@ixo/asks-mcp 1.6.0-dev.3 → 1.6.0-dev.5

package/README.md

@@ -87,6 +87,8 @@ naming what is missing; nothing is posted and nothing is spent. `my_status` and
 
 On first run the server makes a key in `$OPENHANDS_HOME/<network>/key.json` (by default `~/.openhands/testnet/key.json`), readable only by you. The server refuses to use it if anyone else can read the file, anyone else can write to its directory, or either is a symlink. The mnemonic never leaves the server: no tool returns it and nothing logs it. The spend ledger (`spend.json`), the account it acts for (`principal.json`) and open-call drafts (`calls/`) sit beside it.
 
+On Windows the server verifies the actual ACL using Windows PowerShell, because Node's POSIX mode bits cannot express Windows permissions. The current Windows user must have Full control; only that user, SYSTEM and the built-in Administrators group may have access. Inherited private permissions are accepted. The server does not rewrite Windows ACLs, and refuses to read a key when it cannot verify them. For a refusal, check the directory and file under **Properties > Security**, or choose an `OPENHANDS_HOME` that already has private permissions. No permission-check bypass is available.
+
 Spending tools preview first and need the exact total confirmed; daily caps are counted on disk, so restarting the client does not reset them. Earnings go only to `OPENHANDS_HOME_ADDRESS`.
 
 ## The hosted server instead

package/dist/asks-mcp.mjs

@@ -7409,6 +7409,16 @@ var init_given = __esm({
   }
 });
 
+// ../../packages/openhands-sdk/src/chain/rewardDenom.ts
+var USDC_MAINNET, rewardDenomFor;
+var init_rewardDenom = __esm({
+  "../../packages/openhands-sdk/src/chain/rewardDenom.ts"() {
+    "use strict";
+    USDC_MAINNET = "ibc/77C12480BD8C29BF0ACEC2143736C15BAF8CD232CA27BAE09336677B828955E6";
+    rewardDenomFor = (network2, configured) => network2 === "mainnet" && configured?.trim() !== "upay" ? USDC_MAINNET : "upay";
+  }
+});
+
 // ../../packages/openhands-sdk/src/chain/money.ts
 var money_exports = {};
 __export(money_exports, {
@@ -7451,12 +7461,12 @@ function orgShortfall(org, reward, fee, held) {
   const holds = [...need.keys()].map((denom) => `${face(Number(held[denom] ?? 0))} ${symbolOf(denom)}`).join(" and ");
   return `${org} needs ${[rewards, reviews].filter(Boolean).join(" and ")}; it holds ${holds}`;
 }
-var USDC_MAINNET, USDC_NOBLE_LEGACY, asRewardDenom, usdcDenom, envDenom, currentNetwork, askDenom, heldDenom, rewardDenom, checkerFeeDenom, symbolOf, MICRO, toBase, isPegged;
+var USDC_NOBLE_LEGACY, asRewardDenom, usdcDenom, envDenom, currentNetwork, askDenom, heldDenom, rewardDenom, checkerFeeDenom, symbolOf, MICRO, toBase, isPegged;
 var init_money = __esm({
   "../../packages/openhands-sdk/src/chain/money.ts"() {
     "use strict";
     init_given();
-    USDC_MAINNET = "ibc/77C12480BD8C29BF0ACEC2143736C15BAF8CD232CA27BAE09336677B828955E6";
+    init_rewardDenom();
     USDC_NOBLE_LEGACY = "ibc/6BBE9BD4246F8E04948D5A4EEE7164B2630263B9EBB5E7DC5F0A46C62A2FF97B";
     asRewardDenom = (_value, network2) => rewardDenom(network2);
     usdcDenom = (network2) => network2 === "mainnet" ? USDC_MAINNET : null;
@@ -7467,7 +7477,7 @@ var init_money = __esm({
       const env = envDenom();
       return env === "upay" || env === USDC_MAINNET ? env : "uixo";
     };
-    rewardDenom = (network2) => network2 === "mainnet" ? USDC_MAINNET : "upay";
+    rewardDenom = (network2) => rewardDenomFor(network2, envDenom());
     checkerFeeDenom = (_network) => "upay";
     symbolOf = (denom) => denom === "upay" ? "PAY" : denom === USDC_MAINNET ? "USDC" : denom === USDC_NOBLE_LEGACY ? "USDC (old)" : "IXO";
     MICRO = 1e6;
@@ -7864,9 +7874,10 @@ function money(base6, denom, viewer) {
     return { face, local: localOf(exact, viewer), approx: false, title: `${face} in US dollars` };
   }
   if (denom === "uixo" && viewer.sandbox) return { face: dollarsOfBase(exact), local: null, approx: true, title: "sandbox amount" };
+  if (denom === "uixo") return { face: ixoWords(Number(exact) / 1e6), local: null, approx: false, title: IXO_TITLE };
   return null;
 }
-var USDC_MAINNET2, USDC_NOBLE_LEGACY2, DOLLAR_DENOMS, MICRO2, placesFor;
+var USDC_MAINNET2, USDC_NOBLE_LEGACY2, DOLLAR_DENOMS, MICRO2, placesFor, ixoWords, IXO_TITLE;
 var init_money2 = __esm({
   "../../packages/openhands-sdk/src/data/money.ts"() {
     "use strict";
@@ -7875,6 +7886,8 @@ var init_money2 = __esm({
     DOLLAR_DENOMS = /* @__PURE__ */ new Set(["upay", USDC_MAINNET2, USDC_NOBLE_LEGACY2]);
     MICRO2 = 1000000n;
     placesFor = (value) => value === 0 ? 2 : Math.abs(value) < 1e-4 ? 6 : Math.abs(value) < 1 ? 4 : 2;
+    ixoWords = (value) => `${value.toLocaleString("en-US", { maximumFractionDigits: placesFor(value) })} IXO`;
+    IXO_TITLE = "IXO, the network's own coin, not a dollar coin";
   }
 });
 
@@ -8058,7 +8071,14 @@ function reportProblems(raw, requirement, fileIds = []) {
 }
 function readReport(envelope) {
   const doc = obj(envelope);
-  const report = obj(doc?.report) ?? (doc?.kind === REPORT_KIND ? doc : null);
+  let report = obj(doc?.report) ?? (doc?.kind === REPORT_KIND ? doc : null);
+  if (!report && typeof doc?.deliverable === "string" && doc.deliverable.length <= REPORT_LIMITS.bytes) {
+    try {
+      const pasted = obj(JSON.parse(doc.deliverable));
+      if (pasted?.kind === REPORT_KIND && obj(pasted.summary)) report = pasted;
+    } catch {
+    }
+  }
   if (!report) return null;
   const summary = obj(report.summary) ?? {};
   const read9 = {
@@ -8090,6 +8110,16 @@ function readReport(envelope) {
     sections: Object.entries(obj(report.sections) ?? {}).map(([title, value]) => ({ title, text: String(value) }))
   };
   const files = (Array.isArray(doc?.files) ? doc.files : []).map(obj).filter((one) => one !== null && typeof one.id === "string" && typeof one.url === "string" && STORED.test(one.url)).slice(0, 24).map((one) => ({ id: String(one.id), url: String(one.url), sha256: String(one.sha256 ?? ""), mediaType: String(one.mediaType ?? "application/octet-stream"), name: String(one.name ?? one.id) }));
+  for (const field2 of Object.values(doc ?? {})) {
+    if (!Array.isArray(field2)) continue;
+    for (const value of field2) {
+      const file3 = obj(value);
+      if (!file3 || !isStoredFile(file3.content) || files.some((one) => one.url === file3.content) || files.length >= 24) continue;
+      let id = `attachment-${files.length + 1}`;
+      while (files.some((one) => one.id === id)) id += "-file";
+      files.push({ id, url: file3.content, sha256: "", mediaType: str(file3.type) ?? "application/octet-stream", name: str(file3.name) ?? "Attachment" });
+    }
+  }
   return { doc: read9, files };
 }
 function formAnswersOf(envelope) {
@@ -30166,6 +30196,7 @@ function faceOf(amount3, sandbox = envSandbox()) {
   const { value, symbol: symbol2 } = amount3;
   if (PEGGED.has(symbol2)) return { value, prefix: "$", title: `${dollars2(value)} in US dollars`, text: dollars2(value) };
   if (symbol2 === "IXO" && sandbox) return { value, prefix: "$", title: "sandbox amount", text: dollars2(value), approx: true };
+  if (symbol2 === "IXO") return { value, title: "IXO, the network's own coin, not a dollar coin", text: `${value.toLocaleString("en-US", { maximumFractionDigits: fractionFor(value) })} IXO` };
   return { value, title: "Paid in the network's own coin: the public record has the amount", text: UNFACED2, unfaced: true };
 }
 function approvalAmount(payments) {
@@ -30395,6 +30426,73 @@ var init_site = __esm({
   }
 });
 
+// src/keyPermissions.ts
+import { spawnSync } from "node:child_process";
+import { lstatSync } from "node:fs";
+import { win32 } from "node:path";
+function assertWindowsPrivatePath(path, run2 = spawnSync) {
+  const root = process.env.SystemRoot;
+  if (!root || !win32.isAbsolute(root)) throw new Error(`Cannot verify Windows permissions for ${path}: SystemRoot is unavailable. No key was read.`);
+  const powershellHome = win32.join(root, "System32", "WindowsPowerShell", "v1.0");
+  const env = { ...process.env };
+  for (const name8 of Object.keys(env)) if (/^(psmodulepath|openhands_acl_path)$/i.test(name8)) delete env[name8];
+  const result = run2(win32.join(powershellHome, "powershell.exe"), [
+    "-NoLogo",
+    "-NoProfile",
+    "-NonInteractive",
+    "-EncodedCommand",
+    Buffer.from(CHECK_ACL, "utf16le").toString("base64")
+  ], {
+    env: { ...env, PSModulePath: win32.join(powershellHome, "Modules"), OPENHANDS_ACL_PATH: path },
+    timeout: 3e4,
+    windowsHide: true,
+    stdio: "ignore"
+  });
+  if (result.error || result.signal || result.status !== 0) {
+    const why = result.error?.code === "ETIMEDOUT" ? "inspection timed out" : `inspection exit ${result.status ?? "unavailable"}`;
+    throw new Error(`Cannot verify private Windows permissions for ${path} (${why}). Only your Windows account, SYSTEM and Administrators may have access, and your account must have Full control. Check Properties > Security, or choose a private OPENHANDS_HOME. No key was read.`);
+  }
+}
+function assertSafe(path, what, platform = process.platform, run2) {
+  const stat = lstatSync(path);
+  if (stat.isSymbolicLink()) throw new Error(`${path} is a symlink. A key that lives where another program decides is not a key we will use.`);
+  if (what === "file" ? !stat.isFile() : !stat.isDirectory()) throw new Error(`${path} is not a ${what}.`);
+  if (platform === "win32") {
+    assertWindowsPrivatePath(path, run2);
+    return;
+  }
+  const mode = stat.mode & 511;
+  const tooOpen = what === "file" ? mode & 63 : mode & 18;
+  if (tooOpen) throw new Error(`${path} is readable or writable by others (mode ${mode.toString(8)}). Run: chmod ${what === "file" ? "600" : "700"} ${path}`);
+}
+var CHECK_ACL;
+var init_keyPermissions = __esm({
+  "src/keyPermissions.ts"() {
+    "use strict";
+    CHECK_ACL = String.raw`
+$ErrorActionPreference = 'Stop'
+try {
+  $item = Get-Item -LiteralPath $env:OPENHANDS_ACL_PATH -Force
+  if (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { exit 2 }
+  $acl = Get-Acl -LiteralPath $env:OPENHANDS_ACL_PATH
+  $me = [Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+  $trusted = @($me, 'S-1-5-18', 'S-1-5-32-544')
+  if ($trusted -notcontains $acl.GetOwner([Security.Principal.SecurityIdentifier]).Value) { exit 3 }
+  $mine = $false
+  foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.SecurityIdentifier])) {
+    if (($rule.PropagationFlags -band [Security.AccessControl.PropagationFlags]::InheritOnly) -ne 0) { continue }
+    if ($rule.AccessControlType -ne [Security.AccessControl.AccessControlType]::Allow) { continue }
+    if ($trusted -notcontains $rule.IdentityReference.Value) { exit 3 }
+    if ($rule.IdentityReference.Value -eq $me -and
+        ($rule.FileSystemRights -band [Security.AccessControl.FileSystemRights]::FullControl) -eq [Security.AccessControl.FileSystemRights]::FullControl) { $mine = $true }
+  }
+  if (-not $mine) { exit 3 }
+  exit 0
+} catch { exit 4 }
+`;
+  }
+});
+
 // ../../node_modules/.pnpm/cosmjs-types@0.11.0/node_modules/cosmjs-types/utf8.js
 var require_utf82 = __commonJS({
   "../../node_modules/.pnpm/cosmjs-types@0.11.0/node_modules/cosmjs-types/utf8.js"(exports) {
@@ -49621,26 +49719,14 @@ __export(keys_exports, {
   signer: () => signer,
   writePin: () => writePin
 });
-import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, lstatSync as lstatSync2, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join as join3 } from "node:path";
-function assertSafe(path, what) {
-  const stat = lstatSync(path);
-  if (stat.isSymbolicLink()) {
-    throw new Error(`${path} is a symlink. A key that lives where another program decides is not a key we will use.`);
-  }
-  const mode = stat.mode & 511;
-  const tooOpen = what === "file" ? mode & 63 : mode & 18;
-  if (tooOpen) {
-    throw new Error(
-      `${path} is readable or writable by others (mode ${mode.toString(8)}). Run: chmod ${what === "file" ? "600" : "700"} ${path}`
-    );
-  }
-}
 function ensureDir() {
   const dir = DIR();
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 448 });
-  chmodSync(dir, 448);
+  if (lstatSync2(dir).isSymbolicLink()) throw new Error(`${dir} is a symlink.`);
+  if (process.platform !== "win32") chmodSync(dir, 448);
   assertSafe(dir, "dir");
 }
 async function loadKey() {
@@ -49667,7 +49753,7 @@ async function loadKey() {
   const [account] = await wallet.getAccounts();
   const made = { mnemonic: wallet.mnemonic, address: account.address };
   writeFileSync(KEY_FILE2, JSON.stringify(made, null, 2), { mode: 384 });
-  chmodSync(KEY_FILE2, 384);
+  if (process.platform !== "win32") chmodSync(KEY_FILE2, 384);
   assertSafe(KEY_FILE2, "file");
   cached2.set(KEY_FILE2, made);
   return made;
@@ -49691,6 +49777,10 @@ async function signer() {
 function readPin() {
   const PIN_FILE = pinFile();
   if (!existsSync(PIN_FILE)) return null;
+  const { ino, mtimeMs, ctimeMs } = lstatSync2(PIN_FILE);
+  const stamp = `${ino}:${mtimeMs}:${ctimeMs}`;
+  const seen2 = pins.get(PIN_FILE);
+  if (seen2?.stamp === stamp) return seen2.pin;
   assertSafe(PIN_FILE, "file");
   let parsed;
   try {
@@ -49701,7 +49791,9 @@ function readPin() {
   if (typeof parsed.principal !== "string" || !PRINCIPAL.test(parsed.principal) || typeof parsed.agent !== "string") {
     throw new Error(`${PIN_FILE} does not name an account. Remove it and call connect_account again.`);
   }
-  return { principal: parsed.principal, agent: parsed.agent, pinnedAt: typeof parsed.pinnedAt === "string" ? parsed.pinnedAt : "", ...parsed.signed === true ? { signed: true } : {} };
+  const pin = { principal: parsed.principal, agent: parsed.agent, pinnedAt: typeof parsed.pinnedAt === "string" ? parsed.pinnedAt : "", ...parsed.signed === true ? { signed: true } : {} };
+  pins.set(PIN_FILE, { stamp, pin });
+  return pin;
 }
 function writePin(pin) {
   if (!PRINCIPAL.test(pin.principal)) throw new Error("that is not an ixo account address");
@@ -49709,17 +49801,18 @@ function writePin(pin) {
   const PIN_FILE = pinFile();
   const temporary = `${PIN_FILE}.tmp`;
   writeFileSync(temporary, JSON.stringify(pin, null, 2), { mode: 384 });
-  chmodSync(temporary, 384);
+  if (process.platform !== "win32") chmodSync(temporary, 384);
   renameSync(temporary, PIN_FILE);
   assertSafe(PIN_FILE, "file");
 }
 function clearPin() {
   rmSync(pinFile(), { force: true });
 }
-var DIR, KEY_FILE, cached2, keyLocation, pinFile, PRINCIPAL, pinLocation;
+var DIR, KEY_FILE, cached2, keyLocation, pinFile, PRINCIPAL, pins, pinLocation;
 var init_keys = __esm({
   "src/keys.ts"() {
     "use strict";
+    init_keyPermissions();
     init_net();
     DIR = () => join3(process.env.OPENHANDS_HOME || join3(homedir(), ".openhands"), currentNetwork2());
     KEY_FILE = () => join3(DIR(), "key.json");
@@ -49727,6 +49820,7 @@ var init_keys = __esm({
     keyLocation = () => KEY_FILE();
     pinFile = () => join3(DIR(), "principal.json");
     PRINCIPAL = /^(ixo1[a-z0-9]{38,58}|self)$/;
+    pins = /* @__PURE__ */ new Map();
     pinLocation = () => pinFile();
   }
 });
@@ -259464,8 +259558,8 @@ function noteIgnored(agent, pinned, others, log) {
   for (const one of fresh2) told.add(`${agent}:${pinned}:${one}`);
   log(`asks-mcp: ignoring ${fresh2.length === 1 ? "a connection" : "connections"} to this key from ${fresh2.join(", ")}: it is pinned to ${pinned === SELF ? "itself" : pinned}, and only connect_account changes that.`);
 }
-async function actingFor(agent, reads2 = chainReads, pins = keyPins) {
-  const pinned = pinOf(agent, pins);
+async function actingFor(agent, reads2 = chainReads, pins2 = keyPins) {
+  const pinned = pinOf(agent, pins2);
   if (!pinned || pinned === SELF) return null;
   let found;
   try {
@@ -259475,14 +259569,14 @@ async function actingFor(agent, reads2 = chainReads, pins = keyPins) {
   }
   return found ? actingOf(found) : null;
 }
-async function actingOrWhy(agent, reads2 = chainReads, pins = keyPins, log = stderr) {
+async function actingOrWhy(agent, reads2 = chainReads, pins2 = keyPins, log = stderr) {
   let acting = null;
   try {
-    acting = await actingFor(agent, reads2, pins);
+    acting = await actingFor(agent, reads2, pins2);
   } catch (error54) {
     return { acting: null, problem: error54 instanceof Error ? error54.message : String(error54), candidates: [] };
   }
-  const pinned = pinOf(agent, pins);
+  const pinned = pinOf(agent, pins2);
   let standing;
   try {
     standing = (await reads2.connectionsTo(agent)).map((one) => one.principal);
@@ -259499,16 +259593,16 @@ function candidateWords(candidates) {
   if (!candidates.length) return null;
   return `Not acting for anyone: ${candidates.length === 1 ? "an account has" : `${candidates.length} accounts have`} connected this key (${list5(candidates)}), and none has been chosen. Anybody can grant to a public address, so ask the person which is theirs and call connect_account with principal set to it (or principal: "self" to stay as this key and stop being asked).`;
 }
-async function connectAs(agent, choice, reads2 = chainReads, pins = keyPins, now3 = /* @__PURE__ */ new Date(), log = stderr) {
-  const pinned = pinOf(agent, pins);
+async function connectAs(agent, choice, reads2 = chainReads, pins2 = keyPins, now3 = /* @__PURE__ */ new Date(), log = stderr) {
+  const pinned = pinOf(agent, pins2);
   if (choice === SELF) {
-    if (pinned !== SELF) pins.write({ principal: SELF, agent, pinnedAt: now3.toISOString() });
+    if (pinned !== SELF) pins2.write({ principal: SELF, agent, pinnedAt: now3.toISOString() });
     return { kind: "self", pinnedNow: pinned !== SELF };
   }
   if (choice) {
     const found = await reads2.connectionFor(agent, choice);
     if (!found) return { kind: "not-granted", principal: choice };
-    if (pinned !== choice) pins.write({ principal: choice, agent, pinnedAt: now3.toISOString() });
+    if (pinned !== choice) pins2.write({ principal: choice, agent, pinnedAt: now3.toISOString() });
     const others = (await reads2.connectionsTo(agent)).map((one) => one.principal).filter((one) => one !== choice);
     return { kind: "connected", acting: actingOf(found), pinnedNow: pinned !== choice, others };
   }
@@ -259522,13 +259616,13 @@ async function connectAs(agent, choice, reads2 = chainReads, pins = keyPins, now
   const standing = (await reads2.connectionsTo(agent)).map((one) => one.principal);
   return standing.length ? { kind: "choose", principals: standing } : { kind: "none" };
 }
-function markSigned(agent, principal2, pins = keyPins) {
-  const pin = pins.read();
-  if (pin && pin.agent === agent && pin.principal === principal2 && !pin.signed) pins.write({ ...pin, signed: true });
+function markSigned(agent, principal2, pins2 = keyPins) {
+  const pin = pins2.read();
+  if (pin && pin.agent === agent && pin.principal === principal2 && !pin.signed) pins2.write({ ...pin, signed: true });
 }
-function disconnect(pins = keyPins) {
-  const pin = pins.read();
-  pins.clear();
+function disconnect(pins2 = keyPins) {
+  const pin = pins2.read();
+  pins2.clear();
   return pin;
 }
 function actingWords(acting, face) {
@@ -259604,8 +259698,8 @@ var init_connect = __esm({
     SELF = "self";
     told = /* @__PURE__ */ new Set();
     stderr = (line2) => console.error(line2);
-    pinOf = (agent, pins) => {
-      const pin = pins.read();
+    pinOf = (agent, pins2) => {
+      const pin = pins2.read();
       return pin && pin.agent === agent ? pin.principal : null;
     };
     feeAllowanceSpent = (error54) => /codespace:?\s*feegrant|fee limit exceeded|fee allowance/i.test(error54 instanceof Error ? error54.message : String(error54));
@@ -261212,7 +261306,7 @@ function prepareAsk(poster, entityDid, adminAccount, terms, now3 = Date.now(), s
   const checkReward = terms.checker && terms.checkRewardUixo ? BigInt(terms.checkRewardUixo) : 0n;
   const spots = BigInt(Math.max(1, terms.quota));
   const denom = terms.denom ?? askDenom();
-  if (denom === "upay" && !offChain && network() === "mainnet") throw new Error("PAY is not a reward coin on mainnet: post the reward in USDC");
+  if (denom === "upay" && !offChain && network() === "mainnet" && askDenom() !== "upay") throw new Error("PAY is not a reward coin on mainnet: post the reward in USDC");
   const feeDenom = terms.feeDenom ?? checkerFeeDenom(network());
   const rewardEscrow = offChain ? 0n : BigInt(terms.amountUixo) * spots;
   const feeEscrow = checkReward * spots;
@@ -261965,7 +262059,7 @@ function assertAskShape(ask) {
   const campaignAsk = typeof ask.terms?.campaign === "string";
   const asky = askyChecker(network());
   const askyReview = ask.terms?.call?.kind === "review" && asky !== null && asky.fee.denom === "upay" && ask.checker === asky.address;
-  if (network() === "mainnet" && !ask.payoutTerms && !campaignAsk && !askyReview && (ask.denom ?? askDenom()) === "upay") throw new Error(PAY_NOT_A_REWARD);
+  if (network() === "mainnet" && !ask.payoutTerms && !campaignAsk && !askyReview && askDenom() !== "upay" && (ask.denom ?? askDenom()) === "upay") throw new Error(PAY_NOT_A_REWARD);
   if (ask.payoutTerms) {
     if (!ask.org) throw new Error("payout terms need the organisation (org) whose facilitator pays them");
     if (ask.amountUixo !== 0) throw new Error("an ask paid off chain carries nothing on chain: amountUixo must be 0, or the worker is paid twice");
@@ -264382,7 +264476,7 @@ var init_call2 = __esm({
     isTxFailed = (error54) => error54 instanceof Error && error54.name === "TxFailed";
     tagOf = (draft) => callTag(draft.slug);
     TESTNET_CALL_DEFAULTS = {
-      /* The sandbox's reward coin is test PAY (build sheet P5); read for one release, the network decides (`readDenom`). */
+      /* The sandbox's reward coin is test PAY (build sheet P5); read for one release, the network decides (`rewardDenomFor`). */
       NEXT_PUBLIC_ASK_DENOM: "upay",
       NEXT_PUBLIC_CHECKER_ADDRESS: "ixo175rlze3q6gap5ddxzc6m92u2ahw7a9h8n4uksq",
       NEXT_PUBLIC_GRANTER_ADDRESS: "ixo1rknlkm29zs2cd8m8y2c6ahmh2jald8swy9g7rn",
@@ -291941,7 +292035,7 @@ import { randomBytes as randomBytes7 } from "node:crypto";
 // package.json
 var package_default = {
   name: "@ixo/asks-mcp",
-  version: "1.6.0-dev.3",
+  version: "1.6.0-dev.5",
   description: "The Openhands Network MCP server: read the board, answer asks, post work and get paid on the ixo chain, with a key of its own on your machine.",
   license: "Apache-2.0",
   repository: {
@@ -292450,7 +292544,7 @@ init_networks();
 init_env();
 init_net();
 init_given();
-init_money();
+init_rewardDenom();
 
 // ../../packages/openhands-sdk/src/data/plans.ts
 var plansEnabled = () => typeof process !== "undefined" && process.env.NEXT_PUBLIC_PLANS_ENABLED === "1";
@@ -292458,7 +292552,9 @@ var plansEnabled = () => typeof process !== "undefined" && process.env.NEXT_PUBL
 // src/config.ts
 var siteOf = () => (ownEnv().OPENHANDS_SITE || originOf(currentNetwork2())).replace(/\/$/, "");
 var expertSiteOf = () => proOrigin(siteOf());
-var readDenom = (_value, network2) => rewardDenom(network2);
+function adoptAskDenom(facts) {
+  adopt({ askDenom: facts.askDenom });
+}
 var CLAIM_FORM_ENV = ["NEXT_PUBLIC_VCT_ENTITY_DID", "NEXT_PUBLIC_VCT_PROOF", "NEXT_PUBLIC_VCT_URL"];
 function claimFormIn(env) {
   const [entity, proof, url4] = CLAIM_FORM_ENV.map((name8) => env[name8]?.trim() || "");
@@ -292482,7 +292578,7 @@ function fromEnv() {
   const env = ownEnv();
   return {
     network: currentNetwork2(),
-    askDenom: readDenom(env.NEXT_PUBLIC_ASK_DENOM, currentNetwork2()),
+    askDenom: rewardDenomFor(currentNetwork2(), env.NEXT_PUBLIC_ASK_DENOM),
     checker: env.NEXT_PUBLIC_CHECKER_ADDRESS?.trim() || "",
     gate: env.NEXT_PUBLIC_GRANTER_ADDRESS?.trim() || "",
     checkRewardBase: Number(env.QI_CHECK_REWARD_BASE || env.QI_CHECK_REWARD_UIXO || 1e5),
@@ -292530,7 +292626,7 @@ async function deployment() {
   const engineSet = own2.ENGINE_ORACLE_ADDRESS !== void 0 || own2.QI_ENGINE_LIVE !== void 0;
   return {
     network: NETWORK2,
-    askDenom: readDenom(own2.NEXT_PUBLIC_ASK_DENOM || answer.askDenom, NETWORK2),
+    askDenom: rewardDenomFor(NETWORK2, own2.NEXT_PUBLIC_ASK_DENOM || answer.askDenom),
     checker: env.checker || answer.checker?.trim() || "",
     gate: env.gate || answer.gate?.trim() || "",
     checkRewardBase: own2.QI_CHECK_REWARD_BASE || own2.QI_CHECK_REWARD_UIXO ? env.checkRewardBase : Number(answer.checkRewardBase || 1e5),
@@ -294059,6 +294155,7 @@ async function build2(options, server2, parts) {
   adoptReviewBilling(DEPLOYMENT);
   adoptOracleUrl(DEPLOYMENT);
   if (local) adoptFeeSplit(DEPLOYMENT);
+  if (local) adoptAskDenom(DEPLOYMENT);
   const OWN_FORM_ENV = Object.fromEntries(CLAIM_FORM_ENV.map((name8) => [name8, ownEnv()[name8]]));
   if (local) adoptClaimForm(DEPLOYMENT);
   let CLAIM_FORM = DEPLOYMENT.claimForm;
@@ -294077,6 +294174,7 @@ async function build2(options, server2, parts) {
     adoptReviewBilling(fresh2);
     adoptOracleUrl(fresh2);
     adoptFeeSplit(fresh2);
+    adoptAskDenom(fresh2);
     adoptClaimForm(fresh2);
     CLAIM_FORM = fresh2.claimForm;
     applyDeployment(fresh2);
@@ -296091,7 +296189,7 @@ ${settings}`
         confirm: external_exports.string().optional().describe("The exact total from the preview. Omit to preview.")
       }
     },
-    async ({ name: name8, pins, pin_pay, currency, days, metres, confirm }) => {
+    async ({ name: name8, pins: pins2, pin_pay, currency, days, metres, confirm }) => {
       const acting = await principal2();
       const coin = await coinFor(currency, acting);
       if (typeof coin !== "string") return text4(`Refused: ${coin.refused}. Nothing was opened and nothing was spent.`);
@@ -296112,8 +296210,8 @@ ${settings}`
       terms.via = "mcp";
       const unread = await unreadable(terms);
       if (unread) return text4(unread);
-      const { total } = escrowTotal(pin_pay, pins, legBase, coinSymbol, coin === FEE_DENOM);
-      const preview = `${face(total, coinSymbol)} to open "${name8}". ${pins} ${pins === 1 ? "report" : "reports"} at ${face(pin_pay, coinSymbol)} each, plus ${feeWords(legBase)} to whoever checks each one. Mapping stays open ${open} days, and two pins closer than ${apart} m are the same mess`;
+      const { total } = escrowTotal(pin_pay, pins2, legBase, coinSymbol, coin === FEE_DENOM);
+      const preview = `${face(total, coinSymbol)} to open "${name8}". ${pins2} ${pins2 === 1 ? "report" : "reports"} at ${face(pin_pay, coinSymbol)} each, plus ${feeWords(legBase)} to whoever checks each one. Mapping stays open ${open} days, and two pins closer than ${apart} m are the same mess`;
       const guard = spendGuard({ bucket: "organise", task: `campaign ${tag}`, total, ...confirm ? { confirm } : {}, what: preview, symbol: coinSymbol });
       if (guard) {
         return text4(
@@ -296138,7 +296236,7 @@ Mapping pays for the report. What happens to a mapped pin afterwards is a separa
         ...await postedAs(acting),
         title: terms.task,
         amountUixo: baseFromPay2(pin_pay),
-        quota: pins,
+        quota: pins2,
         days: open,
         denom: coin,
         terms,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ixo/asks-mcp",
-  "version": "1.6.0-dev.3",
+  "version": "1.6.0-dev.5",
   "description": "The Openhands Network MCP server: read the board, answer asks, post work and get paid on the ixo chain, with a key of its own on your machine.",
   "license": "Apache-2.0",
   "repository": {