@flop-labs/cli 0.4.2 → 0.4.4

package/CHANGELOG.md

@@ -7,6 +7,24 @@ and this package follows [Semantic Versioning](https://semver.org/spec/v2.0.0.ht
 
 ## [Unreleased]
 
+## [0.4.4] - 2026-11-10
+
+### Fixed
+
+- Gateway tools probes now reconcile ambiguous cooperative closes against finalized
+  channel events without submitting a second close.
+- Model backup keeps download receipts beside `--model-dir` unless `--state-dir`
+  selects another location on the same filesystem; metadata-only onboarding now
+  passes the registered precision to the suggested backup command.
+
+## [0.4.3] - 2026-11-09
+
+### Fixed
+
+- Package with SDK 0.5.2 as the minimum compatible SDK, including canonical session
+  pallet aliases. The 30-second challenge and 120-second enrollment deadlines
+  shipped in 0.4.2 are unchanged; packed offline regressions cover those paths.
+
 ## [0.4.2] - 2026-11-09
 
 ### Added

package/dist/cli.js

@@ -6462,15 +6462,15 @@ function ownerOnly(mode) {
 }
 async function privateDirectory(path5) {
   await mkdir5(path5, { recursive: true, mode: 448 });
-  const stat = await lstat(path5);
-  if (!stat.isDirectory() || !ownerOnly(stat.mode) || process.getuid && stat.uid !== process.getuid()) {
+  const stat2 = await lstat(path5);
+  if (!stat2.isDirectory() || !ownerOnly(stat2.mode) || process.getuid && stat2.uid !== process.getuid()) {
     throw new Error("FLOP credential directory must be owned by this user with mode 0700");
   }
 }
 async function cachedCredential(path5, gateway) {
   try {
-    const stat = await lstat(path5);
-    if (!stat.isFile() || !ownerOnly(stat.mode) || process.getuid && stat.uid !== process.getuid()) {
+    const stat2 = await lstat(path5);
+    if (!stat2.isFile() || !ownerOnly(stat2.mode) || process.getuid && stat2.uid !== process.getuid()) {
       throw new Error("FLOP credential cache must be an owner-only regular file (mode 0600)");
     }
     const cached = JSON.parse(await readFile3(path5, "utf8"));
@@ -6551,8 +6551,8 @@ async function enrollmentWallet(path5) {
   await cryptoWaitReady4();
   const keyring = new Keyring4({ type: "sr25519", ss58Format: 42 });
   try {
-    const stat = await lstat(path5);
-    if (!stat.isFile() || !ownerOnly(stat.mode) || process.getuid && stat.uid !== process.getuid()) {
+    const stat2 = await lstat(path5);
+    if (!stat2.isFile() || !ownerOnly(stat2.mode) || process.getuid && stat2.uid !== process.getuid()) {
       throw new Error("FLOP devnet wallet must be an owner-only regular file (mode 0600)");
     }
     const stored = JSON.parse(await readFile3(path5, "utf8"));
@@ -6760,8 +6760,8 @@ async function savePublicProfile(model, key) {
   const path5 = publicHermesProfilePath(model, key);
   for (const directory of [join2(homedir2(), ".flop"), publicHermesProfileRoot(), path5]) {
     await mkdir6(directory, { recursive: true, mode: 448 });
-    const stat = await lstat2(directory);
-    if (!stat.isDirectory() || process.getuid && stat.uid !== process.getuid() || process.platform !== "win32" && (stat.mode & 63) !== 0) {
+    const stat2 = await lstat2(directory);
+    if (!stat2.isDirectory() || process.getuid && stat2.uid !== process.getuid() || process.platform !== "win32" && (stat2.mode & 63) !== 0) {
       throw new Error("FLOP Hermes profile and parent directories must be owner-only regular directories");
     }
   }
@@ -7707,12 +7707,12 @@ async function writeModelFiles(outputDir, files) {
 }
 async function readLocalModelFiles(path5) {
   const root = resolve5(path5);
-  const stat = await lstat3(root);
-  if (stat.isSymbolicLink()) throw new Error(`model source must not be a symlink: ${path5}`);
-  if (stat.isFile()) {
+  const stat2 = await lstat3(root);
+  if (stat2.isSymbolicLink()) throw new Error(`model source must not be a symlink: ${path5}`);
+  if (stat2.isFile()) {
     return [{ path: root.split(sep).pop() ?? "weights.bin", bytes: await readFile4(root) }];
   }
-  if (!stat.isDirectory()) throw new Error(`model source is not a file or directory: ${path5}`);
+  if (!stat2.isDirectory()) throw new Error(`model source is not a file or directory: ${path5}`);
   const files = [];
   async function walk(dir) {
     for (const entry of await readdir(dir, { withFileTypes: true })) {
@@ -7899,8 +7899,8 @@ function onboardingDirectory(binding, override) {
   return override ? resolve6(override) : join3(process.env.XDG_STATE_HOME ?? join3(homedir3(), ".local/state"), "flop/model-onboarding", digest(JSON.stringify(binding)));
 }
 async function hashFile(path5) {
-  const stat = await lstat4(path5);
-  if (!stat.isFile() || stat.isSymbolicLink()) throw new Error("onboarding artifact must be a regular file");
+  const stat2 = await lstat4(path5);
+  if (!stat2.isFile() || stat2.isSymbolicLink()) throw new Error("onboarding artifact must be a regular file");
   const hash2 = createHash2("sha256");
   for await (const chunk of createReadStream(path5)) hash2.update(chunk);
   return hash2.digest("hex");
@@ -8077,8 +8077,8 @@ var privateJson = (value) => JSON.stringify(
   (_k, v) => typeof v === "bigint" ? v.toString() : v instanceof Uint8Array ? hex(v) : v
 );
 async function readPrivateJson(path5) {
-  const stat = await lstat5(path5);
-  if (!stat.isFile() || stat.isSymbolicLink() || (stat.mode & 63) !== 0)
+  const stat2 = await lstat5(path5);
+  if (!stat2.isFile() || stat2.isSymbolicLink() || (stat2.mode & 63) !== 0)
     throw new Error("replay files must be private regular files (0600)");
   return JSON.parse(await readFile6(path5, "utf8"));
 }
@@ -8467,6 +8467,9 @@ function activeHybridProfile(profile) {
   const image = optionValue(profile.imageId);
   return image !== null && codecHash(image) !== `0x${"00".repeat(32)}` && profile.epoch.toString() !== "0";
 }
+function modelBackupHandoff(modelHash, precision, revision) {
+  return `flop model backup ${modelHash} --model-dir <path> --precision ${precision}${revision ? ` --revision ${revision}` : ""}`;
+}
 function normalizePrecision(raw) {
   const upper = raw.trim().toUpperCase();
   const precision = PRECISIONS.find((candidate) => candidate.toUpperCase() === upper);
@@ -8632,10 +8635,10 @@ async function exists(path5) {
 async function materializeSource(raw, outputDir, token, sourceRevision, resumeState, files) {
   const local = await exists(raw);
   if (local) {
-    const stat = await lstat6(raw);
-    if (stat.isSymbolicLink()) throw new Error(`model source must not be a symlink: ${raw}`);
-    const modelDir = stat.isDirectory() ? resolve7(raw) : outputDir;
-    if (!stat.isDirectory()) {
+    const stat2 = await lstat6(raw);
+    if (stat2.isSymbolicLink()) throw new Error(`model source must not be a symlink: ${raw}`);
+    const modelDir = stat2.isDirectory() ? resolve7(raw) : outputDir;
+    if (!stat2.isDirectory()) {
       await writeModelFiles(outputDir, await readLocalModelFiles(raw));
     }
     const name = basename(resolve7(raw));
@@ -9352,7 +9355,7 @@ function modelOnboardCmd() {
       if (metadataOnly && !state.weightsRef) {
         process.stderr.write(
           `next: approval needs the DA backup of ${identity.modelHash} (packed image + file table, ${measured.imageSize} bytes in ${Math.max(1, Math.ceil(measured.imageSize / sdk.DA_CHUNK_SIZE))} chunk(s)). On a box with room for the checkpoint, run
-  flop model backup ${identity.modelHash} --model-dir <path>${preflight ? ` --revision ${preflight.revision}` : ""}
+  ${modelBackupHandoff(identity.modelHash, precision, preflight?.revision)}
 then bind the DataRef it prints. Rerunning this command with --download packs the image from disk instead, which needs about twice the checkpoint's size.
 `
         );
@@ -9407,9 +9410,9 @@ function modelUploadCmd() {
         imagePath = join6(tempDir, "weights.img");
         if (opts.path) {
           let modelDir = resolve8(opts.path);
-          const stat = await lstat7(modelDir);
-          if (stat.isSymbolicLink()) throw new Error(`model source must not be a symlink: ${opts.path}`);
-          if (stat.isFile()) {
+          const stat2 = await lstat7(modelDir);
+          if (stat2.isSymbolicLink()) throw new Error(`model source must not be a symlink: ${opts.path}`);
+          if (stat2.isFile()) {
             modelDir = join6(tempDir, "model");
             await mkdir11(modelDir);
             await copyFile(resolve8(opts.path), join6(modelDir, basename2(opts.path)));
@@ -9555,8 +9558,9 @@ function modelPreflightCmd() {
 
 // src/commands/model-backup.ts
 import { Command as Command33, Option as Option3 } from "commander";
-import { mkdir as mkdir12, rm as rm4, writeFile as writeFile10 } from "node:fs/promises";
-import { join as join8, resolve as resolve9 } from "node:path";
+import { createHash as createHash4 } from "node:crypto";
+import { mkdir as mkdir12, rm as rm4, stat, writeFile as writeFile10 } from "node:fs/promises";
+import { dirname as dirname6, join as join8, resolve as resolve9 } from "node:path";
 var PRECISIONS3 = ["FP32", "FP16", "BF16", "INT8", "INT4", "Mixed"];
 async function finalizedLeasedRef2(api, commitment, size) {
   const hash2 = await api.rpc.chain.getFinalizedHead();
@@ -9572,6 +9576,17 @@ async function awaitFinalizedLeasedRef(api, commitment, size) {
     await new Promise((wake) => setTimeout(wake, REGISTRATION_POLL_MS));
   }
 }
+function downloadStateDir(binding, override) {
+  if (override) return resolve9(override);
+  const key = createHash4("sha256").update(JSON.stringify(binding)).digest("hex");
+  return join8(dirname6(binding.modelDir), `.flop-backup-state-${key.slice(0, 16)}`);
+}
+async function assertSameFilesystem(stateDir, modelDir) {
+  if ((await stat(stateDir)).dev === (await stat(modelDir)).dev) return;
+  throw new Error(
+    `download state ${stateDir} is not on the same filesystem as ${modelDir}; pass a --state-dir on that filesystem outside the checkpoint tree (if --model-dir is a mount point, use a subdirectory of it)`
+  );
+}
 function registeredHubRepo(mirrors) {
   const repos = [...new Set(mirrors.filter((m) => m.kind === "huggingface").map((m) => m.repo))];
   if (repos.length > 1) {
@@ -9584,7 +9599,7 @@ function registeredHubRepo(mirrors) {
 function modelBackupCmd() {
   return new Command33("backup").description(
     "Stream a registered content-v1 checkpoint from Hugging Face into validator DA under this box's DA key, without ever writing the packed image out, and print the DataRefs its publisher then binds"
-  ).argument("<model_hash>", "Registered model hash (0x-hex)").requiredOption("--model-dir <path>", "Directory the checkpoint streams into (needs room for it)").option("--source <hf-id>", "Hugging Face id (owner/model or hf:owner/model); the model's registered mirror when omitted").option("--revision <sha>", "Immutable 40-hex commit; main is resolved to one when omitted").addOption(new Option3("--precision <precision>", "Measured-root precision").choices(PRECISIONS3).default("FP16")).option("--da-validator <path>", "da-validator executable", "da-validator").option("--token <token>", "Hugging Face bearer token (prefer HF_TOKEN)").option("--state-dir <path>", "Download resume receipts (outside the checkpoint tree)").option("--dry-run", "Print the plan and the DA deposit it would lock, and stop before any transfer").option("--json", "Output as JSON").action(async (modelHash, opts, command) => {
+  ).argument("<model_hash>", "Registered model hash (0x-hex)").requiredOption("--model-dir <path>", "Directory the checkpoint streams into (needs room for it)").option("--source <hf-id>", "Hugging Face id (owner/model or hf:owner/model); the model's registered mirror when omitted").option("--revision <sha>", "Immutable 40-hex commit; main is resolved to one when omitted").addOption(new Option3("--precision <precision>", "Measured-root precision").choices(PRECISIONS3).default("FP16")).option("--da-validator <path>", "da-validator executable", "da-validator").option("--token <token>", "Hugging Face bearer token (prefer HF_TOKEN)").option("--state-dir <path>", "Download resume receipts, on the checkpoint's filesystem but outside its tree (defaults to beside --model-dir)").option("--dry-run", "Print the plan and the DA deposit it would lock, and stop before any transfer").option("--json", "Output as JSON").action(async (modelHash, opts, command) => {
     let client;
     let workDir;
     try {
@@ -9637,10 +9652,12 @@ function modelBackupCmd() {
       workDir = join8(resolve9(modelDir, ".."), `.flop-backup-${modelHash.replace(/^0x/, "").slice(0, 16)}`);
       await mkdir12(workDir, { recursive: true, mode: 448 });
       await mkdir12(modelDir, { recursive: true });
-      const resumeState = opts.stateDir ? join8(resolve9(opts.stateDir), "download.json") : void 0;
-      if (resumeState) await mkdir12(resolve9(opts.stateDir), { recursive: true, mode: 448 });
+      const stateDir = downloadStateDir({ modelHash, modelDir, repo, revision: preflight.revision }, opts.stateDir);
+      await mkdir12(stateDir, { recursive: true, mode: 448 });
+      await assertSameFilesystem(stateDir, modelDir);
+      const resumeState = join8(stateDir, "download.json");
       process.stderr.write(
-        `backing up ${repo}@${preflight.revision} (${preflight.files.length} files, image ${imageSize} bytes, ${preflight.daChunks} DA chunk(s)) as ${modelHash}
+        `backing up ${repo}@${preflight.revision} (${preflight.files.length} files, image ${imageSize} bytes, ${preflight.daChunks} DA chunk(s)) as ${modelHash}; download receipts in ${stateDir}
 `
       );
       await sdk.fetchHuggingFaceToDir(repo, modelDir, {
@@ -10897,7 +10914,7 @@ import { stdin, stdout } from "node:process";
 
 // src/conversations.ts
 import { mkdir as mkdir13, readFile as readFile8, rename as rename8, writeFile as writeFile11 } from "node:fs/promises";
-import { dirname as dirname6 } from "node:path";
+import { dirname as dirname7 } from "node:path";
 var MAX_CONVERSATIONS = 100;
 var MAX_CONVERSATION_MESSAGES = 100;
 var MAX_MESSAGE_CHARS = 16384;
@@ -10916,7 +10933,7 @@ var ConversationStore = class {
     }
   }
   async write(data) {
-    await mkdir13(dirname6(this.path), { recursive: true, mode: 448 });
+    await mkdir13(dirname7(this.path), { recursive: true, mode: 448 });
     const temp = `${this.path}.${process.pid}.tmp`;
     await writeFile11(temp, `${JSON.stringify(data, null, 2)}
 `, { mode: 384 });
@@ -11940,7 +11957,7 @@ function gatewayAllowlistCmd() {
 
 // src/commands/gateway-renew.ts
 import { open as open3, readFile as readFile11, rename as rename9, rm as rm5, writeFile as writeFile13 } from "node:fs/promises";
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 import { request as request2 } from "node:http";
 import { setTimeout as delay } from "node:timers/promises";
 import { Keyring as Keyring5 } from "@polkadot/keyring";
@@ -12037,11 +12054,11 @@ function renewConformance(record, evidence, now = Date.now()) {
 }
 
 // ../gateway-core/src/tools-qualification.ts
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 var OWNER_TOOLS_QUALIFICATION = "flop.owner-tools-qualification.v1";
 function qualificationHash(value) {
-  return createHash4("sha256").update(JSON.stringify(value)).digest("hex");
+  return createHash5("sha256").update(JSON.stringify(value)).digest("hex");
 }
 function toolsQualificationEnvelope(model, version, scope) {
   return {
@@ -12139,12 +12156,12 @@ function qualificationSignedToolCalls(frames) {
 
 // ../gateway-core/src/miner-admissions.ts
 import { closeSync, fstatSync, openSync, readSync, statSync } from "node:fs";
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 var MAX_ADMITTED_MINERS = 256;
 var MAX_FILE_BYTES = 512 * 1024;
 var HASH4 = /^0x[0-9a-f]{64}$/;
 var minerSlot = (miner) => `${miner.minerAddress}:${miner.modelIdentity.requestedSlug}`;
-var staticMinerSha256 = (miner) => createHash5("sha256").update(JSON.stringify(miner)).digest("hex");
+var staticMinerSha256 = (miner) => createHash6("sha256").update(JSON.stringify(miner)).digest("hex");
 var sameModel = (a, b) => Object.keys(a.modelIdentity).every((key) => a.modelIdentity[key] === b.modelIdentity[key]);
 var MinerRouting = class {
   constructor(statics, path5) {
@@ -12161,8 +12178,8 @@ var MinerRouting = class {
     if (this.path) {
       let stamp;
       try {
-        const stat = statSync(this.path);
-        stamp = `${stat.dev}:${stat.ino}:${stat.size}:${stat.mtimeMs}`;
+        const stat2 = statSync(this.path);
+        stamp = `${stat2.dev}:${stat2.ino}:${stat2.size}:${stat2.mtimeMs}`;
       } catch {
         stamp = "missing";
       }
@@ -12174,8 +12191,8 @@ var MinerRouting = class {
         let fd;
         try {
           fd = openSync(this.path, "r");
-          const stat = fstatSync(fd);
-          if (!stat.isFile() || stat.size > MAX_FILE_BYTES) throw new Error();
+          const stat2 = fstatSync(fd);
+          if (!stat2.isFile() || stat2.size > MAX_FILE_BYTES) throw new Error();
           const buffer = Buffer.alloc(MAX_FILE_BYTES + 1);
           const size = readSync(fd, buffer, 0, buffer.length, 0);
           if (size > MAX_FILE_BYTES) throw new Error();
@@ -12237,8 +12254,8 @@ var MinerAdmissions = class {
   read(now = Date.now()) {
     let stamp;
     try {
-      const stat = statSync(this.path);
-      stamp = `${stat.dev}:${stat.ino}:${stat.size}:${stat.mtimeMs}`;
+      const stat2 = statSync(this.path);
+      stamp = `${stat2.dev}:${stat2.ino}:${stat2.size}:${stat2.mtimeMs}`;
     } catch {
       stamp = "missing";
     }
@@ -12249,8 +12266,8 @@ var MinerAdmissions = class {
       let fd;
       try {
         fd = openSync(this.path, "r");
-        const stat = fstatSync(fd);
-        if (!stat.isFile() || stat.size > MAX_FILE_BYTES) throw new Error("admissions file too large");
+        const stat2 = fstatSync(fd);
+        if (!stat2.isFile() || stat2.size > MAX_FILE_BYTES) throw new Error("admissions file too large");
         const buffer = Buffer.alloc(MAX_FILE_BYTES + 1);
         const size = readSync(fd, buffer, 0, buffer.length, 0);
         if (size > MAX_FILE_BYTES) throw new Error("admissions file too large");
@@ -13001,6 +13018,73 @@ async function waitForSettlementAllowance(api, channelId, aggregateGn, deadline)
   }
   throw new Error("settlement allowance did not arrive before the probe deadline");
 }
+async function reconcileProbeClose(api, channelId, aggregateGn, deadline, submit) {
+  const bounded = async (operation) => {
+    const remaining = deadline - Date.now();
+    if (remaining <= 0) throw new Error("probe deadline elapsed");
+    let timer;
+    try {
+      return await Promise.race([operation, new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new Error("probe deadline elapsed")), remaining);
+      })]);
+    } finally {
+      if (timer) clearTimeout(timer);
+    }
+  };
+  let next;
+  try {
+    const head = await bounded(api.rpc.chain.getFinalizedHead());
+    next = BigInt((await bounded(api.rpc.chain.getHeader(head))).number.toString());
+  } catch {
+    return "settlement unknown (finalized start unavailable; do not resubmit)";
+  }
+  if (Date.now() >= deadline) return "settlement not submitted (probe deadline elapsed)";
+  try {
+    await bounded(submit());
+  } catch {
+  }
+  try {
+    while (Date.now() < deadline) {
+      const head = await bounded(api.rpc.chain.getFinalizedHead());
+      const height = BigInt((await bounded(api.rpc.chain.getHeader(head))).number.toString());
+      while (next <= height) {
+        const blockHash = await bounded(api.rpc.chain.getBlockHash(next.toString()));
+        const at = await bounded(api.at(blockHash));
+        const events = [...await bounded(at.query.system.events())];
+        for (const row of events) {
+          const event = row.event;
+          if (event.section !== "computeChannel" || !["Settled", "TimedOutRefunded"].includes(event.method) || event.data[0].toHex() !== hex3(channelId) || !row.phase.isApplyExtrinsic) continue;
+          const index = row.phase.asApplyExtrinsic.toNumber();
+          if (!events.some((other) => other.phase.isApplyExtrinsic && other.phase.asApplyExtrinsic.toNumber() === index && other.event.section === "system" && other.event.method === "ExtrinsicSuccess")) continue;
+          if (event.method === "TimedOutRefunded") return `refunded at finalized ${blockHash.toHex()}`;
+          if (BigInt(event.data[3].toString()) !== aggregateGn || !event.data[4].isTrue) {
+            return `settlement mismatch at finalized ${blockHash.toHex()}`;
+          }
+          const paid = BigInt(event.data[1].toString());
+          if (paid <= 0n) return `settlement has zero miner payment at finalized ${blockHash.toHex()}`;
+          const block = await bounded(api.rpc.chain.getBlock(blockHash));
+          return `settled ${block.block.extrinsics[index].hash.toHex()} minerPaid=${paid} at finalized ${blockHash.toHex()}`;
+        }
+        next++;
+      }
+      await bounded(delay(Math.min(1e3, Math.max(1, deadline - Date.now()))));
+    }
+  } catch {
+  }
+  return "settlement unknown (no finalized outcome before probe deadline; do not resubmit)";
+}
+async function settleProbe(api, channelId, aggregateGn, deadline, allowance2, submit, forceClose) {
+  try {
+    await allowance2();
+  } catch (error) {
+    try {
+      await forceClose();
+    } catch {
+    }
+    return `cooperative settlement not submitted; force close attempted (${reason(error)})`;
+  }
+  return reconcileProbeClose(api, channelId, aggregateGn, deadline, submit);
+}
 async function renewalMinerInfo(api, miner, fetchImpl = fetch) {
   const head = await api.rpc.chain.getFinalizedHead();
   const at = await api.at(head);
@@ -13154,28 +13238,26 @@ async function probeToolsConformance(input) {
     }
     throw error;
   }
-  let settlement = "force-settlement posted; finalize it with `flop channel finalize`";
-  try {
-    await waitForSettlementAllowance(api, session.channelId, receipt.gN, deadline);
-    const settled = await session.closeCooperative(async (claim) => {
+  const settlement = await settleProbe(
+    api,
+    session.channelId,
+    receipt.gN,
+    deadline,
+    () => waitForSettlementAllowance(api, session.channelId, receipt.gN, deadline),
+    () => session.closeCooperative(async (claim) => {
       const wire = await computeChannel6.notifyMinerClose(miner.endpoint, claim, headers, AbortSignal.timeout(3e4), requestHeaders, fetchImpl);
-      return wire ? {
+      if (!wire) throw new Error("miner did not report a settlement");
+      return {
         channelId: bytes3(wire.channelId),
         minerPaid: BigInt(wire.minerPaid),
         burned: BigInt(wire.burned),
         aggregateGn: BigInt(wire.aggregateGn),
         cooperative: wire.cooperative,
         txHash: wire.txHash
-      } : null;
-    });
-    if ("minerPaid" in settled && settled.cooperative) settlement = `settled ${settled.txHash}`;
-  } catch (error) {
-    try {
-      await session.close();
-    } catch {
-    }
-    settlement = `settlement failed (${reason(error)})`;
-  }
+      };
+    }),
+    () => session.close()
+  );
   return `${verdict} in channel ${hex3(session.channelId)}; ${settlement}`;
 }
 function envJson(name) {
@@ -13204,7 +13286,7 @@ function gatewayRenewCmd() {
           throw new Error("receipt-only mode requires the receipt/hash and cannot run direct probes");
         }
         const raw = await readFile11(opts.qualificationReceipt);
-        if (raw.length > 8e6 || createHash6("sha256").update(raw).digest("hex") !== opts.qualificationReceiptSha256) throw new Error("qualification receipt bytes differ");
+        if (raw.length > 8e6 || createHash7("sha256").update(raw).digest("hex") !== opts.qualificationReceiptSha256) throw new Error("qualification receipt bytes differ");
         const value = JSON.parse(raw.toString("utf8"));
         const records2 = parseCanonicalCatalog(envJson(opts.catalogEnv), { chainPriced: opts.catalogPricing === "chain" });
         const record = records2.find((item) => item.openrouter_slug === value.model);
@@ -13289,7 +13371,7 @@ function gatewayRenewCmd() {
 // src/release-check.ts
 import { mkdir as mkdir14, readFile as readFile12, rename as rename10, writeFile as writeFile14 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname7, join as join10 } from "node:path";
+import { dirname as dirname8, join as join10 } from "node:path";
 var DAY_MS = 24 * 60 * 60 * 1e3;
 var READ_ONLY = /* @__PURE__ */ new Set([
   "health",
@@ -13348,7 +13430,7 @@ async function checkRelease(options) {
       if (!response.ok) throw new Error(`HTTP ${response.status}`);
       releases = parseOperatorReleases(await response.json());
       try {
-        await mkdir14(dirname7(cacheFile), { recursive: true });
+        await mkdir14(dirname8(cacheFile), { recursive: true });
         const temporary = `${cacheFile}.${process.pid}.tmp`;
         await writeFile14(temporary, JSON.stringify({ fetchedAt: now, releases }), { mode: 384 });
         await rename10(temporary, cacheFile);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flop-labs/cli",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "FLOP Network CLI — interact with FLOP from the terminal",
   "license": "MIT OR Apache-2.0",
   "repository": {
@@ -23,7 +23,7 @@
   },
   "dependencies": {
     "@flop-labs/client": "^0.2.2",
-    "@flop-labs/sdk": "^0.5.1",
+    "@flop-labs/sdk": "^0.5.2",
     "@polkadot/api": "^17.0.1",
     "@polkadot/keyring": "^14.0.3",
     "@polkadot/util-crypto": "^14.0.3",