@sherwoodagent/cli 0.86.1 → 0.87.0

package/dist/{chunk-6QBGTX2Q.js → chunk-V7TNYHIK.js}

@@ -1,33 +1,34 @@
 import {
   COORDINATION_NETWORK
-} from "./chunk-OUYMZ5ZC.js";
+} from "./chunk-W3XWRWML.js";
 import {
   AGENT_REGISTRY
-} from "./chunk-IAM4VIU2.js";
+} from "./chunk-UOIAY6ZG.js";
 import {
   formatContractError,
   getAccount,
   getPublicClient,
   sendTxWithRetry,
   waitForReceipt
-} from "./chunk-QRMZRAMG.js";
+} from "./chunk-MIAMGVZ4.js";
 import {
   getChain,
-  getChainConfig,
-  getRpcUrl,
   withNetwork
-} from "./chunk-PVTZMRC6.js";
+} from "./chunk-G3FUEM5N.js";
 import {
   getAgentId,
   getIdentityChainId,
   getIdentityProvider,
   getVirtualsIdentity,
-  requirePrivateKey,
   setAgentId,
   setVirtualsIdentity
 } from "./chunk-3TZIOAPH.js";
+import {
+  resolveMetadataSummary
+} from "./chunk-YMB4RJOR.js";
 
 // src/commands/identity.ts
+import { getAddress as getAddress9, isAddress as isAddress3 } from "viem";
 import { generatePrivateKey } from "viem/accounts";
 import chalk from "chalk";
 import ora from "ora";
@@ -471,27 +472,6 @@ var SYNDICATE_VAULT_ABI = [
       { name: "agentAddress", type: "address" }
     ],
     outputs: []
-  },
-  // Governor-only: mint + fund + run a single-use CallSandbox.
-  // ICallSandbox.Call is TWO fields (address,bytes). There is NO `value`.
-  {
-    name: "runSandbox",
-    type: "function",
-    stateMutability: "nonpayable",
-    inputs: [
-      { name: "pid", type: "uint256" },
-      {
-        name: "calls",
-        type: "tuple[]",
-        components: [
-          { name: "target", type: "address" },
-          { name: "data", type: "bytes" }
-        ]
-      },
-      { name: "declaredTokens", type: "address[]" },
-      { name: "funding", type: "uint256" }
-    ],
-    outputs: [{ name: "sandbox", type: "address" }]
   }
 ];
 var SYNDICATE_GOVERNOR_ABI = [
@@ -553,74 +533,6 @@ var SYNDICATE_GOVERNOR_ABI = [
     ],
     outputs: [{ name: "proposalId", type: "uint256" }]
   },
-  // proposeWithSandbox — same 10 args as propose, prefixed with SandboxPayload.
-  // ICallSandbox.Call is TWO fields (address,bytes). There is NO `value`:
-  // native value would open a transfer channel with no metering story
-  // (ICallSandbox.sol:44-51). Aliasing BatchExecutorLib.Call would reintroduce it.
-  {
-    name: "proposeWithSandbox",
-    type: "function",
-    stateMutability: "nonpayable",
-    inputs: [
-      {
-        name: "sandbox",
-        type: "tuple",
-        components: [
-          { name: "funding", type: "uint256" },
-          {
-            name: "calls",
-            type: "tuple[]",
-            components: [
-              { name: "target", type: "address" },
-              { name: "data", type: "bytes" }
-            ]
-          },
-          { name: "declaredTokens", type: "address[]" }
-        ]
-      },
-      { name: "vault", type: "address" },
-      { name: "strategy", type: "address" },
-      { name: "metadataURI", type: "string" },
-      { name: "strategyDuration", type: "uint256" },
-      {
-        name: "envelope",
-        type: "tuple",
-        components: [
-          { name: "maxCapital", type: "uint256" },
-          { name: "maxDrawdownBps", type: "uint16" }
-        ]
-      },
-      {
-        name: "executeCalls",
-        type: "tuple[]",
-        components: [
-          { name: "target", type: "address" },
-          { name: "data", type: "bytes" },
-          { name: "value", type: "uint256" }
-        ]
-      },
-      { name: "executeCallCaps", type: "uint256[]" },
-      {
-        name: "settlementCalls",
-        type: "tuple[]",
-        components: [
-          { name: "target", type: "address" },
-          { name: "data", type: "bytes" },
-          { name: "value", type: "uint256" }
-        ]
-      },
-      { name: "settlementCallCaps", type: "uint256[]" },
-      {
-        name: "coProposers",
-        type: "tuple[]",
-        components: [
-          { name: "agent", type: "address" },
-          { name: "splitBps", type: "uint256" }
-        ]
-      }
-    ],
-    outputs: [{ name: "proposalId", type: "uint256" }]
-  },
   // Lifecycle writes
   {
     name: "vote",
@@ -714,9 +626,10 @@ var SYNDICATE_GOVERNOR_ABI = [
           { name: "metadataURI", type: "string" },
           { name: "performanceFeeBps", type: "uint256" },
           { name: "strategyDuration", type: "uint256" },
-          { name: "votesFor", type: "uint256" },
+          // Optimistic governance tallies only AGAINST weight; the For /
+          // Abstain counters were dropped at v1 and `votableSupply` (the
+          // veto denominator) is appended at the tail instead.
           { name: "votesAgainst", type: "uint256" },
-          { name: "votesAbstain", type: "uint256" },
           { name: "snapshotTimestamp", type: "uint256" },
           { name: "voteEnd", type: "uint256" },
           { name: "reviewEnd", type: "uint256" },
@@ -756,36 +669,8 @@ var SYNDICATE_GOVERNOR_ABI = [
             ]
           },
           { name: "proposerBondLedger", type: "address" },
-          { name: "effectiveMaxCapital", type: "uint256" }
-        ]
-      }
-    ]
-  },
-  // sandboxPayload — ISyndicateGovernor.sol ~730 / SyndicateGovernor.sol:506.
-  // Returns SandboxPayload {funding, calls, declaredTokens}. Calls are
-  // ICallSandbox.Call = (address target, bytes data) ONLY — no `value`.
-  // Non-sandbox (and unknown) pids return the mapping default: zero funding,
-  // empty calls, empty declaredTokens. The contract does not revert.
-  {
-    name: "sandboxPayload",
-    type: "function",
-    stateMutability: "view",
-    inputs: [{ name: "proposalId", type: "uint256" }],
-    outputs: [
-      {
-        name: "payload",
-        type: "tuple",
-        components: [
-          { name: "funding", type: "uint256" },
-          {
-            name: "calls",
-            type: "tuple[]",
-            components: [
-              { name: "target", type: "address" },
-              { name: "data", type: "bytes" }
-            ]
-          },
-          { name: "declaredTokens", type: "address[]" }
+          { name: "effectiveMaxCapital", type: "uint256" },
+          { name: "votableSupply", type: "uint256" }
         ]
       }
     ]
@@ -944,19 +829,43 @@ var SYNDICATE_FACTORY_ABI = [
   }
 ];
 var PROTOCOL_CONFIG_ABI = [
+  // The two-number fee model exposes the SPLITS, not flat rates. The
+  // `protocolFeeBps` / `guardianFeeBps` scalars this ABI used to declare are
+  // on no deployed ProtocolConfig — every read through them reverted.
   {
-    name: "protocolFeeBps",
+    name: "mgmtSplit",
     type: "function",
     stateMutability: "view",
     inputs: [],
-    outputs: [{ name: "", type: "uint256" }]
+    outputs: [
+      {
+        name: "",
+        type: "tuple",
+        components: [
+          { name: "agentBps", type: "uint16" },
+          { name: "protocolBps", type: "uint16" },
+          { name: "guardianBps", type: "uint16" }
+        ]
+      }
+    ]
   },
   {
-    name: "guardianFeeBps",
+    name: "perfSplit",
     type: "function",
     stateMutability: "view",
     inputs: [],
-    outputs: [{ name: "", type: "uint256" }]
+    outputs: [
+      {
+        name: "",
+        type: "tuple",
+        components: [
+          { name: "agentBps", type: "uint16" },
+          { name: "protocolBps", type: "uint16" },
+          { name: "guardianBps", type: "uint16" },
+          { name: "ownerBps", type: "uint16" }
+        ]
+      }
+    ]
   },
   {
     name: "protocolFeeRecipient",
@@ -965,10 +874,7 @@ var PROTOCOL_CONFIG_ABI = [
     inputs: [],
     outputs: [{ name: "", type: "address" }]
   },
-  // Protocol-owner setters — post-audit ProtocolConfig has no per-rate
-  // protocol fee; the two-number model exposes the SPLITS instead. (The old
-  // `setProtocolFeeBps` entry described a function the contract no longer
-  // has; every call through it reverted.)
+  // Protocol-owner setters.
   {
     name: "setMgmtSplit",
     type: "function",
@@ -1012,8 +918,11 @@ var GUARDIAN_REGISTRY_ABI = [
   // requestUnstakeGuardian / cancelUnstakeGuardian / claimUnstakeGuardian /
   // guardianStake / isActiveGuardian to the registry reverts with empty
   // returndata. Use STAKED_WOOD_ABI against `sherwood.stakedWood`.
-  // Guardian review vote — 3 args, no slashBps. Selector 0x3ad95b6d.
-  // GuardianVoteType: None=0, Approve=1, Block=2 (uint8).
+  // Guardian review vote — 4 args. Selector 0x4915ace5. The 3-arg form
+  // (0x3ad95b6d) is on no deployed registry.
+  // GuardianVoteType: None=0, Approve=1, Block=2 (uint8). `lockWood` is the
+  // approver's declared WOOD lock, clamped to its free budget by the
+  // ExposureLedger and ignored on a Block vote.
   {
     name: "voteOnProposal",
     type: "function",
@@ -1021,7 +930,8 @@ var GUARDIAN_REGISTRY_ABI = [
     inputs: [
       { name: "governor", type: "address" },
       { name: "proposalId", type: "uint256" },
-      { name: "support", type: "uint8" }
+      { name: "support", type: "uint8" },
+      { name: "lockWood", type: "uint256" }
     ],
     outputs: []
   },
@@ -1225,30 +1135,15 @@ var PROTOCOL_SELECTORS = {
     signature: "propose(address,address,string,uint256,(uint256,uint16),(address,bytes,uint256)[],uint256[],(address,bytes,uint256)[],uint256[],(address,uint256)[])",
     selector: "0x784ea274"
   },
-  proposeWithSandbox: {
-    iface: "ISyndicateGovernor",
-    signature: "proposeWithSandbox((uint256,(address,bytes)[],address[]),address,address,string,uint256,(uint256,uint16),(address,bytes,uint256)[],uint256[],(address,bytes,uint256)[],uint256[],(address,uint256)[])",
-    selector: "0x16c0fa9c"
-  },
   voteOnProposal: {
     iface: "IGuardianRegistry",
-    signature: "voteOnProposal(address,uint256,uint8)",
-    selector: "0x3ad95b6d"
+    signature: "voteOnProposal(address,uint256,uint8,uint256)",
+    selector: "0x4915ace5"
   },
   getReviewState: {
     iface: "IGuardianRegistry",
     signature: "getReviewState(address,uint256)",
     selector: "0x043bd8b9"
-  },
-  runSandbox: {
-    iface: "ISyndicateVault",
-    signature: "runSandbox(uint256,(address,bytes)[],address[],uint256)",
-    selector: "0xb0f4c59d"
-  },
-  sweep: {
-    iface: "ICallSandbox",
-    signature: "sweep()",
-    selector: "0x35faa416"
   }
 };
 var API_CALLDATA_SELECTORS = {
@@ -1278,14 +1173,11 @@ var API_CALLDATA_SELECTORS = {
   propose: [
     { target: "governor", selector: "0x784ea274", signature: PROTOCOL_SELECTORS.propose.signature }
   ],
-  "propose-with-sandbox": [
-    { target: "governor", selector: "0x16c0fa9c", signature: PROTOCOL_SELECTORS.proposeWithSandbox.signature }
-  ],
   vote: [
     { target: "governor", selector: "0x943e8216", signature: "vote(uint256,uint8)" }
   ],
   "vote-on-proposal": [
-    { target: "guardianRegistry", selector: "0x3ad95b6d", signature: PROTOCOL_SELECTORS.voteOnProposal.signature }
+    { target: "guardianRegistry", selector: "0x4915ace5", signature: PROTOCOL_SELECTORS.voteOnProposal.signature }
   ],
   execute: [
     { target: "governor", selector: "0x0d61b519", signature: "executeProposal(uint256)" }
@@ -1346,7 +1238,6 @@ var NO_GUARDIAN_ERA = {
   protocolConfig: ZERO_ADDRESS,
   priceRouter: ZERO_ADDRESS,
   tierRegistry: ZERO_ADDRESS,
-  callSandboxImpl: ZERO_ADDRESS,
   exposureLedger: ZERO_ADDRESS,
   proposerBondEscrow: ZERO_ADDRESS,
   challengeGame: ZERO_ADDRESS,
@@ -1489,7 +1380,6 @@ var ROBINHOOD_L2 = {
     protocolConfig: "0xC104Eb6a522d6718cA28F344B2373B29d57FF2E0",
     priceRouter: "0xDd302ffcfA08071780eC1A2f12BccFB9ba6b6731",
     tierRegistry: "0x99b8068Dc0F6093466964D581f72d947e3e380DB",
-    callSandboxImpl: "0xf09f6AF7DeBB964eD731376C9Af389F2Ce3d872A",
     // Not in chains/46630.json (econ-security stack not deployed there yet).
     exposureLedger: ZERO_ADDRESS,
     proposerBondEscrow: ZERO_ADDRESS,
@@ -1516,23 +1406,22 @@ var ROBINHOOD_FORK = {
   name: "Robinhood Chain (fork)",
   slug: "robinhood-fork",
   sherwood: {
-    factory: "0x02bc9B9C1A4322D5A5df86DadA0a2a02e45108B9",
-    guardianRegistry: "0xdfEe38C4D7595c9c04AdBcaFE01E4Fd6FD6117f4",
-    stakedWood: "0xD3037D28693cc7BB3DbF1E17B6e01C4ce628f6DF",
-    vaultImpl: "0x9BF51da59B13746e6cCeb1b35c398EDA9776a4Dc",
-    batchExecutorLib: "0xdBdBce2af4222Abe0cCDAc05f84364a50577B5a2",
-    strategyFactory: "0xb3C009aECAeDd5ccC62Ec12eDAAA55F19C4A1eFb",
+    factory: "0x619af1488F32B4797f6faDa3C3a8De72a5B693E0",
+    guardianRegistry: "0xD8F9E7446E6d6c02198AAaF674A0C5e3d5D1BF72",
+    stakedWood: "0xdDf2B4C52B9575e0e6D03a3A57D75D06a4a9e203",
+    vaultImpl: "0xdaB4707c9997a84e931FE98F4688adaFc70b6B95",
+    batchExecutorLib: "0x899FC2Cac572F64A233344115b488E71E0044f34",
+    strategyFactory: "0xb06788F027268a9A06c3AD41a88559530D2E54b1",
     // Guardian-era contracts from sherwood-protocol/chains/9994663.json (SHE-93).
-    governorBeacon: "0x2e8aB422Db9127F1a70d8C38A15903f22B51DA97",
-    protocolConfig: "0x36C45dC52FbC267d8536E8456ADe5255eC83A5ab",
-    // Not in chains/9994663.json (no PriceRouter / CallSandbox on the fork).
+    governorBeacon: "0x3CF45eFE9fBDdd6cB749384Bf5c1bA5Ec96af05d",
+    protocolConfig: "0x8aDb5810B5bF8B9149BE3Ca45Cb441818a9679bB",
+    // Not in chains/9994663.json (no PriceRouter on the fork).
     priceRouter: ZERO_ADDRESS,
-    tierRegistry: "0x42B089B816F994d792481fAa308199E9CF63be9f",
-    callSandboxImpl: ZERO_ADDRESS,
-    exposureLedger: "0x223e2Fd41aD6487333146fc3998d000E74CB1549",
-    proposerBondEscrow: "0xef2D6994faCad11e6CfAF3DaBf7b0B2091009B05",
-    challengeGame: "0x202c1F133006D6706e872433CCAfD729c7A8AE56",
-    tokenCourt: "0x5DC603881f5d77f41bbd4202F1d518263Dfd497f"
+    tierRegistry: "0x4614f058920941A0a9a852e62485fbDE692D75E1",
+    exposureLedger: "0x99D789E7C8E65dB5597dCa692F082B47BE30AB33",
+    proposerBondEscrow: "0x7d25058c891d3AC5C8bc8Da6aA937DFeE648B5cF",
+    challengeGame: "0x7046FececcA6c0f5E66Cc998099593ae71A1bbee",
+    tokenCourt: "0xC30bA62727be65fd867385Ce27Ff7C78bd66A897"
   },
   // The fork is ephemeral, so attestation WRITES are disabled there (CLI
   // enforces it). Reads still resolve against the 4663 coordination chain, so
@@ -1554,10 +1443,12 @@ var ROBINHOOD_FORK = {
   // A Tenderly vnet scopes its blocks under /explorer/vnet/<id> — the bare
   // dashboard host resolves to the caller's own dashboard, not this fork.
   explorer: "https://dashboard.tenderly.co/explorer/vnet/6ad5961e-fbca-452f-939f-ca9a8c020933",
-  // PUBLIC endpoint of vnet a3fb16: reads + tx broadcast, no state-cheat
-  // surface. Admin/cheat RPCs stay private (Tenderly dashboard).
+  // PUBLIC endpoint of the vnet carrying the v1 redeploy: reads + tx
+  // broadcast, no state-cheat surface. Admin/cheat RPCs stay private
+  // (Tenderly dashboard). Retired vnets answer `not_found` rather than a
+  // transport error, so the address book is the tell for which one is live.
   rpcs: [
-    "https://virtual.robinhood-chain.eu.rpc.tenderly.co/moonwell/wormhole-bridge/231af1"
+    "https://virtual.robinhood-chain.eu.rpc.tenderly.co/moonwell/wormhole-bridge/f509bc-4fdefe"
   ]
 };
 var REGISTRY = {
@@ -1976,155 +1867,6 @@ function encodePropose(args, chainId) {
     note: "Reverts if the vault has an active proposal (cooldown not elapsed). The strategy address is immutable post-propose; pass address(0) to opt out of live NAV. `coProposers[].splitBps` total must satisfy contract-side constraints."
   };
 }
-var MAX_SANDBOX_CALLS = 32;
-var MAX_SANDBOX_TOKENS = 16;
-function validateSandboxCall(call, idx) {
-  if (!call || typeof call !== "object") {
-    throw usage(`\`sandbox.calls[${idx}]\` must be an object of {target, data}`);
-  }
-  const c = call;
-  if ("value" in c && c.value !== void 0 && c.value !== null) {
-    throw usage(`\`sandbox.calls[${idx}]\` must be (address,bytes) only \u2014 ICallSandbox.Call has no \`value\` field (native value would open an unmetered transfer channel). Do not alias BatchExecutorLib.Call.`);
-  }
-  if (typeof c.target !== "string" || !isAddress2(c.target)) {
-    throw usage(`\`sandbox.calls[${idx}].target\` must be a 0x-prefixed address`);
-  }
-  if (getAddress2(c.target) === ZERO_ADDRESS2) {
-    throw usage(`\`sandbox.calls[${idx}].target\` must not be the zero address (the governor reverts ZeroSandboxTarget)`);
-  }
-  if (typeof c.data !== "string" || !/^0x[0-9a-fA-F]*$/.test(c.data)) {
-    throw usage(`\`sandbox.calls[${idx}].data\` must be a 0x-prefixed hex string`);
-  }
-  return { target: getAddress2(c.target), data: c.data };
-}
-function validateSandboxPayload(sandbox, maxCapital) {
-  if (!sandbox || typeof sandbox !== "object") {
-    throw usage("`sandbox` must be an object of {funding, calls, declaredTokens}");
-  }
-  const s = sandbox;
-  const funding = toBigInt(s.funding, "sandbox.funding");
-  if (funding === 0n) {
-    throw usage("`sandbox.funding` must be > 0 (the governor rejects zero as ZeroSandboxFunding)");
-  }
-  if (funding > maxCapital) {
-    throw usage(`\`sandbox.funding\` (${funding}) exceeds \`envelope.maxCapital\` (${maxCapital}) \u2014 the sandbox is funded out of the declared envelope, not beside it`);
-  }
-  if (!Array.isArray(s.calls)) {
-    throw usage("`sandbox.calls` must be an array of {target, data} objects (no value)");
-  }
-  if (s.calls.length === 0) {
-    throw usage("`sandbox.calls` must be non-empty (the governor rejects empty as EmptySandboxCalls)");
-  }
-  if (s.calls.length > MAX_SANDBOX_CALLS) {
-    throw usage(`\`sandbox.calls\` has ${s.calls.length} entries; max is ${MAX_SANDBOX_CALLS}`);
-  }
-  const calls = s.calls.map((c, i) => validateSandboxCall(c, i));
-  const rawTokens = s.declaredTokens ?? [];
-  if (!Array.isArray(rawTokens)) {
-    throw usage("`sandbox.declaredTokens` must be an array of addresses");
-  }
-  if (rawTokens.length > MAX_SANDBOX_TOKENS) {
-    throw usage(`\`sandbox.declaredTokens\` has ${rawTokens.length} entries; max is ${MAX_SANDBOX_TOKENS}`);
-  }
-  const declaredTokens = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (let i = 0; i < rawTokens.length; i++) {
-    const t = rawTokens[i];
-    if (typeof t !== "string" || !isAddress2(t)) {
-      throw usage(`\`sandbox.declaredTokens[${i}]\` must be a 0x-prefixed address`);
-    }
-    const addr = getAddress2(t);
-    if (seen.has(addr.toLowerCase())) {
-      throw usage(`\`sandbox.declaredTokens[${i}]\` duplicates ${addr} (the governor reverts DuplicateSandboxToken)`);
-    }
-    seen.add(addr.toLowerCase());
-    declaredTokens.push(addr);
-  }
-  return { funding, calls, declaredTokens };
-}
-function encodeProposeWithSandbox(args, chainId) {
-  const vault = getAddress2(args.vault);
-  const governor = parseGovernor(args.governor);
-  const strategy = args.strategy === ZERO_ADDRESS2 ? ZERO_ADDRESS2 : getAddress2(args.strategy);
-  if (typeof args.metadataURI !== "string" || args.metadataURI.length === 0) {
-    throw usage("`metadataURI` must be a non-empty string (e.g. ipfs://...)");
-  }
-  const strategyDuration = typeof args.strategyDuration === "bigint" ? args.strategyDuration : BigInt(args.strategyDuration);
-  if (strategyDuration <= 0n) {
-    throw usage("`strategyDuration` must be > 0 (seconds)");
-  }
-  if (!Array.isArray(args.executeCalls)) {
-    throw usage("`executeCalls` must be an array of {target, data, value} objects");
-  }
-  if (!Array.isArray(args.settlementCalls)) {
-    throw usage("`settlementCalls` must be an array of {target, data, value} objects");
-  }
-  const executeCalls = args.executeCalls.map((c, i) => validateBatchCall(c, "executeCalls", i));
-  const settlementCalls = args.settlementCalls.map((c, i) => validateBatchCall(c, "settlementCalls", i));
-  const coProposers = (args.coProposers ?? []).map((cp, i) => {
-    if (!cp || typeof cp !== "object") {
-      throw usage(`\`coProposers[${i}]\` must be an object`);
-    }
-    const agent = cp.agent;
-    const splitBps = cp.splitBps;
-    if (typeof agent !== "string" || !isAddress2(agent)) {
-      throw usage(`\`coProposers[${i}].agent\` must be a 0x-prefixed address`);
-    }
-    let bps;
-    if (typeof splitBps === "string" && /^\d+$/.test(splitBps)) {
-      bps = BigInt(splitBps);
-    } else if (typeof splitBps === "bigint") {
-      bps = splitBps;
-    } else if (typeof splitBps === "number" && Number.isInteger(splitBps) && splitBps >= 0) {
-      bps = BigInt(splitBps);
-    } else {
-      throw usage(`\`coProposers[${i}].splitBps\` must be a non-negative integer (string, number, or bigint)`);
-    }
-    if (bps < 0n || bps > 10000n) {
-      throw usage(`\`coProposers[${i}].splitBps\` must be in [0, 10000]`);
-    }
-    return { agent: getAddress2(agent), splitBps: bps };
-  });
-  if (!args.envelope || typeof args.envelope !== "object") {
-    throw usage("`envelope` must be an object of {maxCapital, maxDrawdownBps}");
-  }
-  const maxCapital = toBigInt(args.envelope.maxCapital, "envelope.maxCapital");
-  if (maxCapital === 0n) {
-    throw usage("`envelope.maxCapital` must be > 0 (the governor rejects zero as ZeroMaxCapital)");
-  }
-  const maxDrawdownBps = args.envelope.maxDrawdownBps;
-  if (!Number.isInteger(maxDrawdownBps) || maxDrawdownBps < 0 || maxDrawdownBps > 1e4) {
-    throw usage("`envelope.maxDrawdownBps` must be an integer in [0, 10000]");
-  }
-  const executeCallCaps = validateCaps(args.executeCallCaps, executeCalls, maxCapital, "executeCallCaps");
-  const settlementCallCaps = validateCaps(args.settlementCallCaps, settlementCalls, maxCapital, "settlementCallCaps");
-  const sandbox = validateSandboxPayload(args.sandbox, maxCapital);
-  const data = encodeFunctionData2({
-    abi: SYNDICATE_GOVERNOR_ABI,
-    functionName: "proposeWithSandbox",
-    args: [
-      sandbox,
-      vault,
-      strategy,
-      args.metadataURI,
-      strategyDuration,
-      { maxCapital, maxDrawdownBps },
-      executeCalls,
-      executeCallCaps,
-      settlementCalls,
-      settlementCallCaps,
-      coProposers
-    ]
-  });
-  return {
-    txs: [governorTx(governor, chainId, data)],
-    preconditions: [
-      { type: "vault-not-locked", vault }
-    ],
-    description: `Propose a sandbox strategy on ${vault} (funding ${sandbox.funding.toString()}, ${sandbox.calls.length} sandbox call(s), duration ${strategyDuration.toString()}s).`,
-    note: "Reverts if the vault has an active proposal, has no CallSandbox implementation bound, or the payload fails propose-time sandbox gates (empty calls, zero funding, funding > maxCapital, zero target, duplicate declared tokens). ICallSandbox.Call is (address,bytes) only \u2014 no native value."
-  };
-}
 function encodeUnstick(args, chainId) {
   const governor = parseGovernor(args.governor);
   const id = parseProposalId(args.proposalId);
@@ -2632,17 +2374,21 @@ function encodeVoteOnProposal(args, chainId) {
     throw usage("`vote` must be one of: Approve, Block");
   }
   const proposalId = parseUint(args.proposalId, "proposalId");
+  if (typeof args.lockWood !== "bigint" || args.lockWood < 0n) {
+    throw usage("`lockWood` must be a non-negative bigint of WOOD base units");
+  }
+  const lockWood = args.lockWood;
   const data = encodeFunctionData7({
     abi: GUARDIAN_REGISTRY_ABI,
     functionName: "voteOnProposal",
-    args: [governor, proposalId, support]
+    args: [governor, proposalId, support, lockWood]
   });
-  const underwriting = args.vote === "Approve" ? " APPROVE books coverage against the CALLER'S OWN slashable guardian bond (ExposureLedger.recordApproval). If this proposal is later challenged or slashed, your WOOD stake is at risk \u2014 not another guardian's. An over-exposed guardian books nothing rather than reverting; the vote still lands." : " Block votes do not book coverage. Slash severity is computed at resolveReview from block-side decisiveness.";
+  const underwriting = args.vote === "Approve" ? ` APPROVE books coverage against the CALLER'S OWN slashable guardian bond (ExposureLedger.recordApproval): you declare ${lockWood.toString()} WOOD, the ledger locks that clamped to your free budget. If this proposal is later challenged or slashed, your WOOD stake is at risk \u2014 not another guardian's. An over-exposed guardian books nothing rather than reverting; the vote still lands.` : " Block votes do not book coverage, and `lockWood` is ignored. Slash severity is computed at resolveReview from block-side decisiveness.";
   return {
     txs: [registryTx(chainId, data)],
     preconditions: [],
     description: `Guardian review vote ${args.vote} on proposal ${proposalId.toString()} (governor ${governor}).`,
-    note: `voteOnProposal(governor, proposalId, vote) \u2014 3 args, selector 0x3ad95b6d, no slashBps.${underwriting}`
+    note: `voteOnProposal(governor, proposalId, vote, lockWood) \u2014 4 args, selector 0x4915ace5.${underwriting}`
   };
 }
 
@@ -2650,6 +2396,7 @@ function encodeVoteOnProposal(args, chainId) {
 import { getAddress as getAddress8 } from "viem";
 
 // src/commands/identity.ts
+var COORDINATION_CHAIN_ID = 4663;
 var IDENTITY_REGISTRY_ABI2 = [
   {
     name: "balanceOf",
@@ -2664,63 +2411,77 @@ var IDENTITY_REGISTRY_ABI2 = [
     stateMutability: "view",
     inputs: [{ name: "tokenId", type: "uint256" }],
     outputs: [{ name: "", type: "address" }]
+  },
+  {
+    name: "tokenURI",
+    type: "function",
+    stateMutability: "view",
+    inputs: [{ name: "tokenId", type: "uint256" }],
+    outputs: [{ name: "", type: "string" }]
   }
 ];
-function getAgent0SDK() {
-  const key = requirePrivateKey();
-  const chain = getChain();
-  const sdkConfig = {
-    chainId: chain.id,
-    rpcUrl: getRpcUrl(),
-    privateKey: key
-  };
-  if (chain.id !== getChainConfig().chain.id) {
-    sdkConfig.registryOverrides = {
-      [chain.id]: {
-        IDENTITY: AGENT_REGISTRY().IDENTITY_REGISTRY,
-        REPUTATION: AGENT_REGISTRY().REPUTATION_REGISTRY
-      }
-    };
+async function ownedAgentIds(wallet) {
+  const client = getPublicClient();
+  const registry = AGENT_REGISTRY().IDENTITY_REGISTRY;
+  const balance = await client.readContract({
+    address: registry,
+    abi: IDENTITY_REGISTRY_ABI2,
+    functionName: "balanceOf",
+    args: [wallet]
+  });
+  if (balance === 0n) return [];
+  const logs = await client.getLogs({
+    address: registry,
+    event: {
+      type: "event",
+      name: "Transfer",
+      inputs: [
+        { indexed: true, name: "from", type: "address" },
+        { indexed: true, name: "to", type: "address" },
+        { indexed: true, name: "tokenId", type: "uint256" }
+      ]
+    },
+    args: { from: "0x0000000000000000000000000000000000000000", to: wallet },
+    fromBlock: 0n
+  });
+  const minted = [...new Set(logs.map((l) => l.args?.tokenId).filter((id) => id != null))];
+  const owned = [];
+  for (const id of minted) {
+    try {
+      const owner = await client.readContract({
+        address: registry,
+        abi: IDENTITY_REGISTRY_ABI2,
+        functionName: "ownerOf",
+        args: [id]
+      });
+      if (owner.toLowerCase() === wallet.toLowerCase()) owned.push(id);
+    } catch {
+    }
   }
-  return new SDK(sdkConfig);
+  return owned;
+}
+async function lookupAgentIdsByWallet(wallet) {
+  return withNetwork(COORDINATION_NETWORK, () => ownedAgentIds(wallet));
 }
 async function lookupAgentIdByWallet(wallet) {
-  return withNetwork(COORDINATION_NETWORK, async () => {
-    const client = getPublicClient();
-    const registry = AGENT_REGISTRY().IDENTITY_REGISTRY;
-    const balance = await client.readContract({
-      address: registry,
-      abi: [{
-        name: "balanceOf",
-        type: "function",
-        stateMutability: "view",
-        inputs: [{ name: "owner", type: "address" }],
-        outputs: [{ name: "", type: "uint256" }]
-      }],
-      functionName: "balanceOf",
-      args: [wallet]
-    });
-    if (balance === 0n) return null;
-    const logs = await client.getLogs({
-      address: registry,
-      event: {
-        type: "event",
-        name: "Transfer",
-        inputs: [
-          { indexed: true, name: "from", type: "address" },
-          { indexed: true, name: "to", type: "address" },
-          { indexed: true, name: "tokenId", type: "uint256" }
-        ]
-      },
-      args: { from: "0x0000000000000000000000000000000000000000", to: wallet },
-      fromBlock: 0n
+  const ids = await lookupAgentIdsByWallet(wallet);
+  return ids[ids.length - 1] ?? null;
+}
+async function readIdentityMetadata(tokenId) {
+  try {
+    const uri = await getPublicClient().readContract({
+      address: AGENT_REGISTRY().IDENTITY_REGISTRY,
+      abi: IDENTITY_REGISTRY_ABI2,
+      functionName: "tokenURI",
+      args: [tokenId]
     });
-    const last = logs[logs.length - 1];
-    return last?.args?.tokenId ?? null;
-  });
+    return await resolveMetadataSummary(uri);
+  } catch {
+    return null;
+  }
 }
 function registerIdentityCommands(program) {
-  const identity = program.command("identity").description("Manage ERC-8004 agent identity (via Agent0 SDK)");
+  const identity = program.command("identity").description("Manage ERC-8004 agent identity (on Robinhood mainnet, chain 4663)");
   identity.command("mint").description("Register a new ERC-8004 agent identity (required before creating/joining vaults)").requiredOption("--name <name>", "Agent name (e.g. 'Alpha Seeker Agent')").option("--description <desc>", "Agent description", "Sherwood vault agent").option("--image <uri>", "Agent image URI (IPFS recommended)").action(async (opts) => {
     if (isCalldataOnly()) {
       emitCalldata(
@@ -2730,7 +2491,7 @@ function registerIdentityCommands(program) {
             description: opts.description,
             image: opts.image
           },
-          4663
+          COORDINATION_CHAIN_ID
         )
       );
       return;
@@ -2754,7 +2515,7 @@ function registerIdentityCommands(program) {
         }
         const action = encodeIdentityMint(
           { name: opts.name, description: opts.description, image: opts.image },
-          4663
+          COORDINATION_CHAIN_ID
         );
         const tx = action.txs[0];
         const hash = await sendTxWithRetry({
@@ -2815,7 +2576,7 @@ function registerIdentityCommands(program) {
       process.exit(1);
     }
   });
-  identity.command("link-virtuals").description("Link a Virtuals economyOS agent identity (ERC-8004 on Base) to this Sherwood install").option("--wallet <address>", "economyOS agent wallet (default: auto-detect via `acp wallet address`)").option("--agent-id <tokenId>", "ERC-8004 token ID on the issuing chain (default: resolve via Agent0 SDK)").option("--chain-id <id>", "Issuing chain ID (4663 = Robinhood Chain, 8453 = Base, 84532 = Base Sepolia)", String(DEFAULT_ISSUING_CHAIN_ID)).option("--binding-sig <hex>", "EIP-191 signature of the binding message by the economyOS wallet").option("--wallet-only", "Link without an ERC-8004 registration \u2014 the economyOS wallet + binding signature are the identity (agentId 0)").action(async (opts) => {
+  identity.command("link-virtuals").description("Link a Virtuals economyOS agent identity (ERC-8004 on Robinhood Chain or Base) to this Sherwood install").option("--wallet <address>", "economyOS agent wallet (default: auto-detect via `acp wallet address`)").option("--agent-id <tokenId>", "ERC-8004 token ID on the issuing chain (default: resolve from that chain's registry)").option("--chain-id <id>", "Issuing chain ID (4663 = Robinhood Chain, 8453 = Base, 84532 = Base Sepolia)", String(DEFAULT_ISSUING_CHAIN_ID)).option("--binding-sig <hex>", "EIP-191 signature of the binding message by the economyOS wallet").option("--wallet-only", "Link without an ERC-8004 registration \u2014 the economyOS wallet + binding signature are the identity (agentId 0)").action(async (opts) => {
     const account = getAccount();
     const issuingChainId = opts.walletOnly ? WALLET_ONLY_CHAIN_ID : parseInt(opts.chainId, 10);
     if (!opts.walletOnly && !ISSUING_CHAINS[issuingChainId]) {
@@ -2844,6 +2605,24 @@ function registerIdentityCommands(program) {
         tokenId = 0n;
       } else if (opts.agentId) {
         tokenId = BigInt(opts.agentId);
+      } else if (issuingChainId === COORDINATION_CHAIN_ID) {
+        spinner.text = `Searching the ERC-8004 registry on Robinhood mainnet (${COORDINATION_CHAIN_ID}) for ${virtualsWallet}...`;
+        const ids = await lookupAgentIdsByWallet(virtualsWallet);
+        if (ids.length === 0) {
+          spinner.fail(`No ERC-8004 registration found for ${virtualsWallet} on chain ${issuingChainId}`);
+          console.error(chalk.dim("  Register first via the Virtuals CLI:"));
+          console.error(chalk.dim(`    acp agent register-erc8004 --agent-id ${virtualsAgentId ?? "<id>"} --chain-id ${issuingChainId}`));
+          console.error(chalk.dim("  Then re-run this command (or pass --agent-id <tokenId> directly)."));
+          console.error(chalk.dim("  No registration possible yet? Link without one: --wallet-only"));
+          process.exit(1);
+        }
+        if (ids.length > 1) {
+          spinner.fail(`Wallet ${virtualsWallet} has ${ids.length} ERC-8004 registrations on chain ${issuingChainId} \u2014 pick one explicitly`);
+          for (const id of ids) console.error(chalk.dim(`    #${id}`));
+          console.error(chalk.green("  Re-run with: sherwood identity link-virtuals --agent-id <tokenId>"));
+          process.exit(1);
+        }
+        tokenId = ids[0];
       } else {
         spinner.text = `Searching ERC-8004 registry on chain ${issuingChainId} for ${virtualsWallet}...`;
         const sdk = new SDK({
@@ -2947,40 +2726,41 @@ function registerIdentityCommands(program) {
       process.exit(1);
     }
   });
-  identity.command("find").description("Search ERC-8004 agents by wallet address or name (recover a lost agent ID)").option("--wallet <address>", "Filter by owner / wallet address").option("--name <text>", "Filter by agent name (exact or substring match, depending on registry)").option("--all-chains", "Search across all chains, not just the active one").action(async (opts) => {
-    if (!opts.wallet && !opts.name) {
-      console.error(chalk.red("Pass --wallet <address> or --name <text> (or both)."));
+  identity.command("find").description("Find ERC-8004 agent identities held by a wallet (recover a lost agent ID)").option("--wallet <address>", "Owner / wallet address").option("--name <text>", "(unsupported \u2014 name search needs an indexer; see the error it prints)").action(async (opts) => {
+    if (opts.name) {
+      console.error(chalk.red("Name search is not available."));
+      console.error(chalk.dim("  Identity lives on Robinhood mainnet (4663) and no indexer covers that chain,"));
+      console.error(chalk.dim("  so there is nothing to query by name. Search by owner instead:"));
+      console.error(chalk.dim("    sherwood identity find --wallet <address>"));
+      process.exit(1);
+    }
+    if (!opts.wallet || !isAddress3(opts.wallet)) {
+      console.error(chalk.red("Pass --wallet <address> (a 0x-prefixed address)."));
       process.exit(1);
     }
-    const spinner = ora("Searching ERC-8004 registry...").start();
+    const wallet = getAddress9(opts.wallet);
+    const spinner = ora(`Searching the ERC-8004 registry on Robinhood mainnet (${COORDINATION_CHAIN_ID})...`).start();
     try {
-      const sdk = getAgent0SDK();
-      const filters = {};
-      if (opts.wallet) filters.walletAddress = opts.wallet;
-      if (opts.name) filters.name = opts.name;
-      filters.chains = opts.allChains ? "all" : [getChain().id];
-      const results = await sdk.searchAgents(filters);
+      const found = await withNetwork(COORDINATION_NETWORK, async () => {
+        const ids = await ownedAgentIds(wallet);
+        return Promise.all(ids.map(async (id) => ({ id, meta: await readIdentityMetadata(id) })));
+      });
       spinner.stop();
-      if (results.length === 0) {
-        console.log(chalk.dim("No agents found matching those filters."));
-        console.log(chalk.dim("If you minted on a different chain, retry with --all-chains."));
+      if (found.length === 0) {
+        console.log(chalk.dim(`No identity minted to ${wallet} on Robinhood mainnet (${COORDINATION_CHAIN_ID}).`));
+        console.log(chalk.dim("  Mint one: sherwood identity mint --name <name>"));
+        console.log(chalk.dim("  Already have one you received by transfer? Bind it directly:"));
+        console.log(chalk.dim("    sherwood identity load --id <tokenId>"));
         return;
       }
       console.log();
-      console.log(chalk.bold(`Found ${results.length} agent${results.length === 1 ? "" : "s"}`));
+      console.log(chalk.bold(`Found ${found.length} agent${found.length === 1 ? "" : "s"}`));
       console.log(chalk.dim("\u2500".repeat(50)));
-      for (const a of results) {
-        const idStr = String(a.agentId);
-        const tokenId = idStr.includes(":") ? idStr.split(":")[1] : idStr;
-        console.log(`  ${chalk.bold(`#${tokenId}`)}  ${a.name || chalk.dim("(no name)")}`);
-        console.log(chalk.dim(`    Chain:  ${a.chainId}`));
-        console.log(chalk.dim(`    Full:   ${idStr}`));
-        if (a.owners?.length) {
-          console.log(chalk.dim(`    Owner:  ${a.owners[0]}`));
-        }
-        if (a.walletAddress) {
-          console.log(chalk.dim(`    Wallet: ${a.walletAddress}`));
-        }
+      for (const { id, meta } of found) {
+        console.log(`  ${chalk.bold(`#${id}`)}  ${meta?.name || chalk.dim("(no name)")}`);
+        console.log(chalk.dim(`    Chain:  Robinhood mainnet (${COORDINATION_CHAIN_ID})`));
+        console.log(chalk.dim(`    Owner:  ${wallet}`));
+        if (meta?.description) console.log(chalk.dim(`    Desc:   ${meta.description}`));
       }
       console.log();
       console.log(chalk.green("To bind one of these to this machine:"));
@@ -2995,7 +2775,7 @@ function registerIdentityCommands(program) {
     const account = getAccount();
     if (getIdentityProvider() === "virtuals") {
       const virtuals = getVirtualsIdentity();
-      const savedId = getAgentId();
+      const savedId2 = getAgentId();
       const issuingChainId = getIdentityChainId();
       console.log();
       console.log(chalk.bold("Agent Identity (ERC-8004 via Virtuals economyOS)"));
@@ -3005,14 +2785,14 @@ function registerIdentityCommands(program) {
       if (virtuals?.agentId) console.log(`  Virtuals agent:   ${virtuals.agentId}`);
       const walletOnly = issuingChainId === WALLET_ONLY_CHAIN_ID;
       console.log(`  Issuing chain:    ${walletOnly ? chalk.yellow("wallet-only (no ERC-8004)") : issuingChainId ?? chalk.red("(missing)")}`);
-      console.log(`  Saved ID:         ${savedId != null ? walletOnly ? chalk.dim("0 (wallet-only)") : `#${savedId}` : chalk.red("(missing)")}`);
-      if (virtuals?.wallet && savedId != null && issuingChainId != null) {
+      console.log(`  Saved ID:         ${savedId2 != null ? walletOnly ? chalk.dim("0 (wallet-only)") : `#${savedId2}` : chalk.red("(missing)")}`);
+      if (virtuals?.wallet && savedId2 != null && issuingChainId != null) {
         const spinner2 = ora("Re-verifying link...").start();
         try {
           let ownerOk = true;
           let owner;
           if (!walletOnly) {
-            owner = await ownerOfOnIssuingChain(issuingChainId, BigInt(savedId));
+            owner = await ownerOfOnIssuingChain(issuingChainId, BigInt(savedId2));
             ownerOk = owner.toLowerCase() === virtuals.wallet.toLowerCase();
           }
           let bindingOk = virtuals.wallet.toLowerCase() === account.address.toLowerCase();
@@ -3020,7 +2800,7 @@ function registerIdentityCommands(program) {
             bindingOk = await verifyBinding({
               sherwoodEoa: account.address,
               issuingChainId,
-              tokenId: BigInt(savedId),
+              tokenId: BigInt(savedId2),
               virtualsWallet: virtuals.wallet,
               signature: virtuals.binding.sig
             });
@@ -3047,86 +2827,79 @@ function registerIdentityCommands(program) {
       console.log();
       return;
     }
-    const registry = AGENT_REGISTRY().IDENTITY_REGISTRY;
-    const client = getPublicClient();
-    const spinner = ora("Checking identity...").start();
+    const savedId = getAgentId();
+    const hasSavedId = savedId != null && savedId !== 0;
+    const spinner = ora(`Checking identity on Robinhood mainnet (${COORDINATION_CHAIN_ID})...`).start();
     try {
-      const balance = await client.readContract({
-        address: registry,
-        abi: IDENTITY_REGISTRY_ABI2,
-        functionName: "balanceOf",
-        args: [account.address]
+      const state = await withNetwork(COORDINATION_NETWORK, async () => {
+        const registry = AGENT_REGISTRY().IDENTITY_REGISTRY;
+        const client = getPublicClient();
+        const balance = await client.readContract({
+          address: registry,
+          abi: IDENTITY_REGISTRY_ABI2,
+          functionName: "balanceOf",
+          args: [account.address]
+        });
+        let owner = null;
+        let meta = null;
+        if (hasSavedId) {
+          try {
+            owner = await client.readContract({
+              address: registry,
+              abi: IDENTITY_REGISTRY_ABI2,
+              functionName: "ownerOf",
+              args: [BigInt(savedId)]
+            });
+          } catch {
+            owner = null;
+          }
+          if (owner?.toLowerCase() === account.address.toLowerCase()) {
+            meta = await readIdentityMetadata(BigInt(savedId));
+          }
+        }
+        const owned = !hasSavedId && balance > 0n ? await ownedAgentIds(account.address) : [];
+        return { registry, balance, owner, meta, owned };
       });
       spinner.stop();
-      const savedId = getAgentId();
       console.log();
       console.log(chalk.bold("Agent Identity (ERC-8004)"));
       console.log(chalk.dim("\u2500".repeat(40)));
       console.log(`  Wallet:     ${account.address}`);
-      console.log(`  Registry:   ${registry}`);
-      console.log(`  NFTs owned: ${balance.toString()}`);
-      if (savedId) {
-        try {
-          const owner = await client.readContract({
-            address: registry,
-            abi: IDENTITY_REGISTRY_ABI2,
-            functionName: "ownerOf",
-            args: [BigInt(savedId)]
-          });
-          const isOwner = owner.toLowerCase() === account.address.toLowerCase();
-          console.log(`  Saved ID:   #${savedId} ${isOwner ? chalk.green("(verified)") : chalk.red("(owned by " + owner + ")")}`);
-          if (isOwner) {
-            try {
-              const sdk = getAgent0SDK();
-              const agent = await sdk.loadAgent(`${getChain().id}:${savedId}`);
-              if (agent.name) console.log(`  Name:       ${agent.name}`);
-              if (agent.description) console.log(`  Desc:       ${chalk.dim(agent.description)}`);
-              if (agent.walletAddress) console.log(`  Wallet:     ${agent.walletAddress}`);
-            } catch {
-            }
-          }
-        } catch {
+      console.log(`  Chain:      Robinhood mainnet (${COORDINATION_CHAIN_ID}) \u2014 the coordination chain`);
+      console.log(`  Registry:   ${state.registry}`);
+      console.log(`  NFTs owned: ${state.balance.toString()}`);
+      if (hasSavedId) {
+        if (state.owner == null) {
           console.log(`  Saved ID:   #${savedId} ${chalk.red("(token not found)")}`);
+        } else {
+          const isOwner = state.owner.toLowerCase() === account.address.toLowerCase();
+          console.log(`  Saved ID:   #${savedId} ${isOwner ? chalk.green("(verified)") : chalk.red("(owned by " + state.owner + ")")}`);
+          console.log(`  Owner:      ${state.owner}`);
+          if (state.meta?.name) console.log(`  Name:       ${state.meta.name}`);
+          if (state.meta?.description) console.log(`  Desc:       ${chalk.dim(state.meta.description)}`);
         }
         console.log();
-      } else if (balance > 0n) {
-        console.log(`  Saved ID:   ${chalk.yellow("none (but this wallet owns NFTs \u2014 listing below)")}`);
+      } else if (state.owned.length > 0) {
+        console.log(`  Saved ID:   ${chalk.yellow("none (but this wallet owns identities \u2014 listing below)")}`);
         console.log();
-        const lookupSpinner = ora("Resolving owned token IDs via Agent0 SDK...").start();
-        try {
-          const sdk = getAgent0SDK();
-          const results = await sdk.searchAgents({
-            walletAddress: account.address,
-            chains: [getChain().id]
-          });
-          lookupSpinner.stop();
-          if (results.length === 0) {
-            console.log(chalk.dim("  No agents resolved for this wallet on the active chain."));
-            console.log(chalk.dim("  If you minted on a different chain, try:"));
-            console.log(chalk.dim("    sherwood identity find --wallet " + account.address + " --all-chains"));
-          } else {
-            console.log(chalk.bold(`  Owned identities on this chain (${results.length}):`));
-            for (const a of results) {
-              const idStr = String(a.agentId);
-              const tokenId = idStr.includes(":") ? idStr.split(":")[1] : idStr;
-              console.log(`    ${chalk.bold(`#${tokenId}`)}  ${a.name || chalk.dim("(no name)")}`);
-            }
-            console.log();
-            console.log(chalk.green("  Bind one to this machine:"));
-            if (results.length === 1) {
-              const idStr = String(results[0].agentId);
-              const tokenId = idStr.includes(":") ? idStr.split(":")[1] : idStr;
-              console.log(chalk.dim(`    sherwood identity load --id ${tokenId}`));
-            } else {
-              console.log(chalk.dim("    sherwood identity load --id <tokenId>"));
-            }
-          }
-        } catch (err) {
-          lookupSpinner.warn("Could not resolve owned token IDs via Agent0 SDK");
-          console.log(chalk.dim(`  ${err.message}`));
-          console.log(chalk.dim("  Try: sherwood identity find --wallet " + account.address));
+        console.log(chalk.bold(`  Identities held by this wallet (${state.owned.length}):`));
+        for (const id of state.owned) {
+          console.log(`    ${chalk.bold(`#${id}`)}`);
         }
         console.log();
+        console.log(chalk.green("  Bind one to this machine:"));
+        console.log(
+          chalk.dim(
+            state.owned.length === 1 ? `    sherwood identity load --id ${state.owned[0]}` : "    sherwood identity load --id <tokenId>"
+          )
+        );
+        console.log();
+      } else if (state.balance > 0n) {
+        console.log(`  Saved ID:   ${chalk.yellow("none")}`);
+        console.log(chalk.dim("  This wallet holds identities that were not minted to it, and the"));
+        console.log(chalk.dim("  registry is not enumerable \u2014 bind yours by id:"));
+        console.log(chalk.dim("    sherwood identity load --id <tokenId>"));
+        console.log();
       } else {
         console.log(`  Saved ID:   ${chalk.dim("none \u2014 run 'sherwood identity mint --name <name>'")}`);
         console.log();
@@ -3152,7 +2925,6 @@ export {
   encodeSettle,
   encodeCancel,
   encodePropose,
-  encodeProposeWithSandbox,
   encodeUnstick,
   encodeEmergencySettle,
   encodeGovernorParam,
@@ -3171,7 +2943,8 @@ export {
   stripVidTag,
   verifyVidTag,
   makeOwnerOfCache,
+  lookupAgentIdsByWallet,
   lookupAgentIdByWallet,
   registerIdentityCommands
 };
-//# sourceMappingURL=chunk-6QBGTX2Q.js.map
+//# sourceMappingURL=chunk-V7TNYHIK.js.map