@trustwallet/cli 0.10.0 → 0.11.0

package/dist/index.js

@@ -3111,9 +3111,12 @@ var require_commander = __commonJS({
 var dist_exports = {};
 __export(dist_exports, {
   ALERT_ERROR_CODES: () => ALERT_ERROR_CODES,
+  ALLOWED_OFFRAMP_PROVIDERS: () => ALLOWED_OFFRAMP_PROVIDERS,
   AUTOMATION_ERROR_CODES: () => AUTOMATION_ERROR_CODES,
   AlertError: () => AlertError,
   AutomationError: () => AutomationError,
+  BALANCE_ERROR_CODES: () => BALANCE_ERROR_CODES,
+  BalanceError: () => BalanceError,
   CELO_NATIVE_ADDRESS: () => CELO_NATIVE_ADDRESS,
   CHAINS: () => CHAINS,
   COMMON_ERROR_CODES: () => COMMON_ERROR_CODES,
@@ -3140,12 +3143,15 @@ __export(dist_exports, {
   WatchError: () => WatchError,
   X402Error: () => X402Error,
   X402_ERROR_CODES: () => X402_ERROR_CODES,
+  assertStrictPositiveAmount: () => assertStrictPositiveAmount,
   chainKeyToCoinType: () => chainKeyToCoinType,
   classifyApiError: () => classifyApiError,
   classifyStorageError: () => classifyStorageError,
   classifyWalletLoadError: () => classifyWalletLoadError,
   coinTypeToChainKey: () => coinTypeToChainKey,
   createTwakClient: () => createTwakClient,
+  fetchBalance: () => fetchBalance,
+  fetchBalances: () => fetchBalances,
   fiatToTokenAmount: () => fiatToTokenAmount,
   formatAmount: () => formatAmount,
   formatTokenId: () => formatTokenId,
@@ -3167,12 +3173,14 @@ __export(dist_exports, {
   parseAmount: () => parseAmount,
   parseHumanAmount: () => parseHumanAmount,
   parseTokenId: () => parseTokenId,
+  rankQuotesByBest: () => rankQuotesByBest,
   resolveAddressOrName: () => resolveAddressOrName,
   resolveName: () => resolveName,
   resolveToken: () => resolveToken,
   signRequest: () => signRequest,
   sortQueryParams: () => sortQueryParams,
   sortQueryParamsGoCompat: () => sortQueryParamsGoCompat,
+  toCamelCase: () => toCamelCase,
   tokenIdToChain: () => tokenIdToChain,
   withRetry: () => withRetry
 });
@@ -3397,10 +3405,10 @@ function sortQueryParamsGoCompat(query) {
 }
 function formatAmount(amount, decimals) {
   const value = BigInt(amount);
-  const divisor = BigInt(10 ** decimals);
+  const divisor = 10n ** BigInt(decimals);
   const integerPart = value / divisor;
   const fractionalPart = value % divisor;
-  if (fractionalPart === BigInt(0)) return integerPart.toString();
+  if (fractionalPart === 0n) return integerPart.toString();
   const fractionalStr = fractionalPart.toString().padStart(decimals, "0");
   const trimmedFractional = fractionalStr.replace(/0+$/, "");
   return `${integerPart}.${trimmedFractional}`;
@@ -3411,6 +3419,24 @@ function parseAmount(amount, decimals) {
   const combined = integerPart + paddedFractional;
   return BigInt(combined).toString();
 }
+function assertStrictPositiveAmount(amount, decimals) {
+  if (!DECIMAL_AMOUNT_RE.test(amount)) {
+    throw new Error(
+      `Amount must be a positive base-10 decimal string (no sign, no exponent). Got: ${amount}`
+    );
+  }
+  if (/^0+(?:\.0+)?$/.test(amount)) {
+    throw new Error("Amount must be greater than 0");
+  }
+  if (decimals !== void 0) {
+    const frac = amount.split(".")[1] ?? "";
+    if (frac.length > decimals) {
+      throw new Error(
+        `Amount has ${frac.length} fractional digits but the token has only ${decimals} decimals. Truncating excess precision would under-send and likely invalidate the order.`
+      );
+    }
+  }
+}
 function parseHumanAmount(amount, decimals) {
   const trimmed = amount.trim();
   if (trimmed.toLowerCase() === "all") return "all";
@@ -3421,10 +3447,24 @@ function parseHumanAmount(amount, decimals) {
 function fiatToTokenAmount(fiatAmount, priceUsd, decimals) {
   const stripped = fiatAmount.trim().replace(/^[$€£¥]/, "").trim();
   const usdValue = parseFloat(stripped);
-  if (isNaN(usdValue) || priceUsd <= 0) throw new Error(`Invalid fiat amount or price: ${fiatAmount}`);
+  if (isNaN(usdValue) || priceUsd <= 0)
+    throw new Error(`Invalid fiat amount or price: ${fiatAmount}`);
   const tokenAmount = usdValue / priceUsd;
   return parseAmount(tokenAmount.toFixed(decimals), decimals);
 }
+function toCamelCase(obj) {
+  if (Array.isArray(obj)) return obj.map(toCamelCase);
+  if (obj !== null && typeof obj === "object") {
+    const result = /* @__PURE__ */ Object.create(null);
+    for (const [key, value] of Object.entries(obj)) {
+      const camelKey = key.replace(/_([a-z])/g, (_2, char) => char.toUpperCase());
+      if (UNSAFE_KEYS.has(key) || UNSAFE_KEYS.has(camelKey)) continue;
+      result[camelKey] = toCamelCase(value);
+    }
+    return result;
+  }
+  return obj;
+}
 async function resolveName(name2) {
   if (!name2.includes(".")) return null;
   try {
@@ -3513,7 +3553,60 @@ async function withRetry(fn2, opts = {}) {
     }
   }
 }
-var import_crypto, NATIVE_TOKEN_ADDRESS, SOLANA_NATIVE_ADDRESS, CHAINS, COMMON_TOKENS, BSC_18_DECIMAL_TOKENS, NATIVE_SYMBOLS, TOKEN_DECIMALS, CELO_NATIVE_ADDRESS, TwakError, TwakApiError, TwakNetworkError, TwakValidationError, CommandError, COMMON_ERROR_CODES, FS_ERRNO_CODES, SWAP_ERROR_CODES, SwapError, TRANSFER_ERROR_CODES, TransferError, WALLET_ERROR_CODES, WalletError, QUERY_ERROR_CODES, QueryError, ALERT_ERROR_CODES, AlertError, ERC20_ERROR_CODES, Erc20Error, WATCH_ERROR_CODES, WatchError, AUTOMATION_ERROR_CODES, AutomationError, X402_ERROR_CODES, X402Error, NAMING_API, DEFAULT_GATEWAY_URL, DEFAULT_MARKET_URL, DEFAULT_TIMEOUT, TwakHttpClient;
+function rankQuotesByBest(quotes, getAmount) {
+  const valid = [];
+  for (const q3 of quotes) {
+    const raw = getAmount(q3);
+    if (raw === void 0) continue;
+    const n4 = parseFloat(raw);
+    if (!Number.isFinite(n4) || n4 <= 0) continue;
+    valid.push({ quote: q3, amount: n4 });
+  }
+  if (valid.length === 0) return [];
+  const best = Math.max(...valid.map((v5) => v5.amount));
+  return valid.map(({ quote, amount }) => {
+    const raw = (best - amount) / best * 100;
+    return { ...quote, vsBestPct: Math.round(raw * 100) / 100 };
+  }).sort((a3, b3) => a3.vsBestPct - b3.vsBestPct);
+}
+async function fetchBalances(httpClient, assets, currency = "USD") {
+  try {
+    const response = await withRetry(
+      () => httpClient.gateway("POST", "/v1/balances", {
+        currency,
+        addresses: assets.map(({ assetId, address }) => ({
+          asset_id: assetId,
+          address
+        }))
+      })
+    );
+    const parsed = toCamelCase(response);
+    if (!Array.isArray(parsed.balances)) {
+      throw new BalanceError("NETWORK_ERROR", "Could not fetch balances. Please try again later.");
+    }
+    return parsed.balances;
+  } catch (err) {
+    if (err instanceof BalanceError) throw err;
+    throw new BalanceError("NETWORK_ERROR", "Could not fetch balances. Please try again later.");
+  }
+}
+async function fetchBalance(httpClient, assetId, address, currency = "USD") {
+  try {
+    const params = new URLSearchParams({ asset_id: assetId, address, currency });
+    const response = await withRetry(
+      () => httpClient.gateway("GET", "/v1/balances", void 0, params.toString())
+    );
+    const parsed = toCamelCase(response);
+    if (!parsed.balance) {
+      throw new BalanceError("NETWORK_ERROR", "Could not fetch balance. Please try again later.");
+    }
+    return parsed.balance;
+  } catch (err) {
+    if (err instanceof BalanceError) throw err;
+    throw new BalanceError("NETWORK_ERROR", "Could not fetch balance. Please try again later.");
+  }
+}
+var import_crypto, NATIVE_TOKEN_ADDRESS, SOLANA_NATIVE_ADDRESS, CHAINS, COMMON_TOKENS, BSC_18_DECIMAL_TOKENS, NATIVE_SYMBOLS, TOKEN_DECIMALS, CELO_NATIVE_ADDRESS, TwakError, TwakApiError, TwakNetworkError, TwakValidationError, CommandError, COMMON_ERROR_CODES, FS_ERRNO_CODES, SWAP_ERROR_CODES, SwapError, TRANSFER_ERROR_CODES, TransferError, WALLET_ERROR_CODES, WalletError, QUERY_ERROR_CODES, QueryError, BALANCE_ERROR_CODES, BalanceError, ALERT_ERROR_CODES, AlertError, ERC20_ERROR_CODES, Erc20Error, WATCH_ERROR_CODES, WatchError, AUTOMATION_ERROR_CODES, AutomationError, X402_ERROR_CODES, X402Error, DECIMAL_AMOUNT_RE, UNSAFE_KEYS, NAMING_API, DEFAULT_GATEWAY_URL, DEFAULT_MARKET_URL, DEFAULT_TIMEOUT, DEFAULT_USER_AGENT, DEFAULT_X_ORIGIN, TwakHttpClient, ALLOWED_OFFRAMP_PROVIDERS;
 var init_dist = __esm({
   "../core/dist/index.mjs"() {
     "use strict";
@@ -4098,6 +4191,15 @@ var init_dist = __esm({
         this.name = "QueryError";
       }
     };
+    BALANCE_ERROR_CODES = {
+      ...COMMON_ERROR_CODES
+    };
+    BalanceError = class extends CommandError {
+      constructor(code2, message) {
+        super(code2, message);
+        this.name = "BalanceError";
+      }
+    };
     ALERT_ERROR_CODES = {
       ...COMMON_ERROR_CODES,
       ALERT_NOT_FOUND: "ALERT_NOT_FOUND"
@@ -4148,10 +4250,14 @@ var init_dist = __esm({
         this.name = "X402Error";
       }
     };
+    DECIMAL_AMOUNT_RE = /^(?:0|[1-9]\d*)(?:\.\d+)?$/;
+    UNSAFE_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
     NAMING_API = "https://naming.trustwallet.com/v1/lookup";
     DEFAULT_GATEWAY_URL = "https://tws.trustwallet.com";
     DEFAULT_MARKET_URL = "https://market.trustwallet.com";
     DEFAULT_TIMEOUT = 3e4;
+    DEFAULT_USER_AGENT = "Mozilla/5.0 AgentKit";
+    DEFAULT_X_ORIGIN = "Trust/2.15.0 AgentKit";
     TwakHttpClient = class {
       config;
       constructor(config2) {
@@ -4159,7 +4265,8 @@ var init_dist = __esm({
           gatewayBaseUrl: DEFAULT_GATEWAY_URL,
           marketBaseUrl: DEFAULT_MARKET_URL,
           timeout: DEFAULT_TIMEOUT,
-          userAgent: void 0,
+          userAgent: DEFAULT_USER_AGENT,
+          xOrigin: DEFAULT_X_ORIGIN,
           ...config2
         };
       }
@@ -4218,8 +4325,13 @@ var init_dist = __esm({
       async fetch(url, init3) {
         const controller = new AbortController();
         const timeout = setTimeout(() => controller.abort(), this.config.timeout);
+        const headers = {
+          ...this.config.userAgent ? { "User-Agent": this.config.userAgent } : {},
+          ...this.config.xOrigin ? { "X-Origin": this.config.xOrigin } : {},
+          ...init3.headers
+        };
         try {
-          const response = await fetch(url, { ...init3, signal: controller.signal });
+          const response = await fetch(url, { ...init3, headers, signal: controller.signal });
           if (!response.ok) {
             const text = await response.text().catch(() => "");
             let parsed;
@@ -4237,10 +4349,7 @@ var init_dist = __esm({
           return await response.json();
         } catch (error3) {
           if (error3 instanceof TwakApiError) throw error3;
-          throw new TwakNetworkError(
-            error3 instanceof Error ? error3.message : "Network error",
-            error3
-          );
+          throw new TwakNetworkError(error3 instanceof Error ? error3.message : "Network error", error3);
         } finally {
           clearTimeout(timeout);
         }
@@ -4252,6 +4361,7 @@ var init_dist = __esm({
         return this.config.hmacSecret;
       }
     };
+    ALLOWED_OFFRAMP_PROVIDERS = /* @__PURE__ */ new Set(["MoonPay"]);
   }
 });
 
@@ -5954,14 +6064,14 @@ var require_templates = __commonJS({
       }
       return results;
     }
-    function buildStyle(chalk7, styles) {
+    function buildStyle(chalk8, styles) {
       const enabled = {};
       for (const layer of styles) {
         for (const style of layer.styles) {
           enabled[style[0]] = layer.inverse ? null : style.slice(1);
         }
       }
-      let current = chalk7;
+      let current = chalk8;
       for (const [styleName, styles2] of Object.entries(enabled)) {
         if (!Array.isArray(styles2)) {
           continue;
@@ -5973,7 +6083,7 @@ var require_templates = __commonJS({
       }
       return current;
     }
-    module2.exports = (chalk7, temporary) => {
+    module2.exports = (chalk8, temporary) => {
       const styles = [];
       const chunks = [];
       let chunk2 = [];
@@ -5983,13 +6093,13 @@ var require_templates = __commonJS({
         } else if (style) {
           const string4 = chunk2.join("");
           chunk2 = [];
-          chunks.push(styles.length === 0 ? string4 : buildStyle(chalk7, styles)(string4));
+          chunks.push(styles.length === 0 ? string4 : buildStyle(chalk8, styles)(string4));
           styles.push({ inverse, styles: parseStyle(style) });
         } else if (close) {
           if (styles.length === 0) {
             throw new Error("Found extraneous } in Chalk template literal");
           }
-          chunks.push(buildStyle(chalk7, styles)(chunk2.join("")));
+          chunks.push(buildStyle(chalk8, styles)(chunk2.join("")));
           chunk2 = [];
           styles.pop();
         } else {
@@ -6037,16 +6147,16 @@ var require_source = __commonJS({
       }
     };
     var chalkFactory = (options) => {
-      const chalk8 = {};
-      applyOptions(chalk8, options);
-      chalk8.template = (...arguments_) => chalkTag(chalk8.template, ...arguments_);
-      Object.setPrototypeOf(chalk8, Chalk.prototype);
-      Object.setPrototypeOf(chalk8.template, chalk8);
-      chalk8.template.constructor = () => {
+      const chalk9 = {};
+      applyOptions(chalk9, options);
+      chalk9.template = (...arguments_) => chalkTag(chalk9.template, ...arguments_);
+      Object.setPrototypeOf(chalk9, Chalk.prototype);
+      Object.setPrototypeOf(chalk9.template, chalk9);
+      chalk9.template.constructor = () => {
         throw new Error("`chalk.constructor()` is deprecated. Use `new chalk.Instance()` instead.");
       };
-      chalk8.template.Instance = ChalkClass;
-      return chalk8.template;
+      chalk9.template.Instance = ChalkClass;
+      return chalk9.template;
     };
     function Chalk(options) {
       return chalkFactory(options);
@@ -6157,7 +6267,7 @@ var require_source = __commonJS({
       return openAll + string4 + closeAll;
     };
     var template;
-    var chalkTag = (chalk8, ...strings) => {
+    var chalkTag = (chalk9, ...strings) => {
       const [firstString] = strings;
       if (!isArray(firstString) || !isArray(firstString.raw)) {
         return strings.join(" ");
@@ -6173,14 +6283,14 @@ var require_source = __commonJS({
       if (template === void 0) {
         template = require_templates();
       }
-      return template(chalk8, parts.join(""));
+      return template(chalk9, parts.join(""));
     };
     Object.defineProperties(Chalk.prototype, styles);
-    var chalk7 = Chalk();
-    chalk7.supportsColor = stdoutColor;
-    chalk7.stderr = Chalk({ level: stderrColor ? stderrColor.level : 0 });
-    chalk7.stderr.supportsColor = stderrColor;
-    module2.exports = chalk7;
+    var chalk8 = Chalk();
+    chalk8.supportsColor = stdoutColor;
+    chalk8.stderr = Chalk({ level: stderrColor ? stderrColor.level : 0 });
+    chalk8.stderr.supportsColor = stderrColor;
+    module2.exports = chalk8;
   }
 });
 
@@ -12876,7 +12986,7 @@ var require_boxen = __commonJS({
   "../../node_modules/.pnpm/boxen@5.1.2/node_modules/boxen/index.js"(exports2, module2) {
     "use strict";
     var stringWidth = require_string_width();
-    var chalk7 = require_source();
+    var chalk8 = require_source();
     var widestLine = require_widest_line();
     var cliBoxes = require_cli_boxes();
     var camelCase = require_camelcase();
@@ -13019,9 +13129,9 @@ var require_boxen = __commonJS({
       return lines.join(NL);
     };
     var isHex = (color) => color.match(/^#(?:[0-f]{3}){1,2}$/i);
-    var isColorValid = (color) => typeof color === "string" && (chalk7[color] || isHex(color));
-    var getColorFn = (color) => isHex(color) ? chalk7.hex(color) : chalk7[color];
-    var getBGColorFn = (color) => isHex(color) ? chalk7.bgHex(color) : chalk7[camelCase(["bg", color])];
+    var isColorValid = (color) => typeof color === "string" && (chalk8[color] || isHex(color));
+    var getColorFn = (color) => isHex(color) ? chalk8.hex(color) : chalk8[color];
+    var getBGColorFn = (color) => isHex(color) ? chalk8.bgHex(color) : chalk8[camelCase(["bg", color])];
     module2.exports = (text, options) => {
       options = {
         padding: 0,
@@ -13047,7 +13157,7 @@ var require_boxen = __commonJS({
       const margin = getObject(options.margin);
       const colorizeBorder = (border) => {
         const newBorder = options.borderColor ? getColorFn(options.borderColor)(border) : border;
-        return options.dimBorder ? chalk7.dim(newBorder) : newBorder;
+        return options.dimBorder ? chalk8.dim(newBorder) : newBorder;
       };
       const colorizeContent = (content) => options.backgroundColor ? getBGColorFn(options.backgroundColor)(content) : content;
       const columns = terminalColumns();
@@ -13090,242 +13200,6 @@ var require_boxen = __commonJS({
   }
 });
 
-// ../security/dist/index.mjs
-var dist_exports3 = {};
-__export(dist_exports3, {
-  SecurityService: () => SecurityService
-});
-var SecurityService;
-var init_dist5 = __esm({
-  "../security/dist/index.mjs"() {
-    "use strict";
-    init_dist();
-    SecurityService = class {
-      constructor(client) {
-        this.client = client;
-      }
-      async validate(params) {
-        const query = new URLSearchParams();
-        if (params.assetId) query.set("asset_id", params.assetId);
-        query.set("address", params.address);
-        if (params.type) query.set("type", params.type);
-        if (params.version) query.set("version", params.version.toString());
-        try {
-          return await this.client.gateway(
-            "GET",
-            "/v1/validate",
-            void 0,
-            query.toString()
-          );
-        } catch (err) {
-          const msg = err instanceof Error ? err.message : String(err);
-          const details = err?.details;
-          let detailsStr = "";
-          if (details != null) {
-            try {
-              detailsStr = JSON.stringify(details);
-            } catch {
-              try {
-                detailsStr = String(details);
-              } catch {
-              }
-            }
-          }
-          if (msg.includes("GraphQL") || msg.includes("Failed to decode") || detailsStr.includes("GraphQL") || detailsStr.includes("Failed to decode")) {
-            return { valid: false, message: "Invalid address format" };
-          }
-          throw err;
-        }
-      }
-      async getAssetInfo(assetId) {
-        const info2 = await this.client.gateway(
-          "GET",
-          `/v1/assets/${encodeURIComponent(assetId)}`
-        );
-        try {
-          const priceResp = await this.client.market("POST", "/v2/market/tickers", { currency: "USD", assets: [assetId] });
-          const ticker = priceResp.tickers?.[0];
-          if (ticker) {
-            if (ticker.price != null) info2.priceUsd = ticker.price;
-            if (ticker.change_24h != null) info2.priceChange24h = ticker.change_24h;
-            if (ticker.market_cap != null) info2.marketCapUsd = ticker.market_cap;
-            if (ticker.volume_24h != null) info2.volume24hUsd = ticker.volume_24h;
-          }
-        } catch {
-        }
-        return info2;
-      }
-      async getTokenHoldings(assets, fromTime = 0) {
-        const response = await this.client.gateway("POST", "/v1/assets", {
-          from_time: fromTime,
-          version: 2,
-          assets
-        });
-        return Array.isArray(response) ? response : response.docs ?? response.data ?? [];
-      }
-      async checkCoinStatus(assetId) {
-        const query = new URLSearchParams({
-          version: "8.4",
-          platform: "android",
-          include_security_info: "true",
-          include_solana_security_info: "true"
-        });
-        const raw = await this.client.gateway(
-          "GET",
-          `/v2/coinstatus/${encodeURIComponent(assetId)}`,
-          void 0,
-          query.toString()
-        );
-        return this.transformCoinStatus(assetId, raw);
-      }
-      async getAssetListings(params) {
-        const limit = params.limit || 20;
-        const query = new URLSearchParams({
-          version: "27",
-          currency: params.currency || "USD",
-          limit: String(params.sort ? Math.max(limit, 50) : limit)
-        });
-        if (params.categoryId) query.set("category_id", params.categoryId);
-        if (params.networks) query.set("networks", params.networks);
-        const response = await this.client.gateway(
-          "GET",
-          "/v1/assets/listings",
-          void 0,
-          query.toString()
-        );
-        const docs = response.docs || response.results || [];
-        const tokens = docs.map((doc) => {
-          const asset = doc.asset || doc;
-          const price = doc.price || {};
-          const market = doc.market || {};
-          const assetIdRaw = asset.asset_id || doc.asset_id || "";
-          const coinId = assetIdRaw ? parseInt(assetIdRaw.replace(/^c/, "").split("_")[0], 10) : NaN;
-          const chain2 = !isNaN(coinId) ? coinTypeToChainKey(coinId) || "" : "";
-          return {
-            assetId: assetIdRaw,
-            name: asset.name || doc.name || "",
-            symbol: asset.symbol || doc.symbol || "",
-            chain: chain2,
-            logoUrl: asset.icon_url || doc.icon_url,
-            priceUsd: price.price ?? doc.price_usd,
-            priceChange24h: price.percent_change_24h ?? doc.price_change_24h,
-            marketCapUsd: market.market_cap ?? price.market_cap ?? doc.market_cap_usd,
-            volume24hUsd: market.volume_24h ?? price.volume_24h ?? doc.volume_24h_usd
-          };
-        });
-        if (params.sort) {
-          const sortKeyMap = {
-            percent_change_24h: "priceChange24h",
-            market_cap: "marketCapUsd",
-            volume_24h: "volume24hUsd"
-          };
-          const key = sortKeyMap[params.sort] || "priceChange24h";
-          tokens.sort((a3, b3) => (b3[key] ?? 0) - (a3[key] ?? 0));
-        }
-        return tokens.slice(0, limit);
-      }
-      async getTrendingTokens(limit = 20, sort = "percent_change_24h") {
-        const knownAssets = [
-          "c60",
-          "c501",
-          "c0",
-          "c20000714",
-          "c966",
-          "c10009000",
-          "c8453",
-          "c10042221",
-          "c10000070",
-          "c195",
-          "c637",
-          "c607",
-          "c784",
-          "c397",
-          "c118",
-          "c2",
-          "c3",
-          "c10000250",
-          "c10000324",
-          "c81457"
-        ];
-        const response = await this.client.market("POST", "/v2/market/tickers", {
-          currency: "USD",
-          assets: knownAssets
-        });
-        const tickers = response.tickers || [];
-        const sortKey = sort === "market_cap" ? "market_cap" : sort === "volume_24h" ? "volume_24h" : "change_24h";
-        return tickers.sort((a3, b3) => (b3[sortKey] ?? 0) - (a3[sortKey] ?? 0)).slice(0, limit).map((t) => {
-          const coinId = t.id ? parseInt(t.id.replace(/^c/, ""), 10) : NaN;
-          const chain2 = !isNaN(coinId) ? coinTypeToChainKey(coinId) || "" : "";
-          return {
-            assetId: t.id || "",
-            name: t.slug || t.id || "",
-            symbol: t.slug?.toUpperCase() || "",
-            chain: chain2,
-            logoUrl: void 0,
-            priceUsd: t.price,
-            priceChange24h: t.change_24h,
-            marketCapUsd: t.market_cap,
-            volume24hUsd: t.volume_24h
-          };
-        });
-      }
-      transformCoinStatus(assetId, raw) {
-        if (!raw) return { assetId, isActive: false };
-        const asset = raw.asset || raw;
-        const security = raw.security_info || raw.securityInfo;
-        const solanaSecurity = raw.solana_security_info || raw.solanaSecurityInfo;
-        const warnings = [];
-        let isHoneypot;
-        if (security) {
-          const allItems = [
-            ...security.contract_security?.items || [],
-            ...security.honeypot_risk?.items || []
-          ];
-          for (const item of allItems) {
-            if (item.type === "warning" || item.type === "risk") {
-              const message = item.summary ?? item.description ?? item.code;
-              if (message) warnings.push(message);
-            }
-            if (item.code === "is_honeypot" && item.type === "risk") isHoneypot = true;
-          }
-        }
-        const totalRisks = (security?.contract_security?.num_risks ?? 0) + (security?.honeypot_risk?.num_risks ?? 0);
-        const totalWarnings = (security?.contract_security?.num_warnings ?? 0) + (security?.honeypot_risk?.num_warnings ?? 0);
-        const computedRiskLevel = totalRisks > 0 ? "high" : totalWarnings > 0 ? "medium" : security ? "low" : void 0;
-        let finalRiskLevel = security?.risk_level ?? security?.riskLevel ?? computedRiskLevel;
-        const knownStablecoins = ["USDC", "USDT", "DAI", "BUSD", "TUSD", "USDP", "FRAX", "PYUSD"];
-        const symbol = (asset.symbol ?? raw.symbol ?? "").toUpperCase();
-        let riskContext;
-        if (finalRiskLevel === "medium" && knownStablecoins.includes(symbol) && totalRisks === 0) {
-          riskContext = "Warnings are due to proxy contract pattern, common in audited stablecoins";
-          finalRiskLevel = "low";
-        }
-        return {
-          assetId,
-          name: asset.name ?? raw.name,
-          symbol: asset.symbol ?? raw.symbol,
-          isActive: raw.is_active ?? raw.isActive ?? true,
-          supportsSwap: raw.isSwapEnabled ?? raw.supports_swap ?? raw.supportsSwap,
-          supportsStaking: raw.isStakeEnabled ?? raw.supports_staking ?? raw.supportsStaking,
-          securityInfo: security ? {
-            isHoneypot: isHoneypot ?? security.is_honeypot ?? security.isHoneypot,
-            hasAudit: security.has_audit ?? security.hasAudit ?? security.is_scanned,
-            auditProvider: security.audit_provider ?? security.auditProvider ?? security.provider,
-            riskLevel: finalRiskLevel,
-            ...riskContext ? { riskContext } : {},
-            warnings: warnings.length > 0 ? warnings : security.warnings
-          } : void 0,
-          solanaSecurityInfo: solanaSecurity ? {
-            isMintable: solanaSecurity.is_mintable ?? solanaSecurity.isMintable,
-            hasFreezeAuthority: solanaSecurity.has_freeze_authority ?? solanaSecurity.hasFreezeAuthority,
-            riskLevel: solanaSecurity.risk_level ?? solanaSecurity.riskLevel
-          } : void 0
-        };
-      }
-    };
-  }
-});
-
 // ../security/dist/services/dapps-service.mjs
 var dapps_service_exports = {};
 __export(dapps_service_exports, {
@@ -39328,201 +39202,136 @@ ${qr3}`;
       if (!opts.all && !opts.chain) {
         throw new WalletError("VALIDATION_ERROR", "Provide --chain <key> or --all");
       }
-      const creds = await ensureTrustSDK();
+      await ensureTrustSDK();
       const password = await resolvePassword(opts);
       const provider = await AgentWalletProvider.fromStorage(password);
-      const blockchainClient = provider.getBlockchainClient();
-      const fmtRaw = (raw, decimals) => {
-        if (!raw) return void 0;
-        const big = BigInt(raw);
-        const div = 10n ** BigInt(decimals);
-        return `${big / div}.${(big % div).toString().padStart(decimals, "0").slice(0, 6)}`;
-      };
-      const holdingsMap = /* @__PURE__ */ new Map();
-      try {
-        const { SecurityService: SecurityService2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports3));
-        const httpClient = await getClient();
-        const securityService = new SecurityService2(httpClient);
-        const allAddrs = await provider.getAddresses();
-        const assets = allAddrs.map((a3) => {
-          const ch = getChainById(a3.chainId);
-          return ch ? { coin: ch.coinId, address: a3.address } : null;
-        }).filter((a3) => a3 !== null);
-        const holdings = await securityService.getTokenHoldings(assets);
-        for (const h4 of holdings) {
-          if (h4.tokens?.length) {
-            holdingsMap.set(
-              h4.coin,
-              h4.tokens.map((t) => ({
-                symbol: t.symbol ?? t.contract,
-                contract: t.contract,
-                decimals: t.decimals ?? 18
-              }))
-            );
-          }
+      const httpClient = await getClient();
+      if (!opts.all) {
+        const chain2 = getChainById(opts.chain);
+        if (!chain2) {
+          throw new WalletError("CHAIN_UNSUPPORTED", `Unknown chain: ${opts.chain}`);
         }
-      } catch {
       }
-      if (opts.all && holdingsMap.size === 0) {
-        try {
-          await registerWalletWithBackend(creds, provider);
-          const { SecurityService: Sec } = await Promise.resolve().then(() => (init_dist5(), dist_exports3));
-          const retryClient = await getClient();
-          const retrySec = new Sec(retryClient);
-          const retryAddrs = await provider.getAddresses();
-          const retryAssets = retryAddrs.map((a3) => {
-            const ch = getChainById(a3.chainId);
-            return ch ? { coin: ch.coinId, address: a3.address } : null;
-          }).filter((a3) => a3 !== null);
-          const retryHoldings = await retrySec.getTokenHoldings(retryAssets);
-          for (const h4 of retryHoldings) {
-            if (h4.tokens?.length) {
-              holdingsMap.set(
-                h4.coin,
-                h4.tokens.map((t) => ({
-                  symbol: t.symbol ?? t.contract,
-                  contract: t.contract,
-                  decimals: t.decimals ?? 18
-                }))
-              );
-            }
-          }
-        } catch {
-        }
+      const allAddresses = await provider.getAddresses();
+      const addressMap = /* @__PURE__ */ new Map();
+      for (const a3 of allAddresses) addressMap.set(a3.chainId, a3.address);
+      const requestedChains = opts.all ? Object.keys(CHAINS) : [opts.chain];
+      const skipTokens = opts.tokens === false;
+      const chainEntries = requestedChains.flatMap((chainKey) => {
+        const chain2 = getChainById(chainKey);
+        const address = addressMap.get(chainKey);
+        if (!chain2 || !address) return [];
+        return [{ chainKey, chain: chain2, address }];
+      });
+      if (!opts.all && chainEntries.length === 0) {
+        throw new WalletError(
+          "CHAIN_UNSUPPORTED",
+          `Wallet does not have an address for chain: ${opts.chain}`
+        );
       }
-      const fetchChainBalance = async (chainKey, chain2, address, skipTokens) => {
-        const fmt = (raw) => fmtRaw(raw, chain2.decimals);
-        const nativeAssetId = `c${chain2.coinId}`;
-        const nativeBal = await blockchainClient.getBalance(nativeAssetId, address);
-        const tokens = [];
-        if (!skipTokens) {
-          const held = holdingsMap.get(chain2.coinId);
-          const tokenDefs = [];
-          if (held && held.length > 0) {
-            tokenDefs.push(...held);
-          } else {
-            const knownTokens = COMMON_TOKENS[chainKey];
-            if (knownTokens) {
-              for (const [sym, addr] of Object.entries(knownTokens)) {
-                const resolved = resolveToken(sym, chainKey);
-                if (!resolved) continue;
-                tokenDefs.push({ symbol: sym, contract: addr, decimals: resolved.decimals });
-              }
+      const nativeAssets = chainEntries.map(({ chainKey, chain: chain2, address }) => ({
+        chainKey,
+        chain: chain2,
+        token: void 0,
+        assetId: `c${chain2.coinId}`,
+        userAddress: address
+      }));
+      const tokenAssets = skipTokens ? [] : chainEntries.flatMap(({ chainKey, chain: chain2, address }) => {
+        const knownTokens = COMMON_TOKENS[chainKey];
+        if (!knownTokens) return [];
+        return Object.keys(knownTokens).flatMap((sym) => {
+          const resolved = resolveToken(sym, chainKey);
+          if (!resolved) return [];
+          return [
+            {
+              chainKey,
+              chain: chain2,
+              token: { ...resolved, symbol: sym },
+              assetId: `c${chain2.coinId}_t${resolved.address}`,
+              userAddress: address
             }
-          }
-          const tokenResults = await Promise.all(
-            tokenDefs.map(async (t) => {
-              try {
-                const bal = await blockchainClient.getBalance(
-                  `c${chain2.coinId}_t${t.contract}`,
-                  address
-                );
-                const rawBal = bal.total ?? bal.available ?? "0";
-                if (BigInt(rawBal) <= 0n) return null;
-                const human = fmtRaw(rawBal, t.decimals);
-                if (human && human !== "0.000000")
-                  return { symbol: t.symbol, contract: t.contract, balance: human };
-              } catch {
-              }
-              return null;
-            })
-          );
-          for (const t of tokenResults) {
-            if (t) tokens.push(t);
-          }
-        }
-        return {
+          ];
+        });
+      });
+      const allAssets = [...nativeAssets, ...tokenAssets];
+      const balances = await fetchBalances(
+        httpClient,
+        allAssets.map(({ assetId, userAddress }) => ({ assetId, address: userAddress }))
+      );
+      const assetsById = new Map(allAssets.map((a3) => [a3.assetId, a3]));
+      const resultsByChain = /* @__PURE__ */ new Map();
+      for (const { chainKey, chain: chain2, address } of chainEntries) {
+        resultsByChain.set(chainKey, {
           chain: chainKey,
           address,
           symbol: chain2.symbol,
-          available: fmt(nativeBal.available),
-          ...nativeBal.staked ? { staked: fmt(nativeBal.staked) } : {},
-          ...nativeBal.pending ? { pending: fmt(nativeBal.pending) } : {},
-          total: fmt(nativeBal.total),
-          tokens
-        };
-      };
-      if (opts.all) {
-        const chainKeys = Object.keys(CHAINS);
-        const allAddresses = await provider.getAddresses();
-        const addressMap = /* @__PURE__ */ new Map();
-        for (const a3 of allAddresses) {
-          addressMap.set(a3.chainId, a3.address);
+          available: "0",
+          total: "0",
+          totalUsd: null,
+          tokens: []
+        });
+      }
+      for (const balance of balances) {
+        const assetInfo = assetsById.get(balance.assetId);
+        if (!assetInfo) {
+          throw new WalletError(
+            "NETWORK_ERROR",
+            "Could not fetch balances. Please try again later."
+          );
         }
-        const results = [];
-        const chainEntries = chainKeys.map((k4) => ({ chainKey: k4, chain: getChainById(k4), address: addressMap.get(k4) })).filter(
-          (e2) => !!e2.chain && !!e2.address
-        );
-        const settled = await Promise.allSettled(
-          chainEntries.map(
-            async ({ chainKey, chain: chain2, address }) => fetchChainBalance(chainKey, chain2, address, opts.tokens === false)
-          )
-        );
-        for (let i2 = 0; i2 < settled.length; i2++) {
-          const result = settled[i2];
-          if (result.status === "rejected") {
-            const chainKey = chainEntries[i2].chainKey;
-            results.push({
-              chain: chainKey,
-              error: result.reason instanceof Error ? result.reason.message : String(result.reason)
+        const result = resultsByChain.get(assetInfo.chainKey);
+        if (!result) continue;
+        const { token, chain: chain2 } = assetInfo;
+        const amts = balance.amounts;
+        if (token) {
+          const human = formatAmount(amts.total ?? "0", token.decimals);
+          if (human !== "0") {
+            result.tokens.push({
+              symbol: token.symbol,
+              contract: token.address,
+              balance: human
             });
-            continue;
           }
-          const r3 = result.value;
-          const rawTotal = r3.total;
-          const hasNative = rawTotal && rawTotal !== "0.000000" && !rawTotal.startsWith("0.000000");
-          const hasTokens = r3.tokens.length > 0;
-          if (hasNative || hasTokens) {
-            results.push(r3);
+        } else {
+          result.available = formatAmount(amts.available ?? "0", chain2.decimals);
+          result.total = formatAmount(amts.total ?? "0", chain2.decimals);
+          const lockedHuman = formatAmount(amts.locked ?? "0", chain2.decimals);
+          if (lockedHuman !== "0") result.staked = lockedHuman;
+          const fiat = amts.totalInFiat;
+          result.totalUsd = fiat && fiat !== "" ? parseFloat(fiat) : null;
+        }
+      }
+      const orderedResults = chainEntries.map((e2) => resultsByChain.get(e2.chainKey)).filter((r3) => r3 !== void 0);
+      const visible = opts.all ? orderedResults.filter((r3) => r3.total !== "0" || r3.tokens.length > 0) : orderedResults;
+      const renderBlock = (r3, withSeparator) => {
+        if (withSeparator) console.log("");
+        console.log(import_chalk5.default.bold.underline(`${r3.chain} (${r3.symbol})`));
+        console.log(`  ${import_chalk5.default.dim("Address")}    ${r3.address}`);
+        console.log(`  ${import_chalk5.default.dim("Available")}  ${r3.available}`);
+        if (r3.staked) console.log(`  ${import_chalk5.default.dim("Staked")}     ${r3.staked}`);
+        const usdSuffix = r3.totalUsd !== null ? ` (\u2248 $${r3.totalUsd.toFixed(2)})` : "";
+        console.log(`  ${import_chalk5.default.dim("Total")}      ${r3.total}${usdSuffix}`);
+        if (r3.tokens.length > 0) {
+          console.log(`  ${import_chalk5.default.dim("Tokens:")}`);
+          for (const t of r3.tokens) {
+            console.log(`    ${import_chalk5.default.bold(t.symbol.padEnd(10))} ${t.balance}`);
           }
         }
+      };
+      if (opts.all) {
         if (opts.json) {
-          output(results, true);
+          output(visible, true);
+        } else if (visible.length === 0) {
+          info("No chains with non-zero native balance found.");
         } else {
-          if (results.length === 0) {
-            info("No chains with non-zero native balance found.");
-          } else {
-            for (let i2 = 0; i2 < results.length; i2++) {
-              const r3 = results[i2];
-              if (i2 > 0) console.log("");
-              console.log(import_chalk5.default.bold.underline(`${String(r3.chain)} (${String(r3.symbol)})`));
-              console.log(`  ${import_chalk5.default.dim("Address")}    ${r3.address}`);
-              console.log(`  ${import_chalk5.default.dim("Available")}  ${r3.available}`);
-              if (r3.staked) console.log(`  ${import_chalk5.default.dim("Staked")}     ${r3.staked}`);
-              if (r3.pending) console.log(`  ${import_chalk5.default.dim("Pending")}    ${r3.pending}`);
-              console.log(`  ${import_chalk5.default.dim("Total")}      ${r3.total}`);
-              const tokens = r3.tokens;
-              if (tokens.length > 0) {
-                console.log(`  ${import_chalk5.default.dim("Tokens:")}`);
-                for (const t of tokens) {
-                  console.log(`    ${import_chalk5.default.bold(t.symbol.padEnd(10))} ${t.balance}`);
-                }
-              }
-            }
-          }
+          visible.forEach((r3, i2) => renderBlock(r3, i2 > 0));
         }
       } else {
-        const chain2 = getChainById(opts.chain);
-        if (!chain2) {
-          throw new WalletError("CHAIN_UNSUPPORTED", `Unknown chain: ${opts.chain}`);
-        }
-        const address = await provider.getAddress(opts.chain);
-        const result = await fetchChainBalance(opts.chain, chain2, address, opts.tokens === false);
+        const single = visible[0];
         if (opts.json) {
-          output(result, true);
+          output(single, true);
         } else {
-          console.log(import_chalk5.default.bold.underline(`${result.chain} (${result.symbol})`));
-          console.log(`  ${import_chalk5.default.dim("Address")}    ${result.address}`);
-          console.log(`  ${import_chalk5.default.dim("Available")}  ${result.available}`);
-          if (result.staked) console.log(`  ${import_chalk5.default.dim("Staked")}     ${result.staked}`);
-          if (result.pending) console.log(`  ${import_chalk5.default.dim("Pending")}    ${result.pending}`);
-          console.log(`  ${import_chalk5.default.dim("Total")}      ${result.total}`);
-          if (result.tokens.length > 0) {
-            console.log(`  ${import_chalk5.default.dim("Tokens:")}`);
-            for (const t of result.tokens) {
-              console.log(`    ${import_chalk5.default.bold(t.symbol.padEnd(10))} ${t.balance}`);
-            }
-          }
+          renderBlock(single, false);
         }
       }
     } catch (err) {
@@ -39670,23 +39479,18 @@ ${qr3}`;
     }
     safeExit();
   });
-  wallet.command("portfolio").description("Show portfolio balances and USD values across chains, including token holdings").option(
-    "--chains <list>",
-    "Comma-separated chain keys (default: all supported chains)",
-    Object.keys(CHAINS).join(",")
-  ).option(
+  wallet.command("portfolio").description("Show portfolio balances and USD values across chains, including token holdings").option("--chains <list>", "Comma-separated chain keys (default: all supported chains)").option(
     "--password <password>",
     "Wallet password (falls back to keychain / TWAK_WALLET_PASSWORD)"
   ).option("--json", "JSON output").action(async (opts) => {
     try {
-      const creds = await ensureTrustSDK();
+      await ensureTrustSDK();
       const password = await resolvePassword(opts);
       const provider = await AgentWalletProvider.fromStorage(password);
-      const { SecurityService: SecurityService2 } = await Promise.resolve().then(() => (init_dist5(), dist_exports3));
       const httpClient = await getClient();
-      const blockchainClient = provider.getBlockchainClient();
       const allAddresses = await provider.getAddresses();
-      const requestedChains = opts.chains.split(",").map((s2) => s2.trim()).filter(Boolean);
+      const chainsArg = opts.chains ?? Object.keys(CHAINS).join(",");
+      const requestedChains = chainsArg.split(",").map((s2) => s2.trim()).filter(Boolean);
       if (requestedChains.length === 0) {
         throw new WalletError("VALIDATION_ERROR", "--chains must include at least one chain key");
       }
@@ -39702,241 +39506,69 @@ ${qr3}`;
           `No supported chains found in --chains "${opts.chains}"`
         );
       }
-      const suppress = (fn2) => fn2();
-      const withTimeout = (promise, ms3) => {
-        let timerId;
-        const timeout = new Promise((_2, reject) => {
-          timerId = setTimeout(() => reject(new Error(`timed out after ${ms3 / 1e3}s`)), ms3);
-        });
-        return Promise.race([promise, timeout]).finally(() => {
-          if (timerId !== void 0) clearTimeout(timerId);
-        });
-      };
-      const pMap = async (items, fn2, concurrency) => {
-        const results = new Array(items.length);
-        let idx = 0;
-        const run = async () => {
-          while (idx < items.length) {
-            const i2 = idx++;
-            results[i2] = await fn2(items[i2]);
-          }
-        };
-        await Promise.all(
-          Array.from({ length: Math.min(concurrency, items.length) }, () => run())
-        );
-        return results;
-      };
-      const toHuman = (raw, decimals) => {
-        const big = BigInt(raw);
-        const div = 10n ** BigInt(decimals);
-        const intPart = big / div;
-        const fracPart = big % div;
-        const fracStr = fracPart.toString().padStart(decimals, "0").replace(/0+$/, "");
-        return fracStr ? `${intPart}.${fracStr}` : intPart.toString();
-      };
-      const holdingsAssets = chainEntries.map(
-        ({ chain: chain2, address }) => ({
-          coin: chain2.coinId,
-          address
-        })
-      );
-      const [nativeResults, holdings] = await Promise.all([
-        pMap(
-          chainEntries,
-          async ({
-            chainKey,
-            chain: chain2,
-            address
-          }) => {
-            try {
-              const balance = await withTimeout(
-                suppress(() => blockchainClient.getBalance(`c${chain2.coinId}`, address)),
-                15e3
-              );
-              if (!balance) {
-                return {
-                  chainKey,
-                  chain: chain2,
-                  address,
-                  balance: null,
-                  error: "empty response from SDK",
-                  errorCode: "NETWORK_ERROR"
-                };
-              }
-              return {
-                chainKey,
-                chain: chain2,
-                address,
-                balance,
-                error: void 0,
-                errorCode: void 0
-              };
-            } catch (e2) {
-              const code2 = e2 != null ? e2.code : void 0;
-              const status = e2 != null ? e2.status : void 0;
-              let msg;
-              let errorCode = "NETWORK_ERROR";
-              if (status === 429 || code2 === 429) {
-                msg = "rate limited (429)";
-                errorCode = "RATE_LIMITED";
-              } else if (e2 instanceof Error && e2.message && e2.message !== "null") {
-                msg = e2.message;
-              } else if (code2) {
-                msg = `HTTP ${code2}`;
-              } else {
-                msg = "unsupported or unavailable";
-              }
-              return { chainKey, chain: chain2, address, balance: null, error: msg, errorCode };
-            }
-          },
-          5
-        ),
-        (async () => {
-          try {
-            return await new SecurityService2(httpClient).getTokenHoldings(holdingsAssets);
-          } catch {
-            return [];
-          }
-        })()
-      ]);
-      const holdingsMap = /* @__PURE__ */ new Map();
-      for (const h4 of holdings) {
-        if (h4.tokens?.length) holdingsMap.set(h4.coin, h4.tokens);
-      }
-      if (holdingsMap.size === 0) {
-        try {
-          await registerWalletWithBackend(creds, provider);
-          const retryHoldings = await new SecurityService2(httpClient).getTokenHoldings(
-            holdingsAssets
-          );
-          for (const h4 of retryHoldings) {
-            if (h4.tokens?.length) holdingsMap.set(h4.coin, h4.tokens);
-          }
-        } catch {
-        }
-      }
-      for (const { chainKey, chain: chain2 } of chainEntries) {
-        const coinId = chain2.coinId;
-        if (holdingsMap.has(coinId)) continue;
+      const chainAssets = chainEntries.map(({ chainKey, chain: chain2, address }) => ({
+        chainKey,
+        chain: chain2,
+        token: void 0,
+        assetId: `c${chain2.coinId}`,
+        userAddress: address
+      }));
+      const tokenAssets = chainEntries.flatMap(({ chainKey, chain: chain2, address }) => {
         const knownTokens = COMMON_TOKENS[chainKey];
-        if (!knownTokens) continue;
-        const fallbackTokens = Object.entries(knownTokens).flatMap(([sym, addr]) => {
+        if (!knownTokens) return [];
+        return Object.keys(knownTokens).flatMap((sym) => {
           const resolved = resolveToken(sym, chainKey);
           if (!resolved) return [];
-          return [{ contract: addr, decimals: resolved.decimals, symbol: sym }];
-        });
-        holdingsMap.set(coinId, fallbackTokens);
-      }
-      const tokenJobs = [];
-      for (const { chainKey, chain: chain2, address } of chainEntries) {
-        const tokens = holdingsMap.get(chain2.coinId) ?? [];
-        for (const t of tokens) {
-          if (t.contract)
-            tokenJobs.push({
+          return [
+            {
               chainKey,
-              coinId: chain2.coinId,
-              address,
-              ...t
-            });
-        }
-      }
-      const tokenBalances = await pMap(
-        tokenJobs,
-        async (job) => {
-          const fallback = job.balance ?? "0";
-          try {
-            const assetId = `c${job.coinId}_t${job.contract}`;
-            const bal = await withTimeout(
-              suppress(() => blockchainClient.getBalance(assetId, job.address)),
-              15e3
-            );
-            return { ...job, rawBalance: bal.total ?? bal.available ?? fallback };
-          } catch {
-            return { ...job, rawBalance: fallback };
-          }
-        },
-        5
-      );
-      const nativeAssetIds = nativeResults.map(
-        ({ chain: chain2 }) => `c${chain2.coinId}`
-      );
-      const nonZeroTokens = tokenBalances.filter((t) => {
-        const dec = t.decimals ?? 18;
-        return toHuman(t.rawBalance, dec) !== "0";
+              chain: chain2,
+              token: { ...resolved, symbol: sym },
+              assetId: `c${chain2.coinId}_t${resolved.address}`,
+              userAddress: address
+            }
+          ];
+        });
       });
-      const tokenAssetIds = nonZeroTokens.map(
-        (t) => `c${t.coinId}_t${t.contract}`
+      const allAssets = [...chainAssets, ...tokenAssets];
+      const balances = await fetchBalances(
+        httpClient,
+        allAssets.map(({ assetId, userAddress }) => ({ assetId, address: userAddress }))
       );
-      const priceMap = /* @__PURE__ */ new Map();
-      try {
-        const priceResp = await httpClient.market("POST", "/v2/market/tickers", {
-          currency: "USD",
-          assets: [.../* @__PURE__ */ new Set([...nativeAssetIds, ...tokenAssetIds])]
-        });
-        for (const ticker of priceResp.tickers || []) {
-          if (ticker.id && ticker.price != null) priceMap.set(ticker.id, ticker.price);
-        }
-      } catch {
-      }
-      const rows = [];
-      const failedChains = [];
-      for (const {
-        chainKey,
-        chain: chain2,
-        address,
-        balance,
-        error: fetchError,
-        errorCode: fetchErrorCode
-      } of nativeResults) {
-        const c3 = chain2;
-        if (fetchError) {
-          failedChains.push(`${chainKey} (${fetchError})`);
-          rows.push({
-            chain: chainKey,
-            type: "native",
-            symbol: c3.symbol,
-            address,
-            balance: "--",
-            usdValue: null,
-            error: fetchError,
-            errorCode: fetchErrorCode
-          });
-          continue;
+      const assetsById = new Map(allAssets.map((a3) => [a3.assetId, a3]));
+      const allRows = [];
+      for (const balance of balances) {
+        const assetInfo = assetsById.get(balance.assetId);
+        if (!assetInfo) {
+          throw new WalletError(
+            "NETWORK_ERROR",
+            "Could not fetch balances. Please try again later."
+          );
         }
-        const price = priceMap.get(`c${c3.coinId}`) ?? null;
-        const rawTotal = balance?.total ?? balance?.available ?? "0";
-        const humanAmount = toHuman(rawTotal, c3.decimals);
-        const usdValue = price !== null ? parseFloat((parseFloat(humanAmount) * price).toFixed(2)) : null;
-        rows.push({
+        const { token, chain: chain2, chainKey, userAddress } = assetInfo;
+        const decimals = token ? token.decimals : chain2.decimals;
+        const symbol = token ? token.symbol ?? token.address : chain2.symbol;
+        const isToken = token !== void 0;
+        const humanAmount = formatAmount(balance.amounts.total, decimals);
+        const fiatRaw = balance.amounts.totalInFiat;
+        const usdValue = fiatRaw && fiatRaw !== "" ? parseFloat(fiatRaw) : null;
+        allRows.push({
           chain: chainKey,
-          type: "native",
-          symbol: c3.symbol,
-          address,
-          balance: humanAmount,
-          usdValue
-        });
-      }
-      for (const t of tokenBalances) {
-        const dec = t.decimals ?? 18;
-        const humanAmount = toHuman(t.rawBalance, dec);
-        if (humanAmount === "0") continue;
-        const tokenAssetId = `c${t.coinId}_t${t.contract}`;
-        const tokenPrice = priceMap.get(tokenAssetId) ?? null;
-        const usdValue = tokenPrice !== null ? parseFloat((parseFloat(humanAmount) * tokenPrice).toFixed(2)) : null;
-        rows.push({
-          chain: t.chainKey,
-          type: "token",
-          symbol: t.symbol ?? t.contract,
-          address: t.address,
-          contract: t.contract,
+          type: isToken ? "token" : "native",
+          symbol,
+          address: userAddress,
+          ...token ? { contract: token.address } : {},
           balance: humanAmount,
           usdValue
         });
       }
+      const rows = allRows.filter((r3) => r3.type === "native" || r3.balance !== "0");
+      rows.sort((a3, b3) => {
+        const chainCmp = String(a3.chain).localeCompare(String(b3.chain));
+        if (chainCmp !== 0) return chainCmp;
+        return String(a3.type).localeCompare(String(b3.type));
+      });
       if (opts.json) {
-        if (failedChains.length > 0) {
-          warn(`Balance unavailable for: ${failedChains.join(", ")}`);
-        }
         output(rows, true);
       } else {
         const totalUsd = rows.reduce(
@@ -39946,16 +39578,13 @@ ${qr3}`;
         console.log("Chain        Type    Symbol            Balance               USD");
         console.log("\u2500".repeat(72));
         for (const r3 of rows) {
-          const usd = r3.balance === "--" ? "" : r3.usdValue !== null ? `$${r3.usdValue.toFixed(2)}` : "";
+          const usd = r3.usdValue !== null ? `$${r3.usdValue.toFixed(2)}` : "";
           console.log(
             `${String(r3.chain).padEnd(12)} ${String(r3.type).padEnd(7)} ${String(r3.symbol).padEnd(17)} ${String(r3.balance).padEnd(20)} ${usd}`
           );
         }
         console.log("\u2500".repeat(72));
         console.log(`Total USD: $${totalUsd.toFixed(2)}`);
-        if (failedChains.length > 0) {
-          warn(`Balance unavailable for: ${failedChains.join(", ")}`);
-        }
       }
     } catch (err) {
       handleCommandError(err, opts.json, "Portfolio failed");
@@ -40000,7 +39629,232 @@ ${qr3}`;
 // src/commands/transfer.ts
 init_dist();
 init_dist2();
-init_dist5();
+
+// ../security/dist/index.mjs
+init_dist();
+var SecurityService = class {
+  constructor(client) {
+    this.client = client;
+  }
+  async validate(params) {
+    const query = new URLSearchParams();
+    if (params.assetId) query.set("asset_id", params.assetId);
+    query.set("address", params.address);
+    if (params.type) query.set("type", params.type);
+    if (params.version) query.set("version", params.version.toString());
+    try {
+      return await this.client.gateway(
+        "GET",
+        "/v1/validate",
+        void 0,
+        query.toString()
+      );
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      const details = err?.details;
+      let detailsStr = "";
+      if (details != null) {
+        try {
+          detailsStr = JSON.stringify(details);
+        } catch {
+          try {
+            detailsStr = String(details);
+          } catch {
+          }
+        }
+      }
+      if (msg.includes("GraphQL") || msg.includes("Failed to decode") || detailsStr.includes("GraphQL") || detailsStr.includes("Failed to decode")) {
+        return { valid: false, message: "Invalid address format" };
+      }
+      throw err;
+    }
+  }
+  async getAssetInfo(assetId) {
+    const info2 = await this.client.gateway(
+      "GET",
+      `/v1/assets/${encodeURIComponent(assetId)}`
+    );
+    try {
+      const priceResp = await this.client.market("POST", "/v2/market/tickers", { currency: "USD", assets: [assetId] });
+      const ticker = priceResp.tickers?.[0];
+      if (ticker) {
+        if (ticker.price != null) info2.priceUsd = ticker.price;
+        if (ticker.change_24h != null) info2.priceChange24h = ticker.change_24h;
+        if (ticker.market_cap != null) info2.marketCapUsd = ticker.market_cap;
+        if (ticker.volume_24h != null) info2.volume24hUsd = ticker.volume_24h;
+      }
+    } catch {
+    }
+    return info2;
+  }
+  async getTokenHoldings(assets, fromTime = 0) {
+    const response = await this.client.gateway("POST", "/v1/assets", {
+      from_time: fromTime,
+      version: 2,
+      assets
+    });
+    return Array.isArray(response) ? response : response.docs ?? response.data ?? [];
+  }
+  async checkCoinStatus(assetId) {
+    const query = new URLSearchParams({
+      version: "8.4",
+      platform: "android",
+      include_security_info: "true",
+      include_solana_security_info: "true"
+    });
+    const raw = await this.client.gateway(
+      "GET",
+      `/v2/coinstatus/${encodeURIComponent(assetId)}`,
+      void 0,
+      query.toString()
+    );
+    return this.transformCoinStatus(assetId, raw);
+  }
+  async getAssetListings(params) {
+    const limit = params.limit || 20;
+    const query = new URLSearchParams({
+      version: "27",
+      currency: params.currency || "USD",
+      limit: String(params.sort ? Math.max(limit, 50) : limit)
+    });
+    if (params.categoryId) query.set("category_id", params.categoryId);
+    if (params.networks) query.set("networks", params.networks);
+    const response = await this.client.gateway(
+      "GET",
+      "/v1/assets/listings",
+      void 0,
+      query.toString()
+    );
+    const docs = response.docs || response.results || [];
+    const tokens = docs.map((doc) => {
+      const asset = doc.asset || doc;
+      const price = doc.price || {};
+      const market = doc.market || {};
+      const assetIdRaw = asset.asset_id || doc.asset_id || "";
+      const coinId = assetIdRaw ? parseInt(assetIdRaw.replace(/^c/, "").split("_")[0], 10) : NaN;
+      const chain2 = !isNaN(coinId) ? coinTypeToChainKey(coinId) || "" : "";
+      return {
+        assetId: assetIdRaw,
+        name: asset.name || doc.name || "",
+        symbol: asset.symbol || doc.symbol || "",
+        chain: chain2,
+        logoUrl: asset.icon_url || doc.icon_url,
+        priceUsd: price.price ?? doc.price_usd,
+        priceChange24h: price.percent_change_24h ?? doc.price_change_24h,
+        marketCapUsd: market.market_cap ?? price.market_cap ?? doc.market_cap_usd,
+        volume24hUsd: market.volume_24h ?? price.volume_24h ?? doc.volume_24h_usd
+      };
+    });
+    if (params.sort) {
+      const sortKeyMap = {
+        percent_change_24h: "priceChange24h",
+        market_cap: "marketCapUsd",
+        volume_24h: "volume24hUsd"
+      };
+      const key = sortKeyMap[params.sort] || "priceChange24h";
+      tokens.sort((a3, b3) => (b3[key] ?? 0) - (a3[key] ?? 0));
+    }
+    return tokens.slice(0, limit);
+  }
+  async getTrendingTokens(limit = 20, sort = "percent_change_24h") {
+    const knownAssets = [
+      "c60",
+      "c501",
+      "c0",
+      "c20000714",
+      "c966",
+      "c10009000",
+      "c8453",
+      "c10042221",
+      "c10000070",
+      "c195",
+      "c637",
+      "c607",
+      "c784",
+      "c397",
+      "c118",
+      "c2",
+      "c3",
+      "c10000250",
+      "c10000324",
+      "c81457"
+    ];
+    const response = await this.client.market("POST", "/v2/market/tickers", {
+      currency: "USD",
+      assets: knownAssets
+    });
+    const tickers = response.tickers || [];
+    const sortKey = sort === "market_cap" ? "market_cap" : sort === "volume_24h" ? "volume_24h" : "change_24h";
+    return tickers.sort((a3, b3) => (b3[sortKey] ?? 0) - (a3[sortKey] ?? 0)).slice(0, limit).map((t) => {
+      const coinId = t.id ? parseInt(t.id.replace(/^c/, ""), 10) : NaN;
+      const chain2 = !isNaN(coinId) ? coinTypeToChainKey(coinId) || "" : "";
+      return {
+        assetId: t.id || "",
+        name: t.slug || t.id || "",
+        symbol: t.slug?.toUpperCase() || "",
+        chain: chain2,
+        logoUrl: void 0,
+        priceUsd: t.price,
+        priceChange24h: t.change_24h,
+        marketCapUsd: t.market_cap,
+        volume24hUsd: t.volume_24h
+      };
+    });
+  }
+  transformCoinStatus(assetId, raw) {
+    if (!raw) return { assetId, isActive: false };
+    const asset = raw.asset || raw;
+    const security = raw.security_info || raw.securityInfo;
+    const solanaSecurity = raw.solana_security_info || raw.solanaSecurityInfo;
+    const warnings = [];
+    let isHoneypot;
+    if (security) {
+      const allItems = [
+        ...security.contract_security?.items || [],
+        ...security.honeypot_risk?.items || []
+      ];
+      for (const item of allItems) {
+        if (item.type === "warning" || item.type === "risk") {
+          const message = item.summary ?? item.description ?? item.code;
+          if (message) warnings.push(message);
+        }
+        if (item.code === "is_honeypot" && item.type === "risk") isHoneypot = true;
+      }
+    }
+    const totalRisks = (security?.contract_security?.num_risks ?? 0) + (security?.honeypot_risk?.num_risks ?? 0);
+    const totalWarnings = (security?.contract_security?.num_warnings ?? 0) + (security?.honeypot_risk?.num_warnings ?? 0);
+    const computedRiskLevel = totalRisks > 0 ? "high" : totalWarnings > 0 ? "medium" : security ? "low" : void 0;
+    let finalRiskLevel = security?.risk_level ?? security?.riskLevel ?? computedRiskLevel;
+    const knownStablecoins = ["USDC", "USDT", "DAI", "BUSD", "TUSD", "USDP", "FRAX", "PYUSD"];
+    const symbol = (asset.symbol ?? raw.symbol ?? "").toUpperCase();
+    let riskContext;
+    if (finalRiskLevel === "medium" && knownStablecoins.includes(symbol) && totalRisks === 0) {
+      riskContext = "Warnings are due to proxy contract pattern, common in audited stablecoins";
+      finalRiskLevel = "low";
+    }
+    return {
+      assetId,
+      name: asset.name ?? raw.name,
+      symbol: asset.symbol ?? raw.symbol,
+      isActive: raw.is_active ?? raw.isActive ?? true,
+      supportsSwap: raw.isSwapEnabled ?? raw.supports_swap ?? raw.supportsSwap,
+      supportsStaking: raw.isStakeEnabled ?? raw.supports_staking ?? raw.supportsStaking,
+      securityInfo: security ? {
+        isHoneypot: isHoneypot ?? security.is_honeypot ?? security.isHoneypot,
+        hasAudit: security.has_audit ?? security.hasAudit ?? security.is_scanned,
+        auditProvider: security.audit_provider ?? security.auditProvider ?? security.provider,
+        riskLevel: finalRiskLevel,
+        ...riskContext ? { riskContext } : {},
+        warnings: warnings.length > 0 ? warnings : security.warnings
+      } : void 0,
+      solanaSecurityInfo: solanaSecurity ? {
+        isMintable: solanaSecurity.is_mintable ?? solanaSecurity.isMintable,
+        hasFreezeAuthority: solanaSecurity.has_freeze_authority ?? solanaSecurity.hasFreezeAuthority,
+        riskLevel: solanaSecurity.risk_level ?? solanaSecurity.riskLevel
+      } : void 0
+    };
+  }
+};
 
 // ../swap/dist/index.mjs
 init_dist();
@@ -40308,6 +40162,37 @@ var SwapExecutor = class {
 
 // src/commands/transfer.ts
 var DEFAULT_MAX_TRANSFER_USD = 1e4;
+function mapBroadcastError(err) {
+  if (err instanceof CommandError) throw err;
+  if (err instanceof TwakError) {
+    if (err.code === "VALIDATION_ERROR") {
+      throw new TransferError("VALIDATION_ERROR", err.message);
+    }
+    if (err.code === "NETWORK_ERROR") {
+      throw new TransferError("NETWORK_ERROR", err.message);
+    }
+    if (err instanceof TwakApiError && err.statusCode === 429) {
+      throw new TransferError("RATE_LIMITED", err.message);
+    }
+    if (err.code === "API_ERROR") {
+      throw new TransferError("BROADCAST_FAILED", err.message);
+    }
+  }
+  const msg = err instanceof Error ? err.message : String(err);
+  if (/\binsufficient\b/i.test(msg)) {
+    throw new TransferError("INSUFFICIENT_BALANCE", msg);
+  }
+  if (/\bnetwork\b|\becon(nrefused|timedout)\b|\bfetch\b/i.test(msg)) {
+    throw new TransferError("NETWORK_ERROR", msg);
+  }
+  if (/\bbroadcast\b|\bsendtransaction\b|\brpc\b/i.test(msg)) {
+    throw new TransferError("BROADCAST_FAILED", msg);
+  }
+  if (/\bsigning\b|\bsignature\b|\bsign\s+(error|failed)\b/i.test(msg)) {
+    throw new TransferError("SIGN_FAILED", msg);
+  }
+  throw err;
+}
 async function resolvePassword2(opts) {
   if (opts.password) return opts.password;
   if (process.env.TWAK_WALLET_PASSWORD) return process.env.TWAK_WALLET_PASSWORD;
@@ -40424,35 +40309,7 @@ function registerTransferCommand(program3) {
           hdWallet
         });
       } catch (err) {
-        if (err instanceof CommandError) throw err;
-        if (err instanceof TwakError) {
-          if (err.code === "VALIDATION_ERROR") {
-            throw new TransferError("VALIDATION_ERROR", err.message);
-          }
-          if (err.code === "NETWORK_ERROR") {
-            throw new TransferError("NETWORK_ERROR", err.message);
-          }
-          if (err instanceof TwakApiError && err.statusCode === 429) {
-            throw new TransferError("RATE_LIMITED", err.message);
-          }
-          if (err.code === "API_ERROR") {
-            throw new TransferError("BROADCAST_FAILED", err.message);
-          }
-        }
-        const msg = err instanceof Error ? err.message : String(err);
-        if (/\binsufficient\b/i.test(msg)) {
-          throw new TransferError("INSUFFICIENT_BALANCE", msg);
-        }
-        if (/\bnetwork\b|\becon(nrefused|timedout)\b|\bfetch\b/i.test(msg)) {
-          throw new TransferError("NETWORK_ERROR", msg);
-        }
-        if (/\bbroadcast\b|\bsendtransaction\b|\brpc\b/i.test(msg)) {
-          throw new TransferError("BROADCAST_FAILED", msg);
-        }
-        if (/\bsigning\b|\bsignature\b|\bsign\s+(error|failed)\b/i.test(msg)) {
-          throw new TransferError("SIGN_FAILED", msg);
-        }
-        throw err;
+        mapBroadcastError(err);
       }
       const explorerUrl = getExplorerTxUrl(result.chainKey, result.hash);
       success("Transfer sent!");
@@ -40971,7 +40828,6 @@ function registerErc20Command(program3) {
 // src/commands/alert.ts
 init_dist2();
 init_dist();
-init_dist5();
 var assetCache = new AssetCache();
 async function resolveTokenLabel(tokenId, service) {
   const cached2 = await assetCache.get(tokenId);
@@ -41266,7 +41122,6 @@ var TransactionService = class {
 };
 
 // src/commands/query.ts
-init_dist5();
 init_dist4();
 var import_chalk6 = __toESM(require_source());
 function handleError(err, json) {
@@ -41622,13 +41477,11 @@ function registerQueryCommand(program3) {
         if (err instanceof CommandError) throw err;
       }
       const assetId = opts.token ? `c${coinId}_t${opts.token}` : `c${coinId}`;
-      const client = new BlockchainClient();
-      const balance = await client.getBalance(assetId, opts.address);
+      const httpClient = await getClient();
       let decimals = chain2.decimals;
       let symbol = chain2.symbol;
       if (opts.token) {
-        const apiClient = await getClient();
-        const swapClient = new SwapClient(apiClient);
+        const swapClient = new SwapClient(httpClient);
         const chainKey = opts.chain || Object.entries(CHAINS).find(([, c3]) => c3.coinId === coinId)?.[0] || "";
         const tokens = await swapClient.searchTokens({
           query: opts.token,
@@ -41643,22 +41496,21 @@ function registerQueryCommand(program3) {
           symbol = opts.token;
         }
       }
-      const fmt = (raw) => {
-        const big = BigInt(raw);
-        if (decimals === 0) return big.toString();
-        const div = 10n ** BigInt(decimals);
-        return `${big / div}.${(big % div).toString().padStart(decimals, "0").slice(0, 6)}`;
-      };
+      const balance = await fetchBalance(httpClient, assetId, opts.address);
+      const amts = balance.amounts;
+      const lockedHuman = formatAmount(amts.locked ?? "0", decimals);
+      const fiatRaw = amts.totalInFiat;
+      const totalUsd = fiatRaw && fiatRaw !== "" ? parseFloat(fiatRaw) : null;
       output(
         {
           address: opts.address,
           chain: chain2.id,
           symbol,
           ...opts.token ? { token: opts.token } : {},
-          available: fmt(balance.available),
-          ...balance.staked ? { staked: fmt(balance.staked) } : {},
-          ...balance.pending ? { pending: fmt(balance.pending) } : {},
-          total: fmt(balance.total),
+          available: formatAmount(amts.available ?? "0", decimals),
+          ...lockedHuman !== "0" ? { staked: lockedHuman } : {},
+          total: formatAmount(amts.total ?? "0", decimals),
+          totalUsd,
           raw: balance
         },
         opts.json
@@ -45895,12 +45747,11 @@ var NEVER = INVALID;
 // ../actions/dist/index.mjs
 init_dist();
 init_dist();
-init_dist5();
 init_dist();
 init_dist();
 init_dist();
 init_dist3();
-init_dist5();
+init_dist();
 init_dist();
 var ActionProvider = class {
   supportsChain(_chainId) {
@@ -46827,6 +46678,433 @@ var MarketActionProvider = class extends ActionProvider {
     };
   }
 };
+var ERC20_TRANSFER_SIG2 = "0xa9059cbb";
+var EVM_ADDRESS_RE = /^0x[a-fA-F0-9]{40}$/;
+var DEFAULT_MAX_OFFRAMP_USD = 1e4;
+function encodeErc20Transfer2(to3, amount) {
+  const paddedTo = to3.slice(2).padStart(64, "0");
+  const paddedAmount = amount.toString(16).padStart(64, "0");
+  return `${ERC20_TRANSFER_SIG2}${paddedTo}${paddedAmount}`;
+}
+function buildFollowUp(cryptoAsset, address, direction, paymentMethod) {
+  if (!cryptoAsset) return void 0;
+  let parsed;
+  try {
+    parsed = parseTokenId(cryptoAsset);
+  } catch {
+    return void 0;
+  }
+  const isErc20 = Boolean(parsed.contractAddress);
+  const action = isErc20 ? "get_token_holdings" : "get_balance";
+  if (direction === "onramp") {
+    return {
+      action,
+      arguments: { address, coin: parsed.coinId },
+      why: "Verify the purchased crypto has arrived at the destination address. TWAK has no background polling or completion webhook \u2014 the only way to confirm delivery is to poll the balance yourself.",
+      expectedChange: "increase",
+      pollEveryMs: 6e4,
+      typicalCompletion: "Card purchases usually settle within 5\u201330 minutes; bank transfers can take 1\u20133 business days. Stop polling once the balance has increased or after a reasonable ceiling (e.g., 1 hour for card, 4 days for bank)."
+    };
+  }
+  return {
+    action,
+    arguments: { address, coin: parsed.coinId },
+    why: "Poll this only AFTER calling confirm_offramp_transfer. The browser-hosted provider page cannot sign transactions (it has no access to the wallet keys). Required flow: (1) user opens the checkout URL and completes KYC + order creation in the browser, (2) the provider displays a deposit address (and memo/tag on some chains) + exact amount, (3) the agent calls confirm_offramp_transfer with those values to broadcast the payout natively, (4) then this balance-poll confirms the crypto has left the source address.",
+    expectedChange: "decrease",
+    pollEveryMs: 3e4,
+    typicalCompletion: "Balance decrease is visible within 1\u20132 minutes of confirm_offramp_transfer returning a tx hash. The subsequent fiat payout is processed separately by the provider (typically 1\u20133 business days for bank_transfer, faster for card).",
+    notes: paymentMethod ? `Fiat payout method: ${paymentMethod}` : void 0
+  };
+}
+function mapQuote(q3) {
+  return {
+    quoteId: q3.id,
+    cryptoAmount: q3.digital_money?.amount,
+    cryptoCurrency: q3.digital_money?.currency,
+    fiatAmount: q3.fiat_money?.amount,
+    fiatCurrency: q3.fiat_money?.currency,
+    provider: q3.provider?.name,
+    paymentMethod: q3.payment_method?.payment_method,
+    isRecommended: q3.is_recommended
+  };
+}
+function summarizeOnrampQuotes(quotes) {
+  if (quotes.length === 0) return "No quotes available for the requested fiat\u2192crypto purchase.";
+  const best = quotes[0];
+  const worstVsBest = quotes[quotes.length - 1].vsBestPct ?? 0;
+  const savingsHint = worstVsBest > 0 ? ` (saves ${worstVsBest.toFixed(2)}% vs cheapest)` : "";
+  return `${quotes.length} quote${quotes.length === 1 ? "" : "s"} available \u2014 best: ${best.cryptoAmount} ${best.cryptoCurrency} for ${best.fiatAmount} ${best.fiatCurrency} via ${best.provider}${savingsHint}.`;
+}
+function summarizeOfframpQuotes(quotes) {
+  if (quotes.length === 0) return "No quotes available for the requested crypto\u2192fiat sale.";
+  const best = quotes[0];
+  const worstVsBest = quotes[quotes.length - 1].vsBestPct ?? 0;
+  const savingsHint = worstVsBest > 0 ? ` (saves ${worstVsBest.toFixed(2)}% vs cheapest)` : "";
+  return `${quotes.length} quote${quotes.length === 1 ? "" : "s"} available \u2014 best: ${best.fiatAmount} ${best.fiatCurrency} via ${best.provider}${savingsHint}.`;
+}
+var OnrampActionProvider = class extends ActionProvider {
+  // An optional wallet provider lets the action auto-derive the caller's own
+  // address from the asset's chain, matching the safety contract that
+  // transfer/swap/erc20 actions already follow. Explicit `walletAddress`
+  // overrides the derivation for agents operating on behalf of other users.
+  //
+  // `priceLookup` + `maxTransferUsd` enable the same USD safety cap used by
+  // TransferActionProvider for the off-ramp payout path (confirm_offramp_transfer).
+  // Off-ramp sends crypto to a third-party deposit address, so the cap is
+  // strictly more important here than for peer-to-peer transfers.
+  constructor(walletProvider, priceLookup, maxTransferUsd = DEFAULT_MAX_OFFRAMP_USD) {
+    super();
+    this.walletProvider = walletProvider;
+    this.priceLookup = priceLookup;
+    this.maxTransferUsd = maxTransferUsd;
+  }
+  name = "onramp";
+  description = "Fiat on-ramp and off-ramp \u2014 buy crypto with fiat (USD, EUR, etc.) or sell crypto for fiat payouts. On-ramp: two-step flow (get quote \u2192 get checkout URL), provider sends crypto to the destination address. Off-ramp: three-step flow (get quote \u2192 get checkout URL \u2192 confirm_offramp_transfer). The off-ramp checkout URL runs in a plain browser which has no access to wallet keys, so the payout transaction must be broadcast natively via confirm_offramp_transfer once the user has read the provider's deposit address and exact amount. Destination/source address auto-derives from the configured wallet using the asset's chain. IMPORTANT: TWAK has no background polling or completion webhook for ramps. Tool responses include a `followUp` hint telling the agent exactly which balance tool to poll (with args and timing) to observe completion.";
+  getActions() {
+    return [
+      this.getOnrampQuote(),
+      this.getOnrampUrl(),
+      this.getOfframpQuote(),
+      this.getOfframpUrl(),
+      this.confirmOfframpTransfer()
+    ];
+  }
+  async resolveAddress(providedAddress, cryptoAsset) {
+    if (providedAddress) return providedAddress;
+    if (!this.walletProvider) {
+      throw new Error(
+        "walletAddress not provided and no wallet provider is configured. Pass walletAddress explicitly or configure an agent wallet."
+      );
+    }
+    if (!cryptoAsset) {
+      throw new Error(
+        "walletAddress not provided and cryptoAsset is missing \u2014 cannot derive chain. Pass walletAddress or cryptoAsset."
+      );
+    }
+    const chainKey = tokenIdToChain(cryptoAsset);
+    if (!chainKey) {
+      throw new Error(
+        `Cannot determine chain for asset ${cryptoAsset}. Pass walletAddress explicitly.`
+      );
+    }
+    return this.walletProvider.getAddress(chainKey);
+  }
+  getOnrampQuote() {
+    return {
+      name: "get_onramp_quote",
+      description: "Step 1 of buying crypto with fiat: get quotes from available payment providers (MoonPay, Transak, etc.) for a given fiat amount. Returns an array of quotes each with a quoteId \u2014 pass one to get_onramp_url to generate the checkout redirect.",
+      schema: external_exports.object({
+        fiatAmount: external_exports.coerce.number().positive().describe("Amount of fiat currency to spend (e.g., 100 for $100)."),
+        fiatCurrency: external_exports.string().length(3).default("USD").describe("Fiat currency as a 3-letter ISO 4217 code (e.g., USD, EUR, GBP)."),
+        cryptoAsset: external_exports.string().describe(
+          "Target crypto asset ID. Format: c<coinId> for native coins (e.g., c60 for ETH, c0 for BTC, c501 for SOL) or c<coinId>_t<contract> for tokens (e.g., c60_t0xA0b8... for USDC on Ethereum)."
+        ),
+        walletAddress: external_exports.string().optional().describe(
+          "Destination wallet address where the purchased crypto will be sent. OMIT to auto-derive from the configured wallet using cryptoAsset's chain \u2014 this is the safe default and prevents sending funds to a stranger by mistake. Only supply this when operating on behalf of a different user."
+        )
+      }),
+      invoke: async (ctx, input) => {
+        const address = await this.resolveAddress(input.walletAddress, input.cryptoAsset);
+        const query = new URLSearchParams({
+          amount: input.fiatAmount.toString(),
+          currency: input.fiatCurrency,
+          address
+        });
+        const result = await ctx.httpClient.gateway(
+          "GET",
+          `/v1/buycrypto/quote/${encodeURIComponent(input.cryptoAsset)}`,
+          void 0,
+          query.toString()
+        );
+        const mapped = (result?.quotes ?? []).map(mapQuote);
+        const quotes = rankQuotesByBest(mapped, (q3) => q3.cryptoAmount);
+        return {
+          success: true,
+          summary: summarizeOnrampQuotes(quotes),
+          address,
+          cryptoAsset: input.cryptoAsset,
+          quotes,
+          nextAction: quotes.length > 0 ? "Call get_onramp_url with the chosen quoteId to receive a browser redirect URL for checkout. quotes[0] is the best deal (lowest vsBestPct)." : "No quotes available \u2014 try a different fiatAmount or cryptoAsset."
+        };
+      }
+    };
+  }
+  getOnrampUrl() {
+    return {
+      name: "get_onramp_url",
+      description: "Step 2 of buying crypto with fiat: exchange a quoteId from get_onramp_quote for a browser redirect URL. The user opens that URL to complete KYC and payment with the provider; on success, the provider sends the purchased crypto to the destination address. After this tool returns a URL, poll the balance tool named in the `followUp` field to observe the incoming funds \u2014 there is no background polling, webhook, or push notification.",
+      schema: external_exports.object({
+        quoteId: external_exports.string().describe("Quote ID returned by get_onramp_quote."),
+        walletAddress: external_exports.string().optional().describe(
+          "Destination wallet address. OMIT to auto-derive from the configured wallet \u2014 requires cryptoAsset so the chain can be determined. Only supply this when operating on behalf of a different user."
+        ),
+        cryptoAsset: external_exports.string().optional().describe(
+          "Crypto asset ID that was used for the quote (e.g., c60 for ETH). Required when walletAddress is omitted so the chain can be derived for address lookup."
+        )
+      }),
+      invoke: async (ctx, input) => {
+        const address = await this.resolveAddress(input.walletAddress, input.cryptoAsset);
+        const query = new URLSearchParams({ address });
+        let result;
+        try {
+          result = await ctx.httpClient.gateway(
+            "GET",
+            `/v1/buycrypto/request/${encodeURIComponent(input.quoteId)}`,
+            void 0,
+            query.toString()
+          );
+        } catch (err) {
+          if (err instanceof TwakApiError && err.statusCode === 404) {
+            return {
+              success: false,
+              address,
+              summary: `No checkout URL returned for quoteId ${input.quoteId} \u2014 the quote has likely expired (buy quotes are short-lived). Request a fresh quote with get_onramp_quote and retry.`,
+              nextAction: "Call get_onramp_quote again to obtain a fresh quoteId, then retry get_onramp_url."
+            };
+          }
+          throw err;
+        }
+        const url = result.url ?? result.redirect_url;
+        const followUp = url ? buildFollowUp(input.cryptoAsset, address, "onramp") : void 0;
+        return {
+          success: Boolean(url),
+          address,
+          url,
+          summary: url ? `Open the URL in a browser to complete your purchase. Crypto will be delivered to ${address}.` : "No checkout URL returned \u2014 the quoteId may have expired. Request a new quote with get_onramp_quote.",
+          followUp
+        };
+      }
+    };
+  }
+  getOfframpQuote() {
+    return {
+      name: "get_offramp_quote",
+      description: "Step 1 of selling crypto for fiat: get quotes from available providers for converting a crypto amount into fiat. Returns an array of quotes each with a quoteId \u2014 pass one to get_offramp_url to generate the checkout redirect for completing KYC and order creation. The provider page cannot sign the payout (no key access in the browser); the agent must broadcast it natively via confirm_offramp_transfer once the deposit address is known.",
+      schema: external_exports.object({
+        cryptoAmount: external_exports.coerce.number().positive().describe("Amount of crypto to sell (e.g., 0.1 for 0.1 ETH)."),
+        cryptoAsset: external_exports.string().describe(
+          "Crypto asset ID to sell. Format: c<coinId> for native coins (e.g., c60 for ETH, c0 for BTC) or c<coinId>_t<contract> for tokens."
+        ),
+        fiatCurrency: external_exports.string().length(3).default("USD").describe("Target fiat currency as a 3-letter ISO 4217 code (e.g., USD, EUR, GBP)."),
+        paymentMethod: external_exports.enum(["ANY", "bank_transfer", "card"]).optional().default("ANY").describe(
+          'Payout method. Default "ANY" is a sentinel that matches any provider \u2014 recommended unless you specifically need "card" or "bank_transfer". Sending an unrecognised value (or `bank_transfer` in regions without bank-payout coverage) silently returns an empty quotes array.'
+        ),
+        walletAddress: external_exports.string().optional().describe(
+          "Source wallet address holding the crypto to be sold. OMIT to auto-derive from the configured wallet using cryptoAsset's chain \u2014 this is the safe default. Only supply this when operating on behalf of a different user."
+        )
+      }),
+      invoke: async (ctx, input) => {
+        const address = await this.resolveAddress(input.walletAddress, input.cryptoAsset);
+        const query = new URLSearchParams({
+          amount: input.cryptoAmount.toString(),
+          currency: input.fiatCurrency,
+          // iOS sends `asset_id` as both path segment AND query param. Mirroring that.
+          asset_id: input.cryptoAsset,
+          address,
+          // The HTTP gateway uses `payment_method` for both buy and sell, mirroring the
+          // iOS production client. The sell proto declares `payout_method` but the
+          // gateway doesn't honour it; trust runtime over proto.
+          payment_method: input.paymentMethod ?? "ANY",
+          // iOS always sends this even when the user holds no TWT; omitting it appears
+          // to filter out fee-waiver-aware providers in some regions.
+          twt_amount: "0"
+        });
+        const result = await ctx.httpClient.gateway(
+          "GET",
+          `/v1/sellcrypto/quote/${encodeURIComponent(input.cryptoAsset)}`,
+          void 0,
+          query.toString()
+        );
+        const mapped = (result?.quotes ?? []).filter((q3) => ALLOWED_OFFRAMP_PROVIDERS.has(q3.provider?.name ?? "")).map(mapQuote);
+        const quotes = rankQuotesByBest(mapped, (q3) => q3.fiatAmount);
+        return {
+          success: true,
+          summary: summarizeOfframpQuotes(quotes),
+          address,
+          cryptoAsset: input.cryptoAsset,
+          quotes,
+          nextAction: quotes.length > 0 ? "Call get_offramp_url with the chosen quoteId to receive a browser redirect URL for the sale. quotes[0] is the best deal (lowest vsBestPct)." : "No quotes available \u2014 try a different cryptoAmount, cryptoAsset, or paymentMethod."
+        };
+      }
+    };
+  }
+  getOfframpUrl() {
+    return {
+      name: "get_offramp_url",
+      description: "Step 2 of selling crypto for fiat: exchange a quoteId from get_offramp_quote for a browser checkout URL. The user opens that URL to complete KYC and order creation with the provider; the provider then displays a deposit address (plus a memo/tag on chains that require one) and the exact amount to send. The agent must then call confirm_offramp_transfer with those values to sign and broadcast the payout natively \u2014 the browser has no access to wallet keys and cannot sign the transfer itself. After the payout broadcasts, poll the balance tool named in the `followUp` field to observe the outgoing tx. Fiat payout arrives separately via the provider.",
+      schema: external_exports.object({
+        quoteId: external_exports.string().describe("Quote ID returned by get_offramp_quote."),
+        walletAddress: external_exports.string().optional().describe(
+          "Source wallet address. OMIT to auto-derive from the configured wallet \u2014 requires cryptoAsset so the chain can be determined. Only supply this when operating on behalf of a different user."
+        ),
+        cryptoAsset: external_exports.string().optional().describe(
+          "Crypto asset ID that was used for the quote (e.g., c60 for ETH). Required when walletAddress is omitted so the chain can be derived for address lookup."
+        )
+      }),
+      invoke: async (ctx, input) => {
+        const address = await this.resolveAddress(input.walletAddress, input.cryptoAsset);
+        const query = new URLSearchParams({ address });
+        let result;
+        try {
+          result = await ctx.httpClient.gateway(
+            "GET",
+            `/v1/sellcrypto/request/${encodeURIComponent(input.quoteId)}`,
+            void 0,
+            query.toString()
+          );
+        } catch (err) {
+          if (err instanceof TwakApiError && err.statusCode === 404) {
+            return {
+              success: false,
+              address,
+              summary: `No checkout URL returned for quoteId ${input.quoteId} \u2014 the quote has likely expired (sell quotes are short-lived). Request a fresh quote with get_offramp_quote and retry.`,
+              nextAction: "Call get_offramp_quote again to obtain a fresh quoteId, then retry get_offramp_url."
+            };
+          }
+          throw err;
+        }
+        const url = result.url ?? result.redirect_url;
+        const followUp = url ? buildFollowUp(input.cryptoAsset, address, "offramp") : void 0;
+        return {
+          success: Boolean(url),
+          address,
+          url,
+          summary: url ? `Open the URL in a browser to complete KYC and create the sell order from ${address}. The provider will display a deposit address (and memo/tag on chains that need one) plus the exact amount to send. Then call confirm_offramp_transfer with those values to broadcast the payout \u2014 the browser cannot sign it.` : "No checkout URL returned \u2014 the quoteId may have expired. Request a new quote with get_offramp_quote.",
+          nextAction: url ? "After the user reads the provider's deposit address + amount, call confirm_offramp_transfer with those values to broadcast the payout transaction." : void 0,
+          followUp
+        };
+      }
+    };
+  }
+  confirmOfframpTransfer() {
+    return {
+      name: "confirm_offramp_transfer",
+      description: "Step 3 of selling crypto for fiat: sign and broadcast the payout transaction to the provider's deposit address. Call this AFTER the user has completed KYC in the browser and can read the deposit address + exact amount the provider displayed. Works with any wallet provider that implements sendTransaction (the local agent wallet, or a WalletConnect-paired external wallet). EVM-only \u2014 for BTC / Solana / Cosmos off-ramps use the `twak onramp sell-confirm` CLI command instead. Returns a tx hash on success; fiat payout from the provider then arrives separately (no on-chain signal for that step).",
+      schema: external_exports.object({
+        depositAddress: external_exports.string().describe(
+          "The deposit address displayed by the provider after KYC. This is a third-party address \u2014 verify it matches what the provider shows before calling."
+        ),
+        cryptoAmount: external_exports.string().describe(
+          'Exact amount to send in human-readable format (e.g., "0.1" for 0.1 ETH). Must match the amount the provider displays; under-sending will invalidate the sell order.'
+        ),
+        cryptoAsset: external_exports.string().describe(
+          "Crypto asset being sold. Format: c<coinId> for native coins (e.g., c60 for ETH) or c<coinId>_t<contract> for ERC-20 tokens."
+        ),
+        decimals: external_exports.coerce.number().optional().describe(
+          "Token decimals. REQUIRED for ERC-20 assets (pass 6 for USDC/USDT, 18 for DAI, etc.) \u2014 omitting it will be rejected rather than silently defaulting to 18, because a wrong-decimals encode can over-pay the provider by orders of magnitude. Ignored for native coins."
+        ),
+        memo: external_exports.string().optional().describe(
+          "Memo / destination tag. Not used on EVM chains, so supplying one on EVM is a no-op warning. Exists in the schema for forward-compat with non-EVM chains."
+        ),
+        quoteId: external_exports.string().optional().describe(
+          "Quote ID from get_offramp_quote. Optional \u2014 included only for traceability in the response; tx details come from depositAddress / cryptoAmount."
+        )
+      }),
+      invoke: async (_ctx, input) => {
+        const signer = this.walletProvider;
+        if (!signer) {
+          return { success: false, error: "No wallet provider configured" };
+        }
+        let parsed;
+        try {
+          parsed = parseTokenId(input.cryptoAsset);
+        } catch {
+          throw new TransferError("VALIDATION_ERROR", `Invalid cryptoAsset: ${input.cryptoAsset}`);
+        }
+        const chainKey = coinTypeToChainKey(parsed.coinId);
+        if (!chainKey) {
+          throw new TransferError(
+            "CHAIN_UNSUPPORTED",
+            `Unsupported coin type in cryptoAsset: ${input.cryptoAsset}`
+          );
+        }
+        const chainDef = getChainById(chainKey);
+        if (!chainDef || chainDef.namespace !== "eip155") {
+          throw new TransferError(
+            "CHAIN_UNSUPPORTED",
+            `confirm_offramp_transfer is EVM-only. For ${chainKey} off-ramps use the CLI: twak onramp sell-confirm --asset ${input.cryptoAsset} --to <deposit> --amount <n>${input.memo ? " --memo <tag>" : ""}.`
+          );
+        }
+        const caip2 = `eip155:${chainDef.chainId}`;
+        if (!EVM_ADDRESS_RE.test(input.depositAddress)) {
+          throw new TransferError(
+            "VALIDATION_ERROR",
+            `depositAddress is not a valid EVM address: ${input.depositAddress}. Double-check what the provider displayed.`
+          );
+        }
+        if (parsed.contractAddress && !EVM_ADDRESS_RE.test(parsed.contractAddress)) {
+          throw new TransferError(
+            "VALIDATION_ERROR",
+            `Malformed token contract in cryptoAsset: ${parsed.contractAddress}`
+          );
+        }
+        if (parsed.contractAddress && input.decimals === void 0) {
+          throw new TransferError(
+            "VALIDATION_ERROR",
+            `decimals is required for ERC-20 asset ${input.cryptoAsset}. Pass the token's decimals explicitly (6 for USDC/USDT, 18 for DAI, etc.) \u2014 silently defaulting to 18 could over-pay the provider by orders of magnitude.`
+          );
+        }
+        const decimals = parsed.contractAddress ? input.decimals : 18;
+        try {
+          assertStrictPositiveAmount(input.cryptoAmount, decimals);
+        } catch (err) {
+          throw new TransferError(
+            "VALIDATION_ERROR",
+            err instanceof Error ? err.message : String(err)
+          );
+        }
+        if (this.priceLookup) {
+          try {
+            const tokenInfo = resolveToken(input.cryptoAsset, chainKey);
+            const tokenAddress = tokenInfo?.address ?? parsed.contractAddress ?? "";
+            const price = await this.priceLookup.getTokenPrice(chainKey, tokenAddress);
+            if (price && price > 0) {
+              const usdValue = parseFloat(input.cryptoAmount) * price;
+              if (usdValue > this.maxTransferUsd) {
+                return {
+                  success: false,
+                  error: `Off-ramp payout value ~$${usdValue.toFixed(2)} USD exceeds safety limit of $${this.maxTransferUsd}. Use the CLI with --max-usd ${Math.ceil(usdValue)} or --skip-safety-check to proceed.`
+                };
+              }
+            }
+          } catch {
+          }
+        }
+        const atomic = parseAmount(input.cryptoAmount, decimals);
+        let txHash;
+        if (parsed.contractAddress) {
+          const calldata = encodeErc20Transfer2(input.depositAddress, BigInt(atomic));
+          txHash = await signer.sendTransaction({
+            chainId: caip2,
+            to: parsed.contractAddress,
+            data: calldata,
+            value: "0x0"
+          });
+        } else {
+          txHash = await signer.sendTransaction({
+            chainId: caip2,
+            to: input.depositAddress,
+            data: "0x",
+            value: "0x" + BigInt(atomic).toString(16)
+          });
+        }
+        const explorerUrl = getExplorerTxUrl(chainKey, txHash) || void 0;
+        return {
+          success: true,
+          txHash,
+          chain: chainKey,
+          to: input.depositAddress,
+          amount: input.cryptoAmount,
+          asset: input.cryptoAsset,
+          memoIgnored: input.memo ? `A memo was supplied (${input.memo}) but EVM transactions have no memo field \u2014 it was ignored. If the provider requires a memo, they likely expect a non-EVM chain.` : void 0,
+          quoteId: input.quoteId,
+          explorer: explorerUrl,
+          summary: `Off-ramp payout of ${input.cryptoAmount} ${input.cryptoAsset} broadcast to ${input.depositAddress} on ${chainKey}. Fiat payout from the provider arrives separately.`
+        };
+      }
+    };
+  }
+};
 var AutomateActionProvider = class extends ActionProvider {
   constructor(automationStore, swapClient, walletProvider, blockchainClient) {
     super();
@@ -55882,6 +56160,7 @@ function registerServeCommand(program3) {
     registry2.register(new AgentWalletActionProvider(blockchainClient));
     registry2.register(new TokenActionProvider(blockchainClient, agentWallet));
     registry2.register(new MarketActionProvider());
+    registry2.register(new OnrampActionProvider(walletProvider, swapClient));
     registry2.register(
       new AutomateActionProvider(automationStore, swapClient, walletProvider, blockchainClient)
     );
@@ -55916,11 +56195,435 @@ function registerServeCommand(program3) {
   });
 }
 
+// src/commands/onramp.ts
+var import_chalk7 = __toESM(require_source());
+init_dist();
+var DEFAULT_MAX_OFFRAMP_USD2 = 1e4;
+function fmtVsBest(pct) {
+  return pct === 0 ? "0.00%" : `-${pct.toFixed(2)}%`;
+}
+function printBuyQuoteTable(rows, fiatAmount, fiatCurrency, asset) {
+  const cols = rows.map((r3) => ({
+    provider: r3.provider ?? "",
+    pay: `${r3.fiatAmount ?? ""} ${r3.fiatCurrency ?? ""}`.trim(),
+    receive: `${r3.cryptoAmount ?? ""} ${r3.cryptoCurrency ?? ""}`.trim(),
+    vsBest: fmtVsBest(r3.vsBestPct),
+    quoteId: r3.quoteId ?? ""
+  }));
+  const w4 = {
+    provider: Math.max(8, ...cols.map((c3) => c3.provider.length)),
+    pay: Math.max(3, ...cols.map((c3) => c3.pay.length)),
+    receive: Math.max(7, ...cols.map((c3) => c3.receive.length)),
+    vsBest: Math.max(7, ...cols.map((c3) => c3.vsBest.length))
+  };
+  const cryptoCurrency = rows[0]?.cryptoCurrency ?? "";
+  console.log(`${rows.length} quotes for ${fiatAmount} ${fiatCurrency} \u2192 ${cryptoCurrency}
+`);
+  console.log(
+    import_chalk7.default.bold(
+      `${"PROVIDER".padEnd(w4.provider)}  ${"PAY".padEnd(w4.pay)}  ${"RECEIVE".padEnd(w4.receive)}  ${"VS BEST".padEnd(w4.vsBest)}  QUOTE ID`
+    )
+  );
+  for (const c3 of cols) {
+    console.log(
+      `${c3.provider.padEnd(w4.provider)}  ${c3.pay.padEnd(w4.pay)}  ${c3.receive.padEnd(w4.receive)}  ${c3.vsBest.padEnd(w4.vsBest)}  ${c3.quoteId}`
+    );
+  }
+  const best = rows[0];
+  console.log(
+    `
+\u2192 best: ${import_chalk7.default.bold(best.provider ?? "")} \u2014 run: ${import_chalk7.default.bold(`twak onramp buy --quote-id ${best.quoteId} --asset ${asset}`)}`
+  );
+}
+function printSellQuoteTable(rows, cryptoAmount, cryptoAsset) {
+  const cols = rows.map((r3) => ({
+    provider: r3.provider ?? "",
+    pay: `${r3.cryptoAmount ?? ""} ${r3.cryptoCurrency ?? ""}`.trim(),
+    receive: `${r3.fiatAmount ?? ""} ${r3.fiatCurrency ?? ""}`.trim(),
+    vsBest: fmtVsBest(r3.vsBestPct),
+    quoteId: r3.quoteId ?? ""
+  }));
+  const w4 = {
+    provider: Math.max(8, ...cols.map((c3) => c3.provider.length)),
+    pay: Math.max(3, ...cols.map((c3) => c3.pay.length)),
+    receive: Math.max(7, ...cols.map((c3) => c3.receive.length)),
+    vsBest: Math.max(7, ...cols.map((c3) => c3.vsBest.length))
+  };
+  const fiatCurrency = rows[0]?.fiatCurrency ?? "";
+  console.log(`${rows.length} quotes for ${cryptoAmount} ${cryptoAsset} \u2192 ${fiatCurrency}
+`);
+  console.log(
+    import_chalk7.default.bold(
+      `${"PROVIDER".padEnd(w4.provider)}  ${"PAY".padEnd(w4.pay)}  ${"RECEIVE".padEnd(w4.receive)}  ${"VS BEST".padEnd(w4.vsBest)}  QUOTE ID`
+    )
+  );
+  for (const c3 of cols) {
+    console.log(
+      `${c3.provider.padEnd(w4.provider)}  ${c3.pay.padEnd(w4.pay)}  ${c3.receive.padEnd(w4.receive)}  ${c3.vsBest.padEnd(w4.vsBest)}  ${c3.quoteId}`
+    );
+  }
+  const best = rows[0];
+  console.log(
+    `
+\u2192 best: ${import_chalk7.default.bold(best.provider ?? "")} \u2014 run: ${import_chalk7.default.bold(`twak onramp sell --quote-id ${best.quoteId} --asset ${cryptoAsset}`)}`
+  );
+}
+async function resolveWalletAddress(opts, context) {
+  if (opts.wallet) {
+    warn(
+      `Using manually specified ${context} address ${opts.wallet}. This is not derived from your stored wallet \u2014 double-check it before proceeding.`
+    );
+    return opts.wallet;
+  }
+  if (!opts.asset) {
+    throw new Error(
+      "Provide --wallet, or pass --asset so the address can be derived from your stored wallet."
+    );
+  }
+  const chainKey = tokenIdToChain(opts.asset);
+  if (!chainKey) {
+    throw new Error(
+      `Cannot determine chain for asset ${opts.asset}. Pass --wallet explicitly or use a supported asset ID.`
+    );
+  }
+  await ensureTrustSDK();
+  const password = await resolvePassword({ password: opts.password });
+  const provider = await AgentWalletProvider.fromStorage(password);
+  const address = await provider.getAddress(chainKey);
+  info(`Using ${context} address ${address} on ${chainKey} (derived from your stored wallet).`);
+  return address;
+}
+function registerOnrampCommand(program3) {
+  const onramp = program3.command("onramp").description("Buy or sell crypto with fiat currency");
+  onramp.command("quote").description("Get quotes for buying crypto with fiat currency").requiredOption("--amount <n>", "Fiat amount (e.g., 100)").requiredOption("--asset <id>", "Crypto asset ID (e.g., c60 for ETH)").option(
+    "--wallet <address>",
+    "Destination wallet address (defaults to your stored wallet address for the asset's chain)"
+  ).option("--currency <code>", "Fiat currency code", "USD").option(
+    "--password <password>",
+    "Wallet password (only needed when --wallet is omitted; falls back to keychain / TWAK_WALLET_PASSWORD)"
+  ).option("--json", "JSON output").action(async (opts) => {
+    try {
+      const address = await resolveWalletAddress(opts, "destination");
+      const client = await getClient();
+      const query = new URLSearchParams({
+        amount: opts.amount,
+        currency: opts.currency,
+        address
+      });
+      const result = await client.gateway(
+        "GET",
+        `/v1/buycrypto/quote/${encodeURIComponent(opts.asset)}`,
+        void 0,
+        query.toString()
+      );
+      const mapped = (result?.quotes || []).map((q3) => ({
+        quoteId: q3.id,
+        cryptoAmount: q3.digital_money?.amount,
+        cryptoCurrency: q3.digital_money?.currency,
+        fiatAmount: q3.fiat_money?.amount,
+        fiatCurrency: q3.fiat_money?.currency,
+        provider: q3.provider?.name,
+        paymentMethod: q3.payment_method?.payment_method
+      }));
+      const quotes = rankQuotesByBest(mapped, (q3) => q3.cryptoAmount);
+      if (quotes.length === 0) {
+        if (!opts.json)
+          info(
+            `No quotes available for ${opts.amount} ${opts.currency} \u2192 ${opts.asset}. Try a different amount, currency, or asset.`
+          );
+        output([], opts.json);
+      } else if (opts.json) {
+        output(quotes, true);
+      } else {
+        printBuyQuoteTable(quotes, opts.amount, opts.currency, opts.asset);
+      }
+    } catch (err) {
+      handleCommandError(err, opts.json, "Quote failed");
+    }
+    safeExit();
+  });
+  onramp.command("buy").description("Get a URL to complete a fiat-to-crypto purchase (pass quoteId from onramp quote)").requiredOption("--quote-id <id>", "Quote ID from onramp quote").option(
+    "--wallet <address>",
+    "Destination wallet address (defaults to your stored wallet address for the asset's chain)"
+  ).option(
+    "--asset <id>",
+    "Crypto asset ID (e.g., c60) \u2014 used to derive your address when --wallet is omitted"
+  ).option(
+    "--password <password>",
+    "Wallet password (only needed when --wallet is omitted; falls back to keychain / TWAK_WALLET_PASSWORD)"
+  ).option("--json", "JSON output").action(async (opts) => {
+    try {
+      const address = await resolveWalletAddress(opts, "destination");
+      const client = await getClient();
+      const query = new URLSearchParams({ address });
+      const result = await client.gateway(
+        "GET",
+        `/v1/buycrypto/request/${encodeURIComponent(opts.quoteId)}`,
+        void 0,
+        query.toString()
+      );
+      const url = result.url ?? result.redirect_url;
+      if (!opts.json && url) {
+        info(`Open this URL to complete your purchase:
+${url}`);
+        const chainKey = opts.asset ? tokenIdToChain(opts.asset) : void 0;
+        if (chainKey) {
+          info(
+            `After payment completes (typically 5\u201330 min for card, 1\u20133 business days for bank transfer), check your balance with:
+  twak wallet balance --chain ${chainKey}`
+          );
+        } else {
+          info(
+            "After payment completes, check your balance with: twak wallet balance --chain <chain>"
+          );
+        }
+      }
+      output({ url }, opts.json);
+    } catch (err) {
+      handleCommandError(err, opts.json, "Buy failed");
+    }
+    safeExit();
+  });
+  onramp.command("sell-quote").description("Get quotes for selling crypto to receive fiat").requiredOption("--amount <n>", "Crypto amount to sell (e.g., 0.1)").requiredOption("--asset <id>", "Crypto asset ID to sell (e.g., c60 for ETH)").option(
+    "--wallet <address>",
+    "Source wallet address (defaults to your stored wallet address for the asset's chain)"
+  ).option("--currency <code>", "Fiat currency code", "USD").option(
+    "--method <method>",
+    "Payout method: ANY (default sentinel \u2014 matches any provider), card, bank_transfer",
+    "ANY"
+  ).option(
+    "--password <password>",
+    "Wallet password (only needed when --wallet is omitted; falls back to keychain / TWAK_WALLET_PASSWORD)"
+  ).option("--json", "JSON output").action(async (opts) => {
+    try {
+      const address = await resolveWalletAddress(opts, "source");
+      const client = await getClient();
+      const query = new URLSearchParams({
+        amount: opts.amount,
+        currency: opts.currency,
+        // iOS sends `asset_id` as both path segment AND query param. Mirroring that —
+        // the gateway appears to require the query form even when the path has it.
+        asset_id: opts.asset,
+        address,
+        // The HTTP gateway uses `payment_method` for both buy and sell, even though
+        // the sell proto declares `payout_method` — runtime evidence (iOS production
+        // client) is the source of truth here.
+        payment_method: opts.method,
+        // iOS always sends this even when the user holds no TWT; omitting it appears
+        // to filter out fee-waiver-aware providers in some regions.
+        twt_amount: "0"
+      });
+      const result = await client.gateway(
+        "GET",
+        `/v1/sellcrypto/quote/${encodeURIComponent(opts.asset)}`,
+        void 0,
+        query.toString()
+      );
+      const mapped = (result?.quotes || []).filter((q3) => ALLOWED_OFFRAMP_PROVIDERS.has(q3.provider?.name ?? "")).map((q3) => ({
+        quoteId: q3.id,
+        cryptoAmount: q3.digital_money?.amount,
+        cryptoCurrency: q3.digital_money?.currency,
+        fiatAmount: q3.fiat_money?.amount,
+        fiatCurrency: q3.fiat_money?.currency,
+        provider: q3.provider?.name,
+        isRecommended: q3.is_recommended
+      }));
+      const quotes = rankQuotesByBest(mapped, (q3) => q3.fiatAmount);
+      if (quotes.length === 0) {
+        if (!opts.json)
+          info(
+            `No quotes available for ${opts.amount} ${opts.asset} \u2192 ${opts.currency}. Try a different amount, asset, or currency.`
+          );
+        output([], opts.json);
+      } else if (opts.json) {
+        output(quotes, true);
+      } else {
+        printSellQuoteTable(quotes, opts.amount, opts.asset);
+      }
+    } catch (err) {
+      handleCommandError(err, opts.json, "Sell quote failed");
+    }
+    safeExit();
+  });
+  onramp.command("sell").description(
+    "Get a URL to complete a crypto-to-fiat sale (pass quoteId from onramp sell-quote)"
+  ).requiredOption("--quote-id <id>", "Quote ID from onramp sell-quote").option(
+    "--wallet <address>",
+    "Source wallet address (defaults to your stored wallet address for the asset's chain)"
+  ).option(
+    "--asset <id>",
+    "Crypto asset ID (e.g., c60) \u2014 used to derive your address when --wallet is omitted"
+  ).option(
+    "--password <password>",
+    "Wallet password (only needed when --wallet is omitted; falls back to keychain / TWAK_WALLET_PASSWORD)"
+  ).option("--json", "JSON output").action(async (opts) => {
+    try {
+      const address = await resolveWalletAddress(opts, "source");
+      const client = await getClient();
+      const query = new URLSearchParams({ address });
+      const result = await client.gateway(
+        "GET",
+        `/v1/sellcrypto/request/${encodeURIComponent(opts.quoteId)}`,
+        void 0,
+        query.toString()
+      );
+      const url = result.url ?? result.redirect_url;
+      if (!opts.json && url) {
+        info(`Open this URL and complete KYC + the sell order in your browser:
+${url}`);
+        info(
+          "The provider will show a deposit address (and a memo/tag for chains that need one) plus the exact amount to send. The browser has no access to your keys \u2014 it cannot sign the transfer itself. Copy those values back here and finalise the payout with:"
+        );
+        const assetArg = opts.asset ? ` --asset ${opts.asset}` : " --asset <assetId>";
+        info(
+          `  twak onramp sell-confirm${assetArg} --to <deposit-address> --amount <exact-amount> [--memo <tag>]`
+        );
+        info(
+          "Once sell-confirm broadcasts, fiat arrives via the provider separately (typically 1\u20133 business days for bank transfer, faster for card)."
+        );
+      }
+      output({ url }, opts.json);
+    } catch (err) {
+      handleCommandError(err, opts.json, "Sell failed");
+    }
+    safeExit();
+  });
+  onramp.command("sell-confirm").description(
+    "Finalise an off-ramp by broadcasting the payout transaction to the provider's deposit address. Run this after completing KYC in the browser and copying the deposit address + exact amount shown by the provider."
+  ).requiredOption("--asset <id>", "Crypto asset ID being sold (e.g., c60 for ETH, c0 for BTC)").requiredOption("--to <address>", "Deposit address shown by the provider after KYC").requiredOption(
+    "--amount <n>",
+    "Exact amount to send, in human-readable format (must match the amount the provider displays)"
+  ).option(
+    "--memo <tag>",
+    "Memo / destination tag required by some chains (Cosmos, XRP, Stellar, BNB Beacon). Include this when the provider displays one \u2014 funds can be unrecoverable without it."
+  ).option(
+    "--quote-id <id>",
+    "Quote ID from onramp sell-quote. Optional \u2014 included only for traceability in the output; the authoritative tx details come from --to / --amount."
+  ).option(
+    "--max-usd <n>",
+    `Maximum allowed payout value in USD (default: ${DEFAULT_MAX_OFFRAMP_USD2})`
+  ).option("--skip-safety-check", "Skip the USD-value safety cap").option(
+    "--password <password>",
+    "Wallet password (falls back to keychain / TWAK_WALLET_PASSWORD)"
+  ).option("--json", "JSON output").action(async (opts) => {
+    try {
+      await ensureTrustSDK();
+      const password = await resolvePassword({ password: opts.password });
+      const provider = await AgentWalletProvider.fromStorage(password);
+      let coinId;
+      try {
+        ({ coinId } = parseTokenId(opts.asset));
+      } catch {
+        throw new TransferError("VALIDATION_ERROR", `Invalid asset ID: ${opts.asset}`);
+      }
+      const chainKey = coinTypeToChainKey(coinId);
+      if (!chainKey) {
+        throw new TransferError(
+          "CHAIN_UNSUPPORTED",
+          `Unsupported coin type in asset ID: ${opts.asset}`
+        );
+      }
+      const parsedAmount = parseFloat(opts.amount);
+      if (!Number.isFinite(parsedAmount) || parsedAmount <= 0) {
+        throw new TransferError("VALIDATION_ERROR", "--amount must be a positive number");
+      }
+      const httpClient = await getClient();
+      let decimals;
+      try {
+        const assetInfo = await new SecurityService(httpClient).getAssetInfo(opts.asset);
+        decimals = assetInfo.decimals;
+      } catch {
+      }
+      try {
+        assertStrictPositiveAmount(opts.amount, decimals);
+      } catch (err) {
+        throw new TransferError(
+          "VALIDATION_ERROR",
+          err instanceof Error ? err.message : String(err)
+        );
+      }
+      if (!opts.skipSafetyCheck) {
+        const maxUsd = parseFloat(opts.maxUsd ?? String(DEFAULT_MAX_OFFRAMP_USD2));
+        if (!Number.isFinite(maxUsd) || maxUsd <= 0) {
+          throw new TransferError("VALIDATION_ERROR", "--max-usd must be a positive number");
+        }
+        try {
+          const tokenInfo = resolveToken(opts.asset, chainKey);
+          if (tokenInfo) {
+            const swapClient = new SwapClient(httpClient);
+            const price = await swapClient.getTokenPrice(chainKey, tokenInfo.address);
+            if (price && price > 0) {
+              const usdValue = parsedAmount * price;
+              if (usdValue > maxUsd) {
+                throw new TransferError(
+                  "USD_LIMIT_EXCEEDED",
+                  `Payout value ~$${usdValue.toFixed(2)} USD exceeds safety limit of $${maxUsd}. Re-run with --max-usd ${Math.ceil(usdValue)} or --skip-safety-check to proceed.`
+                );
+              }
+              if (usdValue > 1e3) {
+                warn(`High-value off-ramp payout: ~$${usdValue.toFixed(2)} USD`);
+              }
+            }
+          }
+        } catch (err) {
+          if (err instanceof CommandError) throw err;
+          warn(
+            "Could not verify payout USD value (price lookup failed). Use --skip-safety-check to suppress."
+          );
+        }
+      }
+      const address = await provider.getAddress(chainKey);
+      warn(
+        `About to send ${opts.amount} ${opts.asset} from ${address} to third-party off-ramp deposit address ${opts.to}${opts.memo ? ` (memo: ${opts.memo})` : ""}. This address is not under your control \u2014 verify it matches what the provider displayed before continuing.`
+      );
+      const client = provider.getBlockchainClient();
+      const hdWallet = provider.getSigner().getHDWallet();
+      let result;
+      try {
+        result = await client.transfer({
+          assetId: opts.asset,
+          to: opts.to,
+          amount: opts.amount,
+          decimals,
+          memo: opts.memo,
+          hdWallet
+        });
+      } catch (err) {
+        mapBroadcastError(err);
+      }
+      const explorerUrl = getExplorerTxUrl(result.chainKey, result.hash);
+      success("Off-ramp payout broadcast!");
+      if (!opts.json) {
+        info(
+          "Fiat will be credited by the provider separately (typically 1\u20133 business days for bank transfer, faster for card). There is no on-chain signal for that step \u2014 watch for the provider's email/SMS confirmation."
+        );
+      }
+      output(
+        {
+          hash: result.hash,
+          chain: result.chainKey,
+          from: address,
+          to: opts.to,
+          amount: opts.amount,
+          asset: opts.asset,
+          memo: opts.memo,
+          quoteId: opts.quoteId,
+          explorer: explorerUrl
+        },
+        opts.json
+      );
+    } catch (err) {
+      handleCommandError(err, opts.json, "Sell confirm failed");
+    }
+    safeExit();
+  });
+}
+
 // src/commands/automate.ts
 init_dist2();
 init_dist();
 function parseInterval(value) {
-  const match = value.match(/^(\d+(?:\.\d+)?)\s*(s|m|h)?$/i);
+  const match = value.match(/^(\d+(?:\.\d+)?)\s*(s|m|h|d)?$/i);
   if (!match) return null;
   const num = parseFloat(match[1]);
   if (isNaN(num)) return null;
@@ -55928,9 +56631,11 @@ function parseInterval(value) {
   if (unit === "s") return num * 1e3;
   if (unit === "m") return num * 6e4;
   if (unit === "h") return num * 36e5;
+  if (unit === "d") return num * 864e5;
   return num * 1e3;
 }
 function formatInterval(ms3) {
+  if (ms3 >= 864e5 && ms3 % 864e5 === 0) return `${ms3 / 864e5}d`;
   if (ms3 >= 36e5) return `${ms3 / 36e5}h`;
   if (ms3 >= 6e4) return `${ms3 / 6e4}m`;
   return `${ms3 / 1e3}s`;
@@ -55942,8 +56647,10 @@ function formatRelativeTime(diffMs) {
     value = `${Math.round(absDiff / 1e3)}s`;
   } else if (absDiff < 36e5) {
     value = `${Math.round(absDiff / 6e4)}m`;
-  } else {
+  } else if (absDiff < 864e5) {
     value = `${Math.round(absDiff / 36e5)}h`;
+  } else {
+    value = `${Math.round(absDiff / 864e5)}d`;
   }
   if (diffMs <= 0) return "overdue";
   return `in ${value}`;
@@ -55957,7 +56664,7 @@ function formatTimeAgo(isoDate) {
 }
 function registerAutomateCommand(program3) {
   const automate = program3.command("automate").description("Manage DCA and limit order automations");
-  automate.command("add").description("Create a DCA or limit order automation").requiredOption("--from <token>", "Source token (e.g., USDC)").requiredOption("--to <token>", "Destination token (e.g., ETH)").option("--chain <chain>", "Chain", "ethereum").requiredOption("--amount <n>", "Amount of source token per run").option("--interval <duration>", "DCA interval \u2014 e.g. 30s, 5m, 1h (creates DCA automation)").option("--price <usd>", "Target price in USD (creates limit order)").option("--condition <cond>", "Price condition: above or below", "below").option("--max-runs <n>", "Stop after N executions").option("--expires <date>", "Expiry date (ISO 8601, e.g. 2026-04-01)").option("--json", "JSON output").action(async (opts) => {
+  automate.command("add").description("Create a DCA or limit order automation").requiredOption("--from <token>", "Source token (e.g., USDC)").requiredOption("--to <token>", "Destination token (e.g., ETH)").option("--chain <chain>", "Chain", "ethereum").requiredOption("--amount <n>", "Amount of source token per run").option("--interval <duration>", "DCA interval \u2014 e.g. 30s, 5m, 1h, 7d (creates DCA automation)").option("--price <usd>", "Target price in USD (creates limit order)").option("--condition <cond>", "Price condition: above or below", "below").option("--max-runs <n>", "Stop after N executions").option("--expires <date>", "Expiry date (ISO 8601, e.g. 2026-04-01)").option("--json", "JSON output").action(async (opts) => {
     try {
       if (opts.interval && opts.price) {
         throw new AutomationError(
@@ -56326,7 +57033,7 @@ var crypto6 = __toESM(require("crypto"));
 // package.json
 var package_default = {
   name: "@trustwallet/cli",
-  version: "0.10.0",
+  version: "0.11.0",
   description: "TWAK CLI \u2014 command-line interface for Trust Wallet Agent Kit",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -56495,13 +57202,14 @@ function ts3() {
   return (/* @__PURE__ */ new Date()).toISOString().replace("T", " ").slice(0, 19);
 }
 function parseInterval2(value) {
-  const match = value.match(/^(\d+(?:\.\d+)?)\s*(s|m|h)?$/i);
+  const match = value.match(/^(\d+(?:\.\d+)?)\s*(s|m|h|d)?$/i);
   if (!match) return null;
   const num = parseFloat(match[1]);
   if (isNaN(num)) return null;
   const unit = (match[2] || "s").toLowerCase();
   if (unit === "m") return num * 60;
   if (unit === "h") return num * 3600;
+  if (unit === "d") return num * 86400;
   return num;
 }
 function registerWatchCommand(program3) {
@@ -56509,7 +57217,7 @@ function registerWatchCommand(program3) {
     "Background watcher \u2014 polls prices to trigger alerts and execute DCA/limit automations"
   ).option(
     "--interval <duration>",
-    "Poll interval \u2014 e.g. 30s, 5m, 1h, or plain number (seconds)",
+    "Poll interval \u2014 e.g. 30s, 5m, 1h, 1d, or plain number (seconds)",
     "60"
   ).option("--password <password>", "Wallet password for executing swaps").option("--auto-lock <minutes>", "Auto-lock wallet after N minutes of inactivity").option("--dry-run", "Check conditions without executing swaps").option("--json", "JSON output per tick").action(async (opts) => {
     let client;
@@ -56836,6 +57544,7 @@ registerErc20Command(program2);
 registerAlertCommand(program2);
 registerQueryCommand(program2);
 registerServeCommand(program2);
+registerOnrampCommand(program2);
 registerAutomateCommand(program2);
 registerX402Command(program2);
 registerTelemetryCommand(program2);