@t2000/cli 10.28.0 → 10.29.1

package/dist/{chunk-SHZC6TMU.js → chunk-7ZMRX7L4.js}

@@ -10,7 +10,7 @@ import {
   fromBase64 as fromBase642,
   suiBcs,
   toBase64 as toBase642
-} from "./chunk-T32A4PV6.js";
+} from "./chunk-AJX562JQ.js";
 import {
   SUI_ADDRESS_LENGTH,
   fromBase64,
@@ -12463,4 +12463,4 @@ export {
   SuiGrpcClient,
   types_exports
 };
-//# sourceMappingURL=chunk-SHZC6TMU.js.map
+//# sourceMappingURL=chunk-7ZMRX7L4.js.map

package/dist/{chunk-T32A4PV6.js → chunk-AJX562JQ.js}

@@ -2760,6 +2760,10 @@ function getNamesFromTypeList(types) {
 }
 
 export {
+  TypeTagSerializer,
+  ExecutionStatus,
+  pureBcsSchemaFromTypeName,
+  suiBcs,
   integer,
   is,
   array,
@@ -2790,10 +2794,6 @@ export {
   ValidDuringSchema,
   TransactionExpiration2 as TransactionExpiration,
   getIdFromCallArg,
-  TypeTagSerializer,
-  ExecutionStatus,
-  pureBcsSchemaFromTypeName,
-  suiBcs,
   serializeV1TransactionData,
   TransactionDataBuilder,
   MOVE_STDLIB_ADDRESS,
@@ -2813,4 +2813,4 @@ export {
   findNamesInTransaction,
   replaceNames
 };
-//# sourceMappingURL=chunk-T32A4PV6.js.map
+//# sourceMappingURL=chunk-AJX562JQ.js.map

package/dist/{chunk-TVD4WMBT.js → chunk-IYBOBPGG.js}

@@ -1,15 +1,15 @@
 import { createRequire as __createRequire } from 'module'; import { fileURLToPath as __fileURLToPath } from 'url'; import { dirname as __pathDirname } from 'path'; const require = __createRequire(import.meta.url); const __filename = __fileURLToPath(import.meta.url); const __dirname = __pathDirname(__filename);
 import {
   SuiGrpcClient
-} from "./chunk-SHZC6TMU.js";
+} from "./chunk-7ZMRX7L4.js";
 import {
   Transaction,
   coinWithBalance
-} from "./chunk-CNTCUDEZ.js";
+} from "./chunk-KSHM4A6X.js";
 import {
   SUI_CLOCK_OBJECT_ID,
   suiBcs
-} from "./chunk-T32A4PV6.js";
+} from "./chunk-AJX562JQ.js";
 import {
   normalizeSuiObjectId
 } from "./chunk-BX4V52TZ.js";
@@ -32559,4 +32559,4 @@ mime-types/index.js:
      *)
   *)
 */
-//# sourceMappingURL=chunk-TVD4WMBT.js.map
+//# sourceMappingURL=chunk-IYBOBPGG.js.map

package/dist/{chunk-CNTCUDEZ.js → chunk-KSHM4A6X.js}

@@ -47,7 +47,7 @@ import {
   tuple,
   union,
   unknown
-} from "./chunk-T32A4PV6.js";
+} from "./chunk-AJX562JQ.js";
 import {
   fromBase58,
   fromBase64,
@@ -1635,4 +1635,4 @@ export {
   coinWithBalance,
   Transaction
 };
-//# sourceMappingURL=chunk-CNTCUDEZ.js.map
+//# sourceMappingURL=chunk-KSHM4A6X.js.map

package/dist/{dist-RTAF2SWN.js → dist-2P3XNMJC.js}

@@ -1,8 +1,8 @@
 import { createRequire as __createRequire } from 'module'; import { fileURLToPath as __fileURLToPath } from 'url'; import { dirname as __pathDirname } from 'path'; const require = __createRequire(import.meta.url); const __filename = __fileURLToPath(import.meta.url); const __dirname = __pathDirname(__filename);
 import {
   Transaction
-} from "./chunk-CNTCUDEZ.js";
-import "./chunk-T32A4PV6.js";
+} from "./chunk-KSHM4A6X.js";
+import "./chunk-AJX562JQ.js";
 import {
   fromBase64,
   normalizeSuiAddress,
@@ -348,4 +348,4 @@ export {
   withRetry,
   x402Network
 };
-//# sourceMappingURL=dist-RTAF2SWN.js.map
+//# sourceMappingURL=dist-2P3XNMJC.js.map

package/dist/{dist-JP4PBPBV.js → dist-VE3SAZWF.js}

@@ -171,10 +171,10 @@ import {
   processEndpoint,
   processFlattenRoutes,
   restituteMsafeFastRouterSwapParams
-} from "./chunk-TVD4WMBT.js";
-import "./chunk-SHZC6TMU.js";
-import "./chunk-CNTCUDEZ.js";
-import "./chunk-T32A4PV6.js";
+} from "./chunk-IYBOBPGG.js";
+import "./chunk-7ZMRX7L4.js";
+import "./chunk-KSHM4A6X.js";
+import "./chunk-AJX562JQ.js";
 import "./chunk-BX4V52TZ.js";
 import "./chunk-YPWSCLE3.js";
 export {
@@ -350,4 +350,4 @@ export {
   processFlattenRoutes,
   restituteMsafeFastRouterSwapParams
 };
-//# sourceMappingURL=dist-JP4PBPBV.js.map
+//# sourceMappingURL=dist-VE3SAZWF.js.map

package/dist/{grpc-AJNSMQ2Y.js → grpc-GFGD32S5.js}

@@ -5,8 +5,8 @@ import {
   SuiGrpcClient,
   isSuiGrpcClient,
   types_exports
-} from "./chunk-SHZC6TMU.js";
-import "./chunk-T32A4PV6.js";
+} from "./chunk-7ZMRX7L4.js";
+import "./chunk-AJX562JQ.js";
 import "./chunk-BX4V52TZ.js";
 import "./chunk-YPWSCLE3.js";
 export {
@@ -16,4 +16,4 @@ export {
   SuiGrpcClient,
   isSuiGrpcClient
 };
-//# sourceMappingURL=grpc-AJNSMQ2Y.js.map
+//# sourceMappingURL=grpc-GFGD32S5.js.map

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'module'; import { fileURLToPat
 import {
   AggregatorClient,
   Env
-} from "./chunk-TVD4WMBT.js";
+} from "./chunk-IYBOBPGG.js";
 import {
   BalanceChange,
   BaseClient,
@@ -16,11 +16,11 @@ import {
   parseTransactionEffectsBcs,
   transactionDataToGrpcTransaction,
   transactionToGrpcJson
-} from "./chunk-SHZC6TMU.js";
+} from "./chunk-7ZMRX7L4.js";
 import {
   Transaction,
   coinWithBalance
-} from "./chunk-CNTCUDEZ.js";
+} from "./chunk-KSHM4A6X.js";
 import {
   ObjectError,
   SUI_TYPE_ARG,
@@ -31,7 +31,7 @@ import {
   fromBase64 as fromBase642,
   suiBcs,
   toBase64 as toBase642
-} from "./chunk-T32A4PV6.js";
+} from "./chunk-AJX562JQ.js";
 import {
   SIGNATURE_FLAG_TO_SCHEME,
   SIGNATURE_SCHEME_TO_FLAG,
@@ -28542,7 +28542,7 @@ async function probeX402(args) {
       BigInt(requirements.maxAmountRequired),
       await assetDecimals(requirements.asset)
     );
-    const { isX402EscrowRequirements } = await import("./dist-RTAF2SWN.js");
+    const { isX402EscrowRequirements } = await import("./dist-2P3XNMJC.js");
     if (isX402EscrowRequirements(requirements)) {
       return {
         kind: "escrow",
@@ -28613,7 +28613,7 @@ async function payWithX402(args) {
   const pick = await pickSuiExactRequirements(probe, client.network);
   if (pick.kind === "payable") {
     const requirements = pick.requirements;
-    const { isX402EscrowRequirements } = await import("./dist-RTAF2SWN.js");
+    const { isX402EscrowRequirements } = await import("./dist-2P3XNMJC.js");
     if (isX402EscrowRequirements(requirements)) {
       const escrow = requirements.extra.escrow;
       const price = atomicToHuman(
@@ -28659,7 +28659,7 @@ async function pickSuiExactRequirements(response, network) {
     const want = `sui:${network === "testnet" ? "testnet" : "mainnet"}`;
     const entry = body2.accepts?.find((a) => a.scheme === "exact" && a.network === want);
     if (!entry) return { kind: "none" };
-    const { isX402EscrowRequirements } = await import("./dist-RTAF2SWN.js");
+    const { isX402EscrowRequirements } = await import("./dist-2P3XNMJC.js");
     if (hasCompleteSuimppChallenge(entry) || isX402EscrowRequirements(entry)) {
       return { kind: "payable", requirements: entry };
     }
@@ -28677,7 +28677,7 @@ async function payViaX402(args) {
       { reason: "incomplete-x402-accepts" }
     );
   }
-  const { buildX402SignedPayment, X402_PAYMENT_HEADER, X402_PAYMENT_RESPONSE_HEADER } = await import("./dist-RTAF2SWN.js");
+  const { buildX402SignedPayment, X402_PAYMENT_HEADER, X402_PAYMENT_RESPONSE_HEADER } = await import("./dist-2P3XNMJC.js");
   const amountRaw = BigInt(requirements.maxAmountRequired);
   assertWithinMaxPrice(atomicToHuman(amountRaw, await assetDecimals(requirements.asset)), options.maxPrice);
   const migrationGasSui = await ensureAddressBalanceCovers({
@@ -28808,7 +28808,7 @@ async function finalize(response, opts) {
   return { status: response.status, body: body2, paid: opts.paid };
 }
 async function makeGrpcBuildClient(client) {
-  const { SuiGrpcClient: SuiGrpcClient3 } = await import("./grpc-AJNSMQ2Y.js");
+  const { SuiGrpcClient: SuiGrpcClient3 } = await import("./grpc-GFGD32S5.js");
   const network = client.network === "testnet" ? "testnet" : "mainnet";
   const baseUrl = network === "testnet" ? "https://fullnode.testnet.sui.io" : "https://fullnode.mainnet.sui.io";
   return new SuiGrpcClient3({ baseUrl, network });
@@ -30823,6 +30823,34 @@ async function getJobSpec(base, hash) {
   }
   return content;
 }
+var TITLE_PREFIX_RE = /^title\s*:\s*(.+)$/i;
+var ENVELOPE_TITLE_MAX = 80;
+function customHireEnvelope(brief, title, now) {
+  const body2 = brief.trim();
+  let t = title?.trim() ?? "";
+  if (!t) {
+    const first = body2.split("\n").find((l) => l.trim())?.trim() ?? "";
+    const prefixed = TITLE_PREFIX_RE.exec(first);
+    t = (prefixed ? prefixed[1] : first).trim();
+  }
+  if (t.length > ENVELOPE_TITLE_MAX) {
+    t = `${t.slice(0, ENVELOPE_TITLE_MAX - 1).trimEnd()}\u2026`;
+  }
+  return JSON.stringify({
+    type: "t2-acp-custom@1",
+    title: t || "Custom job",
+    brief: body2,
+    createdAtMs: now
+  });
+}
+function isCustomHireEnvelope(text) {
+  try {
+    const parsed = JSON.parse(text);
+    return (parsed.type === "t2-acp-custom@1" || parsed.type === "t2-acp-invite@1") && typeof parsed.brief === "string" && parsed.brief.trim().length > 0;
+  } catch {
+    return false;
+  }
+}
 async function fetchJson(url, init) {
   const res = await fetch(url, {
     method: init?.method ?? "GET",
@@ -30972,6 +31000,11 @@ var ACTION_TARGETS = {
     functions: ["refund_unclaimed"]
   }
 };
+var SUI_FRAMEWORK_PACKAGE = normalizeSuiAddress("0x2");
+var FRAMEWORK_PRELUDE = {
+  coin: /* @__PURE__ */ new Set(["redeem_funds", "into_balance", "zero", "destroy_zero"]),
+  balance: /* @__PURE__ */ new Set(["redeem_funds", "zero"])
+};
 var HOST_PINNED_ONLY = /* @__PURE__ */ new Set(["register", "link", "confirm"]);
 var allowUntrustedApi = false;
 function setAllowUntrustedApi(value) {
@@ -31018,17 +31051,23 @@ function assertTxMatchesIntent(txBytes, intent, opts = {}) {
       `Refusing to sign: "${intent.action}" is not a verb this wallet knows how to verify.`
     );
   }
+  let sender;
+  let inputs;
   let calls;
   try {
     const tx = Transaction.from(
       new Uint8Array(Buffer.from(txBytes, "base64"))
     );
-    calls = tx.getData().commands.flatMap(
+    const data = tx.getData();
+    sender = data.sender;
+    inputs = data.inputs;
+    calls = data.commands.flatMap(
       (c) => c.$kind === "MoveCall" && c.MoveCall ? [
         {
           pkg: c.MoveCall.package,
           module: c.MoveCall.module,
-          fn: c.MoveCall.function
+          fn: c.MoveCall.function,
+          args: c.MoveCall.arguments ?? []
         }
       ] : []
     );
@@ -31042,22 +31081,65 @@ function assertTxMatchesIntent(txBytes, intent, opts = {}) {
       "Refusing to sign: the prepared transaction contains no Move calls."
     );
   }
+  const expectedPkg = normalizeSuiAddress(expected.pkg);
+  let foundIntent = false;
   for (const call of calls) {
-    if (call.pkg !== expected.pkg) {
-      throw new IntentMismatchError(
-        `Refusing to sign: "${intent.action}" targets package ${expected.pkg}, but the transaction calls ${call.pkg}.`
-      );
-    }
-    if (call.module !== expected.module) {
-      throw new IntentMismatchError(
-        `Refusing to sign: "${intent.action}" should call ${expected.module}, but the transaction calls ${call.module}.`
-      );
+    if (normalizeSuiAddress(call.pkg) === expectedPkg) {
+      if (call.module !== expected.module) {
+        throw new IntentMismatchError(
+          `Refusing to sign: "${intent.action}" should call ${expected.module}, but the transaction calls ${call.module}.`
+        );
+      }
+      if (!expected.functions.includes(call.fn)) {
+        throw new IntentMismatchError(
+          `Refusing to sign: "${intent.action}" should call ${expected.module}::${expected.functions.join("|")}, but the transaction calls ${call.module}::${call.fn}.`
+        );
+      }
+      foundIntent = true;
+      continue;
     }
-    if (!expected.functions.includes(call.fn)) {
-      throw new IntentMismatchError(
-        `Refusing to sign: "${intent.action}" should call ${expected.module}::${expected.functions.join("|")}, but the transaction calls ${call.module}::${call.fn}.`
-      );
+    if (isAllowedCoinPrelude(call, sender, inputs)) {
+      continue;
     }
+    throw new IntentMismatchError(
+      `Refusing to sign: "${intent.action}" targets package ${expected.pkg}, but the transaction calls ${call.pkg}::${call.module}::${call.fn}.`
+    );
+  }
+  if (!foundIntent) {
+    throw new IntentMismatchError(
+      `Refusing to sign: "${intent.action}" should call ${expected.module}::${expected.functions.join("|")}, but the transaction never does.`
+    );
+  }
+}
+function isAllowedCoinPrelude(call, sender, inputs) {
+  if (normalizeSuiAddress(call.pkg) !== SUI_FRAMEWORK_PACKAGE) {
+    return false;
+  }
+  if (FRAMEWORK_PRELUDE[call.module]?.has(call.fn)) {
+    return true;
+  }
+  if (call.module === "coin" && call.fn === "send_funds") {
+    return isSenderRemainderReturn(call, sender, inputs);
+  }
+  return false;
+}
+function isSenderRemainderReturn(call, sender, inputs) {
+  if (!sender) {
+    return false;
+  }
+  const recipientArg = call.args[1];
+  if (!recipientArg || recipientArg.$kind !== "Input" || typeof recipientArg.Input !== "number") {
+    return false;
+  }
+  const input = inputs[recipientArg.Input];
+  if (!input || input.$kind !== "Pure" || !input.Pure?.bytes) {
+    return false;
+  }
+  try {
+    const recipient = suiBcs.Address.fromBase64(input.Pure.bytes);
+    return normalizeSuiAddress(recipient) === normalizeSuiAddress(sender);
+  } catch {
+    return false;
   }
 }
 function describeIntent(intent, base) {
@@ -36223,10 +36305,10 @@ function parseDuration(input) {
 }
 var SHA256_HEX_RE = /^0x[0-9a-fA-F]{64}$/;
 var SPEC_STORE_MAX_BYTES = 16 * 1024;
-async function resolveSpecUpload(base, input) {
+async function loadSpecText(input) {
   const trimmed = input.trim();
   if (SHA256_HEX_RE.test(trimmed)) {
-    return { hash: trimmed.toLowerCase(), uploaded: false };
+    return { kind: "hash", hash: trimmed.toLowerCase() };
   }
   let bytes;
   try {
@@ -36247,7 +36329,27 @@ async function resolveSpecUpload(base, input) {
       "Content is not UTF-8 text \u2014 the job-spec store holds text only. Upload a short note that LINKS the artifact, or pin a precomputed commitment with --hash-only 0x<sha256>."
     );
   }
-  return { hash: `0x${await putJobSpec(base, text)}`, uploaded: true };
+  return { kind: "text", text };
+}
+async function resolveSpecUpload(base, input) {
+  const loaded = await loadSpecText(input);
+  if (loaded.kind === "hash") {
+    return { hash: loaded.hash, uploaded: false };
+  }
+  return { hash: `0x${await putJobSpec(base, loaded.text)}`, uploaded: true };
+}
+async function resolveHireSpecUpload(base, input, title) {
+  const loaded = await loadSpecText(input);
+  if (loaded.kind === "hash") {
+    return { hash: loaded.hash, uploaded: false };
+  }
+  const body2 = isCustomHireEnvelope(loaded.text) ? loaded.text : customHireEnvelope(loaded.text, title, Date.now());
+  if (Buffer.byteLength(body2, "utf8") > SPEC_STORE_MAX_BYTES) {
+    throw new Error(
+      "The brief plus its envelope exceeds the 16 KiB job-spec store cap \u2014 shorten the brief, or link the long artifact (URL / IPFS)."
+    );
+  }
+  return { hash: `0x${await putJobSpec(base, body2)}`, uploaded: true };
 }
 function stateColor(state) {
   if (state === "released") return import_picocolors13.default.green(state);
@@ -36348,7 +36450,7 @@ no fund step; unclaimed openings refund fee-free):
   ASP     $ t2 job board \xB7 t2 job claim <openingId>
 `
   );
-  group.command("hire").alias("create").argument("[amount]", `USDC to escrow (max ${MAX_JOB_USDC}; omit when hiring a --service listing)`).argument("[seller]", "The ASP's Sui address (omit when hiring a --service listing)").description("Hire \u2014 fund an escrow job in one transaction (buyer): a listing (--agent + --service) or your own terms (amount + seller + --spec)").option("--spec <file-or-text>", "Job spec \u2014 a file path or inline text (UPLOADED so the seller can read it; sha256 pinned on-chain), or a bare 0x\u2026 sha256 (confidential: pins without uploading)").option(
+  group.command("hire").alias("create").argument("[amount]", `USDC to escrow (max ${MAX_JOB_USDC}; omit when hiring a --service listing)`).argument("[seller]", "The ASP's Sui address (omit when hiring a --service listing)").description("Hire \u2014 fund an escrow job in one transaction (buyer): a listing (--agent + --service) or your own terms (amount + seller + --spec)").option("--spec <file-or-text>", "Job spec \u2014 a file path or inline text (UPLOADED as the public t2-acp-custom@1 title+brief envelope so the seller and the store can read it; sha256 pinned on-chain), or a bare 0x\u2026 sha256 (confidential: pins without uploading, no envelope)").option("--title <text>", "Public job title (\u226480 chars). Custom/direct hire only; derived from the brief's first line if omitted").option(
     "--agent <address|#id|@handle>",
     "Hire a listing: the ASP's agent address, #id, or @handle"
   ).option("--service <slug>", "The service slug (see t2 services / t2 service list <agent>)").option("--requirements <file-or-json-or-text>", "What the seller asked buyers to provide \u2014 if the listing lists JSON keys, fill EVERY key (JSON object; extra keys OK)").option("--deadline <duration>", "Time the seller has to deliver (e.g. 30m, 24h, 7d)", "24h").option("--review <duration>", "Your accept/reject window after delivery", "24h").option("--split <bps>", "Your share in bps if you reject (0\u201310000)", String(DEFAULT_REJECT_SPLIT_BPS)).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE7})`).action(
@@ -36428,7 +36530,11 @@ no fund step; unclaimed openings refund fee-free):
           seller = validateAddress(
             (await resolveAgentRef(base, sellerArg)).address
           );
-          ({ hash: specHash } = await resolveSpecUpload(base, opts.spec));
+          ({ hash: specHash } = await resolveHireSpecUpload(
+            base,
+            opts.spec,
+            opts.title
+          ));
           deliverByMs = Date.now() + parseDuration(opts.deadline);
           reviewWindowMs = opts.review ? parseDuration(opts.review) : DEFAULT_REVIEW_WINDOW_MS;
           rejectSplitBps = Number.parseInt(opts.split, 10);
@@ -36894,9 +37000,9 @@ Examples:
   $ t2 service retire sui-market-report
 `
   );
-  group.command("create").description("List a service under your Agent ID (re-run to update it)").requiredOption("--name <name>", "Service name (max 80 chars)").requiredOption("--price <usdc>", "Fixed price in USDC (0.01\u201350)").requiredOption("--sla <duration>", "Delivery SLA \u2014 e.g. 30m, 24h, 7d").requiredOption("--description <text>", "What this service is (max 2000 chars)").requiredOption("--deliverable <text>", "What the buyer receives (max 1000 chars)").option("--slug <slug>", "Machine name (default: derived from --name)").option(
+  group.command("create").description("List a service under your Agent ID (re-run to update it)").requiredOption("--name <name>", "Service name (max 80 chars)").requiredOption("--price <usdc>", "Fixed price in USDC (0.01\u201350)").requiredOption("--sla <duration>", "Delivery SLA \u2014 e.g. 30m, 24h, 7d").requiredOption("--description <text>", "What this service is (max 2000 chars)").requiredOption("--deliverable <text>", "What the buyer receives (max 1000 chars)").option("--slug <slug>", "Machine name (default: derived from --name)").requiredOption(
     "--requirements <file-or-json-or-text>",
-    "What the buyer must provide \u2014 prefer a JSON object of required fields (keys enforced non-empty at hire); free text ok (file path ok)"
+    "The questions buyers answer at hire (REQUIRED \u2014 the API rejects listings that ask nothing): free text, or a JSON object of field names \u2192 hints (keys enforced non-empty at hire; file path ok)"
   ).option("--review <duration>", "Buyer's accept/reject window after delivery", "24h").option("--split <bps>", "Buyer's share in bps if they reject (0\u201310000)", "8000").option(
     "--category <category>",
     `Directory category for your listing: ${AGENT_CATEGORIES.join(" | ")} (required unless already set on your profile)`