@sherwoodagent/cli 0.89.3 → 0.90.0

package/dist/index.js

@@ -23,6 +23,9 @@ import {
   subdomainExists,
   updateMetadata
 } from "./chunk-DQZJULNP.js";
+import {
+  addLaunchpadTemplateOptions
+} from "./chunk-KXUA5BEH.js";
 import {
   FORK_UNOBSERVABLE_REASON,
   LIGHTER_API_PROFILES,
@@ -54,8 +57,8 @@ import {
   removeDepositor,
   setAgentFeeBps,
   setVaultAddress
-} from "./chunk-WAF3JU5J.js";
-import "./chunk-NJNK6GTJ.js";
+} from "./chunk-J3JMMJLN.js";
+import "./chunk-KRASHQRB.js";
 import {
   CL_DEFAULTS,
   DEFAULT_FEE_TIER,
@@ -89,7 +92,22 @@ import {
   selectBestFeeTier,
   twapTickFromCumulatives,
   v3SingleHopExtraData
-} from "./chunk-6KXITNND.js";
+} from "./chunk-ZCRVHITI.js";
+import {
+  CLAIM_SETTLE_BUFFER_SECONDS,
+  DEFAULT_DEADLINE_MARGIN_SECONDS,
+  LaunchpadInputError,
+  buildLaunchpadInitParams,
+  decideLaunchDrawdown,
+  defaultMaxFeeIn,
+  liveFeeCost,
+  parseAmountFlag,
+  parseDeadline,
+  parseDurationSeconds,
+  parseSettleSlippageBps,
+  parseVenue,
+  sameAddr
+} from "./chunk-T5NA6KOF.js";
 import {
   DEFAULT_ISSUING_CHAIN_ID,
   STRATEGY_FACTORY_ABI,
@@ -109,6 +127,7 @@ import {
   encodeJoinRequest,
   encodeMgmtSplit,
   encodePerfSplit,
+  encodePrepareOwnerStake,
   encodePropose,
   encodeRedeem,
   encodeRegisterAgent,
@@ -123,12 +142,12 @@ import {
   registerIdentityCommands,
   stripVidTag,
   verifyVidTag
-} from "./chunk-UCULHATO.js";
+} from "./chunk-XQHRKFFH.js";
 import {
-  fetchMetadata,
-  mergeFundMetadata,
-  uploadMetadata
-} from "./chunk-YMB4RJOR.js";
+  emitCalldata,
+  isCalldataOnly,
+  setCalldataOnly
+} from "./chunk-GAQMHH44.js";
 import {
   createApproval,
   createJoinRequest,
@@ -184,49 +203,6 @@ import {
   settleProposal,
   vote
 } from "./chunk-5XMQQ4LX.js";
-import {
-  LIGHTER_DEFAULT_API_KEY_INDEX,
-  LIGHTER_MAX_DEPOSIT,
-  acknowledgeShortfallCalldata,
-  buildPostSettleRecoveryCalls,
-  deriveBurnPubKey,
-  encodeCancelAll,
-  encodeClosePosition,
-  encodeRotateKey,
-  guardrailActionCalldata,
-  initiateReturnCalldata,
-  isLighterPubKeyOnCurve,
-  queueWithdrawCalldata,
-  recoverResidualsCalldata,
-  registerAgentKeyCalldata,
-  usdgToTicksFloor,
-  validateLighterKeyIndex,
-  validateLighterMarket,
-  validateLighterPubKey
-} from "./chunk-TCUSM4V7.js";
-import {
-  addLaunchpadTemplateOptions
-} from "./chunk-KXUA5BEH.js";
-import {
-  CLAIM_SETTLE_BUFFER_SECONDS,
-  DEFAULT_DEADLINE_MARGIN_SECONDS,
-  LaunchpadInputError,
-  buildLaunchpadInitParams,
-  decideLaunchDrawdown,
-  defaultMaxFeeIn,
-  liveFeeCost,
-  parseAmountFlag,
-  parseDeadline,
-  parseDurationSeconds,
-  parseSettleSlippageBps,
-  parseVenue,
-  sameAddr
-} from "./chunk-T5NA6KOF.js";
-import {
-  emitCalldata,
-  isCalldataOnly,
-  setCalldataOnly
-} from "./chunk-GAQMHH44.js";
 import {
   AERODROME,
   LAUNCH_ADAPTERS,
@@ -284,6 +260,26 @@ import {
   setUniswapApiKey,
   setVeniceApiKey
 } from "./chunk-QUAVAJWE.js";
+import {
+  LIGHTER_DEFAULT_API_KEY_INDEX,
+  LIGHTER_MAX_DEPOSIT,
+  acknowledgeShortfallCalldata,
+  buildPostSettleRecoveryCalls,
+  deriveBurnPubKey,
+  encodeCancelAll,
+  encodeClosePosition,
+  encodeRotateKey,
+  guardrailActionCalldata,
+  initiateReturnCalldata,
+  isLighterPubKeyOnCurve,
+  queueWithdrawCalldata,
+  recoverResidualsCalldata,
+  registerAgentKeyCalldata,
+  usdgToTicksFloor,
+  validateLighterKeyIndex,
+  validateLighterMarket,
+  validateLighterPubKey
+} from "./chunk-TCUSM4V7.js";
 import {
   BASE_STRATEGY_ABI,
   ERC20_ABI,
@@ -297,6 +293,11 @@ import {
   SYNDICATE_VAULT_ABI,
   VENICE_STAKING_ABI
 } from "./chunk-SCWNKVNW.js";
+import {
+  fetchMetadata,
+  mergeFundMetadata,
+  uploadMetadata
+} from "./chunk-YMB4RJOR.js";
 
 // src/index.ts
 import { config as loadDotenv } from "dotenv";
@@ -522,7 +523,7 @@ var HYPERLIQUID_GRID_STRATEGY_ABI = [
 ];
 
 // src/commands/strategy-template-lib.ts
-import { parseUnits as parseUnits3, formatUnits as formatUnits4, isAddress as isAddress4, erc20Abi as erc20Abi3 } from "viem";
+import { parseUnits as parseUnits3, formatUnits as formatUnits4, isAddress as isAddress4, erc20Abi as erc20Abi3, encodeFunctionData, maxUint256 } from "viem";
 import chalk3 from "chalk";
 
 // src/lib/proposer-bond-error.ts
@@ -560,7 +561,8 @@ var STAKED_WOOD_ABI = [
   { type: "function", name: "claimUnstakeGuardian", inputs: [], outputs: [], stateMutability: "nonpayable" },
   // Views
   { type: "function", name: "guardianStake", inputs: [{ type: "address" }], outputs: [{ type: "uint256" }], stateMutability: "view" },
-  { type: "function", name: "isActiveGuardian", inputs: [{ type: "address" }], outputs: [{ type: "bool" }], stateMutability: "view" }
+  { type: "function", name: "isActiveGuardian", inputs: [{ type: "address" }], outputs: [{ type: "bool" }], stateMutability: "view" },
+  { type: "function", name: "minOwnerStake", inputs: [], outputs: [{ type: "uint256" }], stateMutability: "view" }
 ];
 var ERC20_ABI2 = [
   { type: "function", name: "approve", inputs: [{ type: "address" }, { type: "uint256" }], outputs: [{ type: "bool" }], stateMutability: "nonpayable" },
@@ -692,6 +694,19 @@ function registerGuardianCommands(program2) {
     "Bond WOOD as a prospective vault owner \u2014 required before `vault create`. Amount in WOOD (min = swood.minOwnerStake, default 10000)."
   ).action(async (amountStr) => {
     const amount = parseUnits(amountStr, 18);
+    if (isCalldataOnly()) {
+      const min = await getPublicClient().readContract({
+        address: swood(),
+        abi: STAKED_WOOD_ABI,
+        functionName: "minOwnerStake"
+      });
+      if (amount < min) {
+        console.error(chalk.red(`Owner stake must be at least ${formatUnits2(min, 18)} WOOD (StakedWood.minOwnerStake).`));
+        process.exit(1);
+      }
+      emitCalldata(encodePrepareOwnerStake({ amount }, getChain().id));
+      return;
+    }
     await ensureWoodAllowance(amount);
     const wallet = getWalletClient();
     const pc = getPublicClient();
@@ -1805,84 +1820,120 @@ function capsForCalls(calls, strategy2, maxCapital) {
     return seen === 1 ? share + remainder : share;
   });
 }
-async function ensureProposerBondAllowance(vault, requiredCoverage, asset) {
+async function pinProposalMetadata(meta) {
+  const { pinJSON } = await import("./ipfs-M56BLMCW.js");
   try {
-    const publicClient = getPublicClient();
-    const governor = await getGovernorOf(vault);
-    const govViews = [
-      {
-        type: "function",
-        name: "bondEscrow",
-        inputs: [],
-        outputs: [{ type: "address" }],
-        stateMutability: "view"
-      },
-      {
-        type: "function",
-        name: "exposureLedger",
-        inputs: [],
-        outputs: [{ type: "address" }],
-        stateMutability: "view"
-      }
-    ];
-    const escrow = await publicClient.readContract({
+    const uri = await pinJSON(meta, meta.name);
+    console.error(chalk3.dim(`  Metadata pinned: ${uri}`));
+    return uri;
+  } catch {
+    console.error(
+      chalk3.yellow("  IPFS pin failed \u2014 using inline metadata. The app renders only ipfs:// metadata; pass --metadata-uri to override.")
+    );
+    const inline = JSON.stringify({ ...meta, createdBy: "@sherwoodagent/cli" });
+    return `data:application/json;base64,${Buffer.from(inline).toString("base64")}`;
+  }
+}
+var BOND_GOVERNOR_VIEWS = [
+  { type: "function", name: "bondEscrow", inputs: [], outputs: [{ type: "address" }], stateMutability: "view" },
+  { type: "function", name: "exposureLedger", inputs: [], outputs: [{ type: "address" }], stateMutability: "view" }
+];
+var PROPOSER_BOND_WOOD_ABI = [
+  {
+    type: "function",
+    name: "proposerBondWood",
+    inputs: [
+      { name: "asset", type: "address" },
+      { name: "requiredCoverage", type: "uint256" }
+    ],
+    outputs: [{ type: "uint256" }],
+    stateMutability: "view"
+  }
+];
+async function quoteProposerBond(vault, requiredCoverage, asset) {
+  const publicClient = getPublicClient();
+  const governor = await getGovernorOf(vault);
+  const escrow = await publicClient.readContract({
+    address: governor,
+    abi: BOND_GOVERNOR_VIEWS,
+    functionName: "bondEscrow"
+  });
+  if (!escrow || escrow === ZERO2) return null;
+  let quotedBond = 0n;
+  try {
+    const ledger = await publicClient.readContract({
       address: governor,
-      abi: govViews,
-      functionName: "bondEscrow"
+      abi: BOND_GOVERNOR_VIEWS,
+      functionName: "exposureLedger"
     });
-    if (!escrow || escrow === ZERO2) return;
-    let quotedBond = 0n;
-    try {
-      const ledger = await publicClient.readContract({
-        address: governor,
-        abi: govViews,
-        functionName: "exposureLedger"
+    if (ledger && ledger !== ZERO2 && requiredCoverage > 0n) {
+      quotedBond = await publicClient.readContract({
+        address: ledger,
+        abi: PROPOSER_BOND_WOOD_ABI,
+        functionName: "proposerBondWood",
+        args: [asset, requiredCoverage]
       });
-      if (ledger && ledger !== ZERO2 && requiredCoverage > 0n) {
-        quotedBond = await publicClient.readContract({
-          address: ledger,
-          abi: [
-            {
-              type: "function",
-              name: "proposerBondWood",
-              inputs: [
-                { name: "asset", type: "address" },
-                { name: "requiredCoverage", type: "uint256" }
-              ],
-              outputs: [{ type: "uint256" }],
-              stateMutability: "view"
-            }
-          ],
-          functionName: "proposerBondWood",
-          args: [asset, requiredCoverage]
-        });
-      }
-    } catch {
     }
-    console.log(
-      chalk3.dim(
-        `  Quoted proposer bond: ${formatUnits4(quotedBond, 18)} WOOD (via ExposureLedger.proposerBondWood; ~1% of extractable value at default proposerBondBps, WOOD-denominated and price-dependent \u2014 not a fixed WOOD amount)`
-      )
-    );
-    console.log(chalk3.dim(`  Proposer bond escrow: ${escrow} \u2014 ensuring WOOD allowance`));
-    if (quotedBond > 0n) {
-      const wood2 = SHERWOOD().WOOD_TOKEN;
-      const holder = getAccount().address;
-      const balance = await publicClient.readContract({
-        address: wood2,
-        abi: erc20Abi3,
-        functionName: "balanceOf",
-        args: [holder]
-      });
-      if (balance < quotedBond) {
-        throw new InsufficientProposerBondWood(quotedBond, balance);
-      }
-    }
-    await ensureWoodAllowance(2n ** 255n, escrow, "WOOD (proposer bond)");
+  } catch {
+  }
+  return { escrow, quotedBond };
+}
+function bondQuoteLines(quote) {
+  return [
+    `  Quoted proposer bond: ${formatUnits4(quote.quotedBond, 18)} WOOD (via ExposureLedger.proposerBondWood; ~1% of extractable value at default proposerBondBps, WOOD-denominated and price-dependent \u2014 not a fixed WOOD amount)`,
+    `  Proposer bond escrow: ${quote.escrow}`
+  ];
+}
+async function requireBondWood(holder, quotedBond) {
+  if (quotedBond === 0n) return;
+  const balance = await getPublicClient().readContract({
+    address: SHERWOOD().WOOD_TOKEN,
+    abi: erc20Abi3,
+    functionName: "balanceOf",
+    args: [holder]
+  });
+  if (balance < quotedBond) throw new InsufficientProposerBondWood(quotedBond, balance);
+}
+async function ensureProposerBondAllowance(vault, requiredCoverage, asset) {
+  try {
+    const quote = await quoteProposerBond(vault, requiredCoverage, asset);
+    if (!quote) return;
+    for (const line of bondQuoteLines(quote)) console.log(chalk3.dim(line));
+    await requireBondWood(getAccount().address, quote.quotedBond);
+    await ensureWoodAllowance(2n ** 255n, quote.escrow, "WOOD (proposer bond)");
   } catch (err) {
     if (err instanceof InsufficientProposerBondWood) throw err;
   }
 }
+async function proposerBondApprovalTxs(vault, requiredCoverage, asset, proposer, chainId) {
+  let quote;
+  try {
+    quote = await quoteProposerBond(vault, requiredCoverage, asset);
+  } catch {
+    return [];
+  }
+  if (!quote) return [];
+  for (const line of bondQuoteLines(quote)) console.error(chalk3.dim(line));
+  const wood2 = SHERWOOD().WOOD_TOKEN;
+  if (proposer) {
+    await requireBondWood(proposer, quote.quotedBond);
+    const allowance = await getPublicClient().readContract({
+      address: wood2,
+      abi: erc20Abi3,
+      functionName: "allowance",
+      args: [proposer, quote.escrow]
+    });
+    if (allowance >= 2n ** 255n) return [];
+  }
+  return [
+    {
+      to: wood2,
+      data: encodeFunctionData({ abi: erc20Abi3, functionName: "approve", args: [quote.escrow, maxUint256] }),
+      value: "0x0",
+      chainId
+    }
+  ];
+}
 
 // src/commands/strategy-propose.ts
 import { formatUnits as formatUnits5, isAddress as isAddress5, erc20Abi as erc20Abi4 } from "viem";
@@ -1919,7 +1970,7 @@ function registerStrategyProposeCommands(strategy2) {
     if (isCalldataOnly()) {
       const missing = [];
       if (!opts.proposer) missing.push("--proposer <address> (the external signer)");
-      if (!opts.metadataUri) missing.push("--metadata-uri <uri> (IPFS pin needs a signer)");
+      if (!opts.metadataUri && !opts.name) missing.push("--name <name> (or --metadata-uri <uri>)");
       if (!opts.duration) missing.push("--duration <d>");
       if (missing.length > 0) {
         console.error(chalk4.red(`--calldata-only requires: ${missing.join(", ")}`));
@@ -1984,7 +2035,7 @@ function registerStrategyProposeCommands(strategy2) {
           }
         }
         if (templateKey === "lighter-perp") {
-          const { runLighterProposePreflight } = await import("./lighter-preflight-TSLSSYWI.js");
+          const { runLighterProposePreflight } = await import("./lighter-preflight-R7C6HY3M.js");
           await runLighterProposePreflight(vault, opts, maxDrawdownBps);
         }
       } catch (err) {
@@ -2015,12 +2066,23 @@ function registerStrategyProposeCommands(strategy2) {
           built.assetAmount,
           built.extraApprovals
         );
+        const metadataURI2 = opts.metadataUri || await pinProposalMetadata({
+          name: opts.name,
+          description: opts.description || "",
+          proposer,
+          vault,
+          strategyClone: deploy.clone,
+          template: def.key,
+          strategyDuration: Number(strategyDuration2),
+          createdAt: (/* @__PURE__ */ new Date()).toISOString()
+        });
+        const bondTxs = await proposerBondApprovalTxs(vault, built.assetAmount, built.asset, proposer, chainId);
         const proposeAction = encodePropose(
           {
             vault,
             governor,
             strategy: deploy.clone,
-            metadataURI: opts.metadataUri,
+            metadataURI: metadataURI2,
             strategyDuration: strategyDuration2,
             // Same envelope + cap shape the broadcasting path uses, so the
             // emitted calldata is the transaction that path would send.
@@ -2033,14 +2095,14 @@ function registerStrategyProposeCommands(strategy2) {
           chainId
         );
         emitCalldata({
-          txs: [...deploy.txs, ...proposeAction.txs],
+          txs: [...bondTxs, ...deploy.txs, ...proposeAction.txs],
           preconditions: [...deploy.preconditions, ...proposeAction.preconditions],
           // Surface the deterministic clone + salt as structured fields (also
           // baked into tx 2's `strategy` arg + the execute/settle calls).
           clone: deploy.clone,
           salt: deploy.salt,
-          description: `Keyless ${def.name} proposal on ${vault}: (1) deploy clone at ${deploy.clone} (deterministic CREATE2, salt ${deploy.salt}); (2) governor.propose referencing it.`,
-          note: "Broadcast SEQUENTIALLY: send tx 1 (cloneAndInitDeterministic) and WAIT for it to confirm, then send tx 2 (propose). If tx 1 reverts \u2014 proposer not a registered agent, proposer != tx-1 signer, template not allowlisted, or vault unregistered \u2014 do NOT send tx 2: it would create a proposal referencing an undeployed strategy. Send tx 1 from the --proposer wallet (the factory requires proposer == msg.sender, and msg.sender must be a vault owner/agent). The clone address is pinned by (factory, template, vault, salt) and is already baked into tx 2 + the execute/settle calls. The factory binds the salt to the vault and only the vault's owner/agents may deploy there, so the predicted address can't be front-run."
+          description: `Keyless ${def.name} proposal on ${vault}: ` + (bondTxs.length ? "WOOD.approve(proposer-bond escrow); " : "") + `deploy clone at ${deploy.clone} (deterministic CREATE2, salt ${deploy.salt}); governor.propose referencing it.`,
+          note: "Broadcast SEQUENTIALLY from the --proposer wallet, waiting for each tx to confirm before the next. " + (bondTxs.length ? "The first tx approves WOOD to the proposer-bond escrow \u2014 propose pulls the bond from the proposer and reverts without it. " : "") + "If cloneAndInitDeterministic reverts \u2014 proposer not a registered agent, proposer != signer, template not allowlisted, or vault unregistered \u2014 do NOT send propose: it would create a proposal referencing an undeployed strategy. The factory requires proposer == msg.sender, and msg.sender must be a vault owner/agent. The clone address is pinned by (factory, template, vault, salt) and is already baked into the propose tx + the execute/settle calls. The factory binds the salt to the vault and only the vault's owner/agents may deploy there, so the predicted address can't be front-run."
         });
       } catch (err) {
         console.error(chalk4.red(err instanceof Error ? err.message : String(err)));
@@ -2110,7 +2172,7 @@ function registerStrategyProposeCommands(strategy2) {
         }
       }
       if (templateKey === "lighter-perp") {
-        const { runLighterProposePreflight } = await import("./lighter-preflight-TSLSSYWI.js");
+        const { runLighterProposePreflight } = await import("./lighter-preflight-R7C6HY3M.js");
         await runLighterProposePreflight(vault, opts, maxDrawdownBps);
       }
       preflightSpinner.succeed("Preflight OK");
@@ -2261,7 +2323,7 @@ function registerStrategyProposeCommands(strategy2) {
       metadataURI = `data:application/json;base64,${Buffer.from(inline).toString("base64")}`;
     }
     try {
-      const { getAgentFeeBps: getAgentFeeBps2 } = await import("./vault-TQWUWBSG.js");
+      const { getAgentFeeBps: getAgentFeeBps2 } = await import("./vault-3T6UHCPE.js");
       const feeBps = await getAgentFeeBps2(vault);
       console.log(
         chalk4.yellow(
@@ -2312,7 +2374,7 @@ function registerStrategyProposeCommands(strategy2) {
       console.log(chalk4.yellow(`     asset.approve(${clone}, <repaymentAmount>)`));
     }
     if (templateKey === "lighter-perp") {
-      const { lighterNextSteps } = await import("./lighter-preflight-TSLSSYWI.js");
+      const { lighterNextSteps } = await import("./lighter-preflight-R7C6HY3M.js");
       console.log();
       for (const line of lighterNextSteps(clone)) console.log(chalk4.yellow(line));
     }
@@ -2584,7 +2646,7 @@ function registerStrategyTemplateCommands(strategy2) {
       let prices = [];
       let priceSource = null;
       try {
-        const { getTokenPricesInAsset } = await import("./price-QKOARHS4.js");
+        const { getTokenPricesInAsset } = await import("./price-PBFF6NFU.js");
         prices = await getTokenPricesInAsset({
           tokens: allocations.map((a, i) => ({
             token: a.token,
@@ -3389,7 +3451,7 @@ import chalk7 from "chalk";
 import ora5 from "ora";
 
 // src/strategies/allowance-disburse.ts
-import { encodeFunctionData, parseUnits as parseUnits7 } from "viem";
+import { encodeFunctionData as encodeFunctionData2, parseUnits as parseUnits7 } from "viem";
 function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDecimals2, minUsdc, swapPath) {
   const assetAmount = parseUnits7(config.amount, assetDecimals2);
   const isUsdc = assetAddress.toLowerCase() === TOKENS().USDC.toLowerCase();
@@ -3398,7 +3460,7 @@ function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDec
   if (!isUsdc) {
     calls.push({
       target: assetAddress,
-      data: encodeFunctionData({
+      data: encodeFunctionData2({
         abi: ERC20_ABI,
         functionName: "approve",
         args: [UNISWAP().SWAP_ROUTER, assetAmount]
@@ -3408,7 +3470,7 @@ function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDec
     if (isWeth) {
       calls.push({
         target: UNISWAP().SWAP_ROUTER,
-        data: encodeFunctionData({
+        data: encodeFunctionData2({
           abi: SWAP_ROUTER_EXACT_INPUT_SINGLE_ABI,
           functionName: "exactInputSingle",
           args: [
@@ -3428,7 +3490,7 @@ function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDec
     } else {
       calls.push({
         target: UNISWAP().SWAP_ROUTER,
-        data: encodeFunctionData({
+        data: encodeFunctionData2({
           abi: SWAP_ROUTER_ABI,
           functionName: "exactInput",
           args: [
@@ -3448,7 +3510,7 @@ function buildDisburseBatch(config, vaultAddress, agents, assetAddress, assetDec
   for (const agent of agents) {
     calls.push({
       target: TOKENS().USDC,
-      data: encodeFunctionData({
+      data: encodeFunctionData2({
         abi: ERC20_ABI,
         functionName: "transfer",
         args: [agent, perAgent]
@@ -3658,13 +3720,13 @@ function registerAllowanceCommands(program2) {
 }
 
 // src/commands/proposal.ts
-import { isAddress as isAddress9, encodeFunctionData as encodeFunctionData3, formatUnits as formatUnits9, parseUnits as parseUnits9 } from "viem";
+import { isAddress as isAddress9, encodeFunctionData as encodeFunctionData4, formatUnits as formatUnits9, parseUnits as parseUnits9 } from "viem";
 import chalk9 from "chalk";
 import ora6 from "ora";
 import { readFileSync as readFileSync2 } from "fs";
 
 // src/lib/simulate.ts
-import { decodeFunctionData as decodeFunctionData2, encodeFunctionData as encodeFunctionData2 } from "viem";
+import { decodeFunctionData as decodeFunctionData2, encodeFunctionData as encodeFunctionData3 } from "viem";
 import chalk8 from "chalk";
 
 // src/lib/risk.ts
@@ -4224,7 +4286,7 @@ async function simulateViaEthCall(vault, calls) {
   const governor = await getGovernorOf(vault);
   const client = getPublicClient();
   const uncapped = calls.map(() => MAX_UINT256);
-  const input2 = encodeFunctionData2({
+  const input2 = encodeFunctionData3({
     abi: SYNDICATE_VAULT_ABI,
     functionName: "executeGovernorBatch",
     args: [
@@ -4605,7 +4667,7 @@ function registerProposalCommands(program2) {
   ).option(
     "--settle-caps <list>",
     "Comma-separated per-settlement-call outflow caps in asset units. Default: 0 for every call, because a settlement returns assets to the vault rather than sending them."
-  ).option("--metadata-uri <uri>", "Override \u2014 skip IPFS upload and use this URI directly").option("--simulate", "Simulate calls via Tenderly before submitting").option("--force", "Submit even if simulation fails (requires --simulate)").action(async (opts) => {
+  ).option("--metadata-uri <uri>", "Override \u2014 skip IPFS upload and use this URI directly").option("--proposer <address>", "With --calldata-only: the wallet that will send propose (recorded in metadata; enables the proposer-bond balance/allowance preflight)").option("--simulate", "Simulate calls via Tenderly before submitting").option("--force", "Submit even if simulation fails (requires --simulate)").action(async (opts) => {
     try {
       const vault = opts.vault;
       if (!isAddress9(vault)) {
@@ -4625,46 +4687,72 @@ function registerProposalCommands(program2) {
         strategy2 = opts.strategy;
       }
       if (isCalldataOnly()) {
-        if (!opts.metadataUri) {
-          console.error(
-            chalk9.red(
-              "--calldata-only requires --metadata-uri (IPFS metadata upload needs a signing wallet)"
-            )
-          );
-          process.exit(1);
+        let proposer;
+        if (opts.proposer) {
+          if (!isAddress9(opts.proposer)) {
+            console.error(chalk9.red(`Invalid --proposer address: ${opts.proposer}`));
+            process.exit(1);
+          }
+          proposer = opts.proposer;
         }
         const calldataEnvelope = await resolveRiskEnvelope(opts, vault);
         const capDecimals2 = await assetDecimals(vault);
+        const chainId = getChain().id;
         try {
-          emitCalldata(
-            encodePropose(
-              {
-                vault,
-                governor: await getGovernorOf(vault),
-                strategy: strategy2,
-                metadataURI: opts.metadataUri,
-                strategyDuration,
-                envelope: calldataEnvelope,
-                executeCalls,
-                executeCallCaps: resolveCaps(
-                  opts.executeCaps,
-                  executeCalls.length,
-                  calldataEnvelope.maxCapital,
-                  "--execute-caps",
-                  capDecimals2
-                ),
-                settlementCalls: settleCalls,
-                settlementCallCaps: resolveCaps(
-                  opts.settleCaps,
-                  settleCalls.length,
-                  0n,
-                  "--settle-caps",
-                  capDecimals2
-                )
-              },
-              getChain().id
-            )
+          const metadataURI2 = opts.metadataUri || await pinProposalMetadata({
+            schema: "sherwood/proposal/v1",
+            name: opts.name,
+            description: opts.description,
+            chain: getNetwork(),
+            strategies: [],
+            terms: {},
+            links: {},
+            ...proposer ? { proposer } : {},
+            vault,
+            strategyDuration: Number(strategyDuration),
+            createdAt: Math.floor(Date.now() / 1e3)
+          });
+          const bondTxs = await proposerBondApprovalTxs(
+            vault,
+            calldataEnvelope.maxCapital,
+            await getAssetAddress(vault),
+            proposer,
+            chainId
+          );
+          const proposeAction = encodePropose(
+            {
+              vault,
+              governor: await getGovernorOf(vault),
+              strategy: strategy2,
+              metadataURI: metadataURI2,
+              strategyDuration,
+              envelope: calldataEnvelope,
+              executeCalls,
+              executeCallCaps: resolveCaps(
+                opts.executeCaps,
+                executeCalls.length,
+                calldataEnvelope.maxCapital,
+                "--execute-caps",
+                capDecimals2
+              ),
+              settlementCalls: settleCalls,
+              settlementCallCaps: resolveCaps(
+                opts.settleCaps,
+                settleCalls.length,
+                0n,
+                "--settle-caps",
+                capDecimals2
+              )
+            },
+            chainId
           );
+          emitCalldata({
+            ...proposeAction,
+            txs: [...bondTxs, ...proposeAction.txs],
+            ...bondTxs.length ? {
+              note: "Send in order from the proposing agent's wallet: the WOOD approval to the proposer-bond escrow first \u2014 propose pulls the bond and reverts without it." + (proposeAction.note ? ` ${proposeAction.note}` : "")
+            } : {}
+          });
         } catch (err) {
           console.error(chalk9.red(err instanceof Error ? err.message : String(err)));
           process.exit(1);
@@ -5301,7 +5389,7 @@ function registerProposalCommands(program2) {
         process.exit(1);
       }
       const asset = await getAssetAddress(vault);
-      const noopCalldata = encodeFunctionData3({
+      const noopCalldata = encodeFunctionData4({
         abi: ERC20_ABI,
         functionName: "balanceOf",
         args: [vault]
@@ -5679,7 +5767,7 @@ function registerProposalCommands(program2) {
           txs: [
             {
               to: governor,
-              data: encodeFunctionData3({
+              data: encodeFunctionData4({
                 abi: SYNDICATE_GOVERNOR_ABI,
                 functionName: "reclaimProposerBond",
                 args: [proposalId]
@@ -10089,7 +10177,7 @@ try {
 } catch {
 }
 var require2 = createRequire(import.meta.url);
-var CLI_VERSION = "0.89.3";
+var CLI_VERSION = "0.90.0";
 async function loadXmtp() {
   return import("./xmtp-EOMKXRTB.js");
 }
@@ -10146,6 +10234,10 @@ program.name("sherwood").description("CLI for agent-managed onchain vaults").ver
 ).hook("preAction", (thisCommand) => {
   const opts = thisCommand.optsWithGlobals();
   setCalldataOnly(Boolean(opts.calldataOnly));
+  if (opts.calldataOnly) {
+    console.log = console.error;
+    console.info = console.error;
+  }
   setNetwork(opts.chain);
 });
 var LEGACY_GROUP_ALIASES = ["fund", "syndicate"];
@@ -10287,20 +10379,22 @@ vaultCmd.command("create").description("Launch a new vault via the factory (inte
       }
     }
     if (isCalldataOnly()) {
-      emitCalldata(
-        encodeCreateFund(
-          {
-            creatorAgentId: agentIdStr,
-            metadataURI,
-            asset,
-            name,
-            symbol,
-            openDeposits,
-            subdomain
-          },
-          getChain().id
-        )
+      const action = encodeCreateFund(
+        {
+          creatorAgentId: agentIdStr,
+          metadataURI,
+          asset,
+          name,
+          symbol,
+          openDeposits,
+          subdomain
+        },
+        getChain().id
       );
+      emitCalldata({
+        ...action,
+        note: `${action.note} Bond first with \`sherwood --calldata-only guardian prepare-owner-stake <amount>\`. After this tx confirms, register the creator as an agent (the factory does not, and proposing requires it): read the vault with \`sherwood vault info ${subdomain}\`, then send \`sherwood --calldata-only vault add --vault <vault> --wallet <creator> --agent-id ${agentIdStr}\`.`
+      });
       return;
     }
     const existingId = await subdomainExists(subdomain);
@@ -10762,7 +10856,7 @@ vaultCmd.command("add").description("Register an agent on a vault (creator only)
       agentId = BigInt(opts.agentId);
     } else {
       spinner.text = "Looking up ERC-8004 identity from wallet...";
-      const { lookupAgentIdByWallet } = await import("./identity-462SMK5H.js");
+      const { lookupAgentIdByWallet } = await import("./identity-M6UIVBNX.js");
       const resolved = await lookupAgentIdByWallet(agentWallet);
       if (resolved === null) {
         spinner.fail("Agent wallet does not own an ERC-8004 identity NFT");
@@ -11475,7 +11569,7 @@ ${info2.name} (${info2.type})`);
   }
 });
 try {
-  const { registerChatCommands } = await import("./chat-EVRY5BV3.js");
+  const { registerChatCommands } = await import("./chat-PFXIL6WT.js");
   registerChatCommands(program);
 } catch {
   program.command("chat <name> [action] [actionArgs...]").description("Vault chat (XMTP) \u2014 requires @xmtp/cli").action(() => {
@@ -11485,7 +11579,7 @@ try {
     process.exit(1);
   });
 }
-var { registerSessionCommands } = await import("./session-27X337LQ.js");
+var { registerSessionCommands } = await import("./session-GSWEE4M3.js");
 registerSessionCommands(program);
 registerVeniceCommands(program);
 registerAllowanceCommands(program);
@@ -11494,11 +11588,11 @@ registerProposalCommands(program);
 registerQueueCommands(program);
 registerGovernorCommands(program);
 registerGuardianCommands(program);
-var { registerResearchCommands } = await import("./research-3L3BTHWY.js");
+var { registerResearchCommands } = await import("./research-ZH34O7YL.js");
 registerResearchCommands(program);
 var { registerAgentCommands } = await import("./agent-QU2OSWS4.js");
 registerAgentCommands(program);
-var { registerTradeCommands } = await import("./trade-6Q7VCDEA.js");
+var { registerTradeCommands } = await import("./trade-SHK7GKSI.js");
 registerTradeCommands(program);
 registerGridCommand(program);
 registerLighterCommands(program);