@flop-labs/cli 0.4.1 → 0.4.2

package/CHANGELOG.md

@@ -7,6 +7,23 @@ and this package follows [Semantic Versioning](https://semver.org/spec/v2.0.0.ht
 
 ## [Unreleased]
 
+## [0.4.2] - 2026-11-09
+
+### Added
+
+- `flop model backup <model_hash>` streams a registered `content-v1` checkpoint from its
+  Hugging Face mirror into the validators' DA copy under the running box's own DA key,
+  piping the packed image into `da-validator` instead of writing it out, so the box needs
+  room for the checkpoint rather than twice it. It refuses a root the hub table does not
+  reproduce, prints the plan and refundable DA deposit under `--dry-run`, and leaves the
+  `ModelWeightsRef` binding to the model publisher. Both the download and the DA push
+  resume on a rerun. Metadata-only onboarding now prints this command as its next step.
+
+### Fixed
+
+- Wallet enrollment now waits up to 120 seconds for the gateway's answer, so a slow enrollment
+  completes and a refusal such as a full daily cap is reported instead of a timeout.
+
 ## [0.4.1] - 2026-11-08
 
 ### Added

package/dist/cli.js

@@ -724,14 +724,14 @@ var init_task_runner = __esm({
         }
       }
       withTimeout(promise, timeoutMs) {
-        return new Promise((resolve9, reject) => {
+        return new Promise((resolve10, reject) => {
           const timer = setTimeout(
             () => reject(new AgentError("T002" /* TASK_TIMEOUT */, `Task timed out after ${timeoutMs}ms`, true)),
             timeoutMs
           );
           promise.then((result) => {
             clearTimeout(timer);
-            resolve9(result);
+            resolve10(result);
           }).catch((err) => {
             clearTimeout(timer);
             reject(err);
@@ -739,7 +739,7 @@ var init_task_runner = __esm({
         });
       }
       sleep(ms) {
-        return new Promise((resolve9) => setTimeout(resolve9, ms));
+        return new Promise((resolve10) => setTimeout(resolve10, ms));
       }
     };
   }
@@ -904,7 +904,7 @@ var init_worker = __esm({
         return this.identity;
       }
       sleep(ms) {
-        return new Promise((resolve9) => setTimeout(resolve9, ms));
+        return new Promise((resolve10) => setTimeout(resolve10, ms));
       }
     };
   }
@@ -912,10 +912,10 @@ var init_worker = __esm({
 
 // ../agent/src/chain-apis.ts
 async function submitTx(tx, signer) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     tx.signAndSend(signer, ({ status, dispatchError }) => {
       if (dispatchError) reject(new Error(`Tx failed: ${dispatchError.toString()}`));
-      else if (status.isInBlock || status.isFinalized) resolve9(status.asFinalized.toString());
+      else if (status.isInBlock || status.isFinalized) resolve10(status.asFinalized.toString());
     }).catch(reject);
   });
 }
@@ -1219,7 +1219,7 @@ async function waitForTaskCompletion(api, taskId, timeoutMs = DEFAULT_TIMEOUT, p
         return receipt;
       }
     }
-    await new Promise((resolve9) => setTimeout(resolve9, pollIntervalMs));
+    await new Promise((resolve10) => setTimeout(resolve10, pollIntervalMs));
   }
   throw new AgentError(
     "T002" /* TASK_TIMEOUT */,
@@ -1878,7 +1878,7 @@ async function waitForBalance(api, address, minBalance, timeoutMs = 6e4) {
       }
     } catch {
     }
-    await new Promise((resolve9) => setTimeout(resolve9, pollInterval));
+    await new Promise((resolve10) => setTimeout(resolve10, pollInterval));
   }
   return false;
 }
@@ -4941,9 +4941,9 @@ var init_src = __esm({
 });
 
 // src/cli.ts
-import { Command as Command48, Option as Option7 } from "commander";
+import { Command as Command49, Option as Option8 } from "commander";
 import { readFileSync as readFileSync2 } from "node:fs";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 
 // src/output.ts
 var activeOutputMode = "human";
@@ -6127,12 +6127,12 @@ function pathCheck(id, target, required = true) {
   };
 }
 async function probeHttpUrl(id, url, required = true, timeoutMs = 3e3) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let parsed;
     try {
       parsed = new URL(url);
     } catch {
-      resolve9({
+      resolve10({
         id,
         status: "fail",
         required,
@@ -6145,7 +6145,7 @@ async function probeHttpUrl(id, url, required = true, timeoutMs = 3e3) {
     const request3 = transport.request(parsed, { method: "GET", timeout: timeoutMs }, (response) => {
       response.resume();
       const reachable = (response.statusCode ?? 500) < 500;
-      resolve9({
+      resolve10({
         id,
         status: reachable ? "pass" : required ? "fail" : "warn",
         required,
@@ -6155,7 +6155,7 @@ async function probeHttpUrl(id, url, required = true, timeoutMs = 3e3) {
     });
     request3.on("timeout", () => request3.destroy(new Error("timeout")));
     request3.on("error", (error) => {
-      resolve9({
+      resolve10({
         id,
         status: required ? "fail" : "warn",
         required,
@@ -6199,7 +6199,7 @@ function unwrapStorage(raw) {
 
 // src/commands/launch.ts
 function checkGateway(url) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     try {
       const parsedUrl = new URL(url);
       const req = http2.request(
@@ -6211,17 +6211,17 @@ function checkGateway(url) {
           timeout: 1e3
         },
         (res) => {
-          resolve9(res.statusCode === 200);
+          resolve10(res.statusCode === 200);
         }
       );
-      req.on("error", () => resolve9(false));
+      req.on("error", () => resolve10(false));
       req.on("timeout", () => {
         req.destroy();
-        resolve9(false);
+        resolve10(false);
       });
       req.end();
     } catch {
-      resolve9(false);
+      resolve10(false);
     }
   });
 }
@@ -6529,7 +6529,7 @@ async function withCredentialLock(path5, action) {
         continue;
       }
       if (Date.now() >= deadline) throw new Error(`FLOP credential lock is busy at ${lock}`);
-      await new Promise((resolve9) => setTimeout(resolve9, 100));
+      await new Promise((resolve10) => setTimeout(resolve10, 100));
     }
   }
   try {
@@ -6589,6 +6589,8 @@ function validateWalletEnrollmentChallenge(message, address, gateway, genesis, n
   const issued = Date.parse(issuedText), expires = Date.parse(expiresText);
   if (!Number.isFinite(issued) || !Number.isFinite(expires) || lines[6] !== `Issued At: ${new Date(issued).toISOString()}` || lines[7] !== `Expiration Time: ${new Date(expires).toISOString()}` || issued > now || expires <= now || expires <= issued || expires - issued > 5 * 6e4) throw invalid();
 }
+var ENROLLMENT_CHALLENGE_TIMEOUT_MS = 3e4;
+var ENROLLMENT_SUBMIT_TIMEOUT_MS = 12e4;
 function walletEnrollment(options) {
   return async () => {
     if (options.purpose) await hermesEnrollmentOffer(options.gateway);
@@ -6605,12 +6607,12 @@ function walletEnrollment(options) {
       const deadline = Date.now() + (options.fundTimeoutMs ?? 12e4);
       while (await options.balance(pair.address) < minBalance) {
         if (Date.now() >= deadline) throw new Error("devnet faucet grant did not finalize in time; retry later");
-        await new Promise((resolve9) => setTimeout(resolve9, options.pollMs ?? 3e3));
+        await new Promise((resolve10) => setTimeout(resolve10, options.pollMs ?? 3e3));
       }
     }
     const challenge = await fetch(
       `${options.gateway}/v1/enroll/wallet/challenge?address=${encodeURIComponent(pair.address)}${options.purpose ? `&purpose=${options.purpose}` : ""}`,
-      { redirect: "error", signal: AbortSignal.timeout(options.purpose ? 3e4 : 1e4) }
+      { redirect: "error", signal: AbortSignal.timeout(ENROLLMENT_CHALLENGE_TIMEOUT_MS) }
     );
     if (!challenge.ok) throw await failure(challenge, "devnet enrollment challenge");
     const { message } = await challenge.json();
@@ -6621,7 +6623,7 @@ function walletEnrollment(options) {
       headers: { "content-type": "application/json" },
       body: JSON.stringify({ address: pair.address, message, signature }),
       redirect: "error",
-      signal: AbortSignal.timeout(options.purpose ? 3e4 : 1e4)
+      signal: AbortSignal.timeout(ENROLLMENT_SUBMIT_TIMEOUT_MS)
     });
   };
 }
@@ -7012,14 +7014,14 @@ var CORS_HEADERS = {
   "Access-Control-Allow-Headers": "Authorization, Content-Type"
 };
 function readBody(req) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     let data = "";
     req.on("data", (c) => data += c);
     req.on("end", () => {
       try {
-        resolve9(data ? JSON.parse(data) : {});
+        resolve10(data ? JSON.parse(data) : {});
       } catch {
-        resolve9({});
+        resolve10({});
       }
     });
   });
@@ -7256,7 +7258,7 @@ async function startProxyServer(o) {
     embeddingModel: o.embeddingModel,
     embed: createLocalEmbedder(o.embeddingModel)
   });
-  await new Promise((resolve9) => server.listen(o.port, o.host, () => resolve9()));
+  await new Promise((resolve10) => server.listen(o.port, o.host, () => resolve10()));
   const addr = server.address();
   const url = `http://${o.host}:${addr.port}`;
   const models = await listModels();
@@ -7393,9 +7395,9 @@ function launchExternal2(command, args, envOverrides) {
 function runHermesConfig(launcher, commands) {
   return commands.reduce(
     (p, args) => p.then(
-      () => new Promise((resolve9, reject) => {
+      () => new Promise((resolve10, reject) => {
         const c = spawnLauncher(launcher, args, { stdio: "inherit" });
-        c.on("exit", (code) => code === 0 ? resolve9() : reject(new Error(`hermes ${args.join(" ")} exited ${code}`)));
+        c.on("exit", (code) => code === 0 ? resolve10() : reject(new Error(`hermes ${args.join(" ")} exited ${code}`)));
         c.on("error", reject);
       })
     ),
@@ -7630,6 +7632,7 @@ import { basename as basename2, join as join6, resolve as resolve8 } from "node:
 import { resolve as resolve5, relative, sep } from "node:path";
 import { mkdir as mkdir7, readFile as readFile4, readdir, lstat as lstat3, writeFile as writeFile7 } from "node:fs/promises";
 import { execFile as execFile3, spawn as spawn4 } from "node:child_process";
+import { pipeline } from "node:stream/promises";
 import { promisify as promisify3 } from "node:util";
 function modelToOutput(model) {
   return {
@@ -7752,6 +7755,9 @@ async function daCommit(executable, blobFile) {
   const { stdout: stdout2 } = await run2(executable, ["commit", "--blob-file", blobFile, "--json"], {
     maxBuffer: 1024 * 1024
   });
+  return parseDaLayout(stdout2);
+}
+function parseDaLayout(stdout2) {
   const line = lastJsonLine(stdout2);
   if (!line) throw new Error("da-validator commit returned no JSON result");
   const result = JSON.parse(line);
@@ -7765,6 +7771,62 @@ async function daCommit(executable, blobFile) {
     chunks: result.chunks
   };
 }
+async function runWithBlobOnStdin(executable, args, env, body) {
+  const child = spawn4(executable, args, { stdio: ["pipe", "pipe", "inherit"], env });
+  let stdout2 = "";
+  child.stdout.setEncoding("utf8");
+  child.stdout.on("data", (part) => {
+    stdout2 += part;
+  });
+  let streamError;
+  const fed = pipeline(body, child.stdin).catch((error) => {
+    if (error.code === "EPIPE") return;
+    streamError = error;
+    child.kill("SIGKILL");
+  });
+  const code = await new Promise((resolveExit, rejectExit) => {
+    child.on("error", rejectExit);
+    child.on("close", resolveExit);
+  });
+  await fed;
+  if (streamError) throw streamError;
+  return { code, stdout: stdout2 };
+}
+async function daCommitStream(executable, blob) {
+  const { code, stdout: stdout2 } = await runWithBlobOnStdin(
+    executable,
+    ["commit", "--blob-stdin", "--size", String(blob.sizeBytes), "--manifest-out", blob.manifestFile, "--json"],
+    process.env,
+    blob.open()
+  );
+  if (code !== 0) throw new Error(`da-validator commit failed (exit ${code}); see its log above`);
+  return parseDaLayout(stdout2);
+}
+async function submitDaBlobStream(executable, rpc, blob, publisherKey) {
+  const env = { ...process.env };
+  if (publisherKey) env.DA_PUBLISHER_KEY = publisherKey;
+  else delete env.DA_PUBLISHER_KEY;
+  const { code, stdout: stdout2 } = await runWithBlobOnStdin(
+    executable,
+    [
+      "submit",
+      "--chain-rpc",
+      rpc,
+      "--blob-stdin",
+      "--size",
+      String(blob.sizeBytes),
+      "--manifest-file",
+      blob.manifestFile,
+      "--json"
+    ],
+    env,
+    blob.open()
+  );
+  if (code !== 0 && !lastJsonLine(stdout2)) {
+    throw new Error(`da-validator submit failed (exit ${code}); see its log above`);
+  }
+  return parseCustodyResult(stdout2);
+}
 function parseCustodyResult(stdout2) {
   const line = lastJsonLine(stdout2);
   if (!line) throw new Error("da-validator returned no JSON custody result");
@@ -9289,7 +9351,9 @@ function modelOnboardCmd() {
       if (opts.approve && !state.approved) throw new Error("approval is not present in finalized registry state");
       if (metadataOnly && !state.weightsRef) {
         process.stderr.write(
-          `next: approval needs the DA backup of ${identity.modelHash} (packed image + file table, ${measured.imageSize} bytes in ${Math.max(1, Math.ceil(measured.imageSize / sdk.DA_CHUNK_SIZE))} chunk(s)); upload it with --download from a box with the disk
+          `next: approval needs the DA backup of ${identity.modelHash} (packed image + file table, ${measured.imageSize} bytes in ${Math.max(1, Math.ceil(measured.imageSize / sdk.DA_CHUNK_SIZE))} chunk(s)). On a box with room for the checkpoint, run
+  flop model backup ${identity.modelHash} --model-dir <path>${preflight ? ` --revision ${preflight.revision}` : ""}
+then bind the DataRef it prints. Rerunning this command with --download packs the image from disk instead, which needs about twice the checkpoint's size.
 `
         );
       }
@@ -9489,10 +9553,167 @@ function modelPreflightCmd() {
   });
 }
 
+// src/commands/model-backup.ts
+import { Command as Command33, Option as Option3 } from "commander";
+import { mkdir as mkdir12, rm as rm4, writeFile as writeFile10 } from "node:fs/promises";
+import { join as join8, resolve as resolve9 } from "node:path";
+var PRECISIONS3 = ["FP32", "FP16", "BF16", "INT8", "INT4", "Mixed"];
+async function finalizedLeasedRef2(api, commitment, size) {
+  const hash2 = await api.rpc.chain.getFinalizedHead();
+  const [at, header] = await Promise.all([api.at(hash2), api.rpc.chain.getHeader(hash2)]);
+  return existingLeasedRef({ query: at.query, rpc: { chain: { getHeader: async () => header } } }, commitment, size);
+}
+var REGISTRATION_WAIT_POLLS = 30;
+var REGISTRATION_POLL_MS = 2e3;
+async function awaitFinalizedLeasedRef(api, commitment, size) {
+  for (let poll = 0; ; poll++) {
+    const ref = await finalizedLeasedRef2(api, commitment, size);
+    if (ref || poll >= REGISTRATION_WAIT_POLLS) return ref;
+    await new Promise((wake) => setTimeout(wake, REGISTRATION_POLL_MS));
+  }
+}
+function registeredHubRepo(mirrors) {
+  const repos = [...new Set(mirrors.filter((m) => m.kind === "huggingface").map((m) => m.repo))];
+  if (repos.length > 1) {
+    throw new Error(
+      `model advertises ${repos.length} Hugging Face mirrors (${repos.join(", ")}); name the one to back up with --source`
+    );
+  }
+  return repos[0];
+}
+function modelBackupCmd() {
+  return new Command33("backup").description(
+    "Stream a registered content-v1 checkpoint from Hugging Face into validator DA under this box's DA key, without ever writing the packed image out, and print the DataRefs its publisher then binds"
+  ).argument("<model_hash>", "Registered model hash (0x-hex)").requiredOption("--model-dir <path>", "Directory the checkpoint streams into (needs room for it)").option("--source <hf-id>", "Hugging Face id (owner/model or hf:owner/model); the model's registered mirror when omitted").option("--revision <sha>", "Immutable 40-hex commit; main is resolved to one when omitted").addOption(new Option3("--precision <precision>", "Measured-root precision").choices(PRECISIONS3).default("FP16")).option("--da-validator <path>", "da-validator executable", "da-validator").option("--token <token>", "Hugging Face bearer token (prefer HF_TOKEN)").option("--state-dir <path>", "Download resume receipts (outside the checkpoint tree)").option("--dry-run", "Print the plan and the DA deposit it would lock, and stop before any transfer").option("--json", "Output as JSON").action(async (modelHash, opts, command) => {
+    let client;
+    let workDir;
+    try {
+      if (opts.revision && !/^[0-9a-f]{40}$/.test(opts.revision)) throw new Error("--revision must be an immutable 40-hex commit");
+      const sdk = await import("@flop-labs/sdk");
+      const rpc = getRpc(command);
+      const precision = opts.precision;
+      client = await createClient(rpc, getSigner(command));
+      const api = client.api;
+      const registered = await new sdk.OnChainModelRegistry(api).getModel(modelHash);
+      if (!registered) throw new Error(`model not found: ${modelHash}`);
+      const expected = await sdk.readMeasuredRoot(api, modelHash, precision);
+      if (!expected) throw new Error(`no measured root for ${modelHash} at ${opts.precision}`);
+      const hub = { revision: opts.revision, token: opts.token ?? process.env.HF_TOKEN };
+      const repo = opts.source ? opts.source.startsWith("hf:") ? opts.source.slice(3) : opts.source : registeredHubRepo(await sdk.readModelMirrors(api, modelHash));
+      if (!repo) {
+        throw new Error(
+          `model ${modelHash} advertises no Hugging Face mirror; pass --source <owner/model>, or back it up from disk with \`flop model upload --model-hash <hash> --path <dir>\``
+        );
+      }
+      const preflight = await sdk.preflightHuggingFace(repo, hub);
+      if (sdk.normalizeRoot(preflight.contentRoot) !== sdk.normalizeRoot(expected)) {
+        throw new Error(
+          `${repo} at ${preflight.revision} has content_root 0x${preflight.contentRoot}, not the registered root ${expected}. A verity-v1 model's root cannot be checked from hub metadata, and a repo that moved needs the registered --revision; back such a model up from disk with \`flop model upload --model-hash ${modelHash} --path <dir>\``
+        );
+      }
+      const imageSize = sdk.packedImageSize(preflight.files);
+      if (imageSize !== preflight.imageSize) throw new Error("packed image size disagrees with the preflight table");
+      const tableBytes = sdk.encodeModelFileTable("0".repeat(64), preflight.files).length;
+      const deposit = await sdk.da.leaseDeposit(api, imageSize + tableBytes);
+      const plan = {
+        model_hash: modelHash,
+        precision: opts.precision,
+        repo,
+        revision: preflight.revision,
+        content_root: `0x${preflight.contentRoot}`,
+        scheme: "content-v1",
+        files: preflight.files.length,
+        image_size: imageSize,
+        da_chunks: preflight.daChunks,
+        da_deposit_plancks: deposit.toString(),
+        publisher: client.signer.address
+      };
+      if (opts.dryRun) {
+        print({ ...plan, dry_run: true, next: "rerun without --dry-run to transfer and register" }, getJson(command));
+        return;
+      }
+      const publisherKey = await sr25519KeyHex(getSigner(command));
+      const modelDir = resolve9(opts.modelDir);
+      workDir = join8(resolve9(modelDir, ".."), `.flop-backup-${modelHash.replace(/^0x/, "").slice(0, 16)}`);
+      await mkdir12(workDir, { recursive: true, mode: 448 });
+      await mkdir12(modelDir, { recursive: true });
+      const resumeState = opts.stateDir ? join8(resolve9(opts.stateDir), "download.json") : void 0;
+      if (resumeState) await mkdir12(resolve9(opts.stateDir), { recursive: true, mode: 448 });
+      process.stderr.write(
+        `backing up ${repo}@${preflight.revision} (${preflight.files.length} files, image ${imageSize} bytes, ${preflight.daChunks} DA chunk(s)) as ${modelHash}
+`
+      );
+      await sdk.fetchHuggingFaceToDir(repo, modelDir, {
+        ...hub,
+        revision: preflight.revision,
+        files: preflight.files,
+        resumeState
+      });
+      const manifestFile = join8(workDir, "layout.bin");
+      const image = {
+        sizeBytes: imageSize,
+        manifestFile,
+        open: () => sdk.packedImageStream(modelDir, preflight.files)
+      };
+      const imageLayout = await daCommitStream(opts.daValidator, image);
+      if (imageLayout.sizeBytes !== imageSize) throw new Error("streamed DA commitment covers the wrong image size");
+      const tablePath = join8(workDir, "files.json");
+      await writeFile10(tablePath, sdk.encodeModelFileTable(imageLayout.commitment, preflight.files), { mode: 384 });
+      const tableLayout = await daCommit(opts.daValidator, tablePath);
+      const refs = [];
+      for (const blob of [
+        { commitment: imageLayout.commitment, sizeBytes: imageLayout.sizeBytes, stream: image },
+        { commitment: tableLayout.commitment, sizeBytes: tableLayout.sizeBytes, stream: void 0 }
+      ]) {
+        let ref = await finalizedLeasedRef2(api, blob.commitment, blob.sizeBytes);
+        let registerTx;
+        if (!ref) {
+          const reg = await sdk.da.registerBlob(api, client.signer, {
+            commitment: blob.commitment,
+            sizeBytes: blob.sizeBytes
+          });
+          registerTx = reg.txHash;
+          ref = await awaitFinalizedLeasedRef(api, blob.commitment, blob.sizeBytes);
+        }
+        if (!ref) {
+          throw new Error(
+            `DA registration for ${blob.commitment} did not finalize within ${REGISTRATION_WAIT_POLLS * REGISTRATION_POLL_MS / 1e3}s; rerun the same command once it has`
+          );
+        }
+        const mine = sameAccount(ref.publisher, client.signer.address);
+        const custody = blob.stream ? await submitDaBlobStream(opts.daValidator, rpc, blob.stream, mine ? publisherKey : void 0) : await submitDaBlob(opts.daValidator, rpc, tablePath, mine ? publisherKey : void 0);
+        process.stderr.write(`${custodySummary(custody)}
+`);
+        refs.push({ ref, custody, registerTx });
+      }
+      const [weights, table2] = refs;
+      print({
+        ...plan,
+        weights_ref: weights.ref.commitment,
+        weights_register_tx: weights.registerTx,
+        weights_custody_shards: weights.custody.confirmedShards,
+        table_ref: table2.ref.commitment,
+        table_register_tx: table2.registerTx,
+        // The binding is the model publisher's own transaction: this box holds no
+        // model-registry authority, and `set_model_weights_ref` takes any Leased ref from it.
+        next: `the model publisher binds the backup with \`flop model upload --model-hash ${modelHash} --commitment ${weights.ref.commitment} --size ${imageSize}\`, then advertises the file table as a da:${table2.ref.commitment} mirror with \`modelRegistry.setModelMirrors\``,
+        recovery: `flop da withdraw --commitment ${weights.ref.commitment} (and ${table2.ref.commitment}) refunds both deposits while nothing pins them`
+      }, getJson(command));
+    } catch (error) {
+      commandError(error, {
+        next: "rerun the same command to resume the download and the DA push; to abandon a registered blob, run the printed `flop da withdraw` recovery"
+      });
+    } finally {
+      if (workDir) await rm4(workDir, { recursive: true, force: true });
+      await client?.disconnect();
+    }
+  });
+}
+
 // src/commands/model-list.ts
-import { Command as Command33 } from "commander";
+import { Command as Command34 } from "commander";
 function modelListCmd() {
-  return new Command33("list").description("List models registered on the selected FLOP chain").option("--name <text>", "Filter model names").option("--limit <n>", "Maximum rows returned", "100").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command34("list").description("List models registered on the selected FLOP chain").option("--name <text>", "Filter model names").option("--limit <n>", "Maximum rows returned", "100").option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       const sdk = await import("@flop-labs/sdk");
@@ -9522,9 +9743,9 @@ function modelListCmd() {
 }
 
 // src/commands/model-get.ts
-import { Command as Command34 } from "commander";
+import { Command as Command35 } from "commander";
 function modelGetCmd() {
-  return new Command34("get").description("Get a registered model by hash or exact name").argument("<identifier>", "Model hash or name").option("--precision <precision>", "Measured-root precision", "FP16").option("--json", "Output as JSON").action(async (identifier, opts, command) => {
+  return new Command35("get").description("Get a registered model by hash or exact name").argument("<identifier>", "Model hash or name").option("--precision <precision>", "Measured-root precision", "FP16").option("--json", "Output as JSON").action(async (identifier, opts, command) => {
     let client;
     try {
       const sdk = await import("@flop-labs/sdk");
@@ -9555,10 +9776,10 @@ function modelGetCmd() {
 }
 
 // src/commands/model-fetch.ts
-import { Command as Command35, Option as Option3 } from "commander";
-var PRECISIONS3 = ["FP32", "FP16", "BF16", "INT8", "INT4", "Mixed"];
+import { Command as Command36, Option as Option4 } from "commander";
+var PRECISIONS4 = ["FP32", "FP16", "BF16", "INT8", "INT4", "Mixed"];
 function modelFetchCmd() {
-  return new Command35("fetch").description("Fetch model weights and accept only a registered dm-verity root").argument("<identifier>", "Registered model hash or exact name").addOption(new Option3("--precision <precision>", "Weights precision").choices(PRECISIONS3).default("FP16")).option("--source <source...>", "Override mirrors: hf:<repo>, modelscope:<repo>, https://..., da:<commitment>").option("--da-endpoint <url>", "DA blob gateway exposing GET /blob/<commitment>").option("--output-dir <path>", "Destination directory", "./flop-model").option("--token <token>", "HF/ModelScope bearer token (prefer HF_TOKEN)").option("--json", "Output as JSON").action(async (identifier, opts, command) => {
+  return new Command36("fetch").description("Fetch model weights and accept only a registered dm-verity root").argument("<identifier>", "Registered model hash or exact name").addOption(new Option4("--precision <precision>", "Weights precision").choices(PRECISIONS4).default("FP16")).option("--source <source...>", "Override mirrors: hf:<repo>, modelscope:<repo>, https://..., da:<commitment>").option("--da-endpoint <url>", "DA blob gateway exposing GET /blob/<commitment>").option("--output-dir <path>", "Destination directory", "./flop-model").option("--token <token>", "HF/ModelScope bearer token (prefer HF_TOKEN)").option("--json", "Output as JSON").action(async (identifier, opts, command) => {
     let client;
     try {
       const sdk = await import("@flop-labs/sdk");
@@ -9621,7 +9842,7 @@ function modelFetchCmd() {
 
 // src/commands/agent.ts
 import path2 from "node:path";
-import { Command as Command36, Option as Option4 } from "commander";
+import { Command as Command37, Option as Option5 } from "commander";
 import { getFlopNetworkProfile as getFlopNetworkProfile3 } from "@flop-labs/sdk";
 var DEFAULT_MCP_URL = "https://mcp.flop.network/mcp";
 var DEVNET_MCP_URL = "https://mcp.flop.network/mcp";
@@ -9709,14 +9930,14 @@ function buildAgentInitPlan(client, mode, mcpUrl2 = DEFAULT_MCP_URL) {
   };
 }
 function agentInitCmd() {
-  return new Command36("init").description("Print a safe agent onboarding plan and MCP configuration").addOption(new Option4("--client <client>", "Agent client").choices([
+  return new Command37("init").description("Print a safe agent onboarding plan and MCP configuration").addOption(new Option5("--client <client>", "Agent client").choices([
     "claude-code",
     "codex",
     "cursor",
     "windsurf",
     "zed",
     "generic"
-  ]).default("generic")).addOption(new Option4("--mode <mode>", "MCP mode").choices(["remote", "local"]).default("remote")).option("--mcp-url <url>", "Hosted MCP URL").option("--json", "Output as JSON").action((opts, command) => {
+  ]).default("generic")).addOption(new Option5("--mode <mode>", "MCP mode").choices(["remote", "local"]).default("remote")).option("--mcp-url <url>", "Hosted MCP URL").option("--json", "Output as JSON").action((opts, command) => {
     const plan = buildAgentInitPlan(opts.client, opts.mode, mcpUrl(command, opts.mcpUrl));
     const output = getOutputMode(command);
     printRolePlan(plan, output);
@@ -9727,7 +9948,7 @@ function agentInitCmd() {
   });
 }
 function agentDoctorCmd() {
-  return new Command36("doctor").description("Check agent MCP, gateway, and optional chain connectivity").addOption(new Option4("--mode <mode>", "MCP mode").choices(["remote", "local"]).default("remote")).option("--mcp-url <url>", "MCP URL").option("--gateway <url>", "Optional OpenAI-compatible gateway URL").option("--repo <path>", "flop-core checkout for local mode", process.cwd()).option("--check-rpc", "Also require the configured chain RPC").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command37("doctor").description("Check agent MCP, gateway, and optional chain connectivity").addOption(new Option5("--mode <mode>", "MCP mode").choices(["remote", "local"]).default("remote")).option("--mcp-url <url>", "MCP URL").option("--gateway <url>", "Optional OpenAI-compatible gateway URL").option("--repo <path>", "flop-core checkout for local mode", process.cwd()).option("--check-rpc", "Also require the configured chain RPC").option("--json", "Output as JSON").action(async (opts, command) => {
     try {
       const checks = [executableCheck("node")];
       if (opts.mode === "remote") {
@@ -9754,7 +9975,7 @@ function agentDoctorCmd() {
   });
 }
 function agentCredentialCmd() {
-  return new Command36("credential").description("Provision or reuse a devnet gateway key for agent clients (wallet-signed by default)").option("--print-key", "Print only the bearer key for a local client auth helper").option("--tailnet", "Enroll through the private tailnet lane (approved Tailscale users only)").option("--json", "Output non-secret credential metadata as JSON").action(async (opts, command) => {
+  return new Command37("credential").description("Provision or reuse a devnet gateway key for agent clients (wallet-signed by default)").option("--print-key", "Print only the bearer key for a local client auth helper").option("--tailnet", "Enroll through the private tailnet lane (approved Tailscale users only)").option("--json", "Output non-secret credential metadata as JSON").action(async (opts, command) => {
     try {
       if (getNetwork(command) !== "devnet") {
         throw new Error("agent credential requires --network devnet");
@@ -9787,20 +10008,20 @@ function agentCredentialCmd() {
   });
 }
 function agentCmd() {
-  const command = new Command36("agent").description("Onboard and operate FLOP-backed agents");
+  const command = new Command37("agent").description("Onboard and operate FLOP-backed agents");
   command.addCommand(agentInitCmd());
   command.addCommand(agentDoctorCmd());
   command.addCommand(agentCredentialCmd());
   command.addCommand(launchCmd());
   command.addCommand(proxyCmd());
   command.addCommand(hermesCmd());
-  const keys = new Command36("keys").description("Manage agent keys");
+  const keys = new Command37("keys").description("Manage agent keys");
   keys.addCommand(keysGenerateCmd());
   command.addCommand(keys);
-  const wallet = new Command36("wallet").description("Manage agent wallets");
+  const wallet = new Command37("wallet").description("Manage agent wallets");
   wallet.addCommand(walletAgentCreateCmd());
   command.addCommand(wallet);
-  const session = new Command36("session").description("Manage agent session keys");
+  const session = new Command37("session").description("Manage agent session keys");
   session.addCommand(sessionCreateCmd());
   session.addCommand(sessionInfoCmd());
   session.addCommand(sessionRevokeCmd());
@@ -9812,7 +10033,7 @@ function agentCmd() {
 // src/commands/miner.ts
 import { readFileSync } from "node:fs";
 import path3 from "node:path";
-import { Command as Command37, Option as Option5 } from "commander";
+import { Command as Command38, Option as Option6 } from "commander";
 import { formatFlop as formatFlop2 } from "@flop-labs/sdk";
 
 // src/gpu-inventory-remark.ts
@@ -10030,7 +10251,7 @@ function buildMinerInitPlan(options) {
   };
 }
 function minerInitCmd() {
-  return new Command37("init").description("Print a phased miner onboarding plan").addOption(new Option5("--mode <mode>", "Miner mode").choices(["sim", "tdx", "cloud"]).default("sim")).option("--instance <number>", "Local guest instance number", "0").option("--provider <name>", "Cloud provider", "runpod").option(
+  return new Command38("init").description("Print a phased miner onboarding plan").addOption(new Option6("--mode <mode>", "Miner mode").choices(["sim", "tdx", "cloud"]).default("sim")).option("--instance <number>", "Local guest instance number", "0").option("--provider <name>", "Cloud provider", "runpod").option(
     "--gpu <SKU[:COUNT]>",
     "Expected GPU inventory; repeat for mixed-SKU hosts",
     collectGpu,
@@ -10073,7 +10294,7 @@ async function gpuCheck(mode) {
   }
 }
 function minerDoctorCmd() {
-  return new Command37("doctor").description("Check miner runtime, hardware, chain, and serving prerequisites").addOption(new Option5("--mode <mode>", "Miner mode").choices(["sim", "tdx", "cloud"]).default("sim")).option("--repo <path>", "flop-core checkout", process.cwd()).option("--session-url <url>", "Optional miner session info URL").option("--offline", "Skip chain RPC check").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command38("doctor").description("Check miner runtime, hardware, chain, and serving prerequisites").addOption(new Option6("--mode <mode>", "Miner mode").choices(["sim", "tdx", "cloud"]).default("sim")).option("--repo <path>", "flop-core checkout", process.cwd()).option("--session-url <url>", "Optional miner session info URL").option("--offline", "Skip chain RPC check").option("--json", "Output as JSON").action(async (opts, command) => {
     try {
       const checks = [];
       if (opts.mode === "cloud") {
@@ -10110,7 +10331,7 @@ function minerDoctorCmd() {
   });
 }
 function minerStatusCmd() {
-  return new Command37("status").description("Show miner registration, calibration, and optional session status").argument("[address]", "Miner SS58 address; defaults to the configured signer").option("--session-url <url>", "Optional miner session info URL").option(
+  return new Command38("status").description("Show miner registration, calibration, and optional session status").argument("[address]", "Miner SS58 address; defaults to the configured signer").option("--session-url <url>", "Optional miner session info URL").option(
     "--expect-gpu <SKU[:COUNT]>",
     "Expected inventory; repeat to check attested state",
     collectGpu,
@@ -10160,7 +10381,7 @@ function minerStatusCmd() {
   });
 }
 function minerSkusCmd() {
-  return new Command37("skus").description("List GPU SKUs with active governance calibration ceilings").option("--json", "Output as JSON").action(async (_opts, command) => {
+  return new Command38("skus").description("List GPU SKUs with active governance calibration ceilings").option("--json", "Output as JSON").action(async (_opts, command) => {
     let client;
     try {
       const rpc = getRpc(command);
@@ -10184,7 +10405,7 @@ function minerSkusCmd() {
   });
 }
 function minerRegisterCmd() {
-  return new Command37("register").description("Register the signer as a miner and lock the runtime-defined self-stake").option("--commission <percent>", "Commission percent (0-20)", "10").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command38("register").description("Register the signer as a miner and lock the runtime-defined self-stake").option("--commission <percent>", "Commission percent (0-20)", "10").option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       const commission = Number(opts.commission);
@@ -10211,7 +10432,7 @@ function minerRegisterCmd() {
   });
 }
 function minerDeclareGpuCmd() {
-  return new Command37("declare-gpu").description("Publish the signer's self-reported GPU inventory as a flop.gpu-inventory.v1 remark (display-only)").option("--nvidia-smi <path>", "Output of `nvidia-smi --query-gpu=name,memory.total --format=csv,noheader,nounits` (- for stdin)").option("--detect", "Run nvidia-smi here (on the GPU host)").option("--retract", "Publish an empty inventory, withdrawing an earlier declaration").option("--dry-run", "Print the remark without signing").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command38("declare-gpu").description("Publish the signer's self-reported GPU inventory as a flop.gpu-inventory.v1 remark (display-only)").option("--nvidia-smi <path>", "Output of `nvidia-smi --query-gpu=name,memory.total --format=csv,noheader,nounits` (- for stdin)").option("--detect", "Run nvidia-smi here (on the GPU host)").option("--retract", "Publish an empty inventory, withdrawing an earlier declaration").option("--dry-run", "Print the remark without signing").option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       if ([opts.nvidiaSmi, opts.detect, opts.retract].filter(Boolean).length !== 1) {
@@ -10247,7 +10468,7 @@ function minerDeclareGpuCmd() {
   });
 }
 function minerCmd() {
-  const command = new Command37("miner").description("Onboard and operate inference miners");
+  const command = new Command38("miner").description("Onboard and operate inference miners");
   command.addCommand(minerInitCmd());
   command.addCommand(minerDoctorCmd());
   command.addCommand(minerStatusCmd());
@@ -10260,7 +10481,7 @@ function minerCmd() {
 
 // src/commands/validator.ts
 import path4 from "node:path";
-import { Command as Command38, Option as Option6 } from "commander";
+import { Command as Command39, Option as Option7 } from "commander";
 import { formatFlop as formatFlop3 } from "@flop-labs/sdk";
 function buildValidatorInitPlan(mode, minimumStake) {
   const bringUp = mode === "local" ? "just run-node" : "infra/vultr/create-vm.sh <args>; infra/vultr/deploy-core.sh --vm-ip <TAILSCALE-IP>";
@@ -10310,7 +10531,7 @@ function buildValidatorInitPlan(mode, minimumStake) {
   };
 }
 function validatorInitCmd() {
-  return new Command38("init").description("Print a validator onboarding plan with the live minimum stake").addOption(new Option6("--mode <mode>", "Validator deployment mode").choices(["local", "vultr"]).default("local")).option("--offline", "Do not query the configured chain").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command39("init").description("Print a validator onboarding plan with the live minimum stake").addOption(new Option7("--mode <mode>", "Validator deployment mode").choices(["local", "vultr"]).default("local")).option("--offline", "Do not query the configured chain").option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       let minimumStake;
@@ -10329,7 +10550,7 @@ function validatorInitCmd() {
   });
 }
 function validatorDoctorCmd() {
-  return new Command38("doctor").description("Check validator node and on-chain eligibility prerequisites").addOption(new Option6("--mode <mode>", "Validator deployment mode").choices(["local", "vultr"]).default("local")).option("--repo <path>", "flop-core checkout", process.cwd()).option("--offline", "Skip chain and account checks").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command39("doctor").description("Check validator node and on-chain eligibility prerequisites").addOption(new Option7("--mode <mode>", "Validator deployment mode").choices(["local", "vultr"]).default("local")).option("--repo <path>", "flop-core checkout", process.cwd()).option("--offline", "Skip chain and account checks").option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       const checks = [
@@ -10400,7 +10621,7 @@ function validatorDoctorCmd() {
   });
 }
 function validatorStatusCmd() {
-  return new Command38("status").description("Show validator stake, jail, performance, and verified-work state").argument("[address]", "Validator SS58 address; defaults to the configured signer").option("--json", "Output as JSON").action(async (address, opts, command) => {
+  return new Command39("status").description("Show validator stake, jail, performance, and verified-work state").argument("[address]", "Validator SS58 address; defaults to the configured signer").option("--json", "Output as JSON").action(async (address, opts, command) => {
     let client;
     try {
       const rpc = getRpc(command);
@@ -10445,7 +10666,7 @@ function validatorStatusCmd() {
   });
 }
 function validatorRegisterCmd() {
-  return new Command38("register").description("Register the signer as a validator, bonding the effective minimum").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command39("register").description("Register the signer as a validator, bonding the effective minimum").option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       const rpc = getRpc(command);
@@ -10475,7 +10696,7 @@ function validatorRegisterCmd() {
   });
 }
 function validatorCommissionCmd() {
-  return new Command38("commission").description("Set validator commission").argument("<percent>", "Commission percent (0-100)").option("--json", "Output as JSON").action(async (percent, opts, command) => {
+  return new Command39("commission").description("Set validator commission").argument("<percent>", "Commission percent (0-100)").option("--json", "Output as JSON").action(async (percent, opts, command) => {
     let client;
     try {
       const value = Number(percent);
@@ -10495,7 +10716,7 @@ function validatorCommissionCmd() {
   });
 }
 function validatorLifecycleCmd(name, description, sdkMethod) {
-  return new Command38(name).description(description).option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command39(name).description(description).option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       const rpc = getRpc(command);
@@ -10511,7 +10732,7 @@ function validatorLifecycleCmd(name, description, sdkMethod) {
   });
 }
 function validatorCmd() {
-  const command = new Command38("validator").description("Onboard and operate validator nodes");
+  const command = new Command39("validator").description("Onboard and operate validator nodes");
   command.addCommand(validatorInitCmd());
   command.addCommand(validatorDoctorCmd());
   command.addCommand(validatorStatusCmd());
@@ -10524,7 +10745,7 @@ function validatorCmd() {
 }
 
 // src/commands/network-status.ts
-import { Command as Command39 } from "commander";
+import { Command as Command40 } from "commander";
 
 // src/network.ts
 async function probeRpcChain(network, rpc) {
@@ -10558,7 +10779,7 @@ function networkStatusCmd(probeRpc2 = probeRpcChain, probeFaucet = async (endpoi
     return { ...identity, ready: null, readinessError: error instanceof Error ? error.message : String(error) };
   }
 }) {
-  return new Command39("status").description("Show resolved network endpoints and live chain identity").option("--offline", "Resolve configured endpoints without connecting").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command40("status").description("Show resolved network endpoints and live chain identity").option("--offline", "Resolve configured endpoints without connecting").option("--json", "Output as JSON").action(async (opts, command) => {
     const resolved = resolveNetwork(command);
     let rpcInfo = null;
     let rpcError;
@@ -10612,9 +10833,9 @@ function networkStatusCmd(probeRpc2 = probeRpcChain, probeFaucet = async (endpoi
 }
 
 // src/commands/faucet-request.ts
-import { Command as Command40 } from "commander";
+import { Command as Command41 } from "commander";
 function faucetRequestCmd(probeRpc2 = probeRpcChain) {
-  return new Command40("request").description("Request dev/test FLOP after verifying faucet and RPC chain identity").argument("<address>", "SS58 address to fund").option("--amount <flop>", "Requested FLOP amount; server policy may cap it").option("--endpoint <url>", "Explicit faucet endpoint override").option("--json", "Output as JSON").action(async (address, opts, command) => {
+  return new Command41("request").description("Request dev/test FLOP after verifying faucet and RPC chain identity").argument("<address>", "SS58 address to fund").option("--amount <flop>", "Requested FLOP amount; server policy may cap it").option("--endpoint <url>", "Explicit faucet endpoint override").option("--json", "Output as JSON").action(async (address, opts, command) => {
     try {
       const resolved = resolveNetwork(command);
       const endpoint = opts.endpoint ?? resolved.profile.faucet;
@@ -10667,15 +10888,15 @@ function faucetRequestCmd(probeRpc2 = probeRpcChain) {
 }
 
 // src/commands/chat.ts
-import { Command as Command41 } from "commander";
+import { Command as Command42 } from "commander";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { homedir as homedir4 } from "node:os";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 import { createInterface } from "node:readline/promises";
 import { stdin, stdout } from "node:process";
 
 // src/conversations.ts
-import { mkdir as mkdir12, readFile as readFile8, rename as rename8, writeFile as writeFile10 } from "node:fs/promises";
+import { mkdir as mkdir13, readFile as readFile8, rename as rename8, writeFile as writeFile11 } from "node:fs/promises";
 import { dirname as dirname6 } from "node:path";
 var MAX_CONVERSATIONS = 100;
 var MAX_CONVERSATION_MESSAGES = 100;
@@ -10695,9 +10916,9 @@ var ConversationStore = class {
     }
   }
   async write(data) {
-    await mkdir12(dirname6(this.path), { recursive: true, mode: 448 });
+    await mkdir13(dirname6(this.path), { recursive: true, mode: 448 });
     const temp = `${this.path}.${process.pid}.tmp`;
-    await writeFile10(temp, `${JSON.stringify(data, null, 2)}
+    await writeFile11(temp, `${JSON.stringify(data, null, 2)}
 `, { mode: 384 });
     await rename8(temp, this.path);
   }
@@ -10734,7 +10955,7 @@ function conversationPrompt(messages) {
 
 // src/commands/chat.ts
 function chatCmd() {
-  return new Command41("chat").description("Start or resume a persistent FLOP chat, optionally through a bounded session").argument("[prompt]", "One-shot prompt; omit for interactive chat").option("--conversation <id>", "Resume a conversation ID").option("--model <id>", "32-byte model hash or exact registered name from flop model list").option("--session-owner <address>", "Use --signer as this owner's session delegate").option("--max-flop <n>", "Per-turn FLOP cap", "5").option("--tee-requirements <hex>", "Registered HTLC appraisal commitments (100-byte SCALE hex)", process.env.FLOP_HTLC_TEE_REQUIREMENTS).option("--skip-model-check", "Allow an unregistered model (local development only)").option("--history", "List stored conversations without connecting").option("--delete <id>", "Delete a stored conversation without connecting").option("--store <path>", "Conversation store path", join8(homedir4(), ".flop", "conversations.json")).option("--json", "Output as JSON").action(async (prompt, opts, command) => {
+  return new Command42("chat").description("Start or resume a persistent FLOP chat, optionally through a bounded session").argument("[prompt]", "One-shot prompt; omit for interactive chat").option("--conversation <id>", "Resume a conversation ID").option("--model <id>", "32-byte model hash or exact registered name from flop model list").option("--session-owner <address>", "Use --signer as this owner's session delegate").option("--max-flop <n>", "Per-turn FLOP cap", "5").option("--tee-requirements <hex>", "Registered HTLC appraisal commitments (100-byte SCALE hex)", process.env.FLOP_HTLC_TEE_REQUIREMENTS).option("--skip-model-check", "Allow an unregistered model (local development only)").option("--history", "List stored conversations without connecting").option("--delete <id>", "Delete a stored conversation without connecting").option("--store <path>", "Conversation store path", join9(homedir4(), ".flop", "conversations.json")).option("--json", "Output as JSON").action(async (prompt, opts, command) => {
     const store = new ConversationStore(opts.store);
     let agent;
     try {
@@ -10859,8 +11080,8 @@ function chatCmd() {
 }
 
 // src/commands/tx-build.ts
-import { Command as Command42 } from "commander";
-import { writeFile as writeFile11 } from "node:fs/promises";
+import { Command as Command43 } from "commander";
+import { writeFile as writeFile12 } from "node:fs/promises";
 import { execFile as execFile5 } from "node:child_process";
 import { promisify as promisify5 } from "node:util";
 
@@ -10926,7 +11147,7 @@ function assertEnvelopeChain(api, envelope) {
 
 // src/commands/tx-build.ts
 function txBuildCmd() {
-  return new Command42("build").description("Build an immortal unsigned transaction envelope for air-gapped signing").requiredOption("--address <address>", "Signing account").requiredOption("--call <hex>", "SCALE call hex").option("--out <path>", "Write envelope JSON").option("--qr", "Render the signing payload using installed qrencode").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command43("build").description("Build an immortal unsigned transaction envelope for air-gapped signing").requiredOption("--address <address>", "Signing account").requiredOption("--call <hex>", "SCALE call hex").option("--out <path>", "Write envelope JSON").option("--qr", "Render the signing payload using installed qrencode").option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       const resolved = resolveNetwork(command);
@@ -10939,7 +11160,7 @@ function txBuildCmd() {
         opts.call
       );
       if (opts.out) {
-        await writeFile11(opts.out, `${JSON.stringify(envelope, null, 2)}
+        await writeFile12(opts.out, `${JSON.stringify(envelope, null, 2)}
 `, { mode: 384 });
       }
       if (opts.qr) {
@@ -10971,10 +11192,10 @@ function txBuildCmd() {
 }
 
 // src/commands/tx-broadcast.ts
-import { Command as Command43 } from "commander";
+import { Command as Command44 } from "commander";
 import { readFile as readFile9 } from "node:fs/promises";
 function txBroadcastCmd() {
-  return new Command43("broadcast").description("Import an offline signature, reject chain drift, and broadcast").argument("<envelope>", "Unsigned envelope JSON").requiredOption("--signature <hex>", "SCALE MultiSignature from the offline signer").option("--allow-nonce-drift", "Broadcast even if account nonce has changed").option("--json", "Output as JSON").action(async (path5, opts, command) => {
+  return new Command44("broadcast").description("Import an offline signature, reject chain drift, and broadcast").argument("<envelope>", "Unsigned envelope JSON").requiredOption("--signature <hex>", "SCALE MultiSignature from the offline signer").option("--allow-nonce-drift", "Broadcast even if account nonce has changed").option("--json", "Output as JSON").action(async (path5, opts, command) => {
     let client;
     try {
       if (!/^0x[0-9a-f]+$/i.test(opts.signature)) throw new Error("--signature must be 0x hex");
@@ -11010,7 +11231,7 @@ function txBroadcastCmd() {
 }
 
 // src/commands/multisig.ts
-import { Command as Command44 } from "commander";
+import { Command as Command45 } from "commander";
 import { createKeyMulti, encodeAddress, sortAddresses } from "@polkadot/util-crypto";
 import { blake2AsHex } from "@polkadot/util-crypto";
 function otherSignatories(signer, values) {
@@ -11031,8 +11252,8 @@ function timepoint(opts) {
   return { height: parsePositiveInt(opts.height, "--height"), index };
 }
 function multisigCmd() {
-  const command = new Command44("multisig").description("Participate in Substrate multisig transactions");
-  command.addCommand(new Command44("address").description("Derive the deterministic multisig address").requiredOption("--threshold <n>", "Approval threshold").requiredOption("--signatory <address...>", "All signatory addresses").option("--json", "Output as JSON").action(async (opts, cmd) => {
+  const command = new Command45("multisig").description("Participate in Substrate multisig transactions");
+  command.addCommand(new Command45("address").description("Derive the deterministic multisig address").requiredOption("--threshold <n>", "Approval threshold").requiredOption("--signatory <address...>", "All signatory addresses").option("--json", "Output as JSON").action(async (opts, cmd) => {
     try {
       const threshold = parsePositiveInt(opts.threshold, "--threshold");
       const sorted = sortAddresses(opts.signatory, 42);
@@ -11047,7 +11268,7 @@ function multisigCmd() {
       commandError(error);
     }
   }));
-  command.addCommand(new Command44("propose").description("Create or execute a multisig call").requiredOption("--threshold <n>", "Approval threshold").requiredOption("--other <address...>", "Other signatories (exclude configured signer)").requiredOption("--call <hex>", "SCALE call hex").option("--max-ref-time <n>", "Maximum call refTime").option("--max-proof-size <n>", "Maximum call proofSize").option("--json", "Output as JSON").action(async (opts, cmd) => {
+  command.addCommand(new Command45("propose").description("Create or execute a multisig call").requiredOption("--threshold <n>", "Approval threshold").requiredOption("--other <address...>", "Other signatories (exclude configured signer)").requiredOption("--call <hex>", "SCALE call hex").option("--max-ref-time <n>", "Maximum call refTime").option("--max-proof-size <n>", "Maximum call proofSize").option("--json", "Output as JSON").action(async (opts, cmd) => {
     let client;
     try {
       client = await createClient(getRpc(cmd), getSigner(cmd));
@@ -11070,7 +11291,7 @@ function multisigCmd() {
       await client?.disconnect();
     }
   }));
-  command.addCommand(new Command44("approve").description("Approve a pending multisig call hash").requiredOption("--threshold <n>", "Approval threshold").requiredOption("--other <address...>", "Other signatories").requiredOption("--call-hash <hex>", "Pending call hash").requiredOption("--height <n>", "Timepoint block height").requiredOption("--index <n>", "Timepoint extrinsic index").option("--max-ref-time <n>", "Maximum call refTime").option("--max-proof-size <n>", "Maximum call proofSize").option("--json", "Output as JSON").action(async (opts, cmd) => {
+  command.addCommand(new Command45("approve").description("Approve a pending multisig call hash").requiredOption("--threshold <n>", "Approval threshold").requiredOption("--other <address...>", "Other signatories").requiredOption("--call-hash <hex>", "Pending call hash").requiredOption("--height <n>", "Timepoint block height").requiredOption("--index <n>", "Timepoint extrinsic index").option("--max-ref-time <n>", "Maximum call refTime").option("--max-proof-size <n>", "Maximum call proofSize").option("--json", "Output as JSON").action(async (opts, cmd) => {
     let client;
     try {
       client = await createClient(getRpc(cmd), getSigner(cmd));
@@ -11089,7 +11310,7 @@ function multisigCmd() {
       await client?.disconnect();
     }
   }));
-  command.addCommand(new Command44("cancel").description("Cancel a pending multisig as its depositor").requiredOption("--threshold <n>", "Approval threshold").requiredOption("--other <address...>", "Other signatories").requiredOption("--call-hash <hex>", "Pending call hash").requiredOption("--height <n>", "Timepoint block height").requiredOption("--index <n>", "Timepoint extrinsic index").option("--json", "Output as JSON").action(async (opts, cmd) => {
+  command.addCommand(new Command45("cancel").description("Cancel a pending multisig as its depositor").requiredOption("--threshold <n>", "Approval threshold").requiredOption("--other <address...>", "Other signatories").requiredOption("--call-hash <hex>", "Pending call hash").requiredOption("--height <n>", "Timepoint block height").requiredOption("--index <n>", "Timepoint extrinsic index").option("--json", "Output as JSON").action(async (opts, cmd) => {
     let client;
     try {
       client = await createClient(getRpc(cmd), getSigner(cmd));
@@ -11106,7 +11327,7 @@ function multisigCmd() {
       await client?.disconnect();
     }
   }));
-  command.addCommand(new Command44("list").alias("status").description("List pending calls for a multisig account").requiredOption("--account <address>", "Multisig account").option("--json", "Output as JSON").action(async (opts, cmd) => {
+  command.addCommand(new Command45("list").alias("status").description("List pending calls for a multisig account").requiredOption("--account <address>", "Multisig account").option("--json", "Output as JSON").action(async (opts, cmd) => {
     let client;
     try {
       client = await createClient(getRpc(cmd));
@@ -11126,10 +11347,10 @@ function multisigCmd() {
 }
 
 // src/commands/channel.ts
-import { Command as Command45 } from "commander";
+import { Command as Command46 } from "commander";
 function channelCmd() {
-  const command = new Command45("channel").description("Inspect and finalize compute channels");
-  command.addCommand(new Command45("list").description("List on-chain compute channels").option("--agent <address>", "Filter by paying agent").option("--miner <address>", "Filter by serving miner").option("--include-closed", "Include terminal channels").option("--json", "Output as JSON").action(async (opts, cmd) => {
+  const command = new Command46("channel").description("Inspect and finalize compute channels");
+  command.addCommand(new Command46("list").description("List on-chain compute channels").option("--agent <address>", "Filter by paying agent").option("--miner <address>", "Filter by serving miner").option("--include-closed", "Include terminal channels").option("--json", "Output as JSON").action(async (opts, cmd) => {
     let client;
     try {
       client = await createClient(getRpc(cmd));
@@ -11157,7 +11378,7 @@ function channelCmd() {
       await client?.disconnect();
     }
   }));
-  command.addCommand(new Command45("finalize").description("Finalize a force-settled channel after its challenge window").argument("<channel-id>", "0x channel ID").option("--json", "Output as JSON").action(async (channelId, _opts, cmd) => {
+  command.addCommand(new Command46("finalize").description("Finalize a force-settled channel after its challenge window").argument("<channel-id>", "0x channel ID").option("--json", "Output as JSON").action(async (channelId, _opts, cmd) => {
     let client;
     try {
       client = await createClient(getRpc(cmd), getSigner(cmd));
@@ -11603,8 +11824,8 @@ function generateGatewayConfig(input) {
 }
 
 // src/commands/gateway-allowlist.ts
-import { Command as Command46 } from "commander";
-var PRECISIONS4 = ["FP32", "FP16", "BF16", "INT8", "INT4", "Mixed"];
+import { Command as Command47 } from "commander";
+var PRECISIONS5 = ["FP32", "FP16", "BF16", "INT8", "INT4", "Mixed"];
 function field(value, camel, snake) {
   return value?.[camel] ?? value?.[snake];
 }
@@ -11641,7 +11862,7 @@ async function fetchMinerSessionInfo(endpoint, authToken, signal) {
 }
 async function readChainSnapshot(api, miner, pinnedHead) {
   const identity = miner.modelIdentity;
-  const precision = PRECISIONS4[identity.precision];
+  const precision = PRECISIONS5[identity.precision];
   if (!precision) throw new Error(`miner precision is invalid: ${identity.precision}`);
   const finalizedHead = pinnedHead ?? await api.rpc.chain.getFinalizedHead();
   const at = await api.at(finalizedHead);
@@ -11692,7 +11913,7 @@ async function readChainSnapshot(api, miner, pinnedHead) {
   };
 }
 function gatewayAllowlistCmd() {
-  return new Command46("allowlist").description("Generate gateway allowlist and model catalog from a live miner and chain").requiredOption("--miner <url>", "Authenticated miner base URL").requiredOption("--auth-token-env <name>", "Environment variable containing the miner bearer token").requiredOption("--attestation <path>", "Operator/provider deployment, catalog, and price evidence JSON").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command47("allowlist").description("Generate gateway allowlist and model catalog from a live miner and chain").requiredOption("--miner <url>", "Authenticated miner base URL").requiredOption("--auth-token-env <name>", "Environment variable containing the miner bearer token").requiredOption("--attestation <path>", "Operator/provider deployment, catalog, and price evidence JSON").option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       const authToken = process.env[opts.authTokenEnv];
@@ -11718,7 +11939,7 @@ function gatewayAllowlistCmd() {
 }
 
 // src/commands/gateway-renew.ts
-import { open as open3, readFile as readFile11, rename as rename9, rm as rm4, writeFile as writeFile12 } from "node:fs/promises";
+import { open as open3, readFile as readFile11, rename as rename9, rm as rm5, writeFile as writeFile13 } from "node:fs/promises";
 import { createHash as createHash6 } from "node:crypto";
 import { request as request2 } from "node:http";
 import { setTimeout as delay } from "node:timers/promises";
@@ -12074,7 +12295,7 @@ var MinerAdmissions = class {
 
 // ../gateway-core/src/miner-peer.ts
 import { BlockList, isIP } from "node:net";
-import { lookup } from "node:dns/promises";
+import { resolve4 as resolve42, resolve6 as resolve62 } from "node:dns/promises";
 import { request } from "node:https";
 import { Readable } from "node:stream";
 var NOT_PUBLIC = new BlockList();
@@ -12121,17 +12342,32 @@ function isPublicAddress(ip) {
 }
 var EndpointRefusal = class extends Error {
 };
-var systemResolve = (host) => lookup(host, { all: true, verbatim: true });
-async function resolvePublic(host, resolve9 = systemResolve) {
+async function resolveDnsAddresses(host, v4 = resolve42, v6 = resolve62) {
+  for (let attempt = 0; ; attempt++) {
+    const results = await Promise.allSettled([v4(host), v6(host)]);
+    const errors = results.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+    const code = (error) => error?.code;
+    const fatal = errors.find((error) => code(error) !== "ENODATA" && code(error) !== "ENOTFOUND");
+    if (fatal) throw fatal;
+    const notFound = errors.find((error) => code(error) === "ENOTFOUND");
+    if (notFound) {
+      if (attempt === 0) continue;
+      throw notFound;
+    }
+    return results.flatMap((result, index) => result.status === "fulfilled" ? result.value.map((address) => ({ address, family: index === 0 ? 4 : 6 })) : []);
+  }
+}
+var systemResolve = resolveDnsAddresses;
+async function resolvePublic(host, resolve10 = systemResolve) {
   const family = isIP(host);
-  const addresses = family ? [{ address: host, family }] : await resolve9(host);
+  const addresses = family ? [{ address: host, family }] : await resolve10(host);
   if (addresses.length === 0 || !addresses.every((a) => isPublicAddress(a.address))) {
     throw new EndpointRefusal(`${host} does not resolve to public addresses only`);
   }
   return addresses[0];
 }
 function minerPeerFetch(endpoint, dynamic, before = () => {
-}, resolve9 = systemResolve, send2 = request) {
+}, resolve10 = systemResolve, send2 = request) {
   return async (input, init = {}) => {
     before();
     const url = new URL(String(input));
@@ -12142,7 +12378,7 @@ function minerPeerFetch(endpoint, dynamic, before = () => {
     const pinned = await new Promise((accept, reject) => {
       const abort = () => reject(signal.reason);
       signal.addEventListener("abort", abort, { once: true });
-      resolvePublic(url.hostname.replace(/^\[|\]$/g, ""), resolve9).then(accept, reject).finally(() => signal.removeEventListener("abort", abort));
+      resolvePublic(url.hostname.replace(/^\[|\]$/g, ""), resolve10).then(accept, reject).finally(() => signal.removeEventListener("abort", abort));
       if (signal.aborted) abort();
     });
     before();
@@ -12178,7 +12414,7 @@ function minerPeerFetch(endpoint, dynamic, before = () => {
 }
 
 // src/commands/gateway-renew.ts
-import { Command as Command47 } from "commander";
+import { Command as Command48 } from "commander";
 
 // src/commands/gateway-tools-qualification.ts
 import { decodeAddress } from "@polkadot/util-crypto";
@@ -12442,7 +12678,7 @@ function tailnetNodeRef(source) {
   return match ? { host: match[1], egress: match[2], asn: match[3] } : null;
 }
 function readTailscaleStatus(socketPath) {
-  return new Promise((resolve9, reject) => {
+  return new Promise((resolve10, reject) => {
     const req = request2({
       socketPath,
       path: "/localapi/v0/status",
@@ -12457,7 +12693,7 @@ function readTailscaleStatus(socketPath) {
       res.on("end", () => {
         if (res.statusCode !== 200) return reject(new Error(`tailscaled status returned HTTP ${res.statusCode}`));
         try {
-          resolve9(JSON.parse(body));
+          resolve10(JSON.parse(body));
         } catch {
           reject(new Error("tailscaled status is not JSON"));
         }
@@ -12671,12 +12907,12 @@ async function writeEvidenceFile(path5, evidence, appendQualification = false) {
       evidence = { ...prior, generated_at: evidence.generated_at, conformance: [...conformance, ...latest.values()] };
     }
     parseGatewayEvidence(evidence);
-    await writeFile12(temporary, `${JSON.stringify(evidence, null, 2)}
+    await writeFile13(temporary, `${JSON.stringify(evidence, null, 2)}
 `, { mode: 420 });
     await rename9(temporary, path5);
   } finally {
     await lock.close();
-    await rm4(`${path5}.lock`);
+    await rm5(`${path5}.lock`);
   }
 }
 async function finishRenewal(report, out, output) {
@@ -12957,7 +13193,7 @@ function envSecret(name) {
   return value;
 }
 function gatewayRenewCmd() {
-  return new Command47("renew").description("Re-observe allowlisted miners, re-run feature conformance, and write the gateway evidence file").option("--allowlist-env <name>", "Direct probe mode: environment variable holding GATEWAY_SESSION_ALLOWLIST (never printed)").requiredOption("--catalog-env <name>", "Environment variable holding GATEWAY_MODEL_CATALOG").option("--catalog-pricing <mode>", "The gateway's GATEWAY_CATALOG_PRICING: operator, or chain when the catalog omits prices", "operator").option("--provider-key-env <name>", "Direct probe mode: environment variable holding the GPU.ai API key").option("--tailscale-socket <path>", "tailscaled LocalAPI socket for tailnet-hosted miners", "/var/run/tailscale/tailscaled.sock").option("--probe-signer-env <name>", "Direct probe mode: environment variable holding the dedicated funded probe signer URI").option("--probe-escrow <flop>", "Direct probe mode: FLOP escrowed for each conformance probe channel").option("--qualification-receipt <path>", "Receipt-only mode: settled owner tools-qualification evidence; never runs another probe").option("--qualification-receipt-sha256 <hash>", "SHA-256 of the immutable owner qualification receipt").requiredOption("--out <path>", "Evidence file the gateway reads as GATEWAY_EVIDENCE_FILE").option("--json", "Output as JSON").action(async (opts, command) => {
+  return new Command48("renew").description("Re-observe allowlisted miners, re-run feature conformance, and write the gateway evidence file").option("--allowlist-env <name>", "Direct probe mode: environment variable holding GATEWAY_SESSION_ALLOWLIST (never printed)").requiredOption("--catalog-env <name>", "Environment variable holding GATEWAY_MODEL_CATALOG").option("--catalog-pricing <mode>", "The gateway's GATEWAY_CATALOG_PRICING: operator, or chain when the catalog omits prices", "operator").option("--provider-key-env <name>", "Direct probe mode: environment variable holding the GPU.ai API key").option("--tailscale-socket <path>", "tailscaled LocalAPI socket for tailnet-hosted miners", "/var/run/tailscale/tailscaled.sock").option("--probe-signer-env <name>", "Direct probe mode: environment variable holding the dedicated funded probe signer URI").option("--probe-escrow <flop>", "Direct probe mode: FLOP escrowed for each conformance probe channel").option("--qualification-receipt <path>", "Receipt-only mode: settled owner tools-qualification evidence; never runs another probe").option("--qualification-receipt-sha256 <hash>", "SHA-256 of the immutable owner qualification receipt").requiredOption("--out <path>", "Evidence file the gateway reads as GATEWAY_EVIDENCE_FILE").option("--json", "Output as JSON").action(async (opts, command) => {
     let client;
     try {
       if (opts.catalogPricing !== "operator" && opts.catalogPricing !== "chain") {
@@ -13051,9 +13287,9 @@ function gatewayRenewCmd() {
 }
 
 // src/release-check.ts
-import { mkdir as mkdir13, readFile as readFile12, rename as rename10, writeFile as writeFile13 } from "node:fs/promises";
+import { mkdir as mkdir14, readFile as readFile12, rename as rename10, writeFile as writeFile14 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname7, join as join9 } from "node:path";
+import { dirname as dirname7, join as join10 } from "node:path";
 var DAY_MS = 24 * 60 * 60 * 1e3;
 var READ_ONLY = /* @__PURE__ */ new Set([
   "health",
@@ -13097,7 +13333,7 @@ async function checkRelease(options) {
   if (options.offline || (options.testing ?? (process.env.NODE_ENV === "test" || !!process.env.VITEST))) return;
   const warn = options.warn ?? ((message) => console.error(message));
   const now = options.now ?? Date.now();
-  const cacheFile = options.cacheFile ?? join9(process.env.XDG_CACHE_HOME || join9(homedir5(), ".cache"), "flop", "releases.json");
+  const cacheFile = options.cacheFile ?? join10(process.env.XDG_CACHE_HOME || join10(homedir5(), ".cache"), "flop", "releases.json");
   let releases;
   try {
     const cached = JSON.parse(await readFile12(cacheFile, "utf8"));
@@ -13112,9 +13348,9 @@ async function checkRelease(options) {
       if (!response.ok) throw new Error(`HTTP ${response.status}`);
       releases = parseOperatorReleases(await response.json());
       try {
-        await mkdir13(dirname7(cacheFile), { recursive: true });
+        await mkdir14(dirname7(cacheFile), { recursive: true });
         const temporary = `${cacheFile}.${process.pid}.tmp`;
-        await writeFile13(temporary, JSON.stringify({ fetchedAt: now, releases }), { mode: 384 });
+        await writeFile14(temporary, JSON.stringify({ fetchedAt: now, releases }), { mode: 384 });
         await rename10(temporary, cacheFile);
       } catch {
         warn("warning: could not cache operator releases");
@@ -13139,10 +13375,10 @@ async function checkRelease(options) {
 }
 
 // src/cli.ts
-var program = new Command48();
+var program = new Command49();
 var outputMode = outputModeFromArgv(process.argv.slice(2));
 setOutputMode(outputMode);
-program.name("flop").description("FLOP Network CLI").version(operatorVersion(JSON.parse(readFileSync2(join10(packageRoot, "package.json"), "utf8")).version)).option("--offline", "Skip the operator release check").addOption(new Option7("--network <network>", "Network profile").choices(["local", "devnet", "testnet", "mainnet"]).default("local")).option("--rpc <url>", "RPC endpoint override").option("--signer <uri>", "Signer URI (local/dev only; required outside local unless --keystore)").option("--keystore <path>", "Encrypted Polkadot JSON keystore").option("--password-env <name>", "Environment variable containing the keystore password").addOption(new Option7("--output <mode>", "Output mode").choices(["human", "json", "agent"]).default("human")).option("--json", "Output as JSON");
+program.name("flop").description("FLOP Network CLI").version(operatorVersion(JSON.parse(readFileSync2(join11(packageRoot, "package.json"), "utf8")).version)).option("--offline", "Skip the operator release check").addOption(new Option8("--network <network>", "Network profile").choices(["local", "devnet", "testnet", "mainnet"]).default("local")).option("--rpc <url>", "RPC endpoint override").option("--signer <uri>", "Signer URI (local/dev only; required outside local unless --keystore)").option("--keystore <path>", "Encrypted Polkadot JSON keystore").option("--password-env <name>", "Environment variable containing the keystore password").addOption(new Option8("--output <mode>", "Output mode").choices(["human", "json", "agent"]).default("human")).option("--json", "Output as JSON");
 program.addCommand(healthCmd());
 program.addCommand(balanceCmd());
 program.addCommand(gpuCmd());
@@ -13154,13 +13390,13 @@ program.addCommand(chatCmd());
 program.addCommand(agentCmd());
 program.addCommand(minerCmd());
 program.addCommand(validatorCmd());
-var networkCmd = new Command48("network").description("Resolve and inspect network profiles");
+var networkCmd = new Command49("network").description("Resolve and inspect network profiles");
 networkCmd.addCommand(networkStatusCmd());
 program.addCommand(networkCmd);
-var faucetCmd = new Command48("faucet").description("Request dev/test FLOP");
+var faucetCmd = new Command49("faucet").description("Request dev/test FLOP");
 faucetCmd.addCommand(faucetRequestCmd());
 program.addCommand(faucetCmd);
-var sessionCmd = new Command48("session").description("Manage session keys");
+var sessionCmd = new Command49("session").description("Manage session keys");
 sessionCmd.addCommand(sessionRunCmd());
 sessionCmd.addCommand(sessionListCmd());
 sessionCmd.addCommand(sessionCreateCmd());
@@ -13168,7 +13404,7 @@ sessionCmd.addCommand(sessionInfoCmd());
 sessionCmd.addCommand(sessionRevokeCmd());
 sessionCmd.addCommand(sessionLimitsCmd());
 program.addCommand(sessionCmd);
-var keysCmd = new Command48("keys").description("Manage keys");
+var keysCmd = new Command49("keys").description("Manage keys");
 keysCmd.addCommand(keysGenerateCmd());
 keysCmd.addCommand(keysInspectCmd());
 keysCmd.addCommand(keysHardwareCmd());
@@ -13176,44 +13412,45 @@ keysCmd.addCommand(keysImportCmd());
 keysCmd.addCommand(keysExportCmd());
 keysCmd.addCommand(keysClaudeProfileCmd());
 program.addCommand(keysCmd);
-var walletCmd = new Command48("wallet").description("Manage wallets");
-var agentWalletCmd = new Command48("agent").description("Agent wallet operations");
+var walletCmd = new Command49("wallet").description("Manage wallets");
+var agentWalletCmd = new Command49("agent").description("Agent wallet operations");
 agentWalletCmd.addCommand(walletAgentCreateCmd());
 walletCmd.addCommand(agentWalletCmd);
 program.addCommand(walletCmd);
-var txCmd = new Command48("tx").description("Build, sign, and broadcast transactions");
+var txCmd = new Command49("tx").description("Build, sign, and broadcast transactions");
 txCmd.addCommand(txBuildCmd());
 txCmd.addCommand(txBroadcastCmd());
 program.addCommand(txCmd);
 program.addCommand(multisigCmd());
 program.addCommand(channelCmd());
-var gatewayCmd = new Command48("gateway").description("Generate verified gateway configuration");
+var gatewayCmd = new Command49("gateway").description("Generate verified gateway configuration");
 gatewayCmd.addCommand(gatewayAllowlistCmd());
 gatewayCmd.addCommand(gatewayRenewCmd());
 program.addCommand(gatewayCmd);
-var x402Cmd = new Command48("x402").description("x402 payment gateway operations");
+var x402Cmd = new Command49("x402").description("x402 payment gateway operations");
 x402Cmd.addCommand(x402SettleCmd());
 program.addCommand(x402Cmd);
-var daCmd = new Command48("da").description("Sovereign DA registry (leases, deposits)");
+var daCmd = new Command49("da").description("Sovereign DA registry (leases, deposits)");
 daCmd.addCommand(daDepositCmd());
 daCmd.addCommand(daRegisterCmd());
 daCmd.addCommand(daTopupCmd());
 daCmd.addCommand(daWithdrawCmd());
 program.addCommand(daCmd);
-var modelCmd = new Command48("model").description("Model registry operations");
+var modelCmd = new Command49("model").description("Model registry operations");
 modelCmd.addCommand(modelListCmd());
 modelCmd.addCommand(modelGetCmd());
 modelCmd.addCommand(modelFetchCmd());
 modelCmd.addCommand(modelUploadCmd());
 modelCmd.addCommand(modelPreflightCmd());
 modelCmd.addCommand(modelOnboardCmd());
+modelCmd.addCommand(modelBackupCmd());
 modelCmd.addCommand(modelAuditCmd());
 program.addCommand(modelCmd);
 program.hook("preAction", async (_root, action) => {
   const path5 = [];
   for (let command = action; command && command !== program; command = command.parent) path5.unshift(command.name());
   await checkRelease({
-    version: operatorVersion(JSON.parse(readFileSync2(join10(packageRoot, "package.json"), "utf8")).version),
+    version: operatorVersion(JSON.parse(readFileSync2(join11(packageRoot, "package.json"), "utf8")).version),
     readOnly: isReadOnlyCommand(path5),
     offline: program.opts().offline,
     image: !!process.env.FLOP_IMAGE_VERSION

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flop-labs/cli",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "FLOP Network CLI — interact with FLOP from the terminal",
   "license": "MIT OR Apache-2.0",
   "repository": {