@toon-protocol/rig 2.8.0 → 2.10.0

package/dist/cli/rig.js

@@ -26,8 +26,9 @@ import {
   clientKeystorePath,
   linkKeystoreInClientConfig,
   readClientConfigFile,
+  resolveAccountIndex,
   resolveIdentity
-} from "../chunk-XGFBDUQX.js";
+} from "../chunk-GZUDRNOK.js";
 import {
   ChannelMapStore,
   channelStatus,
@@ -312,9 +313,7 @@ function nonFastForwardLines(refs) {
 function oversizeLines(objects) {
   return [
     `Push rejected: ${objects.length} object(s) exceed the ${MAX_OBJECT_SIZE}-byte (95KB) upload limit:`,
-    ...objects.map(
-      (o) => `  ${o.path ?? o.sha}  ${o.type}, ${o.size} bytes`
-    ),
+    ...objects.map((o) => `  ${o.path ?? o.sha}  ${o.type}, ${o.size} bytes`),
     "Objects over 95KB are a hard error in v1 \u2014 split or remove the file(s) from history to push.",
     "Large-object support is tracked in toon-client#235."
   ];
@@ -345,7 +344,11 @@ function describeError(err, command = "push") {
     return {
       code: "unknown_remote",
       lines: err.message.split("\n"),
-      json: { error: "unknown_remote", detail: err.message, remote: err.remote }
+      json: {
+        error: "unknown_remote",
+        detail: err.message,
+        remote: err.remote
+      }
     };
   }
   if (err instanceof MultiUrlRemoteError) {
@@ -406,6 +409,13 @@ function describeError(err, command = "push") {
       json: { error: "arns_sdk_unavailable", detail: err.message }
     };
   }
+  if (err instanceof Error && err.name === "ArnsSdkIncompatibleError") {
+    return {
+      code: "arns_sdk_incompatible",
+      lines: err.message.split("\n"),
+      json: { error: "arns_sdk_incompatible", detail: err.message }
+    };
+  }
   if (err instanceof DaemonRouteError) {
     const envelope = err.envelope;
     if (envelope.error === "non_fast_forward" && Array.isArray(envelope["refs"])) {
@@ -532,8 +542,97 @@ function emitCliError(io2, json, command, err) {
 }
 
 // src/cli/push.ts
+import { createHash } from "crypto";
 import { parseArgs as parseArgs2 } from "util";
 
+// src/rig-pointer.ts
+var DEFAULT_RIG_WEB_BUNDLE = {
+  manifestTx: "Iy8sHYVnoevSpwDC2lqUoIg8BWdes9NmMbgmPd81UpU",
+  entryJs: "assets/index-BuKzYubR.js",
+  entryCss: "assets/index-H5D6cmfa.css"
+};
+var RIG_WEB_TX_ENV = "RIG_WEB_TX";
+var RIG_WEB_ENTRY_JS_ENV = "RIG_WEB_ENTRY_JS";
+var RIG_WEB_ENTRY_CSS_ENV = "RIG_WEB_ENTRY_CSS";
+var DEFAULT_RIG_WEB_URL = "https://toon-protocol.github.io/toon-client";
+var RIG_WEB_URL_ENV = "RIG_WEB_URL";
+function repoHashRoute(options) {
+  const { relay, ownerNpub, repoId } = options;
+  return `#/${encodeURIComponent(ownerNpub)}/${encodeURIComponent(repoId)}?relay=${encodeURIComponent(relay)}`;
+}
+function rigWebRoute(options) {
+  return `${options.rigWebUrl.replace(/\/+$/, "")}/${repoHashRoute(options)}`;
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function generateRigPointerHtml(options) {
+  const gateway = options.gateway.replace(/\/+$/, "");
+  const base = `${gateway}/${options.bundle.manifestTx}`;
+  const cssHref = `${base}/${options.bundle.entryCss}`;
+  const jsSrc = `${base}/${options.bundle.entryJs}`;
+  const fallback = rigWebRoute(options);
+  const safeFallback = escapeHtml(fallback);
+  const title = escapeHtml(`${options.repoId} \u2014 Rig`);
+  const config = JSON.stringify({
+    relay: options.relay,
+    owner: options.ownerNpub,
+    repo: options.repoId
+  }).replace(/</g, "\\u003c");
+  const hashRoute = JSON.stringify(repoHashRoute(options)).replace(
+    /</g,
+    "\\u003c"
+  );
+  return `<!DOCTYPE html>
+<html lang="en"><head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <meta name="description" content="Decentralized Git on Nostr &amp; TOON Protocol">
+  <title>${title}</title>
+  <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>&#x2692;</text></svg>">
+  <script>window.__RIG_CONFIG__=${config};if(!location.hash||location.hash==="#")location.replace(${hashRoute})</script>
+  <link rel="stylesheet" href="${escapeHtml(cssHref)}">
+  <script type="module" crossorigin src="${escapeHtml(jsSrc)}"></script>
+</head><body>
+  <div id="app"></div>
+  <noscript><p>JavaScript is off \u2014 open <a href="${safeFallback}">${title}</a> in the hosted Rig.</p></noscript>
+  <p hidden data-fallback>If nothing loads, open <a href="${safeFallback}">${title}</a> in the hosted Rig.</p>
+  <script>setTimeout(function(){var p=document.querySelector("[data-fallback]");var app=document.getElementById("app");if(p&&(!app||!app.childElementCount))p.hidden=false},8000)</script>
+</body></html>
+`;
+}
+
+// src/cli/rig-pointer-record.ts
+import { mkdirSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+var RIG_POINTER_FILENAME = "rig-pointers.json";
+function storeDir(env) {
+  return env["TOON_CLIENT_HOME"] ?? join(homedir(), ".toon-client");
+}
+function storePath(env) {
+  return join(storeDir(env), RIG_POINTER_FILENAME);
+}
+function readAll(env) {
+  try {
+    const parsed = JSON.parse(readFileSync(storePath(env), "utf8"));
+    if (parsed && typeof parsed === "object") return parsed;
+    return {};
+  } catch {
+    return {};
+  }
+}
+function readRigPointerRecord(env, repoId) {
+  return readAll(env)[repoId];
+}
+function writeRigPointerRecord(env, record) {
+  const all = readAll(env);
+  all[record.repoId] = record;
+  mkdirSync(storeDir(env), { recursive: true });
+  writeFileSync(storePath(env), `${JSON.stringify(all, null, 2)}
+`);
+}
+
 // src/cli/render.ts
 function formatNumber(value) {
   return String(value).replace(/\B(?=(\d{3})+(?!\d))/g, ",");
@@ -974,7 +1073,7 @@ function loadPaidSession(deps, relayUrl) {
   });
 }
 var defaultLoadStandalone = async (options) => {
-  const mod = await import("../standalone-mode-FPFEEL72.js");
+  const mod = await import("../standalone-mode-6KIBWGLP.js");
   return mod.createStandaloneContext(options);
 };
 function identityReport(ctx) {
@@ -1001,10 +1100,18 @@ remote name it is the remote; otherwise it is a refspec and the remote
 defaults to origin. Refspecs are branch/tag names or full refnames; default
 is the current branch.
 
+Every push also keeps the repo's RIG PAGE current: a permanent Arweave
+page that RENDERS this repo in place \u2014 it boots the FULL Rig (rig-web)
+from its Arweave deployment with this repo pinned, everything served from
+Arweave + the relay. The pointer is content-addressed, so it is paid for
+once and reused for free until the relay or Rig deployment changes.
+--no-rig-page skips it.
+
 Options:
   --force            allow non-fast-forward ref updates (overwrites remote history)
   --all              push all local branches
   --tags             push all local tags
+  --no-rig-page      skip the Rig-page pointer upload for this push
   --yes              skip the fee confirmation (required when not a TTY)
   --json             machine-readable plan/receipts; without --yes it is a pure
                      estimate (nothing executed)
@@ -1077,6 +1184,7 @@ function parsePushArgs(args) {
       force: { type: "boolean", default: false },
       all: { type: "boolean", default: false },
       tags: { type: "boolean", default: false },
+      "no-rig-page": { type: "boolean", default: false },
       yes: { type: "boolean", default: false },
       json: { type: "boolean", default: false },
       relay: { type: "string", multiple: true },
@@ -1089,6 +1197,7 @@ function parsePushArgs(args) {
     force: values.force ?? false,
     all: values.all ?? false,
     tags: values.tags ?? false,
+    rigPage: !(values["no-rig-page"] ?? false),
     yes: values.yes ?? false,
     json: values.json ?? false,
     relay: values.relay ?? [],
@@ -1099,6 +1208,46 @@ function parsePushArgs(args) {
   if (repoId !== void 0) flags.repoId = repoId;
   return flags;
 }
+function pointerGateway(env) {
+  return (env["RIG_ARWEAVE_GATEWAY"] ?? "https://arweave.net").replace(
+    /\/+$/,
+    ""
+  );
+}
+function planRigPointer(args) {
+  const html = generateRigPointerHtml({
+    bundle: {
+      manifestTx: args.env[RIG_WEB_TX_ENV] ?? DEFAULT_RIG_WEB_BUNDLE.manifestTx,
+      entryJs: args.env[RIG_WEB_ENTRY_JS_ENV] ?? DEFAULT_RIG_WEB_BUNDLE.entryJs,
+      entryCss: args.env[RIG_WEB_ENTRY_CSS_ENV] ?? DEFAULT_RIG_WEB_BUNDLE.entryCss
+    },
+    gateway: pointerGateway(args.env),
+    rigWebUrl: args.env[RIG_WEB_URL_ENV] ?? DEFAULT_RIG_WEB_URL,
+    relay: args.relay,
+    ownerNpub: hexToNpub(args.ownerPubkey),
+    repoId: args.repoId
+  });
+  const contentHash = createHash("sha256").update(html).digest("hex");
+  const bytes = Buffer.byteLength(html);
+  const record = readRigPointerRecord(args.env, args.repoId);
+  if (record && record.contentHash === contentHash && record.owner === args.ownerPubkey) {
+    return {
+      action: "unchanged",
+      html,
+      contentHash,
+      bytes,
+      fee: 0n,
+      recordedTxId: record.pointerTxId
+    };
+  }
+  return {
+    action: "upload",
+    html,
+    contentHash,
+    bytes,
+    fee: BigInt(bytes) * args.uploadFeePerByte
+  };
+}
 async function runPush(args, deps) {
   const { io: io2 } = deps;
   let flags;
@@ -1175,6 +1324,8 @@ async function runPush(args, deps) {
     }
     let plan;
     let execute;
+    let pointerPlan;
+    let rigPageSkipDetail;
     if (session.path === "standalone") {
       const ctx = session.ctx;
       const remoteState = await ctx.fetchRemote({
@@ -1202,6 +1353,21 @@ async function runPush(args, deps) {
           relayUrls: relaysUsed
         })
       );
+      if (!flags.rigPage) {
+        rigPageSkipDetail = "skipped (--no-rig-page)";
+      } else if (relaysUsed[0] === void 0) {
+        rigPageSkipDetail = "skipped (no relay resolved for the pointer)";
+      } else if (!ctx.publisher.uploadBlob) {
+        rigPageSkipDetail = "skipped (the active publisher cannot upload raw blobs)";
+      } else {
+        pointerPlan = planRigPointer({
+          env: deps.env,
+          ownerPubkey: ctx.ownerPubkey,
+          repoId,
+          relay: relaysUsed[0],
+          uploadFeePerByte: feeRates.uploadFeePerByte
+        });
+      }
     } else {
       const client = session.client;
       plan = await client.gitEstimate({
@@ -1219,9 +1385,100 @@ async function runPush(args, deps) {
         relayUrls: relaysUsed,
         confirm: true
       });
+      rigPageSkipDetail = "skipped on the daemon path (refreshes on the next standalone push)";
     }
+    const gateway = pointerGateway(deps.env);
+    const publishPointer = async (pointer) => {
+      try {
+        const ctx = standaloneCtx;
+        const receipt = await ctx.publisher.uploadBlob({
+          body: Buffer.from(pointer.html, "utf8"),
+          contentType: "text/html",
+          repoId
+        });
+        writeRigPointerRecord(deps.env, {
+          repoId,
+          owner: identity.pubkey,
+          pointerTxId: receipt.txId,
+          contentHash: pointer.contentHash,
+          updatedAt: Date.now()
+        });
+        return {
+          status: "published",
+          txId: receipt.txId,
+          url: `${gateway}/${receipt.txId}`,
+          feePaid: receipt.feePaid.toString()
+        };
+      } catch (err) {
+        return {
+          status: "skipped",
+          detail: `pointer upload failed (push itself succeeded; the next push retries): ${err instanceof Error ? err.message : String(err)}`
+        };
+      }
+    };
+    const printRigPage = (rigPage2) => {
+      if (rigPage2.url) {
+        io2.out(
+          `Rig page: ${rigPage2.url}` + (rigPage2.status === "published" ? `  paid ${rigPage2.feePaid}` : "") + "  (renders this repo from Arweave)"
+        );
+      } else if (rigPage2.detail) {
+        io2.err(`rig page: ${rigPage2.detail}`);
+      }
+    };
     const upToDate = plan.refUpdates.every((u) => u.kind === "up-to-date");
     if (upToDate) {
+      if (pointerPlan?.action !== "upload") {
+        if (flags.json) {
+          io2.emitJson({
+            command: "push",
+            repoId,
+            path,
+            identity,
+            executed: false,
+            upToDate: true,
+            plan
+          });
+        } else {
+          io2.out("Everything up-to-date \u2014 nothing to push (and nothing paid).");
+        }
+        return 0;
+      }
+      if (!flags.json) {
+        io2.out(
+          "Everything up-to-date \u2014 refs unchanged, but the Rig page is stale (new Rig build, relay, or gateway):"
+        );
+        io2.out(`  rig page  ${pointerPlan.bytes} bytes   ${pointerPlan.fee}`);
+        io2.out(renderIdentityLine(identity));
+      }
+      if (!flags.yes) {
+        if (flags.json) {
+          io2.emitJson({
+            command: "push",
+            repoId,
+            path,
+            identity,
+            executed: false,
+            upToDate: true,
+            plan,
+            hint: "refs up-to-date; the Rig page is stale \u2014 re-run with --yes to refresh it (or --no-rig-page to skip)"
+          });
+          return 0;
+        }
+        if (!io2.isInteractive) {
+          io2.err(
+            "refusing to spend channel funds without confirmation in a non-interactive session \u2014 re-run with --yes (or --no-rig-page to skip the refresh)"
+          );
+          return 1;
+        }
+        const proceed = await io2.confirm(
+          `Refresh the Rig page (total ${pointerPlan.fee} base units)? [y/N] `
+        );
+        if (!proceed) {
+          io2.err("aborted \u2014 nothing was uploaded or published.");
+          return 1;
+        }
+      }
+      const rigPage2 = await publishPointer(pointerPlan);
       if (flags.json) {
         io2.emitJson({
           command: "push",
@@ -1230,15 +1487,23 @@ async function runPush(args, deps) {
           identity,
           executed: false,
           upToDate: true,
-          plan
+          plan,
+          rigPage: rigPage2
         });
       } else {
-        io2.out("Everything up-to-date \u2014 nothing to push (and nothing paid).");
+        printRigPage(rigPage2);
       }
       return 0;
     }
+    const confirmTotal = BigInt(plan.estimate.totalFee) + (pointerPlan?.fee ?? 0n);
     if (!flags.json) {
       for (const line of renderPlan(plan)) io2.out(line);
+      if (pointerPlan?.action === "upload") {
+        io2.out(
+          `  rig page  ${pointerPlan.bytes} bytes   ${pointerPlan.fee} (repo page \u2014 paid once, reused until relay/rig-web changes)`
+        );
+        io2.out(`  total with rig page     ${confirmTotal}`);
+      }
       io2.out(renderIdentityLine(identity));
     }
     if (!flags.yes) {
@@ -1262,7 +1527,7 @@ async function runPush(args, deps) {
         return 1;
       }
       const proceed = await io2.confirm(
-        `Proceed with paid push (total ${plan.estimate.totalFee} base units)? [y/N] `
+        `Proceed with paid push (total ${confirmTotal} base units)? [y/N] `
       );
       if (!proceed) {
         io2.err("aborted \u2014 nothing was uploaded or published.");
@@ -1270,6 +1535,18 @@ async function runPush(args, deps) {
       }
     }
     const result = await execute();
+    let rigPage;
+    if (!pointerPlan) {
+      rigPage = { status: "skipped", ...rigPageSkipDetail ? { detail: rigPageSkipDetail } : {} };
+    } else if (pointerPlan.action === "unchanged") {
+      rigPage = {
+        status: "unchanged",
+        txId: pointerPlan.recordedTxId,
+        url: `${gateway}/${pointerPlan.recordedTxId}`
+      };
+    } else {
+      rigPage = await publishPointer(pointerPlan);
+    }
     if (flags.json) {
       io2.emitJson({
         command: "push",
@@ -1279,10 +1556,12 @@ async function runPush(args, deps) {
         executed: true,
         upToDate: false,
         plan,
-        result
+        result,
+        rigPage
       });
     } else {
       for (const line of renderResult(result)) io2.out(line);
+      printRigPage(rigPage);
     }
     return 0;
   } catch (err) {
@@ -1896,7 +2175,7 @@ async function stopQuietly(ctx) {
 
 // src/cli/clone.ts
 import { mkdtemp, mkdir, readdir, rename, rm, rmdir } from "fs/promises";
-import { basename, dirname, join, resolve } from "path";
+import { basename, dirname, join as join2, resolve } from "path";
 import { parseArgs as parseArgs5 } from "util";
 var CLONE_USAGE = `Usage: rig clone <relay-url> <owner>/<repo-id> [dir] [options]
 
@@ -2067,7 +2346,7 @@ async function runClone(args, deps) {
     }
     const parent = dirname(dest);
     await mkdir(parent, { recursive: true });
-    tempDir = await mkdtemp(join(parent, `.${basename(dest)}.rig-clone-`));
+    tempDir = await mkdtemp(join2(parent, `.${basename(dest)}.rig-clone-`));
     await runGit(tempDir, [
       "init",
       "--quiet",
@@ -3533,9 +3812,9 @@ async function runFetch(args, deps) {
 }
 
 // src/cli/fund.ts
-import { readFileSync } from "fs";
-import { homedir } from "os";
-import { join as join2 } from "path";
+import { readFileSync as readFileSync2 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join3 } from "path";
 import { parseArgs as parseArgs9 } from "util";
 var DEVNET_FAUCET_URL = "https://faucet.devnet.toonprotocol.dev";
 var CHAINS = ["evm", "solana", "mina"];
@@ -3625,11 +3904,11 @@ function noFaucetGuidance(network, devnetOrigin) {
   return `${head}. If you meant the shared devnet, set TOON_CLIENT_NETWORK=devnet and re-run \`rig fund\` \u2014 no faucet URL is needed there. If this is a self-hosted network with its own faucet, set TOON_CLIENT_FAUCET_URL (or the faucetUrl config field). ${external}`;
 }
 function readFundConfig(env) {
-  const dir = env["TOON_CLIENT_HOME"] ?? join2(homedir(), ".toon-client");
-  const configPath = join2(dir, "config.json");
+  const dir = env["TOON_CLIENT_HOME"] ?? join3(homedir2(), ".toon-client");
+  const configPath = join3(dir, "config.json");
   try {
     return {
-      file: JSON.parse(readFileSync(configPath, "utf8")),
+      file: JSON.parse(readFileSync2(configPath, "utf8")),
       configPath
     };
   } catch (err) {
@@ -3862,7 +4141,7 @@ var runGitPassthrough = (argv2, options = {}) => {
 };
 
 // src/cli/identity-cmd.ts
-import { existsSync, mkdirSync } from "fs";
+import { existsSync, mkdirSync as mkdirSync2 } from "fs";
 import { dirname as dirname2 } from "path";
 import { createInterface } from "readline/promises";
 import { parseArgs as parseArgs10 } from "util";
@@ -3914,12 +4193,12 @@ async function prepareKeystoreTarget(input) {
   const envPassword = input.env["TOON_CLIENT_KEYSTORE_PASSWORD"]?.trim() || void 0;
   const autoPassword = envPassword === void 0;
   const password = envPassword ?? DEFAULT_KEYSTORE_PASSWORD;
-  mkdirSync(dirname2(keystorePath), { recursive: true });
+  mkdirSync2(dirname2(keystorePath), { recursive: true });
   return { keystorePath, password, autoPassword, existing, keyOps };
 }
 function readAccountIndex(env) {
   const file = readClientConfigFile(clientConfigPath(env));
-  return typeof file.mnemonicAccountIndex === "number" ? file.mnemonicAccountIndex : 0;
+  return resolveAccountIndex(env, "keystore", file);
 }
 function finishMint(input, target, mnemonic) {
   const configPath = linkKeystoreInClientConfig(
@@ -4412,7 +4691,7 @@ async function resolveProfileRelay(flagRelay, originRelay, toonRelays) {
   ].filter((u) => u !== void 0 && isWebSocketRelay2(u));
   if (candidates[0] !== void 0) return candidates[0];
   try {
-    const { loadGenesisSeed } = await import("../network-bootstrap-HTNM7BBX.js");
+    const { loadGenesisSeed } = await import("../network-bootstrap-GRBEPZMI.js");
     const seed = loadGenesisSeed();
     if (seed?.relayUrl && isWebSocketRelay2(seed.relayUrl)) return seed.relayUrl;
   } catch {
@@ -4921,67 +5200,411 @@ async function runMutate(op, args, deps) {
 }
 
 // src/cli/name.ts
+import { randomUUID } from "crypto";
 import { parseArgs as parseArgs13 } from "util";
 var ARIO_DECIMALS = 6;
 function renderMario(mario) {
   return `${mario.toString()} mARIO (~${formatUnits(mario.toString(), ARIO_DECIMALS)} ARIO)`;
 }
 var MARIO_PAYMENT_NOTE = "Payment is mARIO from this identity's Solana wallet, charged on-chain by the ar.io registry program \u2014 NOT through TOON ILP payment channels. Fund this wallet with `rig fund --chain solana` (or send $ARIO to the Solana address above).";
+var DVM_PAYMENT_NOTE = "Brokered buy (--via): the DVM pays the mARIO name price from ITS Solana wallet via the kind:5095 job; this wallet needs only dust SOL to spawn the ANT it owns. On the paid path the job fee is enforced by the connector payment proxy in front of the DVM; when --via targets the DVM backend directly the job payment is STUBBED (dev/e2e only). The ArNS purchase itself is real either way, and the name is owned by YOUR ANT from inception.";
+var MIN_ARIO_SDK_VERSION = "4.0.3";
 var ArnsSdkUnavailableError = class extends Error {
-  constructor(cause) {
+  constructor(cause, module = "@ar.io/sdk") {
     super(
-      "`rig name` needs the optional `@ar.io/sdk` dependency, which is not installed. It is intentionally NOT a base `rig` dependency (keeps the install lean). Add it to use ArNS naming:\n  npm i @ar.io/sdk    # or: pnpm add @ar.io/sdk\nthen re-run your `rig name` command." + (cause instanceof Error ? `
+      `\`rig name\` needs the optional \`${module}\` dependency, which is not installed. It is intentionally NOT a base \`rig\` dependency (keeps the install lean). Add it to use ArNS naming:
+  npm i @ar.io/sdk@^${MIN_ARIO_SDK_VERSION}    # or: pnpm add @ar.io/sdk@^${MIN_ARIO_SDK_VERSION}
+(\`@solana/kit\` installs alongside it) then re-run your \`rig name\` command.` + (cause instanceof Error ? `
 (underlying error: ${cause.message})` : "")
     );
     this.name = "ArnsSdkUnavailableError";
   }
 };
-var ARIO_MAINNET_PROCESS_ID = "qNvAoz0TgcH7DMg8BCVn8jF32QH5L6T29VjHxhHqqGE";
+var ArnsSdkIncompatibleError = class extends Error {
+  constructor(detail) {
+    super(
+      `the installed @ar.io/sdk is incompatible with \`rig name\`: ${detail}.
+\`rig name\` requires @ar.io/sdk >= ${MIN_ARIO_SDK_VERSION} (the Solana-native release driven via a \`@solana/kit\` rpc + signer). Upgrade with:
+  npm i @ar.io/sdk@latest    # or: pnpm add @ar.io/sdk@latest`
+    );
+    this.name = "ArnsSdkIncompatibleError";
+  }
+};
+var SOLANA_MAINNET_RPC_URL = "https://api.mainnet-beta.solana.com";
+var SOLANA_DEVNET_RPC_URL = "https://api.devnet.solana.com";
 var defaultLoadArns = async (options) => {
-  const specifier = "@ar.io/sdk";
+  const sdkSpecifier = "@ar.io/sdk";
   let mod;
   try {
-    mod = await import(specifier);
+    mod = await import(sdkSpecifier);
   } catch (err) {
     throw new ArnsSdkUnavailableError(err);
   }
-  if (!mod.ARIO?.init || !mod.ANT?.init) {
-    throw new ArnsSdkUnavailableError(
-      new Error("the installed @ar.io/sdk does not expose ARIO.init / ANT.init")
-    );
-  }
-  const processId = options.processId ?? (options.network === "devnet" ? mod.ARIO_DEVNET_PROCESS_ID ?? "" : options.network === "testnet" ? mod.ARIO_TESTNET_PROCESS_ID ?? "" : mod.ARIO_MAINNET_PROCESS_ID ?? ARIO_MAINNET_PROCESS_ID);
-  if (!processId) {
-    throw new ArnsSdkUnavailableError(
-      new Error(
-        `the installed @ar.io/sdk exposes no ${options.network} registry process id \u2014 pass --process-id explicitly`
-      )
+  const kitSpecifier = "@solana/kit";
+  let kit;
+  try {
+    kit = await import(kitSpecifier);
+  } catch (err) {
+    throw new ArnsSdkUnavailableError(err, "@solana/kit");
+  }
+  const arioInit = mod.ARIO?.init;
+  const antInit = mod.ANT?.init;
+  if (!arioInit || !antInit) {
+    throw new ArnsSdkIncompatibleError("it exposes no ARIO.init / ANT.init");
+  }
+  const {
+    createSolanaRpc,
+    createSolanaRpcSubscriptions,
+    createKeyPairSignerFromBytes
+  } = kit;
+  if (!createSolanaRpc || !createSolanaRpcSubscriptions || !createKeyPairSignerFromBytes) {
+    throw new ArnsSdkIncompatibleError(
+      "the resolved @solana/kit exposes no createSolanaRpc / createSolanaRpcSubscriptions / createKeyPairSignerFromBytes"
     );
   }
-  if (!mod.SolanaSigner) {
-    throw new ArnsSdkUnavailableError(
-      new Error(
-        "the installed @ar.io/sdk exposes no SolanaSigner \u2014 this build predates ar.io's Solana migration; upgrade @ar.io/sdk"
-      )
+  const rpcUrl = options.network === "devnet" ? mod.DEVNET_RPC_URL ?? SOLANA_DEVNET_RPC_URL : mod.DEFAULT_SOLANA_RPC_URL ?? mod.MAINNET_RPC_URL ?? SOLANA_MAINNET_RPC_URL;
+  const devnetIds = options.network === "devnet" ? mod.DEVNET_PROGRAM_IDS : void 0;
+  if (options.network === "devnet" && devnetIds === void 0) {
+    throw new ArnsSdkIncompatibleError(
+      "it exposes no DEVNET_PROGRAM_IDS \u2014 devnet targeting needs the SDK's staging program ids"
     );
   }
-  const signer = new mod.SolanaSigner(options.solanaSecretKey);
-  const ario = mod.ARIO.init({ process: processId, signer });
-  const antInit = mod.ANT.init;
+  const antProgramId = devnetIds?.ant;
+  const programOverrides = {
+    ...devnetIds?.core !== void 0 ? { coreProgramId: devnetIds.core } : {},
+    ...devnetIds?.gar !== void 0 ? { garProgramId: devnetIds.gar } : {},
+    ...devnetIds?.arns !== void 0 ? { arnsProgramId: devnetIds.arns } : {},
+    ...antProgramId !== void 0 ? { antProgramId } : {},
+    // --process-id / RIG_ARIO_PROCESS_ID: explicit ArNS registry program
+    // override (wins over the cluster default).
+    ...options.processId !== void 0 ? { arnsProgramId: options.processId } : {}
+  };
+  const rpc = createSolanaRpc(rpcUrl);
+  const writeExtras = options.mode === "write" ? {
+    signer: await createKeyPairSignerFromBytes(options.solanaSecretKey),
+    rpcSubscriptions: createSolanaRpcSubscriptions(
+      rpcUrl.replace(/^http/, "ws")
+    )
+  } : {};
+  const ario = arioInit({ rpc, ...writeExtras, ...programOverrides });
   return {
     getTokenCost: async (args) => BigInt(String(await ario.getTokenCost(args))),
-    buyRecord: async (args) => await ario.buyRecord(args),
-    getArNSRecord: async (args) => await ario.getArNSRecord(args),
+    buyRecord: async (args) => {
+      if (typeof ario.buyRecord !== "function") {
+        throw new ArnsSdkIncompatibleError(
+          "the signed ARIO client exposes no buyRecord"
+        );
+      }
+      return await ario.buyRecord(args);
+    },
+    spawnAnt: async (args) => {
+      const spawn2 = mod.ANT?.spawn;
+      if (typeof spawn2 !== "function") {
+        throw new ArnsSdkIncompatibleError("it exposes no ANT.spawn");
+      }
+      if (options.mode !== "write") {
+        throw new ArnsSdkIncompatibleError(
+          "ANT.spawn requires the write-mode SDK (a signer) \u2014 this client was built signerless"
+        );
+      }
+      const result = await spawn2({
+        rpc,
+        ...writeExtras,
+        state: { name: args.name },
+        ...antProgramId !== void 0 ? { antProgramId } : {}
+      });
+      return { processId: result.processId, signature: result.signature };
+    },
+    buildSetRecordTransaction: async (args) => {
+      if (options.mode !== "write") {
+        throw new ArnsSdkIncompatibleError(
+          "buildSetRecordTransaction requires the write-mode SDK (a client partial-signature) \u2014 this client was built signerless"
+        );
+      }
+      const contractsSpecifier = "@ar.io/solana-contracts/ant";
+      let contracts;
+      try {
+        contracts = await import(contractsSpecifier);
+      } catch (err) {
+        throw new ArnsSdkUnavailableError(err, "@ar.io/solana-contracts");
+      }
+      const getSetRecordInstructionAsync = contracts.getSetRecordInstructionAsync;
+      const getAntRecordPDA = mod.getAntRecordPDA;
+      const {
+        createKeyPairFromBytes,
+        createNoopSigner,
+        address: toAddr,
+        blockhash: toBlockhash,
+        createTransactionMessage,
+        setTransactionMessageFeePayer,
+        setTransactionMessageLifetimeUsingBlockhash,
+        appendTransactionMessageInstructions,
+        compileTransaction,
+        partiallySignTransaction,
+        getBase64EncodedWireTransaction
+      } = kit;
+      if (!getSetRecordInstructionAsync || !getAntRecordPDA || !createKeyPairFromBytes || !createNoopSigner || !toAddr || !toBlockhash || !createTransactionMessage || !setTransactionMessageFeePayer || !setTransactionMessageLifetimeUsingBlockhash || !appendTransactionMessageInstructions || !compileTransaction || !partiallySignTransaction || !getBase64EncodedWireTransaction) {
+        throw new ArnsSdkIncompatibleError(
+          "the installed @ar.io/sdk / @ar.io/solana-contracts / @solana/kit do not expose the record-set transaction builder surface"
+        );
+      }
+      const asset = toAddr(args.antProcessId);
+      const antProgram = antProgramId !== void 0 ? toAddr(antProgramId) : void 0;
+      const [recordPda] = await getAntRecordPDA(
+        asset,
+        args.undername,
+        antProgram
+      );
+      const ix = await getSetRecordInstructionAsync(
+        {
+          asset,
+          record: recordPda,
+          caller: createNoopSigner(toAddr(options.solanaPublicKey)),
+          undername: args.undername,
+          target: args.transactionId,
+          targetProtocol: 0,
+          ttlSeconds: args.ttlSeconds,
+          priority: null,
+          recordOwner: null
+        },
+        antProgram !== void 0 ? { programAddress: antProgram } : void 0
+      );
+      let message = createTransactionMessage({ version: 0 });
+      message = setTransactionMessageFeePayer(toAddr(args.feePayer), message);
+      message = setTransactionMessageLifetimeUsingBlockhash(
+        {
+          blockhash: toBlockhash(args.recentBlockhash),
+          lastValidBlockHeight: 0n
+        },
+        message
+      );
+      message = appendTransactionMessageInstructions([ix], message);
+      const keyPair = await createKeyPairFromBytes(options.solanaSecretKey);
+      const signed = await partiallySignTransaction(
+        [keyPair],
+        compileTransaction(message)
+      );
+      return getBase64EncodedWireTransaction(signed);
+    },
+    getArNSRecord: async (args) => {
+      let raw;
+      try {
+        raw = await ario.getArNSRecord(args);
+      } catch (err) {
+        if (err instanceof Error && /not found/i.test(err.message)) return null;
+        throw err;
+      }
+      return {
+        processId: raw.processId ?? null,
+        type: raw.type ?? null,
+        ...raw.startTimestamp !== void 0 ? { startTimestamp: raw.startTimestamp * 1e3 } : {},
+        ...raw.endTimestamp !== void 0 ? { endTimestamp: raw.endTimestamp * 1e3 } : {},
+        ...raw.undernameLimit !== void 0 ? { undernameLimit: raw.undernameLimit } : {}
+      };
+    },
     ant: async (pid) => {
-      const ant = antInit({ processId: pid, signer });
+      const ant = await antInit({
+        processId: pid,
+        rpc,
+        ...writeExtras,
+        ...antProgramId !== void 0 ? { antProgramId } : {}
+      });
       return {
-        getRecords: () => ant.getRecords(),
-        setBaseNameRecord: (a) => ant.setBaseNameRecord(a),
-        setUndernameRecord: (a) => ant.setUndernameRecord(a)
+        getRecords: async () => {
+          const records = await ant.getRecords();
+          const targets = {};
+          for (const [undername, record] of Object.entries(records)) {
+            targets[undername] = {
+              transactionId: record.transactionId,
+              ttlSeconds: record.ttlSeconds
+            };
+          }
+          return targets;
+        },
+        setBaseNameRecord: async (a) => {
+          if (typeof ant.setBaseNameRecord !== "function") {
+            throw new ArnsSdkIncompatibleError(
+              "the signed ANT client exposes no setBaseNameRecord"
+            );
+          }
+          return ant.setBaseNameRecord(a);
+        },
+        setUndernameRecord: async (a) => {
+          if (typeof ant.setUndernameRecord !== "function") {
+            throw new ArnsSdkIncompatibleError(
+              "the signed ANT client exposes no setUndernameRecord"
+            );
+          }
+          return ant.setUndernameRecord(a);
+        }
       };
     }
   };
 };
+var ARNS_BUY_JOB_KIND = 5095;
+var DvmBuyJobError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "DvmBuyJobError";
+  }
+};
+var defaultSubmitDvmBuyJob = async (request) => {
+  const { finalizeEvent } = await import("nostr-tools/pure");
+  const event = finalizeEvent(
+    {
+      kind: ARNS_BUY_JOB_KIND,
+      created_at: Math.floor(Date.now() / 1e3),
+      content: "",
+      tags: [
+        ["param", "name", request.name],
+        ["param", "type", request.type],
+        ...request.years !== null ? [["param", "years", String(request.years)]] : [],
+        ["param", "processId", request.processId]
+      ]
+    },
+    request.nostrSecretKey
+  );
+  const url = `${request.viaUrl.replace(/\/+$/, "")}/store`;
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ event })
+    });
+  } catch (err) {
+    throw new DvmBuyJobError(
+      `could not reach the DVM at ${url}: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  let body;
+  try {
+    body = await response.json();
+  } catch {
+    throw new DvmBuyJobError(
+      `the DVM at ${url} returned a non-JSON response (HTTP ${response.status})`
+    );
+  }
+  if (!response.ok || body.accept !== true) {
+    throw new DvmBuyJobError(
+      `the DVM rejected the kind:${ARNS_BUY_JOB_KIND} buy job (HTTP ${response.status}${body.code ? `, ${body.code}` : ""})${body.message ? `: ${body.message}` : ""}`
+    );
+  }
+  const registryTxId = body.result?.registryTxId;
+  if (typeof registryTxId !== "string" || registryTxId.length === 0) {
+    throw new DvmBuyJobError(
+      `the DVM accepted the job but returned no registryTxId \u2014 response: ` + JSON.stringify(body.result ?? null)
+    );
+  }
+  return {
+    registryTxId,
+    quotedMario: typeof body.result?.quotedMario === "string" ? body.result.quotedMario : null,
+    syncAttributesTxId: typeof body.result?.syncAttributesTxId === "string" ? body.result.syncAttributesTxId : null
+  };
+};
+var GAS_STATION_JOB_KIND = 5096;
+var GasStationJobError = class extends Error {
+  constructor(reason, message) {
+    super(message);
+    this.reason = reason;
+    this.name = "GasStationJobError";
+  }
+  reason;
+};
+async function postGasStationJob(viaUrl, params, nostrSecretKey) {
+  const { finalizeEvent } = await import("nostr-tools/pure");
+  const event = finalizeEvent(
+    {
+      kind: GAS_STATION_JOB_KIND,
+      created_at: Math.floor(Date.now() / 1e3),
+      content: "",
+      tags: params.map(([k, v]) => ["param", k, v])
+    },
+    nostrSecretKey
+  );
+  const url = `${viaUrl.replace(/\/+$/, "")}/store`;
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ event })
+    });
+  } catch (err) {
+    throw new GasStationJobError(
+      "unreachable",
+      `could not reach the DVM at ${url}: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  let body;
+  try {
+    body = await response.json();
+  } catch {
+    throw new GasStationJobError(
+      "bad_response",
+      `the DVM at ${url} returned a non-JSON response (HTTP ${response.status})`
+    );
+  }
+  if (!response.ok || body.accept !== true || !body.result) {
+    throw new GasStationJobError(
+      String(body.code ?? "rejected"),
+      `the DVM rejected the kind:${GAS_STATION_JOB_KIND} job (HTTP ${response.status}${body.code ? `, ${body.code}` : ""})${body.message ? `: ${body.message}` : ""}`
+    );
+  }
+  const result = body.result;
+  if (result["status"] === "failed") {
+    throw new GasStationJobError(
+      String(result["reason"] ?? "failed"),
+      `gas-station job failed: ${String(result["reason"] ?? "unknown")} \u2014 ${String(result["detail"] ?? "")}`
+    );
+  }
+  return result;
+}
+var defaultGasStationClient = {
+  quote: async (args) => {
+    const result = await postGasStationJob(
+      args.viaUrl,
+      [
+        ["phase", "quote"],
+        ...args.transaction !== void 0 ? [["transaction", args.transaction]] : []
+      ],
+      args.nostrSecretKey
+    );
+    const { quoteId, feePayer, maxLamports, recentBlockhash, expiresAt } = result;
+    if (typeof quoteId !== "string" || typeof feePayer !== "string" || typeof maxLamports !== "string" || typeof recentBlockhash !== "string" || typeof expiresAt !== "number") {
+      throw new GasStationJobError(
+        "bad_response",
+        `the DVM quote is missing fields: ${JSON.stringify(result)}`
+      );
+    }
+    return { quoteId, feePayer, maxLamports, recentBlockhash, expiresAt };
+  },
+  execute: async (args) => {
+    const result = await postGasStationJob(
+      args.viaUrl,
+      [
+        ["phase", "execute"],
+        ["transaction", args.transaction],
+        ["quoteId", args.quoteId],
+        ["idempotencyKey", args.idempotencyKey]
+      ],
+      args.nostrSecretKey
+    );
+    const signature = result["signature"];
+    if (typeof signature !== "string" || signature.length === 0) {
+      throw new GasStationJobError(
+        "bad_response",
+        `the DVM execute result carries no signature: ${JSON.stringify(result)}`
+      );
+    }
+    return {
+      signature,
+      slot: typeof result["slot"] === "string" ? result["slot"] : null,
+      feeLamportsActual: typeof result["feeLamportsActual"] === "string" ? result["feeLamportsActual"] : null,
+      ...result["replayed"] === true ? { replayed: true } : {}
+    };
+  }
+};
 var NAME_USAGE = `Usage: rig name <buy|set|status> <name> [options]
 
 ArNS naming for Arweave-served artifacts. A name registered on the ar.io
@@ -4994,14 +5617,21 @@ mnemonic that pays for pushes (derived at m/44'/501'/0'/0'). Fund it with
 registry program \u2014 NOT through TOON ILP payment channels.
 
 Commands:
-  name buy <name> [--years n | --permabuy]
+  name buy <name> [--years n | --permabuy] [--via <dvm-url>]
                        quote (mARIO) \u2192 confirm \u2192 register. The spawned ANT is
                        owned by this identity's Solana key. Default: 1-year
                        lease. PAID \u2014 spends mARIO from the Solana wallet.
-  name set <name> <txId> [--undername <sub>] [--ttl <seconds>]
+                       With --via: BROKERED \u2014 this identity spawns and owns
+                       the ANT (dust SOL only), then a store DVM executes the
+                       kind:5095 buy job and pays the mARIO from ITS wallet;
+                       the name is owned by your ANT from inception.
+  name set <name> <txId> [--undername <sub>] [--ttl <seconds>] [--via <dvm-url>]
                        point the name (or an undername) at an Arweave txId
                        (typically a deployed path manifest). Signs an ANT
-                       record update with the Solana key.
+                       record update with the Solana key. With --via: the
+                       gas-station path (kind:5096) \u2014 you author and
+                       partial-sign, the DVM co-signs as fee payer and pays
+                       the lamports; needs ZERO SOL in this wallet.
   name status <name>   FREE: registry record (lease/permabuy, expiry), ANT
                        process id, current target txId(s), TTL, undernames.
 
@@ -5012,11 +5642,18 @@ Options:
   --undername <sub>    target the undername <sub>_<name> instead of the base
                        name (set)
   --ttl <seconds>      record TTL in seconds (set; default 3600)
-  --network <net>      registry: mainnet | devnet | testnet (default mainnet;
-                       or RIG_ARIO_NETWORK). Non-mainnet gateway resolution is
+  --network <net>      cluster: mainnet | devnet (default mainnet; or
+                       RIG_ARIO_NETWORK). ar.io has no Solana-testnet
+                       deployment. Non-mainnet gateway resolution is
                        unverified.
-  --process-id <id>    explicit registry process id (overrides --network; or
-                       RIG_ARIO_PROCESS_ID)
+  --process-id <id>    explicit ArNS registry program id \u2014 a Solana program
+                       address (overrides --network; or RIG_ARIO_PROCESS_ID)
+  --via <dvm-url>      buy only: broker the purchase through a store DVM's
+                       kind:5095 job endpoint (or RIG_ARNS_DVM_URL). The DVM
+                       pays the mARIO; you own the name via your spawned ANT.
+                       Direct backend targeting stubs the job payment
+                       (dev/e2e) \u2014 the paid path runs the same job through
+                       the connector payment proxy.
   --yes                skip the confirmation (required when not a TTY) for
                        buy/set
   --json               machine-readable envelope; for buy/set without --yes it
@@ -5024,8 +5661,8 @@ Options:
   -h, --help           show this help`;
 var DEFAULT_TTL_SECONDS = 3600;
 var DEFAULT_LEASE_YEARS = 1;
-var NETWORKS = ["mainnet", "devnet", "testnet"];
-async function resolveNameContext(deps, network, processId) {
+var NETWORKS = ["mainnet", "devnet"];
+async function resolveNameContext(deps, network, processId, mode) {
   const { io: io2, env } = deps;
   const resolved = await resolveIdentity({
     env,
@@ -5049,12 +5686,17 @@ async function resolveNameContext(deps, network, processId) {
     );
   }
   const sdk = await (deps.loadArns ?? defaultLoadArns)({
+    mode,
     solanaSecretKey: derived.solana.secretKey,
     solanaPublicKey: solanaAddress,
     network,
     ...processId !== void 0 ? { processId } : {}
   });
-  return { identity, solanaAddress, network, processId, sdk };
+  const nostrSecretKey = client.deriveNostrKeyFromMnemonic(
+    resolved.mnemonic,
+    resolved.accountIndex
+  ).secretKey;
+  return { identity, solanaAddress, network, processId, sdk, nostrSecretKey };
 }
 function parseNameFlags(args, env) {
   const { values, positionals } = parseArgs13({
@@ -5067,19 +5709,31 @@ function parseNameFlags(args, env) {
       ttl: { type: "string" },
       network: { type: "string" },
       "process-id": { type: "string" },
+      via: { type: "string" },
       yes: { type: "boolean", default: false },
       json: { type: "boolean", default: false },
       help: { type: "boolean", short: "h", default: false }
     }
   });
   if (values.help) {
-    return { positionals: ["--help"], flags: { permabuy: false, ttl: 0, network: "mainnet", yes: false, json: false } };
+    return {
+      positionals: ["--help"],
+      flags: {
+        permabuy: false,
+        ttl: 0,
+        network: "mainnet",
+        yes: false,
+        json: false
+      }
+    };
   }
   let years;
   if (values.years !== void 0) {
     years = Number(values.years);
     if (!Number.isInteger(years) || years <= 0) {
-      throw new Error(`--years must be a positive integer, got ${JSON.stringify(values.years)}`);
+      throw new Error(
+        `--years must be a positive integer, got ${JSON.stringify(values.years)}`
+      );
     }
   }
   if (years !== void 0 && values.permabuy) {
@@ -5089,14 +5743,28 @@ function parseNameFlags(args, env) {
   if (values.ttl !== void 0) {
     ttl = Number(values.ttl);
     if (!Number.isInteger(ttl) || ttl <= 0) {
-      throw new Error(`--ttl must be a positive integer number of seconds, got ${JSON.stringify(values.ttl)}`);
+      throw new Error(
+        `--ttl must be a positive integer number of seconds, got ${JSON.stringify(values.ttl)}`
+      );
     }
   }
   const networkRaw = values.network ?? env["RIG_ARIO_NETWORK"] ?? "mainnet";
   if (!NETWORKS.includes(networkRaw)) {
-    throw new Error(`--network must be one of ${NETWORKS.join(" | ")}, got ${JSON.stringify(networkRaw)}`);
+    throw new Error(
+      `--network must be one of ${NETWORKS.join(" | ")}, got ${JSON.stringify(networkRaw)}`
+    );
   }
   const processId = values["process-id"] ?? env["RIG_ARIO_PROCESS_ID"];
+  const viaRaw = values.via ?? env["RIG_ARNS_DVM_URL"];
+  let via;
+  if (viaRaw !== void 0) {
+    if (!/^https?:\/\/.+/.test(viaRaw)) {
+      throw new Error(
+        `--via must be an http(s) DVM endpoint URL, got ${JSON.stringify(viaRaw)}`
+      );
+    }
+    via = viaRaw;
+  }
   return {
     positionals,
     flags: {
@@ -5106,6 +5774,7 @@ function parseNameFlags(args, env) {
       ttl,
       network: networkRaw,
       ...processId !== void 0 ? { processId } : {},
+      ...via !== void 0 ? { via } : {},
       yes: values.yes ?? false,
       json: values.json ?? false
     }
@@ -5115,7 +5784,12 @@ async function runBuy(name, flags, deps) {
   const { io: io2 } = deps;
   const type = flags.permabuy ? "permabuy" : "lease";
   const years = type === "lease" ? flags.years ?? DEFAULT_LEASE_YEARS : null;
-  const ctx = await resolveNameContext(deps, flags.network, flags.processId);
+  const ctx = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "read"
+  );
   const mario = await ctx.sdk.getTokenCost({
     intent: "Buy-Name",
     name,
@@ -5126,6 +5800,8 @@ async function runBuy(name, flags, deps) {
     mARIO: mario.toString(),
     ARIO: formatUnits(mario.toString(), ARIO_DECIMALS)
   };
+  const via = flags.via ?? null;
+  const paymentNote = via === null ? MARIO_PAYMENT_NOTE : DVM_PAYMENT_NOTE;
   const buildJson = (executed, extra = {}) => ({
     command: "name",
     action: "buy",
@@ -5134,46 +5810,100 @@ async function runBuy(name, flags, deps) {
     years,
     network: ctx.network,
     processId: ctx.processId ?? null,
+    via,
     identity: ctx.identity,
     solanaAddress: ctx.solanaAddress,
     quote,
-    payment: MARIO_PAYMENT_NOTE,
+    payment: paymentNote,
     executed,
     ...extra
   });
   if (!flags.json) {
     io2.out(
-      `Buy ArNS name "${name}" \u2014 ${type}` + (years !== null ? ` (${years} year${years === 1 ? "" : "s"})` : "") + ` on ${ctx.network}`
+      `Buy ArNS name "${name}" \u2014 ${type}` + (years !== null ? ` (${years} year${years === 1 ? "" : "s"})` : "") + ` on ${ctx.network}` + (via !== null ? ` \u2014 brokered via DVM ${via}` : "")
+    );
+    io2.out(
+      via === null ? `  Cost: ${renderMario(mario)}` : `  Name cost (paid by the DVM): ${renderMario(mario)}`
     );
-    io2.out(`  Cost: ${renderMario(mario)}`);
     io2.out(`  Solana wallet: ${ctx.solanaAddress}`);
-    io2.out(`  ${MARIO_PAYMENT_NOTE}`);
+    io2.out(`  ${paymentNote}`);
     io2.out(renderIdentityLine(ctx.identity));
   }
   if (!flags.yes) {
     if (flags.json) {
       io2.emitJson(
         buildJson(false, {
-          hint: "estimate only \u2014 re-run with --yes to buy (spends mARIO on Solana, non-refundable)"
+          hint: via === null ? "estimate only \u2014 re-run with --yes to buy (spends mARIO on Solana, non-refundable)" : "estimate only \u2014 re-run with --yes to spawn your ANT and submit the kind:5095 buy job to the DVM"
         })
       );
       return 0;
     }
     if (!io2.isInteractive) {
       io2.err(
-        "refusing to spend mARIO without confirmation in a non-interactive session \u2014 re-run with --yes (or use --json for a pure estimate)"
+        via === null ? "refusing to spend mARIO without confirmation in a non-interactive session \u2014 re-run with --yes (or use --json for a pure estimate)" : "refusing to spawn an ANT and submit a paid DVM job without confirmation in a non-interactive session \u2014 re-run with --yes (or use --json for a pure estimate)"
       );
       return 1;
     }
     const proceed = await io2.confirm(
-      `Proceed \u2014 buy "${name}" for ${renderMario(mario)} from your Solana wallet? [y/N] `
+      via === null ? `Proceed \u2014 buy "${name}" for ${renderMario(mario)} from your Solana wallet? [y/N] ` : `Proceed \u2014 spawn your ANT and have the DVM at ${via} buy "${name}" for ${renderMario(mario)} from ITS wallet? [y/N] `
     );
     if (!proceed) {
       io2.err("aborted \u2014 nothing was bought or paid.");
       return 1;
     }
   }
-  const receipt = await ctx.sdk.buyRecord({
+  const signed = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "write"
+  );
+  if (via !== null) {
+    const spawn2 = await signed.sdk.spawnAnt({ name });
+    if (!flags.json) {
+      io2.out(`Spawned ANT ${spawn2.processId} (tx ${spawn2.signature})`);
+    }
+    const submit = deps.submitDvmBuyJob ?? defaultSubmitDvmBuyJob;
+    const receipt2 = await submit({
+      viaUrl: via,
+      name,
+      type,
+      years,
+      processId: spawn2.processId,
+      nostrSecretKey: signed.nostrSecretKey
+    });
+    const result2 = {
+      registryTxId: receipt2.registryTxId,
+      antProcessId: spawn2.processId,
+      syncAttributesTxId: receipt2.syncAttributesTxId,
+      dvmQuotedMario: receipt2.quotedMario
+    };
+    if (flags.json) {
+      io2.emitJson(
+        buildJson(true, {
+          spawn: { processId: spawn2.processId, signature: spawn2.signature },
+          result: result2
+        })
+      );
+    } else {
+      io2.out(
+        `Registered "${name}" via the DVM \u2014 registry tx ${result2.registryTxId}`
+      );
+      io2.out(`  ANT process (owned by YOU): ${spawn2.processId}`);
+      if (receipt2.syncAttributesTxId) {
+        io2.out(`  Trait sync: ${receipt2.syncAttributesTxId}`);
+      } else {
+        io2.out(
+          "  Trait sync: not run by the DVM (holder-gated on this deployment) \u2014 as the ANT holder you can reconcile with syncAttributes later; resolution works regardless."
+        );
+      }
+      io2.out(
+        `Point it at content with \`rig name set ${name} <txId>\`, then it resolves at https://${name}.<gateway>/`
+      );
+    }
+    return 0;
+  }
+  const receipt = await signed.sdk.buyRecord({
     name,
     type,
     ...years !== null ? { years } : {}
@@ -5195,7 +5925,12 @@ async function runBuy(name, flags, deps) {
 }
 async function runSet(name, txId, flags, deps) {
   const { io: io2 } = deps;
-  const ctx = await resolveNameContext(deps, flags.network, flags.processId);
+  const ctx = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "read"
+  );
   const record = await ctx.sdk.getArNSRecord({ name });
   if (!record || !record.processId) {
     throw new Error(
@@ -5204,6 +5939,7 @@ async function runSet(name, txId, flags, deps) {
   }
   const antProcessId = record.processId;
   const undername = flags.undername ?? null;
+  const via = flags.via ?? null;
   const buildJson = (executed, extra = {}) => ({
     command: "name",
     action: "set",
@@ -5213,6 +5949,7 @@ async function runSet(name, txId, flags, deps) {
     ttl: flags.ttl,
     network: ctx.network,
     processId: ctx.processId ?? null,
+    via,
     identity: ctx.identity,
     solanaAddress: ctx.solanaAddress,
     antProcessId,
@@ -5221,16 +5958,23 @@ async function runSet(name, txId, flags, deps) {
   });
   const targetLabel = undername ? `undername "${undername}_${name}"` : `base name "${name}"`;
   if (!flags.json) {
-    io2.out(`Set ${targetLabel} \u2192 txId ${txId} (ttl ${flags.ttl}s) on ${ctx.network}`);
+    io2.out(
+      `Set ${targetLabel} \u2192 txId ${txId} (ttl ${flags.ttl}s) on ${ctx.network}` + (via !== null ? ` \u2014 gas paid by the DVM at ${via} (kind:5096)` : "")
+    );
     io2.out(`  ANT process: ${antProcessId}`);
     io2.out(`  Signed by the identity's Solana key (${ctx.solanaAddress}).`);
+    if (via !== null) {
+      io2.out(
+        "  Gas station: you author + partial-sign the record update; the DVM co-signs as fee payer and pays the lamports (toon-meta#163). Direct backend targeting stubs the job payment (dev/e2e)."
+      );
+    }
     io2.out(renderIdentityLine(ctx.identity));
   }
   if (!flags.yes) {
     if (flags.json) {
       io2.emitJson(
         buildJson(false, {
-          hint: "estimate only \u2014 re-run with --yes to write the ANT record"
+          hint: via === null ? "estimate only \u2014 re-run with --yes to write the ANT record" : "estimate only \u2014 re-run with --yes to quote the gas-station and write the ANT record (DVM pays the gas)"
         })
       );
       return 0;
@@ -5242,28 +5986,90 @@ async function runSet(name, txId, flags, deps) {
       return 1;
     }
     const proceed = await io2.confirm(
-      `Proceed \u2014 point ${targetLabel} at ${txId}? [y/N] `
+      `Proceed \u2014 point ${targetLabel} at ${txId}?` + (via !== null ? " (the DVM pays the gas)" : "") + " [y/N] "
     );
     if (!proceed) {
       io2.err("aborted \u2014 the ANT record was not changed.");
       return 1;
     }
   }
-  const ant = await ctx.sdk.ant(antProcessId);
-  const receipt = undername ? await ant.setUndernameRecord({ undername, transactionId: txId, ttlSeconds: flags.ttl }) : await ant.setBaseNameRecord({ transactionId: txId, ttlSeconds: flags.ttl });
+  const signed = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "write"
+  );
+  if (via !== null) {
+    const gas = deps.gasStation ?? defaultGasStationClient;
+    const quote = await gas.quote({
+      viaUrl: via,
+      nostrSecretKey: signed.nostrSecretKey
+    });
+    const wireTx = await signed.sdk.buildSetRecordTransaction({
+      antProcessId,
+      undername: undername ?? "@",
+      transactionId: txId,
+      ttlSeconds: flags.ttl,
+      feePayer: quote.feePayer,
+      recentBlockhash: quote.recentBlockhash
+    });
+    const executed = await gas.execute({
+      viaUrl: via,
+      transaction: wireTx,
+      quoteId: quote.quoteId,
+      idempotencyKey: randomUUID(),
+      nostrSecretKey: signed.nostrSecretKey
+    });
+    const gasStation = {
+      quoteId: quote.quoteId,
+      feePayer: quote.feePayer,
+      maxLamports: quote.maxLamports,
+      expiresAt: quote.expiresAt,
+      feeLamportsActual: executed.feeLamportsActual
+    };
+    const result2 = { messageId: executed.signature };
+    if (flags.json) {
+      io2.emitJson(buildJson(true, { gasStation, result: result2 }));
+    } else {
+      io2.out(
+        `Updated \u2014 record-set tx ${executed.signature} (gas paid by ${quote.feePayer})`
+      );
+      const host = undername ? `${undername}_${name}` : name;
+      io2.out(
+        `  Resolves at https://${host}.<gateway>/ (allow for gateway cache/TTL).`
+      );
+    }
+    return 0;
+  }
+  const ant = await signed.sdk.ant(antProcessId);
+  const receipt = undername ? await ant.setUndernameRecord({
+    undername,
+    transactionId: txId,
+    ttlSeconds: flags.ttl
+  }) : await ant.setBaseNameRecord({
+    transactionId: txId,
+    ttlSeconds: flags.ttl
+  });
   const result = { messageId: receipt.id };
   if (flags.json) {
     io2.emitJson(buildJson(true, { result }));
   } else {
     io2.out(`Updated \u2014 ANT message ${result.messageId}`);
     const host = undername ? `${undername}_${name}` : name;
-    io2.out(`  Resolves at https://${host}.<gateway>/ (allow for gateway cache/TTL).`);
+    io2.out(
+      `  Resolves at https://${host}.<gateway>/ (allow for gateway cache/TTL).`
+    );
   }
   return 0;
 }
 async function runStatus(name, flags, deps) {
   const { io: io2 } = deps;
-  const ctx = await resolveNameContext(deps, flags.network, flags.processId);
+  const ctx = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "read"
+  );
   const record = await ctx.sdk.getArNSRecord({ name });
   let targets = null;
   if (record?.processId) {
@@ -5311,7 +6117,9 @@ async function runStatus(name, flags, deps) {
     io2.out("  Records:");
     for (const [under, target] of Object.entries(targets)) {
       const label = under === "@" ? "(base)" : `${under}_${name}`;
-      io2.out(`    ${label} \u2192 ${target.transactionId} (ttl ${target.ttlSeconds}s)`);
+      io2.out(
+        `    ${label} \u2192 ${target.transactionId} (ttl ${target.ttlSeconds}s)`
+      );
     }
   } else {
     io2.out("  Records: none set \u2014 point one with `rig name set`.");
@@ -5361,7 +6169,9 @@ async function runName(args, deps) {
     if (sub === "status") return await runStatus(name, flags, deps);
     const txId = positionals[1];
     if (txId === void 0) {
-      io2.err("`rig name set` needs a <txId> (the Arweave transaction to point at)");
+      io2.err(
+        "`rig name set` needs a <txId> (the Arweave transaction to point at)"
+      );
       io2.err(NAME_USAGE);
       return 2;
     }
@@ -5391,22 +6201,22 @@ function buildArweaveManifest(entries, indexPath = DEFAULT_INDEX, fallbackTxId)
 }
 
 // src/cli/site-record.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join3 } from "path";
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join4 } from "path";
 var SITE_MANIFEST_FILENAME = "site-manifests.json";
-function storeDir(env) {
-  return env["TOON_CLIENT_HOME"] ?? join3(homedir2(), ".toon-client");
+function storeDir2(env) {
+  return env["TOON_CLIENT_HOME"] ?? join4(homedir3(), ".toon-client");
 }
-function storePath(env) {
-  return join3(storeDir(env), SITE_MANIFEST_FILENAME);
+function storePath2(env) {
+  return join4(storeDir2(env), SITE_MANIFEST_FILENAME);
 }
 function keyOf(repoId, ref) {
   return `${repoId}\0${ref}`;
 }
 function readFile2(env) {
   try {
-    const parsed = JSON.parse(readFileSync2(storePath(env), "utf8"));
+    const parsed = JSON.parse(readFileSync3(storePath2(env), "utf8"));
     if (parsed && typeof parsed === "object") return parsed;
     return {};
   } catch {
@@ -5417,11 +6227,11 @@ function readSiteRecord(env, repoId, ref) {
   return readFile2(env)[keyOf(repoId, ref)];
 }
 function writeSiteRecord(env, record) {
-  const dir = storeDir(env);
-  mkdirSync2(dir, { recursive: true });
+  const dir = storeDir2(env);
+  mkdirSync3(dir, { recursive: true });
   const file = readFile2(env);
   file[keyOf(record.repoId, record.ref)] = record;
-  writeFileSync(storePath(env), `${JSON.stringify(file, null, 2)}
+  writeFileSync2(storePath2(env), `${JSON.stringify(file, null, 2)}
 `, "utf8");
 }