@lucid-agents/taskmarket 1.23.0 → 1.24.1

package/dist/index.js

@@ -14,7 +14,7 @@ import {
   signReadAuth,
   submitTaskFiles,
   taskAccessGrantHeaders
-} from "./chunk-4SZBEOE7.js";
+} from "./chunk-EE7LLCQY.js";
 import {
   ComputeCreditError,
   applyComputeCreditSetup,
@@ -36,7 +36,7 @@ import {
   refusedPaidWrite,
   releasePendingComputePurchase,
   resolvePendingComputePurchases
-} from "./chunk-YXCEPGO4.js";
+} from "./chunk-I6DSFR3I.js";
 import {
   MPP_TEMPO_DEFAULT_VALIDITY_SECONDS,
   X402PayError,
@@ -59,7 +59,7 @@ import {
   signSponsoredTempoTransfer,
   signTaskmarketFeePayment,
   signTypedData
-} from "./chunk-FSK3D3S5.js";
+} from "./chunk-3YYDUJV4.js";
 import {
   ActivityFeedInputSchema,
   ActivityHeatmapInputSchema,
@@ -197,7 +197,7 @@ import {
   withChainId,
   withErrorContext,
   withIdempotentWrite
-} from "./chunk-OGYFQL45.js";
+} from "./chunk-DZMMROHT.js";
 import {
   channelLines
 } from "./chunk-XJOB4NMV.js";
@@ -282,10 +282,19 @@ function readLastError() {
 }
 
 // src/lib/output.ts
+function cliWarning(code, message, details) {
+  return { ...details, code, message };
+}
 function printResult(data, options) {
   const idempotencyKey = options?.idempotencyKey;
+  const warnings = options?.warnings ?? [];
   console.log(
-    JSON.stringify({ ok: true, data, ...idempotencyKey !== void 0 ? { idempotencyKey } : {} })
+    JSON.stringify({
+      ok: true,
+      data,
+      ...idempotencyKey !== void 0 ? { idempotencyKey } : {},
+      ...warnings.length > 0 ? { warnings } : {}
+    })
   );
 }
 function x402FailureFields(error) {
@@ -334,9 +343,6 @@ function renderFailure(error, options) {
 function printError(message, options) {
   return renderFailure(new Error(message), options);
 }
-function printWarning(message) {
-  process.stderr.write(JSON.stringify({ ok: false, error: message }) + "\n");
-}
 
 // src/lib/agent.ts
 function legacyAgentIdChain(keystore) {
@@ -651,7 +657,7 @@ function sanitizeEmailUsername(agentId, suffix) {
   const candidate = `${base}-${suffix}`;
   return /^[a-z0-9][a-z0-9-]{1,28}[a-z0-9]$/.test(candidate) ? candidate : null;
 }
-async function tryRegisterEmail(deviceId, apiToken, username, explicit) {
+async function tryRegisterEmail(deviceId, apiToken, username, explicit, warnings) {
   try {
     const { data: reg } = await apiPost("/api/emails/register", {
       deviceId,
@@ -662,8 +668,12 @@ async function tryRegisterEmail(deviceId, apiToken, username, explicit) {
   } catch (err) {
     if (explicit) {
       const msg = err instanceof Error ? err.message : String(err);
-      printWarning(
-        `Email registration failed: ${msg}. Run: taskmarket email register --username ${username}`
+      warnings.push(
+        cliWarning(
+          "email_registration_failed",
+          `Email registration failed: ${msg}. Run: taskmarket email register --username ${username}`,
+          { username, retryCommand: `taskmarket email register --username ${username}` }
+        )
       );
     }
     return null;
@@ -781,7 +791,8 @@ var initCommand = new Command2("init").description(
   } catch {
   }
   const username = opts.email ?? (agentId && networkInfo ? sanitizeEmailUsername(agentId, String(selectedNetwork().chainId)) : null);
-  const emailAddress = username ? await tryRegisterEmail(deviceId, apiToken, username, !!opts.email) : null;
+  const warnings = [];
+  const emailAddress = username ? await tryRegisterEmail(deviceId, apiToken, username, !!opts.email, warnings) : null;
   let chain;
   try {
     chain = chainInfoFor(networkInfo, selectedNetwork().chainId);
@@ -789,15 +800,18 @@ var initCommand = new Command2("init").description(
     renderFailure(err);
     return;
   }
-  printResult({
-    address,
-    agentId,
-    network: chain?.networkName ?? networkInfo?.networkName,
-    chainId: chain?.chainId ?? networkInfo?.chainId,
-    paymentMethod: chain?.paymentMethod,
-    feeModel: chain?.feeModel,
-    emailAddress
-  });
+  printResult(
+    {
+      address,
+      agentId,
+      network: chain?.networkName ?? networkInfo?.networkName,
+      chainId: chain?.chainId ?? networkInfo?.chainId,
+      paymentMethod: chain?.paymentMethod,
+      feeModel: chain?.feeModel,
+      emailAddress
+    },
+    { warnings }
+  );
 });
 
 // src/commands/address.ts
@@ -1539,6 +1553,42 @@ async function x402Post(path3, body, options) {
   });
 }
 
+// src/lib/hook-registry.ts
+async function fetchHookRegistry(address) {
+  const query3 = address ? `?address=${address}` : "";
+  return await apiGet(withChainId(`/api/hooks/registry${query3}`));
+}
+async function describeHookListings(hooks, alwaysListed = []) {
+  if (hooks.length === 0) return { hooks: [], warnings: [] };
+  let registry;
+  try {
+    registry = await fetchHookRegistry();
+    if (!registry || !Array.isArray(registry.listed)) return null;
+  } catch {
+    return null;
+  }
+  const listed = new Map(registry.listed.map((entry) => [entry.address.toLowerCase(), entry]));
+  const implicit = new Set(alwaysListed.map((address) => address.toLowerCase()));
+  const listings = [];
+  const warnings = [];
+  for (const raw of hooks) {
+    const address = raw.toLowerCase();
+    const entry = listed.get(address);
+    const isListed = entry !== void 0 || implicit.has(address);
+    listings.push({ address, listed: isListed, name: entry?.name ?? null });
+    if (!isListed) {
+      warnings.push(
+        cliWarning(
+          "hook_unlisted",
+          `Hook ${address} is not listed in the hook registry for chain ${registry.chainId}. It was attached as given; run \`taskmarket hooks list\` for listed hooks.`,
+          { address, chainId: registry.chainId }
+        )
+      );
+    }
+  }
+  return { hooks: listings, warnings };
+}
+
 // src/lib/settlement-terms.ts
 var TERM_FLAGS = {
   stakeRequired: "--stake-required",
@@ -1692,6 +1742,51 @@ function parseStakeOptions(opts) {
   }
   return { stakeRequired: true, stakeBps };
 }
+var METRIC_DESCRIPTION_MAX = 500;
+var METRIC_TARGET_MAX = 200;
+var TASK_DROP_NAME_MAX = 80;
+var TASK_DROP_DESCRIPTION_MAX = 500;
+function parseMetricAndDropOptions(opts) {
+  const fields = {};
+  for (const [flag, value, max, key] of [
+    ["--metric-description", opts.metricDescription, METRIC_DESCRIPTION_MAX, "metricDescription"],
+    ["--metric-target", opts.metricTarget, METRIC_TARGET_MAX, "metricTarget"]
+  ]) {
+    if (value === void 0) continue;
+    if (opts.mode !== "benchmark") {
+      return { error: `${flag} is only valid with --mode benchmark` };
+    }
+    if (!value.trim()) return { error: `${flag} must not be empty` };
+    if (value.length > max) return { error: `${flag} must be at most ${max} characters` };
+    fields[key] = value;
+  }
+  if (opts.taskDrop !== void 0 && opts.newTaskDrop !== void 0) {
+    return { error: "--task-drop and --new-task-drop cannot be combined" };
+  }
+  if (opts.newTaskDropDescription !== void 0 && opts.newTaskDrop === void 0) {
+    return { error: "--new-task-drop-description requires --new-task-drop" };
+  }
+  if (opts.taskDrop !== void 0) {
+    const taskDropId = opts.taskDrop.trim();
+    if (!taskDropId) return { error: "--task-drop must not be empty" };
+    fields.taskDropId = taskDropId;
+  }
+  if (opts.newTaskDrop !== void 0) {
+    const name = opts.newTaskDrop.trim();
+    if (!name) return { error: "--new-task-drop must not be empty" };
+    if (name.length > TASK_DROP_NAME_MAX) {
+      return { error: `--new-task-drop must be at most ${TASK_DROP_NAME_MAX} characters` };
+    }
+    const description = opts.newTaskDropDescription?.trim();
+    if (description && description.length > TASK_DROP_DESCRIPTION_MAX) {
+      return {
+        error: `--new-task-drop-description must be at most ${TASK_DROP_DESCRIPTION_MAX} characters`
+      };
+    }
+    fields.taskDropCreate = description ? { name, description } : { name };
+  }
+  return { fields };
+}
 var createCmd = new Command8("create").description("Create a new task (costs the reward, in the payment token)").requiredOption("--description <text>", "Task description").requiredOption("--reward <amount>", "Reward in the payment token (e.g. 5)").requiredOption("--duration <hours>", "Task duration in hours").option("--mode <mode>", "Task mode: bounty, claim, pitch, benchmark, auction", "bounty").option(
   "--task-visibility <mode>",
   "Task visibility: public (default), unlisted, or private. Unlisted only hides a task from Taskmarket's own listings/search/SEO -- it stays permanently visible on the public blockchain to anyone with the link, reading the contract directly, or running their own indexer. private is genuinely access-controlled: only the requester and invited/assigned workers can view it via listings, get, or the gated reads -- see --allowed-viewers and --access-password. Even private, the on-chain existence, reward, and participation stay publicly observable regardless.",
@@ -1706,7 +1801,22 @@ var createCmd = new Command8("create").description("Create a new task (costs the
   "--submission-visibility <mode>",
   "Submission visibility: public (default), reveal_all, winner_only, or never. Controls who can see what workers submit while the task is live and after it ends. public matches today's behavior exactly. The other three modes hide submissions from everyone but the requester and each submitting worker while the task is active; once it ends, reveal_all shows everything, winner_only shows only the winning submission(s), and never keeps every submission hidden indefinitely. Chosen once here and locked in permanently -- there is no command to change it later.",
   "public"
-).option("--tags <tags>", "Comma-separated tags").option("--pitch-deadline <hours>", "Pitch deadline in hours from now (pitch mode only)").option("--bid-deadline <hours>", "Bid deadline in hours from now (auction mode only)").option(
+).option("--tags <tags>", "Comma-separated tags").option(
+  "--metric-description <text>",
+  'Benchmark metric workers are ranked on, e.g. "Test suite pass rate" (benchmark mode only, max 500 characters)'
+).option(
+  "--metric-target <value>",
+  "Target value for the benchmark metric, e.g. 98 (benchmark mode only, max 200 characters)"
+).option(
+  "--task-drop <dropId>",
+  "Add the task to a Task Drop you own; its subscribers are emailed when the task is published. See `taskmarket drops`."
+).option(
+  "--new-task-drop <name>",
+  "Create a new Task Drop with this name (max 80 characters) and add the task to it. Cannot be combined with --task-drop."
+).option(
+  "--new-task-drop-description <text>",
+  "Description for the --new-task-drop drop (optional, max 500 characters)"
+).option("--pitch-deadline <hours>", "Pitch deadline in hours from now (pitch mode only)").option("--bid-deadline <hours>", "Bid deadline in hours from now (auction mode only)").option(
   "--max-price <amount>",
   "Maximum bid price in the payment token (required for auction mode)"
 ).option(
@@ -1720,7 +1830,7 @@ var createCmd = new Command8("create").description("Create a new task (costs the
   "Floor price in the payment token for dutch clock (required for dutch)"
 ).option(
   "--hook <address>",
-  "Custom ITMPHook contract address (repeat in execution order; protocol defaults run first)",
+  "Custom ITMPHook contract address (repeat in execution order; protocol defaults run first). Run `taskmarket hooks list` for hooks listed (verified) in the hook registry; an unlisted address is still attached, with a hook_unlisted warning",
   (value, previous = []) => [...previous, value],
   []
 ).option(
@@ -1870,6 +1980,10 @@ var createCmd = new Command8("create").description("Create a new task (costs the
         );
       }
     }
+    const metricAndDrop = parseMetricAndDropOptions(opts);
+    if ("error" in metricAndDrop) {
+      return void printError(metricAndDrop.error);
+    }
     const stakeFlags = parseStakeOptions(opts);
     if ("error" in stakeFlags) {
       return void printError(stakeFlags.error);
@@ -1895,6 +2009,7 @@ var createCmd = new Command8("create").description("Create a new task (costs the
     if (opts.accessPassword) {
       body.accessPassword = opts.accessPassword;
     }
+    Object.assign(body, metricAndDrop.fields);
     if (opts.pitchDeadline) {
       body.pitchDeadline = parseInt(opts.pitchDeadline, 10) * 3600;
     }
@@ -2092,6 +2207,10 @@ var createCmd = new Command8("create").description("Create a new task (costs the
       } catch {
       }
     }
+    const hookListings = await describeHookListings(
+      hooks,
+      sponsoredTaskHookAddress ? [sponsoredTaskHookAddress] : []
+    );
     let feeBps;
     if (opts.evaluator) {
       if (!ethAddrRe.test(opts.evaluator)) {
@@ -2133,9 +2252,14 @@ var createCmd = new Command8("create").description("Create a new task (costs the
         taskId: result.taskId,
         terms,
         termsPreset: termsPresetLabel(terms),
-        ...evaluatorStaked ? { evaluatorStake: evaluatorStakeBaseUnits } : {}
+        ...result.taskDropId ? { taskDropId: result.taskDropId } : {},
+        ...evaluatorStaked ? { evaluatorStake: evaluatorStakeBaseUnits } : {},
+        ...hookListings && hookListings.hooks.length > 0 ? { hooks: hookListings.hooks } : {}
       },
-      { idempotencyKey }
+      {
+        idempotencyKey,
+        ...hookListings && hookListings.warnings.length > 0 ? { warnings: hookListings.warnings } : {}
+      }
     );
   }
 );
@@ -3484,7 +3608,7 @@ taskCommand2.addCommand(releaseCmd);
 taskCommand2.addCommand(requestRevisionCmd);
 taskCommand2.addCommand(rejectCmd);
 taskCommand2.addCommand(settleCmd);
-taskCommand2.addCommand(reviewCmd);
+taskCommand2.addCommand(reviewCmd, { hidden: true });
 taskCommand2.addCommand(startReviewCmd);
 
 // src/commands/agent/index.ts
@@ -3693,7 +3817,7 @@ async function runAgentCommand(options) {
   try {
     const { assertAgentCompatibility } = await import("./compatibility-636WJOEX.js");
     const pi = assertAgentCompatibility();
-    const { runAgent } = await import("./launch-VZ5JBM5R.js");
+    const { runAgent } = await import("./launch-Q67U5TZE.js");
     result = await runAgent({
       model: options.model,
       pi,
@@ -3752,13 +3876,13 @@ function agentManagementCommands() {
   const status = new Command48("status").description(
     "Show the agent channels (locked, charged, refundable), purchases with an unknown outcome, the sandbox and compute credit. Reads only."
   ).option("--json", "Print the versioned JSON envelope").action(async (options) => {
-    const { collectAgentStatus, statusLines } = await import("./status-RHVQJID5.js");
+    const { collectAgentStatus, statusLines } = await import("./status-5PXMF7RK.js");
     await run(options, () => collectAgentStatus(), statusLines);
   });
   const doctor = new Command48("doctor").description(
     "Check that the agent can start: Node and the bundled runtime, wallet and policy, channels, API, sandbox broker, host keys, xgate and RPC. Reads only."
   ).option("--json", "Print the versioned JSON envelope").action(async (options) => {
-    const { runDoctor, doctorLines } = await import("./doctor-YP2Z6WNE.js");
+    const { runDoctor, doctorLines } = await import("./doctor-FCQZBQFU.js");
     const report = await run(options, () => runDoctor(), doctorLines);
     if (report && !report.ok) process.exitCode = 1;
   });
@@ -3769,7 +3893,7 @@ function agentManagementCommands() {
     "Reconcile the open purchases of this channel, as status lists it; also reaches retired channels"
   ).option("--json", "Print the versioned JSON envelope").action(
     async (invocationId, options) => {
-      const { reconcileChannelPurchases, reconcileInvocation } = await import("./reconcile-VVNBTJRJ.js");
+      const { reconcileChannelPurchases, reconcileInvocation } = await import("./reconcile-NBIZBPVA.js");
       const choice = { rail: options.rail, channel: options.channel };
       if (invocationId !== void 0) {
         await run(
@@ -3827,7 +3951,7 @@ function agentManagementCommands() {
             `Not a USDC amount: ${options.amount} (digits, at most 6 decimals)`
           );
         }
-        const { openAgentChannels, requestTopUp, selectRail, withdrawalHatch } = await import("./channels-Z52MJ5YT.js");
+        const { openAgentChannels, requestTopUp, selectRail, withdrawalHatch } = await import("./channels-KCVGG62H.js");
         const { rails } = await openAgentChannels();
         const result = await requestTopUp(selectRail(rails, options.rail), amount);
         return {
@@ -3851,8 +3975,8 @@ function agentManagementCommands() {
       async () => {
         await requireExperimental();
         const { AGENT_VIEW_VERSION } = await import("./budget-view-J6L7X6EY.js");
-        const { closeChannel, openAgentChannels, selectChannel } = await import("./channels-Z52MJ5YT.js");
-        const { reconcileLeasedPurchase } = await import("./reconcile-VVNBTJRJ.js");
+        const { closeChannel, openAgentChannels, selectChannel } = await import("./channels-KCVGG62H.js");
+        const { reconcileLeasedPurchase } = await import("./reconcile-NBIZBPVA.js");
         const opened = await openAgentChannels();
         const { rail, retired } = selectChannel(opened, options);
         const result = await closeChannel(
@@ -3923,7 +4047,7 @@ function agentManagementCommands() {
         options,
         async () => {
           await requireExperimental();
-          const { runPull } = await import("./sync-pull-C3VA3C26.js");
+          const { runPull } = await import("./sync-pull-BY4QUY4T.js");
           const { terminalPrompter } = await import("./prompter-LSICEYSQ.js");
           return runPull(options, {
             interactive: Boolean(process.stdin.isTTY && process.stdout.isTTY) && !options.json,
@@ -4430,14 +4554,17 @@ var walletImportCommand = new Command55("import").description("Import an existin
       );
     }
   }
-  if (keySource === "flag") {
-    process.stderr.write(
-      JSON.stringify({
-        warning: "Private key was passed via --key flag and may be visible in shell history and ps aux."
-      }) + "\n"
-    );
-  }
-  printResult({ address, agentId });
+  printResult(
+    { address, agentId },
+    {
+      warnings: keySource === "flag" ? [
+        cliWarning(
+          "private_key_in_argv",
+          "Private key was passed via --key flag and may be visible in shell history and ps aux."
+        )
+      ] : []
+    }
+  );
 });
 
 // src/commands/wallet/set-withdrawal-address.ts
@@ -4480,12 +4607,16 @@ async function fetchWithdrawalAddress(address, chainId) {
 function noWithdrawalAddressMessage(chainId) {
   return `No withdrawal address set on chain ${chainId}. The withdrawal address is per chain; run: ${taskmarketCommandFor(chainId)} wallet set-withdrawal-address <address>`;
 }
-async function verifyWithdrawalAddress(keystore, chainId, serverAddress, log = (line) => process.stderr.write(line + "\n")) {
+async function verifyWithdrawalAddress(keystore, chainId, serverAddress, warnings) {
   const pinned = pinnedWithdrawalAddress(keystore, chainId);
   if (!pinned) {
     await pinWithdrawalAddress(keystore, chainId, serverAddress);
-    log(
-      `Note: pinned withdrawal address ${serverAddress} for chain ${chainId} in the local keystore.`
+    warnings.push(
+      cliWarning(
+        "withdrawal_address_pinned",
+        `Pinned withdrawal address ${serverAddress} for chain ${chainId} in the local keystore.`,
+        { chainId, withdrawalAddress: serverAddress }
+      )
     );
     return serverAddress;
   }
@@ -4560,10 +4691,18 @@ var setWithdrawalAddressCommand = new Command56("set-withdrawal-address").descri
     {
       chainId: actedOn,
       withdrawalAddress: result.withdrawalAddress,
-      accountRecoveryCode: result.accountRecoveryCode,
-      warning: `SAVE THIS ACCOUNT RECOVERY CODE NOW. It is the recovery code for chain ${actedOn} only, will never be shown again, and there is no way to recover it if lost -- this chain's withdrawal address could then never be changed again. Save it in more than one independent place (e.g. a password manager entry AND a printed copy).`
+      accountRecoveryCode: result.accountRecoveryCode
     },
-    { idempotencyKey }
+    {
+      idempotencyKey,
+      warnings: [
+        cliWarning(
+          "recovery_code_shown_once",
+          `SAVE THIS ACCOUNT RECOVERY CODE NOW. It is the recovery code for chain ${actedOn} only, will never be shown again, and there is no way to recover it if lost -- this chain's withdrawal address could then never be changed again. Save it in more than one independent place (e.g. a password manager entry AND a printed copy).`,
+          { chainId: actedOn }
+        )
+      ]
+    }
   );
 });
 
@@ -4628,10 +4767,18 @@ var changeWithdrawalAddressCommand = new Command58("change-withdrawal-address").
     {
       chainId: actedOn,
       withdrawalAddress: result.withdrawalAddress,
-      accountRecoveryCode: result.accountRecoveryCode,
-      warning: `SAVE THIS NEW ACCOUNT RECOVERY CODE NOW. It is the recovery code for chain ${actedOn} only. The code you just used is no longer valid on this chain. This new one will never be shown again, and there is no way to recover it if lost. Save it in more than one independent place (e.g. a password manager entry AND a printed copy).`
+      accountRecoveryCode: result.accountRecoveryCode
     },
-    { idempotencyKey }
+    {
+      idempotencyKey,
+      warnings: [
+        cliWarning(
+          "recovery_code_shown_once",
+          `SAVE THIS NEW ACCOUNT RECOVERY CODE NOW. It is the recovery code for chain ${actedOn} only. The code you just used is no longer valid on this chain. This new one will never be shown again, and there is no way to recover it if lost. Save it in more than one independent place (e.g. a password manager entry AND a printed copy).`,
+          { chainId: actedOn }
+        )
+      ]
+    }
   );
 });
 
@@ -4694,10 +4841,18 @@ var revealRecoveryCodeCommand = new Command60("reveal-recovery-code").descriptio
   printResult(
     {
       chainId: actedOn,
-      accountRecoveryCode: result.accountRecoveryCode,
-      warning: `SAVE THIS ACCOUNT RECOVERY CODE NOW. It is the recovery code for chain ${actedOn} only, will never be shown again, and there is no way to recover it if lost -- this chain's withdrawal address could then never be changed again. Save it in more than one independent place (e.g. a password manager entry AND a printed copy).`
+      accountRecoveryCode: result.accountRecoveryCode
     },
-    { idempotencyKey }
+    {
+      idempotencyKey,
+      warnings: [
+        cliWarning(
+          "recovery_code_shown_once",
+          `SAVE THIS ACCOUNT RECOVERY CODE NOW. It is the recovery code for chain ${actedOn} only, will never be shown again, and there is no way to recover it if lost -- this chain's withdrawal address could then never be changed again. Save it in more than one independent place (e.g. a password manager entry AND a printed copy).`,
+          { chainId: actedOn }
+        )
+      ]
+    }
   );
 });
 
@@ -4760,6 +4915,7 @@ var withdrawDreamsCommand = new Command62("withdraw-dreams").description("Withdr
     );
     return;
   }
+  const warnings = [];
   if (!destination) {
     let addressResponse;
     try {
@@ -4776,7 +4932,8 @@ var withdrawDreamsCommand = new Command62("withdraw-dreams").description("Withdr
       destination = await verifyWithdrawalAddress(
         keystore,
         balance.chainId,
-        addressResponse.withdrawalAddress
+        addressResponse.withdrawalAddress,
+        warnings
       );
     } catch (err) {
       renderFailure(err);
@@ -4814,7 +4971,7 @@ var withdrawDreamsCommand = new Command62("withdraw-dreams").description("Withdr
       dreamsPerUsdc: result.dreamsPerUsdc,
       usdEquivalent: result.usdEquivalent
     },
-    { idempotencyKey }
+    { idempotencyKey, warnings }
   );
 });
 
@@ -5086,11 +5243,13 @@ var withdrawCommand = new Command65("withdraw").description(
     return;
   }
   let withdrawalAddress;
+  const warnings = [];
   try {
     withdrawalAddress = await verifyWithdrawalAddress(
       keystore,
       chainId,
-      addressResponse.withdrawalAddress
+      addressResponse.withdrawalAddress,
+      warnings
     );
   } catch (err) {
     renderFailure(err);
@@ -5103,7 +5262,7 @@ var withdrawCommand = new Command65("withdraw").description(
       withdrawalAddress,
       amountBaseUnits
     });
-    printResult(withdrawOutput(result2, chainId), { idempotencyKey: idempotencyKey2 });
+    printResult(withdrawOutput(result2, chainId), { idempotencyKey: idempotencyKey2, warnings });
     return;
   }
   let domain;
@@ -5141,7 +5300,7 @@ var withdrawCommand = new Command65("withdraw").description(
       signature
     }
   );
-  printResult(withdrawOutput(result, chainId), { idempotencyKey });
+  printResult(withdrawOutput(result, chainId), { idempotencyKey, warnings });
 });
 
 // src/commands/encrypt.ts
@@ -11243,11 +11402,13 @@ var sponsoredTaskClaimCommand = new Command108("claim").description("Claim your
     return;
   }
   let destination;
+  const warnings = [];
   try {
     destination = await verifyWithdrawalAddress(
       keystore,
       vault.chainId,
-      addressResponse.withdrawalAddress
+      addressResponse.withdrawalAddress,
+      warnings
     );
   } catch (err) {
     renderFailure(err);
@@ -11306,7 +11467,7 @@ var sponsoredTaskClaimCommand = new Command108("claim").description("Claim your
       proof: entitlement.proof
     }
   );
-  printResult(result, { idempotencyKey });
+  printResult(result, { idempotencyKey, warnings });
 });
 
 // src/commands/sponsored-task/rewards.ts
@@ -11447,20 +11608,35 @@ var dropsCommand = new Command111("drops").description("Browse Task Drops and ma
 
 // src/commands/hooks.ts
 import { Command as Command112 } from "commander";
-var listCommand5 = new Command112("list").description("List observed hooks and their active-phase task counts on the selected --network").option("--limit <n>", "Maximum hooks to return (1-100)", "50").action(async (opts) => {
+var listCommand5 = new Command112("list").description(
+  "List hooks listed (verified) in the hook registry on the selected --network, then observed hooks that are not listed"
+).option("--limit <n>", "Maximum unlisted observed hooks to return (1-100)", "50").option("--observed", "Return the raw onchain observation index instead of the registry view").action(async (opts) => {
   try {
     const input = parseInput(HookIndexInputSchema, { limit: optionalInt(opts.limit) });
-    printResult(await apiGet(withChainId(`/api/hooks?limit=${input.limit}`)));
+    if (opts.observed) {
+      printResult(await apiGet(withChainId(`/api/hooks?limit=${input.limit}`)));
+      return;
+    }
+    const registry = await fetchHookRegistry();
+    printResult({ ...registry, unlisted: registry.unlisted.slice(0, input.limit) });
   } catch (err) {
     renderFailure(err);
   }
 });
-var showCommand3 = new Command112("show").description("Show one observed hook by address on the selected --network").argument("<address>", "Hook contract address").action(async (address) => {
+var showCommand3 = new Command112("show").description(
+  "Show one hook on the selected --network: its registry listing, or its onchain observation marked unlisted"
+).argument("<address>", "Hook contract address").action(async (address) => {
   try {
     const input = parseInput(HookGetInputSchema, { address });
-    const result = await apiGet(withChainId(`/api/hooks/${input.address}`));
-    if (result === null || result === void 0) {
-      throw new Error(`Hook ${input.address} has not been observed on this network`);
+    const registry = await fetchHookRegistry(input.address.toLowerCase());
+    const wanted = input.address.toLowerCase();
+    const listed = registry.listed.find((hook) => hook.address.toLowerCase() === wanted);
+    const unlisted = registry.unlisted.find((hook) => hook.address.toLowerCase() === wanted);
+    const result = listed ?? unlisted;
+    if (!result) {
+      throw new Error(
+        `Hook ${input.address} is not listed in the hook registry and has not been observed on this network`
+      );
     }
     printResult(result);
   } catch (err) {

package/dist/{launch-VZ5JBM5R.js → launch-Q67U5TZE.js}

@@ -7,7 +7,7 @@ import {
   recordSessionEnd,
   recordSessionStart,
   uploadPlan
-} from "./chunk-PKUB7FZE.js";
+} from "./chunk-IPJKSTNW.js";
 import {
   TaskOperationError,
   authorizeUploads,
@@ -28,7 +28,7 @@ import {
   submitUploadedArtifacts,
   taskAccessGrantHeaders,
   taskAwardsOf
-} from "./chunk-4SZBEOE7.js";
+} from "./chunk-EE7LLCQY.js";
 import {
   terminalPrompter
 } from "./chunk-ZIC2YCLV.js";
@@ -68,7 +68,7 @@ import {
   sha256Hex,
   specHash,
   taskStage
-} from "./chunk-HGTLUZBR.js";
+} from "./chunk-E7Y4UDXH.js";
 import {
   BrokerConnector,
   OutputLimitError,
@@ -80,7 +80,7 @@ import {
   serveSandboxChannel,
   withFileLock,
   writeAtomic
-} from "./chunk-SXPG3I34.js";
+} from "./chunk-VKQBB6CG.js";
 import {
   applyComputeCreditSetup,
   atomicToUsd,
@@ -90,7 +90,7 @@ import {
   planComputeCreditSetup,
   readComputeCreditBalance,
   usdToAtomic
-} from "./chunk-YXCEPGO4.js";
+} from "./chunk-I6DSFR3I.js";
 import {
   MAX_RETIRED_RAILS,
   WORKSPACE_CONSENT_VERSION,
@@ -110,7 +110,7 @@ import {
   routeOfCatalogRow,
   saveAgentPolicy,
   settledRetiredRails
-} from "./chunk-CAJH6AVP.js";
+} from "./chunk-DT7AD52I.js";
 import {
   BASE_CHANNEL_RAIL_ID,
   createBaseChannelPayer,
@@ -124,7 +124,7 @@ import {
   rpcUrlForNetwork,
   saveX402Policy,
   x402SpendWindowAvailability
-} from "./chunk-FSK3D3S5.js";
+} from "./chunk-3YYDUJV4.js";
 import {
   IntentStatusResponseSchema,
   NetworkChainInfoSchema,
@@ -137,7 +137,7 @@ import {
   piCodingAgentTools,
   selectedNetwork,
   taskmarketChain
-} from "./chunk-OGYFQL45.js";
+} from "./chunk-DZMMROHT.js";
 import {
   AGENT_VIEW_VERSION,
   describeFailureDetail,