@lucid-agents/taskmarket 1.17.0 → 1.17.2

package/dist/{launch-EZJGJJ5Y.js → launch-2U3KFTFD.js}

@@ -1,22 +1,67 @@
 import { createRequire as __tmCreateRequire } from 'node:module'; import { fileURLToPath as __tmFileURLToPath } from 'node:url'; import { dirname as __tmDirname } from 'node:path'; const require = __tmCreateRequire(import.meta.url); const __tmFilename = __tmFileURLToPath(import.meta.url); const __tmDirnameValue = __tmDirname(__tmFilename);
 import {
+  SANDBOX_TOOL_USER,
+  SandboxUnavailableError,
+  buyComputeChunk,
+  computeAllocationId,
+  computeCreditObserver,
+  computeCreditOffer,
+  openSandbox,
+  readComputeView
+} from "./chunk-LDCFKFF6.js";
+import {
+  applyComputeCreditSetup,
+  atomicToUsd,
+  buyComputeCredit,
+  fetchComputePricing,
+  loadComputeCreditConfig,
+  planComputeCreditSetup,
+  readComputeCreditBalance,
+  usdToAtomic
+} from "./chunk-52Q2DCZN.js";
+import {
+  MAX_RETIRED_RAILS,
+  WORKSPACE_CONSENT_VERSION,
+  XGATE_ROUTES,
+  XgateError,
+  XgatePurchaseError,
+  allocationViews,
+  assessAgentPolicy,
+  channelView,
+  createAgentTransport,
+  getAgentPolicyPath,
+  openAgentChannels,
+  readAgentPolicy,
+  reconcileLeftoverOperations,
+  routeOfCatalogRow,
+  saveAgentPolicy,
+  selectModels,
+  settledRetiredRails
+} from "./chunk-GJQUALXN.js";
+import {
+  BASE_CHANNEL_RAIL_ID,
   apiUrl,
   createBaseChannelPayer,
   createBaseChannelRpcReader,
-  createWalletAccountFromKeystore,
   createX402Allocations,
   getTaskmarketHome,
   getX402JournalPath,
   getX402PolicyPath,
   keystoreExists,
+  listX402Payments,
   loadKeystore,
   loadX402Policy,
-  onComputeBalanceObserved,
-  rpcUrlForNetwork
-} from "./chunk-3XPF2O6L.js";
+  parseX402Policy,
+  saveX402Policy,
+  x402SpendWindowAvailability
+} from "./chunk-FRV3ZHUR.js";
 import {
   AgentLaunchError
-} from "./chunk-O27J7ZPH.js";
+} from "./chunk-YM4S6IE4.js";
+import {
+  AGENT_VIEW_VERSION,
+  formatUsdc
+} from "./chunk-73RXOYME.js";
 import {
   __commonJS,
   __require,
@@ -8080,11 +8125,11 @@ var require_agent = __commonJS({
       };
     })();
     var WINDOWS_PIPE_REGEX = /^[/\\][/\\]\.[/\\]pipe[/\\].+/;
-    function createAgent(path7) {
-      if (process.platform === "win32" && !WINDOWS_PIPE_REGEX.test(path7)) {
-        return path7 === "pageant" ? new PageantAgent() : new CygwinAgent(path7);
+    function createAgent(path6) {
+      if (process.platform === "win32" && !WINDOWS_PIPE_REGEX.test(path6)) {
+        return path6 === "pageant" ? new PageantAgent() : new CygwinAgent(path6);
       }
-      return new OpenSSHAgent(path7);
+      return new OpenSSHAgent(path6);
     }
     var AgentProtocol = (() => {
       const SSH_AGENTC_REQUEST_IDENTITIES = 11;
@@ -8882,7 +8927,7 @@ var require_handlers_misc = __commonJS({
       },
       [MESSAGE.DEBUG]: (self2, payload) => {
         bufferParser.init(payload, 1);
-        const display2 = bufferParser.readBool();
+        const display = bufferParser.readBool();
         const msg = bufferParser.readString(true);
         const lang = bufferParser.readString();
         bufferParser.clear();
@@ -8894,7 +8939,7 @@ var require_handlers_misc = __commonJS({
         }
         self2._debug && self2._debug("Inbound: Received DEBUG");
         const handler = self2._handlers.DEBUG;
-        handler && handler(self2, display2, msg);
+        handler && handler(self2, display, msg);
       },
       [MESSAGE.SERVICE_REQUEST]: (self2, payload) => {
         bufferParser.init(payload, 1);
@@ -13328,17 +13373,17 @@ var require_SFTP = __commonJS({
       // ===========================================================================
       // Client-specific ===========================================================
       // ===========================================================================
-      createReadStream(path7, options) {
+      createReadStream(path6, options) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        return new ReadStream(this, path7, options);
+        return new ReadStream(this, path6, options);
       }
-      createWriteStream(path7, options) {
+      createWriteStream(path6, options) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        return new WriteStream(this, path7, options);
+        return new WriteStream(this, path6, options);
       }
-      open(path7, flags_, attrs, cb) {
+      open(path6, flags_, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         if (typeof attrs === "function") {
@@ -13357,7 +13402,7 @@ var require_SFTP = __commonJS({
           attrsFlags = attrs.flags;
           attrsLen = attrs.nb;
         }
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen + 4 + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -13365,7 +13410,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         writeUInt32BE(buf, attrsFlags, p += 4);
         if (attrsLen) {
@@ -13496,7 +13541,7 @@ var require_SFTP = __commonJS({
           throw new Error("Client-only method called in server mode");
         fastXfer(fs3, this, localPath, remotePath, opts, cb);
       }
-      readFile(path7, options, callback_) {
+      readFile(path6, options, callback_) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let callback;
@@ -13569,13 +13614,13 @@ var require_SFTP = __commonJS({
             return callback && callback(er, buffer);
           });
         };
-        this.open(path7, flag, 438, (er, handle_) => {
+        this.open(path6, flag, 438, (er, handle_) => {
           if (er)
             return callback && callback(er);
           handle = handle_;
           const tryStat = (er2, st) => {
             if (er2) {
-              this.stat(path7, (er_, st_) => {
+              this.stat(path6, (er_, st_) => {
                 if (er_) {
                   return this.close(handle, () => {
                     callback && callback(er2);
@@ -13596,7 +13641,7 @@ var require_SFTP = __commonJS({
           this.fstat(handle, tryStat);
         });
       }
-      writeFile(path7, data, options, callback_) {
+      writeFile(path6, data, options, callback_) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let callback;
@@ -13615,7 +13660,7 @@ var require_SFTP = __commonJS({
         if (options.encoding && !Buffer.isEncoding(options.encoding))
           throw new Error(`Unknown encoding: ${options.encoding}`);
         const flag = options.flag || "w";
-        this.open(path7, flag, options.mode, (openErr, handle) => {
+        this.open(path6, flag, options.mode, (openErr, handle) => {
           if (openErr) {
             callback && callback(openErr);
           } else {
@@ -13624,7 +13669,7 @@ var require_SFTP = __commonJS({
             if (position === null) {
               const tryStat = (er, st) => {
                 if (er) {
-                  this.stat(path7, (er_, st_) => {
+                  this.stat(path6, (er_, st_) => {
                     if (er_) {
                       return this.close(handle, () => {
                         callback && callback(er);
@@ -13643,7 +13688,7 @@ var require_SFTP = __commonJS({
           }
         });
       }
-      appendFile(path7, data, options, callback_) {
+      appendFile(path6, data, options, callback_) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let callback;
@@ -13661,12 +13706,12 @@ var require_SFTP = __commonJS({
           throw new TypeError("Bad arguments");
         if (!options.flag)
           options = Object.assign({ flag: "a" }, options);
-        this.writeFile(path7, data, options, callback);
+        this.writeFile(path6, data, options, callback);
       }
-      exists(path7, cb) {
+      exists(path6, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        this.stat(path7, (err) => {
+        this.stat(path6, (err) => {
           cb && cb(err ? false : true);
         });
       }
@@ -13709,7 +13754,7 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} RENAME`
         );
       }
-      mkdir(path7, attrs, cb) {
+      mkdir(path6, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let flags = 0;
@@ -13723,7 +13768,7 @@ var require_SFTP = __commonJS({
           flags = attrs.flags;
           attrsLen = attrs.nb;
         }
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -13731,7 +13776,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         if (attrsLen) {
           p += 4;
@@ -13747,10 +13792,10 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} MKDIR`
         );
       }
-      rmdir(path7, cb) {
+      rmdir(path6, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -13758,7 +13803,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
@@ -13848,10 +13893,10 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} FSTAT`
         );
       }
-      stat(path7, cb) {
+      stat(path6, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -13859,17 +13904,17 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} STAT`
         );
       }
-      lstat(path7, cb) {
+      lstat(path6, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -13877,17 +13922,17 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} LSTAT`
         );
       }
-      opendir(path7, cb) {
+      opendir(path6, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -13895,14 +13940,14 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         this._requests[reqid] = { cb };
         const isBuffered = sendOrBuffer(this, buf);
         this._debug && this._debug(
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} OPENDIR`
         );
       }
-      setstat(path7, attrs, cb) {
+      setstat(path6, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         let flags = 0;
@@ -13914,7 +13959,7 @@ var require_SFTP = __commonJS({
         } else if (typeof attrs === "function") {
           cb = attrs;
         }
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -13922,7 +13967,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         if (attrsLen) {
           p += 4;
@@ -13982,8 +14027,8 @@ var require_SFTP = __commonJS({
           mtime: toUnixTimestamp(mtime)
         }, cb);
       }
-      utimes(path7, atime, mtime, cb) {
-        return this.setstat(path7, {
+      utimes(path6, atime, mtime, cb) {
+        return this.setstat(path6, {
           atime: toUnixTimestamp(atime),
           mtime: toUnixTimestamp(mtime)
         }, cb);
@@ -13994,8 +14039,8 @@ var require_SFTP = __commonJS({
           gid
         }, cb);
       }
-      chown(path7, uid, gid, cb) {
-        return this.setstat(path7, {
+      chown(path6, uid, gid, cb) {
+        return this.setstat(path6, {
           uid,
           gid
         }, cb);
@@ -14005,15 +14050,15 @@ var require_SFTP = __commonJS({
           mode
         }, cb);
       }
-      chmod(path7, mode, cb) {
-        return this.setstat(path7, {
+      chmod(path6, mode, cb) {
+        return this.setstat(path6, {
           mode
         }, cb);
       }
-      readlink(path7, cb) {
+      readlink(path6, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -14021,7 +14066,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         this._requests[reqid] = {
           cb: (err, names) => {
             if (typeof cb !== "function")
@@ -14066,10 +14111,10 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} SYMLINK`
         );
       }
-      realpath(path7, cb) {
+      realpath(path6, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -14077,7 +14122,7 @@ var require_SFTP = __commonJS({
         const reqid = this._writeReqid = this._writeReqid + 1 & MAX_REQID;
         writeUInt32BE(buf, reqid, 5);
         writeUInt32BE(buf, pathLen, p);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         this._requests[reqid] = {
           cb: (err, names) => {
             if (typeof cb !== "function")
@@ -14122,13 +14167,13 @@ var require_SFTP = __commonJS({
           this._debug(`SFTP: Outbound: ${which} posix-rename@openssh.com`);
         }
       }
-      ext_openssh_statvfs(path7, cb) {
+      ext_openssh_statvfs(path6, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         const ext = this._extensions["statvfs@openssh.com"];
         if (!ext || ext !== "2")
           throw new Error("Server does not support this extended request");
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + 19 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -14138,7 +14183,7 @@ var require_SFTP = __commonJS({
         writeUInt32BE(buf, 19, p);
         buf.utf8Write("statvfs@openssh.com", p += 4, 19);
         writeUInt32BE(buf, pathLen, p += 19);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         this._requests[reqid] = { extended: "statvfs@openssh.com", cb };
         const isBuffered = sendOrBuffer(this, buf);
         if (this._debug) {
@@ -14224,7 +14269,7 @@ var require_SFTP = __commonJS({
           `SFTP: Outbound: ${isBuffered ? "Buffered" : "Sending"} fsync@openssh.com`
         );
       }
-      ext_openssh_lsetstat(path7, attrs, cb) {
+      ext_openssh_lsetstat(path6, attrs, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         const ext = this._extensions["lsetstat@openssh.com"];
@@ -14239,7 +14284,7 @@ var require_SFTP = __commonJS({
         } else if (typeof attrs === "function") {
           cb = attrs;
         }
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + 20 + 4 + pathLen + 4 + attrsLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -14249,7 +14294,7 @@ var require_SFTP = __commonJS({
         writeUInt32BE(buf, 20, p);
         buf.utf8Write("lsetstat@openssh.com", p += 4, 20);
         writeUInt32BE(buf, pathLen, p += 20);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         writeUInt32BE(buf, flags, p += pathLen);
         if (attrsLen) {
           p += 4;
@@ -14266,13 +14311,13 @@ var require_SFTP = __commonJS({
           this._debug(`SFTP: Outbound: ${status} lsetstat@openssh.com`);
         }
       }
-      ext_openssh_expandPath(path7, cb) {
+      ext_openssh_expandPath(path6, cb) {
         if (this.server)
           throw new Error("Client-only method called in server mode");
         const ext = this._extensions["expand-path@openssh.com"];
         if (ext !== "1")
           throw new Error("Server does not support this extended request");
-        const pathLen = Buffer.byteLength(path7);
+        const pathLen = Buffer.byteLength(path6);
         let p = 9;
         const buf = Buffer.allocUnsafe(4 + 1 + 4 + 4 + 23 + 4 + pathLen);
         writeUInt32BE(buf, buf.length - 4, 0);
@@ -14282,7 +14327,7 @@ var require_SFTP = __commonJS({
         writeUInt32BE(buf, 23, p);
         buf.utf8Write("expand-path@openssh.com", p += 4, 23);
         writeUInt32BE(buf, pathLen, p += 20);
-        buf.utf8Write(path7, p += 4, pathLen);
+        buf.utf8Write(path6, p += 4, pathLen);
         this._requests[reqid] = {
           cb: (err, names) => {
             if (typeof cb !== "function")
@@ -15560,12 +15605,12 @@ var require_SFTP = __commonJS({
       [REQUEST.LSTAT]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path7 = bufferParser.readString(true);
+        const path6 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path7 === void 0)
+        if (path6 === void 0)
           return doFatalSFTPError(sftp, "Malformed LSTAT packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received LSTAT (id:${reqID})`);
-        if (!sftp.emit("LSTAT", reqID, path7)) {
+        if (!sftp.emit("LSTAT", reqID, path6)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -15584,13 +15629,13 @@ var require_SFTP = __commonJS({
       [REQUEST.SETSTAT]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path7 = bufferParser.readString(true);
+        const path6 = bufferParser.readString(true);
         const attrs = readAttrs(sftp._biOpt);
         bufferParser.clear();
         if (attrs === void 0)
           return doFatalSFTPError(sftp, "Malformed SETSTAT packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received SETSTAT (id:${reqID})`);
-        if (!sftp.emit("SETSTAT", reqID, path7, attrs)) {
+        if (!sftp.emit("SETSTAT", reqID, path6, attrs)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -15612,12 +15657,12 @@ var require_SFTP = __commonJS({
       [REQUEST.OPENDIR]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path7 = bufferParser.readString(true);
+        const path6 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path7 === void 0)
+        if (path6 === void 0)
           return doFatalSFTPError(sftp, "Malformed OPENDIR packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received OPENDIR (id:${reqID})`);
-        if (!sftp.emit("OPENDIR", reqID, path7)) {
+        if (!sftp.emit("OPENDIR", reqID, path6)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -15636,63 +15681,63 @@ var require_SFTP = __commonJS({
       [REQUEST.REMOVE]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path7 = bufferParser.readString(true);
+        const path6 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path7 === void 0)
+        if (path6 === void 0)
           return doFatalSFTPError(sftp, "Malformed REMOVE packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received REMOVE (id:${reqID})`);
-        if (!sftp.emit("REMOVE", reqID, path7)) {
+        if (!sftp.emit("REMOVE", reqID, path6)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.MKDIR]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path7 = bufferParser.readString(true);
+        const path6 = bufferParser.readString(true);
         const attrs = readAttrs(sftp._biOpt);
         bufferParser.clear();
         if (attrs === void 0)
           return doFatalSFTPError(sftp, "Malformed MKDIR packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received MKDIR (id:${reqID})`);
-        if (!sftp.emit("MKDIR", reqID, path7, attrs)) {
+        if (!sftp.emit("MKDIR", reqID, path6, attrs)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.RMDIR]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path7 = bufferParser.readString(true);
+        const path6 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path7 === void 0)
+        if (path6 === void 0)
           return doFatalSFTPError(sftp, "Malformed RMDIR packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received RMDIR (id:${reqID})`);
-        if (!sftp.emit("RMDIR", reqID, path7)) {
+        if (!sftp.emit("RMDIR", reqID, path6)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.REALPATH]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path7 = bufferParser.readString(true);
+        const path6 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path7 === void 0)
+        if (path6 === void 0)
           return doFatalSFTPError(sftp, "Malformed REALPATH packet");
         sftp._debug && sftp._debug(
           `SFTP: Inbound: Received REALPATH (id:${reqID})`
         );
-        if (!sftp.emit("REALPATH", reqID, path7)) {
+        if (!sftp.emit("REALPATH", reqID, path6)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
       [REQUEST.STAT]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path7 = bufferParser.readString(true);
+        const path6 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path7 === void 0)
+        if (path6 === void 0)
           return doFatalSFTPError(sftp, "Malformed STAT packet");
         sftp._debug && sftp._debug(`SFTP: Inbound: Received STAT (id:${reqID})`);
-        if (!sftp.emit("STAT", reqID, path7)) {
+        if (!sftp.emit("STAT", reqID, path6)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -15712,14 +15757,14 @@ var require_SFTP = __commonJS({
       [REQUEST.READLINK]: (sftp, payload) => {
         bufferParser.init(payload, 1);
         const reqID = bufferParser.readUInt32BE();
-        const path7 = bufferParser.readString(true);
+        const path6 = bufferParser.readString(true);
         bufferParser.clear();
-        if (path7 === void 0)
+        if (path6 === void 0)
           return doFatalSFTPError(sftp, "Malformed READLINK packet");
         sftp._debug && sftp._debug(
           `SFTP: Inbound: Received READLINK (id:${reqID})`
         );
-        if (!sftp.emit("READLINK", reqID, path7)) {
+        if (!sftp.emit("READLINK", reqID, path6)) {
           sftp.status(reqID, STATUS_CODE.OP_UNSUPPORTED);
         }
       },
@@ -15790,7 +15835,7 @@ var require_SFTP = __commonJS({
     function roundUpToMultipleOf8(n) {
       return n + 7 & ~7;
     }
-    function ReadStream(sftp, path7, options) {
+    function ReadStream(sftp, path6, options) {
       if (options === void 0)
         options = {};
       else if (typeof options === "string")
@@ -15804,7 +15849,7 @@ var require_SFTP = __commonJS({
       options.emitClose = false;
       options.autoDestroy = false;
       ReadableStream.call(this, options);
-      this.path = path7;
+      this.path = path6;
       this.flags = options.flags === void 0 ? "r" : options.flags;
       this.mode = options.mode === void 0 ? 438 : options.mode;
       this.start = options.start;
@@ -15935,7 +15980,7 @@ var require_SFTP = __commonJS({
       },
       configurable: true
     });
-    function WriteStream(sftp, path7, options) {
+    function WriteStream(sftp, path6, options) {
       if (options === void 0)
         options = {};
       else if (typeof options === "string")
@@ -15947,7 +15992,7 @@ var require_SFTP = __commonJS({
       options.emitClose = false;
       options.autoDestroy = false;
       WritableStream.call(this, options);
-      this.path = path7;
+      this.path = path6;
       this.flags = options.flags === void 0 ? "w" : options.flags;
       this.mode = options.mode === void 0 ? 438 : options.mode;
       this.start = options.start;
@@ -16862,7 +16907,7 @@ var require_client = __commonJS({
         let sawHeader = false;
         if (this._protocol)
           this._protocol.cleanup();
-        const DEBUG_HANDLER = !debug ? void 0 : (p, display2, msg) => {
+        const DEBUG_HANDLER = !debug ? void 0 : (p, display, msg) => {
           debug(`Debug output from server: ${JSON.stringify(msg)}`);
         };
         let serverSigAlgs;
@@ -18854,7 +18899,7 @@ var require_server = __commonJS({
         function onClientPreHeaderError(err) {
         }
         this.on("error", onClientPreHeaderError);
-        const DEBUG_HANDLER = !debug ? void 0 : (p, display2, msg) => {
+        const DEBUG_HANDLER = !debug ? void 0 : (p, display, msg) => {
           debug(`Debug output from client: ${JSON.stringify(msg)}`);
         };
         const kaIntvl = typeof srvCfg.keepaliveInterval === "number" && isFinite(srvCfg.keepaliveInterval) && srvCfg.keepaliveInterval > 0 ? srvCfg.keepaliveInterval : typeof Server.KEEPALIVE_CLIENT_INTERVAL === "number" && isFinite(Server.KEEPALIVE_CLIENT_INTERVAL) && Server.KEEPALIVE_CLIENT_INTERVAL > 0 ? Server.KEEPALIVE_CLIENT_INTERVAL : -1;
@@ -19690,7 +19735,7 @@ var require_keygen = __commonJS({
       generateKeyPair: generateKeyPair_,
       generateKeyPairSync: generateKeyPairSync_,
       getCurves,
-      randomBytes
+      randomBytes: randomBytes2
     } = __require("crypto");
     var { Ber } = require_lib();
     var bcrypt_pbkdf = require_bcrypt_pbkdf().pbkdf;
@@ -19954,7 +19999,7 @@ var require_keygen = __commonJS({
                 rounds = opts.rounds;
             }
             const gen = Buffer.allocUnsafe(cipher.keyLen + cipher.ivLen);
-            const salt = randomBytes(SALT_LEN);
+            const salt = randomBytes2(SALT_LEN);
             const r = bcrypt_pbkdf(
               passphrase,
               passphrase.length,
@@ -19993,7 +20038,7 @@ var require_keygen = __commonJS({
           const kdfOptions = encrypted ? encrypted.kdfOptions : Buffer.alloc(0);
           const blockLen = encrypted ? encrypted.cipher.blockLen : 8;
           const parsed = parseDERs(keyType, pub, priv);
-          const checkInt = randomBytes(4);
+          const checkInt = randomBytes2(4);
           const commentBin = Buffer.from(comment);
           const privBlobLen = 4 + 4 + parsed.priv.length + 4 + commentBin.length;
           let padding = [];
@@ -20153,9 +20198,9 @@ var require_lib2 = __commonJS({
 
 // src/lib/agent/launch.ts
 import { spawn } from "child_process";
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 import { appendFileSync, mkdirSync } from "fs";
-import path6 from "path";
+import path5 from "path";
 
 // ../../packages/agent-host/dist/env.js
 var PASSTHROUGH_ENV_NAMES = [
@@ -20476,17 +20521,6 @@ function buildPiLaunch(options) {
   };
 }
 
-// ../../packages/remote-tools/dist/backend.js
-var SANDBOX_TOOL_USER = "agent";
-var SandboxUnavailableError = class extends Error {
-  reason;
-  constructor(reason, options) {
-    super(`Sandbox unavailable, tools are disabled (no local fallback): ${reason}`, options);
-    this.name = "SandboxUnavailableError";
-    this.reason = reason;
-  }
-};
-
 // ../../packages/remote-tools/dist/broker.js
 var import_ssh2 = __toESM(require_lib2());
 var { utils } = import_ssh2.default;
@@ -20518,12 +20552,12 @@ var BrokerConnector = class {
   get sandboxId() {
     return this.sandboxIdValue;
   }
-  async post(path7, body, signal) {
+  async post(path6, body, signal) {
     const doFetch = this.options.fetch ?? fetch;
     const timeout = AbortSignal.timeout(this.options.timeoutMs ?? 12e4);
     let response;
     try {
-      response = await doFetch(`${this.options.apiUrl.replace(/\/+$/, "")}/api/sandboxes/${path7}`, {
+      response = await doFetch(`${this.options.apiUrl.replace(/\/+$/, "")}/api/sandboxes/${path6}`, {
         method: "POST",
         redirect: "error",
         headers: { "content-type": "application/json" },
@@ -20646,47 +20680,6 @@ function serveSandboxChannel(channel, connector, options = {}) {
   return { close: () => replies.end() };
 }
 
-// src/lib/agent/compute.ts
-function computeCreditObserver(log2) {
-  return async (observation) => {
-    try {
-      const { topUp } = await onComputeBalanceObserved(observation);
-      if (topUp.action === "bought") log2("Compute credit auto-top-up bought one chunk");
-      else if (topUp.action === "skipped")
-        log2(`Compute credit auto-top-up skipped: ${topUp.reason}`);
-      return topUp.action === "bought";
-    } catch (error) {
-      log2(
-        `Compute credit auto-top-up failed: ${error.code ?? error.message}`
-      );
-      return false;
-    }
-  };
-}
-function insufficientCredit(error) {
-  return error instanceof SandboxUnavailableError && /\binsufficient_credit\b/.test(error.reason);
-}
-async function openSandbox(createBroker, observe) {
-  const first = createBroker();
-  try {
-    await first.connect("start");
-    return first;
-  } catch (error) {
-    if (!insufficientCredit(error)) throw error;
-    if (!await observe({ creditWarning: "credit_exhausted" })) {
-      throw new AgentLaunchError("insufficient_credit", error.reason);
-    }
-  }
-  const retry = createBroker();
-  try {
-    await retry.connect("start");
-    return retry;
-  } catch (error) {
-    if (insufficientCredit(error)) throw new AgentLaunchError("insufficient_credit", error.reason);
-    throw error;
-  }
-}
-
 // src/lib/agent/extensions.ts
 import { existsSync as existsSync2 } from "fs";
 import path3 from "path";
@@ -20709,277 +20702,11 @@ function piExtensionPath(entry) {
   return found;
 }
 
-// ../../node_modules/.pnpm/@lucid-agents+xgate-client@0.1.6_@solana+sysvars@5.5.1_typescript@5.7.3_zod@3.25.76/node_modules/@lucid-agents/xgate-client/dist/types.js
-var XgateError = class extends Error {
-  code;
-  constructor(code) {
-    super(`Xgate: ${code}. Inspect /xgate status before another purchase.`);
-    this.name = "XgateError";
-    this.code = code;
-  }
-};
-function requireValue(condition, code) {
-  if (!condition)
-    throw new XgateError(code);
-}
-function record(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function atomic(value) {
-  requireValue(typeof value === "string" && /^(0|[1-9][0-9]{0,12})$/.test(value), "invalid_amount");
-  const n = BigInt(value);
-  requireValue(n <= 1000000000000n, "amount_bound");
-  return n;
-}
-function origin(value, loopback = false) {
-  const u = new URL(value);
-  requireValue((u.protocol === "https:" || loopback && u.protocol === "http:" && ["127.0.0.1", "[::1]"].includes(u.hostname)) && !u.username && !u.password && u.pathname === "/" && !u.search && !u.hash, "invalid_origin");
-  return u.origin;
-}
-function route(value) {
-  requireValue([
-    "/v1/chat/completions",
-    "/providers/openai/v1/responses",
-    "/providers/anthropic/v1/messages"
-  ].includes(String(value)), "invalid_route");
-}
-
-// ../../node_modules/.pnpm/@lucid-agents+pi-xgate@0.1.6_@earendil-works+pi-ai@0.85.1_@earendil-works+pi-coding-agent@0.8_344x6vs3jrzh5eh3xewwgv3ik4/node_modules/@lucid-agents/pi-xgate/dist/transport.js
-var XgatePurchaseError = class extends XgateError {
-  invocationId;
-  pending;
-  payment;
-  constructor(code, invocationId, pending, payment) {
-    super(code);
-    this.name = "XgatePurchaseError";
-    this.message = pending ? `Xgate: ${code}. The payment outcome is unknown; do not retry. Reconcile it before another purchase.` : `Xgate: ${code}. Inspect the payment status before another purchase.`;
-    this.invocationId = invocationId;
-    this.pending = pending;
-    if (payment)
-      this.payment = payment;
-  }
-};
-
-// ../../node_modules/.pnpm/@lucid-agents+pi-xgate@0.1.6_@earendil-works+pi-ai@0.85.1_@earendil-works+pi-coding-agent@0.8_344x6vs3jrzh5eh3xewwgv3ik4/node_modules/@lucid-agents/pi-xgate/dist/taskmarket.js
-var RESOLVED_CHARGES = ["none", "released", "settled", "manually_resolved"];
-var RESOLVED_STATES = ["completed", "failed"];
-var CATALOG_BYTES = 2 * 1024 * 1024;
-var REQUEST_BYTES = 8 * 1024 * 1024;
-var CATALOG_DEADLINE_MS = 15e3;
-function createTaskMarketTransport(options) {
-  const { payer } = options, base = origin(options.origin), fetcher = options.fetch ?? fetch;
-  if (payer.apiVersion !== 1)
-    throw new XgateError("unsupported_payer_api");
-  const channel = async (payment) => {
-    if (!options.balances || payment.rail.kind !== "session")
-      return;
-    try {
-      const matches = (await options.balances()).filter((b2) => b2.railId === payment.rail.id && b2.network === payment.network && b2.asset === payment.asset);
-      if (matches.length !== 1)
-        return;
-      const b = matches[0];
-      return {
-        depositingAtomic: b.depositing,
-        lockedAtomic: b.locked,
-        chargedAtomic: b.charged,
-        pendingAtomic: b.pending,
-        refundableAtomic: b.refundable
-      };
-    } catch {
-      return;
-    }
-  };
-  return {
-    async models(signal) {
-      const deadline = AbortSignal.timeout(CATALOG_DEADLINE_MS);
-      let response;
-      try {
-        response = await fetcher(base + "/v1/models", {
-          signal: signal ? AbortSignal.any([signal, deadline]) : deadline,
-          redirect: "error",
-          cache: "no-store",
-          credentials: "omit",
-          referrerPolicy: "no-referrer",
-          headers: { accept: "application/json" }
-        });
-      } catch {
-        throw new XgateError("catalog_unavailable");
-      }
-      if (!response.ok) {
-        await response.body?.cancel().catch(() => {
-        });
-        throw new XgateError("catalog_unavailable");
-      }
-      const v = parse(await bounded(response, CATALOG_BYTES));
-      if (!record(v) || !Array.isArray(v.data) || v.data.length > 128)
-        throw new XgateError("invalid_catalog");
-      return v.data.filter((m) => record(m) && (options.models === void 0 || options.models.includes(m.id))).map((m) => ({ ...m, xgate_origin: base }));
-    },
-    async purchase(invocation, signal, onResponse) {
-      route(invocation.route);
-      const body = new TextEncoder().encode(invocation.body);
-      if (body.byteLength === 0 || body.byteLength > REQUEST_BYTES)
-        throw new XgateError("invalid_invocation");
-      const id = invocation.id;
-      let result;
-      try {
-        result = await payer.request({
-          apiVersion: 1,
-          invocationId: id,
-          url: base + invocation.route,
-          method: "POST",
-          // Application headers only: the payer owns every payment header.
-          headers: {
-            "content-type": "application/json",
-            accept: "application/json"
-          },
-          body,
-          limits: { maxRequestBodyBytes: REQUEST_BYTES },
-          ...options.allocationId !== void 0 ? { allocationId: options.allocationId } : {},
-          ...options.policyRuleId !== void 0 ? { policyRuleId: options.policyRuleId } : {},
-          ...options.nonInteractive !== void 0 ? { nonInteractive: options.nonInteractive } : {}
-        }, {
-          ...signal ? { signal } : {},
-          ...options.confirmPayment ? { confirmPayment: options.confirmPayment } : {}
-        });
-      } catch (error) {
-        throw failure(error, id);
-      }
-      const payment = result.payment;
-      if (result.invocationId !== id || result.apiVersion !== 1)
-        throw new XgatePurchaseError("payer_result_mismatch", id, true, payment && display(payment));
-      if (!payment)
-        throw new XgatePurchaseError(result.response.status === 200 ? "payment_missing" : "request_rejected", id, false);
-      const shown = display(payment);
-      if (payment.charge !== "settled" || typeof payment.settledAmount !== "string")
-        throw new XgatePurchaseError("payment_unverified", id, true, shown);
-      shown.chargedAtomic = payment.settledAmount;
-      try {
-        if (atomic(payment.settledAmount) > atomic(payment.authorizedAmount))
-          throw new XgateError("charge_over_authorization");
-      } catch {
-        throw new XgatePurchaseError("invalid_settlement", id, true, shown);
-      }
-      const r = result.response, h = r.headers;
-      if (r.status !== 200 || !/^application\/json\b/i.test(r.contentType) || h["x-inference-privacy"] !== "anonymous" || h["x-result-retention"] !== "none" || !h["cache-control"]?.includes("no-store"))
-        throw new XgatePurchaseError("response_rejected", id, false, shown);
-      let value;
-      try {
-        value = parse(r.body);
-      } catch {
-        throw new XgatePurchaseError("invalid_response", id, false, shown);
-      }
-      if (!record(value) || typeof value.id !== "string" || value.result_replay_available !== void 0)
-        throw new XgatePurchaseError("invalid_response", id, false, shown);
-      const head = {
-        status: r.status,
-        headers: { "content-type": r.contentType, "cache-control": "no-store" }
-      };
-      try {
-        await onResponse?.(head);
-      } catch {
-        throw new XgatePurchaseError("response_hook_failed", id, false, shown);
-      }
-      const balance = await channel(payment);
-      if (balance)
-        shown.channel = balance;
-      return {
-        body: value,
-        settlement: {
-          chargedAtomic: payment.settledAmount,
-          reference: payment.transaction ?? payment.commitment ?? payment.paymentId
-        },
-        purchase: payment.commitment ?? payment.paymentId,
-        payment: shown
-      };
-    },
-    async status() {
-      return {
-        transport: "taskmarket",
-        origin: base,
-        ...options.balances ? {
-          balances: (await options.balances()).map((b) => ({
-            rail: b.railId,
-            network: b.network,
-            asset: b.asset,
-            depositingAtomic: b.depositing,
-            lockedAtomic: b.locked,
-            chargedAtomic: b.charged,
-            pendingAtomic: b.pending,
-            refundableAtomic: b.refundable
-          }))
-        } : {}
-      };
-    },
-    async reconcile(invocationId) {
-      const s = await payer.reconcile(invocationId);
-      return {
-        invocationId: s.invocationId,
-        state: s.state,
-        charge: s.charge,
-        uncertain: s.uncertain,
-        ...s.errorCode ? { errorCode: s.errorCode } : {},
-        ...s.payment ? { payment: display(s.payment) } : {}
-      };
-    }
-  };
-}
-function display(p) {
-  return {
-    network: p.network,
-    scheme: p.scheme,
-    asset: p.asset,
-    payTo: p.payTo,
-    rail: p.rail.kind,
-    authorizedAtomic: p.authorizedAmount,
-    ...p.charge === "settled" && p.settledAmount !== void 0 ? { chargedAtomic: p.settledAmount } : {},
-    status: p.charge,
-    ...p.transaction ?? p.commitment ? { reference: p.transaction ?? p.commitment } : {}
-  };
-}
-function failure(error, id) {
-  const e = error;
-  const code = typeof e?.code === "string" && /^[a-z0-9_]{1,64}$/.test(e.code) ? e.code : "payer_failed";
-  const recorded = e?.invocation;
-  const pending = e?.pending !== false || recorded !== void 0 && !(recorded.uncertain === false && RESOLVED_CHARGES.includes(recorded.charge) && RESOLVED_STATES.includes(recorded.state));
-  const summary = e?.invocation?.payment;
-  return new XgatePurchaseError(code, id, pending, record(summary) ? display(summary) : void 0);
-}
-async function bounded(response, limit) {
-  if (!response.body)
-    throw new XgateError("invalid_catalog");
-  const reader = response.body.getReader(), chunks = [];
-  let length = 0;
-  try {
-    for (; ; ) {
-      const part = await reader.read();
-      if (part.done)
-        break;
-      length += part.value.byteLength;
-      if (length > limit)
-        throw new XgateError("catalog_bound");
-      chunks.push(part.value);
-    }
-  } catch (error) {
-    await reader.cancel().catch(() => {
-    });
-    throw error instanceof XgateError ? error : new XgateError("catalog_unavailable");
-  } finally {
-    reader.releaseLock();
-  }
-  return Buffer.concat(chunks, length);
-}
-function parse(bytes) {
-  try {
-    return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
-  } catch {
-    throw new XgateError("invalid_response");
-  }
-}
-
 // src/lib/agent/inference-channel.ts
 var MAX_MESSAGE_BYTES2 = 48 * 1024 * 1024;
 var CATALOG_TIMEOUT_MS = 3e4;
+var BUY_TIMEOUT_MS = 5 * 6e4;
+var CODE = /^[a-z0-9_]{1,64}$/;
 function lines2(stream, onLine, onOverflow, maxBytes) {
   let chunks = [];
   let size = 0;
@@ -21113,6 +20840,31 @@ function serveInferenceChannel(channel, transport, options = {}) {
             (typeof request.invocationId === "string" && transport.reconcile ? transport.reconcile(request.invocationId) : Promise.reject(new XgateError("purchase_id_required"))).then((value) => ({ value }))
           );
           return;
+        case "budget":
+          void answer(
+            request.id,
+            (options.views?.budget ? options.views.budget({ unresolved: [...unresolved] }) : Promise.reject(new XgateError("unsupported_by_transport"))).then((value) => ({ value }))
+          );
+          return;
+        case "credit_offer":
+          void answer(
+            request.id,
+            (options.views?.creditOffer ? options.views.creditOffer() : Promise.reject(new XgateError("unsupported_by_transport"))).then((value) => ({ value }))
+          );
+          return;
+        case "buy_credits": {
+          const amount = request.amountUsd;
+          void answer(
+            request.id,
+            (amount !== void 0 && !(Number.isSafeInteger(amount) && amount > 0) ? Promise.reject(new XgateError("invalid_amount")) : options.views?.buyCredits ? options.views.buyCredits(amount).catch((error) => {
+              const code = error.code;
+              throw new XgateError(
+                typeof code === "string" && CODE.test(code) ? code : "purchase_failed"
+              );
+            }) : Promise.reject(new XgateError("unsupported_by_transport"))).then((value) => ({ value }))
+          );
+          return;
+        }
         case "abort":
           running.get(request.target)?.abort.abort();
           return;
@@ -21158,170 +20910,6 @@ function serveInferenceChannel(channel, transport, options = {}) {
   };
 }
 
-// src/lib/agent/payer.ts
-function routeOfCatalogRow(row) {
-  return row?.owned_by === "anthropic" ? "/providers/anthropic/v1/messages" : "/providers/openai/v1/responses";
-}
-async function createAgentRails(options) {
-  const journalPath = getX402JournalPath();
-  const policyPath = getX402PolicyPath();
-  const loadPolicy = (loadOptions) => loadX402Policy(policyPath, loadOptions);
-  const x402Policy = await loadX402Policy(policyPath);
-  const allocations = createX402Allocations({ journalPath, loadPolicy });
-  return options.policy.rails.map((rail) => {
-    if (rail.wallet.toLowerCase() !== options.walletAddress.toLowerCase()) {
-      throw new AgentLaunchError(
-        "invalid_agent_policy",
-        `Rail ${rail.id} pays from ${rail.wallet}, but the wallet is ${options.walletAddress}`
-      );
-    }
-    let rpcUrl;
-    try {
-      rpcUrl = rpcUrlForNetwork(x402Policy, rail.network);
-    } catch (error) {
-      throw new AgentLaunchError("invalid_agent_policy", error.message);
-    }
-    const channel = {
-      network: rail.network,
-      payer: rail.wallet,
-      receiver: rail.receiver,
-      receiverAuthorizer: rail.receiverAuthorizer,
-      salt: rail.salt
-    };
-    const payer = createBaseChannelPayer({
-      channel,
-      reader: createBaseChannelRpcReader({ channel, rpcUrl, fromBlock: BigInt(rail.fromBlock) }),
-      resourceUrl: `${rail.origin}${rail.route}`,
-      journalPath,
-      loadPolicy,
-      getAccount: options.getAccount,
-      allocationId: rail.allocationId,
-      budgetAmount: rail.budgetAmount,
-      ...rail.depositAmount !== void 0 ? { depositAmount: rail.depositAmount } : {},
-      ...rail.policyRuleId !== void 0 ? { policyRuleId: rail.policyRuleId } : {},
-      ...options.fetch ? { fetch: options.fetch } : {}
-    });
-    const transport = createTaskMarketTransport({
-      payer,
-      origin: rail.origin,
-      allocationId: rail.allocationId,
-      ...rail.policyRuleId !== void 0 ? { policyRuleId: rail.policyRuleId } : {},
-      nonInteractive: true,
-      models: options.models,
-      balances: () => allocations.balances(),
-      ...options.fetch ? { fetch: options.fetch } : {}
-    });
-    return { rail, payer, transport };
-  });
-}
-function bodyModel(body) {
-  try {
-    const model = JSON.parse(body)?.model;
-    return typeof model === "string" ? model : void 0;
-  } catch {
-    return void 0;
-  }
-}
-async function neverRecorded(payer, invocationId) {
-  try {
-    await payer.status(invocationId);
-    return false;
-  } catch (error) {
-    return error.code === "invocation_not_found";
-  }
-}
-function createAgentTransport(rails) {
-  const byRoute = new Map(rails.map((r) => [r.rail.route, r]));
-  let offered = /* @__PURE__ */ new Map();
-  return {
-    async models(signal) {
-      const seen = /* @__PURE__ */ new Map();
-      const rows = [];
-      for (const { rail, transport } of rails) {
-        for (const row of await transport.models(signal)) {
-          const id = row.id;
-          if (routeOfCatalogRow(row) !== rail.route || typeof id !== "string" || seen.has(id)) {
-            continue;
-          }
-          seen.set(id, rail.route);
-          rows.push(row);
-        }
-      }
-      offered = seen;
-      return rows;
-    },
-    async purchase(invocation, signal, onResponse) {
-      const rail = byRoute.get(invocation.route);
-      if (!rail) {
-        throw new XgatePurchaseError("no_rail_for_route", invocation.id, false);
-      }
-      const model = typeof invocation.body === "string" ? bodyModel(invocation.body) : void 0;
-      if (model === void 0 || offered.get(model) !== invocation.route) {
-        throw new XgatePurchaseError("model_not_offered", invocation.id, false);
-      }
-      const leftover = (await rail.payer.channelStatus()).pendingOperation;
-      if (leftover && leftover.id !== invocation.id) {
-        throw new XgatePurchaseError("channel_operation_pending", invocation.id, false);
-      }
-      try {
-        return await rail.transport.purchase(invocation, signal, onResponse);
-      } catch (error) {
-        if (error instanceof XgatePurchaseError && error.pending && await neverRecorded(rail.payer, invocation.id)) {
-          throw new XgatePurchaseError(
-            error.code === "outcome_uncertain" ? "channel_operation_pending" : error.code,
-            invocation.id,
-            false
-          );
-        }
-        throw error;
-      }
-    },
-    async status() {
-      return {
-        transport: "taskmarket",
-        rails: await Promise.all(
-          rails.map(async ({ rail, transport }) => ({
-            rail: rail.id,
-            ...await transport.status()
-          }))
-        )
-      };
-    },
-    async reconcile(invocationId) {
-      for (const { transport } of rails) {
-        try {
-          return await transport.reconcile(invocationId);
-        } catch (error) {
-          if (error.code !== "invocation_not_found") throw error;
-        }
-      }
-      throw new XgateError("invocation_not_found");
-    }
-  };
-}
-async function reconcileLeftoverOperations(rails, log2 = () => void 0) {
-  for (const { rail, payer } of rails) {
-    let pending = (await payer.channelStatus()).pendingOperation;
-    if (!pending) continue;
-    if (pending.kind === "payment") {
-      log2(`Reconciling payment ${pending.id} left on rail ${rail.id}`);
-      try {
-        await payer.reconcile(pending.id);
-      } catch (error) {
-        log2(
-          `Payment ${pending.id} could not be reconciled: ${error.code ?? error.message}`
-        );
-      }
-      pending = (await payer.channelStatus()).pendingOperation;
-      if (!pending) continue;
-    }
-    throw new AgentLaunchError(
-      "channel_operation_pending",
-      `The ${rail.id} channel has an unresolved ${pending.kind} operation ${pending.id} from an earlier session; it must be reconciled before anything else is bought on that channel. Try again later.`
-    );
-  }
-}
-
 // src/lib/agent/pi-settings.ts
 import { randomUUID } from "crypto";
 import { promises as fs } from "fs";
@@ -21384,110 +20972,1232 @@ async function writeManagedPiSettings(agentDir, managed) {
   return settings;
 }
 
-// src/lib/agent/policy.ts
+// src/lib/agent/session-budget.ts
+var COMPUTE_TTL_MS = 6e4;
+function aggregateBudget(rails, allocations) {
+  const id = rails[0]?.rail.budgetAllocationId;
+  const found = allocations.find((allocation) => allocation.allocationId === id);
+  return found ? { allocationId: found.allocationId, cap: found.caps.amount, used: found.used.total } : null;
+}
+function createSessionBudget(options) {
+  const now = options.now ?? Date.now;
+  const readCompute = options.readCompute ?? readComputeView;
+  const buyCompute = options.buyCompute ?? buyComputeChunk;
+  let turns = 0;
+  let charged = 0n;
+  let lastTurn = null;
+  let warning = null;
+  let compute;
+  const running = /* @__PURE__ */ new Set();
+  const track = (work) => {
+    running.add(work);
+    void work.then(
+      () => running.delete(work),
+      () => running.delete(work)
+    );
+    return work;
+  };
+  const inner = options.transport;
+  const transport = {
+    ...inner,
+    async purchase(invocation, signal, onResponse) {
+      const result = await inner.purchase(invocation, signal, onResponse);
+      const amount = result.settlement?.chargedAtomic;
+      if (typeof amount === "string" && /^\d{1,40}$/.test(amount)) {
+        turns += 1;
+        charged += BigInt(amount);
+        lastTurn = { invocationId: invocation.id, chargedAtomic: amount };
+      }
+      return result;
+    }
+  };
+  const computeView = () => {
+    if (!compute || now() - compute.at >= COMPUTE_TTL_MS) {
+      compute = {
+        at: now(),
+        value: track(
+          readCompute({
+            warning,
+            ...options.observeCompute ? { observe: options.observeCompute } : {}
+          })
+        )
+      };
+    }
+    return compute.value;
+  };
+  return {
+    transport,
+    async view({ unresolved }) {
+      const [channels, allocations, computeValue] = await Promise.all([
+        Promise.all(options.rails.map((rail) => channelView(rail))),
+        computeAllocationId().then((id) => allocationViews(options.rails, [id])),
+        computeView()
+      ]);
+      return {
+        version: AGENT_VIEW_VERSION,
+        lastTurn,
+        session: { turns, chargedAtomic: charged.toString() },
+        channels,
+        allocations,
+        unresolved,
+        compute: computeValue,
+        budget: aggregateBudget(options.rails, allocations)
+      };
+    },
+    creditOffer: () => (options.offerCompute ?? computeCreditOffer)(),
+    async buyCredits(amountUsd) {
+      try {
+        return await track(buyCompute(amountUsd));
+      } finally {
+        compute = void 0;
+      }
+    },
+    async settled() {
+      await Promise.allSettled([...running]);
+    },
+    noteCreditWarning(next) {
+      if (next !== warning) compute = void 0;
+      warning = next;
+    }
+  };
+}
+
+// src/lib/agent/deposit-window.ts
+var DEPOSIT_WINDOW_SECONDS = 86400;
+function depositWindows(total, routes) {
+  const count = BigInt(routes.length);
+  const share = BigInt(total) / count;
+  const remainder = BigInt(total) - share * count;
+  return new Map(
+    routes.map((route, index) => [route, String(index === 0 ? share + remainder : share)])
+  );
+}
+var CENT = 10000n;
+var roundUp = (value, unit) => (value + unit - 1n) / unit * unit;
+function roundUpToSecond(date) {
+  return new Date(Math.ceil(date.getTime() / 1e3) * 1e3).toISOString().replace(".000Z", "Z");
+}
+async function checkDepositWindows(input) {
+  const records = await listX402Payments({}, input.journalPath);
+  const deposit = BigInt(input.limits.deposit) < BigInt(input.limits.total) ? BigInt(input.limits.deposit) : BigInt(input.limits.total);
+  const windows = depositWindows(input.limits.total, input.routes);
+  const availability = (rail, maximum) => x402SpendWindowAvailability({
+    records,
+    ruleId: rail.ruleId,
+    network: rail.network,
+    asset: rail.asset,
+    windowSeconds: DEPOSIT_WINDOW_SECONDS,
+    maximum,
+    requested: deposit,
+    now: input.now
+  });
+  const blocks = [];
+  for (const rail of input.rails) {
+    if (!rail.newChannel) continue;
+    const window2 = windows.get(rail.route);
+    if (window2 === void 0) continue;
+    const result = availability(rail, window2);
+    if (result.fits) continue;
+    blocks.push({
+      railId: rail.railId,
+      route: rail.route,
+      window: window2,
+      used: String(result.used),
+      deposit: String(deposit),
+      ...result.fitsAt ? { resetsAt: roundUpToSecond(result.fitsAt) } : {}
+    });
+  }
+  if (blocks.length === 0) return void 0;
+  const needs = /* @__PURE__ */ new Map();
+  for (const rail of input.rails) {
+    if (!input.routes.includes(rail.route)) continue;
+    const used = availability(rail, "0").used;
+    needs.set(rail.route, (needs.get(rail.route) ?? 0n) + used + deposit);
+  }
+  const fitsAll = (total2) => {
+    const shares = depositWindows(String(total2), input.routes);
+    return [...needs].every(([route, need]) => BigInt(shares.get(route)) >= need);
+  };
+  const n = BigInt(input.routes.length);
+  const first = needs.get(input.routes[0]) ?? 0n;
+  const others = input.routes.slice(1).reduce((max, route) => (needs.get(route) ?? 0n) > max ? needs.get(route) : max, 0n);
+  const q = others > first - (n - 1n) ? others : first - (n - 1n);
+  let total = n * q + (first > q ? first - q : 0n);
+  if (input.floor !== void 0 && input.floor > total) total = input.floor;
+  total = roundUp(total, CENT);
+  if (!fitsAll(total)) {
+    const largest = first > others ? first : others;
+    const even = (total + n - 1n) / n;
+    total = n * roundUp(even > largest ? even : largest, CENT);
+  }
+  const resets = blocks.map((block) => block.resetsAt);
+  const resetsAt = resets.every((value) => value !== void 0) ? resets.reduce((latest, value) => value > latest ? value : latest) : void 0;
+  return { blocks, minimumTotal: String(total), ...resetsAt ? { resetsAt } : {} };
+}
+
+// src/lib/agent/onboarding.ts
+import { randomBytes, randomUUID as randomUUID2 } from "crypto";
+import { createPublicClient, erc20Abi, http } from "viem";
+
+// src/lib/agent/rail-profile.ts
 import { promises as fs2 } from "fs";
-import path5 from "path";
 import { z } from "zod";
-var XGATE_ROUTES = [
-  "/providers/anthropic/v1/messages",
-  "/providers/openai/v1/responses"
-];
+var AGENT_RAIL_PROFILE_ENV = "TASKMARKET_AGENT_RAIL_PROFILE";
+var AGENT_RAIL_PROFILE_FILE_ENV = "TASKMARKET_AGENT_RAIL_PROFILE_FILE";
+var AGENT_DEVELOPER_ENV = "TASKMARKET_AGENT_DEVELOPER";
+var BASE_MAINNET = "eip155:8453";
 var address = z.string().regex(/^0x[0-9a-fA-F]{40}$/, "expected a 0x-prefixed 20-byte address");
-var atomic2 = z.string().regex(/^(0|[1-9][0-9]{0,30})$/, "expected an integer amount string");
-var ruleId = z.string().regex(/^[a-z0-9][a-z0-9._-]{0,63}$/, "invalid id");
-var origin2 = z.string().url().refine((value) => {
-  const url = new URL(value);
-  return url.protocol === "https:" && !url.username && !url.password && url.pathname === "/" && !url.search && !url.hash && !value.endsWith("/");
-}, "expected an HTTPS origin such as https://api.xgate.run");
-var BaseBatchChannelRailSchema = z.object({
-  id: ruleId,
+var InferenceRailProfileSchema = z.object({
+  /** Shown to the user, e.g. `base-mainnet`. */
+  name: z.string().regex(/^[a-z0-9][a-z0-9-]{0,31}$/),
   kind: z.literal("base-batch-channel"),
+  origin: z.string().url(),
   network: z.enum(["eip155:8453", "eip155:84532"]),
-  /** The wallet that funds deposits and signs vouchers; must be the keystore's wallet. */
-  wallet: address,
-  origin: origin2,
-  route: z.enum(XGATE_ROUTES),
+  scheme: z.literal("batch-settlement"),
+  asset: address,
+  assetSymbol: z.literal("USDC"),
+  assetDecimals: z.literal(6),
   receiver: address,
   receiverAuthorizer: address,
-  salt: z.string().regex(/^0x[0-9a-fA-F]{64}$/, "expected a 32-byte hex salt"),
-  /** A block at or before the channel's first deposit; return scans start here. */
-  fromBlock: z.string().regex(/^(0|[1-9][0-9]{0,19})$/),
-  allocationId: z.string().min(1).max(128),
-  budgetAmount: atomic2,
-  depositAmount: atomic2.optional(),
-  policyRuleId: ruleId.optional()
+  withdrawDelaySeconds: z.number().int().positive().max(31536e3),
+  /** The environment variable the x402 policy names for this network's RPC URL. */
+  rpcUrlEnv: z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/),
+  /** Local devnet only: let the payer reach a loopback origin. */
+  allowPrivateNetwork: z.boolean().default(false)
 }).strict();
-var AgentPolicySchema = z.object({
-  version: z.literal(1),
-  /** xgate model ids the user approved. Only those the router also qualifies are offered. */
-  models: z.array(z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/, "invalid model id")).min(1).max(64),
-  rails: z.array(BaseBatchChannelRailSchema).min(1).max(XGATE_ROUTES.length)
-}).strict().superRefine((policy, ctx) => {
-  const ids = /* @__PURE__ */ new Set();
-  const routes = /* @__PURE__ */ new Set();
-  policy.rails.forEach((rail, index) => {
-    if (ids.has(rail.id)) {
-      ctx.addIssue({
-        code: "custom",
-        message: `duplicate rail id ${rail.id}`,
-        path: ["rails", index]
-      });
-    }
-    if (routes.has(rail.route)) {
-      ctx.addIssue({
-        code: "custom",
-        message: `more than one rail pays ${rail.route}`,
-        path: ["rails", index]
-      });
-    }
-    ids.add(rail.id);
-    routes.add(rail.route);
-  });
-  if (new Set(policy.models).size !== policy.models.length) {
-    ctx.addIssue({ code: "custom", message: "duplicate model id", path: ["models"] });
+var BASE_MAINNET_PROFILE = {
+  name: "base-mainnet",
+  kind: "base-batch-channel",
+  origin: "https://api.xgate.run",
+  network: BASE_MAINNET,
+  scheme: "batch-settlement",
+  asset: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+  assetSymbol: "USDC",
+  assetDecimals: 6,
+  withdrawDelaySeconds: 900,
+  rpcUrlEnv: "BASE_RPC_URL",
+  allowPrivateNetwork: false
+};
+var STAGING_PROFILE = {
+  name: "staging",
+  kind: "base-batch-channel",
+  origin: "https://devnet-api.xgate.run",
+  network: "eip155:84532",
+  scheme: "batch-settlement",
+  asset: "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+  assetSymbol: "USDC",
+  assetDecimals: 6,
+  receiver: "0x11E5BA3a2593c44d6d180054A4c8aa839202B8dd",
+  receiverAuthorizer: "0x3721824a31197dcDD2984cF43b92B6cc8A87c0Fb",
+  withdrawDelaySeconds: 3600,
+  rpcUrlEnv: "BASE_SEPOLIA_RPC_URL",
+  allowPrivateNetwork: false
+};
+var RAIL_PROFILES = {
+  [BASE_MAINNET_PROFILE.name]: BASE_MAINNET_PROFILE,
+  [STAGING_PROFILE.name]: STAGING_PROFILE
+};
+var NETWORK_NAMES = {
+  "eip155:8453": "Base",
+  "eip155:84532": "Base Sepolia (testnet)"
+};
+function unavailable(message) {
+  return new AgentLaunchError("inference_rail_unavailable", `${message}. Nothing was written.`);
+}
+function isLoopbackOrigin(origin) {
+  const host = new URL(origin).hostname;
+  return host === "localhost" || host === "[::1]" || /^127(\.\d{1,3}){3}$/.test(host);
+}
+function pinnedProfile(name) {
+  const pinned = Object.hasOwn(RAIL_PROFILES, name) ? RAIL_PROFILES[name] : void 0;
+  if (!pinned) {
+    throw unavailable(
+      `${AGENT_RAIL_PROFILE_ENV} names ${JSON.stringify(name)}, which is not a rail profile this CLI ships (${Object.keys(RAIL_PROFILES).join(", ")})`
+    );
   }
-});
-function getAgentPolicyPath() {
-  return path5.join(getTaskmarketHome(), "agent", "policy.json");
+  const parsed = InferenceRailProfileSchema.safeParse(pinned);
+  if (!parsed.success) {
+    throw unavailable(
+      `The ${name} inference channel for taskmarket agent is not published yet, so there is nothing to approve`
+    );
+  }
+  return parsed.data;
 }
-async function loadAgentPolicy(policyPath = getAgentPolicyPath()) {
+async function customProfile(file) {
   let raw;
   try {
-    raw = await fs2.readFile(policyPath, "utf8");
+    raw = JSON.parse(await fs2.readFile(file, "utf8"));
   } catch (error) {
-    if (error.code === "ENOENT") {
+    throw unavailable(
+      `${AGENT_RAIL_PROFILE_FILE_ENV} names ${file}, which could not be read as JSON: ${error.message}`
+    );
+  }
+  const parsed = InferenceRailProfileSchema.safeParse(raw);
+  if (!parsed.success) {
+    const issue = parsed.error.issues[0];
+    throw unavailable(`${file}: ${issue.path.join(".") || "(root)"}: ${issue.message}`);
+  }
+  const profile = parsed.data;
+  if (profile.network === BASE_MAINNET) {
+    throw unavailable(
+      `${file}: a custom rail profile cannot use Base mainnet (${BASE_MAINNET}); mainnet terms are pinned in the CLI`
+    );
+  }
+  if (Object.hasOwn(RAIL_PROFILES, profile.name)) {
+    throw unavailable(`${file}: the name ${profile.name} belongs to a pinned rail profile`);
+  }
+  const url = new URL(profile.origin);
+  if (url.protocol !== "https:" || url.origin !== profile.origin) {
+    throw unavailable(`${file}: origin must be an HTTPS origin with nothing after it`);
+  }
+  if (profile.allowPrivateNetwork && !isLoopbackOrigin(profile.origin)) {
+    throw unavailable(
+      `${file}: allowPrivateNetwork is only for a local devnet, whose origin is a loopback address`
+    );
+  }
+  return profile;
+}
+async function loadInferenceRailProfile(env = process.env) {
+  const name = env[AGENT_RAIL_PROFILE_ENV]?.trim();
+  const file = env[AGENT_RAIL_PROFILE_FILE_ENV]?.trim();
+  if (!file) return pinnedProfile(name || BASE_MAINNET_PROFILE.name);
+  if (name) {
+    throw unavailable(
+      `Set either ${AGENT_RAIL_PROFILE_ENV} (a pinned profile) or ${AGENT_RAIL_PROFILE_FILE_ENV} (a development profile), not both`
+    );
+  }
+  if (env[AGENT_DEVELOPER_ENV]?.trim() !== "1") {
+    throw unavailable(
+      `${AGENT_RAIL_PROFILE_FILE_ENV} is a development setting and is read only with ${AGENT_DEVELOPER_ENV}=1; set ${AGENT_RAIL_PROFILE_ENV} to a pinned profile (${Object.keys(RAIL_PROFILES).join(", ")}) instead`
+    );
+  }
+  return customProfile(file);
+}
+
+// src/lib/agent/onboarding.ts
+var ONBOARDING_DEFAULTS = {
+  depositUsd: "5",
+  perRequestUsd: "1",
+  /** The total defaults to this many deposits. */
+  totalDeposits: 2n,
+  expiryDays: 30,
+  computePerDayUsd: "10",
+  computePerMonthUsd: "20",
+  autoTopUpChunksPerDay: 1
+};
+var MAX_EXPIRY_DAYS = 365;
+var MAX_ATTEMPTS = 5;
+var DAY_MS = 864e5;
+function rate(value) {
+  const r = value;
+  if (typeof r?.numerator !== "string" || !/^\d{1,13}$/.test(r.numerator)) return void 0;
+  if (!Number.isSafeInteger(r.denominator) || r.denominator <= 0) return void 0;
+  return Number(r.numerator) / r.denominator;
+}
+async function readXgateCatalog(origin, fetchImpl = fetch) {
+  const response = await fetchImpl(`${origin}/v1/models`, {
+    signal: AbortSignal.timeout(15e3),
+    redirect: "error",
+    headers: { accept: "application/json" }
+  });
+  if (!response.ok) throw new Error(`the model catalog answered ${response.status}`);
+  const body = await response.json();
+  if (!Array.isArray(body.data)) throw new Error("the model catalog is malformed");
+  const models = [];
+  for (const row of body.data.slice(0, 128)) {
+    const id = row?.id;
+    if (typeof id !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(id)) continue;
+    const rates = row.execution_profile?.rates;
+    if (!rates) continue;
+    models.push({
+      id,
+      route: routeOfCatalogRow(row),
+      inputUsdPerMTok: rate(rates["input_uncached"]),
+      outputUsdPerMTok: rate(rates["output"])
+    });
+  }
+  return models;
+}
+var CHAIN_IDS = {
+  "eip155:8453": 8453,
+  "eip155:84532": 84532
+};
+async function readBaseChain(profile, rpcUrl, wallet) {
+  const client = createPublicClient({
+    transport: http(rpcUrl, { timeout: 15e3, retryCount: 1 })
+  });
+  const chainId = await client.getChainId();
+  if (chainId !== CHAIN_IDS[profile.network]) {
+    throw new Error(`the RPC serves chain ${chainId}, not ${profile.network}`);
+  }
+  const blockNumber = await client.getBlockNumber();
+  let usdcBalance;
+  try {
+    usdcBalance = await client.readContract({
+      address: profile.asset,
+      abi: erc20Abi,
+      functionName: "balanceOf",
+      args: [wallet]
+    });
+  } catch {
+  }
+  return { blockNumber, usdcBalance };
+}
+function defaultDeps() {
+  return {
+    now: () => /* @__PURE__ */ new Date(),
+    loadProfile: () => loadInferenceRailProfile(),
+    readCatalog: (origin) => readXgateCatalog(origin),
+    readChain: readBaseChain,
+    computePricing: fetchComputePricing,
+    computeBalance: readComputeCreditBalance,
+    computeConfig: loadComputeCreditConfig,
+    async computeSetUp(input, pricing) {
+      const plan = await planComputeCreditSetup(input, pricing);
+      return applyComputeCreditSetup(
+        plan,
+        `Approved at the terminal by the device owner during taskmarket agent setup: compute credit caps $${plan.caps.perDayUsd}/day, $${plan.caps.perMonthUsd}/month, $${plan.caps.totalUsd} total${plan.autoTopUp ? `; auto-top-up $${plan.autoTopUp.amountUsd} below ${plan.autoTopUp.thresholdCredits} credits, at most ${plan.autoTopUp.maxChunksPerDay}/day` : ""}`
+      );
+    },
+    async computeBuy(amountUsd) {
+      const bought = await buyComputeCredit({ amountUsd });
+      return { credits: bought.purchase.credits };
+    },
+    randomSalt: () => `0x${randomBytes(32).toString("hex")}`,
+    env: process.env
+  };
+}
+var usd = (atomic) => `$${atomicToUsd(String(atomic))}`;
+function tooManyAnswers() {
+  return new AgentLaunchError(
+    "setup_cancelled",
+    "Setup was cancelled after too many answers that could not be used; nothing more was written"
+  );
+}
+async function askUsd(prompter, question, fallbackAtomic, check = () => void 0) {
+  for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt += 1) {
+    const answer = (await prompter.ask(question, usd(fallbackAtomic))).replace(/^\$/, "");
+    let atomic;
+    try {
+      atomic = usdToAtomic(answer);
+    } catch {
+      prompter.say([`  Not a dollar amount above zero: ${answer}`]);
+      continue;
+    }
+    const problem = check(BigInt(atomic));
+    if (problem) {
+      prompter.say([`  ${problem}`]);
+      continue;
+    }
+    return atomic;
+  }
+  throw tooManyAnswers();
+}
+async function askWhole(prompter, question, fallback, min, max) {
+  for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt += 1) {
+    const answer = await prompter.ask(question, String(fallback));
+    if (/^\d{1,6}$/.test(answer) && Number(answer) >= min && Number(answer) <= max) {
+      return Number(answer);
+    }
+    prompter.say([`  Enter a whole number from ${min} to ${max}`]);
+  }
+  throw tooManyAnswers();
+}
+async function askYesNo(prompter, question, fallback) {
+  for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt += 1) {
+    const answer = (await prompter.ask(question, fallback ? "yes" : "no")).toLowerCase();
+    if (answer === "yes" || answer === "y") return true;
+    if (answer === "no" || answer === "n") return false;
+    prompter.say(["  Answer yes or no"]);
+  }
+  throw tooManyAnswers();
+}
+function duration(seconds) {
+  if (seconds % 3600 === 0) return `${seconds / 3600} hour${seconds === 3600 ? "" : "s"}`;
+  if (seconds % 60 === 0) return `${seconds / 60} minutes`;
+  return `${seconds} seconds`;
+}
+function price(value) {
+  return value === void 0 ? "unlisted" : `$${Number(value.toPrecision(6))}`;
+}
+function termsLines(profile, wallet, models, chain) {
+  return [
+    "",
+    "Inference terms",
+    `  Wallet:    ${wallet} (its key stays in the keystore and is never asked for)`,
+    ...chain.usdcBalance !== void 0 ? [`  Balance:   ${usd(chain.usdcBalance)} ${profile.assetSymbol}`] : [],
+    `  Origin:    ${profile.origin}`,
+    `  Network:   ${NETWORK_NAMES[profile.network]} (${profile.network})`,
+    `  Asset:     ${profile.assetSymbol} ${profile.asset}`,
+    `  Receiver:  ${profile.receiver} (authorizer ${profile.receiverAuthorizer})`,
+    `  Scheme:    ${profile.scheme}, profile ${profile.name}`,
+    "  Models and prices, per million tokens. Each turn is charged its actual usage, at most",
+    "  the per-request limit:",
+    ...models.map(
+      (model) => `    ${model.id}: input ${price(model.inputUsdPerMTok)}, output ${price(model.outputUsdPerMTok)}`
+    )
+  ];
+}
+function channelLines(profile, routes, limits, usedSoFar, blocked) {
+  const windows = depositWindows(limits.total, routes);
+  return [
+    "",
+    `Inference channel (x402 ${profile.scheme} on ${NETWORK_NAMES[profile.network]})`,
+    "  - Your deposit is the session budget. It is locked in escrow in the channel contract, not",
+    "    paid to anyone; each turn signs an off-chain voucher for what the turn actually used.",
+    "  - The deposit is gasless: it travels with your first paid turn and the facilitator pays its",
+    "    gas. Setup itself deposits nothing and buys nothing.",
+    `  - Unused funds are refundable: a cooperative refund returns them at once, or a withdrawal`,
+    `    returns them after the channel's withdraw delay of ${duration(profile.withdrawDelaySeconds)}.`,
+    "  - When the deposit runs low it is topped up to the deposit amount, never past the total.",
+    `  - Channels: ${routes.length} (${routes.join(", ")}); each has its own deposit, and all of`,
+    "    them together spend at most the total.",
+    `  Deposit (session budget): ${usd(limits.deposit)} a channel`,
+    `  Per-request limit:        ${usd(limits.perRequest)}`,
+    `  Total limit:              ${usd(limits.total)} for all channels together, for the life of the budget${usedSoFar > 0n ? `, including ${usd(usedSoFar)} already used (history is kept)` : ""}`,
+    ...routes.length > 1 ? [
+      `  Deposits a day:           at most ${routes.map((route) => `${usd(windows.get(route))} into ${slug(route)}`).join(", ")}, the total split between the channels`
+    ] : [`  Deposits a day:           at most ${usd(limits.total)}`],
+    `  Expires:                  ${limits.expiresAt}`,
+    ...blocked ? [
+      `  Note: today's deposit limit is used, so the first turn${blocked.resetsAt ? ` cannot deposit until ${utc(blocked.resetsAt)}` : " cannot deposit yet"} (a total of at least ${usd(blocked.minimumTotal)} would fit today).`
+    ] : []
+  ];
+}
+var utc = (iso) => iso.replace("T", " ").replace(/Z$/, " UTC");
+function depositWindowLines(check, limits) {
+  return [
+    "",
+    "Today's deposit limit is used",
+    ...check.blocks.map(
+      (block) => `  - ${slug(block.route)}: ${usd(block.used)} of its ${usd(block.window)} daily deposit limit is already used, so the new channel's first ${usd(block.deposit)} deposit does not fit.`
+    ),
+    "    Deposits count against the limit for 24 hours, even once refunded, so closing a channel",
+    "    does not free it.",
+    check.resetsAt ? `  The limit resets at ${utc(check.resetsAt)}. Until then the first turn is refused (policy_denied).` : "  A deposit or purchase whose outcome is unknown counts in full until it is reconciled",
+    ...check.resetsAt ? [] : [
+      "  (see taskmarket agent status), so waiting alone does not free the limit. Until then the",
+      "  first turn is refused (policy_denied)."
+    ],
+    "  Either:",
+    `  - raise the total to at least ${usd(check.minimumTotal)} (from ${usd(limits.total)}): the daily limit is a share of the total; or`,
+    check.resetsAt ? `  - keep ${usd(limits.total)} and start the first turn after ${utc(check.resetsAt)}.` : `  - keep ${usd(limits.total)} and reconcile the unknown outcome first.`
+  ];
+}
+var WORKSPACE_LINES = [
+  "",
+  "Remote workspace",
+  "  - Every tool the agent uses (read, write, edit, bash, grep, find, ls and your ! commands)",
+  "    runs in a Boat cloud VM in the EU, never on this machine. The VM holds no wallet key or",
+  "    credential, and it has open internet egress.",
+  "  - Uploaded: your project's git-tracked files and untracked files you select, respecting",
+  "    .gitignore. Secret-like files (.env*, private keys, credentials) are excluded unless you",
+  "    include them yourself. Changes come back only as a diff you review. Until workspace sync",
+  "    ships, the sandbox starts empty and nothing is uploaded.",
+  "  - Retention: Boat snapshots the workspace every minute while the VM runs and keeps the",
+  "    snapshots for the life of the sandbox; deleting the sandbox removes the snapshots only it",
+  "    uses. Boat keeps machine-assignment, IP and billing records."
+];
+function computeRateLines(pricing, availableCredits) {
+  return [
+    "",
+    "Compute credit (pays for the sandbox VM, separately from inference)",
+    ...pricing.machineTypes.map(
+      (machine) => `  ${machine.machineType} sandbox: $${machine.usdPerHour} an hour while it runs (${machine.creditsPerHour} credits), nothing while stopped`
+    ),
+    `  The rate is the provider's cost times ${pricing.markup}; $${pricing.usdPerCredit} a credit (rate card ${pricing.rateCardVersion}${pricing.salesApproval === "approved" ? "" : ", not yet approved for live sales"})`,
+    `  Available: ${availableCredits} credits`
+  ];
+}
+function slug(route) {
+  return route.split("/")[2];
+}
+function shortId() {
+  return randomUUID2().replace(/-/g, "").slice(0, 12);
+}
+async function preflight(deps, profile, wallet, prompter) {
+  prompter.say(["", "Checking the inference terms, the chain and compute (read-only)..."]);
+  const step = async (name, read) => {
+    try {
+      return await read();
+    } catch (error) {
+      if (error instanceof AgentLaunchError) throw error;
       throw new AgentLaunchError(
-        "setup_required",
-        `taskmarket agent has no approved spending policy at ${policyPath}`
+        "preflight_failed",
+        `Setup could not read ${name}: ${error.message}. Nothing was written.`,
+        { check: name }
       );
     }
+  };
+  const x402Policy = await step(
+    "the x402 policy",
+    () => loadX402Policy(getX402PolicyPath(), { allowMissing: true })
+  );
+  const rpcUrlEnv = x402Policy.networks[profile.network]?.rpcUrlEnv ?? profile.rpcUrlEnv;
+  const rpcUrl = deps.env[rpcUrlEnv]?.trim();
+  if (!rpcUrl) {
+    throw new AgentLaunchError(
+      "preflight_failed",
+      `Set ${rpcUrlEnv} to a ${NETWORK_NAMES[profile.network]} RPC URL; the channel's deposits and refunds are checked on chain. Nothing was written.`,
+      { check: "rpc" }
+    );
+  }
+  const models = await step("the xgate model catalog", () => deps.readCatalog(profile.origin));
+  if (models.length === 0) {
+    throw new AgentLaunchError(
+      "no_qualified_models",
+      `xgate at ${profile.origin} offers no model a channel can pay for`
+    );
+  }
+  const chain = await step("the chain", () => deps.readChain(profile, rpcUrl, wallet));
+  const pricing = await step("the compute pricing", () => deps.computePricing());
+  const availableCredits = await step("the compute credit balance", () => deps.computeBalance());
+  return { x402Policy, rpcUrlEnv, rpcUrl, models, chain, pricing, availableCredits };
+}
+function totalRules(input) {
+  const { deposit, perRequest, previousTotal, usedSoFar, channels } = input;
+  const sharedFloor = BigInt(deposit) * BigInt(channels);
+  const floor = [sharedFloor, previousTotal, usedSoFar + BigInt(perRequest)].reduce(
+    (a, b) => a > b ? a : b
+  );
+  const problem = (value) => {
+    if (value < BigInt(deposit)) return "The total must be at least the deposit";
+    if (value < sharedFloor) {
+      return `The ${channels} channels share the total, and each needs room for one deposit a day, so it must be at least ${usd(sharedFloor)}`;
+    }
+    if (value < previousTotal) return `The total can only go up from ${usd(previousTotal)}`;
+    if (value < usedSoFar + BigInt(perRequest)) {
+      return `The total must leave room for one request after the ${usd(usedSoFar)} already used`;
+    }
+    return void 0;
+  };
+  return { floor, problem };
+}
+async function askLimits(prompter, previous, usedSoFar, exhausted, now, channels) {
+  prompter.say([
+    "",
+    previous ? "Renew the inference limits (amounts in USD; Enter keeps the value shown)" : "Inference limits (amounts in USD; Enter keeps the value shown)"
+  ]);
+  const deposit = await askUsd(
+    prompter,
+    "Deposit, the session budget locked in escrow",
+    previous?.limits.deposit ?? usdToAtomic(ONBOARDING_DEFAULTS.depositUsd)
+  );
+  const perRequestFallback = previous?.limits.perRequest ?? usdToAtomic(ONBOARDING_DEFAULTS.perRequestUsd);
+  const perRequest = await askUsd(
+    prompter,
+    "Per-request limit, the most one turn may cost",
+    BigInt(perRequestFallback) > BigInt(deposit) ? deposit : perRequestFallback,
+    (value) => value > BigInt(deposit) ? "The per-request limit must fit in the deposit" : void 0
+  );
+  const previousTotal = previous ? BigInt(previous.limits.total) : 0n;
+  const { floor, problem } = totalRules({
+    deposit,
+    perRequest,
+    previousTotal,
+    usedSoFar,
+    channels
+  });
+  let totalFallback = previous ? previousTotal + (exhausted ? BigInt(deposit) : 0n) : BigInt(deposit) * ONBOARDING_DEFAULTS.totalDeposits;
+  if (totalFallback < floor) totalFallback = floor;
+  const total = await askUsd(
+    prompter,
+    previous ? `Total limit, the most this budget may ever spend (${usd(usedSoFar)} used so far)` : "Total limit, the most this budget may ever spend",
+    String(totalFallback),
+    problem
+  );
+  const days = await askWhole(
+    prompter,
+    "Expires after how many days",
+    ONBOARDING_DEFAULTS.expiryDays,
+    1,
+    MAX_EXPIRY_DAYS
+  );
+  return {
+    perRequest,
+    deposit,
+    total,
+    expiresAt: new Date(now.getTime() + days * DAY_MS).toISOString()
+  };
+}
+function sameTerms(rail, profile, wallet) {
+  const same = (a, b) => a.toLowerCase() === b.toLowerCase();
+  return rail.origin === profile.origin && rail.network === profile.network && same(rail.asset, profile.asset) && same(rail.receiver, profile.receiver) && same(rail.receiverAuthorizer, profile.receiverAuthorizer) && same(rail.wallet, wallet);
+}
+function channelSessionKey(rail, rpcUrl, journalPath) {
+  const channel = {
+    network: rail.network,
+    payer: rail.wallet,
+    receiver: rail.receiver,
+    receiverAuthorizer: rail.receiverAuthorizer,
+    salt: rail.salt
+  };
+  return createBaseChannelPayer({
+    channel,
+    reader: createBaseChannelRpcReader({ channel, rpcUrl, fromBlock: BigInt(rail.fromBlock) }),
+    resourceUrl: `${rail.origin}${rail.route}`,
+    journalPath,
+    loadPolicy: (options) => loadX402Policy(getX402PolicyPath(), options),
+    getAccount: async () => {
+      throw new Error("onboarding never signs");
+    },
+    allocationId: rail.allocationId,
+    budgetAmount: rail.limits.total,
+    depositAmount: rail.limits.deposit,
+    policyRuleId: rail.policyRuleId
+  }).sessionKey;
+}
+function ruleFor(rail, profile, depositWindow) {
+  return {
+    id: rail.policyRuleId,
+    enabled: true,
+    priority: 100,
+    origin: rail.origin,
+    pathPrefix: rail.route,
+    methods: ["POST"],
+    unattended: true,
+    allowPrivateNetwork: profile.allowPrivateNetwork,
+    maxAuthorizationSeconds: 300,
+    payments: [
+      {
+        scheme: rail.scheme,
+        network: rail.network,
+        asset: rail.asset,
+        payTo: rail.receiver,
+        displaySymbol: profile.assetSymbol,
+        displayDecimals: profile.assetDecimals,
+        maxPerPayment: rail.limits.perRequest,
+        // Each deposit and top-up counts against this window once (ADR-0236). The rails' windows
+        // split the total, so together they admit at most the total in a day.
+        spendWindow: { seconds: 86400, max: depositWindow }
+      }
+    ]
+  };
+}
+async function openBudgetCap(store, id) {
+  try {
+    const budget = await store.get(id);
+    return budget.allocation.closedAt ? void 0 : budget.allocation.caps.amount;
+  } catch (error) {
+    if (error.code === "allocation_not_found") return void 0;
     throw error;
   }
-  let parsed;
+}
+async function openBudget(store, rail, note) {
+  const cap = await openBudgetCap(store, rail.budgetAllocationId);
+  if (cap !== void 0 && BigInt(cap) < BigInt(rail.limits.total)) {
+    await store.raiseCap({
+      allocationId: rail.budgetAllocationId,
+      caps: { amount: rail.limits.total },
+      note
+    });
+  }
+  if (cap === void 0) {
+    await store.open(
+      {
+        id: rail.budgetAllocationId,
+        kind: "agent_session",
+        exposure: "inference",
+        network: rail.network,
+        asset: rail.asset,
+        caps: { amount: rail.limits.total }
+      },
+      { note }
+    );
+  }
+}
+async function openSession(store, rail, sessionKey) {
+  await store.open({
+    id: rail.allocationId,
+    kind: "agent_session",
+    exposure: "inference",
+    parentId: rail.budgetAllocationId,
+    network: rail.network,
+    asset: rail.asset,
+    caps: { amount: rail.limits.total },
+    funding: { railId: BASE_CHANNEL_RAIL_ID, sessionKey }
+  });
+}
+async function computeStep(deps, prompter, pricing, availableCredits, renewing) {
+  if (renewing && Number(availableCredits) > 0) {
+    return { action: "not_offered", availableCredits };
+  }
+  prompter.say(computeRateLines(pricing, availableCredits));
+  const sizes = pricing.denominations.map((entry) => entry.amountUsd);
+  const fallback = (pricing.denominations.find((entry) => entry.default) ?? pricing.denominations[0]).amountUsd;
+  let amountUsd = -1;
+  for (let attempt = 0; attempt < MAX_ATTEMPTS && amountUsd < 0; attempt += 1) {
+    const answer = (await prompter.ask(
+      `Buy a first chunk of compute credit in USD: ${sizes.join(", ")}, or 0 for none`,
+      String(fallback)
+    )).replace(/^\$/, "");
+    if (answer === "0" || sizes.map(String).includes(answer)) amountUsd = Number(answer);
+    else prompter.say([`  Choose one of ${sizes.join(", ")}, or 0`]);
+  }
+  if (amountUsd < 0) throw tooManyAnswers();
+  let config = await deps.computeConfig();
+  let setup;
+  if (!config) {
+    const autoTopUp = await askYesNo(
+      prompter,
+      "Turn on auto-top-up, buying one chunk when credit runs low",
+      false
+    );
+    if (amountUsd === 0 && !autoTopUp) return { action: "skipped" };
+    const chunk = amountUsd || fallback;
+    const minimumDay = usdToAtomic(String(chunk));
+    const perDay = await askUsd(
+      prompter,
+      "Compute cap: most bought in one UTC day",
+      BigInt(usdToAtomic(ONBOARDING_DEFAULTS.computePerDayUsd)) < BigInt(minimumDay) ? minimumDay : usdToAtomic(ONBOARDING_DEFAULTS.computePerDayUsd),
+      (value) => value < BigInt(minimumDay) ? `The daily cap must cover a $${chunk} chunk` : void 0
+    );
+    const perMonth = await askUsd(
+      prompter,
+      "Compute cap: most bought in one UTC month",
+      BigInt(usdToAtomic(ONBOARDING_DEFAULTS.computePerMonthUsd)) < BigInt(perDay) ? perDay : usdToAtomic(ONBOARDING_DEFAULTS.computePerMonthUsd),
+      (value) => value < BigInt(perDay) ? "The monthly cap must be at least the daily cap" : void 0
+    );
+    setup = { perDayUsd: atomicToUsd(perDay), perMonthUsd: atomicToUsd(perMonth) };
+    if (autoTopUp) {
+      const chunkCredits = pricing.denominations.find((entry) => entry.amountUsd === chunk)?.credits ?? "1";
+      const threshold = await prompter.ask(
+        "Auto-top-up: buy when available credit falls below (credits)",
+        String(Math.max(1, Math.floor(Number(chunkCredits) / 4)))
+      );
+      const maxChunks = await askWhole(
+        prompter,
+        `Auto-top-up: most $${chunk} chunks in one UTC day`,
+        ONBOARDING_DEFAULTS.autoTopUpChunksPerDay,
+        1,
+        Math.max(1, Math.floor(Number(atomicToUsd(perDay)) / chunk))
+      );
+      setup.autoTopUp = {
+        thresholdCredits: threshold,
+        amountUsd: chunk,
+        maxChunksPerDay: maxChunks
+      };
+    }
+  } else if (amountUsd === 0) {
+    return { action: "skipped" };
+  }
+  const credits = pricing.denominations.find((entry) => entry.amountUsd === amountUsd)?.credits;
+  const approved = await prompter.confirm(
+    [
+      "",
+      ...setup ? [
+        `Approve a compute allocation capped at $${setup.perDayUsd} a day and $${setup.perMonthUsd} a month${setup.autoTopUp ? `, with auto-top-up of $${setup.autoTopUp.amountUsd} below ${setup.autoTopUp.thresholdCredits} credits, at most ${setup.autoTopUp.maxChunksPerDay} a day` : ""}`
+      ] : [],
+      ...amountUsd > 0 ? [
+        `Buy $${amountUsd} of compute credit (${credits} credits) now, from your wallet over x402`
+      ] : [],
+      ""
+    ].join("\n")
+  );
+  if (!approved) {
+    prompter.say(["No compute credit was approved or bought."]);
+    return { action: "declined" };
+  }
   try {
-    parsed = JSON.parse(raw);
-  } catch {
-    throw new AgentLaunchError("invalid_agent_policy", `${policyPath} is not valid JSON`);
+    if (setup) {
+      await deps.computeSetUp(setup, pricing);
+      config = await deps.computeConfig();
+    }
+    if (amountUsd === 0) return { action: "skipped" };
+    const bought = await deps.computeBuy(amountUsd);
+    prompter.say([`Bought $${amountUsd} of compute credit (${bought.credits} credits).`]);
+    return { action: "bought", amountUsd, credits: bought.credits };
+  } catch (error) {
+    const code = String(error.code ?? "unknown");
+    const message = error.message;
+    prompter.say([
+      `The compute credit purchase did not complete (${code}): ${message}`,
+      "Your inference policy is saved. Buy credit later with taskmarket agent credits buy."
+    ]);
+    return { action: "failed", code, message };
   }
-  const result = AgentPolicySchema.safeParse(parsed);
-  if (!result.success) {
-    const issue = result.error.issues[0];
+}
+async function runOnboarding(input) {
+  const deps = { ...defaultDeps(), ...input.deps };
+  const { prompter, walletAddress: wallet } = input;
+  const previousPolicy = input.renew?.policy;
+  const reasons = input.renew?.assessment.reasons ?? [];
+  prompter.say(
+    previousPolicy ? [
+      "taskmarket agent: your spending policy needs renewal",
+      ...reasons.map(
+        ({ reason, railId }) => `  - ${railId ? `${railId}: ` : ""}${{
+          expired: "the policy expired",
+          exhausted: "the budget has less left than one request may cost",
+          allocation_unavailable: "its budget allocation is closed or missing",
+          consent_outdated: "the remote workspace terms changed"
+        }[reason]}`
+      ),
+      "  Renewing keeps the spending history: nothing already used is forgotten."
+    ] : [
+      "taskmarket agent: first-run setup",
+      "Nothing is spent until you approve it. The agent pays for inference from a channel you",
+      "fund, and for its cloud sandbox from prepaid compute credit."
+    ]
+  );
+  const profile = await deps.loadProfile();
+  const checks = await preflight(deps, profile, wallet, prompter);
+  const models = checks.models.filter((model) => XGATE_ROUTES.includes(model.route));
+  const routes = XGATE_ROUTES.filter((route) => models.some((model) => model.route === route));
+  if (routes.length === 0) {
     throw new AgentLaunchError(
-      "invalid_agent_policy",
-      `${policyPath}: ${issue.path.join(".") || "(root)"}: ${issue.message}`
+      "no_qualified_models",
+      `xgate at ${profile.origin} offers no model a channel can pay for`
     );
   }
-  return result.data;
+  prompter.say(termsLines(profile, wallet, models, checks.chain));
+  const now = deps.now();
+  const previousRails = new Map(
+    (previousPolicy?.rails ?? []).filter((rail) => sameTerms(rail, profile, wallet)).map((rail) => [rail.route, rail])
+  );
+  const used = new Map(
+    (input.renew?.assessment.usage ?? []).map((u) => [u.railId, BigInt(u.used)])
+  );
+  const usedSoFar = [...previousRails.values()].reduce((max, rail) => {
+    const value = used.get(rail.id) ?? 0n;
+    return value > max ? value : max;
+  }, 0n);
+  const exhausted = reasons.some((r) => r.reason === "exhausted");
+  const previousRail = previousRails.values().next().value;
+  let limits = await askLimits(prompter, previousRail, usedSoFar, exhausted, now, routes.length);
+  const journalPath = getX402JournalPath();
+  const store = createX402Allocations({
+    journalPath,
+    loadPolicy: (options) => loadX402Policy(getX402PolicyPath(), options)
+  });
+  let budgetAllocationId;
+  for (const rail of previousRails.values()) {
+    if (await openBudgetCap(store, rail.budgetAllocationId) !== void 0) {
+      budgetAllocationId = rail.budgetAllocationId;
+      break;
+    }
+  }
+  budgetAllocationId ??= `agent-inference-${shortId()}`;
+  const openSessions = /* @__PURE__ */ new Set();
+  for (const rail of previousRails.values()) {
+    if (rail.budgetAllocationId === budgetAllocationId && await openBudgetCap(store, rail.allocationId) !== void 0) {
+      openSessions.add(rail.allocationId);
+    }
+  }
+  const keepsChannel = (previous, next) => previous !== void 0 && openSessions.has(previous.allocationId) && previous.limits.deposit === next.deposit && previous.limits.total === next.total;
+  const { floor: totalFloor, problem: totalProblem } = totalRules({
+    deposit: limits.deposit,
+    perRequest: limits.perRequest,
+    previousTotal: previousRail ? BigInt(previousRail.limits.total) : 0n,
+    usedSoFar,
+    channels: routes.length
+  });
+  const windowCheck = (next) => checkDepositWindows({
+    journalPath,
+    now,
+    routes,
+    rails: routes.map((route) => {
+      const previous = previousRails.get(route);
+      const id = previous?.id ?? `xgate-${slug(route)}`;
+      return {
+        railId: id,
+        route,
+        ruleId: previous?.policyRuleId ?? `taskmarket-agent-${id}`,
+        network: profile.network,
+        asset: profile.asset,
+        newChannel: !keepsChannel(previous, next)
+      };
+    }),
+    limits: next,
+    floor: totalFloor
+  });
+  let blocked = await windowCheck(limits);
+  for (let attempt = 0; blocked && attempt < MAX_ATTEMPTS; attempt += 1) {
+    prompter.say(depositWindowLines(blocked, limits));
+    const total = await askUsd(
+      prompter,
+      `Total limit (Enter keeps ${usd(limits.total)}; at least ${usd(blocked.minimumTotal)} fits today)`,
+      limits.total,
+      totalProblem
+    );
+    if (total === limits.total) break;
+    limits = { ...limits, total };
+    blocked = await windowCheck(limits);
+  }
+  prompter.say(channelLines(profile, routes, limits, usedSoFar, blocked));
+  if (!await prompter.confirm("Open the inference channel with these limits?")) {
+    throw new AgentLaunchError(
+      "setup_declined",
+      "The inference channel was not approved. Nothing was written and nothing was bought.",
+      { step: "channel" }
+    );
+  }
+  const consentCurrent = previousPolicy?.workspace.consentVersion === WORKSPACE_CONSENT_VERSION;
+  if (!consentCurrent) {
+    prompter.say(WORKSPACE_LINES);
+    if (!await prompter.confirm("Use the remote workspace on these terms?")) {
+      throw new AgentLaunchError(
+        "setup_declined",
+        "The remote workspace terms were not accepted, and the agent runs its tools only there. Nothing was written and nothing was bought.",
+        { step: "workspace" }
+      );
+    }
+  }
+  const rails = routes.map((route) => {
+    const previous = previousRails.get(route);
+    if (previous && keepsChannel(previous, limits)) {
+      return { ...previous, withdrawDelaySeconds: profile.withdrawDelaySeconds, limits };
+    }
+    const id = previous?.id ?? `xgate-${slug(route)}`;
+    return {
+      id,
+      kind: "base-batch-channel",
+      wallet,
+      network: profile.network,
+      scheme: profile.scheme,
+      asset: profile.asset,
+      origin: profile.origin,
+      route,
+      receiver: profile.receiver,
+      receiverAuthorizer: profile.receiverAuthorizer,
+      salt: deps.randomSalt(),
+      fromBlock: checks.chain.blockNumber.toString(),
+      withdrawDelaySeconds: profile.withdrawDelaySeconds,
+      budgetAllocationId,
+      allocationId: `agent-inference-${slug(route)}-${shortId()}`,
+      policyRuleId: previous?.policyRuleId ?? `taskmarket-agent-${id}`,
+      limits
+    };
+  });
+  const retired = (previousPolicy?.rails ?? []).filter(
+    (rail) => !rails.some((next) => next.salt === rail.salt)
+  );
+  const settled = await settledRetiredRails(store, previousPolicy?.retiredRails ?? []);
+  const retiredRails = [
+    ...retired,
+    ...(previousPolicy?.retiredRails ?? []).filter((rail) => !settled.has(rail.salt))
+  ];
+  if (retiredRails.length > MAX_RETIRED_RAILS) {
+    throw new AgentLaunchError(
+      "retired_rails_full",
+      `The policy already lists ${retiredRails.length - retired.length} retired channels that may still hold refundable deposits, and this change would retire ${retired.length} more, past the limit of ${MAX_RETIRED_RAILS}. Close and refund old channels first; a retired channel is never forgotten while it may hold funds. Nothing was written.`,
+      { retired: retiredRails.length, limit: MAX_RETIRED_RAILS }
+    );
+  }
+  const windows = depositWindows(limits.total, routes);
+  const rules = rails.map((rail) => ruleFor(rail, profile, windows.get(rail.route)));
+  const retiredRules = new Set(
+    retired.map((rail) => rail.policyRuleId).filter((id) => !rules.some((rule) => rule.id === id))
+  );
+  const x402Policy = parseX402Policy({
+    ...checks.x402Policy,
+    networks: {
+      ...checks.x402Policy.networks,
+      [profile.network]: checks.x402Policy.networks[profile.network] ?? {
+        rpcUrlEnv: checks.rpcUrlEnv
+      }
+    },
+    rules: [
+      ...checks.x402Policy.rules.filter((rule) => !rules.some((next) => next.id === rule.id)).map((rule) => retiredRules.has(rule.id) ? { ...rule, enabled: false } : rule),
+      ...rules
+    ]
+  });
+  await saveX402Policy(x402Policy, getX402PolicyPath());
+  const newRails = rails.filter((rail) => previousRails.get(rail.route)?.salt !== rail.salt);
+  if (newRails.length > 0) {
+    const note = `Approved at the terminal by the device owner during taskmarket agent ${previousPolicy ? "renewal" : "setup"}: rails ${rails.map((rail) => rail.id).join(", ")} on ${profile.network}, deposit ${usd(
+      limits.deposit
+    )} a channel, per request ${usd(limits.perRequest)}, total ${usd(
+      limits.total
+    )} for all channels together, expires ${limits.expiresAt}`;
+    await openBudget(store, newRails[0], note);
+    for (const rail of newRails) {
+      await openSession(store, rail, channelSessionKey(rail, checks.rpcUrl, journalPath));
+    }
+  }
+  const policy = {
+    version: 1,
+    approvedAt: now.toISOString(),
+    models: models.map((model) => model.id),
+    rails,
+    retiredRails,
+    workspace: consentCurrent ? previousPolicy.workspace : { consentVersion: WORKSPACE_CONSENT_VERSION, approvedAt: now.toISOString() }
+  };
+  await saveAgentPolicy(policy);
+  for (const rail of retired) {
+    await store.close(rail.allocationId).catch(() => void 0);
+  }
+  const replaced = retired.filter((rail) => routes.includes(rail.route));
+  const unused = retired.filter((rail) => !routes.includes(rail.route));
+  if (replaced.length > 0) {
+    prompter.say([
+      "",
+      `A new channel replaces ${replaced.map((rail) => rail.id).join(", ")}: a channel's deposit and total are fixed for its life.`,
+      "The replaced channel buys nothing more. Its unused deposit stays in escrow and refundable,",
+      "and it stays listed in the policy so it can be refunded."
+    ]);
+  }
+  if (unused.length > 0) {
+    prompter.say([
+      "",
+      `No approved model uses ${unused.map((rail) => `${rail.id} (${rail.route})`).join(", ")} now, so it buys nothing more.`,
+      "Its unused deposit stays in escrow and refundable, and it stays listed in the policy so it",
+      "can be refunded."
+    ]);
+  }
+  prompter.say([
+    "",
+    "Spending policy saved. Later launches reuse it until it expires or runs out."
+  ]);
+  const compute = await computeStep(
+    deps,
+    prompter,
+    checks.pricing,
+    checks.availableCredits,
+    previousPolicy !== void 0
+  );
+  return { policy, compute };
+}
+
+// src/lib/agent/prompter.ts
+import { createInterface } from "readline";
+function cancelled() {
+  return new AgentLaunchError(
+    "setup_cancelled",
+    "Setup was cancelled; nothing more was written or bought"
+  );
 }
-function selectModels(policy, requested) {
-  if (requested === void 0) return [...policy.models];
-  if (!policy.models.includes(requested)) {
+function terminalPrompter(input = process.stdin, output = process.stderr) {
+  let readline;
+  let closed = false;
+  let reject;
+  const open = () => {
+    if (readline) return readline;
+    readline = createInterface({ input, output, terminal: true });
+    readline.on("SIGINT", () => {
+      output.write("\n");
+      reject?.(cancelled());
+    });
+    readline.on("close", () => {
+      closed = true;
+      reject?.(cancelled());
+    });
+    return readline;
+  };
+  const question = (text) => new Promise((resolve, fail) => {
+    if (closed) {
+      fail(cancelled());
+      return;
+    }
+    reject = fail;
+    open().question(text, (answer) => {
+      reject = void 0;
+      resolve(answer);
+    });
+  });
+  return {
+    say(lines3) {
+      output.write(`${lines3.join("\n")}
+`);
+    },
+    async ask(text, fallback) {
+      const answer = (await question(`${text} [${fallback}]: `)).trim();
+      return answer === "" ? fallback : answer;
+    },
+    async confirm(text) {
+      const answer = await question(`${text} Type yes to approve: `);
+      return answer.trim().toLowerCase() === "yes";
+    },
+    close() {
+      reject = void 0;
+      readline?.close();
+      readline = void 0;
+    }
+  };
+}
+
+// src/lib/agent/setup.ts
+async function ensureAgentPolicy(options) {
+  const policy = await readAgentPolicy();
+  let assessment;
+  if (policy) {
+    const allocations = createX402Allocations({ journalPath: getX402JournalPath() });
+    assessment = await assessAgentPolicy(policy, {
+      now: options.now,
+      allocation: (id) => allocations.get(id)
+    });
+    if (assessment.reasons.length === 0) return void 0;
+  }
+  if (!options.interactive) {
+    const reasons = assessment ? [...new Set(assessment.reasons.map(({ reason }) => reason))] : ["no_policy"];
+    const window2 = policy && assessment ? await renewalDepositWindow(policy, assessment, options.now ?? /* @__PURE__ */ new Date()) : void 0;
     throw new AgentLaunchError(
-      "model_not_allowed",
-      `Model ${requested} is not in the approved spending policy (${policy.models.join(", ")})`
+      "setup_required",
+      policy ? `The agent spending policy at ${getAgentPolicyPath()} needs renewal (${reasons.join(", ")}); run taskmarket agent at a terminal to renew it. Its spending history is kept.${window2 ? ` ${depositWindowMessage(window2, policy)}` : ""}` : `taskmarket agent has no approved spending policy at ${getAgentPolicyPath()}; run taskmarket agent at a terminal to set it up`,
+      {
+        reasons,
+        ...window2 ? {
+          depositWindow: {
+            reason: "deposit_window_used",
+            total: policy.rails[0].limits.total,
+            minimumTotal: window2.minimumTotal,
+            ...window2.resetsAt ? { resetsAt: window2.resetsAt } : {},
+            rails: window2.blocks
+          }
+        } : {}
+      }
     );
   }
-  return [requested];
+  const prompter = (options.prompter ?? terminalPrompter)();
+  try {
+    return await (options.onboard ?? runOnboarding)({
+      prompter,
+      walletAddress: options.walletAddress,
+      ...policy && assessment ? { renew: { policy, assessment } } : {}
+    });
+  } finally {
+    prompter.close();
+  }
+}
+async function renewalDepositWindow(policy, assessment, now) {
+  const limits = policy.rails[0].limits;
+  const reopened = new Set(
+    assessment.reasons.filter(({ reason }) => reason === "allocation_unavailable").map(({ railId }) => railId)
+  );
+  const used = assessment.usage.reduce(
+    (max, usage) => BigInt(usage.used) > max ? BigInt(usage.used) : max,
+    0n
+  );
+  const floors = [
+    BigInt(limits.total),
+    BigInt(limits.deposit) * BigInt(policy.rails.length),
+    used + BigInt(limits.perRequest)
+  ];
+  try {
+    return await checkDepositWindows({
+      journalPath: getX402JournalPath(),
+      now,
+      routes: policy.rails.map((rail) => rail.route),
+      rails: policy.rails.map((rail) => ({
+        railId: rail.id,
+        route: rail.route,
+        ruleId: rail.policyRuleId,
+        network: rail.network,
+        asset: rail.asset,
+        newChannel: reopened.has(rail.id)
+      })),
+      limits,
+      floor: floors.reduce((a, b) => a > b ? a : b)
+    });
+  } catch {
+    return void 0;
+  }
+}
+function depositWindowMessage(window2, policy) {
+  const usd2 = formatUsdc;
+  const total = policy.rails[0].limits.total;
+  const railIds = window2.blocks.map((block) => block.railId).join(", ");
+  return window2.resetsAt ? `Today's deposit limit is used: renewing with the same total (${usd2(total)}) leaves ${railIds} no room for its first deposit until it resets at ${window2.resetsAt}, and its first turn would be refused (policy_denied). Raise the total to at least ${usd2(window2.minimumTotal)} at renewal, or wait until ${window2.resetsAt}.` : `Today's deposit limit is used: renewing with the same total (${usd2(total)}) leaves ${railIds} no room for its first deposit while a deposit or purchase of unknown outcome counts in full, and its first turn would be refused (policy_denied). Raise the total to at least ${usd2(window2.minimumTotal)} at renewal, or reconcile the unknown outcome first.`;
 }
 
 // src/lib/agent/signals.ts
@@ -21544,10 +22254,10 @@ var STOP_TIMEOUT_MS = 15e3;
 var log = (message) => process.stderr.write(`[taskmarket] ${message}
 `);
 function sessionLog() {
-  const file = path6.join(getTaskmarketHome(), "agent", "session.log");
+  const file = path5.join(getTaskmarketHome(), "agent", "session.log");
   return (message) => {
     try {
-      mkdirSync(path6.dirname(file), { recursive: true, mode: 448 });
+      mkdirSync(path5.dirname(file), { recursive: true, mode: 448 });
       appendFileSync(file, `${(/* @__PURE__ */ new Date()).toISOString()} ${message}
 `, { mode: 384 });
     } catch {
@@ -21564,7 +22274,16 @@ function withTimeout(promise, ms) {
   ]).finally(() => clearTimeout(timer));
 }
 async function runAgent(options) {
-  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+  const interactive = Boolean(process.stdin.isTTY && process.stdout.isTTY);
+  if (!await keystoreExists()) {
+    throw new AgentLaunchError(
+      "wallet_required",
+      "No wallet is set up. Import one with `taskmarket wallet import` (or create one with `taskmarket init`), then run taskmarket agent again; this command never asks for a key"
+    );
+  }
+  const keystore = await loadKeystore();
+  await ensureAgentPolicy({ interactive, walletAddress: keystore.walletAddress });
+  if (!interactive) {
     throw new AgentLaunchError(
       "interactive_terminal_required",
       "taskmarket agent opens an interactive session and needs a terminal"
@@ -21574,7 +22293,7 @@ async function runAgent(options) {
     onCleanupSignal: () => log("Finishing: settling purchases and stopping the sandbox")
   });
   try {
-    return await runSession(options, signals);
+    return await runSession(options, signals, keystore);
   } finally {
     signals.dispose();
   }
@@ -21585,37 +22304,25 @@ function interruptedLaunch() {
     "The launch was interrupted before Pi started"
   );
 }
-async function runSession(options, signals) {
+async function runSession(options, signals, keystore) {
   const checkInterrupted = () => {
     if (signals.interrupted) throw interruptedLaunch();
   };
-  if (!await keystoreExists()) {
-    throw new AgentLaunchError(
-      "wallet_required",
-      "No wallet is set up; run `taskmarket wallet import` or `taskmarket init` first"
-    );
-  }
-  const keystore = await loadKeystore();
-  const policy = await loadAgentPolicy();
-  const models = selectModels(policy, options.model);
-  let account;
-  const getAccount = () => {
-    account ??= createWalletAccountFromKeystore(keystore).catch((error) => {
-      account = void 0;
-      throw error;
-    });
-    return account;
-  };
-  const rails = await createAgentRails({
-    policy,
-    models,
-    walletAddress: keystore.walletAddress,
-    getAccount
+  let models = [];
+  const { rails } = await openAgentChannels({
+    keystore,
+    models: (policy) => models = selectModels(policy, options.model)
   });
   checkInterrupted();
   await reconcileLeftoverOperations(rails, log);
   checkInterrupted();
-  const transport = createAgentTransport(rails);
+  const observeCompute = computeCreditObserver(sessionLog());
+  const budget = createSessionBudget({
+    rails,
+    transport: createAgentTransport(rails),
+    observeCompute
+  });
+  const transport = budget.transport;
   let offered;
   try {
     offered = (await transport.models(AbortSignal.any([AbortSignal.timeout(3e4), signals.setupSignal]))).map((row) => row.id);
@@ -21633,15 +22340,15 @@ async function runSession(options, signals) {
       `None of the approved models (${models.join(", ")}) is qualified by xgate on a route the policy pays for`
     );
   }
-  const observeCompute = computeCreditObserver(sessionLog());
   const observations = /* @__PURE__ */ new Set();
   const createBroker = () => new BrokerConnector({
     apiUrl: apiUrl(),
     deviceId: keystore.deviceId,
     apiToken: keystore.apiToken,
     purpose: "interactive",
-    idempotencyKey: randomUUID2(),
+    idempotencyKey: randomUUID3(),
     onCreditWarning: (warning) => {
+      budget.noteCreditWarning(warning);
       if (warning !== "low_credit" && warning !== "credit_exhausted") return;
       const observed = observeCompute({ creditWarning: warning });
       observations.add(observed);
@@ -21681,7 +22388,7 @@ async function runSession(options, signals) {
     return await runPiSession(launch, {
       secrets: [broker.toolKey.privateKey, keystore.apiToken, keystore.encryptedKey],
       broker,
-      transport,
+      budget,
       signals
     });
   } finally {
@@ -21693,7 +22400,7 @@ async function runSession(options, signals) {
         STOP_TIMEOUT_MS
       );
     }
-    await withTimeout(Promise.allSettled([...observations]), STOP_TIMEOUT_MS);
+    await withTimeout(Promise.allSettled([...observations, budget.settled()]), STOP_TIMEOUT_MS);
   }
 }
 async function runPiSession(launch, context) {
@@ -21720,8 +22427,15 @@ async function runPiSession(launch, context) {
   const inferenceFds = launch.inferenceFds;
   const inference = serveInferenceChannel(
     { requests: stdio[inferenceFds.request], replies: stdio[inferenceFds.reply] },
-    context.transport,
-    { log: diagnostics }
+    context.budget.transport,
+    {
+      log: diagnostics,
+      views: {
+        budget: (view) => context.budget.view(view),
+        creditOffer: () => context.budget.creditOffer(),
+        buyCredits: (amountUsd) => context.budget.buyCredits(amountUsd)
+      }
+    }
   );
   let killTimer;
   context.signals.piStarted(() => {