@sherwoodagent/cli 0.89.2 → 0.90.0

package/dist/index.js

@@ -15,14 +15,17 @@ import {
   checkApiKeyValid,
   listModels,
   provisionApiKey
-} from "./chunk-JLOROS5V.js";
+} from "./chunk-74QYNLJE.js";
 import {
   createFund,
   getActiveFunds,
   getFund,
   subdomainExists,
   updateMetadata
-} from "./chunk-VD65GJOY.js";
+} from "./chunk-DQZJULNP.js";
+import {
+  addLaunchpadTemplateOptions
+} from "./chunk-KXUA5BEH.js";
 import {
   FORK_UNOBSERVABLE_REASON,
   LIGHTER_API_PROFILES,
@@ -54,8 +57,8 @@ import {
   removeDepositor,
   setAgentFeeBps,
   setVaultAddress
-} from "./chunk-OYP35TFK.js";
-import "./chunk-TGWTRG3V.js";
+} from "./chunk-J3JMMJLN.js";
+import "./chunk-KRASHQRB.js";
 import {
   CL_DEFAULTS,
   DEFAULT_FEE_TIER,
@@ -89,7 +92,22 @@ import {
   selectBestFeeTier,
   twapTickFromCumulatives,
   v3SingleHopExtraData
-} from "./chunk-MIW4CBSU.js";
+} from "./chunk-ZCRVHITI.js";
+import {
+  CLAIM_SETTLE_BUFFER_SECONDS,
+  DEFAULT_DEADLINE_MARGIN_SECONDS,
+  LaunchpadInputError,
+  buildLaunchpadInitParams,
+  decideLaunchDrawdown,
+  defaultMaxFeeIn,
+  liveFeeCost,
+  parseAmountFlag,
+  parseDeadline,
+  parseDurationSeconds,
+  parseSettleSlippageBps,
+  parseVenue,
+  sameAddr
+} from "./chunk-T5NA6KOF.js";
 import {
   DEFAULT_ISSUING_CHAIN_ID,
   STRATEGY_FACTORY_ABI,
@@ -109,6 +127,7 @@ import {
   encodeJoinRequest,
   encodeMgmtSplit,
   encodePerfSplit,
+  encodePrepareOwnerStake,
   encodePropose,
   encodeRedeem,
   encodeRegisterAgent,
@@ -123,12 +142,12 @@ import {
   registerIdentityCommands,
   stripVidTag,
   verifyVidTag
-} from "./chunk-H6AJMPLT.js";
+} from "./chunk-XQHRKFFH.js";
 import {
-  fetchMetadata,
-  mergeFundMetadata,
-  uploadMetadata
-} from "./chunk-YMB4RJOR.js";
+  emitCalldata,
+  isCalldataOnly,
+  setCalldataOnly
+} from "./chunk-GAQMHH44.js";
 import {
   createApproval,
   createJoinRequest,
@@ -138,13 +157,13 @@ import {
   queryJoinRequests,
   revokeJoinRequest,
   stripReferrerPrefix
-} from "./chunk-QEX2TWJV.js";
+} from "./chunk-2SIUEMPV.js";
 import {
   resolveFund,
   resolveVaultFund,
   searchFundAcrossChains,
   setTextRecord
-} from "./chunk-LVGYGXAV.js";
+} from "./chunk-KPTKX226.js";
 import {
   PROPOSAL_STATE,
   PROPOSAL_STATES,
@@ -183,50 +202,7 @@ import {
   setVotingPeriod,
   settleProposal,
   vote
-} from "./chunk-TWJXGEBZ.js";
-import {
-  LIGHTER_DEFAULT_API_KEY_INDEX,
-  LIGHTER_MAX_DEPOSIT,
-  acknowledgeShortfallCalldata,
-  buildPostSettleRecoveryCalls,
-  deriveBurnPubKey,
-  encodeCancelAll,
-  encodeClosePosition,
-  encodeRotateKey,
-  guardrailActionCalldata,
-  initiateReturnCalldata,
-  isLighterPubKeyOnCurve,
-  queueWithdrawCalldata,
-  recoverResidualsCalldata,
-  registerAgentKeyCalldata,
-  usdgToTicksFloor,
-  validateLighterKeyIndex,
-  validateLighterMarket,
-  validateLighterPubKey
-} from "./chunk-TCUSM4V7.js";
-import {
-  addLaunchpadTemplateOptions
-} from "./chunk-VVCSD2M6.js";
-import {
-  CLAIM_SETTLE_BUFFER_SECONDS,
-  DEFAULT_DEADLINE_MARGIN_SECONDS,
-  LaunchpadInputError,
-  buildLaunchpadInitParams,
-  decideLaunchDrawdown,
-  defaultMaxFeeIn,
-  liveFeeCost,
-  parseAmountFlag,
-  parseDeadline,
-  parseDurationSeconds,
-  parseSettleSlippageBps,
-  parseVenue,
-  sameAddr
-} from "./chunk-T5NA6KOF.js";
-import {
-  emitCalldata,
-  isCalldataOnly,
-  setCalldataOnly
-} from "./chunk-GAQMHH44.js";
+} from "./chunk-5XMQQ4LX.js";
 import {
   AERODROME,
   LAUNCH_ADAPTERS,
@@ -247,7 +223,7 @@ import {
   sendTxWithRetry,
   waitForReceipt,
   writeContractWithRetry
-} from "./chunk-Z53JZORT.js";
+} from "./chunk-I7NYU4JB.js";
 import {
   DEFAULT_NETWORK,
   VALID_NETWORKS,
@@ -284,6 +260,26 @@ import {
   setUniswapApiKey,
   setVeniceApiKey
 } from "./chunk-QUAVAJWE.js";
+import {
+  LIGHTER_DEFAULT_API_KEY_INDEX,
+  LIGHTER_MAX_DEPOSIT,
+  acknowledgeShortfallCalldata,
+  buildPostSettleRecoveryCalls,
+  deriveBurnPubKey,
+  encodeCancelAll,
+  encodeClosePosition,
+  encodeRotateKey,
+  guardrailActionCalldata,
+  initiateReturnCalldata,
+  isLighterPubKeyOnCurve,
+  queueWithdrawCalldata,
+  recoverResidualsCalldata,
+  registerAgentKeyCalldata,
+  usdgToTicksFloor,
+  validateLighterKeyIndex,
+  validateLighterMarket,
+  validateLighterPubKey
+} from "./chunk-TCUSM4V7.js";
 import {
   BASE_STRATEGY_ABI,
   ERC20_ABI,
@@ -297,6 +293,11 @@ import {
   SYNDICATE_VAULT_ABI,
   VENICE_STAKING_ABI
 } from "./chunk-SCWNKVNW.js";
+import {
+  fetchMetadata,
+  mergeFundMetadata,
+  uploadMetadata
+} from "./chunk-YMB4RJOR.js";
 
 // src/index.ts
 import { config as loadDotenv } from "dotenv";
@@ -522,7 +523,7 @@ var HYPERLIQUID_GRID_STRATEGY_ABI = [
 ];
 
 // src/commands/strategy-template-lib.ts
-import { parseUnits as parseUnits3, formatUnits as formatUnits4, isAddress as isAddress4, erc20Abi as erc20Abi3 } from "viem";
+import { parseUnits as parseUnits3, formatUnits as formatUnits4, isAddress as isAddress4, erc20Abi as erc20Abi3, encodeFunctionData, maxUint256 } from "viem";
 import chalk3 from "chalk";
 
 // src/lib/proposer-bond-error.ts
@@ -560,7 +561,8 @@ var STAKED_WOOD_ABI = [
   { type: "function", name: "claimUnstakeGuardian", inputs: [], outputs: [], stateMutability: "nonpayable" },
   // Views
   { type: "function", name: "guardianStake", inputs: [{ type: "address" }], outputs: [{ type: "uint256" }], stateMutability: "view" },
-  { type: "function", name: "isActiveGuardian", inputs: [{ type: "address" }], outputs: [{ type: "bool" }], stateMutability: "view" }
+  { type: "function", name: "isActiveGuardian", inputs: [{ type: "address" }], outputs: [{ type: "bool" }], stateMutability: "view" },
+  { type: "function", name: "minOwnerStake", inputs: [], outputs: [{ type: "uint256" }], stateMutability: "view" }
 ];
 var ERC20_ABI2 = [
   { type: "function", name: "approve", inputs: [{ type: "address" }, { type: "uint256" }], outputs: [{ type: "bool" }], stateMutability: "nonpayable" },
@@ -692,6 +694,19 @@ function registerGuardianCommands(program2) {
     "Bond WOOD as a prospective vault owner \u2014 required before `vault create`. Amount in WOOD (min = swood.minOwnerStake, default 10000)."
   ).action(async (amountStr) => {
     const amount = parseUnits(amountStr, 18);
+    if (isCalldataOnly()) {
+      const min = await getPublicClient().readContract({
+        address: swood(),
+        abi: STAKED_WOOD_ABI,
+        functionName: "minOwnerStake"
+      });
+      if (amount < min) {
+        console.error(chalk.red(`Owner stake must be at least ${formatUnits2(min, 18)} WOOD (StakedWood.minOwnerStake).`));
+        process.exit(1);
+      }
+      emitCalldata(encodePrepareOwnerStake({ amount }, getChain().id));
+      return;
+    }
     await ensureWoodAllowance(amount);
     const wallet = getWalletClient();
     const pc = getPublicClient();
@@ -1805,84 +1820,120 @@ function capsForCalls(calls, strategy2, maxCapital) {
     return seen === 1 ? share + remainder : share;
   });
 }
-async function ensureProposerBondAllowance(vault, requiredCoverage, asset) {
+async function pinProposalMetadata(meta) {
+  const { pinJSON } = await import("./ipfs-M56BLMCW.js");
   try {
-    const publicClient = getPublicClient();
-    const governor = await getGovernorOf(vault);
-    const govViews = [
-      {
-        type: "function",
-        name: "bondEscrow",
-        inputs: [],
-        outputs: [{ type: "address" }],
-        stateMutability: "view"
-      },
-      {
-        type: "function",
-        name: "exposureLedger",
-        inputs: [],
-        outputs: [{ type: "address" }],
-        stateMutability: "view"
-      }
-    ];
-    const escrow = await publicClient.readContract({
+    const uri = await pinJSON(meta, meta.name);
+    console.error(chalk3.dim(`  Metadata pinned: ${uri}`));
+    return uri;
+  } catch {
+    console.error(
+      chalk3.yellow("  IPFS pin failed \u2014 using inline metadata. The app renders only ipfs:// metadata; pass --metadata-uri to override.")
+    );
+    const inline = JSON.stringify({ ...meta, createdBy: "@sherwoodagent/cli" });
+    return `data:application/json;base64,${Buffer.from(inline).toString("base64")}`;
+  }
+}
+var BOND_GOVERNOR_VIEWS = [
+  { type: "function", name: "bondEscrow", inputs: [], outputs: [{ type: "address" }], stateMutability: "view" },
+  { type: "function", name: "exposureLedger", inputs: [], outputs: [{ type: "address" }], stateMutability: "view" }
+];
+var PROPOSER_BOND_WOOD_ABI = [
+  {
+    type: "function",
+    name: "proposerBondWood",
+    inputs: [
+      { name: "asset", type: "address" },
+      { name: "requiredCoverage", type: "uint256" }
+    ],
+    outputs: [{ type: "uint256" }],
+    stateMutability: "view"
+  }
+];
+async function quoteProposerBond(vault, requiredCoverage, asset) {
+  const publicClient = getPublicClient();
+  const governor = await getGovernorOf(vault);
+  const escrow = await publicClient.readContract({
+    address: governor,
+    abi: BOND_GOVERNOR_VIEWS,
+    functionName: "bondEscrow"
+  });
+  if (!escrow || escrow === ZERO2) return null;
+  let quotedBond = 0n;
+  try {
+    const ledger = await publicClient.readContract({
       address: governor,
-      abi: govViews,
-      functionName: "bondEscrow"
+      abi: BOND_GOVERNOR_VIEWS,
+      functionName: "exposureLedger"
     });
-    if (!escrow || escrow === ZERO2) return;
-    let quotedBond = 0n;
-    try {
-      const ledger = await publicClient.readContract({
-        address: governor,
-        abi: govViews,
-        functionName: "exposureLedger"
+    if (ledger && ledger !== ZERO2 && requiredCoverage > 0n) {
+      quotedBond = await publicClient.readContract({
+        address: ledger,
+        abi: PROPOSER_BOND_WOOD_ABI,
+        functionName: "proposerBondWood",
+        args: [asset, requiredCoverage]
       });
-      if (ledger && ledger !== ZERO2 && requiredCoverage > 0n) {
-        quotedBond = await publicClient.readContract({
-          address: ledger,
-          abi: [
-            {
-              type: "function",
-              name: "proposerBondWood",
-              inputs: [
-                { name: "asset", type: "address" },
-                { name: "requiredCoverage", type: "uint256" }
-              ],
-              outputs: [{ type: "uint256" }],
-              stateMutability: "view"
-            }
-          ],
-          functionName: "proposerBondWood",
-          args: [asset, requiredCoverage]
-        });
-      }
-    } catch {
-    }
-    console.log(
-      chalk3.dim(
-        `  Quoted proposer bond: ${formatUnits4(quotedBond, 18)} WOOD (via ExposureLedger.proposerBondWood; ~1% of extractable value at default proposerBondBps, WOOD-denominated and price-dependent \u2014 not a fixed WOOD amount)`
-      )
-    );
-    console.log(chalk3.dim(`  Proposer bond escrow: ${escrow} \u2014 ensuring WOOD allowance`));
-    if (quotedBond > 0n) {
-      const wood2 = SHERWOOD().WOOD_TOKEN;
-      const holder = getAccount().address;
-      const balance = await publicClient.readContract({
-        address: wood2,
-        abi: erc20Abi3,
-        functionName: "balanceOf",
-        args: [holder]
-      });
-      if (balance < quotedBond) {
-        throw new InsufficientProposerBondWood(quotedBond, balance);
-      }
     }
-    await ensureWoodAllowance(2n ** 255n, escrow, "WOOD (proposer bond)");
+  } catch {
+  }
+  return { escrow, quotedBond };
+}
+function bondQuoteLines(quote) {
+  return [
+    `  Quoted proposer bond: ${formatUnits4(quote.quotedBond, 18)} WOOD (via ExposureLedger.proposerBondWood; ~1% of extractable value at default proposerBondBps, WOOD-denominated and price-dependent \u2014 not a fixed WOOD amount)`,
+    `  Proposer bond escrow: ${quote.escrow}`
+  ];
+}
+async function requireBondWood(holder, quotedBond) {
+  if (quotedBond === 0n) return;
+  const balance = await getPublicClient().readContract({
+    address: SHERWOOD().WOOD_TOKEN,
+    abi: erc20Abi3,
+    functionName: "balanceOf",
+    args: [holder]
+  });
+  if (balance < quotedBond) throw new InsufficientProposerBondWood(quotedBond, balance);
+}
+async function ensureProposerBondAllowance(vault, requiredCoverage, asset) {
+  try {
+    const quote = await quoteProposerBond(vault, requiredCoverage, asset);
+    if (!quote) return;
+    for (const line of bondQuoteLines(quote)) console.log(chalk3.dim(line));
+    await requireBondWood(getAccount().address, quote.quotedBond);
+    await ensureWoodAllowance(2n ** 255n, quote.escrow, "WOOD (proposer bond)");
   } catch (err) {
     if (err instanceof InsufficientProposerBondWood) throw err;
   }
 }
+async function proposerBondApprovalTxs(vault, requiredCoverage, asset, proposer, chainId) {
+  let quote;
+  try {
+    quote = await quoteProposerBond(vault, requiredCoverage, asset);
+  } catch {
+    return [];
+  }
+  if (!quote) return [];
+  for (const line of bondQuoteLines(quote)) console.error(chalk3.dim(line));
+  const wood2 = SHERWOOD().WOOD_TOKEN;
+  if (proposer) {
+    await requireBondWood(proposer, quote.quotedBond);
+    const allowance = await getPublicClient().readContract({
+      address: wood2,
+      abi: erc20Abi3,
+      functionName: "allowance",
+      args: [proposer, quote.escrow]
+    });
+    if (allowance >= 2n ** 255n) return [];
+  }
+  return [
+    {
+      to: wood2,
+      data: encodeFunctionData({ abi: erc20Abi3, functionName: "approve", args: [quote.escrow, maxUint256] }),
+      value: "0x0",
+      chainId
+    }
+  ];
+}
 
 // src/commands/strategy-propose.ts
 import { formatUnits as formatUnits5, isAddress as isAddress5, erc20Abi as erc20Abi4 } from "viem";
@@ -1919,7 +1970,7 @@ function registerStrategyProposeCommands(strategy2) {
     if (isCalldataOnly()) {
       const missing = [];
       if (!opts.proposer) missing.push("--proposer <address> (the external signer)");
-      if (!opts.metadataUri) missing.push("--metadata-uri <uri> (IPFS pin needs a signer)");
+      if (!opts.metadataUri && !opts.name) missing.push("--name <name> (or --metadata-uri <uri>)");
       if (!opts.duration) missing.push("--duration <d>");
       if (missing.length > 0) {
         console.error(chalk4.red(`--calldata-only requires: ${missing.join(", ")}`));
@@ -1984,7 +2035,7 @@ function registerStrategyProposeCommands(strategy2) {
           }
         }
         if (templateKey === "lighter-perp") {
-          const { runLighterProposePreflight } = await import("./lighter-preflight-7J3IO27F.js");
+          const { runLighterProposePreflight } = await import("./lighter-preflight-R7C6HY3M.js");
           await runLighterProposePreflight(vault, opts, maxDrawdownBps);
         }
       } catch (err) {
@@ -1992,7 +2043,7 @@ function registerStrategyProposeCommands(strategy2) {
         process.exit(1);
       }
       if (!opts.agent) opts.agent = proposer;
-      const { parseDuration: parseDuration3, getGovernorOf: getGovernorOf2 } = await import("./governor-6HCXMRIA.js");
+      const { parseDuration: parseDuration3, getGovernorOf: getGovernorOf2 } = await import("./governor-53PNPDCZ.js");
       const strategyDuration2 = parseDuration3(opts.duration);
       const chainId = getChain().id;
       try {
@@ -2015,12 +2066,23 @@ function registerStrategyProposeCommands(strategy2) {
           built.assetAmount,
           built.extraApprovals
         );
+        const metadataURI2 = opts.metadataUri || await pinProposalMetadata({
+          name: opts.name,
+          description: opts.description || "",
+          proposer,
+          vault,
+          strategyClone: deploy.clone,
+          template: def.key,
+          strategyDuration: Number(strategyDuration2),
+          createdAt: (/* @__PURE__ */ new Date()).toISOString()
+        });
+        const bondTxs = await proposerBondApprovalTxs(vault, built.assetAmount, built.asset, proposer, chainId);
         const proposeAction = encodePropose(
           {
             vault,
             governor,
             strategy: deploy.clone,
-            metadataURI: opts.metadataUri,
+            metadataURI: metadataURI2,
             strategyDuration: strategyDuration2,
             // Same envelope + cap shape the broadcasting path uses, so the
             // emitted calldata is the transaction that path would send.
@@ -2033,14 +2095,14 @@ function registerStrategyProposeCommands(strategy2) {
           chainId
         );
         emitCalldata({
-          txs: [...deploy.txs, ...proposeAction.txs],
+          txs: [...bondTxs, ...deploy.txs, ...proposeAction.txs],
           preconditions: [...deploy.preconditions, ...proposeAction.preconditions],
           // Surface the deterministic clone + salt as structured fields (also
           // baked into tx 2's `strategy` arg + the execute/settle calls).
           clone: deploy.clone,
           salt: deploy.salt,
-          description: `Keyless ${def.name} proposal on ${vault}: (1) deploy clone at ${deploy.clone} (deterministic CREATE2, salt ${deploy.salt}); (2) governor.propose referencing it.`,
-          note: "Broadcast SEQUENTIALLY: send tx 1 (cloneAndInitDeterministic) and WAIT for it to confirm, then send tx 2 (propose). If tx 1 reverts \u2014 proposer not a registered agent, proposer != tx-1 signer, template not allowlisted, or vault unregistered \u2014 do NOT send tx 2: it would create a proposal referencing an undeployed strategy. Send tx 1 from the --proposer wallet (the factory requires proposer == msg.sender, and msg.sender must be a vault owner/agent). The clone address is pinned by (factory, template, vault, salt) and is already baked into tx 2 + the execute/settle calls. The factory binds the salt to the vault and only the vault's owner/agents may deploy there, so the predicted address can't be front-run."
+          description: `Keyless ${def.name} proposal on ${vault}: ` + (bondTxs.length ? "WOOD.approve(proposer-bond escrow); " : "") + `deploy clone at ${deploy.clone} (deterministic CREATE2, salt ${deploy.salt}); governor.propose referencing it.`,
+          note: "Broadcast SEQUENTIALLY from the --proposer wallet, waiting for each tx to confirm before the next. " + (bondTxs.length ? "The first tx approves WOOD to the proposer-bond escrow \u2014 propose pulls the bond from the proposer and reverts without it. " : "") + "If cloneAndInitDeterministic reverts \u2014 proposer not a registered agent, proposer != signer, template not allowlisted, or vault unregistered \u2014 do NOT send propose: it would create a proposal referencing an undeployed strategy. The factory requires proposer == msg.sender, and msg.sender must be a vault owner/agent. The clone address is pinned by (factory, template, vault, salt) and is already baked into the propose tx + the execute/settle calls. The factory binds the salt to the vault and only the vault's owner/agents may deploy there, so the predicted address can't be front-run."
         });
       } catch (err) {
         console.error(chalk4.red(err instanceof Error ? err.message : String(err)));
@@ -2110,7 +2172,7 @@ function registerStrategyProposeCommands(strategy2) {
         }
       }
       if (templateKey === "lighter-perp") {
-        const { runLighterProposePreflight } = await import("./lighter-preflight-7J3IO27F.js");
+        const { runLighterProposePreflight } = await import("./lighter-preflight-R7C6HY3M.js");
         await runLighterProposePreflight(vault, opts, maxDrawdownBps);
       }
       preflightSpinner.succeed("Preflight OK");
@@ -2227,9 +2289,9 @@ function registerStrategyProposeCommands(strategy2) {
       console.error(chalk4.red("Missing --name or --duration. Use --write-calls to skip proposal submission."));
       process.exit(1);
     }
-    const { propose: propose2 } = await import("./governor-6HCXMRIA.js");
+    const { propose: propose2 } = await import("./governor-53PNPDCZ.js");
     const { pinJSON } = await import("./ipfs-M56BLMCW.js");
-    const { parseDuration: parseDuration2 } = await import("./governor-6HCXMRIA.js");
+    const { parseDuration: parseDuration2 } = await import("./governor-53PNPDCZ.js");
     const strategyDuration = parseDuration2(opts.duration);
     const metaSpinner = ora2("Pinning metadata to IPFS...").start();
     let metadataURI;
@@ -2261,7 +2323,7 @@ function registerStrategyProposeCommands(strategy2) {
       metadataURI = `data:application/json;base64,${Buffer.from(inline).toString("base64")}`;
     }
     try {
-      const { getAgentFeeBps: getAgentFeeBps2 } = await import("./vault-NLMVWYDF.js");
+      const { getAgentFeeBps: getAgentFeeBps2 } = await import("./vault-3T6UHCPE.js");
       const feeBps = await getAgentFeeBps2(vault);
       console.log(
         chalk4.yellow(
@@ -2312,7 +2374,7 @@ function registerStrategyProposeCommands(strategy2) {
       console.log(chalk4.yellow(`     asset.approve(${clone}, <repaymentAmount>)`));
     }
     if (templateKey === "lighter-perp") {
-      const { lighterNextSteps } = await import("./lighter-preflight-7J3IO27F.js");
+      const { lighterNextSteps } = await import("./lighter-preflight-R7C6HY3M.js");
       console.log();
       for (const line of lighterNextSteps(clone)) console.log(chalk4.yellow(line));
     }
@@ -2584,7 +2646,7 @@ function registerStrategyTemplateCommands(strategy2) {
       let prices = [];
       let priceSource = null;
       try {
-        const { getTokenPricesInAsset } = await import("./price-4FGWEPKX.js");
+        const { getTokenPricesInAsset } = await import("./price-PBFF6NFU.js");
         prices = await getTokenPricesInAsset({
           tokens: allocations.map((a, i) => ({
             token: a.token,
@@ -3001,7 +3063,7 @@ function registerVeniceCommands(program2) {
       console.log(chalk6.dim(`  Key: ${apiKey.slice(0, 8)}...${apiKey.slice(-4)}`));
       console.log(chalk6.dim("  Saved to ~/.sherwood/config.json"));
       try {
-        const { createVeniceProvisionAttestation, getEasScanUrl } = await import("./eas-F6KOWI4W.js");
+        const { createVeniceProvisionAttestation, getEasScanUrl } = await import("./eas-YTAAJSLU.js");
         const attestation = await createVeniceProvisionAttestation(account.address);
         if (attestation) {
           console.log(chalk6.dim(`  Attested: ${getEasScanUrl(attestation.uid)}`));
@@ -3357,7 +3419,7 @@ ${opts.prompt}`;
         console.log(chalk6.dim(`Model: ${result.model} | Tokens: ${result.usage.promptTokens} in, ${result.usage.completionTokens} out, ${result.usage.totalTokens} total`));
       }
       try {
-        const { createVeniceInferenceAttestation, getEasScanUrl } = await import("./eas-F6KOWI4W.js");
+        const { createVeniceInferenceAttestation, getEasScanUrl } = await import("./eas-YTAAJSLU.js");
         const { keccak256: keccak2562, toHex, isAddress: isAddr } = await import("viem");
         const { getChainContracts: getChainContracts2 } = await import("./config-UZ2GIXAO.js");
         const { getChain: getActiveChain } = await import("./network-EZ5X2BF7.js");
@@ -3389,7 +3451,7 @@ import chalk7 from "chalk";
 import ora5 from "ora";
 
 // src/strategies/allowance-disburse.ts
-import { encodeFunctionData, parseUnits as parseUnits7 } from "viem";
+import { encodeFunctionData as encodeFunctionData2, parseUnits as parseUnits7 } from "viem";
 function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDecimals2, minUsdc, swapPath) {
   const assetAmount = parseUnits7(config.amount, assetDecimals2);
   const isUsdc = assetAddress.toLowerCase() === TOKENS().USDC.toLowerCase();
@@ -3398,7 +3460,7 @@ function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDec
   if (!isUsdc) {
     calls.push({
       target: assetAddress,
-      data: encodeFunctionData({
+      data: encodeFunctionData2({
         abi: ERC20_ABI,
         functionName: "approve",
         args: [UNISWAP().SWAP_ROUTER, assetAmount]
@@ -3408,7 +3470,7 @@ function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDec
     if (isWeth) {
       calls.push({
         target: UNISWAP().SWAP_ROUTER,
-        data: encodeFunctionData({
+        data: encodeFunctionData2({
           abi: SWAP_ROUTER_EXACT_INPUT_SINGLE_ABI,
           functionName: "exactInputSingle",
           args: [
@@ -3428,7 +3490,7 @@ function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDec
     } else {
       calls.push({
         target: UNISWAP().SWAP_ROUTER,
-        data: encodeFunctionData({
+        data: encodeFunctionData2({
           abi: SWAP_ROUTER_ABI,
           functionName: "exactInput",
           args: [
@@ -3448,7 +3510,7 @@ function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDec
   for (const agent of agents) {
     calls.push({
       target: TOKENS().USDC,
-      data: encodeFunctionData({
+      data: encodeFunctionData2({
         abi: ERC20_ABI,
         functionName: "transfer",
         args: [agent, perAgent]
@@ -3658,13 +3720,13 @@ function registerAllowanceCommands(program2) {
 }
 
 // src/commands/proposal.ts
-import { isAddress as isAddress9, encodeFunctionData as encodeFunctionData3, formatUnits as formatUnits9, parseUnits as parseUnits9 } from "viem";
+import { isAddress as isAddress9, encodeFunctionData as encodeFunctionData4, formatUnits as formatUnits9, parseUnits as parseUnits9 } from "viem";
 import chalk9 from "chalk";
 import ora6 from "ora";
 import { readFileSync as readFileSync2 } from "fs";
 
 // src/lib/simulate.ts
-import { decodeFunctionData as decodeFunctionData2, encodeFunctionData as encodeFunctionData2 } from "viem";
+import { decodeFunctionData as decodeFunctionData2, encodeFunctionData as encodeFunctionData3 } from "viem";
 import chalk8 from "chalk";
 
 // src/lib/risk.ts
@@ -4224,7 +4286,7 @@ async function simulateViaEthCall(vault, calls) {
   const governor = await getGovernorOf(vault);
   const client = getPublicClient();
   const uncapped = calls.map(() => MAX_UINT256);
-  const input2 = encodeFunctionData2({
+  const input2 = encodeFunctionData3({
     abi: SYNDICATE_VAULT_ABI,
     functionName: "executeGovernorBatch",
     args: [
@@ -4356,8 +4418,8 @@ function printSimulationResult(result, callType) {
 }
 async function sendSimulationAlert(subdomain, proposalId, vault, execResult, settleResult) {
   try {
-    const xmtp = await import("./xmtp-H5GTOJ43.js");
-    const { getAccount: getAccount2 } = await import("./client-DA434B67.js");
+    const xmtp = await import("./xmtp-EOMKXRTB.js");
+    const { getAccount: getAccount2 } = await import("./client-3BFK7TNL.js");
     const group = await xmtp.getGroup("", subdomain);
     const allRisks = [...execResult.risks, ...settleResult?.risks ?? []];
     const criticals = allRisks.filter((r) => r.level === "critical");
@@ -4605,7 +4667,7 @@ function registerProposalCommands(program2) {
   ).option(
     "--settle-caps <list>",
     "Comma-separated per-settlement-call outflow caps in asset units. Default: 0 for every call, because a settlement returns assets to the vault rather than sending them."
-  ).option("--metadata-uri <uri>", "Override \u2014 skip IPFS upload and use this URI directly").option("--simulate", "Simulate calls via Tenderly before submitting").option("--force", "Submit even if simulation fails (requires --simulate)").action(async (opts) => {
+  ).option("--metadata-uri <uri>", "Override \u2014 skip IPFS upload and use this URI directly").option("--proposer <address>", "With --calldata-only: the wallet that will send propose (recorded in metadata; enables the proposer-bond balance/allowance preflight)").option("--simulate", "Simulate calls via Tenderly before submitting").option("--force", "Submit even if simulation fails (requires --simulate)").action(async (opts) => {
     try {
       const vault = opts.vault;
       if (!isAddress9(vault)) {
@@ -4625,46 +4687,72 @@ function registerProposalCommands(program2) {
         strategy2 = opts.strategy;
       }
       if (isCalldataOnly()) {
-        if (!opts.metadataUri) {
-          console.error(
-            chalk9.red(
-              "--calldata-only requires --metadata-uri (IPFS metadata upload needs a signing wallet)"
-            )
-          );
-          process.exit(1);
+        let proposer;
+        if (opts.proposer) {
+          if (!isAddress9(opts.proposer)) {
+            console.error(chalk9.red(`Invalid --proposer address: ${opts.proposer}`));
+            process.exit(1);
+          }
+          proposer = opts.proposer;
         }
         const calldataEnvelope = await resolveRiskEnvelope(opts, vault);
         const capDecimals2 = await assetDecimals(vault);
+        const chainId = getChain().id;
         try {
-          emitCalldata(
-            encodePropose(
-              {
-                vault,
-                governor: await getGovernorOf(vault),
-                strategy: strategy2,
-                metadataURI: opts.metadataUri,
-                strategyDuration,
-                envelope: calldataEnvelope,
-                executeCalls,
-                executeCallCaps: resolveCaps(
-                  opts.executeCaps,
-                  executeCalls.length,
-                  calldataEnvelope.maxCapital,
-                  "--execute-caps",
-                  capDecimals2
-                ),
-                settlementCalls: settleCalls,
-                settlementCallCaps: resolveCaps(
-                  opts.settleCaps,
-                  settleCalls.length,
-                  0n,
-                  "--settle-caps",
-                  capDecimals2
-                )
-              },
-              getChain().id
-            )
+          const metadataURI2 = opts.metadataUri || await pinProposalMetadata({
+            schema: "sherwood/proposal/v1",
+            name: opts.name,
+            description: opts.description,
+            chain: getNetwork(),
+            strategies: [],
+            terms: {},
+            links: {},
+            ...proposer ? { proposer } : {},
+            vault,
+            strategyDuration: Number(strategyDuration),
+            createdAt: Math.floor(Date.now() / 1e3)
+          });
+          const bondTxs = await proposerBondApprovalTxs(
+            vault,
+            calldataEnvelope.maxCapital,
+            await getAssetAddress(vault),
+            proposer,
+            chainId
+          );
+          const proposeAction = encodePropose(
+            {
+              vault,
+              governor: await getGovernorOf(vault),
+              strategy: strategy2,
+              metadataURI: metadataURI2,
+              strategyDuration,
+              envelope: calldataEnvelope,
+              executeCalls,
+              executeCallCaps: resolveCaps(
+                opts.executeCaps,
+                executeCalls.length,
+                calldataEnvelope.maxCapital,
+                "--execute-caps",
+                capDecimals2
+              ),
+              settlementCalls: settleCalls,
+              settlementCallCaps: resolveCaps(
+                opts.settleCaps,
+                settleCalls.length,
+                0n,
+                "--settle-caps",
+                capDecimals2
+              )
+            },
+            chainId
           );
+          emitCalldata({
+            ...proposeAction,
+            txs: [...bondTxs, ...proposeAction.txs],
+            ...bondTxs.length ? {
+              note: "Send in order from the proposing agent's wallet: the WOOD approval to the proposer-bond escrow first \u2014 propose pulls the bond and reverts without it." + (proposeAction.note ? ` ${proposeAction.note}` : "")
+            } : {}
+          });
         } catch (err) {
           console.error(chalk9.red(err instanceof Error ? err.message : String(err)));
           process.exit(1);
@@ -5301,7 +5389,7 @@ function registerProposalCommands(program2) {
         process.exit(1);
       }
       const asset = await getAssetAddress(vault);
-      const noopCalldata = encodeFunctionData3({
+      const noopCalldata = encodeFunctionData4({
         abi: ERC20_ABI,
         functionName: "balanceOf",
         args: [vault]
@@ -5679,7 +5767,7 @@ function registerProposalCommands(program2) {
           txs: [
             {
               to: governor,
-              data: encodeFunctionData3({
+              data: encodeFunctionData4({
                 abi: SYNDICATE_GOVERNOR_ABI,
                 functionName: "reclaimProposerBond",
                 args: [proposalId]
@@ -5858,6 +5946,20 @@ var VAULT_QUEUE_ABI = [
     inputs: [],
     outputs: [{ name: "", type: "address" }]
   },
+  {
+    name: "redemptionsLocked",
+    type: "function",
+    stateMutability: "view",
+    inputs: [],
+    outputs: [{ name: "", type: "bool" }]
+  },
+  {
+    name: "depositsLocked",
+    type: "function",
+    stateMutability: "view",
+    inputs: [],
+    outputs: [{ name: "", type: "bool" }]
+  },
   {
     type: "event",
     name: "DepositRequested",
@@ -5938,6 +6040,103 @@ var QUEUE_ABI = [
   }
 ];
 var KIND_LABELS = ["Redeem", "Deposit"];
+var KIND_REDEEM = 0;
+var NEVER_STAMPS = /* @__PURE__ */ new Set([
+  PROPOSAL_STATE.Rejected,
+  PROPOSAL_STATE.Expired,
+  PROPOSAL_STATE.Cancelled,
+  PROPOSAL_STATE.Settled
+]);
+function classifyRequest(args) {
+  const { request: r, stamped, proposalState } = args;
+  if (r.claimed) return { kind: "claimed" };
+  if (r.cancelled) return { kind: "cancelled" };
+  if (r.kind === KIND_REDEEM) {
+    if (!stamped) {
+      if (proposalState !== void 0 && NEVER_STAMPS.has(proposalState)) {
+        return { kind: "stranded", pid: r.pid, state: PROPOSAL_STATES[proposalState] ?? `state ${proposalState}` };
+      }
+      return { kind: "waiting", pid: r.pid };
+    }
+    return args.redemptionsLocked ? { kind: "locked" } : { kind: "claimable" };
+  }
+  return args.depositsLocked ? { kind: "locked" } : { kind: "claimable" };
+}
+function formatRequestStatus(status) {
+  switch (status.kind) {
+    case "claimed":
+      return "claimed";
+    case "cancelled":
+      return "cancelled";
+    case "claimable":
+      return "claimable";
+    case "waiting":
+      return `waiting for pid ${status.pid} to settle`;
+    case "stranded":
+      return `stranded (pid ${status.pid} ended ${status.state} \u2014 cancel it)`;
+    case "locked":
+      return "waiting for vault to unlock";
+  }
+}
+function claimRefusal(status, vault, id) {
+  const cancelCmd = `sherwood queue cancel --vault ${vault} --id ${id}`;
+  switch (status.kind) {
+    case "claimable":
+      return void 0;
+    case "claimed":
+      return `Request #${id} has already been claimed.`;
+    case "cancelled":
+      return `Request #${id} was cancelled \u2014 its escrow was already returned.`;
+    case "stranded":
+      return `Request #${id} is stranded: pid ${status.pid} ended ${status.state} without settling, so no claim price will ever be stamped (claim would revert NotSettled).
+Get the shares back with:
+  ${cancelCmd}
+then redeem directly.`;
+    case "waiting":
+      return `Request #${id} is waiting for pid ${status.pid} to settle \u2014 no claim price is stamped yet (claim would revert NotSettled). Retry after it settles.
+If pid ${status.pid} ends Rejected/Expired/Cancelled instead, run:
+  ${cancelCmd}`;
+    case "locked":
+      return `Request #${id} cannot be claimed while the vault is locked by an open proposal (claim would revert VaultLocked). Retry once it settles.`;
+  }
+}
+async function loadRequestStatuses(vault, queue, requests) {
+  const client = getPublicClient();
+  const [redemptionsLocked, depositsLocked] = await Promise.all([
+    client.readContract({ address: vault, abi: VAULT_QUEUE_ABI, functionName: "redemptionsLocked" }),
+    client.readContract({ address: vault, abi: VAULT_QUEUE_ABI, functionName: "depositsLocked" })
+  ]);
+  const pids = [
+    ...new Set(
+      requests.filter((r) => r.kind === KIND_REDEEM && !r.claimed && !r.cancelled).map((r) => r.pid)
+    )
+  ];
+  const stampedByPid = /* @__PURE__ */ new Map();
+  const stateByPid = /* @__PURE__ */ new Map();
+  await Promise.all(
+    pids.map(async (pid) => {
+      const sp = await client.readContract({
+        address: queue,
+        abi: QUEUE_ABI,
+        functionName: "getSettlePrice",
+        args: [pid]
+      });
+      stampedByPid.set(pid, sp.stamped);
+      if (!sp.stamped) {
+        stateByPid.set(pid, await getProposalState(vault, pid).catch(() => void 0));
+      }
+    })
+  );
+  return requests.map(
+    (request) => classifyRequest({
+      request,
+      stamped: stampedByPid.get(request.pid) ?? false,
+      proposalState: stateByPid.get(request.pid),
+      redemptionsLocked,
+      depositsLocked
+    })
+  );
+}
 function resolveVaultAddress(opt) {
   if (!opt || !isAddress10(opt)) {
     console.error(chalk10.red(`Invalid or missing --vault address: ${opt ?? "(none)"}`));
@@ -6097,9 +6296,17 @@ function registerQueueCommands(program2) {
     const vault = resolveVaultAddress(opts.vault);
     const account = getAccount();
     const id = BigInt(opts.id);
-    const spinner = ora7(`Claiming request #${id}...`).start();
+    const spinner = ora7(`Checking request #${id}...`).start();
     try {
       const queueAddr = await getQueueAddress(vault);
+      const [status] = await loadRequestStatuses(vault, queueAddr, [await readRequest(queueAddr, id)]);
+      const refusal = claimRefusal(status, vault, id);
+      if (refusal) {
+        spinner.fail(`Not claimable: ${formatRequestStatus(status)}`);
+        console.error(chalk10.yellow(refusal));
+        process.exit(1);
+      }
+      spinner.text = `Claiming request #${id}...`;
       const hash = await writeContractWithRetry({
         account,
         chain: getChain(),
@@ -6164,20 +6371,21 @@ function registerQueueCommands(program2) {
         return;
       }
       const requests = await Promise.all(ids.map((id) => readRequest(queueAddr, id)));
+      const statuses = await loadRequestStatuses(vault, queueAddr, requests);
       spinner.stop();
       console.log();
       console.log(chalk10.bold(`Queue requests (${ids.length}) \u2014 ${account.address}`));
-      console.log(chalk10.dim("\u2500".repeat(72)));
+      console.log(chalk10.dim("\u2500".repeat(100)));
       console.log(
         chalk10.dim(
-          `  ${"id".padEnd(6)}${"kind".padEnd(9)}${"amount".padEnd(26)}${"pid".padEnd(6)}${"claimed".padEnd(9)}cancelled`
+          `  ${"id".padEnd(6)}${"kind".padEnd(9)}${"amount".padEnd(26)}${"pid".padEnd(6)}${"claimed".padEnd(9)}${"cancelled".padEnd(11)}status`
         )
       );
       ids.forEach((id, i) => {
         const r = requests[i];
         const label = KIND_LABELS[r.kind] ?? `kind ${r.kind}`;
         console.log(
-          `  ${String(id).padEnd(6)}${label.padEnd(9)}${String(r.amount).padEnd(26)}${String(r.pid).padEnd(6)}${String(r.claimed).padEnd(9)}${r.cancelled}`
+          `  ${String(id).padEnd(6)}${label.padEnd(9)}${String(r.amount).padEnd(26)}${String(r.pid).padEnd(6)}${String(r.claimed).padEnd(9)}${String(r.cancelled).padEnd(11)}${formatRequestStatus(statuses[i])}`
         );
       });
       console.log();
@@ -9969,9 +10177,9 @@ try {
 } catch {
 }
 var require2 = createRequire(import.meta.url);
-var CLI_VERSION = "0.89.2";
+var CLI_VERSION = "0.90.0";
 async function loadXmtp() {
-  return import("./xmtp-H5GTOJ43.js");
+  return import("./xmtp-EOMKXRTB.js");
 }
 async function loadCron() {
   return import("./cron-E3UAZF5B.js");
@@ -10026,6 +10234,10 @@ program.name("sherwood").description("CLI for agent-managed onchain vaults").ver
 ).hook("preAction", (thisCommand) => {
   const opts = thisCommand.optsWithGlobals();
   setCalldataOnly(Boolean(opts.calldataOnly));
+  if (opts.calldataOnly) {
+    console.log = console.error;
+    console.info = console.error;
+  }
   setNetwork(opts.chain);
 });
 var LEGACY_GROUP_ALIASES = ["fund", "syndicate"];
@@ -10167,20 +10379,22 @@ vaultCmd.command("create").description("Launch a new vault via the factory (inte
       }
     }
     if (isCalldataOnly()) {
-      emitCalldata(
-        encodeCreateFund(
-          {
-            creatorAgentId: agentIdStr,
-            metadataURI,
-            asset,
-            name,
-            symbol,
-            openDeposits,
-            subdomain
-          },
-          getChain().id
-        )
+      const action = encodeCreateFund(
+        {
+          creatorAgentId: agentIdStr,
+          metadataURI,
+          asset,
+          name,
+          symbol,
+          openDeposits,
+          subdomain
+        },
+        getChain().id
       );
+      emitCalldata({
+        ...action,
+        note: `${action.note} Bond first with \`sherwood --calldata-only guardian prepare-owner-stake <amount>\`. After this tx confirms, register the creator as an agent (the factory does not, and proposing requires it): read the vault with \`sherwood vault info ${subdomain}\`, then send \`sherwood --calldata-only vault add --vault <vault> --wallet <creator> --agent-id ${agentIdStr}\`.`
+      });
       return;
     }
     const existingId = await subdomainExists(subdomain);
@@ -10642,7 +10856,7 @@ vaultCmd.command("add").description("Register an agent on a vault (creator only)
       agentId = BigInt(opts.agentId);
     } else {
       spinner.text = "Looking up ERC-8004 identity from wallet...";
-      const { lookupAgentIdByWallet } = await import("./identity-2JEZE7DV.js");
+      const { lookupAgentIdByWallet } = await import("./identity-M6UIVBNX.js");
       const resolved = await lookupAgentIdByWallet(agentWallet);
       if (resolved === null) {
         spinner.fail("Agent wallet does not own an ERC-8004 identity NFT");
@@ -11345,7 +11559,7 @@ vaultCmd.command("redeem").description("Redeem vault shares for the underlying a
 var strategy = program.command("strategy").description("Strategy templates \u2014 list, clone, propose");
 registerStrategyTemplateCommands(strategy);
 program.command("providers").description("List available providers (research + swap routing)").action(async () => {
-  const { listProviders } = await import("./providers-XEEFKITN.js");
+  const { listProviders } = await import("./providers-22A42FKP.js");
   for (const info2 of listProviders()) {
     console.log(`
 ${info2.name} (${info2.type})`);
@@ -11355,7 +11569,7 @@ ${info2.name} (${info2.type})`);
   }
 });
 try {
-  const { registerChatCommands } = await import("./chat-QVDOCCJN.js");
+  const { registerChatCommands } = await import("./chat-PFXIL6WT.js");
   registerChatCommands(program);
 } catch {
   program.command("chat <name> [action] [actionArgs...]").description("Vault chat (XMTP) \u2014 requires @xmtp/cli").action(() => {
@@ -11365,7 +11579,7 @@ try {
     process.exit(1);
   });
 }
-var { registerSessionCommands } = await import("./session-775NKMGH.js");
+var { registerSessionCommands } = await import("./session-GSWEE4M3.js");
 registerSessionCommands(program);
 registerVeniceCommands(program);
 registerAllowanceCommands(program);
@@ -11374,15 +11588,15 @@ registerProposalCommands(program);
 registerQueueCommands(program);
 registerGovernorCommands(program);
 registerGuardianCommands(program);
-var { registerResearchCommands } = await import("./research-CJOSSD4U.js");
+var { registerResearchCommands } = await import("./research-ZH34O7YL.js");
 registerResearchCommands(program);
-var { registerAgentCommands } = await import("./agent-K5ZKUS47.js");
+var { registerAgentCommands } = await import("./agent-QU2OSWS4.js");
 registerAgentCommands(program);
-var { registerTradeCommands } = await import("./trade-PCK3LONN.js");
+var { registerTradeCommands } = await import("./trade-SHK7GKSI.js");
 registerTradeCommands(program);
 registerGridCommand(program);
 registerLighterCommands(program);
-var { registerLaunchpadCommands } = await import("./launchpad-XM4546BO.js");
+var { registerLaunchpadCommands } = await import("./launchpad-LHMBN4TV.js");
 registerLaunchpadCommands(program);
 var configCmd = program.command("config");
 configCmd.command("set").description("Save settings to ~/.sherwood/config.json (persists across sessions)").option("--private-key <key>", "Wallet private key (0x-prefixed)").option("--vault <address>", "Default vault address").option("--rpc <url>", "Custom RPC URL for the active --chain network").option("--notify-to <id>", "Destination for cron summaries (Telegram chat ID, phone, etc.)").option("--uniswap-api-key <key>", "Uniswap Trading API key (from developers.uniswap.org)").option("--venice-api-key <key>", "Venice AI inference API key").option("--anthropic-api-key <key>", "Anthropic Claude API key (for LLM judge)").option("--xmtp-group <subdomain:groupId>", "Cache an XMTP group ID for a vault (e.g. my-vault:abc123)").action((opts) => {