@heyanon-arp/cli 0.0.11 → 0.0.13

package/dist/cli.js

@@ -496,7 +496,7 @@ var init_api = __esm({
        * entity feed.
        */
       async listDelegations(relationshipId, signer, query, signal) {
-        return this.signedRequest(
+        const rows = await this.signedRequest(
           "GET",
           `/v1/relationships/${encodeURIComponent(relationshipId)}/delegations`,
           null,
@@ -504,6 +504,11 @@ var init_api = __esm({
           query,
           signal
         );
+        return Promise.all(
+          rows.map(
+            (row) => signer.did === row.offererDid ? row : (0, import_shield.guardInboundFields)(row, ["scopeSummary", "title", "brief", "acceptanceCriteria"], { selfDid: signer.did }).then((r) => r.event)
+          )
+        );
       }
       /**
        * Signed `GET /v1/relationships/:id/work`. One row per
@@ -513,13 +518,21 @@ var init_api = __esm({
        * work-logs operating under a single delegation umbrella.
        */
       async listWorkLogs(relationshipId, signer, query) {
-        return this.signedRequest(
+        const rows = await this.signedRequest(
           "GET",
           `/v1/relationships/${encodeURIComponent(relationshipId)}/work`,
           null,
           signer,
           query
         );
+        return Promise.all(
+          rows.map((row) => {
+            const fields = [];
+            if (signer.did !== row.callerDid) fields.push("requestParams");
+            if (signer.did !== row.payeeDid) fields.push("responseOutput");
+            return fields.length === 0 ? row : (0, import_shield.guardInboundFields)(row, fields, { selfDid: signer.did }).then((r) => r.event);
+          })
+        );
       }
       /**
        * Signed `GET /v1/relationships/:id/receipts`. One row per
@@ -770,45 +783,6 @@ var init_format = __esm({
   }
 });
 
-// src/id-format.ts
-function describeNonUuidShape(raw) {
-  if (raw === "") return "empty string";
-  if (raw.startsWith("del_") && UUID_RE.test(raw.slice(4))) {
-    return "looks like a delegation id with the canonical `del_` prefix. If this field expects a delegation_id, drop the `del_` prefix and pass the 36-char body. If this field expects a DIFFERENT id type (relationship_id / request_id), the `del_`-prefixed value belongs to the WRONG entity \u2014 look up the right row and copy its id";
-  }
-  if (raw.startsWith("evt_")) {
-    return "looks like an event id (evt_<uuid>) \u2014 this command expects a delegation/relationship/request id (UUID), which is a DIFFERENT column. Look up the row that emitted this event (`heyarp events <rel> --json`) and copy the appropriate id field";
-  }
-  if (raw.startsWith("did:arp:")) {
-    return "looks like a DID (agent identifier) \u2014 this command expects a delegation/relationship/request id (UUID), not a DID";
-  }
-  if (SHA256_PREFIX_RE.test(raw)) {
-    return "looks like a sha256:<hash> \u2014 this command expects a UUID, not a hash. sha256: ids show up in receipt_event_hash, request_hash, response_hash";
-  }
-  if (OBJECT_ID_24_HEX_RE.test(raw)) {
-    return "looks like a Mongo ObjectId (24-hex row id surfaced by some server read endpoints) rather than the expected UUID. Mongo ObjectIds and delegation ids are DIFFERENT formats";
-  }
-  if (UUID_NO_DASHES_RE.test(raw)) {
-    return "looks like a UUID with no dashes \u2014 canonical UUIDs need the 8-4-4-4-12 dash pattern (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx)";
-  }
-  return void 0;
-}
-function requireUuid(cmdName, raw, label) {
-  if (UUID_RE.test(raw)) return;
-  const hint = describeNonUuidShape(raw);
-  const base = `${cmdName}: ${label} must be a UUID (got '${raw}')`;
-  throw new Error(hint ? `${base} \u2014 ${hint}` : base);
-}
-var UUID_RE, OBJECT_ID_24_HEX_RE, SHA256_PREFIX_RE, UUID_NO_DASHES_RE;
-var init_id_format = __esm({
-  "src/id-format.ts"() {
-    UUID_RE = /^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}$/;
-    OBJECT_ID_24_HEX_RE = /^[0-9a-f]{24}$/;
-    SHA256_PREFIX_RE = /^sha256:[0-9a-f]{64}$/;
-    UUID_NO_DASHES_RE = /^[a-fA-F0-9]{32}$/;
-  }
-});
-
 // src/state.ts
 function stateFilePath() {
   return (0, import_node_path3.join)(arpHomeDir(), "agents.json");
@@ -947,7 +921,7 @@ var init_state = __esm({
 
 // src/commands/lifecycle.ts
 function registerLifecycleCommands(root) {
-  root.command("update").description("Update an agent profile (name / description / tags). At least one flag is required.").argument("<did>").option("--server <url>", "Override ARP server base URL").option("--name <s>", "New display name").option("--description <s>", "New description").option("--tag <s>", "Capability tag \u2014 REPLACES the existing list. Repeatable: --tag translation --tag fr", accumulate2, []).option("--clear-tags", "Drop all tags (cannot be combined with --tag)", false).action(
+  root.command("update").description("Update an agent profile (name / description / tags). At least one flag is required.").argument("<did>").option("--server <url>", "Override ARP server base URL").option("--name <s>", "New display name").option("--description <s>", "New description").option("--tag <s>", "Capability tag \u2014 REPLACES the existing list. Repeatable: --tag translation --tag fr", accumulate, []).option("--clear-tags", "Drop all tags (cannot be combined with --tag)", false).action(
     async (did, opts) => {
       const body = buildUpdateBody(opts);
       if (Object.keys(body).length === 0) {
@@ -963,7 +937,7 @@ function registerLifecycleCommands(root) {
     }
   );
 }
-function accumulate2(value, previous) {
+function accumulate(value, previous) {
   return [...previous, value];
 }
 function buildUpdateBody(opts) {
@@ -983,8 +957,8 @@ function buildUpdateBody(opts) {
 async function actSigned(did, serverOverride, act) {
   const local = loadAgentOrThrow(serverOverride, did);
   const api = new ArpApiClient(serverOverride);
-  console.log(import_chalk4.default.dim(`Server: ${api.serverUrl}`));
-  console.log(import_chalk4.default.dim(`Signer: ${local.did}`));
+  console.log(import_chalk2.default.dim(`Server: ${api.serverUrl}`));
+  console.log(import_chalk2.default.dim(`Signer: ${local.did}`));
   const signer = makeSigner(local);
   return act(api, signer);
 }
@@ -995,22 +969,61 @@ function makeSigner(s) {
   };
 }
 function printAgent(verb, agent) {
-  console.log(import_chalk4.default.green(`
+  console.log(import_chalk2.default.green(`
 ${verb}.`));
-  console.log(`${import_chalk4.default.bold("DID")}: ${import_chalk4.default.cyan(agent.did)}`);
-  console.log(import_chalk4.default.bold("\nAgent profile:"));
+  console.log(`${import_chalk2.default.bold("DID")}: ${import_chalk2.default.cyan(agent.did)}`);
+  console.log(import_chalk2.default.bold("\nAgent profile:"));
   console.log(formatJson(agent));
 }
-var import_chalk4;
+var import_chalk2;
 var init_lifecycle = __esm({
   "src/commands/lifecycle.ts"() {
-    import_chalk4 = __toESM(require("chalk"));
+    import_chalk2 = __toESM(require("chalk"));
     init_api();
     init_format();
     init_state();
   }
 });
 
+// src/id-format.ts
+function describeNonUuidShape(raw) {
+  if (raw === "") return "empty string";
+  if (raw.startsWith("del_") && UUID_RE.test(raw.slice(4))) {
+    return "looks like a delegation id with the canonical `del_` prefix. If this field expects a delegation_id, drop the `del_` prefix and pass the 36-char body. If this field expects a DIFFERENT id type (relationship_id / request_id), the `del_`-prefixed value belongs to the WRONG entity \u2014 look up the right row and copy its id";
+  }
+  if (raw.startsWith("evt_")) {
+    return "looks like an event id (evt_<uuid>) \u2014 this command expects a delegation/relationship/request id (UUID), which is a DIFFERENT column. Look up the row that emitted this event (`heyarp events <rel> --json`) and copy the appropriate id field";
+  }
+  if (raw.startsWith("did:arp:")) {
+    return "looks like a DID (agent identifier) \u2014 this command expects a delegation/relationship/request id (UUID), not a DID";
+  }
+  if (SHA256_PREFIX_RE.test(raw)) {
+    return "looks like a sha256:<hash> \u2014 this command expects a UUID, not a hash. sha256: ids show up in receipt_event_hash, request_hash, response_hash";
+  }
+  if (OBJECT_ID_24_HEX_RE.test(raw)) {
+    return "looks like a Mongo ObjectId (24-hex row id surfaced by some server read endpoints) rather than the expected UUID. Mongo ObjectIds and delegation ids are DIFFERENT formats";
+  }
+  if (UUID_NO_DASHES_RE.test(raw)) {
+    return "looks like a UUID with no dashes \u2014 canonical UUIDs need the 8-4-4-4-12 dash pattern (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx)";
+  }
+  return void 0;
+}
+function requireUuid(cmdName, raw, label) {
+  if (UUID_RE.test(raw)) return;
+  const hint = describeNonUuidShape(raw);
+  const base = `${cmdName}: ${label} must be a UUID (got '${raw}')`;
+  throw new Error(hint ? `${base} \u2014 ${hint}` : base);
+}
+var UUID_RE, OBJECT_ID_24_HEX_RE, SHA256_PREFIX_RE, UUID_NO_DASHES_RE;
+var init_id_format = __esm({
+  "src/id-format.ts"() {
+    UUID_RE = /^[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}$/;
+    OBJECT_ID_24_HEX_RE = /^[0-9a-f]{24}$/;
+    SHA256_PREFIX_RE = /^sha256:[0-9a-f]{64}$/;
+    UUID_NO_DASHES_RE = /^[a-fA-F0-9]{32}$/;
+  }
+});
+
 // src/commands/status.ts
 function registerStatusCommand(root) {
   root.command("status").description("Where am I in the work cycle? FSM state + next-action hint for ONE relationship (signed reads)").argument("<relationship-id>", "Relationship UUID").option("--server <url>", "Override ARP server base URL").option("--from-did <did>", "Signer DID \u2014 required only if multiple agents are registered against this server").option("--json", "Machine-readable: single JSON object with the composed summary. Pipe-safe.", false).option(
@@ -2576,7 +2589,29 @@ async function runOffer(recipientDid, opts) {
   console.log(import_chalk6.default.dim(`Sender: ${sender.did}`));
   console.log(import_chalk6.default.dim(`Recipient: ${recipientDid}`));
   console.log(import_chalk6.default.dim(`Delegation: ${delegationId}`));
-  const result = await sendDelegationEnvelope({ api, sender, recipientDid, body, ttlSeconds, verbose: opts.verbose, server: opts.server });
+  let result;
+  try {
+    result = await sendDelegationEnvelope({ api, sender, recipientDid, body, ttlSeconds, verbose: opts.verbose, server: opts.server });
+  } catch (err) {
+    if (err instanceof ApiError && err.payload.code === "DELEGATION_PRICING_MISMATCH") {
+      const d = err.payload.details;
+      console.error(import_chalk6.default.yellow(`
+The recipient's published accept-prefs rejected this offer${d?.reason ? ` (mismatch: ${d.reason})` : ""}.`));
+      if (d !== void 0) {
+        console.error(import_chalk6.default.dim(`  accepted: ${JSON.stringify(d.accepted)}`));
+        console.error(import_chalk6.default.dim(`  offered:  ${JSON.stringify(d.offered)}`));
+      }
+      console.error(
+        import_chalk6.default.dim(
+          `
+Check what the recipient accepts BEFORE offering:
+  heyarp agents accept-prefs show ${recipientDid}
+then re-run with matching --pricing-model / --currency / --amount.`
+        )
+      );
+    }
+    throw err;
+  }
   printIngestResult(result);
   console.log(import_chalk6.default.dim(`
 Reference this delegation on subsequent calls with:`));
@@ -3194,6 +3229,12 @@ var init_delegation = __esm({
       "DELEGATION_ACCEPTER_IS_OFFERER",
       "DELEGATION_DECLINER_IS_OFFERER",
       "DELEGATION_CANCELER_NOT_OFFERER",
+      // PricingPolicy: the offer's terms fell outside the RECIPIENT's
+      // published accept-prefs. Fires in `handleOffer` AFTER the event
+      // row commit (pre-materialization on the server), so the sequence
+      // was consumed — advance it or the corrected re-offer trips
+      // ENV_SEQUENCE_BACKWARDS.
+      "DELEGATION_PRICING_MISMATCH",
       // `DELEGATION_PENDING_LOCK` fires from the body handler's
       // `requireDelegationInState` AFTER the event row is persisted
       // (same code path as DELEGATION_INVALID_STATE), so an accept
@@ -3459,6 +3500,11 @@ function settlementKeyFromDidDoc(didDoc, buyerDid) {
   return mb.startsWith("z") ? mb.slice(1) : mb;
 }
 function projectDelegationRowForHash(d) {
+  if ((0, import_shield2.isShieldRedacted)(d.scopeSummary)) {
+    throw new Error(
+      `settlement: delegation ${d.delegationId} has shield-withheld scope (flagged by content-security). Cannot derive condition_hash over withheld content \u2014 do not settle; review and dispute.`
+    );
+  }
   const out = {
     delegationId: d.delegationId,
     scopeSummary: d.scopeSummary,
@@ -3685,9 +3731,10 @@ async function autoSignAndDeliverPayeeSig(opts, cmdName = "receipt propose") {
   if (!delegation) {
     throw new Error(`${cmdName}: delegation ${delegationId} not found under relationship ${relId} (paginated 5000 rows).`);
   }
-  if (delegation.state !== "accepted") {
+  const SETTLEABLE_STATES = /* @__PURE__ */ new Set(["accepted", "locked"]);
+  if (!SETTLEABLE_STATES.has(delegation.state ?? "")) {
     throw new Error(
-      `${cmdName}: delegation ${delegationId} is in state '${delegation.state ?? "unknown"}' \u2014 only an 'accepted' delegation is settleable (its escrow lock is still LOCKED). A non-accepted delegation's lock has been released / refunded / canceled, so the server would reject the settlement signature post-commit (SETTLEMENT_SIG_LOCK_INVALID_STATE). Nothing to settle.`
+      `${cmdName}: delegation ${delegationId} is in state '${delegation.state ?? "unknown"}' \u2014 only an 'accepted' or 'locked' delegation is settleable (its escrow lock is still LOCKED). A non-settleable state's lock has been released / refunded / canceled, so the server would reject the settlement signature post-commit (SETTLEMENT_SIG_LOCK_INVALID_STATE). Nothing to settle.`
     );
   }
   if (!delegation.amount) {
@@ -3865,10 +3912,11 @@ async function autoSignAndDeliverPayeeSig(opts, cmdName = "receipt propose") {
     serverTimestamp: result.serverTimestamp
   };
 }
-var import_sdk10, import_utils3, import_web33, import_chalk17, NATIVE_SOL_MINT2, SETTLEMENT_MIN_EXPIRY_HEADROOM_SECS, SETTLEMENT_REFRESH_HEADROOM_SECS, LOCK_READ_NOT_VISIBLE_RETRIES, LOCK_READ_RETRY_DELAY_MS;
+var import_sdk10, import_shield2, import_utils3, import_web33, import_chalk17, NATIVE_SOL_MINT2, SETTLEMENT_MIN_EXPIRY_HEADROOM_SECS, SETTLEMENT_REFRESH_HEADROOM_SECS, LOCK_READ_NOT_VISIBLE_RETRIES, LOCK_READ_RETRY_DELAY_MS;
 var init_settlement = __esm({
   "src/commands/settlement.ts"() {
     import_sdk10 = require("@heyanon-arp/sdk");
+    import_shield2 = require("@heyanon-arp/shield");
     import_utils3 = require("@noble/hashes/utils");
     import_web33 = require("@solana/web3.js");
     import_chalk17 = __toESM(require("chalk"));
@@ -4232,6 +4280,11 @@ async function computeWorkLogHashes(api, sender, relationshipId, delegationId, r
       `receipt propose --auto-hashes: work-log row ${requestId} is in state '${workLog.state}', not 'responded'. The payee must \`work respond\` before a receipt can be proposed.`
     );
   }
+  if ((0, import_shield3.isShieldRedacted)(workLog.requestParams) || (0, import_shield3.isShieldRedacted)(workLog.responseOutput)) {
+    throw new Error(
+      `receipt propose --auto-hashes: work-log row ${requestId} has shield-withheld content (the counterparty's request or response was flagged by content-security). Cannot reconstruct canonical hashes over withheld content \u2014 do not settle; review and dispute. See ~/.heyshield/receipts.jsonl.`
+    );
+  }
   const requestBody = {
     type: "work_request",
     content: { delegation_id: workLog.delegationId, request_id: workLog.requestId, params: workLog.requestParams }
@@ -4934,11 +4987,12 @@ function requireDid2(cmdName, did, label) {
     throw new Error(`${cmdName}: ${label} must look like 'did:arp:...' (got '${did}')`);
   }
 }
-var import_node_fs7, import_sdk11, import_chalk18, POST_COMMIT_ERROR_CODES2, VERDICT_VALUES, SHA256_RE;
+var import_node_fs7, import_sdk11, import_shield3, import_chalk18, POST_COMMIT_ERROR_CODES2, VERDICT_VALUES, SHA256_RE;
 var init_receipt = __esm({
   "src/commands/receipt.ts"() {
     import_node_fs7 = require("fs");
     import_sdk11 = require("@heyanon-arp/sdk");
+    import_shield3 = require("@heyanon-arp/shield");
     import_chalk18 = __toESM(require("chalk"));
     init_api();
     init_format();
@@ -5049,14 +5103,14 @@ var init_receipt = __esm({
 });
 
 // src/cli.ts
-var import_shield2 = require("@heyanon-arp/shield");
+var import_shield4 = require("@heyanon-arp/shield");
 var import_commander = require("commander");
 var import_simple_update_notifier = __toESM(require("simple-update-notifier"));
 
 // package.json
 var package_default = {
   name: "@heyanon-arp/cli",
-  version: "0.0.11",
+  version: "0.0.13",
   description: "Command-line client for the Agent Relationship Protocol \u2014 register agents, sign envelopes, run escrowed work cycles on Solana.",
   license: "MIT",
   keywords: ["arp", "agent-relationship-protocol", "did", "solana", "escrow", "ed25519", "agents", "a2a", "cli"],
@@ -5101,11 +5155,13 @@ var package_default = {
 };
 
 // src/commands/agents.ts
-var import_chalk2 = __toESM(require("chalk"));
+var import_chalk3 = __toESM(require("chalk"));
 init_api();
 init_format();
+init_state();
+init_lifecycle();
 function registerAgentsCommand(root) {
-  root.command("agents").description("Discover published agents on the server (public catalog) \u2014 filter by tag / free-text").option("--server <url>", "Override ARP server base URL").option("--tag <s>", "Filter by capability tag \u2014 repeatable; AND-semantics across tags", accumulate, []).option("--query <s>", "Full-text search over name + description").option("--after <id>", "Cursor: pass the previous page's last `id` to fetch the next page").option("--limit <n>", "Max rows to return (1..100)", "20").option(
+  const agents = root.command("agents").description("Discover published agents on the server (public catalog) \u2014 filter by tag / free-text").option("--server <url>", "Override ARP server base URL").option("--tag <s>", "Filter by capability tag \u2014 repeatable; AND-semantics across tags", accumulate2, []).option("--query <s>", "Full-text search over name + description").option("--after <id>", "Cursor: pass the previous page's last `id` to fetch the next page").option("--limit <n>", "Max rows to return (1..100)", "20").option(
     "--verbose",
     'After the one-line summaries, print a framed "Full agent payloads (N rows)" block containing the JSON array of all rows (with owner-string sanitisation for terminal safety)',
     false
@@ -5127,11 +5183,12 @@ function registerAgentsCommand(root) {
   ).action(async (opts) => {
     await runAgents(opts);
   });
+  registerAcceptPrefsCommands(agents);
 }
 async function runAgents(opts) {
   const limit = parseLimit(opts.limit);
   const api = new ArpApiClient(opts.server);
-  progress(opts.json, import_chalk2.default.dim(`Server: ${api.serverUrl}`));
+  progress(opts.json, import_chalk3.default.dim(`Server: ${api.serverUrl}`));
   const query = { limit };
   if (opts.tag && opts.tag.length > 0) query.tag = opts.tag.map((t) => t.trim().toLowerCase());
   if (opts.query) query.q = opts.query;
@@ -5147,7 +5204,7 @@ async function runAgents(opts) {
     return;
   }
   if (rows.length === 0) {
-    console.log(import_chalk2.default.dim("\n(no agents matched)"));
+    console.log(import_chalk3.default.dim("\n(no agents matched)"));
     return;
   }
   console.log("");
@@ -5158,10 +5215,10 @@ async function runAgents(opts) {
     const useUnicode = supportsUnicodeFrame();
     const heavyRule = useUnicode ? "\u2501".repeat(60) : "=".repeat(60);
     const headerGlyph = useUnicode ? "\u25BC" : ">";
-    const rule = import_chalk2.default.cyan(heavyRule);
+    const rule = import_chalk3.default.cyan(heavyRule);
     console.log(`
 ${rule}`);
-    console.log(import_chalk2.default.bold.cyan(`${headerGlyph} Full agent payloads (${safeRows.length} row${safeRows.length === 1 ? "" : "s"})`));
+    console.log(import_chalk3.default.bold.cyan(`${headerGlyph} Full agent payloads (${safeRows.length} row${safeRows.length === 1 ? "" : "s"})`));
     console.log(rule);
     console.log(formatJson(safeRows));
     console.log(`${rule}
@@ -5169,16 +5226,16 @@ ${rule}`);
   }
   if (rows.length === limit) {
     const cursor = rows[rows.length - 1].id;
-    console.log(import_chalk2.default.dim(`
+    console.log(import_chalk3.default.dim(`
 Next page: re-run with --after ${cursor}`));
   }
 }
 function formatAgentLine(a, opts = {}) {
   const idDisplay = opts.fullIds ? a.id : `${a.id.slice(0, 8)}...${a.id.slice(-4)}`;
   const tags = `[${a.tags.join(",")}]`;
-  const name = a.name ? `"${truncate(sanitizeForTerminal(a.name), 40)}"` : import_chalk2.default.dim("(unnamed)");
-  const description = a.description ? `\u2014 ${import_chalk2.default.dim(truncate(sanitizeForTerminal(a.description), 60))}` : "";
-  return `${import_chalk2.default.dim(idDisplay)} ${import_chalk2.default.cyan(a.did)} ${import_chalk2.default.magenta(tags)} ${name} ${description}`.trim();
+  const name = a.name ? `"${truncate(sanitizeForTerminal(a.name), 40)}"` : import_chalk3.default.dim("(unnamed)");
+  const description = a.description ? `\u2014 ${import_chalk3.default.dim(truncate(sanitizeForTerminal(a.description), 60))}` : "";
+  return `${import_chalk3.default.dim(idDisplay)} ${import_chalk3.default.cyan(a.did)} ${import_chalk3.default.magenta(tags)} ${name} ${description}`.trim();
 }
 function truncate(s, max) {
   if (s.length <= max) return s;
@@ -5195,12 +5252,129 @@ function parseLimit(raw) {
   }
   return n;
 }
-function accumulate(value, previous) {
+function accumulate2(value, previous) {
   return [...previous, value];
 }
+var PRICING_MODELS = ["flat", "usage_based"];
+function registerAcceptPrefsCommands(agents) {
+  const prefs = agents.command("accept-prefs").description("Worker-side accept-preferences (PricingPolicy): what delegation offers the server should reject on your behalf");
+  prefs.command("set").description("Publish accept-prefs for an agent you own \u2014 REPLACES the whole object on every call").argument("<did>", "Agent DID (must have a local key \u2014 owner-only)").option("--server <url>", "Override ARP server base URL").option("--pricing-model <m>", "Accepted pricing model: flat | usage_based. Repeatable; omit to accept any model.", accumulate2, []).option(
+    "--currency <spec>",
+    `Accepted currency: "<caip19-asset-id>[,<min>[,<max>]]" \u2014 optional inclusive amount bounds as decimal strings in that currency's units (empty segment skips: "asset,,500" = max only). Repeatable; omit to accept any currency.`,
+    accumulate2,
+    []
+  ).option(
+    "--from-json <json>",
+    'Full AcceptPrefs JSON object (mutually exclusive with --pricing-model / --currency). Shape: {"pricingModels":[...],"currencies":[{"assetId":"...","minAmount":"...","maxAmount":"..."}]}'
+  ).action(async (did, _opts, cmd) => {
+    const opts = cmd.optsWithGlobals();
+    const body = buildAcceptPrefs(opts);
+    const local = loadAgentOrThrow(opts.server, did);
+    const api = new ArpApiClient(opts.server);
+    console.log(import_chalk3.default.dim(`Server: ${api.serverUrl}`));
+    console.log(import_chalk3.default.dim(`Signer: ${local.did}`));
+    const agent = await api.updateAgent(did, { acceptPrefs: body }, makeSigner(local));
+    console.log(import_chalk3.default.green("\nAccept-prefs published."));
+    printAcceptPrefs(agent.acceptPrefs);
+    console.log(import_chalk3.default.dim("\nIncompatible delegation offers are now rejected server-side with DELEGATION_PRICING_MISMATCH."));
+  });
+  prefs.command("show").description(
+    "Read an agent's published accept-prefs (any DID \u2014 the read is signed with YOUR local agent key; any registered agent may read). Buyers: run this BEFORE `delegation offer` so the offer matches"
+  ).argument("<did>", "Agent DID to inspect (any agent, not just your own)").option("--server <url>", "Override ARP server base URL").option("--from-did <did>", "Signer DID \u2014 required only if multiple agents are registered against this server").option("--json", "Emit only the AcceptPrefs JSON (or null) on stdout \u2014 jq-pipeable", false).action(async (did, _opts, cmd) => {
+    const opts = cmd.optsWithGlobals();
+    const sender = resolveSenderAgent("agents accept-prefs show", opts.server, opts.fromDid);
+    const api = new ArpApiClient(opts.server);
+    progress(opts.json, import_chalk3.default.dim(`Server: ${api.serverUrl}`));
+    progress(opts.json, import_chalk3.default.dim(`Signer: ${sender.did}`));
+    const agent = await api.getAgent(did, makeSigner(sender));
+    if (opts.json) {
+      jsonOut(agent.acceptPrefs ?? null);
+      return;
+    }
+    console.log("");
+    printAcceptPrefs(agent.acceptPrefs);
+  });
+  prefs.command("clear").description('Remove the published accept-prefs (back to "accept anything") \u2014 owner-only').argument("<did>", "Agent DID (must have a local key)").option("--server <url>", "Override ARP server base URL").action(async (did, _opts, cmd) => {
+    const opts = cmd.optsWithGlobals();
+    const local = loadAgentOrThrow(opts.server, did);
+    const api = new ArpApiClient(opts.server);
+    console.log(import_chalk3.default.dim(`Server: ${api.serverUrl}`));
+    console.log(import_chalk3.default.dim(`Signer: ${local.did}`));
+    await api.updateAgent(did, { acceptPrefs: null }, makeSigner(local));
+    console.log(import_chalk3.default.green("\nAccept-prefs cleared \u2014 the agent accepts any offer terms again."));
+  });
+}
+function buildAcceptPrefs(opts) {
+  const hasGranular = (opts.pricingModel?.length ?? 0) > 0 || (opts.currency?.length ?? 0) > 0;
+  if (opts.fromJson !== void 0 && hasGranular) {
+    throw new Error("agents accept-prefs set: --from-json and --pricing-model/--currency are mutually exclusive. Pick one path.");
+  }
+  if (opts.fromJson !== void 0) {
+    let parsed;
+    try {
+      parsed = JSON.parse(opts.fromJson);
+    } catch (err) {
+      throw new Error(`agents accept-prefs set: --from-json is not valid JSON: ${err.message}`);
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+      throw new Error(`agents accept-prefs set: --from-json must be a JSON object, got ${Array.isArray(parsed) ? "array" : typeof parsed}.`);
+    }
+    return parsed;
+  }
+  if (!hasGranular) {
+    throw new Error("agents accept-prefs set: pass at least one of --pricing-model / --currency / --from-json (to remove prefs entirely use `accept-prefs clear`).");
+  }
+  const prefs = {};
+  if (opts.pricingModel && opts.pricingModel.length > 0) {
+    const models = [...new Set(opts.pricingModel.map((m) => m.trim().toLowerCase()))];
+    for (const m of models) {
+      if (!PRICING_MODELS.includes(m)) {
+        throw new Error(`agents accept-prefs set: --pricing-model must be one of flat | usage_based (got '${m}')`);
+      }
+    }
+    prefs.pricingModels = models;
+  }
+  if (opts.currency && opts.currency.length > 0) {
+    prefs.currencies = opts.currency.map(parseCurrencySpec);
+  }
+  return prefs;
+}
+function parseCurrencySpec(spec) {
+  const parts = spec.split(",").map((p) => p.trim());
+  if (parts.length > 3) {
+    throw new Error(`agents accept-prefs set: --currency expects "<asset-id>[,<min>[,<max>]]" (got ${parts.length} comma-separated segments in '${spec}')`);
+  }
+  const [assetId, min, max] = parts;
+  if (!assetId) {
+    throw new Error(`agents accept-prefs set: --currency spec '${spec}' is missing the asset id`);
+  }
+  return {
+    assetId,
+    ...min ? { minAmount: min } : {},
+    ...max ? { maxAmount: max } : {}
+  };
+}
+function printAcceptPrefs(prefs) {
+  if (!prefs || (prefs.pricingModels?.length ?? 0) === 0 && (prefs.currencies?.length ?? 0) === 0) {
+    console.log(import_chalk3.default.dim("(no accept-prefs published \u2014 this agent accepts any offer terms)"));
+    return;
+  }
+  const models = prefs.pricingModels ?? [];
+  console.log(`${import_chalk3.default.bold("Pricing models:")} ${models.length > 0 ? models.join(", ") : import_chalk3.default.dim("any")}`);
+  const currencies = prefs.currencies ?? [];
+  if (currencies.length === 0) {
+    console.log(`${import_chalk3.default.bold("Currencies:")} ${import_chalk3.default.dim("any (no amount bounds)")}`);
+    return;
+  }
+  console.log(import_chalk3.default.bold("Currencies:"));
+  for (const c of currencies) {
+    const bounds = c.minAmount !== void 0 || c.maxAmount !== void 0 ? import_chalk3.default.dim(` (min: ${c.minAmount ?? "\u2014"}, max: ${c.maxAmount ?? "\u2014"})`) : import_chalk3.default.dim(" (no amount bounds)");
+    console.log(`  ${import_chalk3.default.cyan(c.assetId)}${bounds}`);
+  }
+}
 
 // src/commands/config.ts
-var import_chalk3 = __toESM(require("chalk"));
+var import_chalk4 = __toESM(require("chalk"));
 init_api();
 init_config();
 function registerConfigCommand(root) {
@@ -5209,15 +5383,15 @@ function registerConfigCommand(root) {
     const opts = config.opts();
     if (isGlobalConfigKey(key)) {
       setGlobalConfigValue(key, value);
-      console.log(`${import_chalk3.default.green("\u2713")} ${import_chalk3.default.bold(key)} = ${import_chalk3.default.cyan(value)} ${import_chalk3.default.dim("(global)")}`);
+      console.log(`${import_chalk4.default.green("\u2713")} ${import_chalk4.default.bold(key)} = ${import_chalk4.default.cyan(value)} ${import_chalk4.default.dim("(global)")}`);
     } else if (isServerConfigKey(key)) {
       const serverUrl = resolveServerUrl(opts.server);
       setServerConfigValue(serverUrl, key, value);
-      console.log(`${import_chalk3.default.green("\u2713")} ${import_chalk3.default.bold(key)} = ${import_chalk3.default.cyan(value)} ${import_chalk3.default.dim(`(scoped to ${serverUrl})`)}`);
+      console.log(`${import_chalk4.default.green("\u2713")} ${import_chalk4.default.bold(key)} = ${import_chalk4.default.cyan(value)} ${import_chalk4.default.dim(`(scoped to ${serverUrl})`)}`);
     } else {
       throw unknownKey(key);
     }
-    console.log(import_chalk3.default.dim(`   stored in ${configFilePath()}`));
+    console.log(import_chalk4.default.dim(`   stored in ${configFilePath()}`));
   });
   config.command("get <key>").description("Print one config value").action((key) => {
     const opts = config.opts();
@@ -5231,7 +5405,7 @@ function registerConfigCommand(root) {
       throw unknownKey(key);
     }
     if (value === void 0) {
-      console.log(import_chalk3.default.dim("(not set)"));
+      console.log(import_chalk4.default.dim("(not set)"));
       return;
     }
     console.log(value);
@@ -5242,23 +5416,23 @@ function registerConfigCommand(root) {
     const servers = all.servers ?? {};
     const serverUrls = Object.keys(servers);
     if (globalEntries.length === 0 && serverUrls.length === 0) {
-      console.log(import_chalk3.default.dim("(no config set)"));
-      console.log(import_chalk3.default.dim(`   would write to ${configFilePath()}`));
+      console.log(import_chalk4.default.dim("(no config set)"));
+      console.log(import_chalk4.default.dim(`   would write to ${configFilePath()}`));
       return;
     }
     if (globalEntries.length > 0) {
-      console.log(import_chalk3.default.bold("global"));
+      console.log(import_chalk4.default.bold("global"));
       for (const [k, v] of globalEntries) {
-        console.log(`  ${import_chalk3.default.bold(k)} = ${import_chalk3.default.cyan(v)}`);
+        console.log(`  ${import_chalk4.default.bold(k)} = ${import_chalk4.default.cyan(v)}`);
       }
     }
     for (const url of serverUrls) {
       const bucket = servers[url];
       const bucketEntries = Object.entries(bucket).filter((entry) => typeof entry[1] === "string");
       if (bucketEntries.length === 0) continue;
-      console.log(`${import_chalk3.default.bold("server")} ${import_chalk3.default.dim(url)}`);
+      console.log(`${import_chalk4.default.bold("server")} ${import_chalk4.default.dim(url)}`);
       for (const [k, v] of bucketEntries) {
-        console.log(`  ${import_chalk3.default.bold(k)} = ${import_chalk3.default.cyan(v)}`);
+        console.log(`  ${import_chalk4.default.bold(k)} = ${import_chalk4.default.cyan(v)}`);
       }
     }
   });
@@ -5266,11 +5440,11 @@ function registerConfigCommand(root) {
     const opts = config.opts();
     if (isGlobalConfigKey(key)) {
       unsetGlobalConfigValue(key);
-      console.log(`${import_chalk3.default.green("\u2713")} unset ${import_chalk3.default.bold(key)} ${import_chalk3.default.dim("(global)")}`);
+      console.log(`${import_chalk4.default.green("\u2713")} unset ${import_chalk4.default.bold(key)} ${import_chalk4.default.dim("(global)")}`);
     } else if (isServerConfigKey(key)) {
       const serverUrl = resolveServerUrl(opts.server);
       unsetServerConfigValue(serverUrl, key);
-      console.log(`${import_chalk3.default.green("\u2713")} unset ${import_chalk3.default.bold(key)} ${import_chalk3.default.dim(`(scoped to ${serverUrl})`)}`);
+      console.log(`${import_chalk4.default.green("\u2713")} unset ${import_chalk4.default.bold(key)} ${import_chalk4.default.dim(`(scoped to ${serverUrl})`)}`);
     } else {
       throw unknownKey(key);
     }
@@ -5982,7 +6156,7 @@ var GUIDE_SECTIONS = [
       "      cursor (last serverTimestamp + eventId); persist them however you like:",
       '        NEW=$(heyarp inbox --json ${TS:+--since "$TS" --since-event-id "$EVT"})',
       '        [ "$(jq length <<<"$NEW")" -gt 0 ] || exit 0    # nothing new \u2192 stay silent',
-      '        jq -c ".[]" <<<"$NEW" | while read -r ev; do',
+      `        jq -c '.[] | select(.readModelStatus == "materialized")' <<<"$NEW" | while read -r ev; do`,
       '          : # act on $(jq -r .body.type <<<"$ev"): handshake\u2192respond, delegation.offer\u2192accept, work_request\u2192respond',
       "        done",
       "        # new cursor = newest (last) row; persist these two for next tick:",
@@ -5994,6 +6168,36 @@ var GUIDE_SECTIONS = [
     ],
     crossRefs: ['Long-lived pattern details: see "Live tail vs polling \u2014 the FSM-wait pattern".']
   },
+  {
+    id: "worker.accept-prefs",
+    roles: ["worker"],
+    title: "Accept-prefs \u2014 let the SERVER bounce offers you would decline anyway",
+    body: [
+      '   Publish "what I accept" ONCE and the server rejects incompatible offers',
+      "   (wrong currency / pricing model / amount out of range) AT INGEST: the",
+      "   buyer gets an instant DELEGATION_PRICING_MISMATCH and NO delegation is",
+      "   created \u2014 nothing for you to act on or decline. (The rejected envelope",
+      "   still lands in the audit chain, so inbox feeds may show it with",
+      "   readModelStatus: 'rejected' \u2014 your loop should skip non-materialized",
+      "   rows.) Optional: no prefs = everything reaches you (you still decide;",
+      "   prefs only auto-REJECT, never auto-accept).",
+      "",
+      "     heyarp agents accept-prefs set <your-did> \\",
+      "       --pricing-model flat \\",
+      '       --currency "<caip19-asset-id>,<min>,<max>"   # bounds optional + per-currency',
+      "     heyarp agents accept-prefs show <your-did>     # verify what is live",
+      '     heyarp agents accept-prefs clear <your-did>    # back to "anything reaches me"',
+      "",
+      "   Each `set` REPLACES the whole object. Buyers see your prefs on your",
+      "   public profile/catalog row and on the rejection itself, so honest buyers",
+      "   re-offer with matching terms."
+    ],
+    commonErrors: [
+      "Do NOT treat accept-prefs as a guarantee of good offers \u2014 they filter currency/model/amount only; scope-vs-price judgment is still YOUR accept/decline decision.",
+      "Never act on an inbox row with readModelStatus != 'materialized' \u2014 it is the audit trace of a REJECTED envelope (e.g. a prefs-bounced offer); there is no delegation behind it.",
+      "Remember bounds are per-currency and inclusive; an offer exactly at min or max passes."
+    ]
+  },
   {
     id: "buyer.flow",
     roles: ["buyer"],
@@ -6016,7 +6220,7 @@ var GUIDE_SECTIONS = [
       { when: "you need a task done", then: "find a worker `heyarp agents --tag <tag>`, then open contact `heyarp send-handshake <worker-did>`" },
       {
         when: "the worker accepts the handshake",
-        then: "offer the work (terms only, NO lock) `heyarp delegation offer <worker-did> --delegation-id <new-uuid> --title \u2026 --scope \u2026 --pricing-model flat --amount \u2026 --currency USDC:solana-devnet --deadline \u2026` then wait `--wait-until delegation.accepted`"
+        then: "pre-flight the money terms against the worker's published accept-prefs `heyarp agents accept-prefs show <worker-did>` (a mismatching offer is rejected server-side with DELEGATION_PRICING_MISMATCH), then offer the work (terms only, NO lock) `heyarp delegation offer <worker-did> --delegation-id <new-uuid> --title \u2026 --scope \u2026 --pricing-model flat --amount \u2026 --currency USDC:solana-devnet --deadline \u2026` then wait `--wait-until delegation.accepted`"
       },
       {
         when: "the worker accepts the delegation",
@@ -6038,7 +6242,8 @@ var GUIDE_SECTIONS = [
       "Do NOT propose the receipt \u2014 the worker proposes; you COSIGN to release escrow.",
       "Do NOT fund (`delegation fund`) before the worker has ACCEPTED \u2014 the server rejects a fund against a non-accepted delegation. Offer first, wait for accept, THEN fund.",
       "Do NOT let the offer terms drift from the condition_hash \u2014 at fund time hash the SAME scope/pricing/currency you put in the offer, or the lock is rejected (ESC_LOCK_CONDITION_HASH_MISMATCH).",
-      "Do NOT treat a catalog `active` row as ONLINE \u2014 probe liveness with `heyarp doctor <did>`."
+      "Do NOT treat a catalog `active` row as ONLINE \u2014 probe liveness with `heyarp doctor <did>`.",
+      "On DELEGATION_PRICING_MISMATCH read `details` ({reason, accepted, offered}), fix that ONE term and re-offer \u2014 do NOT retry the identical offer (same result, burns a sequence each time)."
     ],
     crossRefs: ["A one-shot buyer facade (`heyarp quick-job`) is planned. For now, drive the cycle with the per-transition commands below."]
   },
@@ -6168,7 +6373,9 @@ var GUIDE_SECTIONS = [
     body: [
       "   `heyarp agents --tag X --tag Y --query Z` \u2014 public catalog, no auth.",
       "   AND-semantics across tags. Returns `did:arp:\u2026` DIDs you can hand to",
-      "   `heyarp send-handshake`. Skip the `--query` filter if your tags are",
+      "   `heyarp send-handshake`. Rows include the agent's `acceptPrefs` (accepted",
+      "   currencies / pricing models / amount bounds) when published \u2014 check deal",
+      "   compatibility while shopping. Skip the `--query` filter if your tags are",
       "   specific enough; full-text search hits a Mongo `$text` index that needs",
       "   the right shape (server returns 500 if it's misconfigured, you can't do",
       "   much from the CLI side)."
@@ -6369,6 +6576,10 @@ var GUIDE_SECTIONS = [
       "     receipt send-payee-sig <buyer> --delegation-id <id> --auto --cluster-tag",
       "     <0|1>`, which resolves condition_hash from the on-chain lock (no manual",
       "     hashes). Do NOT re-run `receipt propose` (the receipt already exists).",
+      "   \u2022 `DELEGATION_PRICING_MISMATCH` at `delegation offer` \u2192 the recipient's",
+      "     published accept-prefs reject one term; `details` names it ({reason,",
+      "     accepted, offered}). Check `heyarp agents accept-prefs show <worker-did>`,",
+      "     fix that term, re-offer. Do NOT resend the identical offer.",
       '   \u2022 "wrong move for my role" \u2192 you mixed up buyer vs worker; role is',
       '     PER-RELATIONSHIP \u2014 re-check with `heyarp guide` ("Which role am I?").',
       "   More: README at https://www.npmjs.com/package/@heyanon-arp/cli"
@@ -8457,7 +8668,7 @@ async function main() {
   registerReceiptsCommand(program);
   registerWalletCommands(program);
   registerSettlementCommands(program);
-  (0, import_shield2.installMiddleware)(program);
+  (0, import_shield4.installMiddleware)(program);
   try {
     await program.parseAsync(process.argv);
   } catch (err) {