       })])
     });
-    CLI_GRANT_SHOW_WIRE = Object.freeze({
-      operation: "grant.show",
-      responseSchema: identityGrantShowResponseSchema,
-      rawGrantTokenInResponse: false
-    });
   }
 });
 
@@ -34570,8 +34565,6 @@ var init_operations = __esm({
           requestSchema: appendTaskInputRequestSchema,
           responseSchema: taskInputAcceptedSchema,
           idempotencyRequired: true,
-          ifMatchRequired: true,
-          ifMatchResourceKind: "task",
           etagReturned: true
         }),
         mcp: { name: "agent_market_buyer_task_input" },
@@ -37899,15 +37892,15 @@ function createHmacDrbg(hashLen, qByteLen, hmacFn) {
   };
   return genUntil;
 }
-function validateObject(object6, validators, optValidators = {}) {
+function validateObject(object5, validators, optValidators = {}) {
   const checkField = (fieldName, type, isOptional) => {
     const checkVal = validatorFns[type];
     if (typeof checkVal !== "function")
       throw new Error("invalid validator function");
-    const val = object6[fieldName];
+    const val = object5[fieldName];
     if (isOptional && val === void 0)
       return;
-    if (!checkVal(val, object6)) {
+    if (!checkVal(val, object5)) {
       throw new Error("param " + String(fieldName) + " is invalid. Expected " + type + ", got " + val);
     }
   };
@@ -37915,7 +37908,7 @@ function validateObject(object6, validators, optValidators = {}) {
     checkField(fieldName, type, false);
   for (const [fieldName, type] of Object.entries(optValidators))
     checkField(fieldName, type, true);
-  return object6;
+  return object5;
 }
 function memoized(fn) {
   const map2 = /* @__PURE__ */ new WeakMap();
@@ -37949,7 +37942,7 @@ var init_utils2 = __esm({
       stringOrUint8Array: (val) => typeof val === "string" || isBytes2(val),
       isSafeInteger: (val) => Number.isSafeInteger(val),
       array: (val) => Array.isArray(val),
-      field: (val, object6) => object6.Fp.isValid(val),
+      field: (val, object5) => object5.Fp.isValid(val),
       hash: (val) => typeof val === "function" && Number.isSafeInteger(val.outputLen)
     };
   }
@@ -57752,7 +57745,7 @@ function recoveryFingerprint(kind, plan, walletAddress2, intentId) {
     sourceCommit: skillV3SourceCommit(chainId)
   })).digest("hex");
 }
-function recoveryJournal(value, fingerprint2, kind, context) {
+function recoveryJournal(value, fingerprint, kind, context) {
   const journal = object2(value, "Skill publication recovery");
   exact2(journal, [
     "version",
@@ -57779,7 +57772,7 @@ function recoveryJournal(value, fingerprint2, kind, context) {
   ], "Skill publication recovery");
   if (journal.intentId !== void 0 && (typeof journal.intentId !== "string" || !UUID.test(journal.intentId) || journal.origin !== context.origin)) throw new TypeError("Skill recovery endpoint or intent is invalid.");
   const chainId = skillChain(journal.chainId, "Skill recovery chain");
-  if (journal.version !== 4 && journal.version !== 5 && journal.version !== 6 || journal.kind !== kind || journal.fingerprint !== fingerprint2 || !/^[0-9a-f]{64}$/u.test(fingerprint2) || typeof journal.walletAddress !== "string" || journal.walletAddress.toLowerCase() !== context.walletAddress.toLowerCase()) throw new TypeError("Skill publication recovery authority does not match this command.");
+  if (journal.version !== 4 && journal.version !== 5 && journal.version !== 6 || journal.kind !== kind || journal.fingerprint !== fingerprint || !/^[0-9a-f]{64}$/u.test(fingerprint) || typeof journal.walletAddress !== "string" || journal.walletAddress.toLowerCase() !== context.walletAddress.toLowerCase()) throw new TypeError("Skill publication recovery authority does not match this command.");
   const recoveredAuthority = assertPublicationAuthority(
     signingAuthority(journal.signingAuthority, context.walletAddress),
     context
@@ -57881,14 +57874,14 @@ var init_skill_local_flow = __esm({
             ...Object.entries(progress.journal?.receipts ?? {}).flatMap(([stage, receipt]) => receipt && HASH2.test(receipt.transactionHash) ? [[stage, receipt.transactionHash]] : []),
             ...Object.entries(progress.broadcast ?? {}).filter(([, hash5]) => HASH2.test(hash5))
           ]);
-          const fingerprint2 = progress.journal && progress.fingerprint ? progress.fingerprint : progress.walletFingerprint ?? null;
+          const fingerprint = progress.journal && progress.fingerprint ? progress.fingerprint : progress.walletFingerprint ?? null;
           throw new CliSkillPublicationError({
             phase: progress.phase,
-            fingerprint: fingerprint2,
+            fingerprint,
             transactionHashes,
             unconfirmedActions: unconfirmed,
             submissionStatus: progress.uncertain ? "uncertain" : Object.keys(transactionHashes).length ? "hash_known" : "not_attempted",
-            recoveryCommand: progress.journalSaved && !progress.uncertain && progress.phase !== "cleanup" && fingerprint2 ? `finch skill recover ${progress.walletFingerprint ? "intent" : "publication"} ${fingerprint2}` : null,
+            recoveryCommand: progress.journalSaved && !progress.uncertain && progress.phase !== "cleanup" && fingerprint ? `finch skill recover ${progress.walletFingerprint ? "intent" : "publication"} ${fingerprint}` : null,
             resubmitSafe: progress.resubmitSafe === true
           }, cause);
         }
@@ -57899,8 +57892,8 @@ var init_skill_local_flow = __esm({
       async publishVersion(path2, plan, context) {
         return this.publication((progress) => this.publishVersionWithProgress(path2, plan, context, progress));
       }
-      async recoverPublication(fingerprint2, context) {
-        return this.publication((progress) => this.recoverWithProgress(fingerprint2, context, progress));
+      async recoverPublication(fingerprint, context) {
+        return this.publication((progress) => this.recoverWithProgress(fingerprint, context, progress));
       }
       async send(context, action, request2, prepared, authority, onBroadcast) {
         return required2(this.sender.submitPrepared, "Skill prepared-intent sender").call(this.sender, {
@@ -58049,24 +58042,24 @@ var init_skill_local_flow = __esm({
       async verify(context, action, request2, receipt) {
         return required2(this.sender.verifyPrepared, "Skill transaction verifier").call(this.sender, { privateKey: context.privateKey, walletAddress: context.walletAddress, action, request: request2, ...receipt });
       }
-      async save(fingerprint2, journal) {
-        await required2(this.recovery, "Skill publication recovery").saveSkillPublicationRecovery(fingerprint2, journal);
+      async save(fingerprint, journal) {
+        await required2(this.recovery, "Skill publication recovery").saveSkillPublicationRecovery(fingerprint, journal);
       }
       async project(chainId, transactionHash3, bearer, intentId, stage) {
         if (intentId === void 0 && this.api.confirmSkillProjection === void 0) return;
         const status = await required2(this.api.confirmSkillProjection, "Skill projection confirmation").call(this.api, chainId, transactionHash3, bearer, intentId, stage);
         if (intentId !== void 0 && status !== "projected") throw new TypeError("Skill projection is pending. Resume the saved Skill recovery.");
       }
-      async stage(progress, context, fingerprint2, journal, stage, action, request2, prepare) {
+      async stage(progress, context, fingerprint, journal, stage, action, request2, prepare) {
         progress.journal = journal;
-        progress.fingerprint = fingerprint2;
+        progress.fingerprint = fingerprint;
         progress.journalSaved = true;
         progress.phase = "transaction";
         const existing = journal.receipts[stage];
         if (existing !== null) {
           journal.receipts[stage] = context.intentId !== void 0 && existing.blockNumber !== null ? existing : await this.verify(context, action, request2, existing);
           if (journal.pendingStage === stage) journal.pendingStage = null;
-          await this.save(fingerprint2, journal);
+          await this.save(fingerprint, journal);
           progress.uncertain = false;
           progress.phase = "projection";
           await this.project(journal.chainId, journal.receipts[stage].transactionHash, context.bearer, context.intentId, stage);
@@ -58088,7 +58081,7 @@ var init_skill_local_flow = __esm({
         const marks = journal.version === 6;
         if (marks) {
           journal.pendingStage = stage;
-          await this.save(fingerprint2, journal);
+          await this.save(fingerprint, journal);
         }
         progress.uncertain = true;
         journal.receipts[stage] = await this.send(
@@ -58099,29 +58092,29 @@ var init_skill_local_flow = __esm({
           journal.signingAuthority,
           async ({ transactionHash: transactionHash3 }) => {
             journal.receipts[stage] = { transactionHash: transactionHash3, blockNumber: null };
-            await this.save(fingerprint2, journal);
+            await this.save(fingerprint, journal);
             if (marks) {
               journal.pendingStage = null;
-              await this.save(fingerprint2, journal);
+              await this.save(fingerprint, journal);
             }
             progress.uncertain = false;
           }
         );
         if (marks) journal.pendingStage = null;
-        await this.save(fingerprint2, journal);
+        await this.save(fingerprint, journal);
         progress.uncertain = false;
         progress.phase = "projection";
         await this.project(journal.chainId, journal.receipts[stage].transactionHash, context.bearer, context.intentId, stage);
       }
-      async recoverWithProgress(fingerprint2, context, progress) {
+      async recoverWithProgress(fingerprint, context, progress) {
         progress.phase = "recovery";
-        if (!/^[0-9a-f]{64}$/u.test(fingerprint2)) throw new TypeError("Skill publication recovery fingerprint is invalid.");
+        if (!/^[0-9a-f]{64}$/u.test(fingerprint)) throw new TypeError("Skill publication recovery fingerprint is invalid.");
         const store = required2(this.recovery, "Skill publication recovery");
-        const stored = await store.readSkillPublicationRecovery(fingerprint2);
+        const stored = await store.readSkillPublicationRecovery(fingerprint);
         if (stored === null) throw new TypeError("Skill publication recovery was not found.");
         const candidate = object2(stored, "Skill publication recovery");
         if (candidate.kind !== "publish" && candidate.kind !== "version") throw new TypeError("Skill publication recovery kind is invalid.");
-        const journal = recoveryJournal(stored, fingerprint2, candidate.kind, context);
+        const journal = recoveryJournal(stored, fingerprint, candidate.kind, context);
         if (journal.intentId !== void 0) {
           const owned = object2(await required2(this.api.getSkillSigningIntent, "Skill wallet intent API").call(this.api, journal.intentId, context.bearer), "Skill wallet intent");
           if (owned.intentId !== journal.intentId || owned.origin !== context.origin || owned.kind !== journal.kind) throw new TypeError("Skill recovery intent does not match its endpoint or action.");
@@ -58129,13 +58122,13 @@ var init_skill_local_flow = __esm({
           context = { ...context, intentId: journal.intentId };
         }
         progress.journal = journal;
-        progress.fingerprint = fingerprint2;
+        progress.fingerprint = fingerprint;
         progress.journalSaved = true;
         if (journal.kind === "publish") {
           await this.stage(
             progress,
             context,
-            fingerprint2,
+            fingerprint,
             journal,
             "primary",
             "createSkill",
@@ -58168,13 +58161,13 @@ var init_skill_local_flow = __esm({
                 journal.contentMode,
                 required2(journal.contentKey, "Skill recovery content key")
               );
-              await this.save(fingerprint2, journal);
+              await this.save(fingerprint, journal);
             }
             const litRequest = required2(journal.requests.lit, "Skill Lit recovery request");
             await this.stage(
               progress,
               context,
-              fingerprint2,
+              fingerprint,
               journal,
               "lit",
               "setLitData",
@@ -58183,7 +58176,7 @@ var init_skill_local_flow = __esm({
             );
           }
           progress.phase = "cleanup";
-          await store.clearSkillPublicationRecovery(fingerprint2);
+          await store.clearSkillPublicationRecovery(fingerprint);
           return {
             chainId: journal.chainId,
             skillId: skillId2,
@@ -58203,7 +58196,7 @@ var init_skill_local_flow = __esm({
         await this.stage(
           progress,
           context,
-          fingerprint2,
+          fingerprint,
           journal,
           "primary",
           "updateSkill",
@@ -58224,7 +58217,7 @@ var init_skill_local_flow = __esm({
         await this.stage(
           progress,
           context,
-          fingerprint2,
+          fingerprint,
           journal,
           "uri",
           "setSkillURI",
@@ -58242,13 +58235,13 @@ var init_skill_local_flow = __esm({
               journal.contentMode,
               required2(journal.contentKey, "Skill recovery content key")
             );
-            await this.save(fingerprint2, journal);
+            await this.save(fingerprint, journal);
           }
           const litRequest = required2(journal.requests.lit, "Skill Lit recovery request");
           await this.stage(
             progress,
             context,
-            fingerprint2,
+            fingerprint,
             journal,
             "lit",
             "setLitData",
@@ -58257,7 +58250,7 @@ var init_skill_local_flow = __esm({
           );
         }
         progress.phase = "cleanup";
-        await store.clearSkillPublicationRecovery(fingerprint2);
+        await store.clearSkillPublicationRecovery(fingerprint);
         return {
           chainId: journal.chainId,
           skillId,
@@ -58277,13 +58270,13 @@ var init_skill_local_flow = __esm({
       async publishWithProgress(path2, planValue, context, progress) {
         const plan = publishPlan(planValue, context);
         const request2 = plan.request;
-        const fingerprint2 = recoveryFingerprint("publish", planValue, context.walletAddress, context.intentId);
+        const fingerprint = recoveryFingerprint("publish", planValue, context.walletAddress, context.intentId);
         const store = required2(this.recovery, "Skill publication recovery");
         progress.phase = "recovery";
-        const prior = await store.readSkillPublicationRecovery(fingerprint2);
+        const prior = await store.readSkillPublicationRecovery(fingerprint);
         if (prior !== null) {
-          progress.journal = recoveryJournal(prior, fingerprint2, "publish", context);
-          progress.fingerprint = fingerprint2;
+          progress.journal = recoveryJournal(prior, fingerprint, "publish", context);
+          progress.fingerprint = fingerprint;
           progress.journalSaved = true;
         }
         progress.phase = "source";
@@ -58295,7 +58288,7 @@ var init_skill_local_flow = __esm({
         const packaged = await this.package(selected.files, prior === null ? mode : "plaintext", selected.excluded);
         let journal;
         if (prior !== null) {
-          journal = recoveryJournal(prior, fingerprint2, "publish", context);
+          journal = recoveryJournal(prior, fingerprint, "publish", context);
           if (journal.sourceKind !== expectedSourceKind || journal.contentMode !== mode || (journal.sourceHash ?? journal.packageHash).toLowerCase() !== packaged.packageHash.toLowerCase() || canonical(journal.excluded) !== canonical(packaged.excluded)) throw new TypeError("Skill publication content no longer matches its protected recovery.");
         } else {
           let publishedBytes;
@@ -58343,7 +58336,7 @@ var init_skill_local_flow = __esm({
             pendingStage: null,
             sourceHash: packaged.packageHash,
             kind: "publish",
-            fingerprint: fingerprint2,
+            fingerprint,
             walletAddress: context.walletAddress.toLowerCase(),
             chainId: plan.chainId,
             signingAuthority: plan.signingAuthority,
@@ -58361,15 +58354,15 @@ var init_skill_local_flow = __esm({
             receipts: { primary: null, uri: null, lit: null }
           };
           progress.journal = journal;
-          progress.fingerprint = fingerprint2;
+          progress.fingerprint = fingerprint;
           progress.phase = "recovery";
-          await this.save(fingerprint2, journal);
+          await this.save(fingerprint, journal);
           progress.journalSaved = true;
         }
         await this.stage(
           progress,
           context,
-          fingerprint2,
+          fingerprint,
           journal,
           "primary",
           "createSkill",
@@ -58401,13 +58394,13 @@ var init_skill_local_flow = __esm({
               journal.contentMode,
               required2(journal.contentKey, "Skill recovery content key")
             );
-            await this.save(fingerprint2, journal);
+            await this.save(fingerprint, journal);
           }
           const litRequest = required2(journal.requests.lit, "Skill Lit recovery request");
           await this.stage(
             progress,
             context,
-            fingerprint2,
+            fingerprint,
             journal,
             "lit",
             "setLitData",
@@ -58416,18 +58409,18 @@ var init_skill_local_flow = __esm({
           );
         }
         progress.phase = "cleanup";
-        await store.clearSkillPublicationRecovery(fingerprint2);
+        await store.clearSkillPublicationRecovery(fingerprint);
         return { chainId: journal.chainId, skillId, version: 1, contentMode: journal.contentMode, packageHash: journal.packageHash, excluded: journal.excluded, transactions: { create: required2(journal.receipts.primary, "Skill create receipt").transactionHash, ...journal.contentMode === "plaintext" ? {} : { setLitData: required2(journal.receipts.lit, "Skill Lit receipt").transactionHash } } };
       }
       async publishVersionWithProgress(path2, planValue, context, progress) {
         const plan = versionPlan(planValue, context);
-        const fingerprint2 = recoveryFingerprint("version", planValue, context.walletAddress, context.intentId);
+        const fingerprint = recoveryFingerprint("version", planValue, context.walletAddress, context.intentId);
         progress.phase = "recovery";
         const store = required2(this.recovery, "Skill publication recovery");
-        const prior = await store.readSkillPublicationRecovery(fingerprint2);
+        const prior = await store.readSkillPublicationRecovery(fingerprint);
         if (prior !== null) {
-          progress.journal = recoveryJournal(prior, fingerprint2, "version", context);
-          progress.fingerprint = fingerprint2;
+          progress.journal = recoveryJournal(prior, fingerprint, "version", context);
+          progress.fingerprint = fingerprint;
           progress.journalSaved = true;
         }
         const observedVersion = await required2(this.api.readSkillCurrentVersion, "Skill version API").call(
@@ -58447,7 +58440,7 @@ var init_skill_local_flow = __esm({
         const packaged = await this.package(selected.files, prior === null ? plan.contentMode : "plaintext", selected.excluded);
         let journal;
         if (prior !== null) {
-          journal = recoveryJournal(prior, fingerprint2, "version", context);
+          journal = recoveryJournal(prior, fingerprint, "version", context);
           if (journal.sourceKind !== plan.sourceKind || journal.contentMode !== plan.contentMode || (journal.sourceHash ?? journal.packageHash).toLowerCase() !== packaged.packageHash.toLowerCase() || canonical(journal.excluded) !== canonical(packaged.excluded)) throw new TypeError("Skill publication content no longer matches its protected recovery.");
         } else {
           const currentBytes = await required2(this.api.fetchSkillStoredContent, "Skill content relay").call(this.api, plan.currentPackageURI, context.bearer);
@@ -58490,7 +58483,7 @@ var init_skill_local_flow = __esm({
             pendingStage: null,
             sourceHash: packaged.packageHash,
             kind: "version",
-            fingerprint: fingerprint2,
+            fingerprint,
             walletAddress: context.walletAddress.toLowerCase(),
             chainId: plan.chainId,
             signingAuthority: plan.signingAuthority,
@@ -58508,15 +58501,15 @@ var init_skill_local_flow = __esm({
             receipts: { primary: null, uri: null, lit: null }
           };
           progress.journal = journal;
-          progress.fingerprint = fingerprint2;
+          progress.fingerprint = fingerprint;
           progress.phase = "recovery";
-          await this.save(fingerprint2, journal);
+          await this.save(fingerprint, journal);
           progress.journalSaved = true;
         }
         await this.stage(
           progress,
           context,
-          fingerprint2,
+          fingerprint,
           journal,
           "primary",
           "updateSkill",
@@ -58534,7 +58527,7 @@ var init_skill_local_flow = __esm({
         await this.stage(
           progress,
           context,
-          fingerprint2,
+          fingerprint,
           journal,
           "uri",
           "setSkillURI",
@@ -58552,13 +58545,13 @@ var init_skill_local_flow = __esm({
               journal.contentMode,
               required2(journal.contentKey, "Skill recovery content key")
             );
-            await this.save(fingerprint2, journal);
+            await this.save(fingerprint, journal);
           }
           const litRequest = required2(journal.requests.lit, "Skill Lit recovery request");
           await this.stage(
             progress,
             context,
-            fingerprint2,
+            fingerprint,
             journal,
             "lit",
             "setLitData",
@@ -58567,7 +58560,7 @@ var init_skill_local_flow = __esm({
           );
         }
         progress.phase = "cleanup";
-        await store.clearSkillPublicationRecovery(fingerprint2);
+        await store.clearSkillPublicationRecovery(fingerprint);
         return { chainId: journal.chainId, skillId: plan.request.skillId, version: plan.nextVersion, contentMode: journal.contentMode, packageHash: journal.packageHash, excluded: journal.excluded, transactions: { update: required2(journal.receipts.primary, "Skill update receipt").transactionHash, setSkillURI: required2(journal.receipts.uri, "Skill URI receipt").transactionHash, ...journal.contentMode === "plaintext" ? {} : { setLitData: required2(journal.receipts.lit, "Skill Lit receipt").transactionHash } } };
       }
       async manage(kind, planValue, context) {
@@ -58624,9 +58617,9 @@ var init_skill_local_flow = __esm({
           plan.signingAuthority,
           async ({ transactionHash: transactionHash3 }) => {
             progress.broadcast = { setSkillURI: transactionHash3 };
-            const fingerprint2 = await context.onBroadcast?.({ request: request2, intent: object2(prepared, "Skill presentation intent"), transactionHash: transactionHash3 });
-            if (fingerprint2) {
-              progress.walletFingerprint = fingerprint2;
+            const fingerprint = await context.onBroadcast?.({ request: request2, intent: object2(prepared, "Skill presentation intent"), transactionHash: transactionHash3 });
+            if (fingerprint) {
+              progress.walletFingerprint = fingerprint;
               progress.journalSaved = true;
               progress.resubmitSafe = false;
             }
@@ -58672,12 +58665,12 @@ var init_skill_local_flow = __esm({
         const plan = deliveryPlan(planValue, context);
         if (!context) throw new TypeError("Sign in with Finch CLI before downloading Skills.");
         const located = await this.fetchDeliveryContent(plan.packageURI, context?.bearer);
-        const manifest5 = parseManifest2(located);
+        const manifest6 = parseManifest2(located);
         let stored = located;
         const expectedHash = plan.packageHash;
-        const root = manifest5 === null ? void 0 : packageForVersion(manifest5, plan.version)?.skillRoot;
-        if (manifest5 !== null) {
-          const entry2 = packageForVersion(manifest5, plan.version);
+        const root = manifest6 === null ? void 0 : packageForVersion(manifest6, plan.version)?.skillRoot;
+        if (manifest6 !== null) {
+          const entry2 = packageForVersion(manifest6, plan.version);
           if (entry2 === null) throw new TypeError(`Skill manifest does not list version ${plan.version}.`);
           if (entry2.packageHash.toLowerCase() !== plan.packageHash.toLowerCase()) throw new TypeError("Skill manifest package hash does not match chain authority.");
           stored = await this.fetchDeliveryContent(entry2.packageURI, context?.bearer);
@@ -59089,7 +59082,7 @@ function agentPurchaseAuthority(snapshot, operationId, walletAddress2) {
   if (snapshot.operationId !== operationId || snapshot.chainId !== String(deployment.chainId) || snapshot.deploymentHash !== deployment.deploymentHash || snapshot.paymentTokenAddress !== deployment.paymentTokenAddress || typeof snapshot.totalPaidAtomic !== "string" || !/^[1-9][0-9]{0,77}$/u.test(snapshot.totalPaidAtomic) || typeof approval.spender !== "string" || approval.spender !== deployment.vaultAddress || approval.amountAtomic !== snapshot.totalPaidAtomic || approvalTransaction.to !== snapshot.paymentTokenAddress || revokeApprovalTransaction.to !== snapshot.paymentTokenAddress || purchaseTransaction.to !== approval.spender || confirmation.contractAddress !== approval.spender || confirmation.eventName !== "PurchaseConfirmed" || confirmation.minimumConfirmations !== deployment.confirmations || typeof snapshot.confirmationDeadlineAt !== "string" || Date.parse(snapshot.confirmationDeadlineAt) <= Date.now() || typeof approvalTransaction.data !== "string" || typeof revokeApprovalTransaction.data !== "string" || typeof purchaseTransaction.data !== "string" || approvalTransaction.value !== "0" || revokeApprovalTransaction.value !== "0" || purchaseTransaction.value !== "0") {
     throw new TypeError("The Agent purchase transaction authority is invalid or expired.");
   }
-  const fingerprint2 = createHash3("sha256").update(JSON.stringify([
+  const fingerprint = createHash3("sha256").update(JSON.stringify([
     "finch.cli.agent_purchase_recovery.v2",
     operationId,
     walletAddress2,
@@ -59114,7 +59107,7 @@ function agentPurchaseAuthority(snapshot, operationId, walletAddress2) {
     confirmation.minimumConfirmations
   ]), "utf8").digest("hex");
   return Object.freeze({
-    fingerprint: fingerprint2,
+    fingerprint,
     chainId: deployment.chainId,
     deploymentHash: deployment.deploymentHash,
     confirmations: deployment.confirmations,
@@ -59625,7 +59618,7 @@ var init_application = __esm({
         );
         const [session, sessionCheck] = await inspect(
           () => required3(this.state.readSession, "state.readSession").call(this.state),
-          "Run finch logout --local, then finch login --help to log in again."
+          "Run finch login --help for supported authentication chains, then finch login --chain-id <CHAIN_ID>."
         );
         let remoteSession = null;
         let remoteSessionCheck;
@@ -59637,7 +59630,7 @@ var init_application = __esm({
             const remote = asObject(await required3(this.api.getSession, "api.getSession").call(this.api, session.rawBearer, AbortSignal.timeout(15e3)), "MCP doctor Session");
             if (remote.sessionId !== session.sessionId || remote.accountId !== session.accountId || remote.walletAddress !== session.walletAddress || remote.environment !== session.environment || remote.audience !== "agent_cli" || typeof remote.sessionExpiresAt !== "string" || !Number.isFinite(Date.parse(remote.sessionExpiresAt)) || Date.parse(remote.sessionExpiresAt) <= Date.now()) throw new CliAuthorityError();
             return { sessionExpiresAt: remote.sessionExpiresAt };
-          }, "Verify the endpoint and current wallet, then run finch login --help to renew the CLI login. If the server is unavailable, retry later.");
+          }, `Verify the endpoint and current wallet. If the CLI Session is invalid or expired, run finch login --chain-id ${session.loginChainId} using the same wallet and endpoint. If the server is unavailable, retry later.`);
         } else {
           remoteSessionCheck = { status: "skipped", message: "Requires a valid endpoint, local wallet, and CLI Session." };
         }
@@ -59681,12 +59674,6 @@ var init_application = __esm({
           ...mcp === null ? {} : { mcp }
         });
       }
-      async assertNoBlockingRecoveries() {
-        const recoveries = await this.state.listBlockingRecoveries?.call(this.state) ?? [];
-        if (recoveries.length > 0) {
-          throw new CliRecoveryBlockedError(recoveries.map((recovery) => recovery.command));
-        }
-      }
       async temporaryLoginBearer(profile, wallet, expectedAccountId, chainId) {
         const challenge2 = parseChallenge(await required3(this.api.createChallenge, "api.createChallenge").call(this.api, {
           walletAddress: wallet.walletAddress,
@@ -59724,7 +59711,6 @@ var init_application = __esm({
           await required3(this.state.removeAuthorization, "state.removeAuthorization").call(this.state);
           return Object.freeze({ loggedOut: true, remoteRevoked: false });
         }
-        await this.assertNoBlockingRecoveries();
         const profile = await this.authorizedProfile();
         const session = await this.networkSession(profile);
         const wallet = await required3(this.state.readWallet, "state.readWallet").call(this.state);
@@ -59737,7 +59723,6 @@ var init_application = __esm({
         if (input.address === void 0 === (input.file === void 0)) {
           throw new TypeError("wallet use requires exactly one registered address or --file path.");
         }
-        await this.assertNoBlockingRecoveries();
         let current;
         try {
           current = await required3(this.state.readWallet, "state.readWallet").call(this.state);
@@ -59959,14 +59944,14 @@ var init_application = __esm({
         const owned = await this.skillWalletIntent(intentFile, expectedKind, session);
         const intent2 = { ...owned.preparation, walletIntent: { intentId: owned.intentId, kind: owned.kind } };
         assertSigningAuthority(intent2, session);
-        const fingerprint2 = skillBuyerIntentFingerprint(intent2);
+        const fingerprint = skillBuyerIntentFingerprint(intent2);
         if (owned.stages.primary?.transactionHash) {
           const receipt = await this.confirmSkillWalletResult(owned.intentId, owned.stages.primary.transactionHash, session);
-          if (receipt.status === "projected") await this.state.clearSkillBuyerIntentRecovery?.(fingerprint2);
+          if (receipt.status === "projected") await this.state.clearSkillBuyerIntentRecovery?.(fingerprint);
           return { ...receipt, chainId: intent2.chainId, skillId: asObject(intent2.request, "Skill request").skillId };
         }
-        const prior = await this.state.readSkillBuyerIntentRecovery?.(fingerprint2);
-        if (prior !== void 0 && prior !== null) return this.recoverSkill("intent", fingerprint2);
+        const prior = await this.state.readSkillBuyerIntentRecovery?.(fingerprint);
+        if (prior !== void 0 && prior !== null) return this.recoverSkill("intent", fingerprint);
         const sender = required3(this.skillIntentSender, "skill intent sender");
         const checkpoint = {};
         const submission = await sender.submit({
@@ -59975,7 +59960,7 @@ var init_application = __esm({
           expectedKind,
           intent: intent2,
           onBroadcast: async (broadcast) => {
-            if (broadcast.fingerprint !== fingerprint2) {
+            if (broadcast.fingerprint !== fingerprint) {
               throw new TypeError("Skill buyer checkpoint fingerprint does not match its OAuth intent.");
             }
             checkpoint.journal = createSkillBuyerIntentJournal({
@@ -59991,15 +59976,15 @@ var init_application = __esm({
                 broadcast.transactionHash
               )
             });
-            await required3(this.state.saveSkillBuyerIntentRecovery, "state.saveSkillBuyerIntentRecovery").call(this.state, fingerprint2, checkpoint.journal);
+            await required3(this.state.saveSkillBuyerIntentRecovery, "state.saveSkillBuyerIntentRecovery").call(this.state, fingerprint, checkpoint.journal);
           }
         });
         if (checkpoint.journal === void 0) throw new TypeError("Skill buyer sender did not checkpoint its broadcast.");
         const journal = withSkillBuyerIntentReceipt(checkpoint.journal, submission.blockNumber);
-        await required3(this.state.saveSkillBuyerIntentRecovery, "state.saveSkillBuyerIntentRecovery").call(this.state, fingerprint2, journal);
+        await required3(this.state.saveSkillBuyerIntentRecovery, "state.saveSkillBuyerIntentRecovery").call(this.state, fingerprint, journal);
         const confirmation = await this.confirmSkillWalletResult(owned.intentId, submission.transactionHash, session);
         if (confirmation.status === "projected") {
-          await required3(this.state.clearSkillBuyerIntentRecovery, "state.clearSkillBuyerIntentRecovery").call(this.state, fingerprint2);
+          await required3(this.state.clearSkillBuyerIntentRecovery, "state.clearSkillBuyerIntentRecovery").call(this.state, fingerprint);
         }
         return { ...confirmation, transactionHash: submission.transactionHash, blockNumber: submission.blockNumber, chainId: intent2.chainId, skillId: asObject(intent2.request, "Skill request").skillId };
       }
@@ -60008,8 +59993,8 @@ var init_application = __esm({
         const owned = await this.skillWalletIntent(planFile, "publish", authority.session);
         const plan = owned.preparation;
         if (owned.stages.primary?.transactionHash) {
-          const fingerprint2 = recoveryFingerprint("publish", plan, authority.wallet.walletAddress, owned.intentId);
-          const saved = await this.state.readSkillPublicationRecovery?.(fingerprint2);
+          const fingerprint = recoveryFingerprint("publish", plan, authority.wallet.walletAddress, owned.intentId);
+          const saved = await this.state.readSkillPublicationRecovery?.(fingerprint);
           if (saved == null) {
             const stages = ["primary"];
             if (asObject(plan.request, "Skill request").contentMode !== "plaintext") stages.push("lit");
@@ -60040,8 +60025,8 @@ var init_application = __esm({
         const owned = await this.skillWalletIntent(planFile, "version", authority.session);
         const plan = owned.preparation;
         if (owned.stages.primary?.transactionHash) {
-          const fingerprint2 = recoveryFingerprint("version", plan, authority.wallet.walletAddress, owned.intentId);
-          const saved = await this.state.readSkillPublicationRecovery?.(fingerprint2);
+          const fingerprint = recoveryFingerprint("version", plan, authority.wallet.walletAddress, owned.intentId);
+          const saved = await this.state.readSkillPublicationRecovery?.(fingerprint);
           if (saved == null) {
             const stages = ["primary", "uri"];
             if (plan.contentMode !== "plaintext") stages.push("lit");
@@ -60087,10 +60072,10 @@ var init_application = __esm({
           intentId: owned.intentId,
           origin: authority.session.origin,
           resumePrepared: async (request2, intent2) => {
-            const fingerprint2 = skillBuyerIntentFingerprint(walletPlan(request2, intent2));
-            const stored = await this.state.readSkillBuyerIntentRecovery?.(fingerprint2);
+            const fingerprint = skillBuyerIntentFingerprint(walletPlan(request2, intent2));
+            const stored = await this.state.readSkillBuyerIntentRecovery?.(fingerprint);
             if (stored == null) return null;
-            const recovered = await this.recoverSkill("intent", fingerprint2);
+            const recovered = await this.recoverSkill("intent", fingerprint);
             if (recovered.status !== "projected") throw new TypeError("Skill projection is pending. Resume the recorded wallet result.");
             return { transactionHash: String(recovered.transactionHash), blockNumber: String(recovered.blockNumber) };
           },
@@ -60125,8 +60110,8 @@ var init_application = __esm({
           }
         } };
       }
-      async recoverSkill(kind, fingerprint2) {
-        if (!["publication", "intent"].includes(kind) || !/^[0-9a-f]{64}$/u.test(fingerprint2)) {
+      async recoverSkill(kind, fingerprint) {
+        if (!["publication", "intent"].includes(kind) || !/^[0-9a-f]{64}$/u.test(fingerprint)) {
           throw new TypeError("Skill recovery kind or fingerprint is invalid.");
         }
         const { wallet, session } = await this.walletAuthority();
@@ -60142,16 +60127,16 @@ var init_application = __esm({
           return asObject(await required3(
             required3(this.skillLocalFlow, "skill local flow").recoverPublication,
             "skill publication recovery"
-          ).call(this.skillLocalFlow, fingerprint2, context), "Skill publication recovery");
+          ).call(this.skillLocalFlow, fingerprint, context), "Skill publication recovery");
         }
-        const stored = await required3(this.state.readSkillBuyerIntentRecovery, "state.readSkillBuyerIntentRecovery").call(this.state, fingerprint2);
+        const stored = await required3(this.state.readSkillBuyerIntentRecovery, "state.readSkillBuyerIntentRecovery").call(this.state, fingerprint);
         if (stored === null) throw new TypeError("Skill buyer intent recovery journal was not found.");
         let journal = assertSkillBuyerIntentJournalAuthority(stored, {
           accountId: session.accountId,
           walletAddress: wallet.walletAddress,
           environment: session.environment
         });
-        if (journal.fingerprint !== fingerprint2) throw new TypeError("Skill buyer intent fingerprint is invalid.");
+        if (journal.fingerprint !== fingerprint) throw new TypeError("Skill buyer intent fingerprint is invalid.");
         assertSigningAuthority(journal.intent, session);
         if (journal.origin !== void 0 && journal.origin !== session.origin) throw new TypeError("Skill recovery belongs to another endpoint.");
         if (journal.intentId === void 0) {
@@ -60162,7 +60147,7 @@ var init_application = __esm({
           const receipt = owned.stages.primary;
           if (!receipt || receipt.transactionHash !== journal.transactionHash || receipt.blockNumber === null) throw new TypeError("Legacy Skill adoption has no canonical receipt.");
           if (journal.blockNumber === null) journal = withSkillBuyerIntentReceipt(journal, receipt.blockNumber);
-          await required3(this.state.saveSkillBuyerIntentRecovery, "state.saveSkillBuyerIntentRecovery").call(this.state, fingerprint2, journal);
+          await required3(this.state.saveSkillBuyerIntentRecovery, "state.saveSkillBuyerIntentRecovery").call(this.state, fingerprint, journal);
         } else {
           const owned = await this.skillWalletIntent(journal.intentId, journal.kind, session);
           const stage = owned.stages.primary;
@@ -60186,12 +60171,12 @@ var init_application = __esm({
               blockNumber: null
             });
             journal = withSkillBuyerIntentReceipt(journal, receipt.blockNumber);
-            await required3(this.state.saveSkillBuyerIntentRecovery, "state.saveSkillBuyerIntentRecovery").call(this.state, fingerprint2, journal);
+            await required3(this.state.saveSkillBuyerIntentRecovery, "state.saveSkillBuyerIntentRecovery").call(this.state, fingerprint, journal);
           }
         }
         const confirmation = await this.confirmSkillWalletResult(journal.intentId, journal.transactionHash, session);
         if (confirmation.status === "projected") {
-          await required3(this.state.clearSkillBuyerIntentRecovery, "state.clearSkillBuyerIntentRecovery").call(this.state, fingerprint2);
+          await required3(this.state.clearSkillBuyerIntentRecovery, "state.clearSkillBuyerIntentRecovery").call(this.state, fingerprint);
         }
         return { ...confirmation, transactionHash: journal.transactionHash, blockNumber: confirmation.blockNumber };
       }
@@ -61573,191 +61558,6 @@ var init_stdin_reader = __esm({
   }
 });
 
-// src/recovery-inventory.ts
-function object4(value, name) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    throw new TypeError(`${name} must contain exact public fields.`);
-  }
-  return value;
-}
-function exactKeys2(value, keys, name) {
-  const actual = Object.keys(value).sort();
-  const expected = [...keys].sort();
-  if (actual.length !== expected.length || actual.some((key, index2) => key !== expected[index2])) {
-    throw new TypeError(`${name} must contain exact public fields.`);
-  }
-}
-function uuid5(value, name) {
-  if (typeof value !== "string" || !UUID3.test(value)) throw new TypeError(`${name} is invalid.`);
-  return value;
-}
-function fingerprint(value) {
-  if (typeof value !== "string" || !FINGERPRINT2.test(value)) {
-    throw new TypeError("Recovery fingerprint is invalid.");
-  }
-  return value;
-}
-function taskKind(value) {
-  if (!TASK_KINDS.includes(value)) {
-    throw new TypeError("Task recovery kind is invalid.");
-  }
-  return value;
-}
-function skillKind(value) {
-  if (!SKILL_KINDS.includes(value)) {
-    throw new TypeError("Skill recovery kind is invalid.");
-  }
-  return value;
-}
-function parseEntry(value) {
-  const candidate = object4(value, "Recovery inventory entry");
-  if (candidate.type === "agent_purchase") {
-    exactKeys2(candidate, ["type", "operationId"], "Agent purchase recovery entry");
-    return Object.freeze({
-      type: "agent_purchase",
-      operationId: uuid5(candidate.operationId, "Agent purchase operationId")
-    });
-  }
-  if (candidate.type === "task") {
-    exactKeys2(candidate, ["type", "taskId", "kind"], "Task recovery entry");
-    return Object.freeze({
-      type: "task",
-      taskId: uuid5(candidate.taskId, "Task taskId"),
-      kind: taskKind(candidate.kind)
-    });
-  }
-  if (candidate.type === "skill") {
-    exactKeys2(candidate, ["type", "kind", "fingerprint"], "Skill recovery entry");
-    return Object.freeze({
-      type: "skill",
-      kind: skillKind(candidate.kind),
-      fingerprint: fingerprint(candidate.fingerprint)
-    });
-  }
-  throw new TypeError("Recovery inventory entry type is invalid.");
-}
-function parseKey(value) {
-  const candidate = object4(value, "Recovery inventory key");
-  if (candidate.type === "agent_purchase") {
-    exactKeys2(candidate, ["type", "operationId"], "Agent purchase recovery key");
-    return Object.freeze({
-      type: "agent_purchase",
-      operationId: uuid5(candidate.operationId, "Agent purchase operationId")
-    });
-  }
-  if (candidate.type === "task") {
-    exactKeys2(candidate, ["type", "taskId", "kind"], "Task recovery key");
-    return Object.freeze({
-      type: "task",
-      taskId: uuid5(candidate.taskId, "Task taskId"),
-      kind: taskKind(candidate.kind)
-    });
-  }
-  if (candidate.type === "skill") {
-    exactKeys2(candidate, ["type", "kind", "fingerprint"], "Skill recovery key");
-    return Object.freeze({
-      type: "skill",
-      kind: skillKind(candidate.kind),
-      fingerprint: fingerprint(candidate.fingerprint)
-    });
-  }
-  throw new TypeError("Recovery inventory key type is invalid.");
-}
-function entryKey(entry2) {
-  if (entry2.type === "agent_purchase") return `agent_purchase:${entry2.operationId}`;
-  if (entry2.type === "task") return `task:${entry2.taskId}:${entry2.kind}`;
-  return `skill:${entry2.kind}:${entry2.fingerprint}`;
-}
-function document(value) {
-  if (value === null) return Object.freeze({ version: 1, entries: Object.freeze([]) });
-  const candidate = object4(value, "Recovery inventory");
-  exactKeys2(candidate, ["version", "entries"], "Recovery inventory");
-  if (candidate.version !== 1 || !Array.isArray(candidate.entries)) {
-    throw new TypeError("Recovery inventory is invalid.");
-  }
-  const entries = candidate.entries.map(parseEntry).sort((left, right) => entryKey(left).localeCompare(entryKey(right)));
-  if (new Set(entries.map(entryKey)).size !== entries.length) {
-    throw new TypeError("Recovery inventory contains duplicate entries.");
-  }
-  return Object.freeze({ version: 1, entries: Object.freeze(entries) });
-}
-function publicDocument(entries) {
-  return Object.freeze({
-    version: 1,
-    entries: Object.freeze([...entries].sort((left, right) => entryKey(left).localeCompare(entryKey(right))))
-  });
-}
-function formatRecoveryInventoryEntry(entryValue) {
-  const entry2 = parseEntry(entryValue);
-  if (entry2.type === "agent_purchase") {
-    return Object.freeze({
-      type: "agent_purchase",
-      operationId: entry2.operationId,
-      command: `finch purchase submit ${entry2.operationId}`,
-      blockedReason: null,
-      guidance: null
-    });
-  }
-  if (entry2.type === "task") {
-    return Object.freeze({
-      type: "task",
-      taskId: entry2.taskId,
-      kind: entry2.kind,
-      command: `finch task recover ${entry2.taskId} ${entry2.kind}`,
-      blockedReason: null,
-      guidance: null
-    });
-  }
-  return Object.freeze({
-    type: "skill",
-    kind: entry2.kind,
-    fingerprint: entry2.fingerprint,
-    command: `finch skill recover ${entry2.kind} ${entry2.fingerprint}`,
-    blockedReason: null,
-    guidance: null
-  });
-}
-var UUID3, FINGERPRINT2, TASK_KINDS, SKILL_KINDS, RecoveryInventory;
-var init_recovery_inventory = __esm({
-  "src/recovery-inventory.ts"() {
-    "use strict";
-    UUID3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
-    FINGERPRINT2 = /^[0-9a-f]{64}$/u;
-    TASK_KINDS = Object.freeze(["publish", "award", "reclaim"]);
-    SKILL_KINDS = Object.freeze(["publication", "intent"]);
-    RecoveryInventory = class {
-      constructor(storage) {
-        this.storage = storage;
-      }
-      storage;
-      async add(entryValue) {
-        const entry2 = parseEntry(entryValue);
-        const current = await this.list();
-        const key = entryKey(entry2);
-        const existing = current.find((candidate) => entryKey(candidate) === key);
-        if (existing !== void 0) return existing;
-        const next = [...current, entry2];
-        await this.storage.write(publicDocument(next));
-        return entry2;
-      }
-      async remove(keyValue) {
-        const key = parseKey(keyValue);
-        const current = await this.list();
-        const next = current.filter((entry2) => entryKey(entry2) !== entryKey(key));
-        if (next.length === current.length) return false;
-        await this.storage.write(publicDocument(next));
-        return true;
-      }
-      async list() {
-        return document(await this.storage.read()).entries;
-      }
-      async format() {
-        return Object.freeze((await this.list()).map(formatRecoveryInventoryEntry));
-      }
-    };
-  }
-});
-
 // src/wallet-store.ts
 function record3(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
@@ -61967,7 +61767,7 @@ var init_wallet_store = __esm({
 import { randomBytes as randomBytes2 } from "node:crypto";
 import { lstat as lstat3 } from "node:fs/promises";
 import { join as join3 } from "node:path";
-function object5(value, name) {
+function object4(value, name) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     throw new CliStateError("CLI_STATE_CORRUPT", { cause: new TypeError(`${name} must be an object.`) });
   }
@@ -61990,7 +61790,7 @@ function endpointOrigin(value) {
 }
 function secretRecord(value, name) {
   try {
-    return object5(JSON.parse(value.toString("utf8")), name);
+    return object4(JSON.parse(value.toString("utf8")), name);
   } catch (cause) {
     if (cause instanceof CliStateError) throw cause;
     throw new CliStateError("CLI_STATE_CORRUPT", { cause });
@@ -62007,20 +61807,6 @@ function taskRecoveryKind(value) {
 function hasCheckpoint(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) && typeof value.transactionHash === "string" && TRANSACTION_HASH.test(value.transactionHash);
 }
-function hasAgentPurchaseCheckpoint(value) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
-  const journal = value;
-  return ["approval", "purchase", "revocation"].some((phase) => hasCheckpoint(journal[phase]));
-}
-function hasSkillPublicationCheckpoint(value) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
-  const journal = value;
-  if (journal.version === 6 && ["primary", "uri", "lit"].includes(String(journal.pendingStage))) return true;
-  const receipts = value.receipts;
-  if (typeof receipts !== "object" || receipts === null || Array.isArray(receipts)) return false;
-  const stages = receipts;
-  return ["primary", "uri", "lit"].some((stage) => hasCheckpoint(stages[stage]));
-}
 function hasTaskRecoveryCheckpoint(value, kind) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
   if (kind === "award") {
@@ -62029,7 +61815,7 @@ function hasTaskRecoveryCheckpoint(value, kind) {
   }
   return hasCheckpoint(value);
 }
-function hasSkillBuyerIntentCheckpoint(value, fingerprint2) {
+function hasSkillBuyerIntentCheckpoint(value, fingerprint) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
   const journal = value;
   const intent2 = journal.intent;
@@ -62038,37 +61824,24 @@ function hasSkillBuyerIntentCheckpoint(value, fingerprint2) {
   const authority = intentRecord.signingAuthority;
   if (typeof authority !== "object" || authority === null || Array.isArray(authority)) return false;
   const authorityRecord = authority;
-  return journal.version === 1 && journal.journalKind === "buyer_intent" && journal.fingerprint === fingerprint2 && ["purchase", "convert", "set_unit_price", "set_max_supply", "presentation"].includes(String(journal.kind)) && intentRecord.kind === journal.kind && typeof journal.accountId === "string" && UUID4.test(journal.accountId) && typeof journal.walletAddress === "string" && /^0x[0-9a-f]{40}$/u.test(journal.walletAddress) && (journal.environment === "local" || journal.environment === "test" || journal.environment === "production") && intentRecord.walletAddress === journal.walletAddress && authorityRecord.accountId === journal.accountId && authorityRecord.walletAddress === journal.walletAddress && authorityRecord.environment === journal.environment && typeof journal.transactionHash === "string" && TRANSACTION_HASH.test(journal.transactionHash) && (journal.blockNumber === null || typeof journal.blockNumber === "string" && /^[1-9][0-9]*$/u.test(journal.blockNumber)) && (journal.confirmStatus === "broadcast" || journal.confirmStatus === "receipt_confirmed" || journal.confirmStatus === "projection_confirmed") && (journal.confirmStatus === "broadcast" ? journal.blockNumber === null : journal.blockNumber !== null) && typeof journal.idempotencyKey === "string" && journal.idempotencyKey.length > 0;
+  return journal.version === 1 && journal.journalKind === "buyer_intent" && journal.fingerprint === fingerprint && ["purchase", "convert", "set_unit_price", "set_max_supply", "presentation"].includes(String(journal.kind)) && intentRecord.kind === journal.kind && typeof journal.accountId === "string" && UUID3.test(journal.accountId) && typeof journal.walletAddress === "string" && /^0x[0-9a-f]{40}$/u.test(journal.walletAddress) && (journal.environment === "local" || journal.environment === "test" || journal.environment === "production") && intentRecord.walletAddress === journal.walletAddress && authorityRecord.accountId === journal.accountId && authorityRecord.walletAddress === journal.walletAddress && authorityRecord.environment === journal.environment && typeof journal.transactionHash === "string" && TRANSACTION_HASH.test(journal.transactionHash) && (journal.blockNumber === null || typeof journal.blockNumber === "string" && /^[1-9][0-9]*$/u.test(journal.blockNumber)) && (journal.confirmStatus === "broadcast" || journal.confirmStatus === "receipt_confirmed" || journal.confirmStatus === "projection_confirmed") && (journal.confirmStatus === "broadcast" ? journal.blockNumber === null : journal.blockNumber !== null) && typeof journal.idempotencyKey === "string" && journal.idempotencyKey.length > 0;
 }
-var RECOVERY_FINGERPRINT, TRANSACTION_HASH, UUID4, LocalCliState;
+var RECOVERY_FINGERPRINT, TRANSACTION_HASH, UUID3, LocalCliState;
 var init_local_state = __esm({
   "src/local-state.ts"() {
     "use strict";
     init_v1();
     init_state();
-    init_recovery_inventory();
     init_wallet_store();
     RECOVERY_FINGERPRINT = /^[0-9a-f]{64}$/u;
     TRANSACTION_HASH = /^0x[0-9a-f]{64}$/u;
-    UUID4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
+    UUID3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
     LocalCliState = class {
       files;
       wallets;
-      recoveryInventory;
       constructor(home, fileStoreOptions = {}) {
         this.files = new HardenedFileStore(home, fileStoreOptions);
         this.wallets = new WalletStore(home, { fileStoreOptions });
-        this.recoveryInventory = new RecoveryInventory({
-          read: async () => {
-            try {
-              return await this.files.readJson("mutations/recovery-index.json");
-            } catch (cause) {
-              if (cause instanceof CliStateError && cause.code === "CLI_STATE_NOT_FOUND") return null;
-              throw cause;
-            }
-          },
-          write: async (document2) => this.files.writeJson("mutations/recovery-index.json", document2)
-        });
       }
       async readAgentPurchaseRecovery(operationId) {
         parseCanonicalUuid(operationId, "operationId");
@@ -62082,35 +61855,27 @@ var init_local_state = __esm({
       async saveAgentPurchaseRecovery(operationId, value) {
         parseCanonicalUuid(operationId, "operationId");
         await this.files.writeJson(`mutations/agent-purchases/${operationId}.secret`, value);
-        if (hasAgentPurchaseCheckpoint(value)) {
-          await this.recoveryInventory.add({ type: "agent_purchase", operationId });
-        }
       }
       async clearAgentPurchaseRecovery(operationId) {
         parseCanonicalUuid(operationId, "operationId");
         await this.files.remove(`mutations/agent-purchases/${operationId}.secret`);
-        await this.recoveryInventory.remove({ type: "agent_purchase", operationId });
       }
-      async readSkillPublicationRecovery(fingerprint2) {
-        recoveryFingerprint2(fingerprint2);
+      async readSkillPublicationRecovery(fingerprint) {
+        recoveryFingerprint2(fingerprint);
         try {
-          return await this.files.readJson(`mutations/skill-publications/${fingerprint2}.secret`);
+          return await this.files.readJson(`mutations/skill-publications/${fingerprint}.secret`);
         } catch (cause) {
           if (cause instanceof CliStateError && cause.code === "CLI_STATE_NOT_FOUND") return null;
           throw cause;
         }
       }
-      async saveSkillPublicationRecovery(fingerprint2, value) {
-        recoveryFingerprint2(fingerprint2);
-        await this.files.writeJson(`mutations/skill-publications/${fingerprint2}.secret`, value);
-        if (hasSkillPublicationCheckpoint(value)) {
-          await this.recoveryInventory.add({ type: "skill", kind: "publication", fingerprint: fingerprint2 });
-        }
+      async saveSkillPublicationRecovery(fingerprint, value) {
+        recoveryFingerprint2(fingerprint);
+        await this.files.writeJson(`mutations/skill-publications/${fingerprint}.secret`, value);
       }
-      async clearSkillPublicationRecovery(fingerprint2) {
-        recoveryFingerprint2(fingerprint2);
-        await this.files.remove(`mutations/skill-publications/${fingerprint2}.secret`);
-        await this.recoveryInventory.remove({ type: "skill", kind: "publication", fingerprint: fingerprint2 });
+      async clearSkillPublicationRecovery(fingerprint) {
+        recoveryFingerprint2(fingerprint);
+        await this.files.remove(`mutations/skill-publications/${fingerprint}.secret`);
       }
       async readTaskRecovery(taskId, kindValue) {
         const id = parseCanonicalUuid(taskId, "taskId");
@@ -62127,43 +61892,36 @@ var init_local_state = __esm({
         const kind = taskRecoveryKind(kindValue);
         if (!hasTaskRecoveryCheckpoint(value, kind)) throw new CliStateError("CLI_STATE_CORRUPT");
         await this.files.writeJson(`mutations/tasks/${id}/${kind}.secret`, value);
-        await this.recoveryInventory.add({ type: "task", taskId: id, kind });
       }
       async clearTaskRecovery(taskId, kindValue) {
         const id = parseCanonicalUuid(taskId, "taskId");
         const kind = taskRecoveryKind(kindValue);
         await this.files.remove(`mutations/tasks/${id}/${kind}.secret`);
-        await this.recoveryInventory.remove({ type: "task", taskId: id, kind });
       }
       async readSkillBuyerIntentRecovery(fingerprintValue) {
-        const fingerprint2 = recoveryFingerprint2(fingerprintValue);
+        const fingerprint = recoveryFingerprint2(fingerprintValue);
         try {
-          return await this.files.readJson(`mutations/skill-buyer-intents/${fingerprint2}.secret`);
+          return await this.files.readJson(`mutations/skill-buyer-intents/${fingerprint}.secret`);
         } catch (cause) {
           if (cause instanceof CliStateError && cause.code === "CLI_STATE_NOT_FOUND") return null;
           throw cause;
         }
       }
       async saveSkillBuyerIntentRecovery(fingerprintValue, value) {
-        const fingerprint2 = recoveryFingerprint2(fingerprintValue);
-        if (!hasSkillBuyerIntentCheckpoint(value, fingerprint2)) throw new CliStateError("CLI_STATE_CORRUPT");
-        await this.files.writeJson(`mutations/skill-buyer-intents/${fingerprint2}.secret`, value);
-        await this.recoveryInventory.add({ type: "skill", kind: "intent", fingerprint: fingerprint2 });
+        const fingerprint = recoveryFingerprint2(fingerprintValue);
+        if (!hasSkillBuyerIntentCheckpoint(value, fingerprint)) throw new CliStateError("CLI_STATE_CORRUPT");
+        await this.files.writeJson(`mutations/skill-buyer-intents/${fingerprint}.secret`, value);
       }
       async clearSkillBuyerIntentRecovery(fingerprintValue) {
-        const fingerprint2 = recoveryFingerprint2(fingerprintValue);
-        await this.files.remove(`mutations/skill-buyer-intents/${fingerprint2}.secret`);
-        await this.recoveryInventory.remove({ type: "skill", kind: "intent", fingerprint: fingerprint2 });
-      }
-      async listBlockingRecoveries() {
-        return this.recoveryInventory.format();
+        const fingerprint = recoveryFingerprint2(fingerprintValue);
+        await this.files.remove(`mutations/skill-buyer-intents/${fingerprint}.secret`);
       }
       async writeProfile(input) {
         await this.files.writeJson("profile.json", { version: 1, origin: endpointOrigin(input.origin) });
       }
       async readProfile() {
         try {
-          const value = object5(await this.files.readJson("profile.json"), "profile");
+          const value = object4(await this.files.readJson("profile.json"), "profile");
           if (value.version !== 1 || Object.keys(value).sort().join(",") !== "origin,version") {
             throw new CliStateError("CLI_STATE_CORRUPT");
           }
@@ -62222,7 +61980,7 @@ var init_local_state = __esm({
         }), "utf8"), { exclusive: true });
       }
       async activateSession(input) {
-        const value = object5(input, "session");
+        const value = object4(input, "session");
         parseCanonicalUuid(value.sessionId, "sessionId");
         parseCanonicalUuid(value.accountId, "accountId");
         if (typeof value.walletAddress !== "string" || !/^0x[0-9a-f]{40}$/u.test(value.walletAddress) || value.audience !== "agent_cli" || typeof value.sessionExpiresAt !== "string") {
@@ -62275,7 +62033,7 @@ var init_local_state = __esm({
       }
       async readSession() {
         try {
-          const metadata = object5(await this.files.readJson("session/metadata.json"), "session metadata");
+          const metadata = object4(await this.files.readJson("session/metadata.json"), "session metadata");
           const rawBearer = (await this.files.readSecret("session/bearer")).toString("utf8");
           const sessionId = parseCanonicalUuid(metadata.sessionId, "sessionId");
           const accountId = parseCanonicalUuid(metadata.accountId, "accountId");
@@ -64123,14 +63881,6 @@ function failure(error51) {
       message: `${marker === "pending" ? "This recovery stopped after the transaction was prepared for sending" : "This recovery journal predates the pre-send marker"}, so whether ${unknown2} cannot be established locally. Read the Skill on chain first: if ${settled}, the transaction landed and only the local journal is behind. Contact support with this state rather than re-running the command.`
     };
   }
-  if (error51 instanceof CliRecoveryBlockedError) {
-    return {
-      code: "AGENT_MARKET_STATE_CONFLICT",
-      exitCode: AGENT_CLI_OUTPUT_CONTRACT.exitCodes.conflictOrPrecondition,
-      message: "Recover the listed irreversible operations before logging out or switching Account.",
-      state: JSON.stringify({ recoveryCommands: error51.recoveryCommands })
-    };
-  }
   if (error51 instanceof CliHttpError) {
     if (error51.code === "CLI_RESPONSE_INVALID") {
       return { code: "CLI_RESPONSE_INVALID", exitCode: 7, message: "Remote response is invalid." };
@@ -64226,6 +63976,11 @@ function emitCliOutcome(outcome, sinks) {
     return AGENT_CLI_OUTPUT_CONTRACT.exitCodes.conflictOrPrecondition;
   }
   if (outcome instanceof CliHttpError && outcome.envelope !== null && outcome.status !== null) {
+    const remoteError = outcome.envelope.error;
+    if (outcome.status === 401 && remoteError?.code === "AGENT_SESSION_INVALID") {
+      sinks.stderr(`${CLI_SESSION_RENEWAL_GUIDANCE}
+`);
+    }
     sinks.stdout(`${JSON.stringify(outcome.envelope)}
 `);
     return remoteExitCode(outcome.status);