@t2000/cli 10.26.0 → 10.27.0

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'module'; import { fileURLToPat
 import {
   AggregatorClient,
   Env
-} from "./chunk-PRKQVMED.js";
+} from "./chunk-TVD4WMBT.js";
 import {
   BalanceChange,
   BaseClient,
@@ -16,11 +16,11 @@ import {
   parseTransactionEffectsBcs,
   transactionDataToGrpcTransaction,
   transactionToGrpcJson
-} from "./chunk-R6QER65C.js";
+} from "./chunk-SHZC6TMU.js";
 import {
   Transaction,
   coinWithBalance
-} from "./chunk-JEIOQF6Q.js";
+} from "./chunk-CNTCUDEZ.js";
 import {
   ObjectError,
   SUI_TYPE_ARG,
@@ -31,7 +31,7 @@ import {
   fromBase64 as fromBase642,
   suiBcs,
   toBase64 as toBase642
-} from "./chunk-5MAY6SK7.js";
+} from "./chunk-T32A4PV6.js";
 import {
   SIGNATURE_FLAG_TO_SCHEME,
   SIGNATURE_SCHEME_TO_FLAG,
@@ -79,7 +79,7 @@ import {
   split,
   toBase64,
   toHex
-} from "./chunk-D3DUYZYR.js";
+} from "./chunk-BX4V52TZ.js";
 import {
   require_bn,
   require_safer
@@ -3390,79 +3390,6 @@ var require_commander = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/picocolors@1.1.1/node_modules/picocolors/picocolors.js
-var require_picocolors = __commonJS({
-  "../../node_modules/.pnpm/picocolors@1.1.1/node_modules/picocolors/picocolors.js"(exports, module) {
-    "use strict";
-    var p = process || {};
-    var argv = p.argv || [];
-    var env = p.env || {};
-    var isColorSupported = !(!!env.NO_COLOR || argv.includes("--no-color")) && (!!env.FORCE_COLOR || argv.includes("--color") || p.platform === "win32" || (p.stdout || {}).isTTY && env.TERM !== "dumb" || !!env.CI);
-    var formatter = (open, close, replace = open) => (input) => {
-      let string = "" + input, index = string.indexOf(close, open.length);
-      return ~index ? open + replaceClose(string, close, replace, index) + close : open + string + close;
-    };
-    var replaceClose = (string, close, replace, index) => {
-      let result = "", cursor = 0;
-      do {
-        result += string.substring(cursor, index) + replace;
-        cursor = index + close.length;
-        index = string.indexOf(close, cursor);
-      } while (~index);
-      return result + string.substring(cursor);
-    };
-    var createColors = (enabled = isColorSupported) => {
-      let f = enabled ? formatter : () => String;
-      return {
-        isColorSupported: enabled,
-        reset: f("\x1B[0m", "\x1B[0m"),
-        bold: f("\x1B[1m", "\x1B[22m", "\x1B[22m\x1B[1m"),
-        dim: f("\x1B[2m", "\x1B[22m", "\x1B[22m\x1B[2m"),
-        italic: f("\x1B[3m", "\x1B[23m"),
-        underline: f("\x1B[4m", "\x1B[24m"),
-        inverse: f("\x1B[7m", "\x1B[27m"),
-        hidden: f("\x1B[8m", "\x1B[28m"),
-        strikethrough: f("\x1B[9m", "\x1B[29m"),
-        black: f("\x1B[30m", "\x1B[39m"),
-        red: f("\x1B[31m", "\x1B[39m"),
-        green: f("\x1B[32m", "\x1B[39m"),
-        yellow: f("\x1B[33m", "\x1B[39m"),
-        blue: f("\x1B[34m", "\x1B[39m"),
-        magenta: f("\x1B[35m", "\x1B[39m"),
-        cyan: f("\x1B[36m", "\x1B[39m"),
-        white: f("\x1B[37m", "\x1B[39m"),
-        gray: f("\x1B[90m", "\x1B[39m"),
-        bgBlack: f("\x1B[40m", "\x1B[49m"),
-        bgRed: f("\x1B[41m", "\x1B[49m"),
-        bgGreen: f("\x1B[42m", "\x1B[49m"),
-        bgYellow: f("\x1B[43m", "\x1B[49m"),
-        bgBlue: f("\x1B[44m", "\x1B[49m"),
-        bgMagenta: f("\x1B[45m", "\x1B[49m"),
-        bgCyan: f("\x1B[46m", "\x1B[49m"),
-        bgWhite: f("\x1B[47m", "\x1B[49m"),
-        blackBright: f("\x1B[90m", "\x1B[39m"),
-        redBright: f("\x1B[91m", "\x1B[39m"),
-        greenBright: f("\x1B[92m", "\x1B[39m"),
-        yellowBright: f("\x1B[93m", "\x1B[39m"),
-        blueBright: f("\x1B[94m", "\x1B[39m"),
-        magentaBright: f("\x1B[95m", "\x1B[39m"),
-        cyanBright: f("\x1B[96m", "\x1B[39m"),
-        whiteBright: f("\x1B[97m", "\x1B[39m"),
-        bgBlackBright: f("\x1B[100m", "\x1B[49m"),
-        bgRedBright: f("\x1B[101m", "\x1B[49m"),
-        bgGreenBright: f("\x1B[102m", "\x1B[49m"),
-        bgYellowBright: f("\x1B[103m", "\x1B[49m"),
-        bgBlueBright: f("\x1B[104m", "\x1B[49m"),
-        bgMagentaBright: f("\x1B[105m", "\x1B[49m"),
-        bgCyanBright: f("\x1B[106m", "\x1B[49m"),
-        bgWhiteBright: f("\x1B[107m", "\x1B[49m")
-      };
-    };
-    module.exports = createColors();
-    module.exports.createColors = createColors;
-  }
-});
-
 // ../../node_modules/.pnpm/eventemitter3@5.0.4/node_modules/eventemitter3/index.js
 var require_eventemitter3 = __commonJS({
   "../../node_modules/.pnpm/eventemitter3@5.0.4/node_modules/eventemitter3/index.js"(exports, module) {
@@ -3625,6 +3552,79 @@ var require_eventemitter3 = __commonJS({
   }
 });
 
+// ../../node_modules/.pnpm/picocolors@1.1.1/node_modules/picocolors/picocolors.js
+var require_picocolors = __commonJS({
+  "../../node_modules/.pnpm/picocolors@1.1.1/node_modules/picocolors/picocolors.js"(exports, module) {
+    "use strict";
+    var p = process || {};
+    var argv = p.argv || [];
+    var env = p.env || {};
+    var isColorSupported = !(!!env.NO_COLOR || argv.includes("--no-color")) && (!!env.FORCE_COLOR || argv.includes("--color") || p.platform === "win32" || (p.stdout || {}).isTTY && env.TERM !== "dumb" || !!env.CI);
+    var formatter = (open, close, replace = open) => (input) => {
+      let string = "" + input, index = string.indexOf(close, open.length);
+      return ~index ? open + replaceClose(string, close, replace, index) + close : open + string + close;
+    };
+    var replaceClose = (string, close, replace, index) => {
+      let result = "", cursor = 0;
+      do {
+        result += string.substring(cursor, index) + replace;
+        cursor = index + close.length;
+        index = string.indexOf(close, cursor);
+      } while (~index);
+      return result + string.substring(cursor);
+    };
+    var createColors = (enabled = isColorSupported) => {
+      let f = enabled ? formatter : () => String;
+      return {
+        isColorSupported: enabled,
+        reset: f("\x1B[0m", "\x1B[0m"),
+        bold: f("\x1B[1m", "\x1B[22m", "\x1B[22m\x1B[1m"),
+        dim: f("\x1B[2m", "\x1B[22m", "\x1B[22m\x1B[2m"),
+        italic: f("\x1B[3m", "\x1B[23m"),
+        underline: f("\x1B[4m", "\x1B[24m"),
+        inverse: f("\x1B[7m", "\x1B[27m"),
+        hidden: f("\x1B[8m", "\x1B[28m"),
+        strikethrough: f("\x1B[9m", "\x1B[29m"),
+        black: f("\x1B[30m", "\x1B[39m"),
+        red: f("\x1B[31m", "\x1B[39m"),
+        green: f("\x1B[32m", "\x1B[39m"),
+        yellow: f("\x1B[33m", "\x1B[39m"),
+        blue: f("\x1B[34m", "\x1B[39m"),
+        magenta: f("\x1B[35m", "\x1B[39m"),
+        cyan: f("\x1B[36m", "\x1B[39m"),
+        white: f("\x1B[37m", "\x1B[39m"),
+        gray: f("\x1B[90m", "\x1B[39m"),
+        bgBlack: f("\x1B[40m", "\x1B[49m"),
+        bgRed: f("\x1B[41m", "\x1B[49m"),
+        bgGreen: f("\x1B[42m", "\x1B[49m"),
+        bgYellow: f("\x1B[43m", "\x1B[49m"),
+        bgBlue: f("\x1B[44m", "\x1B[49m"),
+        bgMagenta: f("\x1B[45m", "\x1B[49m"),
+        bgCyan: f("\x1B[46m", "\x1B[49m"),
+        bgWhite: f("\x1B[47m", "\x1B[49m"),
+        blackBright: f("\x1B[90m", "\x1B[39m"),
+        redBright: f("\x1B[91m", "\x1B[39m"),
+        greenBright: f("\x1B[92m", "\x1B[39m"),
+        yellowBright: f("\x1B[93m", "\x1B[39m"),
+        blueBright: f("\x1B[94m", "\x1B[39m"),
+        magentaBright: f("\x1B[95m", "\x1B[39m"),
+        cyanBright: f("\x1B[96m", "\x1B[39m"),
+        whiteBright: f("\x1B[97m", "\x1B[39m"),
+        bgBlackBright: f("\x1B[100m", "\x1B[49m"),
+        bgRedBright: f("\x1B[101m", "\x1B[49m"),
+        bgGreenBright: f("\x1B[102m", "\x1B[49m"),
+        bgYellowBright: f("\x1B[103m", "\x1B[49m"),
+        bgBlueBright: f("\x1B[104m", "\x1B[49m"),
+        bgMagentaBright: f("\x1B[105m", "\x1B[49m"),
+        bgCyanBright: f("\x1B[106m", "\x1B[49m"),
+        bgWhiteBright: f("\x1B[107m", "\x1B[49m")
+      };
+    };
+    module.exports = createColors();
+    module.exports.createColors = createColors;
+  }
+});
+
 // ../../node_modules/.pnpm/yoctocolors-cjs@2.1.3/node_modules/yoctocolors-cjs/index.js
 var require_yoctocolors_cjs = __commonJS({
   "../../node_modules/.pnpm/yoctocolors-cjs@2.1.3/node_modules/yoctocolors-cjs/index.js"(exports, module) {
@@ -19144,80 +19144,6 @@ var {
   Help
 } = import_index.default;
 
-// src/program.ts
-import { createRequire as createRequire2 } from "module";
-
-// src/output.ts
-var import_picocolors = __toESM(require_picocolors(), 1);
-var jsonMode = false;
-function setJsonMode(enabled) {
-  jsonMode = enabled;
-}
-function isJsonMode() {
-  return jsonMode;
-}
-function printJson(data) {
-  console.log(JSON.stringify(data, null, 2));
-}
-function printSuccess(message) {
-  if (jsonMode) return;
-  console.log(`  ${import_picocolors.default.green("\u2713")} ${message}`);
-}
-function printError(message) {
-  if (jsonMode) return;
-  console.error(`  ${import_picocolors.default.red("\u2717")} ${message}`);
-}
-function printWarning(message) {
-  if (jsonMode) return;
-  console.log(`  ${import_picocolors.default.yellow("\u26A0")} ${message}`);
-}
-function printInfo(message) {
-  if (jsonMode) return;
-  console.log(`  ${import_picocolors.default.dim(message)}`);
-}
-function printHeader(title) {
-  if (jsonMode) return;
-  console.log();
-  console.log(`  ${import_picocolors.default.bold(title)}`);
-  console.log();
-}
-function printKeyValue(key, value, indent2 = 2) {
-  if (jsonMode) return;
-  const pad = " ".repeat(indent2);
-  console.log(`${pad}${import_picocolors.default.dim(key + ":")}  ${value}`);
-}
-function printBlank() {
-  if (jsonMode) return;
-  console.log();
-}
-function printDivider(width = 53) {
-  if (jsonMode) return;
-  console.log(`  ${import_picocolors.default.dim("\u2500".repeat(width))}`);
-}
-function printLine(text) {
-  if (jsonMode) return;
-  console.log(`  ${text}`);
-}
-function printSeparator() {
-  if (jsonMode) return;
-  console.log(`  ${import_picocolors.default.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")}`);
-}
-function explorerUrl(txHash, network = "mainnet") {
-  const base = network === "testnet" ? "https://suiscan.xyz/testnet/tx" : "https://suiscan.xyz/mainnet/tx";
-  const suffix = "";
-  return `${base}/${txHash}${suffix}`;
-}
-function handleError(error) {
-  if (jsonMode) {
-    const data = error instanceof Error && "toJSON" in error ? error.toJSON() : { error: "UNKNOWN", message: String(error) };
-    printJson(data);
-  } else {
-    const msg = error instanceof Error ? error.message : String(error);
-    printError(msg);
-  }
-  process.exit(1);
-}
-
 // ../sdk/dist/index.js
 var import_bn = __toESM(require_bn(), 1);
 
@@ -28638,7 +28564,7 @@ async function probeX402(args) {
       BigInt(requirements.maxAmountRequired),
       await assetDecimals(requirements.asset)
     );
-    const { isX402EscrowRequirements } = await import("./dist-VUHPQJYY.js");
+    const { isX402EscrowRequirements } = await import("./dist-RTAF2SWN.js");
     if (isX402EscrowRequirements(requirements)) {
       return {
         kind: "escrow",
@@ -28709,7 +28635,7 @@ async function payWithX402(args) {
   const pick = await pickSuiExactRequirements(probe, client.network);
   if (pick.kind === "payable") {
     const requirements = pick.requirements;
-    const { isX402EscrowRequirements } = await import("./dist-VUHPQJYY.js");
+    const { isX402EscrowRequirements } = await import("./dist-RTAF2SWN.js");
     if (isX402EscrowRequirements(requirements)) {
       const escrow = requirements.extra.escrow;
       const price = atomicToHuman(
@@ -28755,7 +28681,7 @@ async function pickSuiExactRequirements(response, network) {
     const want = `sui:${network === "testnet" ? "testnet" : "mainnet"}`;
     const entry = body2.accepts?.find((a) => a.scheme === "exact" && a.network === want);
     if (!entry) return { kind: "none" };
-    const { isX402EscrowRequirements } = await import("./dist-VUHPQJYY.js");
+    const { isX402EscrowRequirements } = await import("./dist-RTAF2SWN.js");
     if (hasCompleteSuimppChallenge(entry) || isX402EscrowRequirements(entry)) {
       return { kind: "payable", requirements: entry };
     }
@@ -28773,7 +28699,7 @@ async function payViaX402(args) {
       { reason: "incomplete-x402-accepts" }
     );
   }
-  const { buildX402SignedPayment, X402_PAYMENT_HEADER, X402_PAYMENT_RESPONSE_HEADER } = await import("./dist-VUHPQJYY.js");
+  const { buildX402SignedPayment, X402_PAYMENT_HEADER, X402_PAYMENT_RESPONSE_HEADER } = await import("./dist-RTAF2SWN.js");
   const amountRaw = BigInt(requirements.maxAmountRequired);
   assertWithinMaxPrice(atomicToHuman(amountRaw, await assetDecimals(requirements.asset)), options.maxPrice);
   const migrationGasSui = await ensureAddressBalanceCovers({
@@ -28904,7 +28830,7 @@ async function finalize(response, opts) {
   return { status: response.status, body: body2, paid: opts.paid };
 }
 async function makeGrpcBuildClient(client) {
-  const { SuiGrpcClient: SuiGrpcClient3 } = await import("./grpc-G3RQE2L5.js");
+  const { SuiGrpcClient: SuiGrpcClient3 } = await import("./grpc-AJNSMQ2Y.js");
   const network = client.network === "testnet" ? "testnet" : "mainnet";
   const baseUrl = network === "testnet" ? "https://fullnode.testnet.sui.io" : "https://fullnode.mainnet.sui.io";
   return new SuiGrpcClient3({ baseUrl, network });
@@ -28933,7 +28859,7 @@ var ZkLoginSigner = class {
     return this.userAddress;
   }
   async signTransaction(txBytes) {
-    const { getZkLoginSignature } = await import("./esm-ZKAIHFAJ.js");
+    const { getZkLoginSignature } = await import("./esm-JVUVZX3G.js");
     const ephSig = await this.ephemeralKeypair.signTransaction(txBytes);
     return {
       signature: getZkLoginSignature({
@@ -28944,7 +28870,7 @@ var ZkLoginSigner = class {
     };
   }
   async signPersonalMessage(messageBytes) {
-    const { getZkLoginSignature } = await import("./esm-ZKAIHFAJ.js");
+    const { getZkLoginSignature } = await import("./esm-JVUVZX3G.js");
     const { signature: ephSig, bytes } = await this.ephemeralKeypair.signPersonalMessage(messageBytes);
     return {
       signature: getZkLoginSignature({
@@ -30609,8 +30535,10 @@ init_coinSelection();
 init_errors();
 init_token_registry();
 init_coinSelection();
-var A2A_ESCROW_OPENING_PACKAGE_ID = process.env.A2A_ESCROW_OPENING_PACKAGE_ID ?? "0x69ad93c555519de520a5c7f7f2963ad6f8b91cefc098fc2eed75942dcb5bcbe7";
-var A2A_ESCROW_PACKAGE_ID = process.env.A2A_ESCROW_PACKAGE_ID ?? "0x358a819c1c016e2cc84ef5fbea81cba90c31f7f8a62bf45cb5e5276acf198bdd";
+var MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID = "0x69ad93c555519de520a5c7f7f2963ad6f8b91cefc098fc2eed75942dcb5bcbe7";
+var A2A_ESCROW_OPENING_PACKAGE_ID = process.env.A2A_ESCROW_OPENING_PACKAGE_ID ?? MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID;
+var MAINNET_A2A_ESCROW_PACKAGE_ID = "0x358a819c1c016e2cc84ef5fbea81cba90c31f7f8a62bf45cb5e5276acf198bdd";
+var A2A_ESCROW_PACKAGE_ID = process.env.A2A_ESCROW_PACKAGE_ID ?? MAINNET_A2A_ESCROW_PACKAGE_ID;
 var A2A_ESCROW_FEE_CONFIG_ID = process.env.A2A_ESCROW_FEE_CONFIG_ID ?? "0xddaa25570950b7484dbf20797ebcf75707be9c87cd67bef2a06ed2e81d2c494b";
 var A2A_ESCROW_FEE_CONFIG_VERSION = Number(
   process.env.A2A_ESCROW_FEE_CONFIG_VERSION ?? 931861903
@@ -30849,6 +30777,10 @@ async function fetchJson(url, init) {
   }
   return json;
 }
+var sponsoredTxGuard = null;
+function setSponsoredTxGuard(guard) {
+  sponsoredTxGuard = guard;
+}
 async function listOpenJobs(base, filter = {}) {
   const params = new URLSearchParams();
   if (filter.status) params.set("status", filter.status);
@@ -30861,6 +30793,7 @@ async function listOpenJobs(base, filter = {}) {
 }
 async function sponsoredOpeningVerb(base, signer, action, params) {
   const address = signer.getAddress();
+  sponsoredTxGuard?.({ base, action });
   const prep = await fetchJson(`${base}/job/prepare`, {
     method: "POST",
     body: { address, action, params }
@@ -30870,6 +30803,7 @@ async function sponsoredOpeningVerb(base, signer, action, params) {
   if (!(nonce && txBytes)) {
     throw new Error("Failed to prepare the transaction.");
   }
+  sponsoredTxGuard?.({ base, action, txBytes });
   const { signature } = await signer.signTransaction(fromBase64(txBytes));
   const json = await fetchJson(`${base}/job/submit`, {
     method: "POST",
@@ -30920,6 +30854,247 @@ init_cetus_swap();
 init_token_registry();
 init_preflight();
 
+// src/lib/tx-guard.ts
+var CANONICAL_API_ORIGIN = "https://api.t2000.ai";
+var ALLOW_UNTRUSTED_FLAG = "--allow-untrusted-api";
+var ACTION_TARGETS = {
+  // v1 escrow package.
+  create: {
+    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    module: "escrow",
+    functions: ["create"]
+  },
+  deliver: {
+    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    module: "escrow",
+    functions: ["deliver"]
+  },
+  release: {
+    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    module: "escrow",
+    functions: ["release"]
+  },
+  reject: {
+    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    module: "escrow",
+    functions: ["reject"]
+  },
+  refund: {
+    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    module: "escrow",
+    functions: ["refund"]
+  },
+  // v3 opening package — note the `escrow` module.
+  decline: {
+    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    module: "escrow",
+    functions: ["decline"]
+  },
+  // Open board.
+  "open-create": {
+    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    module: "opening",
+    functions: ["create_open"]
+  },
+  "open-claim": {
+    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    module: "opening",
+    functions: ["claim"]
+  },
+  "open-cancel": {
+    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    module: "opening",
+    functions: ["cancel_open"]
+  },
+  "open-refund": {
+    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    module: "opening",
+    functions: ["refund_unclaimed"]
+  }
+};
+var HOST_PINNED_ONLY = /* @__PURE__ */ new Set(["register", "link", "confirm"]);
+var allowUntrustedApi = false;
+function setAllowUntrustedApi(value) {
+  allowUntrustedApi = value;
+}
+function isAllowUntrustedApi() {
+  return allowUntrustedApi;
+}
+var UntrustedHostError = class extends Error {
+};
+var IntentMismatchError = class extends Error {
+};
+function apiOrigin(base) {
+  try {
+    return new URL(base).origin;
+  } catch {
+    return base;
+  }
+}
+function isDefaultApiHost(base) {
+  return apiOrigin(base) === CANONICAL_API_ORIGIN;
+}
+function assertSigningHostAllowed(base, allowUntrusted) {
+  if (isDefaultApiHost(base) || allowUntrusted) {
+    return;
+  }
+  throw new UntrustedHostError(
+    `Refusing to sign transactions built by ${apiOrigin(base)}.
+  Only ${CANONICAL_API_ORIGIN} is trusted by default. If you really mean to use
+  another host (a local or staging API), re-run with ${ALLOW_UNTRUSTED_FLAG}.
+  If you did not set T2000_API_URL or --api yourself, treat this as an attack.`
+  );
+}
+function assertTxMatchesIntent(txBytes, intent, opts = {}) {
+  if (opts.allowUntrusted) {
+    return;
+  }
+  if (HOST_PINNED_ONLY.has(intent.action)) {
+    return;
+  }
+  const expected = ACTION_TARGETS[intent.action];
+  if (!expected) {
+    throw new IntentMismatchError(
+      `Refusing to sign: "${intent.action}" is not a verb this wallet knows how to verify.`
+    );
+  }
+  let calls;
+  try {
+    const tx = Transaction.from(
+      new Uint8Array(Buffer.from(txBytes, "base64"))
+    );
+    calls = tx.getData().commands.flatMap(
+      (c) => c.$kind === "MoveCall" && c.MoveCall ? [
+        {
+          pkg: c.MoveCall.package,
+          module: c.MoveCall.module,
+          fn: c.MoveCall.function
+        }
+      ] : []
+    );
+  } catch (e) {
+    throw new IntentMismatchError(
+      `Refusing to sign: could not decode the prepared transaction (${e instanceof Error ? e.message : "unreadable"}).`
+    );
+  }
+  if (calls.length === 0) {
+    throw new IntentMismatchError(
+      "Refusing to sign: the prepared transaction contains no Move calls."
+    );
+  }
+  for (const call of calls) {
+    if (call.pkg !== expected.pkg) {
+      throw new IntentMismatchError(
+        `Refusing to sign: "${intent.action}" targets package ${expected.pkg}, but the transaction calls ${call.pkg}.`
+      );
+    }
+    if (call.module !== expected.module) {
+      throw new IntentMismatchError(
+        `Refusing to sign: "${intent.action}" should call ${expected.module}, but the transaction calls ${call.module}.`
+      );
+    }
+    if (!expected.functions.includes(call.fn)) {
+      throw new IntentMismatchError(
+        `Refusing to sign: "${intent.action}" should call ${expected.module}::${expected.functions.join("|")}, but the transaction calls ${call.module}::${call.fn}.`
+      );
+    }
+  }
+}
+function describeIntent(intent, base) {
+  const bits = [intent.action];
+  if (intent.amountUsdc !== void 0) {
+    bits.push(`$${intent.amountUsdc}`);
+  }
+  if (intent.seller) {
+    bits.push(`\u2192 ${intent.seller.slice(0, 6)}\u2026${intent.seller.slice(-4)}`);
+  }
+  return `About to sign: ${bits.join(" ")} (${apiOrigin(base).replace("https://", "")})`;
+}
+function installSponsoredTxGuard() {
+  setSponsoredTxGuard(({ base, action, txBytes }) => {
+    const allowUntrusted = isAllowUntrustedApi();
+    if (txBytes === void 0) {
+      assertSigningHostAllowed(base, allowUntrusted);
+      return;
+    }
+    assertTxMatchesIntent(txBytes, { action }, { allowUntrusted });
+  });
+}
+
+// src/program.ts
+import { createRequire as createRequire2 } from "module";
+
+// src/output.ts
+var import_picocolors = __toESM(require_picocolors(), 1);
+var jsonMode = false;
+function setJsonMode(enabled) {
+  jsonMode = enabled;
+}
+function isJsonMode() {
+  return jsonMode;
+}
+function printJson(data) {
+  console.log(JSON.stringify(data, null, 2));
+}
+function printSuccess(message) {
+  if (jsonMode) return;
+  console.log(`  ${import_picocolors.default.green("\u2713")} ${message}`);
+}
+function printError(message) {
+  if (jsonMode) return;
+  console.error(`  ${import_picocolors.default.red("\u2717")} ${message}`);
+}
+function printWarning(message) {
+  if (jsonMode) return;
+  console.log(`  ${import_picocolors.default.yellow("\u26A0")} ${message}`);
+}
+function printInfo(message) {
+  if (jsonMode) return;
+  console.log(`  ${import_picocolors.default.dim(message)}`);
+}
+function printHeader(title) {
+  if (jsonMode) return;
+  console.log();
+  console.log(`  ${import_picocolors.default.bold(title)}`);
+  console.log();
+}
+function printKeyValue(key, value, indent2 = 2) {
+  if (jsonMode) return;
+  const pad = " ".repeat(indent2);
+  console.log(`${pad}${import_picocolors.default.dim(key + ":")}  ${value}`);
+}
+function printBlank() {
+  if (jsonMode) return;
+  console.log();
+}
+function printDivider(width = 53) {
+  if (jsonMode) return;
+  console.log(`  ${import_picocolors.default.dim("\u2500".repeat(width))}`);
+}
+function printLine(text) {
+  if (jsonMode) return;
+  console.log(`  ${text}`);
+}
+function printSeparator() {
+  if (jsonMode) return;
+  console.log(`  ${import_picocolors.default.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")}`);
+}
+function explorerUrl(txHash, network = "mainnet") {
+  const base = network === "testnet" ? "https://suiscan.xyz/testnet/tx" : "https://suiscan.xyz/mainnet/tx";
+  const suffix = "";
+  return `${base}/${txHash}${suffix}`;
+}
+function handleError(error) {
+  if (jsonMode) {
+    const data = error instanceof Error && "toJSON" in error ? error.toJSON() : { error: "UNKNOWN", message: String(error) };
+    printJson(data);
+  } else {
+    const msg = error instanceof Error ? error.message : String(error);
+    printError(msg);
+  }
+  process.exit(1);
+}
+
 // ../../node_modules/.pnpm/@inquirer+core@10.3.2_@types+node@20.19.37/node_modules/@inquirer/core/dist/esm/lib/key.js
 var isUpKey = (key, keybindings = []) => (
   // The up key
@@ -33346,12 +33521,16 @@ async function postJson(url, body2) {
   return json;
 }
 async function runSponsoredTx(opts) {
+  const allowUntrusted = isAllowUntrustedApi();
+  assertSigningHostAllowed(opts.prepareUrl, allowUntrusted);
   const prep = await postJson(opts.prepareUrl, opts.prepareBody);
   const nonce = prep.nonce;
   const txBytes = prep.txBytes;
   if (!(nonce && txBytes)) {
     throw new Error("Failed to prepare the transaction.");
   }
+  assertTxMatchesIntent(txBytes, opts.intent, { allowUntrusted });
+  printLine(describeIntent(opts.intent, opts.prepareUrl));
   const bytes = new Uint8Array(Buffer.from(txBytes, "base64"));
   const { signature } = await opts.keypair.signTransaction(bytes);
   const res = await postJson(opts.submitUrl, {
@@ -33362,6 +33541,8 @@ async function runSponsoredTx(opts) {
   return { digest: res.digest };
 }
 async function registerWallet(opts) {
+  const allowUntrusted = isAllowUntrustedApi();
+  assertSigningHostAllowed(opts.base, allowUntrusted);
   const prep = await postJson(`${opts.base}/agent/register/prepare`, {
     address: opts.address
   });
@@ -33373,6 +33554,7 @@ async function registerWallet(opts) {
   if (!(regNonce && txBytes)) {
     throw new Error("Failed to prepare registration.");
   }
+  assertTxMatchesIntent(txBytes, { action: "register" }, { allowUntrusted });
   const bytes = new Uint8Array(Buffer.from(txBytes, "base64"));
   const { signature } = await opts.keypair.signTransaction(bytes);
   const res = await postJson(`${opts.base}/agent/register/submit`, {
@@ -33475,7 +33657,15 @@ function registerInit(program3) {
 }
 
 // src/lib/with-agent.ts
+function assertEnvApiHostTrusted() {
+  const envBase = process.env.T2000_API_URL;
+  if (!envBase) {
+    return;
+  }
+  assertSigningHostAllowed(envBase, isAllowUntrustedApi());
+}
 async function withAgent(options = {}) {
+  assertEnvApiHostTrusted();
   return T2000.create({
     keyPath: options.keyPath,
     rpcUrl: options.rpcUrl
@@ -33483,6 +33673,7 @@ async function withAgent(options = {}) {
 }
 async function tryWithAgent(options = {}) {
   try {
+    assertEnvApiHostTrusted();
     const agent = await T2000.create({
       keyPath: options.keyPath,
       rpcUrl: options.rpcUrl
@@ -35207,7 +35398,8 @@ function registerAgentCreate(group) {
           actor: address,
           prepareUrl: `${base}/agent/owner/propose`,
           prepareBody: { address, owner },
-          submitUrl: `${base}/agent/owner/submit`
+          submitUrl: `${base}/agent/owner/submit`,
+          intent: { action: "link" }
         });
         ownerProposed = true;
       }
@@ -35330,7 +35522,8 @@ Subcommands:
         actor: address,
         prepareUrl: `${base}/agent/owner/propose`,
         prepareBody: { address, owner },
-        submitUrl: `${base}/agent/owner/submit`
+        submitUrl: `${base}/agent/owner/submit`,
+        intent: { action: "link" }
       });
       if (isJsonMode()) {
         printJson({ agent: address, pendingOwner: owner, digest });
@@ -35359,7 +35552,8 @@ Subcommands:
         actor: address,
         prepareUrl: `${base}/agent/owner/confirm`,
         prepareBody: { owner: address, agent: agentAddress },
-        submitUrl: `${base}/agent/owner/submit`
+        submitUrl: `${base}/agent/owner/submit`,
+        intent: { action: "confirm" }
       });
       if (isJsonMode()) {
         printJson({ owner: address, agent: agentAddress, digest });
@@ -35385,7 +35579,8 @@ Subcommands:
         actor: address,
         prepareUrl: `${base}/agent/owner/renounce`,
         prepareBody: { owner: address, agent: agentAddress },
-        submitUrl: `${base}/agent/owner/submit`
+        submitUrl: `${base}/agent/owner/submit`,
+        intent: { action: "confirm" }
       });
       if (isJsonMode()) {
         printJson({ owner: address, agent: agentAddress, unlinked: true, digest });
@@ -35481,6 +35676,7 @@ Subcommands:
         if (!opts.remove) {
           await ensureSellerCategory({ base, agent, category });
         }
+        assertSigningHostAllowed(base, isAllowUntrustedApi());
         const prepRes = await fetch(`${base}/agent/endpoint/prepare`, {
           method: "POST",
           headers: { "Content-Type": "application/json" },
@@ -35647,13 +35843,99 @@ function registerAgents(program3) {
 }
 
 // src/commands/job.ts
-var import_picocolors13 = __toESM(require_picocolors(), 1);
 import { createHash } from "crypto";
+
+// src/lib/spend-gate.ts
+var FORCE_HINT_RE = /\s*Use --force[^.]*\.\s*$/;
+function assertSpendAllowed(amountUsdc, force) {
+  if (!(Number.isFinite(amountUsdc) && amountUsdc > 0)) {
+    return;
+  }
+  try {
+    assertLimitConfig({
+      limits: getLimits(),
+      spentTodayUsd: dailySpentToday(),
+      operation: "send",
+      amountUsd: amountUsdc,
+      force
+    });
+  } catch (e) {
+    if (e instanceof LimitExceededError) {
+      throw new Error(
+        `${e.message.replace(FORCE_HINT_RE, "")} Raise the cap with \`t2 limit set\` \u2014 job verbs have no --force.`
+      );
+    }
+    throw e;
+  }
+}
+function recordSpendIfLanded(amountUsdc, digest) {
+  if (digest && Number.isFinite(amountUsdc) && amountUsdc > 0) {
+    recordDailySpend(amountUsdc);
+  }
+}
+
+// src/lib/agent-ref.ts
+var HASH_ID_RE = /^#\d{1,10}$/;
+var BARE_DIGITS_RE = /^\d{1,10}$/;
+var HANDLE_REF_RE = /^@[a-z0-9_-]{1,20}$/i;
+var HEX_REF_RE = /^0x[0-9a-fA-F]+$/;
+var AGENT_REF_KEY_RE = /agent|address|wallet|subject|recipient|pay[_-]?to|target/i;
+var FALLBACK_MISS = "Use an Agent ID (#93), @handle, or full 0x\u2026 address.";
+function looksLikeAgentRefValue(value) {
+  const v = value.trim();
+  return HASH_ID_RE.test(v) || HANDLE_REF_RE.test(v) || HEX_REF_RE.test(v);
+}
+function looksLikeAgentRefKey(key) {
+  return AGENT_REF_KEY_RE.test(key);
+}
+function isAgentRefField(key, value) {
+  const v = value.trim();
+  if (looksLikeAgentRefValue(v)) {
+    return true;
+  }
+  return BARE_DIGITS_RE.test(v) && looksLikeAgentRefKey(key);
+}
+function agentRefFields(requirements) {
+  if (requirements == null || typeof requirements !== "object" || Array.isArray(requirements)) {
+    return [];
+  }
+  return Object.entries(requirements).filter((e) => typeof e[1] === "string").filter(([k, v]) => isAgentRefField(k, v));
+}
+async function resolveAgentRef(base, q) {
+  const res = await fetch(
+    `${base}/agents/resolve?q=${encodeURIComponent(q.trim())}`
+  );
+  const json = await res.json().catch(() => ({}));
+  if (!(res.ok && json.address)) {
+    throw new Error(json.error ?? FALLBACK_MISS);
+  }
+  return { address: json.address, numericId: json.numericId, name: json.name };
+}
+async function expandAgentRefs(base, requirements) {
+  const fields = agentRefFields(requirements);
+  if (fields.length === 0) {
+    return requirements;
+  }
+  const out = { ...requirements };
+  for (const [key, raw] of fields) {
+    try {
+      out[key] = (await resolveAgentRef(base, raw)).address;
+    } catch (e) {
+      throw new Error(
+        `${key}: ${e instanceof Error ? e.message : FALLBACK_MISS}`
+      );
+    }
+  }
+  return out;
+}
+
+// src/commands/job.ts
+var import_picocolors13 = __toESM(require_picocolors(), 1);
 import { readFile as readFile4 } from "fs/promises";
 
 // src/commands/open.ts
-var import_picocolors12 = __toESM(require_picocolors(), 1);
 import { readFile as readFile3 } from "fs/promises";
+var import_picocolors12 = __toESM(require_picocolors(), 1);
 var DEFAULT_API_BASE6 = process.env.T2000_API_URL ?? "https://api.t2000.ai/v1";
 var MAX_BRIEF_BYTES = 16 * 1024;
 async function resolveBrief(input) {
@@ -35701,6 +35983,7 @@ function registerOpenVerbs(group) {
           throw new Error(`--max must be between 0.01 and ${MAX_JOB_USDC} USDC.`);
         }
         const brief = await resolveBrief(opts.brief);
+        assertSpendAllowed(maxUsdc);
         const agent = await withAgent({ keyPath: opts.key });
         const digest = await postOpenJob(base, agent.signer, {
           title: opts.title.trim(),
@@ -35709,6 +35992,7 @@ function registerOpenVerbs(group) {
           slaMinutes: Math.round(parseDuration(opts.sla) / 6e4),
           openHours: parseDuration(opts.openFor) / 36e5
         });
+        recordSpendIfLanded(maxUsdc, digest);
         const openingId = await resolveCreated(digest, "::opening::Opening<");
         if (isJsonMode()) {
           printJson({ digest, openingId });
@@ -35923,13 +36207,22 @@ function printInboxRow(job) {
 async function sponsoredJobVerb(opts) {
   const agent = await withAgent({ keyPath: opts.keyPath });
   const address = agent.address();
+  if (opts.spendUsdc !== void 0) {
+    assertSpendAllowed(opts.spendUsdc, opts.force);
+  }
   const { digest } = await runSponsoredTx({
     keypair: agent.keypair,
     actor: address,
     prepareUrl: `${opts.base}/job/prepare`,
     prepareBody: { address, action: opts.action, params: opts.params },
-    submitUrl: `${opts.base}/job/submit`
+    submitUrl: `${opts.base}/job/submit`,
+    intent: {
+      action: opts.action,
+      amountUsdc: opts.spendUsdc,
+      seller: opts.seller
+    }
   });
+  recordSpendIfLanded(opts.spendUsdc ?? 0, digest);
   return { address, digest };
 }
 function registerJob(program3) {
@@ -35965,7 +36258,10 @@ no fund step; unclaimed openings refund fee-free):
   ASP     $ t2 job board \xB7 t2 job claim <openingId>
 `
   );
-  group.command("hire").alias("create").argument("[amount]", `USDC to escrow (max ${MAX_JOB_USDC}; omit when hiring a --service listing)`).argument("[seller]", "The ASP's Sui address (omit when hiring a --service listing)").description("Hire \u2014 fund an escrow job in one transaction (buyer): a listing (--agent + --service) or your own terms (amount + seller + --spec)").option("--spec <file-or-text>", "Job spec \u2014 a file path or inline text (UPLOADED so the seller can read it; sha256 pinned on-chain), or a bare 0x\u2026 sha256 (confidential: pins without uploading)").option("--agent <address>", "Hire a listing: the ASP's agent address").option("--service <slug>", "The service slug (see t2 services / t2 service list <agent>)").option("--requirements <file-or-json-or-text>", "What the seller asked buyers to provide \u2014 if the listing lists JSON keys, fill EVERY key (JSON object; extra keys OK)").option("--deadline <duration>", "Time the seller has to deliver (e.g. 30m, 24h, 7d)", "24h").option("--review <duration>", "Your accept/reject window after delivery", "24h").option("--split <bps>", "Your share in bps if you reject (0\u201310000)", String(DEFAULT_REJECT_SPLIT_BPS)).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE7})`).action(
+  group.command("hire").alias("create").argument("[amount]", `USDC to escrow (max ${MAX_JOB_USDC}; omit when hiring a --service listing)`).argument("[seller]", "The ASP's Sui address (omit when hiring a --service listing)").description("Hire \u2014 fund an escrow job in one transaction (buyer): a listing (--agent + --service) or your own terms (amount + seller + --spec)").option("--spec <file-or-text>", "Job spec \u2014 a file path or inline text (UPLOADED so the seller can read it; sha256 pinned on-chain), or a bare 0x\u2026 sha256 (confidential: pins without uploading)").option(
+    "--agent <address|#id|@handle>",
+    "Hire a listing: the ASP's agent address, #id, or @handle"
+  ).option("--service <slug>", "The service slug (see t2 services / t2 service list <agent>)").option("--requirements <file-or-json-or-text>", "What the seller asked buyers to provide \u2014 if the listing lists JSON keys, fill EVERY key (JSON object; extra keys OK)").option("--deadline <duration>", "Time the seller has to deliver (e.g. 30m, 24h, 7d)", "24h").option("--review <duration>", "Your accept/reject window after delivery", "24h").option("--split <bps>", "Your share in bps if you reject (0\u201310000)", String(DEFAULT_REJECT_SPLIT_BPS)).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE7})`).action(
     async (amountArg, sellerArg, opts) => {
       try {
         const base = opts.api ?? DEFAULT_API_BASE7;
@@ -35986,7 +36282,9 @@ no fund step; unclaimed openings refund fee-free):
               "Omit the amount/seller arguments when buying a service \u2014 the listing sets the price and the seller."
             );
           }
-          const sellerAgent = validateAddress(opts.agent);
+          const sellerAgent = validateAddress(
+            (await resolveAgentRef(base, opts.agent)).address
+          );
           const service = await fetchService(base, sellerAgent, serviceSlugOpt);
           serviceSlug = service.slug;
           let requirements = null;
@@ -36002,6 +36300,7 @@ no fund step; unclaimed openings refund fee-free):
               requirements = text.trim();
             }
           }
+          requirements = await expandAgentRefs(base, requirements);
           assertBuyerRequirements(service.requirements, requirements);
           const buyer = (await withAgent({ keyPath: opts.key })).address();
           const spec = JSON.stringify({
@@ -36036,7 +36335,9 @@ no fund step; unclaimed openings refund fee-free):
           if (!Number.isFinite(amountUsdc) || amountUsdc <= 0) {
             throw new Error(`Amount must be a positive number (got "${amountArg}").`);
           }
-          seller = validateAddress(sellerArg);
+          seller = validateAddress(
+            (await resolveAgentRef(base, sellerArg)).address
+          );
           ({ hash: specHash } = await resolveSpecUpload(base, opts.spec));
           deliverByMs = Date.now() + parseDuration(opts.deadline);
           reviewWindowMs = opts.review ? parseDuration(opts.review) : DEFAULT_REVIEW_WINDOW_MS;
@@ -36046,7 +36347,10 @@ no fund step; unclaimed openings refund fee-free):
           base,
           keyPath: opts.key,
           action: "create",
-          params: { seller, amountUsdc, specHash, deliverByMs, reviewWindowMs, rejectSplitBps }
+          params: { seller, amountUsdc, specHash, deliverByMs, reviewWindowMs, rejectSplitBps },
+          // The buyer's USDC leaves here — the one job verb that spends.
+          spendUsdc: amountUsdc,
+          seller
         });
         const client = getSuiClient();
         let jobId;
@@ -36619,9 +36923,24 @@ var require3 = createRequire2(import.meta.url);
 var { version: CLI_VERSION2 } = require3("../package.json");
 function createProgram() {
   const program3 = new Command();
-  program3.name("t2").description("Agent Wallet \u2014 autonomous Sui USDC + USDsui wallet for AI agents").version(`${CLI_VERSION2}`).option("--json", "Output in JSON format").hook("preAction", (thisCommand) => {
+  program3.name("t2").description("Agent Wallet \u2014 autonomous Sui USDC + USDsui wallet for AI agents").version(`${CLI_VERSION2}`).option("--json", "Output in JSON format").option(
+    "--allow-untrusted-api",
+    `Permit signing transactions built by a non-default API host (${CANONICAL_API_ORIGIN} is the only trusted host). Only for local/staging work \u2014 a host you did not choose can propose any transaction.`
+  ).hook("preAction", (thisCommand) => {
     const opts = thisCommand.optsWithGlobals();
     if (opts.json) setJsonMode(true);
+    setAllowUntrustedApi(Boolean(opts.allowUntrustedApi));
+    installSponsoredTxGuard();
+    if (process.env.T2000_API_URL) {
+      try {
+        assertSigningHostAllowed(
+          process.env.T2000_API_URL,
+          Boolean(opts.allowUntrustedApi)
+        );
+      } catch (e) {
+        handleError(e);
+      }
+    }
   }).addHelpText("after", `
 Setup:
   $ t2 init                            Create a new Agent Wallet