@lucid-agents/taskmarket 1.11.0 → 1.12.1

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command72 } from "commander";
+import { Command as Command75 } from "commander";
 import { createRequire } from "module";
 
 // src/commands/init.ts
@@ -346,6 +346,9 @@ var TaskCreateSchema = z3.object({
 });
 var TaskResponseSchema = z3.object({
   id: z3.string(),
+  // The task's public name (ADR-0098), e.g. 'TSK-4M0BXQ2E'. Nullable until the backfill in
+  // migration 0051 completes; `id` remains the canonical URL segment.
+  referenceCode: z3.string().nullable().optional(),
   requester: z3.string(),
   requesterPubkey: z3.string().nullable(),
   description: z3.string(),
@@ -440,7 +443,11 @@ var TaskListInputSchema = z3.object({
   requester: z3.string().optional(),
   worker: z3.string().optional(),
   taskDropId: z3.string().trim().min(1).optional(),
-  sort: z3.enum(["newest", "reward_desc", "reward_asc", "deadline_asc"]).optional().default("newest")
+  // Free-text search (ADR-0099). Bounded at 200 characters so a single query cannot ask for
+  // unbounded work; longer input is refused by Zod with a machine-readable reason (ADR-0058)
+  // rather than silently truncated into a different query than the one the user typed.
+  q: z3.string().trim().min(1).max(200).optional(),
+  sort: z3.enum(["newest", "reward_desc", "reward_asc", "deadline_asc", "relevance"]).optional().default("newest")
 });
 var TaskListResponseSchema = z3.object({
   tasks: z3.array(TaskResponseSchema),
@@ -612,6 +619,9 @@ var SubmissionCreateSchema = z4.object({
 });
 var SubmissionResponseSchema = z4.object({
   id: z4.string(),
+  // The submission's public name (ADR-0098), e.g. 'SUB-7K2QA9XF'. This is what the UI shows and
+  // what search accepts; `id` stays the primary key and the idempotency key.
+  referenceCode: z4.string().nullable().optional(),
   taskId: z4.string(),
   workerAddress: z4.string(),
   fileUrl: z4.string(),
@@ -703,7 +713,10 @@ var AgentRegistrationInputSchema = z5.object({
   source: RegistrationSource.optional().default("cli")
 });
 var LeaderboardInputSchema = z5.object({
-  limit: z5.number().optional().default(20),
+  // RFC-0013 (Phase 1): the rate limiter on this endpoint bounds request count, not rows
+  // returned per request -- an unbounded limit would let one request dump the whole agent
+  // population regardless of the limiter, defeating the point of rate-limiting it at all.
+  limit: z5.number().int().min(1).max(100).optional().default(20),
   offset: z5.number().optional().default(0),
   sort: z5.enum(["reputation", "tasks"]).optional().default("reputation"),
   skill: z5.string().optional(),
@@ -920,8 +933,29 @@ var SetWithdrawalAddressInputSchema = z12.object({
   withdrawalAddress: EthAddressSchema,
   signature: z12.string().min(1)
 });
+var AccountRecoveryCodeSchema = z12.string().regex(/^\d{8}$/);
 var SetWithdrawalAddressOutputSchema = z12.object({
-  withdrawalAddress: z12.string()
+  withdrawalAddress: z12.string(),
+  // Returned exactly once, in this same response -- there is no other way to see it again.
+  accountRecoveryCode: AccountRecoveryCodeSchema
+});
+var ChangeWithdrawalAddressInputSchema = z12.object({
+  address: EthAddressSchema,
+  accountRecoveryCode: AccountRecoveryCodeSchema,
+  newWithdrawalAddress: EthAddressSchema
+});
+var ChangeWithdrawalAddressOutputSchema = z12.object({
+  withdrawalAddress: z12.string(),
+  // A fresh code, minted the same way, immediately: using a code invalidates it and
+  // replaces it, so the operator always holds exactly one current, unused code.
+  accountRecoveryCode: AccountRecoveryCodeSchema
+});
+var RevealBackfilledRecoveryCodeInputSchema = z12.object({
+  address: EthAddressSchema,
+  signature: z12.string().min(1)
+});
+var RevealBackfilledRecoveryCodeOutputSchema = z12.object({
+  accountRecoveryCode: AccountRecoveryCodeSchema
 });
 var UsdcDomainSchema = z12.object({
   name: z12.string(),
@@ -2081,6 +2115,9 @@ function buildForfeitMessage(taskId) {
 function buildSetWithdrawalAddressMessage(withdrawalAddress) {
   return `taskmarket:set-withdrawal-address:${withdrawalAddress.toLowerCase()}`;
 }
+function buildRevealAccountRecoveryCodeMessage(address) {
+  return `taskmarket:reveal-account-recovery-code:${address.toLowerCase()}`;
+}
 function buildWithdrawDreamsMessage(destination, nonce, validBefore) {
   return `taskmarket:withdraw-dreams:${destination.toLowerCase()}:${nonce}:${validBefore}`;
 }
@@ -4862,7 +4899,7 @@ var depositCommand = new Command45("deposit").description("Show wallet address a
 });
 
 // src/commands/wallet/index.ts
-import { Command as Command51 } from "commander";
+import { Command as Command54 } from "commander";
 
 // src/commands/wallet/balance.ts
 import { Command as Command46 } from "commander";
@@ -5010,20 +5047,101 @@ var setWithdrawalAddressCommand = new Command48("set-withdrawal-address").descri
   const walletAddress = keystore.walletAddress;
   const message = buildSetWithdrawalAddressMessage(address);
   const signature = await signMessage(message, keystore);
-  const { data: result, idempotencyKey } = await apiPost(
-    "/api/wallet/set-withdrawal-address",
+  const { data: result, idempotencyKey } = await apiPost("/api/wallet/set-withdrawal-address", {
+    walletAddress,
+    withdrawalAddress: address,
+    signature
+  });
+  printResult(
     {
-      walletAddress,
-      withdrawalAddress: address,
-      signature
-    }
+      withdrawalAddress: result.withdrawalAddress,
+      accountRecoveryCode: result.accountRecoveryCode,
+      warning: "SAVE THIS ACCOUNT RECOVERY CODE NOW. It will never be shown again, and there is no way to recover it if lost -- the withdrawal address could then never be changed again. Save it in more than one independent place (e.g. a password manager entry AND a printed copy)."
+    },
+    { idempotencyKey }
   );
-  printResult({ withdrawalAddress: result.withdrawalAddress }, { idempotencyKey });
 });
 
-// src/commands/wallet/publish-key.ts
+// src/commands/wallet/get-withdrawal-address.ts
 import { Command as Command49 } from "commander";
-var publishKeyCommand = new Command49("publish-key").description("Publish your secp256k1 public key so others can encrypt files for you").action(async () => {
+var getWithdrawalAddressCommand = new Command49("get-withdrawal-address").description("Show the currently registered withdrawal address, if any").option("--address <addr>", "Wallet address to check (defaults to own wallet)").action(async (opts) => {
+  let address = opts.address;
+  if (!address) {
+    const keystore = await loadKeystore();
+    address = keystore.walletAddress;
+  }
+  const result = await apiGet(`/api/wallet/withdrawal-address?address=${address}`);
+  printResult(result);
+});
+
+// src/commands/wallet/change-withdrawal-address.ts
+import { Command as Command50 } from "commander";
+function isValidAddress2(addr) {
+  return /^0x[a-fA-F0-9]{40}$/.test(addr);
+}
+function isValidRecoveryCode(code) {
+  return /^\d{8}$/.test(code);
+}
+var changeWithdrawalAddressCommand = new Command50("change-withdrawal-address").description("Change the withdrawal address using the account recovery code (RFC-0012)").argument("<recovery-code>", "The 8-digit account recovery code from set-withdrawal-address").argument("<new-address>", "New Ethereum address to receive withdrawals").action(async (recoveryCode, newAddress) => {
+  if (!isValidRecoveryCode(recoveryCode)) {
+    printError("Invalid account recovery code: must be 8 digits");
+    return;
+  }
+  if (!isValidAddress2(newAddress)) {
+    printError("Invalid Ethereum address: must be 0x followed by 40 hex characters");
+    return;
+  }
+  let keystore;
+  try {
+    keystore = await loadKeystore();
+  } catch {
+    printError("No keystore found. Run `taskmarket init` first.");
+    return;
+  }
+  const { data: result, idempotencyKey } = await apiPost("/api/wallet/change-withdrawal-address", {
+    address: keystore.walletAddress,
+    accountRecoveryCode: recoveryCode,
+    newWithdrawalAddress: newAddress
+  });
+  printResult(
+    {
+      withdrawalAddress: result.withdrawalAddress,
+      accountRecoveryCode: result.accountRecoveryCode,
+      warning: "SAVE THIS NEW ACCOUNT RECOVERY CODE NOW. The code you just used is no longer valid. This new one will never be shown again, and there is no way to recover it if lost. Save it in more than one independent place (e.g. a password manager entry AND a printed copy)."
+    },
+    { idempotencyKey }
+  );
+});
+
+// src/commands/wallet/reveal-recovery-code.ts
+import { Command as Command51 } from "commander";
+var revealRecoveryCodeCommand = new Command51("reveal-recovery-code").description("One-time reveal of your account recovery code, if one has not been generated yet").action(async () => {
+  let keystore;
+  try {
+    keystore = await loadKeystore();
+  } catch {
+    printError("No keystore found. Run `taskmarket init` first.");
+    return;
+  }
+  const address = keystore.walletAddress;
+  const message = buildRevealAccountRecoveryCodeMessage(address);
+  const signature = await signMessage(message, keystore);
+  const { data: result, idempotencyKey } = await apiPost("/api/wallet/reveal-backfilled-recovery-code", {
+    address,
+    signature
+  });
+  printResult(
+    {
+      accountRecoveryCode: result.accountRecoveryCode,
+      warning: "SAVE THIS ACCOUNT RECOVERY CODE NOW. It will never be shown again, and there is no way to recover it if lost -- the withdrawal address could then never be changed again. Save it in more than one independent place (e.g. a password manager entry AND a printed copy)."
+    },
+    { idempotencyKey }
+  );
+});
+
+// src/commands/wallet/publish-key.ts
+import { Command as Command52 } from "commander";
+var publishKeyCommand = new Command52("publish-key").description("Publish your secp256k1 public key so others can encrypt files for you").action(async () => {
   let keystore;
   try {
     keystore = await loadKeystore();
@@ -5043,13 +5161,13 @@ var publishKeyCommand = new Command49("publish-key").description("Publish your s
 });
 
 // src/commands/wallet/withdraw-dreams.ts
-import { Command as Command50 } from "commander";
+import { Command as Command53 } from "commander";
 import { toHex as toHex2 } from "viem";
 var AUTHORIZATION_VALIDITY_SECONDS = 300;
-function isValidAddress2(addr) {
+function isValidAddress3(addr) {
   return /^0x[a-fA-F0-9]{40}$/.test(addr);
 }
-var withdrawDreamsCommand = new Command50("withdraw-dreams").description("Withdraw accumulated DREAMS rewards to the withdrawal address").option("--destination <addr>", "Destination address (defaults to registered withdrawal address)").action(async (opts) => {
+var withdrawDreamsCommand = new Command53("withdraw-dreams").description("Withdraw accumulated DREAMS rewards to the withdrawal address").option("--destination <addr>", "Destination address (defaults to registered withdrawal address)").action(async (opts) => {
   let keystore;
   try {
     keystore = await loadKeystore();
@@ -5059,7 +5177,7 @@ var withdrawDreamsCommand = new Command50("withdraw-dreams").description("Withdr
   }
   const workerAddress = keystore.walletAddress;
   let destination = opts.destination;
-  if (destination !== void 0 && !isValidAddress2(destination)) {
+  if (destination !== void 0 && !isValidAddress3(destination)) {
     printError("Invalid Ethereum address: must be 0x followed by 40 hex characters");
     return;
   }
@@ -5103,15 +5221,18 @@ var withdrawDreamsCommand = new Command50("withdraw-dreams").description("Withdr
 });
 
 // src/commands/wallet/index.ts
-var walletCommand = new Command51("wallet").description("Wallet management commands");
+var walletCommand = new Command54("wallet").description("Wallet management commands");
 walletCommand.addCommand(walletBalanceCommand);
 walletCommand.addCommand(walletImportCommand);
 walletCommand.addCommand(setWithdrawalAddressCommand);
+walletCommand.addCommand(getWithdrawalAddressCommand);
+walletCommand.addCommand(changeWithdrawalAddressCommand);
+walletCommand.addCommand(revealRecoveryCodeCommand);
 walletCommand.addCommand(publishKeyCommand);
 walletCommand.addCommand(withdrawDreamsCommand);
 
 // src/commands/withdraw.ts
-import { Command as Command52 } from "commander";
+import { Command as Command55 } from "commander";
 import { toHex as toHex3 } from "viem";
 var USDC_TYPES = {
   TransferWithAuthorization: [
@@ -5123,7 +5244,7 @@ var USDC_TYPES = {
     { name: "nonce", type: "bytes32" }
   ]
 };
-var withdrawCommand = new Command52("withdraw").description("Withdraw USDC to the registered withdrawal address").argument("<amount>", "Amount in USDC (e.g. 5 for 5 USDC)").action(async (amount) => {
+var withdrawCommand = new Command55("withdraw").description("Withdraw USDC to the registered withdrawal address").argument("<amount>", "Amount in USDC (e.g. 5 for 5 USDC)").action(async (amount) => {
   const parsed = parseFloat(amount);
   if (isNaN(parsed) || parsed <= 0) {
     printError("Invalid amount: must be a positive number (e.g. 5 for 5 USDC)");
@@ -5182,9 +5303,9 @@ var withdrawCommand = new Command52("withdraw").description("Withdraw USDC to th
 });
 
 // src/commands/encrypt.ts
-import { Command as Command53 } from "commander";
+import { Command as Command56 } from "commander";
 import { promises as fs3 } from "fs";
-var encryptCommand = new Command53("encrypt").description("Encrypt a file with ECIES using wallet keys").argument("<file>", "Path to the file to encrypt").option("--recipient <address>", "Recipient wallet address (default: self)").option("--output <path>", "Output path (default: <file>.enc)").action(async (file, opts) => {
+var encryptCommand = new Command56("encrypt").description("Encrypt a file with ECIES using wallet keys").argument("<file>", "Path to the file to encrypt").option("--recipient <address>", "Recipient wallet address (default: self)").option("--output <path>", "Output path (default: <file>.enc)").action(async (file, opts) => {
   let plaintext;
   try {
     plaintext = await fs3.readFile(file);
@@ -5232,9 +5353,9 @@ var encryptCommand = new Command53("encrypt").description("Encrypt a file with E
 });
 
 // src/commands/decrypt.ts
-import { Command as Command54 } from "commander";
+import { Command as Command57 } from "commander";
 import { promises as fs4 } from "fs";
-var decryptCommand = new Command54("decrypt").description("Decrypt a file using your wallet key").argument("<file>", "Path to the encrypted file").option("--output <path>", "Output path (default: strips .enc, otherwise appends .dec)").action(async (file, opts) => {
+var decryptCommand = new Command57("decrypt").description("Decrypt a file using your wallet key").argument("<file>", "Path to the encrypted file").option("--output <path>", "Output path (default: strips .enc, otherwise appends .dec)").action(async (file, opts) => {
   let ciphertext;
   try {
     ciphertext = await fs4.readFile(file);
@@ -5274,7 +5395,7 @@ var decryptCommand = new Command54("decrypt").description("Decrypt a file using
 });
 
 // src/commands/xmtp.ts
-import { Command as Command55 } from "commander";
+import { Command as Command58 } from "commander";
 
 // src/lib/xmtp-client.ts
 import os3 from "os";
@@ -6038,7 +6159,7 @@ function getDefaultQueryTimeoutMs() {
   }
   return Math.floor(parsed);
 }
-var xmtpCommand = new Command55("xmtp").description("Manage XMTP messaging for this agent");
+var xmtpCommand = new Command58("xmtp").description("Manage XMTP messaging for this agent");
 xmtpCommand.command("init").description("Initialize XMTP client and register installation metadata with backend").action(async () => {
   const keystore = await loadKeystore();
   const client = await createXmtpClient({
@@ -6275,7 +6396,7 @@ xmtpCommand.command("purge").description("Revoke stale XMTP installations that h
 });
 
 // src/commands/daemon.ts
-import { Command as Command56 } from "commander";
+import { Command as Command59 } from "commander";
 function diffTaskStatuses(prev, next) {
   const changes = [];
   for (const [taskId, newStatus] of next) {
@@ -6303,7 +6424,7 @@ function sleepOrAbort(ms, signal) {
   });
 }
 var MAX_SEEN_TASK_IDS = 2e3;
-var daemonCommand = new Command56("daemon").description("Long-running agent daemon: XMTP stream, heartbeats, and task polling").option("--heartbeat-interval <ms>", "Heartbeat interval in milliseconds", "1800000").option("--inbox-interval <ms>", "Inbox poll interval in milliseconds", "15000").option("--task-interval <ms>", "New task poll interval in milliseconds", "15000").option(
+var daemonCommand = new Command59("daemon").description("Long-running agent daemon: XMTP stream, heartbeats, and task polling").option("--heartbeat-interval <ms>", "Heartbeat interval in milliseconds", "1800000").option("--inbox-interval <ms>", "Inbox poll interval in milliseconds", "15000").option("--task-interval <ms>", "New task poll interval in milliseconds", "15000").option(
   "--auction-poll-interval <ms>",
   "Poll interval for clock-based auction tasks (dutch/reverse_dutch) in milliseconds",
   "15000"
@@ -6636,11 +6757,11 @@ var daemonCommand = new Command56("daemon").description("Long-running agent daem
 );
 
 // src/commands/email/index.ts
-import { Command as Command65 } from "commander";
+import { Command as Command68 } from "commander";
 
 // src/commands/email/register.ts
-import { Command as Command57 } from "commander";
-var registerCommand = new Command57("register").description("Register an email address for this agent").requiredOption("--username <name>", "Desired username (e.g. myagent)").action(async (opts) => {
+import { Command as Command60 } from "commander";
+var registerCommand = new Command60("register").description("Register an email address for this agent").requiredOption("--username <name>", "Desired username (e.g. myagent)").action(async (opts) => {
   const check = await apiGet(
     `/api/emails/check-username?username=${encodeURIComponent(opts.username)}`
   );
@@ -6661,8 +6782,8 @@ var registerCommand = new Command57("register").description("Register an email a
 });
 
 // src/commands/email/inbox.ts
-import { Command as Command58 } from "commander";
-var inboxCommand2 = new Command58("inbox").description("List emails in your inbox").option("--limit <n>", "Number of emails to return", "20").option("--unread", "Show only unread emails").action(async (opts) => {
+import { Command as Command61 } from "commander";
+var inboxCommand2 = new Command61("inbox").description("List emails in your inbox").option("--limit <n>", "Number of emails to return", "20").option("--unread", "Show only unread emails").action(async (opts) => {
   const keystore = await loadKeystore();
   const params = new URLSearchParams({
     deviceId: keystore.deviceId,
@@ -6677,8 +6798,8 @@ var inboxCommand2 = new Command58("inbox").description("List emails in your inbo
 });
 
 // src/commands/email/read.ts
-import { Command as Command59 } from "commander";
-var readCommand = new Command59("read").description("Read an email by ID (marks it as read)").argument("<id>", "Email ID").action(async (id) => {
+import { Command as Command62 } from "commander";
+var readCommand = new Command62("read").description("Read an email by ID (marks it as read)").argument("<id>", "Email ID").action(async (id) => {
   const keystore = await loadKeystore();
   const params = new URLSearchParams({
     deviceId: keystore.deviceId,
@@ -6690,8 +6811,8 @@ var readCommand = new Command59("read").description("Read an email by ID (marks
 });
 
 // src/commands/email/send.ts
-import { Command as Command60 } from "commander";
-var sendCommand = new Command60("send").description("Send an email").requiredOption("--to <address>", "Recipient email address").requiredOption("--subject <subject>", "Email subject").requiredOption("--body <text>", "Email body text").action(async (opts) => {
+import { Command as Command63 } from "commander";
+var sendCommand = new Command63("send").description("Send an email").requiredOption("--to <address>", "Recipient email address").requiredOption("--subject <subject>", "Email subject").requiredOption("--body <text>", "Email body text").action(async (opts) => {
   const keystore = await loadKeystore();
   const { data: result, idempotencyKey } = await apiPost("/api/emails/send", {
     deviceId: keystore.deviceId,
@@ -6704,8 +6825,8 @@ var sendCommand = new Command60("send").description("Send an email").requiredOpt
 });
 
 // src/commands/email/reply.ts
-import { Command as Command61 } from "commander";
-var replyCommand = new Command61("reply").description("Reply to an email").argument("<id>", "Email ID to reply to").requiredOption("--body <text>", "Reply body text").action(async (id, opts) => {
+import { Command as Command64 } from "commander";
+var replyCommand = new Command64("reply").description("Reply to an email").argument("<id>", "Email ID to reply to").requiredOption("--body <text>", "Reply body text").action(async (id, opts) => {
   const keystore = await loadKeystore();
   const params = new URLSearchParams({
     deviceId: keystore.deviceId,
@@ -6727,8 +6848,8 @@ var replyCommand = new Command61("reply").description("Reply to an email").argum
 });
 
 // src/commands/email/delete.ts
-import { Command as Command62 } from "commander";
-var deleteCommand = new Command62("delete").description("Delete an email by ID").argument("<id>", "Email ID").action(async (id) => {
+import { Command as Command65 } from "commander";
+var deleteCommand = new Command65("delete").description("Delete an email by ID").argument("<id>", "Email ID").action(async (id) => {
   const keystore = await loadKeystore();
   const { data: result, idempotencyKey } = await apiPost(
     "/api/emails/delete",
@@ -6742,15 +6863,15 @@ var deleteCommand = new Command62("delete").description("Delete an email by ID")
 });
 
 // src/commands/email/address.ts
-import { Command as Command63 } from "commander";
-var addressCommand2 = new Command63("address").description("Show your registered email address").action(async () => {
+import { Command as Command66 } from "commander";
+var addressCommand2 = new Command66("address").description("Show your registered email address").action(async () => {
   const keystore = await loadKeystore();
   const result = await apiGet(`/api/agents/stats?address=${keystore.walletAddress}`);
   printResult({ emailAddress: result.emailAddress ?? null });
 });
 
 // src/commands/email/mark-read.ts
-import { Command as Command64 } from "commander";
+import { Command as Command67 } from "commander";
 async function setReadStatus(id, read) {
   const keystore = await loadKeystore();
   const { data: result, idempotencyKey } = await apiPost(
@@ -6764,12 +6885,12 @@ async function setReadStatus(id, read) {
   );
   printResult({ id: result.id, isRead: result.isRead }, { idempotencyKey });
 }
-var markReadCommand = new Command64("mark-read").description("Mark an email as read or unread").argument("<id>", "Email ID").option("--unread", "Mark as unread instead of read").action(async (id, opts) => {
+var markReadCommand = new Command67("mark-read").description("Mark an email as read or unread").argument("<id>", "Email ID").option("--unread", "Mark as unread instead of read").action(async (id, opts) => {
   await setReadStatus(id, !opts.unread);
 });
 
 // src/commands/email/index.ts
-var emailCommand = new Command65("email").description("Email management commands");
+var emailCommand = new Command68("email").description("Email management commands");
 emailCommand.addCommand(registerCommand);
 emailCommand.addCommand(inboxCommand2);
 emailCommand.addCommand(readCommand);
@@ -6780,11 +6901,11 @@ emailCommand.addCommand(addressCommand2);
 emailCommand.addCommand(markReadCommand);
 
 // src/commands/requester/index.ts
-import { Command as Command67 } from "commander";
+import { Command as Command70 } from "commander";
 
 // src/commands/requester/stats.ts
-import { Command as Command66 } from "commander";
-var requesterStatsCmd = new Command66("stats").description("Get requester reputation stats for an address").argument("<address>", "Wallet address of the requester").action(async (address) => {
+import { Command as Command69 } from "commander";
+var requesterStatsCmd = new Command69("stats").description("Get requester reputation stats for an address").argument("<address>", "Wallet address of the requester").action(async (address) => {
   if (!/^0x[0-9a-fA-F]{40}$/.test(address)) {
     printError("Address must be a 0x-prefixed 20-byte hex string");
     return;
@@ -6798,13 +6919,13 @@ var requesterStatsCmd = new Command66("stats").description("Get requester reputa
 });
 
 // src/commands/requester/index.ts
-var requesterCmd = new Command67("requester").description("Requester reputation commands").addCommand(requesterStatsCmd);
+var requesterCmd = new Command70("requester").description("Requester reputation commands").addCommand(requesterStatsCmd);
 
 // src/commands/x402/index.ts
-import { Command as Command71 } from "commander";
+import { Command as Command74 } from "commander";
 
 // src/commands/x402/payments.ts
-import { Command as Command68, Option as Option2 } from "commander";
+import { Command as Command71, Option as Option2 } from "commander";
 import { createInterface as createInterface3 } from "readline";
 
 // src/lib/x402-journal.ts
@@ -7574,7 +7695,7 @@ async function confirmManualResolution() {
   readline.close();
   return answer.trim().toLowerCase() === "resolve";
 }
-var x402PaymentsCommand = new Command68("payments").description(
+var x402PaymentsCommand = new Command71("payments").description(
   "Inspect and reconcile external x402 payment records"
 );
 x402PaymentsCommand.command("list").description("List current payment records").addOption(new Option2("--state <state>", "Filter by state").choices(PAYMENT_STATES)).action(async (options) => {
@@ -7598,7 +7719,7 @@ x402PaymentsCommand.command("resolve").description("Manually record an externall
 
 // src/commands/x402/policy.ts
 import { promises as fs7 } from "fs";
-import { Command as Command69 } from "commander";
+import { Command as Command72 } from "commander";
 import { createInterface as createInterface4 } from "readline";
 async function confirmUnattendedRule(rule) {
   if (!process.stdin.isTTY) {
@@ -7624,7 +7745,7 @@ async function confirmUnattendedRule(rule) {
   readline.close();
   return answer.trim().toLowerCase() === "authorize";
 }
-var x402PolicyCommand = new Command69("policy").description(
+var x402PolicyCommand = new Command72("policy").description(
   "Manage local external x402 spending policy"
 );
 x402PolicyCommand.command("init").description("Create a deny-all policy file").action(async () => {
@@ -7660,7 +7781,7 @@ for (const enabled of [true, false]) {
 }
 
 // src/commands/x402/request.ts
-import { Command as Command70, Option as Option3 } from "commander";
+import { Command as Command73, Option as Option3 } from "commander";
 import { createInterface as createInterface5 } from "readline";
 
 // src/lib/external-x402-client.ts
@@ -8618,7 +8739,7 @@ async function confirm(lines) {
   readline.close();
   return answer.trim().toLowerCase() === "yes";
 }
-var x402RequestCommand = new Command70("request").description("Request and pay for a direct external x402 HTTP resource").argument("<url>", "HTTPS resource URL").addOption(new Option3("--method <method>", "HTTP method").choices(["GET", "POST"]).default("GET")).option("--json <json>", "Inline JSON POST body").option("--body-file <path>", "Read JSON POST body from a file").option("--headers-file <path>", "Read request headers from an owner-only JSON file").option(
+var x402RequestCommand = new Command73("request").description("Request and pay for a direct external x402 HTTP resource").argument("<url>", "HTTPS resource URL").addOption(new Option3("--method <method>", "HTTP method").choices(["GET", "POST"]).default("GET")).option("--json <json>", "Inline JSON POST body").option("--body-file <path>", "Read JSON POST body from a file").option("--headers-file <path>", "Read request headers from an owner-only JSON file").option(
   "--header-env <header=ENV_VAR>",
   "Read one request header from an environment variable (repeatable)",
   collect2,
@@ -8662,7 +8783,7 @@ var x402RequestCommand = new Command70("request").description("Request and pay f
 );
 
 // src/commands/x402/index.ts
-var x402Command = new Command71("x402").description(
+var x402Command = new Command74("x402").description(
   "Pay external x402 services with local spending policies"
 );
 x402Command.addCommand(x402RequestCommand);
@@ -8672,7 +8793,7 @@ x402Command.addCommand(x402PaymentsCommand);
 // src/index.ts
 var require2 = createRequire(import.meta.url);
 var { version } = require2("../package.json");
-var program = new Command72();
+var program = new Command75();
 program.name("taskmarket").description("Taskmarket CLI for AI agents").version(version);
 program.addCommand(initCommand);
 program.addCommand(walletCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lucid-agents/taskmarket",
-  "version": "1.11.0",
+  "version": "1.12.1",
   "type": "module",
   "bin": {
     "taskmarket": "./dist/index.js"