@t2000/cli 10.29.1 → 10.30.1

package/dist/index.js

@@ -30548,8 +30548,9 @@ init_coinSelection();
 init_errors();
 init_token_registry();
 init_coinSelection();
-var MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID = "0x69ad93c555519de520a5c7f7f2963ad6f8b91cefc098fc2eed75942dcb5bcbe7";
-var A2A_ESCROW_OPENING_PACKAGE_ID = process.env.A2A_ESCROW_OPENING_PACKAGE_ID ?? MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID;
+var MAINNET_A2A_ESCROW_LATEST_PACKAGE_ID = "0x83f02c59575b7daa4576eeccc22542f8a5679520e4edd02feeeee2daae16b819";
+var MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID = MAINNET_A2A_ESCROW_LATEST_PACKAGE_ID;
+var A2A_ESCROW_LATEST_PACKAGE_ID = process.env.A2A_ESCROW_OPENING_PACKAGE_ID ?? process.env.A2A_ESCROW_PACKAGE_ID ?? MAINNET_A2A_ESCROW_LATEST_PACKAGE_ID;
 var MAINNET_A2A_ESCROW_PACKAGE_ID = "0x358a819c1c016e2cc84ef5fbea81cba90c31f7f8a62bf45cb5e5276acf198bdd";
 var A2A_ESCROW_PACKAGE_ID = process.env.A2A_ESCROW_PACKAGE_ID ?? MAINNET_A2A_ESCROW_PACKAGE_ID;
 var A2A_ESCROW_FEE_CONFIG_ID = process.env.A2A_ESCROW_FEE_CONFIG_ID ?? "0xddaa25570950b7484dbf20797ebcf75707be9c87cd67bef2a06ed2e81d2c494b";
@@ -30558,6 +30559,7 @@ var A2A_ESCROW_FEE_CONFIG_VERSION = Number(
 );
 var MODULE2 = "escrow";
 var MAX_JOB_USDC = 50;
+var MIN_JOB_USDC = 0.05;
 var MAX_REVIEW_WINDOW_MS = 2592e6;
 var MAX_DELIVER_HORIZON_MS = 31536e6;
 var JOB_STATES = [
@@ -30593,6 +30595,12 @@ function preflightCreateJob(terms) {
   if (!Number.isFinite(terms.amountUsdc) || terms.amountUsdc <= 0) {
     return preflightFail("INVALID_AMOUNT", `Amount must be positive. Got ${terms.amountUsdc}.`);
   }
+  if (terms.amountUsdc < MIN_JOB_USDC) {
+    return preflightFail(
+      "INVALID_AMOUNT",
+      `Escrow jobs start at ${MIN_JOB_USDC} USDC (contract-enforced minimum). Got ${terms.amountUsdc}.`
+    );
+  }
   if (terms.amountUsdc > MAX_JOB_USDC) {
     return preflightFail(
       "INVALID_AMOUNT",
@@ -30946,56 +30954,57 @@ init_preflight();
 var CANONICAL_API_ORIGIN = "https://api.t2000.ai";
 var ALLOW_UNTRUSTED_FLAG = "--allow-untrusted-api";
 var ACTION_TARGETS = {
-  // v1 escrow package.
+  // Escrow verbs — emitted at the original id (pre-S.981 SDK) or the latest
+  // id (S.981+ SDK, the version-gated path).
   create: {
-    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_PACKAGE_ID, MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "escrow",
     functions: ["create"]
   },
   deliver: {
-    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_PACKAGE_ID, MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "escrow",
     functions: ["deliver"]
   },
   release: {
-    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_PACKAGE_ID, MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "escrow",
     functions: ["release"]
   },
   reject: {
-    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_PACKAGE_ID, MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "escrow",
     functions: ["reject"]
   },
   refund: {
-    pkg: MAINNET_A2A_ESCROW_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_PACKAGE_ID, MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "escrow",
     functions: ["refund"]
   },
   // v3 opening package — note the `escrow` module.
   decline: {
-    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "escrow",
     functions: ["decline"]
   },
   // Open board.
   "open-create": {
-    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "opening",
     functions: ["create_open"]
   },
   "open-claim": {
-    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "opening",
     functions: ["claim"]
   },
   "open-cancel": {
-    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "opening",
     functions: ["cancel_open"]
   },
   "open-refund": {
-    pkg: MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID,
+    pkgs: [MAINNET_A2A_ESCROW_OPENING_PACKAGE_ID],
     module: "opening",
     functions: ["refund_unclaimed"]
   }
@@ -31081,10 +31090,10 @@ function assertTxMatchesIntent(txBytes, intent, opts = {}) {
       "Refusing to sign: the prepared transaction contains no Move calls."
     );
   }
-  const expectedPkg = normalizeSuiAddress(expected.pkg);
+  const expectedPkgs = expected.pkgs.map((p) => normalizeSuiAddress(p));
   let foundIntent = false;
   for (const call of calls) {
-    if (normalizeSuiAddress(call.pkg) === expectedPkg) {
+    if (expectedPkgs.includes(normalizeSuiAddress(call.pkg))) {
       if (call.module !== expected.module) {
         throw new IntentMismatchError(
           `Refusing to sign: "${intent.action}" should call ${expected.module}, but the transaction calls ${call.module}.`
@@ -31102,7 +31111,7 @@ function assertTxMatchesIntent(txBytes, intent, opts = {}) {
       continue;
     }
     throw new IntentMismatchError(
-      `Refusing to sign: "${intent.action}" targets package ${expected.pkg}, but the transaction calls ${call.pkg}::${call.module}::${call.fn}.`
+      `Refusing to sign: "${intent.action}" targets package ${expected.pkgs.join(" | ")}, but the transaction calls ${call.pkg}::${call.module}::${call.fn}.`
     );
   }
   if (!foundIntent) {
@@ -34359,7 +34368,7 @@ var import_picocolors8 = __toESM(require_picocolors(), 1);
 function registerPay(program3) {
   program3.command("pay <url>").description("Pay an x402 Service (USDC on Sui) \u2014 the seller's own endpoint").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--method <method>", "HTTP method (GET, POST, PUT)", "GET").option("--data <json>", "Request body for POST/PUT (auto-promotes --method to POST)").option("--header <key=value>", "Additional HTTP header (repeatable)", collectHeaders, {}).option("--max-price <amount>", "Max USDC price to auto-approve", "1.00").option(
     "--estimate",
-    "Preview the price + service info (no signing, no payment). Exits 0 if the service responds with a 402 challenge."
+    'Preview the price + service info (no signing, no payment). Exits 0 ONLY if the service answers a payable 402 x402 challenge; any other response (including 2xx "no payment required") exits 1.'
   ).option("--force", "Override spending limits for this call (see `t2 limit`)").addHelpText(
     "after",
     `
@@ -34430,6 +34439,23 @@ Examples:
     }
   });
 }
+var ESTIMATE_PREVIEW_MAX = 512;
+function truncatePreview(body2, max = ESTIMATE_PREVIEW_MAX) {
+  if (body2.length <= max) {
+    return body2;
+  }
+  return `${body2.slice(0, max)}\u2026 (truncated, ${body2.length} total bytes)`;
+}
+var EstimateFailure = class extends Error {
+  constructor(message, payload) {
+    super(message);
+    this.payload = payload;
+    this.name = "EstimateFailure";
+  }
+  toJSON() {
+    return this.payload;
+  }
+};
 async function runEstimate(url, opts) {
   const method = opts.data && opts.method === "GET" ? "POST" : opts.method;
   const canHaveBody = method !== "GET" && method !== "HEAD";
@@ -34452,28 +34478,33 @@ async function runEstimate(url, opts) {
   });
   if (response.status !== 402) {
     const body2 = await response.text().catch(() => "");
-    if (isJsonMode()) {
-      printJson({
+    const preview = truncatePreview(body2);
+    const open = response.status >= 200 && response.status < 300;
+    const note = open ? `Endpoint responded ${response.status} without a 402 challenge \u2014 no payment required.` : `Endpoint responded ${response.status} (not a 402 payment challenge).`;
+    if (!isJsonMode()) {
+      if (open) {
+        printInfo(`No payment required (status ${response.status}).`);
+      } else {
+        printInfo(`Status ${response.status} \u2014 not a 402 payment challenge.`);
+      }
+      if (preview) {
+        printBlank();
+        console.log(preview);
+        printBlank();
+      }
+    }
+    throw new EstimateFailure(
+      `${note} --estimate exits 0 only for a payable 402 x402 challenge.`,
+      {
         url,
         method,
         status: response.status,
+        ok: false,
         estimate: null,
-        note: response.status >= 200 && response.status < 300 ? "Endpoint responded without a 402 challenge \u2014 no payment required." : `Endpoint responded with ${response.status} (not a 402 payment challenge).`,
-        body: body2
-      });
-      return;
-    }
-    if (response.status >= 200 && response.status < 300) {
-      printSuccess(`No payment required (status ${response.status}).`);
-    } else {
-      printInfo(`Status ${response.status} \u2014 not a 402 payment challenge.`);
-    }
-    if (body2) {
-      printBlank();
-      console.log(body2);
-      printBlank();
-    }
-    return;
+        note,
+        ...preview ? { bodyPreview: preview } : {}
+      }
+    );
   }
   let accepts = [];
   try {
@@ -36378,24 +36409,76 @@ async function fetchSellerJobs(base, seller) {
   return json.jobs ?? [];
 }
 var TERMINAL_STATES = /* @__PURE__ */ new Set(["released", "rejected", "refunded"]);
-function inboxHint(job) {
-  if (job.state === "funded") {
-    return `t2 job spec ${job.jobId} \u2192 do the work \u2192 t2 job deliver ${job.jobId} <file>`;
+function reviewClosesMs(job) {
+  const anchor = job.deliveredAtMs ?? job.updatedAtMs;
+  if (!(typeof anchor === "number" && anchor > 0 && typeof job.reviewWindowMs === "number" && job.reviewWindowMs > 0)) {
+    return null;
+  }
+  return anchor + job.reviewWindowMs;
+}
+function bucketSellerJob(job, nowMs) {
+  if (TERMINAL_STATES.has(job.state)) {
+    return "terminal";
   }
-  if (job.state === "delivered") {
-    return `waiting on the buyer's review \u2014 anyone can \`t2 job release\` once it lapses`;
+  if (job.state === "funded") {
+    return nowMs <= job.deliverByMs ? "needsYou" : "fundedLate";
+  }
+  const closes = reviewClosesMs(job);
+  return closes !== null && nowMs > closes ? "releasable" : "awaitingBuyer";
+}
+function summarizeSellerInbox(jobs, nowMs) {
+  const buckets = {
+    counts: { total: jobs.length, needsYou: 0, fundedLate: 0, awaitingBuyer: 0, releasable: 0, terminal: 0 },
+    needsYou: [],
+    fundedLate: [],
+    awaitingBuyer: [],
+    releasable: [],
+    terminal: []
+  };
+  for (const job of jobs) {
+    const bucket = bucketSellerJob(job, nowMs);
+    buckets[bucket].push(job);
+    buckets.counts[bucket] += 1;
+  }
+  return buckets;
+}
+function inboxHint(job, bucket) {
+  switch (bucket) {
+    case "needsYou":
+      return `t2 job spec ${job.jobId} \u2192 do the work \u2192 t2 job deliver ${job.jobId} <file>`;
+    case "releasable":
+      return `releasable now \u2014 t2 job release ${job.jobId}`;
+    case "awaitingBuyer": {
+      const closes = reviewClosesMs(job);
+      return closes !== null ? `waiting on the buyer's review \u2014 release becomes permissionless after ${new Date(closes).toISOString()}` : `waiting on the buyer's review \u2014 anyone can \`t2 job release\` once it lapses`;
+    }
+    case "fundedLate":
+      return `deliver deadline passed \u2014 the chain rejects late delivers; the buyer (or anyone) may t2 job refund ${job.jobId}`;
+    default:
+      return "";
   }
-  return "";
 }
-function printInboxRow(job) {
+function printInboxRow(job, bucket) {
   const deadline = job.state === "funded" ? ` \xB7 deliver by ${new Date(job.deliverByMs).toISOString()}` : "";
   printLine(
     `  ${stateColor(job.state)}  $${job.amountUsdc.toFixed(2)} USDC \xB7 from ${truncateAddress(job.buyer)}${deadline}`
   );
   printLine(`  ${import_picocolors13.default.dim(job.jobId)}`);
-  const hint = inboxHint(job);
+  const hint = inboxHint(job, bucket);
   if (hint) printLine(`  ${import_picocolors13.default.dim("\u2192")} ${hint}`);
 }
+function deliverPreflightError(state, deliverByMs, nowMs) {
+  if (state === "delivered") {
+    return "This job is already delivered. The delivery hash is permanent and cannot be replaced \u2014 wait for the buyer's review, or once the window closes anyone may run `t2 job release <jobId>`. Fixes travel via buyer reject (inside the window) or out-of-band, never a second deliver.";
+  }
+  if (state === "released" || state === "rejected" || state === "refunded") {
+    return `This job is ${state} \u2014 nothing can be delivered.`;
+  }
+  if (state === "funded" && nowMs > deliverByMs) {
+    return `The deliver deadline (${new Date(deliverByMs).toISOString()}) has passed \u2014 the chain rejects late delivers, so nothing was uploaded or signed. The refund path is open: anyone may run \`t2 job refund <jobId>\`.`;
+  }
+  return null;
+}
 async function sponsoredJobVerb(opts) {
   const agent = await withAgent({ keyPath: opts.keyPath });
   const address = agent.address();
@@ -36644,9 +36727,16 @@ no fund step; unclaimed openings refund fee-free):
       handleError(error);
     }
   });
-  group.command("deliver").argument("<jobId>", "The Job object id (0x\u2026)").argument("<proof>", "Delivery body \u2014 a file path or text (UPLOADED so the buyer can read it; sha256 pinned on-chain), or a bare 0x\u2026 sha256").description("Post your delivery before the deadline (seller) \u2014 the body uploads to the job-spec store so the buyer can read it, and its sha256 pins on-chain").option("--hash-only", "Pin <proof> as a precomputed 0x\u2026 sha256 WITHOUT uploading a body \u2014 the confidential / large-artifact path (the buyer can't read it on-platform; hand the artifact over out-of-band)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE7})`).action(async (jobId, proof, opts) => {
+  group.command("deliver").argument("<jobId>", "The Job object id (0x\u2026)").argument("<proof>", "Delivery body \u2014 a file path or text (UPLOADED so the buyer can read it; sha256 pinned on-chain), or a bare 0x\u2026 sha256").description("Post your delivery before the deadline (seller) \u2014 ONE SHOT: the sha256 pins on-chain permanently and cannot be replaced. Fix mistakes via buyer reject (inside the review window) or out-of-band \u2014 never a second deliver. Decline is only possible BEFORE delivery.").option("--hash-only", "Pin <proof> as a precomputed 0x\u2026 sha256 WITHOUT uploading a body \u2014 the confidential / large-artifact path (the buyer can't read it on-platform; hand the artifact over out-of-band)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE7})`).action(async (jobId, proof, opts) => {
     try {
       const base = opts.api ?? DEFAULT_API_BASE7;
+      const existing = await getJob(getSuiClient(), jobId).catch(() => null);
+      if (existing) {
+        const preflightError = deliverPreflightError(existing.state, existing.deliverByMs, Date.now());
+        if (preflightError) {
+          throw new Error(preflightError.replaceAll("<jobId>", jobId));
+        }
+      }
       let deliveryHash;
       let uploaded = false;
       if (opts.hashOnly) {
@@ -36658,6 +36748,9 @@ no fund step; unclaimed openings refund fee-free):
       } else {
         ({ hash: deliveryHash, uploaded } = await resolveSpecUpload(base, proof));
       }
+      if (!isJsonMode()) {
+        printInfo("Delivery pins once. The buyer review window starts after this succeeds; you cannot replace the hash.");
+      }
       const { digest } = await sponsoredJobVerb({
         base,
         keyPath: opts.key,
@@ -36665,11 +36758,12 @@ no fund step; unclaimed openings refund fee-free):
         params: { jobId, deliveryHash }
       });
       if (isJsonMode()) {
-        printJson({ jobId, deliveryHash, uploaded, digest });
+        printJson({ jobId, deliveryHash, uploaded, digest, onceOnly: true });
         return;
       }
       printBlank();
       printSuccess("Delivery posted \u2014 the buyer's review window is now open.");
+      printInfo("This delivery cannot be amended \u2014 further `t2 job deliver` calls on this job will fail.");
       printKeyValue("Delivery hash", deliveryHash);
       if (digest) printKeyValue("Tx", digest);
       if (uploaded) {
@@ -36813,23 +36907,45 @@ no fund step; unclaimed openings refund fee-free):
         const base = opts.api ?? DEFAULT_API_BASE7;
         const seen = /* @__PURE__ */ new Map();
         const jobs = await fetchSellerJobs(base, me);
+        const inbox = summarizeSellerInbox(jobs, Date.now());
         if (isJsonMode()) {
-          printJson({ seller: me, jobs });
+          printJson({
+            seller: me,
+            counts: inbox.counts,
+            needsYou: inbox.needsYou,
+            fundedLate: inbox.fundedLate,
+            awaitingBuyer: inbox.awaitingBuyer,
+            releasable: inbox.releasable,
+            terminal: inbox.terminal,
+            jobs
+          });
           return;
         }
-        const open = jobs.filter((j) => !TERMINAL_STATES.has(j.state));
         printBlank();
-        printInfo(`Provider inbox for ${truncateAddress(me)} \u2014 ${jobs.length} job(s), ${open.length} open.`);
+        printInfo(
+          `Provider inbox for ${truncateAddress(me)} \u2014 ${jobs.length} job(s) \xB7 ${inbox.counts.needsYou} need you \xB7 ${inbox.counts.awaitingBuyer} awaiting buyer \xB7 ${inbox.counts.releasable} releasable now`
+        );
+        if (inbox.counts.fundedLate > 0) {
+          printLine(import_picocolors13.default.dim(`  ${inbox.counts.fundedLate} past deliver deadline (not deliverable \u2014 refund path is open to others)`));
+        }
         printBlank();
-        for (const job of open) {
-          printInboxRow(job);
-          printBlank();
+        for (const [bucket, rows] of [
+          ["needsYou", inbox.needsYou],
+          ["releasable", inbox.releasable],
+          ["awaitingBuyer", inbox.awaitingBuyer],
+          ["fundedLate", inbox.fundedLate]
+        ]) {
+          for (const job of rows) {
+            printInboxRow(job, bucket);
+            printBlank();
+          }
         }
-        if (open.length === 0) {
+        const openCount = jobs.length - inbox.counts.terminal;
+        if (openCount === 0) {
           printInfo("No open jobs. New hires appear here the moment the escrow funds.");
           printBlank();
         }
-        for (const job of jobs) seen.set(job.jobId, job.state);
+        for (const job of jobs) seen.set(job.jobId, bucketSellerJob(job, Date.now()));
         if (opts.once) return;
         for (; ; ) {
           await new Promise((r) => setTimeout(r, intervalMs));
@@ -36839,17 +36955,21 @@ no fund step; unclaimed openings refund fee-free):
           } catch {
             continue;
           }
+          const nowMs = Date.now();
           for (const job of latest) {
+            const bucket = bucketSellerJob(job, nowMs);
             const prev = seen.get(job.jobId);
-            if (prev === job.state) continue;
-            seen.set(job.jobId, job.state);
+            if (prev === bucket) continue;
+            seen.set(job.jobId, bucket);
             printBlank();
-            if (prev === void 0 && job.state === "funded") {
+            if (prev === void 0 && bucket === "needsYou") {
               printSuccess(`New job \u2014 $${job.amountUsdc.toFixed(2)} USDC escrowed for you.`);
+            } else if (bucket === "releasable") {
+              printSuccess(`Releasable now \u2014 t2 job release ${job.jobId}`);
             } else {
               printInfo(`Job ${truncateAddress(job.jobId)}: ${prev ?? "new"} \u2192 ${job.state}`);
             }
-            printInboxRow(job);
+            printInboxRow(job, bucket);
             printBlank();
           }
         }
@@ -37000,7 +37120,7 @@ Examples:
   $ t2 service retire sui-market-report
 `
   );
-  group.command("create").description("List a service under your Agent ID (re-run to update it)").requiredOption("--name <name>", "Service name (max 80 chars)").requiredOption("--price <usdc>", "Fixed price in USDC (0.01\u201350)").requiredOption("--sla <duration>", "Delivery SLA \u2014 e.g. 30m, 24h, 7d").requiredOption("--description <text>", "What this service is (max 2000 chars)").requiredOption("--deliverable <text>", "What the buyer receives (max 1000 chars)").option("--slug <slug>", "Machine name (default: derived from --name)").requiredOption(
+  group.command("create").description("List a service under your Agent ID (re-run to update it)").requiredOption("--name <name>", "Service name (max 80 chars)").requiredOption("--price <usdc>", "Fixed price in USDC (0.05\u201350)").requiredOption("--sla <duration>", "Delivery SLA \u2014 e.g. 30m, 24h, 7d").requiredOption("--description <text>", "What this service is (max 2000 chars)").requiredOption("--deliverable <text>", "What the buyer receives (max 1000 chars)").option("--slug <slug>", "Machine name (default: derived from --name)").requiredOption(
     "--requirements <file-or-json-or-text>",
     "The questions buyers answer at hire (REQUIRED \u2014 the API rejects listings that ask nothing): free text, or a JSON object of field names \u2192 hints (keys enforced non-empty at hire; file path ok)"
   ).option("--review <duration>", "Buyer's accept/reject window after delivery", "24h").option("--split <bps>", "Buyer's share in bps if they reject (0\u201310000)", "8000").option(
@@ -37013,6 +37133,11 @@ Examples:
         if (!Number.isFinite(priceUsdc) || priceUsdc <= 0) {
           throw new Error(`--price must be a positive number (got "${opts.price}").`);
         }
+        if (priceUsdc < MIN_JOB_USDC) {
+          throw new Error(
+            `--price must be at least ${MIN_JOB_USDC} USDC \u2014 escrow jobs start there (contract-enforced minimum).`
+          );
+        }
         const slaMinutes = Math.round(parseDuration(opts.sla) / 6e4);
         const reviewWindowMinutes = Math.round(parseDuration(opts.review) / 6e4);
         const rejectSplitBps = Number.parseInt(opts.split, 10);