@toon-protocol/rig 2.9.0 → 2.10.1

package/dist/cli/rig.js

@@ -26,8 +26,9 @@ import {
   clientKeystorePath,
   linkKeystoreInClientConfig,
   readClientConfigFile,
+  resolveAccountIndex,
   resolveIdentity
-} from "../chunk-XGFBDUQX.js";
+} from "../chunk-GZUDRNOK.js";
 import {
   ChannelMapStore,
   channelStatus,
@@ -312,9 +313,7 @@ function nonFastForwardLines(refs) {
 function oversizeLines(objects) {
   return [
     `Push rejected: ${objects.length} object(s) exceed the ${MAX_OBJECT_SIZE}-byte (95KB) upload limit:`,
-    ...objects.map(
-      (o) => `  ${o.path ?? o.sha}  ${o.type}, ${o.size} bytes`
-    ),
+    ...objects.map((o) => `  ${o.path ?? o.sha}  ${o.type}, ${o.size} bytes`),
     "Objects over 95KB are a hard error in v1 \u2014 split or remove the file(s) from history to push.",
     "Large-object support is tracked in toon-client#235."
   ];
@@ -345,7 +344,11 @@ function describeError(err, command = "push") {
     return {
       code: "unknown_remote",
       lines: err.message.split("\n"),
-      json: { error: "unknown_remote", detail: err.message, remote: err.remote }
+      json: {
+        error: "unknown_remote",
+        detail: err.message,
+        remote: err.remote
+      }
     };
   }
   if (err instanceof MultiUrlRemoteError) {
@@ -406,6 +409,13 @@ function describeError(err, command = "push") {
       json: { error: "arns_sdk_unavailable", detail: err.message }
     };
   }
+  if (err instanceof Error && err.name === "ArnsSdkIncompatibleError") {
+    return {
+      code: "arns_sdk_incompatible",
+      lines: err.message.split("\n"),
+      json: { error: "arns_sdk_incompatible", detail: err.message }
+    };
+  }
   if (err instanceof DaemonRouteError) {
     const envelope = err.envelope;
     if (envelope.error === "non_fast_forward" && Array.isArray(envelope["refs"])) {
@@ -1063,7 +1073,7 @@ function loadPaidSession(deps, relayUrl) {
   });
 }
 var defaultLoadStandalone = async (options) => {
-  const mod = await import("../standalone-mode-FPFEEL72.js");
+  const mod = await import("../standalone-mode-T6H7OOBQ.js");
   return mod.createStandaloneContext(options);
 };
 function identityReport(ctx) {
@@ -4188,7 +4198,7 @@ async function prepareKeystoreTarget(input) {
 }
 function readAccountIndex(env) {
   const file = readClientConfigFile(clientConfigPath(env));
-  return typeof file.mnemonicAccountIndex === "number" ? file.mnemonicAccountIndex : 0;
+  return resolveAccountIndex(env, "keystore", file);
 }
 function finishMint(input, target, mnemonic) {
   const configPath = linkKeystoreInClientConfig(
@@ -4681,7 +4691,7 @@ async function resolveProfileRelay(flagRelay, originRelay, toonRelays) {
   ].filter((u) => u !== void 0 && isWebSocketRelay2(u));
   if (candidates[0] !== void 0) return candidates[0];
   try {
-    const { loadGenesisSeed } = await import("../network-bootstrap-HTNM7BBX.js");
+    const { loadGenesisSeed } = await import("../network-bootstrap-HV5VUZFU.js");
     const seed = loadGenesisSeed();
     if (seed?.relayUrl && isWebSocketRelay2(seed.relayUrl)) return seed.relayUrl;
   } catch {
@@ -5190,67 +5200,411 @@ async function runMutate(op, args, deps) {
 }
 
 // src/cli/name.ts
+import { randomUUID } from "crypto";
 import { parseArgs as parseArgs13 } from "util";
 var ARIO_DECIMALS = 6;
 function renderMario(mario) {
   return `${mario.toString()} mARIO (~${formatUnits(mario.toString(), ARIO_DECIMALS)} ARIO)`;
 }
 var MARIO_PAYMENT_NOTE = "Payment is mARIO from this identity's Solana wallet, charged on-chain by the ar.io registry program \u2014 NOT through TOON ILP payment channels. Fund this wallet with `rig fund --chain solana` (or send $ARIO to the Solana address above).";
+var DVM_PAYMENT_NOTE = "Brokered buy (--via): the DVM pays the mARIO name price from ITS Solana wallet via the kind:5095 job; this wallet needs only dust SOL to spawn the ANT it owns. On the paid path the job fee is enforced by the connector payment proxy in front of the DVM; when --via targets the DVM backend directly the job payment is STUBBED (dev/e2e only). The ArNS purchase itself is real either way, and the name is owned by YOUR ANT from inception.";
+var MIN_ARIO_SDK_VERSION = "4.0.3";
 var ArnsSdkUnavailableError = class extends Error {
-  constructor(cause) {
+  constructor(cause, module = "@ar.io/sdk") {
     super(
-      "`rig name` needs the optional `@ar.io/sdk` dependency, which is not installed. It is intentionally NOT a base `rig` dependency (keeps the install lean). Add it to use ArNS naming:\n  npm i @ar.io/sdk    # or: pnpm add @ar.io/sdk\nthen re-run your `rig name` command." + (cause instanceof Error ? `
+      `\`rig name\` needs the optional \`${module}\` dependency, which is not installed. It is intentionally NOT a base \`rig\` dependency (keeps the install lean). Add it to use ArNS naming:
+  npm i @ar.io/sdk@^${MIN_ARIO_SDK_VERSION}    # or: pnpm add @ar.io/sdk@^${MIN_ARIO_SDK_VERSION}
+(\`@solana/kit\` installs alongside it) then re-run your \`rig name\` command.` + (cause instanceof Error ? `
 (underlying error: ${cause.message})` : "")
     );
     this.name = "ArnsSdkUnavailableError";
   }
 };
-var ARIO_MAINNET_PROCESS_ID = "qNvAoz0TgcH7DMg8BCVn8jF32QH5L6T29VjHxhHqqGE";
+var ArnsSdkIncompatibleError = class extends Error {
+  constructor(detail) {
+    super(
+      `the installed @ar.io/sdk is incompatible with \`rig name\`: ${detail}.
+\`rig name\` requires @ar.io/sdk >= ${MIN_ARIO_SDK_VERSION} (the Solana-native release driven via a \`@solana/kit\` rpc + signer). Upgrade with:
+  npm i @ar.io/sdk@latest    # or: pnpm add @ar.io/sdk@latest`
+    );
+    this.name = "ArnsSdkIncompatibleError";
+  }
+};
+var SOLANA_MAINNET_RPC_URL = "https://api.mainnet-beta.solana.com";
+var SOLANA_DEVNET_RPC_URL = "https://api.devnet.solana.com";
 var defaultLoadArns = async (options) => {
-  const specifier = "@ar.io/sdk";
+  const sdkSpecifier = "@ar.io/sdk";
   let mod;
   try {
-    mod = await import(specifier);
+    mod = await import(sdkSpecifier);
   } catch (err) {
     throw new ArnsSdkUnavailableError(err);
   }
-  if (!mod.ARIO?.init || !mod.ANT?.init) {
-    throw new ArnsSdkUnavailableError(
-      new Error("the installed @ar.io/sdk does not expose ARIO.init / ANT.init")
-    );
-  }
-  const processId = options.processId ?? (options.network === "devnet" ? mod.ARIO_DEVNET_PROCESS_ID ?? "" : options.network === "testnet" ? mod.ARIO_TESTNET_PROCESS_ID ?? "" : mod.ARIO_MAINNET_PROCESS_ID ?? ARIO_MAINNET_PROCESS_ID);
-  if (!processId) {
-    throw new ArnsSdkUnavailableError(
-      new Error(
-        `the installed @ar.io/sdk exposes no ${options.network} registry process id \u2014 pass --process-id explicitly`
-      )
+  const kitSpecifier = "@solana/kit";
+  let kit;
+  try {
+    kit = await import(kitSpecifier);
+  } catch (err) {
+    throw new ArnsSdkUnavailableError(err, "@solana/kit");
+  }
+  const arioInit = mod.ARIO?.init;
+  const antInit = mod.ANT?.init;
+  if (!arioInit || !antInit) {
+    throw new ArnsSdkIncompatibleError("it exposes no ARIO.init / ANT.init");
+  }
+  const {
+    createSolanaRpc,
+    createSolanaRpcSubscriptions,
+    createKeyPairSignerFromBytes
+  } = kit;
+  if (!createSolanaRpc || !createSolanaRpcSubscriptions || !createKeyPairSignerFromBytes) {
+    throw new ArnsSdkIncompatibleError(
+      "the resolved @solana/kit exposes no createSolanaRpc / createSolanaRpcSubscriptions / createKeyPairSignerFromBytes"
     );
   }
-  if (!mod.SolanaSigner) {
-    throw new ArnsSdkUnavailableError(
-      new Error(
-        "the installed @ar.io/sdk exposes no SolanaSigner \u2014 this build predates ar.io's Solana migration; upgrade @ar.io/sdk"
-      )
+  const rpcUrl = options.network === "devnet" ? mod.DEVNET_RPC_URL ?? SOLANA_DEVNET_RPC_URL : mod.DEFAULT_SOLANA_RPC_URL ?? mod.MAINNET_RPC_URL ?? SOLANA_MAINNET_RPC_URL;
+  const devnetIds = options.network === "devnet" ? mod.DEVNET_PROGRAM_IDS : void 0;
+  if (options.network === "devnet" && devnetIds === void 0) {
+    throw new ArnsSdkIncompatibleError(
+      "it exposes no DEVNET_PROGRAM_IDS \u2014 devnet targeting needs the SDK's staging program ids"
     );
   }
-  const signer = new mod.SolanaSigner(options.solanaSecretKey);
-  const ario = mod.ARIO.init({ process: processId, signer });
-  const antInit = mod.ANT.init;
+  const antProgramId = devnetIds?.ant;
+  const programOverrides = {
+    ...devnetIds?.core !== void 0 ? { coreProgramId: devnetIds.core } : {},
+    ...devnetIds?.gar !== void 0 ? { garProgramId: devnetIds.gar } : {},
+    ...devnetIds?.arns !== void 0 ? { arnsProgramId: devnetIds.arns } : {},
+    ...antProgramId !== void 0 ? { antProgramId } : {},
+    // --process-id / RIG_ARIO_PROCESS_ID: explicit ArNS registry program
+    // override (wins over the cluster default).
+    ...options.processId !== void 0 ? { arnsProgramId: options.processId } : {}
+  };
+  const rpc = createSolanaRpc(rpcUrl);
+  const writeExtras = options.mode === "write" ? {
+    signer: await createKeyPairSignerFromBytes(options.solanaSecretKey),
+    rpcSubscriptions: createSolanaRpcSubscriptions(
+      rpcUrl.replace(/^http/, "ws")
+    )
+  } : {};
+  const ario = arioInit({ rpc, ...writeExtras, ...programOverrides });
   return {
     getTokenCost: async (args) => BigInt(String(await ario.getTokenCost(args))),
-    buyRecord: async (args) => await ario.buyRecord(args),
-    getArNSRecord: async (args) => await ario.getArNSRecord(args),
+    buyRecord: async (args) => {
+      if (typeof ario.buyRecord !== "function") {
+        throw new ArnsSdkIncompatibleError(
+          "the signed ARIO client exposes no buyRecord"
+        );
+      }
+      return await ario.buyRecord(args);
+    },
+    spawnAnt: async (args) => {
+      const spawn2 = mod.ANT?.spawn;
+      if (typeof spawn2 !== "function") {
+        throw new ArnsSdkIncompatibleError("it exposes no ANT.spawn");
+      }
+      if (options.mode !== "write") {
+        throw new ArnsSdkIncompatibleError(
+          "ANT.spawn requires the write-mode SDK (a signer) \u2014 this client was built signerless"
+        );
+      }
+      const result = await spawn2({
+        rpc,
+        ...writeExtras,
+        state: { name: args.name },
+        ...antProgramId !== void 0 ? { antProgramId } : {}
+      });
+      return { processId: result.processId, signature: result.signature };
+    },
+    buildSetRecordTransaction: async (args) => {
+      if (options.mode !== "write") {
+        throw new ArnsSdkIncompatibleError(
+          "buildSetRecordTransaction requires the write-mode SDK (a client partial-signature) \u2014 this client was built signerless"
+        );
+      }
+      const contractsSpecifier = "@ar.io/solana-contracts/ant";
+      let contracts;
+      try {
+        contracts = await import(contractsSpecifier);
+      } catch (err) {
+        throw new ArnsSdkUnavailableError(err, "@ar.io/solana-contracts");
+      }
+      const getSetRecordInstructionAsync = contracts.getSetRecordInstructionAsync;
+      const getAntRecordPDA = mod.getAntRecordPDA;
+      const {
+        createKeyPairFromBytes,
+        createNoopSigner,
+        address: toAddr,
+        blockhash: toBlockhash,
+        createTransactionMessage,
+        setTransactionMessageFeePayer,
+        setTransactionMessageLifetimeUsingBlockhash,
+        appendTransactionMessageInstructions,
+        compileTransaction,
+        partiallySignTransaction,
+        getBase64EncodedWireTransaction
+      } = kit;
+      if (!getSetRecordInstructionAsync || !getAntRecordPDA || !createKeyPairFromBytes || !createNoopSigner || !toAddr || !toBlockhash || !createTransactionMessage || !setTransactionMessageFeePayer || !setTransactionMessageLifetimeUsingBlockhash || !appendTransactionMessageInstructions || !compileTransaction || !partiallySignTransaction || !getBase64EncodedWireTransaction) {
+        throw new ArnsSdkIncompatibleError(
+          "the installed @ar.io/sdk / @ar.io/solana-contracts / @solana/kit do not expose the record-set transaction builder surface"
+        );
+      }
+      const asset = toAddr(args.antProcessId);
+      const antProgram = antProgramId !== void 0 ? toAddr(antProgramId) : void 0;
+      const [recordPda] = await getAntRecordPDA(
+        asset,
+        args.undername,
+        antProgram
+      );
+      const ix = await getSetRecordInstructionAsync(
+        {
+          asset,
+          record: recordPda,
+          caller: createNoopSigner(toAddr(options.solanaPublicKey)),
+          undername: args.undername,
+          target: args.transactionId,
+          targetProtocol: 0,
+          ttlSeconds: args.ttlSeconds,
+          priority: null,
+          recordOwner: null
+        },
+        antProgram !== void 0 ? { programAddress: antProgram } : void 0
+      );
+      let message = createTransactionMessage({ version: 0 });
+      message = setTransactionMessageFeePayer(toAddr(args.feePayer), message);
+      message = setTransactionMessageLifetimeUsingBlockhash(
+        {
+          blockhash: toBlockhash(args.recentBlockhash),
+          lastValidBlockHeight: 0n
+        },
+        message
+      );
+      message = appendTransactionMessageInstructions([ix], message);
+      const keyPair = await createKeyPairFromBytes(options.solanaSecretKey);
+      const signed = await partiallySignTransaction(
+        [keyPair],
+        compileTransaction(message)
+      );
+      return getBase64EncodedWireTransaction(signed);
+    },
+    getArNSRecord: async (args) => {
+      let raw;
+      try {
+        raw = await ario.getArNSRecord(args);
+      } catch (err) {
+        if (err instanceof Error && /not found/i.test(err.message)) return null;
+        throw err;
+      }
+      return {
+        processId: raw.processId ?? null,
+        type: raw.type ?? null,
+        ...raw.startTimestamp !== void 0 ? { startTimestamp: raw.startTimestamp * 1e3 } : {},
+        ...raw.endTimestamp !== void 0 ? { endTimestamp: raw.endTimestamp * 1e3 } : {},
+        ...raw.undernameLimit !== void 0 ? { undernameLimit: raw.undernameLimit } : {}
+      };
+    },
     ant: async (pid) => {
-      const ant = antInit({ processId: pid, signer });
+      const ant = await antInit({
+        processId: pid,
+        rpc,
+        ...writeExtras,
+        ...antProgramId !== void 0 ? { antProgramId } : {}
+      });
       return {
-        getRecords: () => ant.getRecords(),
-        setBaseNameRecord: (a) => ant.setBaseNameRecord(a),
-        setUndernameRecord: (a) => ant.setUndernameRecord(a)
+        getRecords: async () => {
+          const records = await ant.getRecords();
+          const targets = {};
+          for (const [undername, record] of Object.entries(records)) {
+            targets[undername] = {
+              transactionId: record.transactionId,
+              ttlSeconds: record.ttlSeconds
+            };
+          }
+          return targets;
+        },
+        setBaseNameRecord: async (a) => {
+          if (typeof ant.setBaseNameRecord !== "function") {
+            throw new ArnsSdkIncompatibleError(
+              "the signed ANT client exposes no setBaseNameRecord"
+            );
+          }
+          return ant.setBaseNameRecord(a);
+        },
+        setUndernameRecord: async (a) => {
+          if (typeof ant.setUndernameRecord !== "function") {
+            throw new ArnsSdkIncompatibleError(
+              "the signed ANT client exposes no setUndernameRecord"
+            );
+          }
+          return ant.setUndernameRecord(a);
+        }
       };
     }
   };
 };
+var ARNS_BUY_JOB_KIND = 5095;
+var DvmBuyJobError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "DvmBuyJobError";
+  }
+};
+var defaultSubmitDvmBuyJob = async (request) => {
+  const { finalizeEvent } = await import("nostr-tools/pure");
+  const event = finalizeEvent(
+    {
+      kind: ARNS_BUY_JOB_KIND,
+      created_at: Math.floor(Date.now() / 1e3),
+      content: "",
+      tags: [
+        ["param", "name", request.name],
+        ["param", "type", request.type],
+        ...request.years !== null ? [["param", "years", String(request.years)]] : [],
+        ["param", "processId", request.processId]
+      ]
+    },
+    request.nostrSecretKey
+  );
+  const url = `${request.viaUrl.replace(/\/+$/, "")}/store`;
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ event })
+    });
+  } catch (err) {
+    throw new DvmBuyJobError(
+      `could not reach the DVM at ${url}: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  let body;
+  try {
+    body = await response.json();
+  } catch {
+    throw new DvmBuyJobError(
+      `the DVM at ${url} returned a non-JSON response (HTTP ${response.status})`
+    );
+  }
+  if (!response.ok || body.accept !== true) {
+    throw new DvmBuyJobError(
+      `the DVM rejected the kind:${ARNS_BUY_JOB_KIND} buy job (HTTP ${response.status}${body.code ? `, ${body.code}` : ""})${body.message ? `: ${body.message}` : ""}`
+    );
+  }
+  const registryTxId = body.result?.registryTxId;
+  if (typeof registryTxId !== "string" || registryTxId.length === 0) {
+    throw new DvmBuyJobError(
+      `the DVM accepted the job but returned no registryTxId \u2014 response: ` + JSON.stringify(body.result ?? null)
+    );
+  }
+  return {
+    registryTxId,
+    quotedMario: typeof body.result?.quotedMario === "string" ? body.result.quotedMario : null,
+    syncAttributesTxId: typeof body.result?.syncAttributesTxId === "string" ? body.result.syncAttributesTxId : null
+  };
+};
+var GAS_STATION_JOB_KIND = 5096;
+var GasStationJobError = class extends Error {
+  constructor(reason, message) {
+    super(message);
+    this.reason = reason;
+    this.name = "GasStationJobError";
+  }
+  reason;
+};
+async function postGasStationJob(viaUrl, params, nostrSecretKey) {
+  const { finalizeEvent } = await import("nostr-tools/pure");
+  const event = finalizeEvent(
+    {
+      kind: GAS_STATION_JOB_KIND,
+      created_at: Math.floor(Date.now() / 1e3),
+      content: "",
+      tags: params.map(([k, v]) => ["param", k, v])
+    },
+    nostrSecretKey
+  );
+  const url = `${viaUrl.replace(/\/+$/, "")}/store`;
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ event })
+    });
+  } catch (err) {
+    throw new GasStationJobError(
+      "unreachable",
+      `could not reach the DVM at ${url}: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  let body;
+  try {
+    body = await response.json();
+  } catch {
+    throw new GasStationJobError(
+      "bad_response",
+      `the DVM at ${url} returned a non-JSON response (HTTP ${response.status})`
+    );
+  }
+  if (!response.ok || body.accept !== true || !body.result) {
+    throw new GasStationJobError(
+      String(body.code ?? "rejected"),
+      `the DVM rejected the kind:${GAS_STATION_JOB_KIND} job (HTTP ${response.status}${body.code ? `, ${body.code}` : ""})${body.message ? `: ${body.message}` : ""}`
+    );
+  }
+  const result = body.result;
+  if (result["status"] === "failed") {
+    throw new GasStationJobError(
+      String(result["reason"] ?? "failed"),
+      `gas-station job failed: ${String(result["reason"] ?? "unknown")} \u2014 ${String(result["detail"] ?? "")}`
+    );
+  }
+  return result;
+}
+var defaultGasStationClient = {
+  quote: async (args) => {
+    const result = await postGasStationJob(
+      args.viaUrl,
+      [
+        ["phase", "quote"],
+        ...args.transaction !== void 0 ? [["transaction", args.transaction]] : []
+      ],
+      args.nostrSecretKey
+    );
+    const { quoteId, feePayer, maxLamports, recentBlockhash, expiresAt } = result;
+    if (typeof quoteId !== "string" || typeof feePayer !== "string" || typeof maxLamports !== "string" || typeof recentBlockhash !== "string" || typeof expiresAt !== "number") {
+      throw new GasStationJobError(
+        "bad_response",
+        `the DVM quote is missing fields: ${JSON.stringify(result)}`
+      );
+    }
+    return { quoteId, feePayer, maxLamports, recentBlockhash, expiresAt };
+  },
+  execute: async (args) => {
+    const result = await postGasStationJob(
+      args.viaUrl,
+      [
+        ["phase", "execute"],
+        ["transaction", args.transaction],
+        ["quoteId", args.quoteId],
+        ["idempotencyKey", args.idempotencyKey]
+      ],
+      args.nostrSecretKey
+    );
+    const signature = result["signature"];
+    if (typeof signature !== "string" || signature.length === 0) {
+      throw new GasStationJobError(
+        "bad_response",
+        `the DVM execute result carries no signature: ${JSON.stringify(result)}`
+      );
+    }
+    return {
+      signature,
+      slot: typeof result["slot"] === "string" ? result["slot"] : null,
+      feeLamportsActual: typeof result["feeLamportsActual"] === "string" ? result["feeLamportsActual"] : null,
+      ...result["replayed"] === true ? { replayed: true } : {}
+    };
+  }
+};
 var NAME_USAGE = `Usage: rig name <buy|set|status> <name> [options]
 
 ArNS naming for Arweave-served artifacts. A name registered on the ar.io
@@ -5263,14 +5617,21 @@ mnemonic that pays for pushes (derived at m/44'/501'/0'/0'). Fund it with
 registry program \u2014 NOT through TOON ILP payment channels.
 
 Commands:
-  name buy <name> [--years n | --permabuy]
+  name buy <name> [--years n | --permabuy] [--via <dvm-url>]
                        quote (mARIO) \u2192 confirm \u2192 register. The spawned ANT is
                        owned by this identity's Solana key. Default: 1-year
                        lease. PAID \u2014 spends mARIO from the Solana wallet.
-  name set <name> <txId> [--undername <sub>] [--ttl <seconds>]
+                       With --via: BROKERED \u2014 this identity spawns and owns
+                       the ANT (dust SOL only), then a store DVM executes the
+                       kind:5095 buy job and pays the mARIO from ITS wallet;
+                       the name is owned by your ANT from inception.
+  name set <name> <txId> [--undername <sub>] [--ttl <seconds>] [--via <dvm-url>]
                        point the name (or an undername) at an Arweave txId
                        (typically a deployed path manifest). Signs an ANT
-                       record update with the Solana key.
+                       record update with the Solana key. With --via: the
+                       gas-station path (kind:5096) \u2014 you author and
+                       partial-sign, the DVM co-signs as fee payer and pays
+                       the lamports; needs ZERO SOL in this wallet.
   name status <name>   FREE: registry record (lease/permabuy, expiry), ANT
                        process id, current target txId(s), TTL, undernames.
 
@@ -5281,11 +5642,18 @@ Options:
   --undername <sub>    target the undername <sub>_<name> instead of the base
                        name (set)
   --ttl <seconds>      record TTL in seconds (set; default 3600)
-  --network <net>      registry: mainnet | devnet | testnet (default mainnet;
-                       or RIG_ARIO_NETWORK). Non-mainnet gateway resolution is
+  --network <net>      cluster: mainnet | devnet (default mainnet; or
+                       RIG_ARIO_NETWORK). ar.io has no Solana-testnet
+                       deployment. Non-mainnet gateway resolution is
                        unverified.
-  --process-id <id>    explicit registry process id (overrides --network; or
-                       RIG_ARIO_PROCESS_ID)
+  --process-id <id>    explicit ArNS registry program id \u2014 a Solana program
+                       address (overrides --network; or RIG_ARIO_PROCESS_ID)
+  --via <dvm-url>      buy only: broker the purchase through a store DVM's
+                       kind:5095 job endpoint (or RIG_ARNS_DVM_URL). The DVM
+                       pays the mARIO; you own the name via your spawned ANT.
+                       Direct backend targeting stubs the job payment
+                       (dev/e2e) \u2014 the paid path runs the same job through
+                       the connector payment proxy.
   --yes                skip the confirmation (required when not a TTY) for
                        buy/set
   --json               machine-readable envelope; for buy/set without --yes it
@@ -5293,8 +5661,8 @@ Options:
   -h, --help           show this help`;
 var DEFAULT_TTL_SECONDS = 3600;
 var DEFAULT_LEASE_YEARS = 1;
-var NETWORKS = ["mainnet", "devnet", "testnet"];
-async function resolveNameContext(deps, network, processId) {
+var NETWORKS = ["mainnet", "devnet"];
+async function resolveNameContext(deps, network, processId, mode) {
   const { io: io2, env } = deps;
   const resolved = await resolveIdentity({
     env,
@@ -5318,12 +5686,17 @@ async function resolveNameContext(deps, network, processId) {
     );
   }
   const sdk = await (deps.loadArns ?? defaultLoadArns)({
+    mode,
     solanaSecretKey: derived.solana.secretKey,
     solanaPublicKey: solanaAddress,
     network,
     ...processId !== void 0 ? { processId } : {}
   });
-  return { identity, solanaAddress, network, processId, sdk };
+  const nostrSecretKey = client.deriveNostrKeyFromMnemonic(
+    resolved.mnemonic,
+    resolved.accountIndex
+  ).secretKey;
+  return { identity, solanaAddress, network, processId, sdk, nostrSecretKey };
 }
 function parseNameFlags(args, env) {
   const { values, positionals } = parseArgs13({
@@ -5336,19 +5709,31 @@ function parseNameFlags(args, env) {
       ttl: { type: "string" },
       network: { type: "string" },
       "process-id": { type: "string" },
+      via: { type: "string" },
       yes: { type: "boolean", default: false },
       json: { type: "boolean", default: false },
       help: { type: "boolean", short: "h", default: false }
     }
   });
   if (values.help) {
-    return { positionals: ["--help"], flags: { permabuy: false, ttl: 0, network: "mainnet", yes: false, json: false } };
+    return {
+      positionals: ["--help"],
+      flags: {
+        permabuy: false,
+        ttl: 0,
+        network: "mainnet",
+        yes: false,
+        json: false
+      }
+    };
   }
   let years;
   if (values.years !== void 0) {
     years = Number(values.years);
     if (!Number.isInteger(years) || years <= 0) {
-      throw new Error(`--years must be a positive integer, got ${JSON.stringify(values.years)}`);
+      throw new Error(
+        `--years must be a positive integer, got ${JSON.stringify(values.years)}`
+      );
     }
   }
   if (years !== void 0 && values.permabuy) {
@@ -5358,14 +5743,28 @@ function parseNameFlags(args, env) {
   if (values.ttl !== void 0) {
     ttl = Number(values.ttl);
     if (!Number.isInteger(ttl) || ttl <= 0) {
-      throw new Error(`--ttl must be a positive integer number of seconds, got ${JSON.stringify(values.ttl)}`);
+      throw new Error(
+        `--ttl must be a positive integer number of seconds, got ${JSON.stringify(values.ttl)}`
+      );
     }
   }
   const networkRaw = values.network ?? env["RIG_ARIO_NETWORK"] ?? "mainnet";
   if (!NETWORKS.includes(networkRaw)) {
-    throw new Error(`--network must be one of ${NETWORKS.join(" | ")}, got ${JSON.stringify(networkRaw)}`);
+    throw new Error(
+      `--network must be one of ${NETWORKS.join(" | ")}, got ${JSON.stringify(networkRaw)}`
+    );
   }
   const processId = values["process-id"] ?? env["RIG_ARIO_PROCESS_ID"];
+  const viaRaw = values.via ?? env["RIG_ARNS_DVM_URL"];
+  let via;
+  if (viaRaw !== void 0) {
+    if (!/^https?:\/\/.+/.test(viaRaw)) {
+      throw new Error(
+        `--via must be an http(s) DVM endpoint URL, got ${JSON.stringify(viaRaw)}`
+      );
+    }
+    via = viaRaw;
+  }
   return {
     positionals,
     flags: {
@@ -5375,6 +5774,7 @@ function parseNameFlags(args, env) {
       ttl,
       network: networkRaw,
       ...processId !== void 0 ? { processId } : {},
+      ...via !== void 0 ? { via } : {},
       yes: values.yes ?? false,
       json: values.json ?? false
     }
@@ -5384,7 +5784,12 @@ async function runBuy(name, flags, deps) {
   const { io: io2 } = deps;
   const type = flags.permabuy ? "permabuy" : "lease";
   const years = type === "lease" ? flags.years ?? DEFAULT_LEASE_YEARS : null;
-  const ctx = await resolveNameContext(deps, flags.network, flags.processId);
+  const ctx = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "read"
+  );
   const mario = await ctx.sdk.getTokenCost({
     intent: "Buy-Name",
     name,
@@ -5395,6 +5800,8 @@ async function runBuy(name, flags, deps) {
     mARIO: mario.toString(),
     ARIO: formatUnits(mario.toString(), ARIO_DECIMALS)
   };
+  const via = flags.via ?? null;
+  const paymentNote = via === null ? MARIO_PAYMENT_NOTE : DVM_PAYMENT_NOTE;
   const buildJson = (executed, extra = {}) => ({
     command: "name",
     action: "buy",
@@ -5403,46 +5810,100 @@ async function runBuy(name, flags, deps) {
     years,
     network: ctx.network,
     processId: ctx.processId ?? null,
+    via,
     identity: ctx.identity,
     solanaAddress: ctx.solanaAddress,
     quote,
-    payment: MARIO_PAYMENT_NOTE,
+    payment: paymentNote,
     executed,
     ...extra
   });
   if (!flags.json) {
     io2.out(
-      `Buy ArNS name "${name}" \u2014 ${type}` + (years !== null ? ` (${years} year${years === 1 ? "" : "s"})` : "") + ` on ${ctx.network}`
+      `Buy ArNS name "${name}" \u2014 ${type}` + (years !== null ? ` (${years} year${years === 1 ? "" : "s"})` : "") + ` on ${ctx.network}` + (via !== null ? ` \u2014 brokered via DVM ${via}` : "")
+    );
+    io2.out(
+      via === null ? `  Cost: ${renderMario(mario)}` : `  Name cost (paid by the DVM): ${renderMario(mario)}`
     );
-    io2.out(`  Cost: ${renderMario(mario)}`);
     io2.out(`  Solana wallet: ${ctx.solanaAddress}`);
-    io2.out(`  ${MARIO_PAYMENT_NOTE}`);
+    io2.out(`  ${paymentNote}`);
     io2.out(renderIdentityLine(ctx.identity));
   }
   if (!flags.yes) {
     if (flags.json) {
       io2.emitJson(
         buildJson(false, {
-          hint: "estimate only \u2014 re-run with --yes to buy (spends mARIO on Solana, non-refundable)"
+          hint: via === null ? "estimate only \u2014 re-run with --yes to buy (spends mARIO on Solana, non-refundable)" : "estimate only \u2014 re-run with --yes to spawn your ANT and submit the kind:5095 buy job to the DVM"
         })
       );
       return 0;
     }
     if (!io2.isInteractive) {
       io2.err(
-        "refusing to spend mARIO without confirmation in a non-interactive session \u2014 re-run with --yes (or use --json for a pure estimate)"
+        via === null ? "refusing to spend mARIO without confirmation in a non-interactive session \u2014 re-run with --yes (or use --json for a pure estimate)" : "refusing to spawn an ANT and submit a paid DVM job without confirmation in a non-interactive session \u2014 re-run with --yes (or use --json for a pure estimate)"
       );
       return 1;
     }
     const proceed = await io2.confirm(
-      `Proceed \u2014 buy "${name}" for ${renderMario(mario)} from your Solana wallet? [y/N] `
+      via === null ? `Proceed \u2014 buy "${name}" for ${renderMario(mario)} from your Solana wallet? [y/N] ` : `Proceed \u2014 spawn your ANT and have the DVM at ${via} buy "${name}" for ${renderMario(mario)} from ITS wallet? [y/N] `
     );
     if (!proceed) {
       io2.err("aborted \u2014 nothing was bought or paid.");
       return 1;
     }
   }
-  const receipt = await ctx.sdk.buyRecord({
+  const signed = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "write"
+  );
+  if (via !== null) {
+    const spawn2 = await signed.sdk.spawnAnt({ name });
+    if (!flags.json) {
+      io2.out(`Spawned ANT ${spawn2.processId} (tx ${spawn2.signature})`);
+    }
+    const submit = deps.submitDvmBuyJob ?? defaultSubmitDvmBuyJob;
+    const receipt2 = await submit({
+      viaUrl: via,
+      name,
+      type,
+      years,
+      processId: spawn2.processId,
+      nostrSecretKey: signed.nostrSecretKey
+    });
+    const result2 = {
+      registryTxId: receipt2.registryTxId,
+      antProcessId: spawn2.processId,
+      syncAttributesTxId: receipt2.syncAttributesTxId,
+      dvmQuotedMario: receipt2.quotedMario
+    };
+    if (flags.json) {
+      io2.emitJson(
+        buildJson(true, {
+          spawn: { processId: spawn2.processId, signature: spawn2.signature },
+          result: result2
+        })
+      );
+    } else {
+      io2.out(
+        `Registered "${name}" via the DVM \u2014 registry tx ${result2.registryTxId}`
+      );
+      io2.out(`  ANT process (owned by YOU): ${spawn2.processId}`);
+      if (receipt2.syncAttributesTxId) {
+        io2.out(`  Trait sync: ${receipt2.syncAttributesTxId}`);
+      } else {
+        io2.out(
+          "  Trait sync: not run by the DVM (holder-gated on this deployment) \u2014 as the ANT holder you can reconcile with syncAttributes later; resolution works regardless."
+        );
+      }
+      io2.out(
+        `Point it at content with \`rig name set ${name} <txId>\`, then it resolves at https://${name}.<gateway>/`
+      );
+    }
+    return 0;
+  }
+  const receipt = await signed.sdk.buyRecord({
     name,
     type,
     ...years !== null ? { years } : {}
@@ -5464,7 +5925,12 @@ async function runBuy(name, flags, deps) {
 }
 async function runSet(name, txId, flags, deps) {
   const { io: io2 } = deps;
-  const ctx = await resolveNameContext(deps, flags.network, flags.processId);
+  const ctx = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "read"
+  );
   const record = await ctx.sdk.getArNSRecord({ name });
   if (!record || !record.processId) {
     throw new Error(
@@ -5473,6 +5939,7 @@ async function runSet(name, txId, flags, deps) {
   }
   const antProcessId = record.processId;
   const undername = flags.undername ?? null;
+  const via = flags.via ?? null;
   const buildJson = (executed, extra = {}) => ({
     command: "name",
     action: "set",
@@ -5482,6 +5949,7 @@ async function runSet(name, txId, flags, deps) {
     ttl: flags.ttl,
     network: ctx.network,
     processId: ctx.processId ?? null,
+    via,
     identity: ctx.identity,
     solanaAddress: ctx.solanaAddress,
     antProcessId,
@@ -5490,16 +5958,23 @@ async function runSet(name, txId, flags, deps) {
   });
   const targetLabel = undername ? `undername "${undername}_${name}"` : `base name "${name}"`;
   if (!flags.json) {
-    io2.out(`Set ${targetLabel} \u2192 txId ${txId} (ttl ${flags.ttl}s) on ${ctx.network}`);
+    io2.out(
+      `Set ${targetLabel} \u2192 txId ${txId} (ttl ${flags.ttl}s) on ${ctx.network}` + (via !== null ? ` \u2014 gas paid by the DVM at ${via} (kind:5096)` : "")
+    );
     io2.out(`  ANT process: ${antProcessId}`);
     io2.out(`  Signed by the identity's Solana key (${ctx.solanaAddress}).`);
+    if (via !== null) {
+      io2.out(
+        "  Gas station: you author + partial-sign the record update; the DVM co-signs as fee payer and pays the lamports (toon-meta#163). Direct backend targeting stubs the job payment (dev/e2e)."
+      );
+    }
     io2.out(renderIdentityLine(ctx.identity));
   }
   if (!flags.yes) {
     if (flags.json) {
       io2.emitJson(
         buildJson(false, {
-          hint: "estimate only \u2014 re-run with --yes to write the ANT record"
+          hint: via === null ? "estimate only \u2014 re-run with --yes to write the ANT record" : "estimate only \u2014 re-run with --yes to quote the gas-station and write the ANT record (DVM pays the gas)"
         })
       );
       return 0;
@@ -5511,28 +5986,90 @@ async function runSet(name, txId, flags, deps) {
       return 1;
     }
     const proceed = await io2.confirm(
-      `Proceed \u2014 point ${targetLabel} at ${txId}? [y/N] `
+      `Proceed \u2014 point ${targetLabel} at ${txId}?` + (via !== null ? " (the DVM pays the gas)" : "") + " [y/N] "
     );
     if (!proceed) {
       io2.err("aborted \u2014 the ANT record was not changed.");
       return 1;
     }
   }
-  const ant = await ctx.sdk.ant(antProcessId);
-  const receipt = undername ? await ant.setUndernameRecord({ undername, transactionId: txId, ttlSeconds: flags.ttl }) : await ant.setBaseNameRecord({ transactionId: txId, ttlSeconds: flags.ttl });
+  const signed = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "write"
+  );
+  if (via !== null) {
+    const gas = deps.gasStation ?? defaultGasStationClient;
+    const quote = await gas.quote({
+      viaUrl: via,
+      nostrSecretKey: signed.nostrSecretKey
+    });
+    const wireTx = await signed.sdk.buildSetRecordTransaction({
+      antProcessId,
+      undername: undername ?? "@",
+      transactionId: txId,
+      ttlSeconds: flags.ttl,
+      feePayer: quote.feePayer,
+      recentBlockhash: quote.recentBlockhash
+    });
+    const executed = await gas.execute({
+      viaUrl: via,
+      transaction: wireTx,
+      quoteId: quote.quoteId,
+      idempotencyKey: randomUUID(),
+      nostrSecretKey: signed.nostrSecretKey
+    });
+    const gasStation = {
+      quoteId: quote.quoteId,
+      feePayer: quote.feePayer,
+      maxLamports: quote.maxLamports,
+      expiresAt: quote.expiresAt,
+      feeLamportsActual: executed.feeLamportsActual
+    };
+    const result2 = { messageId: executed.signature };
+    if (flags.json) {
+      io2.emitJson(buildJson(true, { gasStation, result: result2 }));
+    } else {
+      io2.out(
+        `Updated \u2014 record-set tx ${executed.signature} (gas paid by ${quote.feePayer})`
+      );
+      const host = undername ? `${undername}_${name}` : name;
+      io2.out(
+        `  Resolves at https://${host}.<gateway>/ (allow for gateway cache/TTL).`
+      );
+    }
+    return 0;
+  }
+  const ant = await signed.sdk.ant(antProcessId);
+  const receipt = undername ? await ant.setUndernameRecord({
+    undername,
+    transactionId: txId,
+    ttlSeconds: flags.ttl
+  }) : await ant.setBaseNameRecord({
+    transactionId: txId,
+    ttlSeconds: flags.ttl
+  });
   const result = { messageId: receipt.id };
   if (flags.json) {
     io2.emitJson(buildJson(true, { result }));
   } else {
     io2.out(`Updated \u2014 ANT message ${result.messageId}`);
     const host = undername ? `${undername}_${name}` : name;
-    io2.out(`  Resolves at https://${host}.<gateway>/ (allow for gateway cache/TTL).`);
+    io2.out(
+      `  Resolves at https://${host}.<gateway>/ (allow for gateway cache/TTL).`
+    );
   }
   return 0;
 }
 async function runStatus(name, flags, deps) {
   const { io: io2 } = deps;
-  const ctx = await resolveNameContext(deps, flags.network, flags.processId);
+  const ctx = await resolveNameContext(
+    deps,
+    flags.network,
+    flags.processId,
+    "read"
+  );
   const record = await ctx.sdk.getArNSRecord({ name });
   let targets = null;
   if (record?.processId) {
@@ -5580,7 +6117,9 @@ async function runStatus(name, flags, deps) {
     io2.out("  Records:");
     for (const [under, target] of Object.entries(targets)) {
       const label = under === "@" ? "(base)" : `${under}_${name}`;
-      io2.out(`    ${label} \u2192 ${target.transactionId} (ttl ${target.ttlSeconds}s)`);
+      io2.out(
+        `    ${label} \u2192 ${target.transactionId} (ttl ${target.ttlSeconds}s)`
+      );
     }
   } else {
     io2.out("  Records: none set \u2014 point one with `rig name set`.");
@@ -5630,7 +6169,9 @@ async function runName(args, deps) {
     if (sub === "status") return await runStatus(name, flags, deps);
     const txId = positionals[1];
     if (txId === void 0) {
-      io2.err("`rig name set` needs a <txId> (the Arweave transaction to point at)");
+      io2.err(
+        "`rig name set` needs a <txId> (the Arweave transaction to point at)"
+      );
       io2.err(NAME_USAGE);
       return 2;
     }