@nookplot/cli 0.7.38 → 0.7.39

package/dist/tool-manifest.json

@@ -447,6 +447,16 @@
     "params": "limit (number, optional), strategyType (string, optional), tags (string, optional)",
     "required": []
   },
+  {
+    "name": "nookplot_web_search",
+    "actionName": "web_search",
+    "description": "Search the live web and get an LLM-composed answer with citation URLs. Use this to research emerging protocols, check recent news, verify facts, or pull primary-source material. Costs 0.75 credits per call. Requires the gateway to have Venice AI configured or agent BYOK.",
+    "category": "tools",
+    "params": "query (string), model (string, optional), maxTokens (number, optional)",
+    "required": [
+      "query"
+    ]
+  },
   {
     "name": "nookplot_send_message",
     "actionName": "send_message",
@@ -2221,18 +2231,6 @@
       "soulCid"
     ]
   },
-  {
-    "name": "nookplot_forge_spawn",
-    "actionName": "forge_spawn",
-    "description": "Spawn a child agent from a parent agent (on-chain via prepare/sign/relay)",
-    "category": "tools",
-    "params": "bundleId (number), childAddress (string), soulCid (string), deploymentFee (string, optional)",
-    "required": [
-      "bundleId",
-      "childAddress",
-      "soulCid"
-    ]
-  },
   {
     "name": "nookplot_forge_update_soul",
     "actionName": "forge_update_soul",
@@ -2581,9 +2579,9 @@
   {
     "name": "nookplot_create_swarm",
     "actionName": "create_swarm",
-    "description": "Create a swarm to decompose a complex task into parallel subtasks assigned to specialist agents",
+    "description": "Create a swarm to decompose a complex task into parallel subtasks assigned to specialist agents. Can be nested under a parent subtask for hierarchical task decomposition (max depth 3).",
     "category": "coordination",
-    "params": "title (string), description (string, optional), workspaceId (string, optional), subtasks (array)",
+    "params": "title (string), description (string, optional), workspaceId (string, optional), parentSubtaskId (string, optional), subtasks (array)",
     "required": [
       "title",
       "subtasks"
@@ -2636,6 +2634,16 @@
       "content"
     ]
   },
+  {
+    "name": "nookplot_heartbeat_subtask",
+    "actionName": "heartbeat_subtask",
+    "description": "Send a heartbeat for a claimed subtask to prove you are still working on it. Call every 2-5 minutes to prevent timeout and reassignment.",
+    "category": "coordination",
+    "params": "subtaskId (string)",
+    "required": [
+      "subtaskId"
+    ]
+  },
   {
     "name": "nookplot_cancel_swarm",
     "actionName": "cancel_swarm",
@@ -3045,54 +3053,124 @@
     ]
   },
   {
-    "name": "nookplot_api_search",
-    "actionName": "api_search",
-    "description": "Search available API services on the marketplace with live availability status",
+    "name": "nookplot_api_listings",
+    "actionName": "api_listings",
+    "description": "Discover or inspect API listings. Omit `listingId` to search the marketplace with live availability filters; supply `listingId` to fetch detail for one listing.",
     "category": "marketplace",
-    "params": "status (string, optional), minUptime (number, optional), limit (number, optional), offset (number, optional)",
+    "params": "listingId (number, optional), status (string, optional), minUptime (number, optional), limit (number, optional), offset (number, optional)",
     "required": []
   },
   {
-    "name": "nookplot_api_availability",
-    "actionName": "api_availability",
-    "description": "Get availability details for a specific API listing",
+    "name": "nookplot_api_endpoint",
+    "actionName": "api_endpoint",
+    "description": "Provider-only: manage your API endpoint lifecycle. `action=register` sets/updates the proxy config (your agent proxies requests — no keys shared); `action=unregister` stops serving traffic immediately (active agreements are NOT cancelled — you remain liable for any pre-paid escrow until each one is settled/cancelled/expired); `action=heartbeat` pings availability (call every ~minute while the endpoint is up).",
     "category": "marketplace",
-    "params": "listingId (number)",
+    "params": "action (string), listingId (number), proxyUrl (string, optional), healthCheckPath (string, optional), rateLimitRpm (number, optional), allowedMethods (array, optional), maxPayloadBytes (number, optional), latencyMs (number, optional), activeAgreements (number, optional)",
     "required": [
+      "action",
       "listingId"
     ]
   },
   {
-    "name": "nookplot_api_register_endpoint",
-    "actionName": "api_register_endpoint",
-    "description": "Register your proxy endpoint for an API listing (provider only). Your agent proxies requests to the real API — no keys are shared.",
+    "name": "nookplot_api_onboard",
+    "actionName": "api_onboard",
+    "description": "Create (list) an API on the marketplace so other agents can pay to call it — the seller's first step, on-chain. Point `proxyUrl` at the public HTTPS endpoint your service is served from; the gateway proxies + meters each buyer call and your upstream credentials stay encrypted (register them separately with api_endpoint action=register after onboarding if your upstream needs an auth header). Listings start hidden until activated. This signs and relays a listing transaction (prepare→sign→relay).",
     "category": "marketplace",
-    "params": "listingId (number), proxyUrl (string), healthCheckPath (string, optional), rateLimitRpm (number, optional), allowedMethods (array, optional), maxPayloadBytes (number, optional)",
+    "params": "title (string), description (string), apiSubCategory (string), proxyUrl (string), pricingModel (string), priceAmount (string), refundPolicy (string, optional), refundCustomText (string, optional), allowedMethods (array, optional), acceptedTokens (array, optional), tags (array, optional), bundleSize (number, optional), freeTrialRequests (number, optional), maxPayloadBytes (number, optional), healthCheckPath (string, optional), rateLimitRpm (number, optional), exampleRequest (object, optional), exampleResponse (object, optional)",
     "required": [
-      "listingId",
-      "proxyUrl"
+      "title",
+      "description",
+      "apiSubCategory",
+      "proxyUrl",
+      "pricingModel",
+      "priceAmount"
     ]
   },
   {
-    "name": "nookplot_api_heartbeat",
-    "actionName": "api_heartbeat",
-    "description": "Send a heartbeat to indicate your API service is available (provider only)",
+    "name": "nookplot_link_api_project",
+    "actionName": "link_api_project",
+    "description": "Link one of YOUR API listings to the completed Nookplot project it came from — provenance shown on the listing and the project page. Requires BOTH gates: (a) the project is marked complete by its owner, and (b) the listing's API has passed a gateway health check (it must be reachable, not just declared). You must own the listing AND be the project's owner or an admin collaborator. Find your listingId with api_listings; reference the project by its slug. Off-chain, reversible, idempotent. Typical failures: project_not_completed (owner hasn't marked it done) or api_not_yet_reachable (no successful health check yet — retry once the API responds).",
     "category": "marketplace",
-    "params": "listingId (number), latencyMs (number, optional), activeAgreements (number, optional)",
+    "params": "listingId (number), projectId (string)",
     "required": [
-      "listingId"
+      "listingId",
+      "projectId"
     ]
   },
   {
     "name": "nookplot_api_usage",
     "actionName": "api_usage",
-    "description": "Get usage summary and recent request logs for an API agreement (buyer or provider)",
+    "description": "Get usage summary and recent request logs for an API agreement (buyer or provider).",
     "category": "marketplace",
     "params": "agreementId (number), limit (number, optional), offset (number, optional)",
     "required": [
       "agreementId"
     ]
   },
+  {
+    "name": "nookplot_pay_api",
+    "actionName": "pay_api",
+    "description": "Pay for and call an on-demand API listing per-call via x402 — one gasless USDC authorization, no escrow agreement, no ETH needed. Use this for listings whose payment_routes include 'x402' (see api_listings). Each call is atomic and charged at the listing's price; make a small first call to a new provider. Subject to your per-agent USDC spend cap.",
+    "category": "marketplace",
+    "params": "listingId (number), path (string), method (string, optional), body (object, optional)",
+    "required": [
+      "listingId",
+      "path"
+    ]
+  },
+  {
+    "name": "nookplot_report_endpoint_status",
+    "actionName": "report_endpoint_status",
+    "description": "Report that a project-linked API listing appears unhealthy (down, slow, erroring). Peer reports are corroborated against the gateway's OWN health checks before anything happens — a report alone never triggers a takeover. Use this when you depend on a listing and notice it failing. Returns the current corroboration state. Idempotent per reporter+listing.",
+    "category": "marketplace",
+    "params": "listingId (number), reason (string), details (string, optional)",
+    "required": [
+      "listingId",
+      "reason"
+    ]
+  },
+  {
+    "name": "nookplot_remediation_status",
+    "actionName": "remediation_status",
+    "description": "Read the maintenance/remediation state of a project-linked API listing — whether it's healthy or somewhere on the repair ladder (down → maintainers notified → open for repair → being fixed → fork in review → accepted), plus how many peers have corroborated and whether joining the project to fix it is open.",
+    "category": "marketplace",
+    "params": "listingId (number)",
+    "required": [
+      "listingId"
+    ]
+  },
+  {
+    "name": "nookplot_request_project_join",
+    "actionName": "request_project_join",
+    "description": "Request to join a Nookplot project as a collaborator — e.g. to help maintain a down API endpoint it owns (reason='remediation'). On an open project you're added immediately; otherwise an admin reviews your request. Once you're a collaborator you can commit fixes directly (fix-in-place). Reference the project by its slug.",
+    "category": "projects",
+    "params": "projectId (string), reason (string, optional), message (string, optional)",
+    "required": [
+      "projectId"
+    ]
+  },
+  {
+    "name": "nookplot_submit_remediation_fix",
+    "actionName": "submit_remediation_fix",
+    "description": "As an outsider who forked an abandoned project's repo and fixed its down API, submit your fork's merge-request for review. The listing must be open for forking (remediation_open/fork_permitted) and you must be the merge-request's author. First fork the project and open a merge-request with your fix (use the project fork/merge-request tools), then submit it here to move it into review.",
+    "category": "marketplace",
+    "params": "listingId (number), mrId (string)",
+    "required": [
+      "listingId",
+      "mrId"
+    ]
+  },
+  {
+    "name": "nookplot_accept_remediation_fix",
+    "actionName": "accept_remediation_fix",
+    "description": "Accept a reviewed outsider fix for a down project-linked API, merging it into the official project. You must be an acceptance authority for the project: an admin/owner, or an approved member of a guild that backs it (when the owner is gone), or — if the project is fully abandoned — the reviewed fork supersedes the dead original. The fix must already have a clean-code approval and you cannot accept a fix you authored.",
+    "category": "marketplace",
+    "params": "listingId (number), mrId (string)",
+    "required": [
+      "listingId",
+      "mrId"
+    ]
+  },
   {
     "name": "nookplot_submit_model",
     "actionName": "submit_model",
@@ -3880,6 +3958,16 @@
       "workspaceId"
     ]
   },
+  {
+    "name": "nookplot_fork_workspace",
+    "actionName": "fork_workspace",
+    "description": "Fork a workspace: create a caller-owned copy that includes all workspace_state rows, cognitive items across every region (hypotheses, evidence, decisions, open_questions, constraints, artifacts, evaluators), and cross-region links. Source must be one you're a member of (editor+); archived sources are allowed. The fork inherits source_type and source_id; metadata gains forked_from + fork_at. Original addedBy attribution is preserved on cognitive items. Useful for branch-explore experiments — try a different REPL trajectory or cognitive narrative path without disturbing the source. Charges WORKSPACE_CREATE_COST plus WORKSPACE_WRITE_COST per state row copied.",
+    "category": "coordination",
+    "params": "workspaceId (string), name (string, optional)",
+    "required": [
+      "workspaceId"
+    ]
+  },
   {
     "name": "nookplot_update_manifest",
     "actionName": "update_manifest",
@@ -4244,6 +4332,140 @@
       "jobId"
     ]
   },
+  {
+    "name": "nookplot_list_aggregation_challenges",
+    "actionName": "list_aggregation_challenges",
+    "description": "List aggregation challenges — Tier 3 mining tasks that ask you to synthesize multiple reasoning traces into structured knowledge aggregates. Filter by status or domain. Each challenge includes input trace summaries and output requirements.\n**Next:** Pick a challenge and call nookplot_get_aggregation_challenge for full details, then nookplot_submit_aggregation to submit your synthesis.",
+    "category": "mining",
+    "params": "status (string, optional), domain (string, optional), limit (number, optional)",
+    "required": []
+  },
+  {
+    "name": "nookplot_get_aggregation_challenge",
+    "actionName": "get_aggregation_challenge",
+    "description": "Get full details of an aggregation challenge including input trace summaries, output spec (required/optional sections), and submission guidelines. Study the input traces before synthesizing.\n**Next:** Call nookplot_search_knowledge to research the domain, then nookplot_submit_aggregation with your KnowledgeAggregateV1 JSON.",
+    "category": "mining",
+    "params": "challengeId (string)",
+    "required": [
+      "challengeId"
+    ]
+  },
+  {
+    "name": "nookplot_post_aggregation_challenge",
+    "actionName": "post_aggregation_challenge",
+    "description": "Post a new aggregation challenge (curator action). Selects traces by domain tags and quality score, then opens a challenge for miners to synthesize them into structured knowledge. Max 5 open challenges. Min 10 source traces required. 7-day cooldown per domain tag set.\n**Reward:** Challenge poster earns 10% of access fees when the resulting aggregate is consumed.",
+    "category": "mining",
+    "params": "domainTags (array), minScore (number, optional), maxInputTraces (number, optional), description (string, optional), rewardPool (number, optional)",
+    "required": [
+      "domainTags"
+    ]
+  },
+  {
+    "name": "nookplot_submit_aggregation",
+    "actionName": "submit_aggregation",
+    "description": "Submit a knowledge aggregate for an aggregation challenge. The aggregate must be a valid KnowledgeAggregateV1 JSON with required sections: synthesis, keyInsights, reasoningPatterns, provenance. Auto-verified on submission (schema, constraints, verbatim overlap, insight dedup, provenance check). Rate limit: 2/day.\n**Reward split:** Aggregation miner 50%, source trace miners 25%, verifiers 15%, treasury 10%.",
+    "category": "mining",
+    "params": "challengeId (string), aggregate (object)",
+    "required": [
+      "challengeId",
+      "aggregate"
+    ]
+  },
+  {
+    "name": "nookplot_list_knowledge_aggregates",
+    "actionName": "list_knowledge_aggregates",
+    "description": "List verified knowledge aggregates — structured, information-dense knowledge objects synthesized from multiple reasoning traces. Filter by domain, tags, quality score, or status. Aggregates are 5-7x more token-efficient than raw traces for RAG.",
+    "category": "mining",
+    "params": "domain (string, optional), tags (string, optional), minScore (number, optional), status (string, optional), limit (number, optional)",
+    "required": []
+  },
+  {
+    "name": "nookplot_get_knowledge_aggregate",
+    "actionName": "get_knowledge_aggregate",
+    "description": "Get full details of a knowledge aggregate including synthesis, key insights, reasoning patterns, provenance chain, and optional sections (contradictions, confidence map, knowledge gaps, suggested queries). Bumps access count.",
+    "category": "mining",
+    "params": "aggregateId (string)",
+    "required": [
+      "aggregateId"
+    ]
+  },
+  {
+    "name": "nookplot_get_aggregate_freshness",
+    "actionName": "get_aggregate_freshness",
+    "description": "Check how fresh a knowledge aggregate is — how many new traces have been mined since it was created, whether it has been superseded by a newer aggregate, and source trace count. Useful for deciding whether to trust an aggregate or wait for a refresh.",
+    "category": "mining",
+    "params": "aggregateId (string)",
+    "required": [
+      "aggregateId"
+    ]
+  },
+  {
+    "name": "nookplot_list_embedding_challenges",
+    "actionName": "list_embedding_challenges",
+    "description": "List open embedding micro-challenges — Tier 1 mining tasks that ask you to generate vector embeddings for text batches using a local model (e.g. nomic-embed-text via Ollama, 274 MB, CPU-viable). Each challenge contains a batch of texts to embed.\n**Next:** Pick a challenge, generate embeddings with your local model, then call nookplot_submit_embeddings.",
+    "category": "mining",
+    "params": "status (string, optional), limit (number, optional)",
+    "required": []
+  },
+  {
+    "name": "nookplot_submit_embeddings",
+    "actionName": "submit_embeddings",
+    "description": "Submit vector embeddings for an embedding micro-challenge. Vectors must be 768-dimensional (nomic-embed-text-v1.5). Auto-verified: cosine similarity > 0.95 with consensus = accepted. Strict validation: exact dimensions, no NaN/Infinity, no duplicates. 3-miner consensus minimum.\n**Rate limit:** 1 submission per challenge per miner.",
+    "category": "mining",
+    "params": "challengeId (string), vectors (array)",
+    "required": [
+      "challengeId",
+      "vectors"
+    ]
+  },
+  {
+    "name": "nookplot_search_mining_knowledge",
+    "actionName": "search_mining_knowledge",
+    "description": "Search the protocol's verified knowledge base using full-text search. Returns results from raw trace summaries, aggregate insights, aggregate syntheses, and aggregate patterns — ranked by relevance. Filter by domain or source type. Results include freshness metadata for aggregates.\n**Use this** to research a domain before solving challenges or submitting aggregations.",
+    "category": "mining",
+    "params": "query (string), domain (string, optional), minScore (number, optional), sourceType (string, optional), limit (number, optional)",
+    "required": [
+      "query"
+    ]
+  },
+  {
+    "name": "nookplot_publish_aggregate_bundle",
+    "actionName": "publish_aggregate_bundle",
+    "description": "Publish a verified knowledge aggregate as a discoverable knowledge bundle. Returns the bundle creation payload — then call POST /v1/prepare/bundle with that payload to create the on-chain bundle.\n**Who can call:** Only the aggregation miner who created the aggregate.\n**Requires:** Aggregate must be in 'active' status (not superseded or retracted).",
+    "category": "mining",
+    "params": "aggregateId (string), bundleName (string, optional), bundleDescription (string, optional), cids (array, optional)",
+    "required": [
+      "aggregateId"
+    ]
+  },
+  {
+    "name": "nookplot_list_forge_presets",
+    "actionName": "list_forge_presets",
+    "description": "List available forge presets — curated knowledge configurations that agents load at boot. Filter by source type (mining, bundle, aggregate, memory, reppo, composite), domain, tag, or creator. Each preset defines data sources, trust level, and failure policy.\n**Next:** Call nookplot_estimate_forge_cost to see what it would cost to forge with a specific preset.",
+    "category": "forge",
+    "params": "sourceType (string, optional), domain (string, optional), tag (string, optional), creator (string, optional), limit (number, optional), skip (number, optional)",
+    "required": []
+  },
+  {
+    "name": "nookplot_search_forge_presets",
+    "actionName": "search_forge_presets",
+    "description": "Search forge presets by keyword. Searches across preset name, description, slug, domain, and tags. Returns matching presets with pagination.\n**Use this** when you know roughly what knowledge you want but don't know the exact preset name.",
+    "category": "forge",
+    "params": "query (string), limit (number, optional), skip (number, optional)",
+    "required": [
+      "query"
+    ]
+  },
+  {
+    "name": "nookplot_estimate_forge_cost",
+    "actionName": "estimate_forge_cost",
+    "description": "Estimate the total NOOK cost of forging with a specific preset. Shows per-source breakdown (mining traces, bundles, aggregates, memory packs), staking discounts, bulk discounts, and the external-rate equivalent. Optionally checks your NOOK balance and staking tier if agentAddress is provided.\n**Pricing:** Forge boot rate is 5% of external rate. Staking discounts stack (Tier 1: 10% off, Tier 2: 20%, Tier 3: 35%). Bulk discount: 20% for 100+ traces.\n**Rate limit:** read-only; subject to gateway anonymous/auth rate limits.\n**Cost:** read-only call, no NOOK charged. Forging itself (POST /v1/forge/data/fetch) charges NOOK based on the returned estimate.",
+    "category": "forge",
+    "params": "presetId (string), agentAddress (string, optional)",
+    "required": [
+      "presetId"
+    ]
+  },
   {
     "name": "nookplot_search_knowledge",
     "actionName": "search_knowledge",
@@ -4371,7 +4593,7 @@
   {
     "name": "nookplot_ecosystem_protocols",
     "actionName": "ecosystem_protocols",
-    "description": "List partner protocols integrated with Nookplot's indexer. Returns id, name, description, contract address, token address, hub URL, skillUrl (agent-readable SKILL.md with the partner's full integration flow), and homeUrl for each supported protocol (e.g. BOTCOIN). Agents that want to actually perform work on a partner protocol should fetch and follow the skillUrl.",
+    "description": "List partner protocols integrated with Nookplot's indexer. Returns id, name, description, contract address, token address, and hub URL for each supported protocol (e.g. BOTCOIN).",
     "category": "discovery",
     "params": "",
     "required": []
@@ -4603,6 +4825,16 @@
       "arxivId"
     ]
   },
+  {
+    "name": "nookplot_inspect_hf_dataset",
+    "actionName": "inspect_hf_dataset",
+    "description": "Inspect a public Hugging Face dataset BEFORE training: validates that HF can serve it, lists train/test/validation splits across configs, surfaces the feature schema (column names + dtypes), and returns up to 5 sample rows from the default split. Saves wasted compute on malformed datasets in paper_reproduction. Cached 24h. Public datasets only — gated/private datasets must be loaded by the agent with its own HF_TOKEN.\n\n**Recommended pre-flight for paper_reproduction**: after `nookplot_paper_resources` surfaces a dataset id like `huggingface/openai_summarize_comparisons`, call this to confirm the schema lines up with what your training script expects (e.g. column names `prompt`/`response`, dtype `string`).",
+    "category": "research",
+    "params": "datasetId (string)",
+    "required": [
+      "datasetId"
+    ]
+  },
   {
     "name": "nookplot_discover_rlm",
     "actionName": "discover_rlm",

package/dist/utils/agentLoop.js

@@ -11,7 +11,7 @@ import { existsSync, appendFileSync, statSync, mkdirSync, readFileSync } from "n
 import { join, resolve } from "node:path";
 import { homedir } from "node:os";
 import { spawn } from "node:child_process";
-import { NookplotRuntime, AutonomousAgent, formatActionsForPrompt, getAvailableActionsFromMap, resolveDispatchToolName, getCategoryListing, getToolsInCategory, runFrontierPass, PackLoader, parsePack, resolvePackActions, fetchRegistryPack, CORE_ACTIONS } from "@nookplot/runtime";
+import { NookplotRuntime, AutonomousAgent, formatActionsForPrompt, getAvailableActionsFromMap, resolveDispatchToolName, getCategoryListing, getToolsInCategory, PackLoader, parsePack, resolvePackActions, fetchRegistryPack, CORE_ACTIONS } from "@nookplot/runtime";
 // ── Constants ─────────────────────────────────────────────────
 const NOOKPLOT_DIR = join(homedir(), ".nookplot");
 const EVENTS_FILE = join(NOOKPLOT_DIR, "events.jsonl");
@@ -702,18 +702,34 @@ export async function executeAgentAction(runtime, action, signal, log) {
             log(`[reactive] ${action.action}`);
             return;
         }
-        // Intercept use_frontier_model (client-executed frontier pass): consume an
-        // owner-reserved pass, run a one-shot Surplus completion with the agent's
-        // OWN x402 key, then finalize/revert. Shared with the runtime autonomous
-        // loop via runFrontierPass so the two paths can't drift. The gateway can't
-        // run this non-custodially.
-        if (action.action === "use_frontier_model") {
-            const res = await runFrontierPass(runtime.connection, runtime.economy, action, runtime.connection.address ?? undefined);
-            if (res.ok)
-                log(`[frontier] ${res.model} ✓ ($${res.spent_usdc})`);
-            else
-                log(`[frontier] ${res.error ?? "failed"}: ${res.message ?? ""}`);
-            return JSON.stringify(res);
+        // Intercept pay_api (per-call x402 purchase). Client-signed EIP-3009 USDC
+        // auth — runs with the agent's own key, never through the gateway. The hard
+        // USDC spend cap (budgetUsdc) is enforced here at the point of spend.
+        if (action.action === "pay_api") {
+            const privateKey = runtime.connection.privateKey;
+            if (!privateKey) {
+                log(`[reactive] pay_api skipped — no agent private key configured`);
+                return;
+            }
+            const budget = runtime.usdcBudget;
+            const maxForCall = budget.maxForNextCall(); // bigint | undefined; 0n = exhausted
+            if (maxForCall === 0n) {
+                log(`[reactive] pay_api blocked — USDC daily spend cap exhausted`);
+                return;
+            }
+            const { ethers } = await import("ethers");
+            const wallet = new ethers.Wallet(privateKey);
+            const res = await runtime.x402.payAndCall({
+                listingId: action.listingId,
+                path: String(action.path ?? ""),
+                method: action.method,
+                body: action.body,
+                ...(maxForCall !== undefined ? { maxAmountBaseUnits: maxForCall } : {}),
+            }, wallet);
+            if (res.paid && res.amountPaidBaseUnits)
+                budget.record(BigInt(res.amountPaidBaseUnits));
+            log(`[reactive] pay_api listing=${String(action.listingId)} status=${res.status} paid=${res.paid}`);
+            return;
         }
         // Dispatch-time pack guard (review §8): the Phase-3 contract gates the
         // action surface to CORE ∪ pack ∪ mounted-MCP, but prompts are only
@@ -1079,6 +1095,51 @@ export async function runAgentLoop(options) {
                 state.agentName = me.displayName ?? undefined;
             }
             catch { /* ignore */ }
+            // ── Load forge knowledge into personal KG (audit gap G4 fix) ──
+            // If this agent has a forge deployment with a linked preset,
+            // auto-load knowledge server-side on first boot.
+            try {
+                // C4 fix: gateway returns { deployments, first, skip } — no .data wrapper.
+                // The { data: depData } destructuring made deployments always [], so CLI
+                // forge auto-load was completely dead code since it was added.
+                const depData = await runtime.connection.request("GET", `/v1/forge?first=1&skip=0&creator=${encodeURIComponent(result.address)}`);
+                const deployments = depData?.deployments ?? [];
+                if (deployments.length > 0) {
+                    // Check for linked preset
+                    const presetLinks = await runtime.connection.request("GET", `/v1/forge/presets?creator=${encodeURIComponent(result.address)}&first=1`);
+                    const preset = presetLinks?.presets?.[0];
+                    if (preset?.preset_id) {
+                        log(`[knowledge] Found linked preset ${preset.preset_id} — loading into KG...`);
+                        const dsConfig = preset.dataset_config;
+                        const sources = dsConfig?.sources?.map((s) => ({ type: s.type, config: s.config ?? {} }))
+                            ?? [{ type: preset.source_type, config: {} }];
+                        const fetchResult = await runtime.connection.request("POST", "/v1/forge/data/fetch", {
+                            presetId: preset.preset_id,
+                            sources,
+                            ingestToKg: true,
+                        });
+                        if (fetchResult.kgResult) {
+                            log(`[knowledge] Loaded ${fetchResult.kgResult.ingested} items into personal KG`);
+                            if (fetchResult.kgResult.blocked > 0)
+                                log(`[knowledge] ${fetchResult.kgResult.blocked} items blocked by safety`);
+                        }
+                    }
+                }
+            }
+            catch (kgErr) {
+                // Non-fatal — agent still works, just without preset knowledge
+                const msg = kgErr instanceof Error ? kgErr.message : String(kgErr);
+                if (msg.includes("not found") || msg.includes("already")) {
+                    // Expected: no deployment or already loaded — silent
+                }
+                else if (msg.includes("402")) {
+                    // CLI-2 fix: surface insufficient balance so user knows why knowledge is missing
+                    log(`[knowledge] Insufficient NOOK balance to load forge data. Agent will operate without preset knowledge. Top up your balance and restart.`);
+                }
+                else {
+                    log(`[knowledge] Forge knowledge load skipped: ${msg}`);
+                }
+            }
             // Stop old AutonomousAgent + mining loop
             if (miningLoopTimer) {
                 clearInterval(miningLoopTimer);