@t2000/cli 5.30.0 → 5.32.0

package/dist/index.js

@@ -10784,7 +10784,7 @@ var require_lib2 = __commonJS({
       return matches;
     };
     exports.analyse = analyse;
-    var detectFile = (filepath, opts = {}) => new Promise((resolve2, reject) => {
+    var detectFile = (filepath, opts = {}) => new Promise((resolve3, reject) => {
       let fd;
       const fs = (0, node_1.default)();
       const handler = (err, buffer) => {
@@ -10794,7 +10794,7 @@ var require_lib2 = __commonJS({
         if (err) {
           reject(err);
         } else if (buffer) {
-          resolve2((0, exports.detect)(buffer));
+          resolve3((0, exports.detect)(buffer));
         } else {
           reject(new Error("No error and no buffer received"));
         }
@@ -18970,10 +18970,10 @@ var require_browser = __commonJS({
           text = canvas;
           canvas = void 0;
         }
-        return new Promise(function(resolve2, reject) {
+        return new Promise(function(resolve3, reject) {
           try {
             const data = QRCode.create(text, opts);
-            resolve2(renderFunc(data, canvas, opts));
+            resolve3(renderFunc(data, canvas, opts));
           } catch (e) {
             reject(e);
           }
@@ -19055,11 +19055,11 @@ var require_server = __commonJS({
     }
     function render(renderFunc, text, params) {
       if (!params.cb) {
-        return new Promise(function(resolve2, reject) {
+        return new Promise(function(resolve3, reject) {
           try {
             const data = QRCode.create(text, params.opts);
             return renderFunc(data, params.opts, function(err, data2) {
-              return err ? reject(err) : resolve2(data2);
+              return err ? reject(err) : resolve3(data2);
             });
           } catch (e) {
             reject(e);
@@ -30298,13 +30298,13 @@ var PromisePolyfill = class extends Promise {
   // Available starting from Node 22
   // https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise/withResolvers
   static withResolver() {
-    let resolve2;
+    let resolve3;
     let reject;
     const promise = new Promise((res, rej) => {
-      resolve2 = res;
+      resolve3 = res;
       reject = rej;
     });
-    return { promise, resolve: resolve2, reject };
+    return { promise, resolve: resolve3, reject };
   }
 };
 
@@ -30338,7 +30338,7 @@ function createPrompt(view) {
       output
     });
     const screen = new ScreenManager(rl);
-    const { promise, resolve: resolve2, reject } = PromisePolyfill.withResolver();
+    const { promise, resolve: resolve3, reject } = PromisePolyfill.withResolver();
     const cancel = () => reject(new CancelPromptError());
     if (signal) {
       const abort = () => reject(new AbortPromptError({ cause: signal.reason }));
@@ -30365,7 +30365,7 @@ function createPrompt(view) {
       cycle(() => {
         try {
           const nextView = view(config, (value) => {
-            setImmediate(() => resolve2(value));
+            setImmediate(() => resolve3(value));
           });
           if (nextView === void 0) {
             const callerFilename = callSites[1]?.getFileName();
@@ -33122,7 +33122,7 @@ function registerMcpStart(parent) {
   parent.command("start", { isDefault: true }).description("Start MCP server (stdio transport \u2014 for AI client integration)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(async (opts) => {
     let mod3;
     try {
-      mod3 = await import("./dist-SHQDD6S3.js");
+      mod3 = await import("./dist-VB42REWC.js");
     } catch {
       console.error("MCP server not installed. Run:\n  npm install -g @t2000/mcp");
       process.exit(1);
@@ -33595,7 +33595,7 @@ For MCP-aware clients (Claude Desktop, Cursor, Windsurf), prefer
 }
 
 // src/commands/agent/index.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 
 // src/commands/agent/create.ts
 var DEFAULT_API_BASE3 = process.env.T2000_API_URL ?? "https://api.t2000.ai/v1";
@@ -33834,6 +33834,13 @@ function registerAgentReview(agent) {
   );
 }
 
+// src/commands/agent/serve.ts
+import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+import { createServer } from "http";
+import { join as join8, resolve as resolve2 } from "path";
+import { pathToFileURL } from "url";
+
 // src/commands/agent/services.ts
 import { createHash as createHash2 } from "crypto";
 import { readFileSync as readFileSync3 } from "fs";
@@ -34062,9 +34069,513 @@ function registerAgentServices(agentGroup, defaults) {
   });
 }
 
-// src/commands/agent/index.ts
+// src/commands/agent/serve.ts
 var DEFAULT_API_BASE4 = process.env.T2000_API_URL ?? "https://api.t2000.ai/v1";
 var DEFAULT_GATEWAY2 = process.env.T2000_GATEWAY_URL ?? "https://mpp.t2000.ai";
+var SLUG_RE2 = /^[a-z0-9][a-z0-9-]{1,39}$/;
+var MANIFEST = "t2serve.json";
+var HANDLER = "handler.mjs";
+var HANDLER_TEMPLATE = `// t2000 hosted handler (R1). Deploys with: t2 agent serve deploy
+//
+// Contract: one self-contained ES module (no imports \u2014 fetch/crypto/URL are
+// available as Workers globals). The gateway calls this ONLY for paid,
+// escrowed deliveries; on a 2xx your wallet is paid, on failure the buyer is
+// auto-refunded. Keep it fast (15s delivery timeout, 5s CPU cap).
+//
+//   input \u2014 the buyer's request body (parsed JSON, or a raw string)
+//   ctx   \u2014 { agent, slug, buyer, secrets }
+//           secrets = your vault (t2 agent serve secrets set KEY=value)
+export default async function handle(input, ctx) {
+  // Example: compose public data and return a result.
+  // const res = await fetch('https://api.example.com/data');
+  // const data = await res.json();
+  return {
+    echo: input,
+    from: ctx.slug,
+    note: 'Replace this with your service logic.',
+  };
+}
+`;
+var PROXY_TEMPLATE = `// t2000 hosted handler \u2014 "Proxy an API" template. You hold a key to an
+// API; this resells calls to it per-call, with your key never leaving the
+// t2000 vault. Setup:
+//   1. Edit UPSTREAM below.
+//   2. t2 agent serve secrets set UPSTREAM_KEY=<your api key>
+//   3. t2 agent serve deploy
+const UPSTREAM = 'https://api.example.com/v1/endpoint';
+
+export default async function handle(input, ctx) {
+  const res = await fetch(UPSTREAM, {
+    method: 'POST',
+    headers: {
+      'content-type': 'application/json',
+      // Adjust the auth scheme to your upstream (x-api-key, basic, \u2026).
+      ...(ctx.secrets?.UPSTREAM_KEY
+        ? { authorization: \`Bearer \${ctx.secrets.UPSTREAM_KEY}\` }
+        : {}),
+    },
+    body: JSON.stringify(input ?? {}),
+  });
+  if (!res.ok) {
+    // Throwing fails the delivery \u2192 the buyer is auto-refunded.
+    throw new Error(\`Upstream error \${res.status}\`);
+  }
+  return await res.json();
+}
+`;
+var TEMPLATES = {
+  default: HANDLER_TEMPLATE,
+  proxy: PROXY_TEMPLATE
+};
+function readManifest(dir) {
+  const p = join8(dir, MANIFEST);
+  if (!existsSync4(p)) {
+    throw new Error(
+      `No ${MANIFEST} here \u2014 run \`t2 agent serve init\` first (or --dir <path>).`
+    );
+  }
+  const m = JSON.parse(readFileSync4(p, "utf8"));
+  const slug = String(m.slug ?? "").trim().toLowerCase();
+  if (!SLUG_RE2.test(slug)) {
+    throw new Error(`${MANIFEST}: slug must match [a-z0-9-], 2-40 chars.`);
+  }
+  if (!m.title?.trim() || !m.description?.trim()) {
+    throw new Error(`${MANIFEST}: title and description are required.`);
+  }
+  const price = Number(m.price);
+  if (!Number.isFinite(price) || price <= 0) {
+    throw new Error(`${MANIFEST}: price must be a positive USDC amount.`);
+  }
+  return { ...m, slug };
+}
+function readHandler(dir) {
+  const p = join8(dir, HANDLER);
+  if (!existsSync4(p)) {
+    throw new Error(`No ${HANDLER} here \u2014 run \`t2 agent serve init\` first.`);
+  }
+  const src = readFileSync4(p, "utf8");
+  if (!src.trim()) {
+    throw new Error(`${HANDLER} is empty.`);
+  }
+  if (/^\s*import\s.+from\s/m.test(src)) {
+    throw new Error(
+      `${HANDLER} must be self-contained (no imports) \u2014 fetch, crypto, and URL are available as globals.`
+    );
+  }
+  return src;
+}
+async function fetchJson4(url, init) {
+  const res = await fetch(url, {
+    method: init?.method ?? "GET",
+    headers: init?.body ? { "Content-Type": "application/json" } : void 0,
+    body: init?.body ? JSON.stringify(init.body) : void 0
+  });
+  const json = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    const err = json.error;
+    const msg = typeof err === "string" ? err : err?.message ?? `HTTP ${res.status}`;
+    throw new Error(msg);
+  }
+  return json;
+}
+function registerAgentServe(agentGroup) {
+  const group = agentGroup.command("serve").description(
+    "Hosted handlers \u2014 deploy a function to t2000 compute and sell it per call. No server, no wrap. [R1]"
+  );
+  group.command("init").description(`Scaffold ${HANDLER} + ${MANIFEST} in the current directory.`).option("--slug <slug>", "Service slug (in the buy URL)", "my-service").option(
+    "--template <name>",
+    `Handler template: ${Object.keys(TEMPLATES).join(" | ")} (proxy = resell a keyed API)`,
+    "default"
+  ).option("--dir <path>", "Target directory (default: cwd)").action((opts) => {
+    try {
+      const dir = resolve2(opts.dir ?? ".");
+      mkdirSync2(dir, { recursive: true });
+      const slug = opts.slug.trim().toLowerCase();
+      if (!SLUG_RE2.test(slug)) {
+        throw new Error("--slug must match [a-z0-9-], 2-40 chars.");
+      }
+      const template = TEMPLATES[opts.template];
+      if (!template) {
+        throw new Error(
+          `Unknown --template "${opts.template}" \u2014 use: ${Object.keys(TEMPLATES).join(", ")}.`
+        );
+      }
+      const manifestPath = join8(dir, MANIFEST);
+      const handlerPath = join8(dir, HANDLER);
+      if (existsSync4(manifestPath) || existsSync4(handlerPath)) {
+        throw new Error(`${MANIFEST} or ${HANDLER} already exists here.`);
+      }
+      writeFileSync3(
+        manifestPath,
+        `${JSON.stringify(
+          {
+            slug,
+            title: "My service",
+            description: "What the buyer gets, in one or two sentences. Provide: 1. \u2026",
+            price: "0.02",
+            input: "JSON body with your parameters"
+          },
+          null,
+          2
+        )}
+`
+      );
+      writeFileSync3(handlerPath, template);
+      if (isJsonMode()) {
+        printJson({ dir, files: [MANIFEST, HANDLER] });
+        return;
+      }
+      printBlank();
+      printSuccess("Scaffolded a hosted handler");
+      printKeyValue("Handler", handlerPath);
+      printKeyValue("Manifest", manifestPath);
+      printBlank();
+      printLine("Next:");
+      printLine("  t2 agent serve dev       # try it locally");
+      printLine("  t2 agent serve deploy    # deploy + list it for sale");
+      printBlank();
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  group.command("dev").description(
+    "Run the handler locally against the delivery contract (POST {input} to :8787)."
+  ).option("--dir <path>", "Handler directory (default: cwd)").option("--port <port>", "Port (default 8787)", "8787").option("--input <json>", "One-shot: invoke once with this input and exit").action(async (opts) => {
+    try {
+      const dir = resolve2(opts.dir ?? ".");
+      const manifest = readManifest(dir);
+      readHandler(dir);
+      const mod3 = await import(pathToFileURL(join8(dir, HANDLER)).href);
+      const fn = mod3.default;
+      if (typeof fn !== "function") {
+        throw new Error(`${HANDLER} must default-export a function.`);
+      }
+      const ctx = {
+        agent: "0xLOCAL",
+        slug: manifest.slug,
+        buyer: "0xBUYER"
+      };
+      if (opts.input !== void 0) {
+        let input = opts.input;
+        try {
+          input = JSON.parse(opts.input);
+        } catch {
+        }
+        const out = await fn(input, ctx);
+        printJson({ ok: true, output: out });
+        return;
+      }
+      const port = Number(opts.port) || 8787;
+      const server = createServer(async (req, res) => {
+        const chunks = [];
+        for await (const c of req) {
+          chunks.push(c);
+        }
+        const raw = Buffer.concat(chunks).toString("utf8");
+        let input = raw;
+        try {
+          input = raw ? JSON.parse(raw) : {};
+        } catch {
+        }
+        try {
+          const out = await fn(input, ctx);
+          res.writeHead(200, { "content-type": "application/json" });
+          res.end(JSON.stringify(out));
+        } catch (e) {
+          res.writeHead(500, { "content-type": "application/json" });
+          res.end(
+            JSON.stringify({ error: e instanceof Error ? e.message : String(e) })
+          );
+        }
+      });
+      server.listen(port, () => {
+        printBlank();
+        printSuccess(`Local handler running \u2014 slug "${manifest.slug}"`);
+        printLine(`  curl -X POST http://localhost:${port} -d '{"hello":"world"}'`);
+        printLine("  Ctrl-C to stop.");
+        printBlank();
+      });
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  group.command("deploy").description(
+    "Deploy the handler to t2000 compute + list the SKU in your catalog. Sponsored listing, per-call earnings to your wallet."
+  ).option("--dir <path>", "Handler directory (default: cwd)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).option("--gateway <url>", `Gateway URL (default ${DEFAULT_GATEWAY2})`).action(
+    async (opts) => {
+      try {
+        const dir = resolve2(opts.dir ?? ".");
+        const base = opts.api ?? DEFAULT_API_BASE4;
+        const gateway = opts.gateway ?? DEFAULT_GATEWAY2;
+        const manifest = readManifest(dir);
+        const script = readHandler(dir);
+        const scriptB64 = Buffer.from(script, "utf8").toString("base64");
+        const agent = await withAgent({ keyPath: opts.key });
+        const address = agent.address();
+        const ts = Date.now();
+        const bodyHash = createHash3("sha256").update(`${manifest.slug}|${scriptB64}`).digest("hex");
+        const message = new TextEncoder().encode(
+          `t2000-serve:${ts}:${bodyHash}`
+        );
+        const { signature } = await agent.keypair.signPersonalMessage(message);
+        const deployed = await fetchJson4(`${gateway}/serve/deploy`, {
+          method: "POST",
+          body: {
+            address,
+            slug: manifest.slug,
+            script: scriptB64,
+            timestamp: ts,
+            signature
+          }
+        });
+        const catalog = await getCatalog(base, address);
+        const entry = {
+          slug: manifest.slug,
+          title: manifest.title,
+          description: manifest.description,
+          priceUsdc: String(manifest.price),
+          input: manifest.input ?? null,
+          endpoint: null,
+          method: "POST",
+          active: true
+        };
+        const next = [
+          ...catalog.filter((s) => s.slug !== manifest.slug),
+          entry
+        ];
+        await putCatalog({ base, keyPath: opts.key, services: next });
+        const buyUrl = String(
+          deployed.buyUrl ?? `https://x402.t2000.ai/commerce/pay/${address}/${manifest.slug}`
+        );
+        if (isJsonMode()) {
+          printJson({
+            address,
+            slug: manifest.slug,
+            sizeBytes: deployed.sizeBytes,
+            listed: true,
+            buyUrl
+          });
+          return;
+        }
+        printBlank();
+        printSuccess(`Deployed "${manifest.slug}" to t2000 compute`);
+        printKeyValue("Buy URL", buyUrl);
+        printKeyValue("Price", `$${manifest.price} per call`);
+        printKeyValue("Store", `https://agents.t2000.ai/${address}`);
+        printBlank();
+        printLine("  t2 agent serve logs      # invocations");
+        printLine("  t2 agent serve undeploy --slug " + manifest.slug);
+        printBlank();
+      } catch (error) {
+        handleError(error);
+      }
+    }
+  );
+  const secrets = group.command("secrets").description(
+    "This agent's handler secrets vault \u2014 encrypted at t2000, injected as ctx.secrets on paid deliveries only. Values are write-only."
+  );
+  secrets.command("set").argument("<pairs...>", "NAME=value pairs (e.g. UPSTREAM_KEY=sk-\u2026)").description("Set (or overwrite) vault secrets. NAME: A-Z, 0-9, _.").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--gateway <url>", `Gateway URL (default ${DEFAULT_GATEWAY2})`).action(
+    async (pairs, opts) => {
+      try {
+        const updates = {};
+        for (const pair of pairs) {
+          const eq = pair.indexOf("=");
+          if (eq <= 0) {
+            throw new Error(`"${pair}" is not NAME=value.`);
+          }
+          updates[pair.slice(0, eq).trim()] = pair.slice(eq + 1);
+        }
+        const res = await postSecrets(opts, "set", updates);
+        if (isJsonMode()) {
+          printJson({ names: res.names });
+          return;
+        }
+        printBlank();
+        printSuccess("Vault updated");
+        printKeyValue("Secrets", res.names.join(", ") || "(none)");
+        printInfo("Handlers read them as ctx.secrets.NAME on paid deliveries.");
+        printBlank();
+      } catch (error) {
+        handleError(error);
+      }
+    }
+  );
+  secrets.command("unset").argument("<names...>", "Secret names to delete").description("Delete vault secrets.").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--gateway <url>", `Gateway URL (default ${DEFAULT_GATEWAY2})`).action(
+    async (names, opts) => {
+      try {
+        const updates = {};
+        for (const n of names) {
+          updates[n.trim()] = "";
+        }
+        const res = await postSecrets(opts, "set", updates);
+        if (isJsonMode()) {
+          printJson({ names: res.names });
+          return;
+        }
+        printBlank();
+        printSuccess("Vault updated");
+        printKeyValue("Secrets", res.names.join(", ") || "(none)");
+        printBlank();
+      } catch (error) {
+        handleError(error);
+      }
+    }
+  );
+  secrets.command("list").description("List vault secret NAMES (values never leave the gateway).").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--gateway <url>", `Gateway URL (default ${DEFAULT_GATEWAY2})`).action(async (opts) => {
+    try {
+      const res = await postSecrets(opts, "list");
+      if (isJsonMode()) {
+        printJson({ names: res.names });
+        return;
+      }
+      const names = res.names;
+      printBlank();
+      if (names.length === 0) {
+        printLine("Vault is empty. Set one: t2 agent serve secrets set NAME=value");
+      } else {
+        for (const n of names) {
+          printLine(`  ${n}`);
+        }
+      }
+      printBlank();
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  async function postSecrets(opts, op, updates) {
+    const gateway = opts.gateway ?? DEFAULT_GATEWAY2;
+    const agent = await withAgent({ keyPath: opts.key });
+    const address = agent.address();
+    const ts = Date.now();
+    const payload = op === "list" ? "list" : JSON.stringify(
+      Object.fromEntries(
+        Object.entries(updates ?? {}).sort(
+          ([a], [b]) => a.localeCompare(b)
+        )
+      )
+    );
+    const bodyHash = createHash3("sha256").update(payload).digest("hex");
+    const message = new TextEncoder().encode(
+      `t2000-serve-secrets:${ts}:${bodyHash}`
+    );
+    const { signature } = await agent.keypair.signPersonalMessage(message);
+    return await fetchJson4(`${gateway}/serve/secrets`, {
+      method: "POST",
+      body: {
+        address,
+        op,
+        ...op === "set" ? { updates } : {},
+        timestamp: ts,
+        signature
+      }
+    });
+  }
+  group.command("status").description("Deployed handlers + invocation stats.").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--gateway <url>", `Gateway URL (default ${DEFAULT_GATEWAY2})`).action(async (opts) => {
+    try {
+      const gateway = opts.gateway ?? DEFAULT_GATEWAY2;
+      const agent = await withAgent({ keyPath: opts.key });
+      const address = agent.address();
+      const res = await fetchJson4(
+        `${gateway}/serve/status?address=${encodeURIComponent(address)}`
+      );
+      if (isJsonMode()) {
+        printJson(res);
+        return;
+      }
+      const handlers = res.handlers ?? [];
+      printBlank();
+      if (handlers.length === 0) {
+        printLine("No hosted handlers. Start one: t2 agent serve init");
+        printBlank();
+        return;
+      }
+      for (const h of handlers) {
+        printLine(
+          `  ${h.slug}  ${h.active ? "live" : "undeployed"} \xB7 ${(h.sizeBytes / 1024).toFixed(1)} KB \xB7 ${h.invocations} invocation${h.invocations === 1 ? "" : "s"}${h.lastInvocation ? ` \xB7 last ${h.lastInvocation.status} @ ${h.lastInvocation.at}` : ""}`
+        );
+      }
+      printBlank();
+    } catch (error) {
+      handleError(error);
+    }
+  });
+  group.command("logs").description("Recent invocations (status \xB7 duration \xB7 error).").option("--slug <slug>", "Filter to one handler").option("--limit <n>", "Rows (default 50)", "50").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--gateway <url>", `Gateway URL (default ${DEFAULT_GATEWAY2})`).action(
+    async (opts) => {
+      try {
+        const gateway = opts.gateway ?? DEFAULT_GATEWAY2;
+        const agent = await withAgent({ keyPath: opts.key });
+        const address = agent.address();
+        const params = new URLSearchParams({
+          address,
+          limit: opts.limit
+        });
+        if (opts.slug) {
+          params.set("slug", opts.slug);
+        }
+        const res = await fetchJson4(`${gateway}/serve/logs?${params}`);
+        if (isJsonMode()) {
+          printJson(res);
+          return;
+        }
+        const rows = res.invocations ?? [];
+        printBlank();
+        if (rows.length === 0) {
+          printLine("No invocations yet.");
+          printBlank();
+          return;
+        }
+        for (const r of rows) {
+          printLine(
+            `  ${r.at}  ${r.slug}  ${r.status}  ${r.durationMs}ms${r.error ? `  ${r.error}` : ""}`
+          );
+        }
+        printBlank();
+      } catch (error) {
+        handleError(error);
+      }
+    }
+  );
+  group.command("undeploy").description(
+    "Remove a hosted handler (the SKU stays in the catalog \u2014 deactivate it with `t2 agent services update --slug \u2026 --inactive` if wanted)."
+  ).requiredOption("--slug <slug>", "Handler slug to remove").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--gateway <url>", `Gateway URL (default ${DEFAULT_GATEWAY2})`).action(
+    async (opts) => {
+      try {
+        const gateway = opts.gateway ?? DEFAULT_GATEWAY2;
+        const slug = opts.slug.trim().toLowerCase();
+        if (!SLUG_RE2.test(slug)) {
+          throw new Error("--slug must match [a-z0-9-], 2-40 chars.");
+        }
+        const agent = await withAgent({ keyPath: opts.key });
+        const address = agent.address();
+        const ts = Date.now();
+        const message = new TextEncoder().encode(
+          `t2000-serve-remove:${ts}:${slug}`
+        );
+        const { signature } = await agent.keypair.signPersonalMessage(message);
+        await fetchJson4(`${gateway}/serve/undeploy`, {
+          method: "POST",
+          body: { address, slug, timestamp: ts, signature }
+        });
+        if (isJsonMode()) {
+          printJson({ address, slug, undeployed: true });
+          return;
+        }
+        printBlank();
+        printSuccess(`Undeployed "${slug}"`);
+        printInfo(
+          "Buys against it now fail closed (auto-refund). Redeploy anytime: t2 agent serve deploy"
+        );
+        printBlank();
+      } catch (error) {
+        handleError(error);
+      }
+    }
+  );
+}
+
+// src/commands/agent/index.ts
+var DEFAULT_API_BASE5 = process.env.T2000_API_URL ?? "https://api.t2000.ai/v1";
+var DEFAULT_GATEWAY3 = process.env.T2000_GATEWAY_URL ?? "https://mpp.t2000.ai";
 var DEFAULT_RAIL = process.env.T2000_RAIL_URL ?? "https://x402.t2000.ai";
 var AGENT_CATEGORIES2 = [
   "ai-models",
@@ -34103,19 +34614,19 @@ async function fundCredit(agent, base, amountStr, assetOpt) {
     throw new Error(`amount must be a positive number (got "${amountStr}").`);
   }
   const asset = normalizeTopupAsset(assetOpt);
-  const cfg = await fetchJson4(`${base}/agent/topup`, { method: "GET" });
+  const cfg = await fetchJson5(`${base}/agent/topup`, { method: "GET" });
   const treasury = cfg.treasury;
   if (!treasury) {
     throw new Error("Could not resolve the t2000 treasury address.");
   }
   const sent = await agent.send({ to: treasury, amount, asset });
-  const topup = await fetchJson4(`${base}/agent/topup`, {
+  const topup = await fetchJson5(`${base}/agent/topup`, {
     method: "POST",
     body: { address: agent.address(), digest: sent.tx }
   });
   return { amount, asset, balanceUsd: topup.balanceUsd };
 }
-async function fetchJson4(url, init) {
+async function fetchJson5(url, init) {
   const res = await fetch(url, {
     method: init.method,
     headers: init.body ? { "Content-Type": "application/json" } : void 0,
@@ -34143,14 +34654,15 @@ Subcommands:
 `
   );
   registerAgentCreate(group);
-  registerAgentServices(group, { apiBase: DEFAULT_API_BASE4 });
+  registerAgentServices(group, { apiBase: DEFAULT_API_BASE5 });
+  registerAgentServe(group);
   registerAgentReview(group);
   group.command("onboard").description(
     "Buy-side setup: fund credit (gasless USDC/USDsui) + mint a Private API key. Registering an Agent ID is free and separate \u2014 `t2 init` / `t2 agent register`."
-  ).option("--fund <amount>", "Stablecoin amount to deposit as credit (omit if already funded)").option("--asset <asset>", "USDC (default) or USDsui", "USDC").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(
+  ).option("--fund <amount>", "Stablecoin amount to deposit as credit (omit if already funded)").option("--asset <asset>", "USDC (default) or USDsui", "USDC").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(
     async (opts) => {
       try {
-        const base = opts.api ?? DEFAULT_API_BASE4;
+        const base = opts.api ?? DEFAULT_API_BASE5;
         const agent = await withAgent({ keyPath: opts.key });
         const address = agent.address();
         if (opts.fund !== void 0) {
@@ -34161,7 +34673,7 @@ Subcommands:
             );
           }
         }
-        const challenge = await fetchJson4(`${base}/agent/challenge`, {
+        const challenge = await fetchJson5(`${base}/agent/challenge`, {
           method: "POST",
           body: { address }
         });
@@ -34171,7 +34683,7 @@ Subcommands:
         }
         const message = new TextEncoder().encode(`t2000-agent-keys:${nonce}`);
         const { signature } = await agent.keypair.signPersonalMessage(message);
-        const minted = await fetchJson4(`${base}/agent/keys`, {
+        const minted = await fetchJson5(`${base}/agent/keys`, {
           method: "POST",
           body: { address, nonce, signature }
         });
@@ -34208,10 +34720,10 @@ Subcommands:
   );
   group.command("topup").argument("<amount>", "Stablecoin amount to deposit as credit").description(
     "Top up this wallet's t2000 credit with gasless USDC/USDsui (no new key). The 'never runs dry' primitive \u2014 call it on a 402 or a schedule."
-  ).option("--asset <asset>", "USDC (default) or USDsui", "USDC").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(
+  ).option("--asset <asset>", "USDC (default) or USDsui", "USDC").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(
     async (amount, opts) => {
       try {
-        const base = opts.api ?? DEFAULT_API_BASE4;
+        const base = opts.api ?? DEFAULT_API_BASE5;
         const agent = await withAgent({ keyPath: opts.key });
         const funded = await fundCredit(agent, base, amount, opts.asset);
         if (isJsonMode()) {
@@ -34235,9 +34747,9 @@ Subcommands:
   );
   group.command("register").description(
     "Register this wallet on-chain as an Agent ID (sponsored, gasless). Idempotent \u2014 safe to re-run."
-  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(async (opts) => {
+  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(async (opts) => {
     try {
-      const base = opts.api ?? DEFAULT_API_BASE4;
+      const base = opts.api ?? DEFAULT_API_BASE5;
       const agent = await withAgent({ keyPath: opts.key });
       const address = agent.address();
       const reg = await registerWallet({ keypair: agent.keypair, address, base });
@@ -34265,9 +34777,9 @@ Subcommands:
   });
   group.command("link").argument("<owner>", "The owner's Sui address (Passport) to propose").description(
     "Propose an owner for this agent (two-sided \u2014 the owner must then confirm). Sponsored, gasless."
-  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(async (owner, opts) => {
+  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(async (owner, opts) => {
     try {
-      const base = opts.api ?? DEFAULT_API_BASE4;
+      const base = opts.api ?? DEFAULT_API_BASE5;
       const agent = await withAgent({ keyPath: opts.key });
       const address = agent.address();
       if (!isValidSuiAddress(owner)) {
@@ -34304,9 +34816,9 @@ Subcommands:
   });
   group.command("confirm").argument("<agent>", "The agent Sui address to confirm ownership of").description(
     "Confirm ownership of an agent that proposed you as its owner. Sponsored, gasless."
-  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(async (agentAddress, opts) => {
+  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(async (agentAddress, opts) => {
     try {
-      const base = opts.api ?? DEFAULT_API_BASE4;
+      const base = opts.api ?? DEFAULT_API_BASE5;
       const owner = await withAgent({ keyPath: opts.key });
       const address = owner.address();
       const { digest } = await runSponsoredTx({
@@ -34330,9 +34842,9 @@ Subcommands:
   });
   group.command("unlink").argument("<agent>", "The agent Sui address to renounce ownership of").description(
     "Renounce ownership of an agent you own \u2014 the record returns to autonomous (public, on-chain). Sponsored, gasless. Re-link = the agent proposes again."
-  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(async (agentAddress, opts) => {
+  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(async (agentAddress, opts) => {
     try {
-      const base = opts.api ?? DEFAULT_API_BASE4;
+      const base = opts.api ?? DEFAULT_API_BASE5;
       const owner = await withAgent({ keyPath: opts.key });
       const address = owner.address();
       const { digest } = await runSponsoredTx({
@@ -34357,7 +34869,7 @@ Subcommands:
   });
   group.command("profile").description(
     "Set this agent's public profile (name \xB7 image \xB7 description \xB7 links). Signed, no gas \u2014 shows in the directory."
-  ).option("--name <name>", "Display name").option("--image <url>", "Image URL (https)").option("--description <text>", "Short description").option("--website <url>", "Website link (https)").option("--twitter <url>", "X / Twitter link (https)").option("--github <url>", "GitHub link (https)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(
+  ).option("--name <name>", "Display name").option("--image <url>", "Image URL (https)").option("--description <text>", "Short description").option("--website <url>", "Website link (https)").option("--twitter <url>", "X / Twitter link (https)").option("--github <url>", "GitHub link (https)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(
     async (opts) => {
       try {
         if (!(opts.name || opts.image || opts.description || opts.website || opts.twitter || opts.github)) {
@@ -34365,10 +34877,10 @@ Subcommands:
             "Provide at least one of --name, --image, --description, --website, --twitter, --github."
           );
         }
-        const base = opts.api ?? DEFAULT_API_BASE4;
+        const base = opts.api ?? DEFAULT_API_BASE5;
         const agent = await withAgent({ keyPath: opts.key });
         const address = agent.address();
-        const challenge = await fetchJson4(`${base}/agent/challenge`, {
+        const challenge = await fetchJson5(`${base}/agent/challenge`, {
           method: "POST",
           body: { address }
         });
@@ -34378,7 +34890,7 @@ Subcommands:
         }
         const message = new TextEncoder().encode(`t2000-agent-profile:${nonce}`);
         const { signature } = await agent.keypair.signPersonalMessage(message);
-        await fetchJson4(`${base}/agent/profile`, {
+        await fetchJson5(`${base}/agent/profile`, {
           method: "POST",
           body: {
             address,
@@ -34412,7 +34924,7 @@ Subcommands:
   ).option("--price <usdc>", "Price per call in USDC (e.g. 0.02) \u2014 buyers pay this").option(
     "--category <category>",
     `Storefront category: ${AGENT_CATEGORIES2.join(" | ")}`
-  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(
+  ).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(
     async (opts) => {
       try {
         if (opts.mcpEndpoint === void 0 && opts.paymentMethods === void 0 && opts.price === void 0 && opts.category === void 0) {
@@ -34427,7 +34939,7 @@ Subcommands:
           }
         }
         const category = normalizeCategory(opts.category);
-        const base = opts.api ?? DEFAULT_API_BASE4;
+        const base = opts.api ?? DEFAULT_API_BASE5;
         const agent = await withAgent({ keyPath: opts.key });
         const address = agent.address();
         const prepareBody = { address };
@@ -34488,11 +35000,11 @@ Subcommands:
   ).option("--remove", "Take down the deployed service").option(
     "--service <slug>",
     "Catalog service slug \u2014 wrap config for ONE SKU (Store v2; omit = the default service)"
-  ).option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY2})`).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(
+  ).option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY3})`).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(
     async (opts) => {
       try {
-        const base = opts.api ?? DEFAULT_API_BASE4;
-        const gateway = opts.gateway ?? DEFAULT_GATEWAY2;
+        const base = opts.api ?? DEFAULT_API_BASE5;
+        const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
         const category = normalizeCategory(opts.category);
         const slug = opts.service?.trim().toLowerCase() || void 0;
         const agent = await withAgent({ keyPath: opts.key });
@@ -34503,7 +35015,7 @@ Subcommands:
           const { signature: signature2 } = await agent.keypair.signPersonalMessage(
             new TextEncoder().encode(msg2)
           );
-          await fetchJson4(`${gateway}/deploy/config`, {
+          await fetchJson5(`${gateway}/deploy/config`, {
             method: "DELETE",
             body: { address, timestamp: ts2, signature: signature2, ...slug ? { slug } : {} }
           });
@@ -34535,14 +35047,14 @@ Subcommands:
         const method = (opts.method ?? "POST").toUpperCase() === "GET" ? "GET" : "POST";
         const headers = opts.header ?? {};
         const ts = Date.now();
-        const bodyHash = createHash3("sha256").update(
+        const bodyHash = createHash4("sha256").update(
           `${opts.upstream}|${method}|${JSON.stringify(headers)}${slug ? `|${slug}` : ""}`
         ).digest("hex");
         const msg = `t2000-deploy:${ts}:${bodyHash}`;
         const { signature } = await agent.keypair.signPersonalMessage(
           new TextEncoder().encode(msg)
         );
-        await fetchJson4(`${gateway}/deploy/config`, {
+        await fetchJson5(`${gateway}/deploy/config`, {
           method: "POST",
           body: {
             address,
@@ -34611,7 +35123,7 @@ Subcommands:
     "Catalog service slug \u2014 buys ONE SKU of the seller's catalog (Store v2)"
   ).option(
     "--gateway <url>",
-    `Gateway base URL (default ${DEFAULT_GATEWAY2})`
+    `Gateway base URL (default ${DEFAULT_GATEWAY3})`
   ).option("--force", "Override spending limits for this call (see `t2 limit`)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(
     async (seller, opts) => {
       try {
@@ -34622,7 +35134,7 @@ Subcommands:
           }
         }
         const maxPrice = opts.maxPrice ? Number.parseFloat(opts.maxPrice) : opts.amount ? Number.parseFloat(opts.amount) : 1;
-        const gateway = opts.gateway ?? DEFAULT_GATEWAY2;
+        const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
         const agent = await withAgent({ keyPath: opts.key });
         const resolvedSeller = seller.startsWith("0x") ? seller : (await agent.resolveRecipient(seller)).address;
         const slugPath = opts.service ? `/${opts.service.trim().toLowerCase()}` : "";
@@ -34690,12 +35202,12 @@ Subcommands:
   );
   group.command("earnings").description(
     "Your sales as a seller \u2014 count, USDC earned (net), and unique buyers, from the on-chain settlement ledger. [Agent Commerce]"
-  ).option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY2})`).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(async (opts) => {
+  ).option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY3})`).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(async (opts) => {
     try {
-      const gateway = opts.gateway ?? DEFAULT_GATEWAY2;
+      const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
       const agent = await withAgent({ keyPath: opts.key });
       const address = agent.address();
-      const stats = await fetchJson4(
+      const stats = await fetchJson5(
         `${gateway}/commerce/stats/${address}`,
         { method: "GET" }
       );
@@ -34718,13 +35230,13 @@ Subcommands:
   });
   group.command("handle").argument("<label>", "Handle label (3\u201320 chars: lowercase a\u2013z, 0\u20139, hyphens)").description(
     "Claim <label>.agent-id.sui \u2192 this wallet (custody-minted, gasless). Use --release to give it up."
-  ).option("--release", "Release (revoke) this handle instead of claiming it").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE4})`).action(
+  ).option("--release", "Release (revoke) this handle instead of claiming it").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(
     async (label, opts) => {
       try {
-        const base = opts.api ?? DEFAULT_API_BASE4;
+        const base = opts.api ?? DEFAULT_API_BASE5;
         const agent = await withAgent({ keyPath: opts.key });
         const address = agent.address();
-        const challenge = await fetchJson4(`${base}/agent/challenge`, {
+        const challenge = await fetchJson5(`${base}/agent/challenge`, {
           method: "POST",
           body: { address }
         });
@@ -34736,7 +35248,7 @@ Subcommands:
         const message = new TextEncoder().encode(`${action}:${nonce}:${label}`);
         const { signature } = await agent.keypair.signPersonalMessage(message);
         const path2 = opts.release ? "/agent/handle/release" : "/agent/handle";
-        const res = await fetchJson4(`${base}${path2}`, {
+        const res = await fetchJson5(`${base}${path2}`, {
           method: "POST",
           body: { address, label, nonce, signature }
         });
@@ -34762,7 +35274,7 @@ Subcommands:
 }
 
 // src/commands/agents.ts
-var DEFAULT_API_BASE5 = process.env.T2000_API_URL ?? "https://api.t2000.ai/v1";
+var DEFAULT_API_BASE6 = process.env.T2000_API_URL ?? "https://api.t2000.ai/v1";
 async function getJson(url) {
   const res = await fetch(url, { headers: { accept: "application/json" } });
   if (!res.ok) {
@@ -34777,10 +35289,10 @@ function firstLine(text, max = 76) {
 function registerAgents(program3) {
   program3.command("agents").argument("[address]", "Show one agent\u2019s full listing (profile + reputation)").description(
     "Browse the agent store (agents.t2000.ai): priced services from the live directory, or one agent\u2019s full listing. Buy with `t2 agent pay <address>`. [Agent Commerce]"
-  ).option("--category <category>", "Filter the list by store category").option("--all", "Include agents without a priced service").option("--limit <n>", "Max rows (default: all)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE5})`).action(
+  ).option("--category <category>", "Filter the list by store category").option("--all", "Include agents without a priced service").option("--limit <n>", "Max rows (default: all)").option("--api <url>", `API base URL (default ${DEFAULT_API_BASE6})`).action(
     async (address, opts) => {
       try {
-        const base = opts.api ?? DEFAULT_API_BASE5;
+        const base = opts.api ?? DEFAULT_API_BASE6;
         if (address) {
           const profile = await getJson(`${base}/agents/${address}`);
           if (isJsonMode()) {
@@ -34853,7 +35365,7 @@ function registerAgents(program3) {
 }
 
 // src/commands/task/index.ts
-var DEFAULT_GATEWAY3 = process.env.T2000_GATEWAY_URL ?? "https://mpp.t2000.ai";
+var DEFAULT_GATEWAY4 = process.env.T2000_GATEWAY_URL ?? "https://mpp.t2000.ai";
 async function getJson2(url) {
   const res = await fetch(url, { headers: { accept: "application/json" } });
   const json = await res.json().catch(() => ({}));
@@ -34878,9 +35390,9 @@ function registerTask(program3) {
   const group = program3.command("task").description(
     "Earn from t2000 reward tasks and work (or post) community board tasks \u2014 all paid through the rail. [Agent Commerce]"
   );
-  group.command("list").description("Live tasks: t2000 rewards (auto-verified) + the community board (poster-approved)").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY3})`).action(async (opts) => {
+  group.command("list").description("Live tasks: t2000 rewards (auto-verified) + the community board (poster-approved)").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY4})`).action(async (opts) => {
     try {
-      const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
+      const gateway = opts.gateway ?? DEFAULT_GATEWAY4;
       const [rewards, board] = await Promise.all([
         getJson2(`${gateway}/tasks/stats`),
         getJson2(`${gateway}/tasks/board`)
@@ -34914,10 +35426,10 @@ function registerTask(program3) {
       handleError(error);
     }
   });
-  group.command("claim").argument("<task>", "Reward task id (e.g. buy-sui, share-a-read) \u2014 see `t2 task list`").description("Claim a t2000 reward task (verified in one request; also retries automated tasks)").option("--tx <digest>", "Swap tx digest (buy-manifest / buy-sui)").option("--post <url>", "Your X post URL (X-proof tasks)").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY3})`).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(
+  group.command("claim").argument("<task>", "Reward task id (e.g. buy-sui, share-a-read) \u2014 see `t2 task list`").description("Claim a t2000 reward task (verified in one request; also retries automated tasks)").option("--tx <digest>", "Swap tx digest (buy-manifest / buy-sui)").option("--post <url>", "Your X post URL (X-proof tasks)").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY4})`).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(
     async (task, opts) => {
       try {
-        const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
+        const gateway = opts.gateway ?? DEFAULT_GATEWAY4;
         const agent = await withAgent({ keyPath: opts.key });
         const result = await postJson2(`${gateway}/tasks/claim`, {
           task,
@@ -34946,10 +35458,10 @@ function registerTask(program3) {
   );
   group.command("post").description(
     "Post a community task \u2014 pays the FULL budget (reward \xD7 completions) into escrow via x402; auto-moderated at post time. SAVE the returned manageKey."
-  ).requiredOption("--title <text>", "What needs doing (8+ chars)").requiredOption("--description <text>", "Exactly what the worker must deliver + what proof (30+ chars)").requiredOption("--reward <usdc>", "Reward per approved completion ($0.01\u2013$50)").option("--completions <n>", "Max completions (default 1)", "1").option("--expiry-days <n>", "Days until unspent budget auto-refunds (default 7)", "7").option("--category <category>", "research | data | marketing | dev | creative | other", "other").option("--notify-email <email>", "Email me when submissions arrive + when the refund settles (per-task, one-click stop in every mail)").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY3})`).option("--force", "Override spending limits for this call (see `t2 limit`)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(
+  ).requiredOption("--title <text>", "What needs doing (8+ chars)").requiredOption("--description <text>", "Exactly what the worker must deliver + what proof (30+ chars)").requiredOption("--reward <usdc>", "Reward per approved completion ($0.01\u2013$50)").option("--completions <n>", "Max completions (default 1)", "1").option("--expiry-days <n>", "Days until unspent budget auto-refunds (default 7)", "7").option("--category <category>", "research | data | marketing | dev | creative | other", "other").option("--notify-email <email>", "Email me when submissions arrive + when the refund settles (per-task, one-click stop in every mail)").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY4})`).option("--force", "Override spending limits for this call (see `t2 limit`)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(
     async (opts) => {
       try {
-        const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
+        const gateway = opts.gateway ?? DEFAULT_GATEWAY4;
         const reward = Number.parseFloat(opts.reward);
         const completions = Number.parseInt(opts.completions, 10);
         if (!Number.isFinite(reward) || reward <= 0) {
@@ -34998,10 +35510,10 @@ function registerTask(program3) {
       }
     }
   );
-  group.command("submit").argument("<taskId>", "Board task id (see `t2 task list`)").description("Submit proof of completion to a board task (one submission per wallet)").requiredOption("--proof <text>", "What you did + how the poster can verify it (10+ chars)").option("--url <url>", "Proof link (https)").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY3})`).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(
+  group.command("submit").argument("<taskId>", "Board task id (see `t2 task list`)").description("Submit proof of completion to a board task (one submission per wallet)").requiredOption("--proof <text>", "What you did + how the poster can verify it (10+ chars)").option("--url <url>", "Proof link (https)").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY4})`).option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(
     async (taskId, opts) => {
       try {
-        const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
+        const gateway = opts.gateway ?? DEFAULT_GATEWAY4;
         const agent = await withAgent({ keyPath: opts.key });
         const result = await postJson2(
           `${gateway}/tasks/board/${taskId}/submit`,
@@ -35023,9 +35535,9 @@ function registerTask(program3) {
       }
     }
   );
-  group.command("review").argument("<taskId>", "Your board task id").description("List submissions on your board task (poster view \u2014 needs the manageKey)").requiredOption("--manage-key <key>", "The manageKey returned when you posted").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY3})`).action(async (taskId, opts) => {
+  group.command("review").argument("<taskId>", "Your board task id").description("List submissions on your board task (poster view \u2014 needs the manageKey)").requiredOption("--manage-key <key>", "The manageKey returned when you posted").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY4})`).action(async (taskId, opts) => {
     try {
-      const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
+      const gateway = opts.gateway ?? DEFAULT_GATEWAY4;
       const result = await getJson2(`${gateway}/tasks/board/${taskId}?manageKey=${encodeURIComponent(opts.manageKey)}`);
       if (!result.posterView) {
         throw new Error(result.error ?? "manageKey not accepted for this task.");
@@ -35053,10 +35565,10 @@ function registerTask(program3) {
       handleError(error);
     }
   });
-  group.command("approve").argument("<taskId>", "Your board task id").description("Approve (pay) or reject submissions on your board task \u2014 batch up to 50").requiredOption("--manage-key <key>", "The manageKey returned when you posted").requiredOption("--submissions <ids>", "Comma-separated submission ids").option("--reject", "Reject instead of approving").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY3})`).action(
+  group.command("approve").argument("<taskId>", "Your board task id").description("Approve (pay) or reject submissions on your board task \u2014 batch up to 50").requiredOption("--manage-key <key>", "The manageKey returned when you posted").requiredOption("--submissions <ids>", "Comma-separated submission ids").option("--reject", "Reject instead of approving").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY4})`).action(
     async (taskId, opts) => {
       try {
-        const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
+        const gateway = opts.gateway ?? DEFAULT_GATEWAY4;
         const result = await postJson2(`${gateway}/tasks/board/${taskId}/approve`, {
           manageKey: opts.manageKey,
           submissionIds: opts.submissions.split(",").map((s) => s.trim()).filter(Boolean),
@@ -35082,9 +35594,9 @@ function registerTask(program3) {
       }
     }
   );
-  group.command("close").argument("<taskId>", "Your board task id").description("Close your board task early \u2014 the unspent budget refunds to your wallet").requiredOption("--manage-key <key>", "The manageKey returned when you posted").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY3})`).action(async (taskId, opts) => {
+  group.command("close").argument("<taskId>", "Your board task id").description("Close your board task early \u2014 the unspent budget refunds to your wallet").requiredOption("--manage-key <key>", "The manageKey returned when you posted").option("--gateway <url>", `Gateway base URL (default ${DEFAULT_GATEWAY4})`).action(async (taskId, opts) => {
     try {
-      const gateway = opts.gateway ?? DEFAULT_GATEWAY3;
+      const gateway = opts.gateway ?? DEFAULT_GATEWAY4;
       const result = await postJson2(`${gateway}/tasks/board/${taskId}/close`, { manageKey: opts.manageKey });
       if (isJsonMode()) {
         printJson(result);