@vapi-network/cli 0.9.0 → 0.9.4

package/dist/cli.js

@@ -10116,11 +10116,9 @@ var init_call = __esm({
   }
 });
 
-// src/cli.ts
-import { spawn as spawn3 } from "node:child_process";
-import { stat as stat16 } from "node:fs/promises";
-import { join as join28 } from "node:path";
-import { createInterface as createInterface3 } from "node:readline/promises";
+// src/update-check.ts
+import { lookup } from "node:dns/promises";
+import { mkdir as mkdir21, readFile as readFile29, writeFile as writeFile12 } from "node:fs/promises";
 
 // ../../node_modules/.pnpm/zod@4.5.4/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -28988,365 +28986,6 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
-// ../core/src/marketplace-contracts.ts
-var MARKETPLACE_DISCOVERY_PROTOCOL = "vapi.marketplace.discovery/1";
-var MARKETPLACE_RANKING_VERSION = "marketplace-ranking-v1";
-var MARKETPLACE_KINDS = ["api", "service_offer", "open_request"];
-var MARKETPLACE_EXECUTION_METHODS = [
-  "GET",
-  "HEAD",
-  "POST",
-  "PUT",
-  "PATCH",
-  "DELETE"
-];
-var marketplaceExecutionMethodSchema = external_exports.enum(MARKETPLACE_EXECUTION_METHODS);
-var marketplaceKindSchema = external_exports.enum(MARKETPLACE_KINDS);
-var EXECUTION_MODES = ["direct", "gateway"];
-var executionModeSchema = external_exports.enum(EXECUTION_MODES);
-var PROVENANCES = ["indexed", "self_listed", "partner"];
-var provenanceSchema = external_exports.enum(PROVENANCES);
-var FIRST_PARTY_PROVENANCES = ["self_listed", "partner"];
-var firstPartyProvenanceSchema = external_exports.enum(FIRST_PARTY_PROVENANCES);
-var LISTING_GROUPS = ["vapi", "added", "partner", "external"];
-var listingGroupSchema = external_exports.enum(LISTING_GROUPS);
-var listingFeeSchema = external_exports.looseObject({
-  bps: external_exports.number().int().min(0),
-  label: external_exports.string()
-});
-var LISTING_VERIFICATIONS = ["none", "requested", "verified"];
-var listingVerificationSchema = external_exports.enum(LISTING_VERIFICATIONS);
-var listingVerificationFieldSchema = listingVerificationSchema.default("none").catch("none");
-var listingLivenessSchema = external_exports.looseObject({
-  uptime7d: external_exports.number().min(0).max(1),
-  latencyP50Ms: external_exports.number().nonnegative().nullable(),
-  latencyP95Ms: external_exports.number().nonnegative().nullable(),
-  checks7d: external_exports.number().int().nonnegative()
-});
-var listingConformanceSchema = external_exports.looseObject({
-  declaredVersion: external_exports.union([external_exports.literal(1), external_exports.literal(2)]).nullable(),
-  versionConformant: external_exports.boolean(),
-  offerTransport: external_exports.enum(["body", "header", "both"]),
-  issues: external_exports.array(external_exports.string())
-});
-var listingIdentitySchema = external_exports.looseObject({
-  erc8004Id: external_exports.string().trim().min(1),
-  reputation: external_exports.looseObject({
-    score: external_exports.number().finite(),
-    count: external_exports.number().int().nonnegative()
-  }).optional().catch(void 0)
-});
-var listingDisclosureShape = {
-  group: listingGroupSchema.optional(),
-  fee: listingFeeSchema.optional(),
-  verification: listingVerificationFieldSchema,
-  liveness: listingLivenessSchema.optional().catch(void 0),
-  conformance: listingConformanceSchema.optional().catch(void 0),
-  identity: listingIdentitySchema.optional().catch(void 0)
-};
-var marketplaceBadgeCodeSchema = external_exports.enum([
-  "live_x402",
-  "partner",
-  "payout_wallet_confirmed",
-  "vapi_verified",
-  "external_catalog",
-  "approved_vendor"
-]);
-var marketplaceBadgeSchema = external_exports.looseObject({
-  code: marketplaceBadgeCodeSchema,
-  label: external_exports.string().trim().min(1).max(80)
-});
-var marketplacePublicFactSchema = external_exports.looseObject({
-  label: external_exports.string().trim().min(1).max(80),
-  value: external_exports.string().trim().min(1).max(160)
-});
-var marketplaceHrefSchema = external_exports.union([
-  external_exports.string().trim().min(1).max(2048).regex(/^\/(?!\/)/),
-  external_exports.url().max(2048).regex(/^https:\/\//)
-]);
-var marketplaceCardSchema = external_exports.looseObject({
-  title: external_exports.string().trim().min(1).max(160),
-  summary: external_exports.string().trim().min(1).max(1e3),
-  byline: external_exports.string().trim().min(1).max(160).optional(),
-  bylineHref: marketplaceHrefSchema.optional(),
-  badges: external_exports.array(marketplaceBadgeSchema).max(8),
-  facts: external_exports.array(marketplacePublicFactSchema).max(12)
-});
-var marketplaceHitBase = {
-  ref: external_exports.string().trim().min(1).max(512),
-  card: marketplaceCardSchema,
-  ...listingDisclosureShape
-};
-var invokeApiActionSchema = external_exports.looseObject({
-  type: external_exports.literal("invoke_api"),
-  href: marketplaceHrefSchema
-});
-var firstPartyApiMarketplaceHitSchema = external_exports.looseObject({
-  ...marketplaceHitBase,
-  kind: external_exports.literal("api"),
-  provenance: firstPartyProvenanceSchema,
-  execution: external_exports.looseObject({
-    mode: executionModeSchema
-  }),
-  action: invokeApiActionSchema
-});
-var mirroredApiMarketplaceHitSchema = external_exports.looseObject({
-  ...marketplaceHitBase,
-  kind: external_exports.literal("api"),
-  provenance: external_exports.literal("indexed"),
-  execution: external_exports.looseObject({
-    mode: external_exports.literal("direct"),
-    url: external_exports.url().max(2048).regex(/^https:\/\/(?![^/?#]*@)/),
-    method: marketplaceExecutionMethodSchema.nullable(),
-    network: external_exports.string().trim().max(160).regex(/^eip155:[1-9]\d*$/)
-  }),
-  action: invokeApiActionSchema
-});
-var apiMarketplaceHitSchema = external_exports.discriminatedUnion("provenance", [
-  firstPartyApiMarketplaceHitSchema,
-  mirroredApiMarketplaceHitSchema
-]);
-var serviceOfferMarketplaceHitSchema = external_exports.looseObject({
-  ...marketplaceHitBase,
-  kind: external_exports.literal("service_offer"),
-  action: external_exports.looseObject({
-    type: external_exports.literal("start_engagement"),
-    href: marketplaceHrefSchema
-  })
-});
-var openRequestMarketplaceHitSchema = external_exports.looseObject({
-  ...marketplaceHitBase,
-  kind: external_exports.literal("open_request"),
-  action: external_exports.looseObject({
-    type: external_exports.literal("propose_to_request"),
-    href: marketplaceHrefSchema
-  })
-});
-var marketplaceHitSchema = external_exports.union([
-  apiMarketplaceHitSchema,
-  serviceOfferMarketplaceHitSchema,
-  openRequestMarketplaceHitSchema
-]);
-var marketplaceDiscoveryInputSchema = external_exports.strictObject({
-  q: external_exports.string().trim().max(200).optional(),
-  kinds: external_exports.array(marketplaceKindSchema).min(1).max(MARKETPLACE_KINDS.length).optional(),
-  network: external_exports.string().trim().min(1).max(160).optional(),
-  cursor: external_exports.string().trim().min(1).max(4096).optional(),
-  limit: external_exports.number().int().min(1).max(50).optional(),
-  includeUnverified: external_exports.boolean().optional()
-}).superRefine((input2, context) => {
-  if (input2.kinds && new Set(input2.kinds).size !== input2.kinds.length) {
-    context.addIssue({
-      code: "custom",
-      path: ["kinds"],
-      message: "Marketplace kinds must be unique"
-    });
-  }
-});
-function isMirroredHit(hit) {
-  return hit.kind === "api" && hit.provenance === "indexed";
-}
-var marketplaceDiscoveryPageSchema = external_exports.looseObject({
-  protocol: external_exports.literal(MARKETPLACE_DISCOVERY_PROTOCOL),
-  items: external_exports.array(marketplaceHitSchema),
-  nextCursor: external_exports.string().min(1).max(4096).nullable(),
-  unavailableKinds: external_exports.array(marketplaceKindSchema).max(MARKETPLACE_KINDS.length),
-  rankingVersion: external_exports.literal(MARKETPLACE_RANKING_VERSION)
-});
-
-// ../core/src/call-contracts-wire.ts
-var CALLABLE_CATEGORIES = ["ai", "data", "crypto", "compute", "search"];
-var callableCategorySchema = external_exports.enum(CALLABLE_CATEGORIES);
-var DISCOVERY_CATEGORIES = [...CALLABLE_CATEGORIES, "other"];
-var discoveryCategorySchema = external_exports.enum(DISCOVERY_CATEGORIES);
-var CALLABLE_CATEGORY_SET = new Set(CALLABLE_CATEGORIES);
-var serviceTierSchema = external_exports.enum(["listed", "verified", "partner"]);
-var discoveryEndpointSchema = external_exports.looseObject({
-  name: external_exports.string(),
-  method: external_exports.string(),
-  url: external_exports.url(),
-  price: external_exports.string(),
-  description: external_exports.string(),
-  operationId: external_exports.string().trim().min(1).optional(),
-  requestContentType: external_exports.string().trim().min(1).optional(),
-  requestSchema: external_exports.json().optional(),
-  responseContentType: external_exports.string().trim().min(1).optional(),
-  pathTemplate: external_exports.string().trim().min(1).optional(),
-  pathParameters: external_exports.array(external_exports.string().trim().min(1)).optional(),
-  payment: external_exports.looseObject({
-    scheme: external_exports.literal("exact"),
-    network: external_exports.string().regex(/^eip155:\d+$/),
-    asset: external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/),
-    payTo: external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/),
-    checkedAt: external_exports.iso.datetime()
-  }).optional()
-});
-var serviceSummarySchema = external_exports.looseObject({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  description: external_exports.string(),
-  category: discoveryCategorySchema,
-  tier: serviceTierSchema,
-  ...listingDisclosureShape,
-  verified: external_exports.boolean(),
-  wrapped: external_exports.boolean(),
-  price: external_exports.string(),
-  networks: external_exports.array(external_exports.string()),
-  endpoints: external_exports.array(discoveryEndpointSchema)
-});
-var searchServicesResponseSchema = external_exports.looseObject({
-  services: external_exports.array(serviceSummarySchema)
-});
-var discoveryResponseSchema = searchServicesResponseSchema;
-
-// ../core/src/call-contracts.ts
-var DiscoveryCatalogError = class extends Error {
-  name = "DiscoveryCatalogError";
-  code;
-  serviceId;
-  constructor(code, message, serviceId) {
-    super(message);
-    this.code = code;
-    this.serviceId = serviceId;
-  }
-};
-function parseDiscovery(raw) {
-  const parsed = discoveryResponseSchema.safeParse(raw);
-  if (!parsed.success) {
-    const malformedUrl = parsed.error.issues.find(
-      (issue2) => issue2.path.at(-1) === "url" && issue2.path.includes("endpoints")
-    );
-    if (malformedUrl) {
-      const serviceIndex = pathIndexAfter(malformedUrl.path, "services");
-      const serviceId = rawServiceId(raw, serviceIndex);
-      throw new DiscoveryCatalogError(
-        "malformed_url",
-        `Service ${JSON.stringify(serviceId ?? "unknown")} has a malformed endpoint URL.`,
-        serviceId
-      );
-    }
-    throw new DiscoveryCatalogError("invalid_discovery", "Discovery response is malformed.");
-  }
-  for (const service of parsed.data.services) {
-    buildTargets(service);
-  }
-  const resolveListing = (serviceId, endpointName) => {
-    const service = parsed.data.services.find((candidate) => candidate.id === serviceId);
-    if (!service) {
-      throw new DiscoveryCatalogError(
-        "service_not_found",
-        `No payable endpoint found for service ${JSON.stringify(serviceId)}.`,
-        serviceId
-      );
-    }
-    return { service, endpoint: resolveTarget(service, endpointName) };
-  };
-  return {
-    services: parsed.data.services,
-    resolve: (serviceId, endpointName) => resolveListing(serviceId, endpointName).endpoint,
-    resolveListing
-  };
-}
-function resolveTarget(service, endpointName) {
-  const { targets, targetsByName } = buildTargets(service);
-  if (endpointName !== void 0) {
-    const selected = targetsByName.get(endpointName.trim());
-    if (!selected) {
-      throw new DiscoveryCatalogError(
-        "endpoint_not_found",
-        `Service ${JSON.stringify(service.id)} has no endpoint ${JSON.stringify(endpointName)}. Available endpoints: ${[...targetsByName.keys()].join(", ")}.`,
-        service.id
-      );
-    }
-    return { ...selected };
-  }
-  if (targets.size !== 1) {
-    throw new DiscoveryCatalogError(
-      "ambiguous_default",
-      `Service ${JSON.stringify(service.id)} has ${targets.size} distinct payable endpoints. Choose one with endpoint: ${[...targetsByName.keys()].join(", ")}.`,
-      service.id
-    );
-  }
-  return targets.values().next().value;
-}
-function buildTargets(service) {
-  if (service.endpoints.length === 0) {
-    throw new DiscoveryCatalogError(
-      "no_endpoint",
-      `Service ${JSON.stringify(service.id)} has no payable endpoint.`,
-      service.id
-    );
-  }
-  const namedEndpoints = [...service.endpoints].sort(
-    (left, right) => compareNames(left.name.trim(), right.name.trim())
-  );
-  const names = /* @__PURE__ */ new Set();
-  const targets = /* @__PURE__ */ new Map();
-  const targetsByName = /* @__PURE__ */ new Map();
-  for (const endpoint of namedEndpoints) {
-    const name = endpoint.name.trim();
-    if (!name) {
-      throw new DiscoveryCatalogError(
-        "invalid_endpoint_name",
-        `Service ${JSON.stringify(service.id)} has a blank endpoint name.`,
-        service.id
-      );
-    }
-    if (names.has(name)) {
-      throw new DiscoveryCatalogError(
-        "duplicate_endpoint_name",
-        `Service ${JSON.stringify(service.id)} has duplicate endpoint name ${JSON.stringify(name)}.`,
-        service.id
-      );
-    }
-    names.add(name);
-    const method = endpoint.method.trim().toUpperCase();
-    if (!method) {
-      throw new DiscoveryCatalogError(
-        "blank_method",
-        `Service ${JSON.stringify(service.id)} has a blank endpoint method.`,
-        service.id
-      );
-    }
-    const url2 = new URL(endpoint.url);
-    if (url2.protocol !== "http:" && url2.protocol !== "https:") {
-      throw new DiscoveryCatalogError(
-        "malformed_url",
-        `Service ${JSON.stringify(service.id)} has a non-HTTP endpoint URL.`,
-        service.id
-      );
-    }
-    const transportKey = `${method}\0${endpoint.url}`;
-    const normalized = { ...endpoint, name, method };
-    targetsByName.set(name, normalized);
-    if (!targets.has(transportKey)) targets.set(transportKey, normalized);
-  }
-  return { targets, targetsByName };
-}
-function compareNames(left, right) {
-  return left < right ? -1 : left > right ? 1 : 0;
-}
-function pathIndexAfter(path, key2) {
-  const keyIndex = path.indexOf(key2);
-  const candidate = path[keyIndex + 1];
-  return typeof candidate === "number" ? candidate : void 0;
-}
-function rawServiceId(raw, serviceIndex) {
-  if (serviceIndex === void 0 || typeof raw !== "object" || raw === null) {
-    return void 0;
-  }
-  const services = Reflect.get(raw, "services");
-  if (!Array.isArray(services)) {
-    return void 0;
-  }
-  const service = services[serviceIndex];
-  if (typeof service !== "object" || service === null) {
-    return void 0;
-  }
-  const id2 = Reflect.get(service, "id");
-  return typeof id2 === "string" ? id2 : void 0;
-}
-
 // ../../node_modules/.pnpm/viem@2.56.1_typescript@6.0.3_zod@4.5.4/node_modules/viem/_esm/index.js
 init_exports();
 
@@ -39623,6 +39262,7 @@ var ARC_MAINNET_CAIP2 = "eip155:5042";
 var ARC_TESTNET_CAIP2 = "eip155:5042002";
 var SOLANA_MAINNET_CAIP2 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d";
 var X402_SOLANA_MAINNET_CAIP2 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+var SOLANA_DEVNET_CAIP2 = "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1";
 var SOLANA_MAINNET_USDC = "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v";
 function canonicalIdentity(usdc, eip712Domain) {
   return Object.freeze({
@@ -39666,375 +39306,194 @@ var BROWSER_ENABLED_X402_NETWORK_CONFIG = Object.freeze({
   [ARC_TESTNET_CAIP2]: browserNetwork(arcTestnetUsdc)
 });
 
-// ../core/src/net-guard.ts
-import { lookup as dnsLookup } from "node:dns/promises";
-import { request as httpRequest } from "node:http";
-import { request as httpsRequest } from "node:https";
-import { isIP } from "node:net";
-import { Readable } from "node:stream";
-var defaultLookup = async (hostname3) => {
-  const addresses = await dnsLookup(hostname3, { all: true });
-  return addresses.map(({ address: address4 }) => address4);
+// ../core/src/marketplace-contracts.ts
+var MARKETPLACE_DISCOVERY_PROTOCOL = "vapi.marketplace.discovery/1";
+var MARKETPLACE_RANKING_VERSION = "marketplace-ranking-v1";
+var MARKETPLACE_KINDS = ["api", "service_offer", "open_request"];
+var MARKETPLACE_EXECUTION_METHODS = [
+  "GET",
+  "HEAD",
+  "POST",
+  "PUT",
+  "PATCH",
+  "DELETE"
+];
+var marketplaceExecutionMethodSchema = external_exports.enum(MARKETPLACE_EXECUTION_METHODS);
+var marketplaceKindSchema = external_exports.enum(MARKETPLACE_KINDS);
+var EXECUTION_MODES = ["direct", "gateway"];
+var executionModeSchema = external_exports.enum(EXECUTION_MODES);
+var PROVENANCES = ["indexed", "self_listed", "partner"];
+var provenanceSchema = external_exports.enum(PROVENANCES);
+var FIRST_PARTY_PROVENANCES = ["self_listed", "partner"];
+var firstPartyProvenanceSchema = external_exports.enum(FIRST_PARTY_PROVENANCES);
+var LISTING_GROUPS = ["vapi", "added", "partner", "external"];
+var listingGroupSchema = external_exports.enum(LISTING_GROUPS);
+var listingFeeSchema = external_exports.looseObject({
+  bps: external_exports.number().int().min(0),
+  label: external_exports.string()
+});
+var LISTING_VERIFICATIONS = ["none", "requested", "verified"];
+var listingVerificationSchema = external_exports.enum(LISTING_VERIFICATIONS);
+var listingVerificationFieldSchema = listingVerificationSchema.default("none").catch("none");
+var listingLivenessSchema = external_exports.looseObject({
+  uptime7d: external_exports.number().min(0).max(1),
+  latencyP50Ms: external_exports.number().nonnegative().nullable(),
+  latencyP95Ms: external_exports.number().nonnegative().nullable(),
+  checks7d: external_exports.number().int().nonnegative()
+});
+var listingConformanceSchema = external_exports.looseObject({
+  declaredVersion: external_exports.union([external_exports.literal(1), external_exports.literal(2)]).nullable(),
+  versionConformant: external_exports.boolean(),
+  offerTransport: external_exports.enum(["body", "header", "both"]),
+  issues: external_exports.array(external_exports.string())
+});
+var listingIdentitySchema = external_exports.looseObject({
+  erc8004Id: external_exports.string().trim().min(1),
+  reputation: external_exports.looseObject({
+    score: external_exports.number().finite(),
+    count: external_exports.number().int().nonnegative()
+  }).optional().catch(void 0)
+});
+var listingDisclosureShape = {
+  // Presentation metadata must not make an otherwise executable row vanish
+  // when the registry adds a new group or changes the fee display shape.
+  group: listingGroupSchema.optional().catch(void 0),
+  fee: listingFeeSchema.optional().catch(void 0),
+  verification: listingVerificationFieldSchema,
+  liveness: listingLivenessSchema.optional().catch(void 0),
+  conformance: listingConformanceSchema.optional().catch(void 0),
+  identity: listingIdentitySchema.optional().catch(void 0)
 };
-async function assertPublicUrl(url2, options) {
-  if (url2.username || url2.password) {
-    throw guardError(url2);
-  }
-  if (url2.protocol !== "http:" && url2.protocol !== "https:") {
-    throw guardError(url2);
-  }
-  if (options.allowPrivateNetwork) {
-    return;
-  }
-  const hostname3 = normalizeHostname(url2.hostname);
-  const lowercaseHostname = hostname3.toLowerCase();
-  if (!lowercaseHostname || lowercaseHostname === "localhost" || lowercaseHostname.endsWith(".localhost") || lowercaseHostname.endsWith(".local") || lowercaseHostname.endsWith(".internal")) {
-    throw guardError(url2);
-  }
-  if (isIP(hostname3)) {
-    if (isNonPublicAddress(hostname3)) {
-      throw guardError(url2);
-    }
-    return;
-  }
-  let addresses;
-  try {
-    addresses = await withTimeout2(
-      (options.lookup ?? defaultLookup)(hostname3),
-      options.timeoutMs ?? 5e3
-    );
-  } catch {
-    throw guardError(url2);
-  }
-  if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
-    throw guardError(url2);
-  }
-}
-function createPublicFetch(options) {
-  const lookupFn = options.lookup ?? defaultLookup;
-  return (async (input2, init) => {
-    const url2 = new URL(input2 instanceof Request ? input2.url : input2);
-    await assertPublicUrl(url2, {
-      allowPrivateNetwork: options.allowPrivateNetwork,
-      lookup: lookupFn,
-      timeoutMs: 5e3
-    });
-    const normalized = new Request(input2, init);
-    const bytes = normalized.body ? Buffer.from(await normalized.arrayBuffer()) : null;
-    return await new Promise((resolve2, reject) => {
-      const requestOptions2 = {
-        method: normalized.method,
-        headers: Object.fromEntries(normalized.headers),
-        signal: normalized.signal,
-        ...options.allowPrivateNetwork ? {} : { lookup: pinnedLookup(lookupFn) }
-      };
-      const onResponse = (incoming) => {
-        try {
-          const headers = new Headers();
-          for (const [name, value] of Object.entries(incoming.headers)) {
-            if (Array.isArray(value)) {
-              for (const item of value) headers.append(name, item);
-            } else if (value !== void 0) {
-              headers.set(name, value);
-            }
-          }
-          const status = incoming.statusCode ?? 500;
-          const bodyForbidden = normalized.method === "HEAD" || [204, 205, 304].includes(status);
-          if (bodyForbidden) incoming.resume();
-          const response = new Response(
-            bodyForbidden ? null : Readable.toWeb(incoming),
-            { status, statusText: incoming.statusMessage, headers }
-          );
-          Object.defineProperty(response, "url", { value: url2.toString() });
-          resolve2(response);
-        } catch (error61) {
-          incoming.destroy();
-          reject(error61);
-        }
-      };
-      const request = url2.protocol === "https:" ? httpsRequest(url2, requestOptions2, onResponse) : httpRequest(url2, requestOptions2, onResponse);
-      request.on("error", reject);
-      if (bytes) request.write(bytes);
-      request.end();
-    });
-  });
-}
-function pinnedLookup(lookup) {
-  return (hostname3, dnsOptions, callback) => {
-    void lookup(normalizeHostname(hostname3)).then((addresses) => {
-      if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
-        callback(guardError(new URL(`https://${hostname3}`)), "");
-        return;
-      }
-      const address4 = addresses[0];
-      const family = isIP(address4);
-      callback(
-        null,
-        dnsOptions.all ? [{ address: address4, family }] : address4,
-        dnsOptions.all ? void 0 : family
-      );
-    }).catch(
-      (error61) => callback(error61 instanceof Error ? error61 : new Error("DNS lookup failed."), "")
-    );
-  };
-}
-async function withTimeout2(operation, timeoutMs) {
-  let timeout;
-  try {
-    return await Promise.race([
-      operation,
-      new Promise((_resolve, reject) => {
-        timeout = setTimeout(() => reject(new Error("DNS lookup timed out.")), timeoutMs);
-      })
-    ]);
-  } finally {
-    if (timeout) clearTimeout(timeout);
-  }
-}
-function normalizeHostname(hostname3) {
-  const unbracketed = hostname3.startsWith("[") && hostname3.endsWith("]") ? hostname3.slice(1, -1) : hostname3;
-  return unbracketed.endsWith(".") ? unbracketed.slice(0, -1) : unbracketed;
-}
-function isNonPublicAddress(address4) {
-  const normalized = normalizeHostname(address4);
-  const version5 = isIP(normalized);
-  if (version5 === 4) {
-    return isNonPublicIpv4(parseIpv4(normalized));
-  }
-  if (version5 === 6) {
-    return isNonPublicIpv6(parseIpv6(normalized));
-  }
-  return true;
-}
-function parseIpv4(address4) {
-  const octets = address4.split(".").map(Number);
-  return [octets[0], octets[1], octets[2], octets[3]];
-}
-function isNonPublicIpv4([first, second, third]) {
-  return first === 0 || first === 10 || first === 100 && second >= 64 && second <= 127 || first === 127 || first === 169 && second === 254 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 0 && (third === 0 || third === 2) || first === 192 && second === 168 || first === 198 && second >= 18 && second <= 19 || first === 198 && second === 51 && third === 100 || first === 203 && second === 0 && third === 113 || first >= 224;
-}
-function parseIpv6(address4) {
-  let normalized = address4.toLowerCase();
-  const lastColon = normalized.lastIndexOf(":");
-  const dottedTail = normalized.slice(lastColon + 1);
-  if (dottedTail.includes(".")) {
-    const [first, second, third, fourth] = parseIpv4(dottedTail);
-    normalized = `${normalized.slice(0, lastColon + 1)}${(first << 8 | second).toString(16)}:${(third << 8 | fourth).toString(16)}`;
-  }
-  const halves = normalized.split("::");
-  const left = halves[0] ? halves[0].split(":").map(parseHex) : [];
-  const right = halves[1] ? halves[1].split(":").map(parseHex) : [];
-  const omittedCount = 8 - left.length - right.length;
-  return halves.length === 2 ? [...left, ...Array.from({ length: omittedCount }, () => 0), ...right] : left;
-}
-function parseHex(value) {
-  return Number.parseInt(value, 16);
-}
-function isNonPublicIpv6(hextets) {
-  if (hextets.slice(0, 5).every((hextet) => hextet === 0) && hextets[5] === 65535) {
-    const embeddedIpv4 = [
-      hextets[6] >> 8,
-      hextets[6] & 255,
-      hextets[7] >> 8,
-      hextets[7] & 255
-    ];
-    return isNonPublicIpv4(embeddedIpv4);
-  }
-  if (hextets.slice(0, 6).every((hextet) => hextet === 0)) {
-    const compatibleIpv4 = [
-      hextets[6] >> 8,
-      hextets[6] & 255,
-      hextets[7] >> 8,
-      hextets[7] & 255
-    ];
-    if (isNonPublicIpv4(compatibleIpv4)) return true;
-  }
-  const isUnspecified = hextets.every((hextet) => hextet === 0);
-  const isLoopback = hextets.slice(0, 7).every((hextet) => hextet === 0) && hextets[7] === 1;
-  const first = hextets[0];
-  const isUniqueLocal = first >= 64512 && first <= 65023;
-  const isLinkLocal = first >= 65152 && first <= 65215;
-  const isSiteLocal = first >= 65216 && first <= 65279;
-  const isMulticast = first >= 65280;
-  const isDocumentation = first === 8193 && hextets[1] === 3512;
-  return isUnspecified || isLoopback || isUniqueLocal || isLinkLocal || isSiteLocal || isMulticast || isDocumentation;
-}
-function guardError(url2) {
-  return new Error(
-    `URL hostname ${JSON.stringify(url2.hostname)} is not allowed; private or internal destinations require allowPrivateNetwork true in the vAPI config.`
-  );
-}
-
-// ../core/src/networks.ts
-var USDC_DECIMALS = 6;
-var DEFAULT_ARC_GAS_HEADROOM_ATOMIC = 50000n;
-var NETWORKS = {
-  [BASE_MAINNET_CAIP2]: {
-    family: "evm",
-    chainId: 8453,
-    name: "Base mainnet",
-    usdc: CANONICAL_X402_USDC_NETWORKS[BASE_MAINNET_CAIP2].usdc,
-    gasToken: "ETH",
-    rpcEnv: "BASE_RPC_URL",
-    publicRpcUrl: "https://mainnet.base.org",
-    explorerUrl: "https://basescan.org"
-  },
-  [ARC_MAINNET_CAIP2]: {
-    family: "evm",
-    chainId: 5042,
-    name: "Arc mainnet",
-    usdc: CANONICAL_X402_USDC_NETWORKS[ARC_MAINNET_CAIP2].usdc,
-    gasToken: "USDC",
-    rpcEnv: "ARC_RPC_URL",
-    publicRpcUrl: "https://rpc.mainnet.arc.io",
-    explorerUrl: "https://explorer.arc.io"
-  },
-  [ARC_TESTNET_CAIP2]: {
-    family: "evm",
-    chainId: 5042002,
-    name: "Arc testnet",
-    usdc: CANONICAL_X402_USDC_NETWORKS[ARC_TESTNET_CAIP2].usdc,
-    gasToken: "USDC",
-    rpcEnv: "ARC_TESTNET_RPC_URL"
-  },
-  [SOLANA_MAINNET_CAIP2]: {
-    family: "svm",
-    name: "Solana mainnet",
-    usdc: SOLANA_MAINNET_USDC,
-    gasToken: "SOL",
-    rpcEnv: "SOLANA_RPC_URL",
-    publicRpcUrl: "https://api.mainnet-beta.solana.com"
-  },
-  [X402_SOLANA_MAINNET_CAIP2]: {
-    family: "svm",
-    name: "Solana mainnet",
-    usdc: SOLANA_MAINNET_USDC,
-    gasToken: "SOL",
-    rpcEnv: "SOLANA_RPC_URL",
-    publicRpcUrl: "https://api.mainnet-beta.solana.com"
-  }
+var marketplaceBadgeCodeSchema = external_exports.enum([
+  "live_x402",
+  "mpp",
+  "partner",
+  "payout_wallet_confirmed",
+  "vapi_verified",
+  "external_catalog",
+  "approved_vendor",
+  "unverified"
+]);
+var marketplaceBadgeSchema = external_exports.looseObject({
+  code: marketplaceBadgeCodeSchema,
+  label: external_exports.string().trim().min(1).max(80)
+});
+var marketplacePublicFactSchema = external_exports.looseObject({
+  label: external_exports.string().trim().min(1).max(80),
+  value: external_exports.string().trim().min(1).max(160)
+});
+var marketplaceHrefSchema = external_exports.union([
+  external_exports.string().trim().min(1).max(2048).regex(/^\/(?!\/)/),
+  external_exports.url().max(2048).regex(/^https:\/\//)
+]);
+var marketplaceCardSchema = external_exports.looseObject({
+  title: external_exports.string().trim().min(1).max(160),
+  summary: external_exports.string().trim().min(1).max(1e3),
+  byline: external_exports.string().trim().min(1).max(160).optional(),
+  bylineHref: marketplaceHrefSchema.optional(),
+  badges: external_exports.preprocess(
+    (badges) => Array.isArray(badges) ? badges.flatMap((badge) => {
+      const parsed = marketplaceBadgeSchema.safeParse(badge);
+      return parsed.success ? [parsed.data] : [];
+    }) : badges,
+    external_exports.array(marketplaceBadgeSchema).max(8)
+  ),
+  facts: external_exports.array(marketplacePublicFactSchema).max(12)
+});
+var marketplaceHitBase = {
+  ref: external_exports.string().trim().min(1).max(512),
+  card: marketplaceCardSchema,
+  ...listingDisclosureShape
 };
-function parseEip155ChainId(network) {
-  const match = /^eip155:(\d+)$/.exec(network);
-  if (!match) {
-    throw new Error(`Unsupported network ${network}; expected eip155:<chainId>.`);
-  }
-  const chainId = Number(match[1]);
-  if (!Number.isSafeInteger(chainId) || chainId <= 0) {
-    throw new Error(`Invalid EVM chain ID in network ${network}.`);
-  }
-  return chainId;
-}
-function isSolanaNetwork(network) {
-  return network === SOLANA_MAINNET_CAIP2 || network === X402_SOLANA_MAINNET_CAIP2;
-}
-function usesUsdcGas(network) {
-  try {
-    return getNetworkDefinition(network).gasToken === "USDC";
-  } catch {
-    return false;
-  }
-}
-function explorerTransactionUrl(network, hash5) {
-  try {
-    const explorerUrl = getNetworkDefinition(network).explorerUrl;
-    return explorerUrl ? `${explorerUrl}/tx/${hash5}` : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function explorerAddressUrl(network, address4) {
-  try {
-    const explorerUrl = getNetworkDefinition(network).explorerUrl;
-    return explorerUrl ? `${explorerUrl}/address/${address4}` : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function areSamePaymentNetwork(left, right) {
-  return left === right || isSolanaNetwork(left) && isSolanaNetwork(right);
-}
-function isSupportedPaymentNetwork(network) {
-  if (isSolanaNetwork(network)) return true;
-  try {
-    parseEip155ChainId(network);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function configuredNetworkFor(networks, network) {
-  const configured = networks[network];
-  if (configured) return configured;
-  if (network === X402_SOLANA_MAINNET_CAIP2) return networks[SOLANA_MAINNET_CAIP2];
-  if (network === SOLANA_MAINNET_CAIP2) return networks[X402_SOLANA_MAINNET_CAIP2];
-  return void 0;
-}
-function getNetworkDefinition(network) {
-  const known = NETWORKS[network];
-  if (known) {
-    return known;
-  }
-  const chainId = parseEip155ChainId(network);
-  return {
-    family: "evm",
-    chainId,
-    name: network,
-    usdc: getAddress("0x0000000000000000000000000000000000000000"),
-    gasToken: "ETH",
-    rpcEnv: ""
-  };
-}
-function requireRpcUrl(network, configured) {
-  const definition = getNetworkDefinition(network);
-  const envUrl = definition.rpcEnv ? process.env[definition.rpcEnv]?.trim() : void 0;
-  const rpcUrl = envUrl || configured.rpcUrl.trim();
-  if (rpcUrl) {
-    return rpcUrl;
-  }
-  if (network === ARC_TESTNET_CAIP2) {
-    throw new Error(
-      "Arc testnet RPC is required. Set ARC_TESTNET_RPC_URL or add rpcUrl for eip155:5042002 in config.json."
-    );
-  }
-  throw new Error(`RPC URL is required for ${network}.`);
-}
-function createChain(network, rpcUrl) {
-  const definition = getNetworkDefinition(network);
-  if (definition.family !== "evm" || definition.chainId === void 0) {
-    throw new Error(`Network ${network} is not an EVM chain.`);
+var invokeApiActionSchema = external_exports.looseObject({
+  type: external_exports.literal("invoke_api"),
+  href: marketplaceHrefSchema
+});
+var firstPartyApiMarketplaceHitSchema = external_exports.looseObject({
+  ...marketplaceHitBase,
+  kind: external_exports.literal("api"),
+  provenance: firstPartyProvenanceSchema,
+  execution: external_exports.looseObject({
+    mode: executionModeSchema
+  }),
+  action: invokeApiActionSchema
+});
+var mirroredApiMarketplaceHitSchema = external_exports.looseObject({
+  ...marketplaceHitBase,
+  kind: external_exports.literal("api"),
+  provenance: external_exports.literal("indexed"),
+  execution: external_exports.looseObject({
+    mode: external_exports.literal("direct"),
+    url: external_exports.url().max(2048).regex(/^https:\/\/(?![^/?#]*@)/),
+    method: marketplaceExecutionMethodSchema.nullable(),
+    network: external_exports.string().trim().max(160).transform((network) => {
+      if (network === "solana") return X402_SOLANA_MAINNET_CAIP2;
+      if (network === "solana-devnet") return SOLANA_DEVNET_CAIP2;
+      return network;
+    }).pipe(
+      external_exports.union([
+        external_exports.string().regex(/^[-a-z0-9]{3,8}:[-_a-zA-Z0-9]{1,32}$/),
+        // Persisted mainnet configs also use the full genesis hash.
+        external_exports.literal(SOLANA_MAINNET_CAIP2)
+      ])
+    )
+  }),
+  action: invokeApiActionSchema
+});
+var apiMarketplaceHitSchema = external_exports.discriminatedUnion("provenance", [
+  firstPartyApiMarketplaceHitSchema,
+  mirroredApiMarketplaceHitSchema
+]);
+var serviceOfferMarketplaceHitSchema = external_exports.looseObject({
+  ...marketplaceHitBase,
+  kind: external_exports.literal("service_offer"),
+  action: external_exports.looseObject({
+    type: external_exports.literal("start_engagement"),
+    href: marketplaceHrefSchema
+  })
+});
+var openRequestMarketplaceHitSchema = external_exports.looseObject({
+  ...marketplaceHitBase,
+  kind: external_exports.literal("open_request"),
+  action: external_exports.looseObject({
+    type: external_exports.literal("propose_to_request"),
+    href: marketplaceHrefSchema
+  })
+});
+var marketplaceHitSchema = external_exports.union([
+  apiMarketplaceHitSchema,
+  serviceOfferMarketplaceHitSchema,
+  openRequestMarketplaceHitSchema
+]);
+var marketplaceDiscoveryInputSchema = external_exports.strictObject({
+  q: external_exports.string().trim().max(200).optional(),
+  kinds: external_exports.array(marketplaceKindSchema).min(1).max(MARKETPLACE_KINDS.length).optional(),
+  network: external_exports.string().trim().min(1).max(160).optional(),
+  cursor: external_exports.string().trim().min(1).max(4096).optional(),
+  limit: external_exports.number().int().min(1).max(50).optional(),
+  includeUnverified: external_exports.boolean().optional()
+}).superRefine((input2, context) => {
+  if (input2.kinds && new Set(input2.kinds).size !== input2.kinds.length) {
+    context.addIssue({
+      code: "custom",
+      path: ["kinds"],
+      message: "Marketplace kinds must be unique"
+    });
   }
-  return defineChain({
-    id: definition.chainId,
-    name: definition.name,
-    nativeCurrency: definition.gasToken === "USDC" ? { name: "USDC", symbol: "USDC", decimals: USDC_DECIMALS } : { name: "Ether", symbol: "ETH", decimals: 18 },
-    rpcUrls: {
-      default: { http: [rpcUrl] }
-    },
-    ...definition.explorerUrl ? {
-      blockExplorers: {
-        default: { name: `${definition.name} explorer`, url: definition.explorerUrl }
-      }
-    } : {}
-  });
-}
-function createNetworkPublicClient(network, configured, options = {}) {
-  const rpcUrl = requireRpcUrl(network, configured);
-  return createPublicClient({
-    chain: createChain(network, rpcUrl),
-    transport: createNetworkHttpTransport(rpcUrl, options)
-  });
-}
-function createNetworkHttpTransport(rpcUrl, options = {}) {
-  const fetchFn = options.fetch ?? createPublicFetch({
-    allowPrivateNetwork: options.allowPrivateNetwork ?? false,
-    ...options.lookup ? { lookup: options.lookup } : {}
-  });
-  return http(rpcUrl, { fetchFn, fetchOptions: { redirect: "manual" } });
-}
-function formatUsdc(amountAtomic2) {
-  return formatUnits(amountAtomic2, USDC_DECIMALS);
+});
+function isMirroredHit(hit) {
+  return hit.kind === "api" && hit.provenance === "indexed";
 }
+var marketplaceDiscoveryEnvelopeSchema = external_exports.looseObject({
+  protocol: external_exports.literal(MARKETPLACE_DISCOVERY_PROTOCOL),
+  items: external_exports.array(external_exports.unknown()),
+  nextCursor: external_exports.string().min(1).max(4096).nullable(),
+  unavailableKinds: external_exports.array(marketplaceKindSchema).max(MARKETPLACE_KINDS.length),
+  rankingVersion: external_exports.literal(MARKETPLACE_RANKING_VERSION)
+});
+var marketplaceDiscoveryPageSchema = marketplaceDiscoveryEnvelopeSchema.extend({
+  items: external_exports.array(marketplaceHitSchema)
+});
 
 // ../../node_modules/.pnpm/@solana+errors@5.5.1_typescript@6.0.3/node_modules/@solana/errors/dist/index.node.mjs
 var SOLANA_ERROR__BLOCK_HEIGHT_EXCEEDED = 1;
@@ -45016,16 +44475,16 @@ var DEFAULT_COMPUTE_UNIT_PRICE_MICROLAMPORTS = 1;
 var DEFAULT_COMPUTE_UNIT_LIMIT = 2e4;
 var MAX_MEMO_BYTES = 256;
 var SOLANA_MAINNET_CAIP22 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
-var SOLANA_DEVNET_CAIP2 = "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1";
+var SOLANA_DEVNET_CAIP22 = "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1";
 var SOLANA_TESTNET_CAIP2 = "solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z";
 var V1_TO_V2_NETWORK_MAP = {
   solana: SOLANA_MAINNET_CAIP22,
-  "solana-devnet": SOLANA_DEVNET_CAIP2,
+  "solana-devnet": SOLANA_DEVNET_CAIP22,
   "solana-testnet": SOLANA_TESTNET_CAIP2
 };
 function normalizeNetwork(network) {
   if (network.includes(":")) {
-    const supported = [SOLANA_MAINNET_CAIP22, SOLANA_DEVNET_CAIP2, SOLANA_TESTNET_CAIP2];
+    const supported = [SOLANA_MAINNET_CAIP22, SOLANA_DEVNET_CAIP22, SOLANA_TESTNET_CAIP2];
     if (!supported.includes(network)) {
       throw new Error(`Unsupported SVM network: ${network}`);
     }
@@ -45073,7 +44532,7 @@ var DEFAULT_ASSETS = {
       tokenProgram: TOKEN_2022_PROGRAM_ADDRESS2
     }
   ],
-  [SOLANA_DEVNET_CAIP2]: [
+  [SOLANA_DEVNET_CAIP22]: [
     {
       asset: USDC_DEVNET_ADDRESS,
       decimals: 6,
@@ -45128,7 +44587,7 @@ var findDefaultAsset = (asset, network) => {
 function createRpcClient(network, customRpcUrl) {
   const caip2Network = normalizeNetwork(network);
   switch (caip2Network) {
-    case SOLANA_DEVNET_CAIP2: {
+    case SOLANA_DEVNET_CAIP22: {
       const url2 = customRpcUrl || DEVNET_RPC_URL;
       return createSolanaRpc(devnet(url2));
     }
@@ -45326,6 +44785,376 @@ var ExactSvmScheme = class {
 var addressEncoder = getAddressEncoder();
 var compiledMessageDecoder = getCompiledTransactionMessageDecoder();
 
+// ../core/src/net-guard.ts
+import { lookup as dnsLookup } from "node:dns/promises";
+import { request as httpRequest } from "node:http";
+import { request as httpsRequest } from "node:https";
+import { isIP } from "node:net";
+import { Readable } from "node:stream";
+var defaultLookup = async (hostname3) => {
+  const addresses = await dnsLookup(hostname3, { all: true });
+  return addresses.map(({ address: address4 }) => address4);
+};
+async function assertPublicUrl(url2, options) {
+  if (url2.username || url2.password) {
+    throw guardError(url2);
+  }
+  if (url2.protocol !== "http:" && url2.protocol !== "https:") {
+    throw guardError(url2);
+  }
+  if (options.allowPrivateNetwork) {
+    return;
+  }
+  const hostname3 = normalizeHostname(url2.hostname);
+  const lowercaseHostname = hostname3.toLowerCase();
+  if (!lowercaseHostname || lowercaseHostname === "localhost" || lowercaseHostname.endsWith(".localhost") || lowercaseHostname.endsWith(".local") || lowercaseHostname.endsWith(".internal")) {
+    throw guardError(url2);
+  }
+  if (isIP(hostname3)) {
+    if (isNonPublicAddress(hostname3)) {
+      throw guardError(url2);
+    }
+    return;
+  }
+  let addresses;
+  try {
+    addresses = await withTimeout2(
+      (options.lookup ?? defaultLookup)(hostname3),
+      options.timeoutMs ?? 5e3
+    );
+  } catch {
+    throw guardError(url2);
+  }
+  if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
+    throw guardError(url2);
+  }
+}
+function createPublicFetch(options) {
+  const lookupFn = options.lookup ?? defaultLookup;
+  return (async (input2, init) => {
+    const url2 = new URL(input2 instanceof Request ? input2.url : input2);
+    await assertPublicUrl(url2, {
+      allowPrivateNetwork: options.allowPrivateNetwork,
+      lookup: lookupFn,
+      timeoutMs: 5e3
+    });
+    const normalized = new Request(input2, init);
+    const bytes = normalized.body ? Buffer.from(await normalized.arrayBuffer()) : null;
+    return await new Promise((resolve2, reject) => {
+      const requestOptions2 = {
+        method: normalized.method,
+        headers: Object.fromEntries(normalized.headers),
+        signal: normalized.signal,
+        ...options.allowPrivateNetwork ? {} : { lookup: pinnedLookup(lookupFn) }
+      };
+      const onResponse = (incoming) => {
+        try {
+          const headers = new Headers();
+          for (const [name, value] of Object.entries(incoming.headers)) {
+            if (Array.isArray(value)) {
+              for (const item of value) headers.append(name, item);
+            } else if (value !== void 0) {
+              headers.set(name, value);
+            }
+          }
+          const status = incoming.statusCode ?? 500;
+          const bodyForbidden = normalized.method === "HEAD" || [204, 205, 304].includes(status);
+          if (bodyForbidden) incoming.resume();
+          const response = new Response(
+            bodyForbidden ? null : Readable.toWeb(incoming),
+            { status, statusText: incoming.statusMessage, headers }
+          );
+          Object.defineProperty(response, "url", { value: url2.toString() });
+          resolve2(response);
+        } catch (error61) {
+          incoming.destroy();
+          reject(error61);
+        }
+      };
+      const request = url2.protocol === "https:" ? httpsRequest(url2, requestOptions2, onResponse) : httpRequest(url2, requestOptions2, onResponse);
+      request.on("error", reject);
+      if (bytes) request.write(bytes);
+      request.end();
+    });
+  });
+}
+function pinnedLookup(lookup2) {
+  return (hostname3, dnsOptions, callback) => {
+    void lookup2(normalizeHostname(hostname3)).then((addresses) => {
+      if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
+        callback(guardError(new URL(`https://${hostname3}`)), "");
+        return;
+      }
+      const address4 = addresses[0];
+      const family = isIP(address4);
+      callback(
+        null,
+        dnsOptions.all ? [{ address: address4, family }] : address4,
+        dnsOptions.all ? void 0 : family
+      );
+    }).catch(
+      (error61) => callback(error61 instanceof Error ? error61 : new Error("DNS lookup failed."), "")
+    );
+  };
+}
+async function withTimeout2(operation, timeoutMs) {
+  let timeout;
+  try {
+    return await Promise.race([
+      operation,
+      new Promise((_resolve, reject) => {
+        timeout = setTimeout(() => reject(new Error("DNS lookup timed out.")), timeoutMs);
+      })
+    ]);
+  } finally {
+    if (timeout) clearTimeout(timeout);
+  }
+}
+function normalizeHostname(hostname3) {
+  const unbracketed = hostname3.startsWith("[") && hostname3.endsWith("]") ? hostname3.slice(1, -1) : hostname3;
+  return unbracketed.endsWith(".") ? unbracketed.slice(0, -1) : unbracketed;
+}
+function isNonPublicAddress(address4) {
+  const normalized = normalizeHostname(address4);
+  const version5 = isIP(normalized);
+  if (version5 === 4) {
+    return isNonPublicIpv4(parseIpv4(normalized));
+  }
+  if (version5 === 6) {
+    return isNonPublicIpv6(parseIpv6(normalized));
+  }
+  return true;
+}
+function parseIpv4(address4) {
+  const octets = address4.split(".").map(Number);
+  return [octets[0], octets[1], octets[2], octets[3]];
+}
+function isNonPublicIpv4([first, second, third]) {
+  return first === 0 || first === 10 || first === 100 && second >= 64 && second <= 127 || first === 127 || first === 169 && second === 254 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 0 && (third === 0 || third === 2) || first === 192 && second === 168 || first === 198 && second >= 18 && second <= 19 || first === 198 && second === 51 && third === 100 || first === 203 && second === 0 && third === 113 || first >= 224;
+}
+function parseIpv6(address4) {
+  let normalized = address4.toLowerCase();
+  const lastColon = normalized.lastIndexOf(":");
+  const dottedTail = normalized.slice(lastColon + 1);
+  if (dottedTail.includes(".")) {
+    const [first, second, third, fourth] = parseIpv4(dottedTail);
+    normalized = `${normalized.slice(0, lastColon + 1)}${(first << 8 | second).toString(16)}:${(third << 8 | fourth).toString(16)}`;
+  }
+  const halves = normalized.split("::");
+  const left = halves[0] ? halves[0].split(":").map(parseHex) : [];
+  const right = halves[1] ? halves[1].split(":").map(parseHex) : [];
+  const omittedCount = 8 - left.length - right.length;
+  return halves.length === 2 ? [...left, ...Array.from({ length: omittedCount }, () => 0), ...right] : left;
+}
+function parseHex(value) {
+  return Number.parseInt(value, 16);
+}
+function isNonPublicIpv6(hextets) {
+  if (hextets.slice(0, 5).every((hextet) => hextet === 0) && hextets[5] === 65535) {
+    const embeddedIpv4 = [
+      hextets[6] >> 8,
+      hextets[6] & 255,
+      hextets[7] >> 8,
+      hextets[7] & 255
+    ];
+    return isNonPublicIpv4(embeddedIpv4);
+  }
+  if (hextets.slice(0, 6).every((hextet) => hextet === 0)) {
+    const compatibleIpv4 = [
+      hextets[6] >> 8,
+      hextets[6] & 255,
+      hextets[7] >> 8,
+      hextets[7] & 255
+    ];
+    if (isNonPublicIpv4(compatibleIpv4)) return true;
+  }
+  const isUnspecified = hextets.every((hextet) => hextet === 0);
+  const isLoopback = hextets.slice(0, 7).every((hextet) => hextet === 0) && hextets[7] === 1;
+  const first = hextets[0];
+  const isUniqueLocal = first >= 64512 && first <= 65023;
+  const isLinkLocal = first >= 65152 && first <= 65215;
+  const isSiteLocal = first >= 65216 && first <= 65279;
+  const isMulticast = first >= 65280;
+  const isDocumentation = first === 8193 && hextets[1] === 3512;
+  return isUnspecified || isLoopback || isUniqueLocal || isLinkLocal || isSiteLocal || isMulticast || isDocumentation;
+}
+function guardError(url2) {
+  return new Error(
+    `URL hostname ${JSON.stringify(url2.hostname)} is not allowed; private or internal destinations require allowPrivateNetwork true in the vAPI config.`
+  );
+}
+
+// ../core/src/networks.ts
+var USDC_DECIMALS = 6;
+var DEFAULT_ARC_GAS_HEADROOM_ATOMIC = 50000n;
+var NETWORKS2 = {
+  [BASE_MAINNET_CAIP2]: {
+    family: "evm",
+    chainId: 8453,
+    name: "Base mainnet",
+    usdc: CANONICAL_X402_USDC_NETWORKS[BASE_MAINNET_CAIP2].usdc,
+    gasToken: "ETH",
+    rpcEnv: "BASE_RPC_URL",
+    publicRpcUrl: "https://mainnet.base.org",
+    explorerUrl: "https://basescan.org"
+  },
+  [ARC_MAINNET_CAIP2]: {
+    family: "evm",
+    chainId: 5042,
+    name: "Arc mainnet",
+    usdc: CANONICAL_X402_USDC_NETWORKS[ARC_MAINNET_CAIP2].usdc,
+    gasToken: "USDC",
+    rpcEnv: "ARC_RPC_URL",
+    publicRpcUrl: "https://rpc.mainnet.arc.io",
+    explorerUrl: "https://explorer.arc.io"
+  },
+  [ARC_TESTNET_CAIP2]: {
+    family: "evm",
+    chainId: 5042002,
+    name: "Arc testnet",
+    usdc: CANONICAL_X402_USDC_NETWORKS[ARC_TESTNET_CAIP2].usdc,
+    gasToken: "USDC",
+    rpcEnv: "ARC_TESTNET_RPC_URL"
+  },
+  [SOLANA_MAINNET_CAIP2]: {
+    family: "svm",
+    name: "Solana mainnet",
+    usdc: SOLANA_MAINNET_USDC,
+    gasToken: "SOL",
+    rpcEnv: "SOLANA_RPC_URL",
+    publicRpcUrl: "https://api.mainnet-beta.solana.com"
+  },
+  [X402_SOLANA_MAINNET_CAIP2]: {
+    family: "svm",
+    name: "Solana mainnet",
+    usdc: SOLANA_MAINNET_USDC,
+    gasToken: "SOL",
+    rpcEnv: "SOLANA_RPC_URL",
+    publicRpcUrl: "https://api.mainnet-beta.solana.com"
+  }
+};
+function parseEip155ChainId(network) {
+  const match = /^eip155:(\d+)$/.exec(network);
+  if (!match) {
+    throw new Error(`Unsupported network ${network}; expected eip155:<chainId>.`);
+  }
+  const chainId = Number(match[1]);
+  if (!Number.isSafeInteger(chainId) || chainId <= 0) {
+    throw new Error(`Invalid EVM chain ID in network ${network}.`);
+  }
+  return chainId;
+}
+function isSolanaNetwork(network) {
+  return network === SOLANA_MAINNET_CAIP2 || network === X402_SOLANA_MAINNET_CAIP2;
+}
+function usesUsdcGas(network) {
+  try {
+    return getNetworkDefinition(network).gasToken === "USDC";
+  } catch {
+    return false;
+  }
+}
+function explorerTransactionUrl(network, hash5) {
+  try {
+    const explorerUrl = getNetworkDefinition(network).explorerUrl;
+    return explorerUrl ? `${explorerUrl}/tx/${hash5}` : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function explorerAddressUrl(network, address4) {
+  try {
+    const explorerUrl = getNetworkDefinition(network).explorerUrl;
+    return explorerUrl ? `${explorerUrl}/address/${address4}` : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function areSamePaymentNetwork(left, right) {
+  return left === right || isSolanaNetwork(left) && isSolanaNetwork(right);
+}
+function isSupportedPaymentNetwork(network) {
+  if (isSolanaNetwork(network)) return true;
+  try {
+    parseEip155ChainId(network);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function configuredNetworkFor(networks, network) {
+  const configured = networks[network];
+  if (configured) return configured;
+  if (network === X402_SOLANA_MAINNET_CAIP2) return networks[SOLANA_MAINNET_CAIP2];
+  if (network === SOLANA_MAINNET_CAIP2) return networks[X402_SOLANA_MAINNET_CAIP2];
+  return void 0;
+}
+function getNetworkDefinition(network) {
+  const known = NETWORKS2[network];
+  if (known) {
+    return known;
+  }
+  const chainId = parseEip155ChainId(network);
+  return {
+    family: "evm",
+    chainId,
+    name: network,
+    usdc: getAddress("0x0000000000000000000000000000000000000000"),
+    gasToken: "ETH",
+    rpcEnv: ""
+  };
+}
+function requireRpcUrl(network, configured) {
+  const definition = getNetworkDefinition(network);
+  const envUrl = definition.rpcEnv ? process.env[definition.rpcEnv]?.trim() : void 0;
+  const rpcUrl = envUrl || configured.rpcUrl.trim();
+  if (rpcUrl) {
+    return rpcUrl;
+  }
+  if (network === ARC_TESTNET_CAIP2) {
+    throw new Error(
+      "Arc testnet RPC is required. Set ARC_TESTNET_RPC_URL or add rpcUrl for eip155:5042002 in config.json."
+    );
+  }
+  throw new Error(`RPC URL is required for ${network}.`);
+}
+function createChain(network, rpcUrl) {
+  const definition = getNetworkDefinition(network);
+  if (definition.family !== "evm" || definition.chainId === void 0) {
+    throw new Error(`Network ${network} is not an EVM chain.`);
+  }
+  return defineChain({
+    id: definition.chainId,
+    name: definition.name,
+    nativeCurrency: definition.gasToken === "USDC" ? { name: "USDC", symbol: "USDC", decimals: USDC_DECIMALS } : { name: "Ether", symbol: "ETH", decimals: 18 },
+    rpcUrls: {
+      default: { http: [rpcUrl] }
+    },
+    ...definition.explorerUrl ? {
+      blockExplorers: {
+        default: { name: `${definition.name} explorer`, url: definition.explorerUrl }
+      }
+    } : {}
+  });
+}
+function createNetworkPublicClient(network, configured, options = {}) {
+  const rpcUrl = requireRpcUrl(network, configured);
+  return createPublicClient({
+    chain: createChain(network, rpcUrl),
+    transport: createNetworkHttpTransport(rpcUrl, options)
+  });
+}
+function createNetworkHttpTransport(rpcUrl, options = {}) {
+  const fetchFn = options.fetch ?? createPublicFetch({
+    allowPrivateNetwork: options.allowPrivateNetwork ?? false,
+    ...options.lookup ? { lookup: options.lookup } : {}
+  });
+  return http(rpcUrl, { fetchFn, fetchOptions: { redirect: "manual" } });
+}
+function formatUsdc(amountAtomic2) {
+  return formatUnits(amountAtomic2, USDC_DECIMALS);
+}
+
 // ../core/src/x402.ts
 var MAX_CHALLENGE_BYTES = 1048576;
 var MAX_UINT256 = (1n << 256n) - 1n;
@@ -46185,6 +46014,242 @@ function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// ../core/src/call-contracts-wire.ts
+var CALLABLE_CATEGORIES = ["ai", "data", "crypto", "compute", "search"];
+var callableCategorySchema = external_exports.enum(CALLABLE_CATEGORIES);
+var DISCOVERY_CATEGORIES = [...CALLABLE_CATEGORIES, "other"];
+var discoveryCategorySchema = external_exports.string().trim().min(1);
+var CALLABLE_CATEGORY_SET = new Set(CALLABLE_CATEGORIES);
+var serviceTierSchema = external_exports.string().trim().min(1);
+var discoveryEndpointSchema = external_exports.looseObject({
+  name: external_exports.string(),
+  method: external_exports.string(),
+  url: external_exports.url(),
+  price: external_exports.string(),
+  description: external_exports.string(),
+  operationId: external_exports.string().trim().min(1).optional(),
+  requestContentType: external_exports.string().trim().min(1).optional(),
+  requestSchema: external_exports.json().optional(),
+  responseContentType: external_exports.string().trim().min(1).optional(),
+  pathTemplate: external_exports.string().trim().min(1).optional(),
+  pathParameters: external_exports.array(external_exports.string().trim().min(1)).optional(),
+  payment: external_exports.union([
+    external_exports.looseObject({
+      scheme: external_exports.literal("exact"),
+      network: external_exports.string().regex(/^eip155:\d+$/),
+      asset: external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/),
+      payTo: external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/),
+      checkedAt: external_exports.iso.datetime()
+    }),
+    external_exports.looseObject({
+      scheme: external_exports.literal("exact"),
+      network: external_exports.union([
+        external_exports.string().regex(/^solana:[-_a-zA-Z0-9]{1,32}$/),
+        external_exports.literal(SOLANA_MAINNET_CAIP2)
+      ]),
+      asset: external_exports.string().refine(isSolanaAddress, "Expected a Solana base58 address."),
+      payTo: external_exports.string().refine(isSolanaAddress, "Expected a Solana base58 address."),
+      checkedAt: external_exports.iso.datetime()
+    }),
+    external_exports.looseObject({
+      protocol: external_exports.literal("mpp"),
+      intent: external_exports.enum(["charge", "authorize", "subscription"]).nullable(),
+      method: external_exports.string().trim().min(1).max(40).nullable(),
+      checkedAt: external_exports.iso.datetime(),
+      // Keep common x402 properties readable on the union while making it
+      // impossible for MPP metadata to masquerade as executable x402 terms.
+      network: external_exports.never().optional(),
+      payTo: external_exports.never().optional()
+    }),
+    external_exports.looseObject({
+      // Future payment protocols remain visible to callers so the payment
+      // layer can refuse them explicitly instead of discovery losing the row.
+      protocol: external_exports.string().trim().min(1).max(40),
+      checkedAt: external_exports.iso.datetime(),
+      network: external_exports.never().optional(),
+      payTo: external_exports.never().optional()
+    })
+  ]).optional()
+});
+var serviceSummarySchema = external_exports.looseObject({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  description: external_exports.string(),
+  category: discoveryCategorySchema,
+  tier: serviceTierSchema,
+  ...listingDisclosureShape,
+  verified: external_exports.boolean(),
+  wrapped: external_exports.boolean(),
+  price: external_exports.string(),
+  networks: external_exports.array(external_exports.string()),
+  endpoints: external_exports.array(discoveryEndpointSchema)
+});
+var searchServicesResponseSchema = external_exports.looseObject({
+  services: external_exports.array(serviceSummarySchema)
+});
+var discoveryResponseSchema = searchServicesResponseSchema;
+
+// ../core/src/call-contracts.ts
+var DiscoveryCatalogError = class extends Error {
+  constructor(code, message, serviceId, paymentNetworks) {
+    super(message);
+    this.paymentNetworks = paymentNetworks;
+    this.code = code;
+    this.serviceId = serviceId;
+  }
+  paymentNetworks;
+  name = "DiscoveryCatalogError";
+  code;
+  serviceId;
+};
+function isDiscoveryCatalogError(error61) {
+  if (!(error61 instanceof Error) || error61.name !== "DiscoveryCatalogError" || !("code" in error61) || typeof error61.code !== "string") {
+    return false;
+  }
+  const networks = Reflect.get(error61, "paymentNetworks");
+  return networks === void 0 || Array.isArray(networks) && networks.every((network) => typeof network === "string");
+}
+function parseDiscovery(raw) {
+  const parsed = discoveryResponseSchema.safeParse(raw);
+  if (!parsed.success) {
+    const malformedUrl = parsed.error.issues.find(
+      (issue2) => issue2.path.at(-1) === "url" && issue2.path.includes("endpoints")
+    );
+    if (malformedUrl) {
+      const serviceIndex = pathIndexAfter(malformedUrl.path, "services");
+      const serviceId = rawServiceId(raw, serviceIndex);
+      throw new DiscoveryCatalogError(
+        "malformed_url",
+        `Service ${JSON.stringify(serviceId ?? "unknown")} has a malformed endpoint URL.`,
+        serviceId
+      );
+    }
+    throw new DiscoveryCatalogError("invalid_discovery", "Discovery response is malformed.");
+  }
+  for (const service of parsed.data.services) {
+    buildTargets(service);
+  }
+  const resolveListing = (serviceId, endpointName) => {
+    const service = parsed.data.services.find((candidate) => candidate.id === serviceId);
+    if (!service) {
+      throw new DiscoveryCatalogError(
+        "service_not_found",
+        `No payable endpoint found for service ${JSON.stringify(serviceId)}.`,
+        serviceId
+      );
+    }
+    return { service, endpoint: resolveTarget(service, endpointName) };
+  };
+  return {
+    services: parsed.data.services,
+    resolve: (serviceId, endpointName) => resolveListing(serviceId, endpointName).endpoint,
+    resolveListing
+  };
+}
+function resolveTarget(service, endpointName) {
+  const { targets, targetsByName } = buildTargets(service);
+  if (endpointName !== void 0) {
+    const selected = targetsByName.get(endpointName.trim());
+    if (!selected) {
+      throw new DiscoveryCatalogError(
+        "endpoint_not_found",
+        `Service ${JSON.stringify(service.id)} has no endpoint ${JSON.stringify(endpointName)}. Available endpoints: ${[...targetsByName.keys()].join(", ")}.`,
+        service.id
+      );
+    }
+    return { ...selected };
+  }
+  if (targets.size !== 1) {
+    const paymentNetworks = service.endpoints.flatMap(
+      (endpoint) => typeof endpoint.payment?.network === "string" ? [endpoint.payment.network] : []
+    );
+    throw new DiscoveryCatalogError(
+      "ambiguous_default",
+      `Service ${JSON.stringify(service.id)} has ${targets.size} distinct payable endpoints. Choose one with endpoint: ${[...targetsByName.keys()].join(", ")}.`,
+      service.id,
+      paymentNetworks.length === service.endpoints.length ? paymentNetworks : void 0
+    );
+  }
+  return targets.values().next().value;
+}
+function buildTargets(service) {
+  if (service.endpoints.length === 0) {
+    throw new DiscoveryCatalogError(
+      "no_endpoint",
+      `Service ${JSON.stringify(service.id)} has no payable endpoint.`,
+      service.id
+    );
+  }
+  const namedEndpoints = [...service.endpoints].sort(
+    (left, right) => compareNames(left.name.trim(), right.name.trim())
+  );
+  const names = /* @__PURE__ */ new Set();
+  const targets = /* @__PURE__ */ new Map();
+  const targetsByName = /* @__PURE__ */ new Map();
+  for (const endpoint of namedEndpoints) {
+    const name = endpoint.name.trim();
+    if (!name) {
+      throw new DiscoveryCatalogError(
+        "invalid_endpoint_name",
+        `Service ${JSON.stringify(service.id)} has a blank endpoint name.`,
+        service.id
+      );
+    }
+    if (names.has(name)) {
+      throw new DiscoveryCatalogError(
+        "duplicate_endpoint_name",
+        `Service ${JSON.stringify(service.id)} has duplicate endpoint name ${JSON.stringify(name)}.`,
+        service.id
+      );
+    }
+    names.add(name);
+    const method = endpoint.method.trim().toUpperCase();
+    if (!method) {
+      throw new DiscoveryCatalogError(
+        "blank_method",
+        `Service ${JSON.stringify(service.id)} has a blank endpoint method.`,
+        service.id
+      );
+    }
+    const url2 = new URL(endpoint.url);
+    if (url2.protocol !== "http:" && url2.protocol !== "https:") {
+      throw new DiscoveryCatalogError(
+        "malformed_url",
+        `Service ${JSON.stringify(service.id)} has a non-HTTP endpoint URL.`,
+        service.id
+      );
+    }
+    const transportKey = `${method}\0${endpoint.url}`;
+    const normalized = { ...endpoint, name, method };
+    targetsByName.set(name, normalized);
+    if (!targets.has(transportKey)) targets.set(transportKey, normalized);
+  }
+  return { targets, targetsByName };
+}
+function compareNames(left, right) {
+  return left < right ? -1 : left > right ? 1 : 0;
+}
+function pathIndexAfter(path, key2) {
+  const keyIndex = path.indexOf(key2);
+  const candidate = path[keyIndex + 1];
+  return typeof candidate === "number" ? candidate : void 0;
+}
+function rawServiceId(raw, serviceIndex) {
+  if (serviceIndex === void 0 || typeof raw !== "object" || raw === null) {
+    return void 0;
+  }
+  const services = Reflect.get(raw, "services");
+  if (!Array.isArray(services)) {
+    return void 0;
+  }
+  const service = services[serviceIndex];
+  if (typeof service !== "object" || service === null) {
+    return void 0;
+  }
+  const id2 = Reflect.get(service, "id");
+  return typeof id2 === "string" ? id2 : void 0;
+}
+
 // ../core/src/sweep.ts
 var ERC20_ABI = [
   {
@@ -47033,7 +47098,7 @@ var configSchema = external_exports.object({
   }
   for (const [network, configured] of Object.entries(config2.networks)) {
     if (isSolanaNetwork(network)) {
-      if (configured.usdc !== NETWORKS[SOLANA_MAINNET_CAIP2].usdc) {
+      if (configured.usdc !== NETWORKS2[SOLANA_MAINNET_CAIP2].usdc) {
         context.addIssue({
           code: "custom",
           path: ["networks", network, "usdc"],
@@ -47044,7 +47109,7 @@ var configSchema = external_exports.object({
     }
     try {
       const usdc = getAddress(configured.usdc);
-      if ((network === ARC_MAINNET_CAIP2 || network === ARC_TESTNET_CAIP2) && usdc !== getAddress(NETWORKS[network].usdc)) {
+      if ((network === ARC_MAINNET_CAIP2 || network === ARC_TESTNET_CAIP2) && usdc !== getAddress(NETWORKS2[network].usdc)) {
         context.addIssue({
           code: "custom",
           path: ["networks", network, "usdc"],
@@ -47071,7 +47136,8 @@ function getVapiPaths(directory = process.env.VAPI_HOME?.trim() || join2(homedir
     keystore: join2(directory, "keystore.json"),
     receipts: join2(directory, "receipts.jsonl"),
     searches: join2(directory, "searches.jsonl"),
-    ledger: join2(directory, "spend-ledger.json")
+    ledger: join2(directory, "spend-ledger.json"),
+    updateCheck: join2(directory, "update-check.json")
   };
 }
 var getAgentCashPaths = getVapiPaths;
@@ -47196,15 +47262,15 @@ function getDefaultConfig(source = process.env, options = {}) {
   const tasksEscrowFactoryOverrides = tasksFactoryOverridesFromEnv(source);
   if (requested.has("base") || requested.has(BASE_MAINNET_CAIP2)) {
     networks[BASE_MAINNET_CAIP2] = {
-      rpcUrl: source.BASE_RPC_URL?.trim() || NETWORKS[BASE_MAINNET_CAIP2].publicRpcUrl,
-      usdc: NETWORKS[BASE_MAINNET_CAIP2].usdc
+      rpcUrl: source.BASE_RPC_URL?.trim() || NETWORKS2[BASE_MAINNET_CAIP2].publicRpcUrl,
+      usdc: NETWORKS2[BASE_MAINNET_CAIP2].usdc
     };
   }
   const arcMainnetRpcUrl = source.ARC_RPC_URL?.trim();
   if (arcMainnetRpcUrl || requested.has("arc") || requested.has(ARC_MAINNET_CAIP2)) {
     networks[ARC_MAINNET_CAIP2] = {
-      rpcUrl: arcMainnetRpcUrl || NETWORKS[ARC_MAINNET_CAIP2].publicRpcUrl,
-      usdc: NETWORKS[ARC_MAINNET_CAIP2].usdc
+      rpcUrl: arcMainnetRpcUrl || NETWORKS2[ARC_MAINNET_CAIP2].publicRpcUrl,
+      usdc: NETWORKS2[ARC_MAINNET_CAIP2].usdc
     };
   }
   const arcTestnetRpcUrl = source.ARC_TESTNET_RPC_URL?.trim();
@@ -47216,14 +47282,14 @@ function getDefaultConfig(source = process.env, options = {}) {
     }
     networks[ARC_TESTNET_CAIP2] = {
       rpcUrl: arcTestnetRpcUrl,
-      usdc: NETWORKS[ARC_TESTNET_CAIP2].usdc
+      usdc: NETWORKS2[ARC_TESTNET_CAIP2].usdc
     };
   }
   const solanaRpcUrl = source.SOLANA_RPC_URL?.trim();
   if (solanaRpcUrl || requested.has("solana") || requested.has(SOLANA_MAINNET_CAIP2)) {
     networks[SOLANA_MAINNET_CAIP2] = {
-      rpcUrl: solanaRpcUrl || NETWORKS[SOLANA_MAINNET_CAIP2].publicRpcUrl,
-      usdc: NETWORKS[SOLANA_MAINNET_CAIP2].usdc
+      rpcUrl: solanaRpcUrl || NETWORKS2[SOLANA_MAINNET_CAIP2].publicRpcUrl,
+      usdc: NETWORKS2[SOLANA_MAINNET_CAIP2].usdc
     };
   }
   return {
@@ -47281,21 +47347,21 @@ Run vapi init to write the new URLs to ${path}.`
   if (arcMainnetRpcUrl) {
     const existing = config2.networks[ARC_MAINNET_CAIP2];
     config2.networks[ARC_MAINNET_CAIP2] = {
-      ...existing ?? { usdc: NETWORKS[ARC_MAINNET_CAIP2].usdc },
+      ...existing ?? { usdc: NETWORKS2[ARC_MAINNET_CAIP2].usdc },
       rpcUrl: arcMainnetRpcUrl
     };
   }
   if (arcTestnetRpcUrl) {
     const existing = config2.networks[ARC_TESTNET_CAIP2];
     config2.networks[ARC_TESTNET_CAIP2] = {
-      ...existing ?? { usdc: NETWORKS[ARC_TESTNET_CAIP2].usdc },
+      ...existing ?? { usdc: NETWORKS2[ARC_TESTNET_CAIP2].usdc },
       rpcUrl: arcTestnetRpcUrl
     };
   }
   if (solanaRpcUrl) {
     config2.networks[SOLANA_MAINNET_CAIP2] = {
       rpcUrl: solanaRpcUrl,
-      usdc: config2.networks[SOLANA_MAINNET_CAIP2]?.usdc ?? NETWORKS[SOLANA_MAINNET_CAIP2].usdc
+      usdc: config2.networks[SOLANA_MAINNET_CAIP2]?.usdc ?? NETWORKS2[SOLANA_MAINNET_CAIP2].usdc
     };
   }
   if (registryUrl) {
@@ -47308,7 +47374,7 @@ Run vapi init to write the new URLs to ${path}.`
   for (const [network, configured] of Object.entries(config2.networks)) {
     configured.rpcUrl = configured.rpcUrl.trim();
     configured.usdc = configured.usdc.trim();
-    if (isSolanaNetwork(network) && configured.usdc !== NETWORKS[SOLANA_MAINNET_CAIP2].usdc) {
+    if (isSolanaNetwork(network) && configured.usdc !== NETWORKS2[SOLANA_MAINNET_CAIP2].usdc) {
       throw new Error(`Network ${network} must use canonical Solana mainnet USDC.`);
     }
     if (!configured.rpcUrl) delete config2.networks[network];
@@ -47364,14 +47430,14 @@ async function enableDefaultNetwork(network, path = getVapiPaths().config, sourc
   const config2 = await loadConfig(path, source);
   if (network === "solana") {
     config2.networks[SOLANA_MAINNET_CAIP2] = {
-      rpcUrl: source.SOLANA_RPC_URL?.trim() || NETWORKS[SOLANA_MAINNET_CAIP2].publicRpcUrl,
-      usdc: NETWORKS[SOLANA_MAINNET_CAIP2].usdc
+      rpcUrl: source.SOLANA_RPC_URL?.trim() || NETWORKS2[SOLANA_MAINNET_CAIP2].publicRpcUrl,
+      usdc: NETWORKS2[SOLANA_MAINNET_CAIP2].usdc
     };
   } else {
     const existing = config2.networks[ARC_MAINNET_CAIP2];
     config2.networks[ARC_MAINNET_CAIP2] = {
-      ...existing ?? { usdc: NETWORKS[ARC_MAINNET_CAIP2].usdc },
-      rpcUrl: source.ARC_RPC_URL?.trim() || NETWORKS[ARC_MAINNET_CAIP2].publicRpcUrl
+      ...existing ?? { usdc: NETWORKS2[ARC_MAINNET_CAIP2].usdc },
+      rpcUrl: source.ARC_RPC_URL?.trim() || NETWORKS2[ARC_MAINNET_CAIP2].publicRpcUrl
     };
   }
   await writeConfigFile(path, config2);
@@ -70335,7 +70401,7 @@ function windowsDataProtectionStore(platform2, run, env, installed) {
   };
 }
 function libsecretStore(platform2, run, installed) {
-  const lookup = async (name) => {
+  const lookup2 = async (name) => {
     const result = await run(SECRET_TOOL_BINARY, [
       "lookup",
       "service",
@@ -70354,9 +70420,9 @@ function libsecretStore(platform2, run, installed) {
     available: installed(SECRET_TOOL_BINARY),
     platform: platform2,
     description: "the libsecret keyring",
-    get: lookup,
+    get: lookup2,
     async has(name) {
-      return await lookup(name) !== void 0;
+      return await lookup2(name) !== void 0;
     },
     async set(name, passphrase) {
       requirePassphrase(passphrase);
@@ -70378,7 +70444,7 @@ function libsecretStore(platform2, run, installed) {
       requireSuccess(result, `store the passphrase of ${name} in the secret service`);
     },
     async remove(name) {
-      const existed = await lookup(name) !== void 0;
+      const existed = await lookup2(name) !== void 0;
       const result = await run(SECRET_TOOL_BINARY, [
         "clear",
         "service",
@@ -71441,6 +71507,8 @@ var VAULT_KEY_ACCOUNT = "vault-key";
 var VAULT_SESSION_ACCOUNT = "vault-session";
 var DEVICE_KEY_LENGTH = 32;
 var DEFAULT_SESSION_HOURS = 8;
+var RESTORE_GAP_LIMIT = 5;
+var MAX_RESTORE_ACCOUNTS = 1e4;
 var BASE64_PATTERN = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u;
 var deviceKeyOperations = Promise.resolve();
 var sessionSchema = external_exports.object({
@@ -71590,26 +71658,41 @@ async function restoreVault(args) {
     throw new VaultError("corrupt", "That recovery phrase is not valid.", { cause: error61 });
   }
   let seed;
-  let discoveredAccounts = 0;
+  if (args.accountCount !== void 0 && (!Number.isSafeInteger(args.accountCount) || args.accountCount < 1 || args.accountCount > MAX_RESTORE_ACCOUNTS)) {
+    throw new VaultError(
+      "corrupt",
+      `Account count must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  let discoveredAccounts = args.accountCount ?? 0;
+  let scannedAddresses = 0;
   try {
     seed = phraseToSeed(phrase);
   } catch (error61) {
     throw asVaultError2(error61, "Unable to derive an account while restoring the vault.");
   }
   try {
-    for (let index2 = 0; ; index2 += 1) {
+    for (let index2 = 0, emptyRun = 0; args.accountCount === void 0; index2 += 1) {
       let address4;
       try {
         address4 = privateKeyToAccount(deriveEvmPrivateKey(seed, `m/44'/60'/0'/0/${index2}`)).address;
       } catch (error61) {
         throw asVaultError2(error61, "Unable to derive an account while restoring the vault.");
       }
-      if (!await args.probe(address4)) break;
-      discoveredAccounts += 1;
+      const funded = await args.probe(address4);
+      scannedAddresses += 1;
+      if (funded) {
+        discoveredAccounts = index2 + 1;
+        emptyRun = 0;
+      } else {
+        emptyRun += 1;
+        if (emptyRun === RESTORE_GAP_LIMIT) break;
+      }
     }
   } finally {
     seed.fill(0);
   }
+  args.onScanComplete?.(scannedAddresses);
   let vault;
   try {
     vault = await createVault({ path: args.path, key: args.key, phrase, now: args.now });
@@ -72098,6 +72181,26 @@ var WalletStore = class _WalletStore {
       }
     );
   }
+  /** Checks a cached signer's current vault session without decrypting its account again. */
+  async assertSigningAuthority(name) {
+    const stored = await this.readVaultUnlocked();
+    if (!stored?.protected || !stored.accounts.some((account) => account.name === name)) return;
+    try {
+      const key2 = await unlockProtectedVault({
+        path: this.vaultPath,
+        secrets: this.secrets,
+        env: this.environment,
+        now: () => this.now()
+      });
+      key2.fill(0);
+    } catch (error61) {
+      this.dropVaultCache();
+      if (error61 instanceof VaultError && error61.code === "password_required") {
+        throw new KeystoreError(VAULT_LOCKED_MESSAGE, { cause: error61 });
+      }
+      throw error61;
+    }
+  }
   /** Returns one wallet's vault signer, migrating its legacy keystore if needed. */
   async unlock(name, passphrase) {
     const wallet = this.resolve({ name });
@@ -77484,7 +77587,7 @@ function createRunBudget(args) {
 import { mkdir as mkdir15, writeFile as writeFile8 } from "node:fs/promises";
 import { arch, platform, release } from "node:os";
 import { join as join13 } from "node:path";
-var VAPI_CLIENT_VERSION = "0.9.0";
+var VAPI_CLIENT_VERSION = "0.9.4";
 async function createSupportReport(options) {
   const message = options.message.trim();
   if (!message) throw new Error("Support report message must not be empty.");
@@ -77757,7 +77860,7 @@ async function completeX402Payment(args) {
   let paidAttempt;
   const requestStarted = nowMs();
   try {
-    paidAttempt = await args.send(paidRequest);
+    paidAttempt = await args.send(paidRequest, quote);
   } catch (error61) {
     if (trace) trace.phases.requestMs = elapsed(nowMs, requestStarted);
     throw settlementUnknown(
@@ -77775,7 +77878,7 @@ async function completeX402Payment(args) {
   const settleStarted = nowMs();
   const settlement = parseSettlementResponse(paidResponse.headers);
   const settlementOutcome = classifySettlement(settlement);
-  const receiptSettlement = sanitizeReceiptValue(settlement, receiptSecrets);
+  const receiptSettlement = sanitizeReturnedValue(settlement, receiptSecrets);
   if (trace) {
     const transaction2 = settlementTransaction(receiptSettlement);
     const explorerUrl = transaction2 ? explorerTransactionUrl(quote.accepted.network, transaction2) : void 0;
@@ -77852,6 +77955,7 @@ async function completeX402Payment(args) {
           trace.phases.requestMs = (trace.phases.requestMs ?? 0) + elapsed(nowMs, bodyStarted);
         }
       }
+      body = sanitizeReturnedValue(body, receiptSecrets);
     }
     const result = {
       response: paidResponse,
@@ -77860,7 +77964,11 @@ async function completeX402Payment(args) {
       quote,
       payer,
       ...payment.paymentId ? { paymentId: payment.paymentId } : {},
-      settlement,
+      paymentProof: sanitizeReturnedValue(
+        paidResponse.headers.get("x-vapi-payment-proof"),
+        receiptSecrets
+      ),
+      settlement: receiptSettlement,
       settlementOutcome
     };
     if (settlementOutcome === "succeeded" && args.ceilingSweep) {
@@ -77997,19 +78105,70 @@ function sanitizeThrownError(error61, secrets) {
   }
   return new Error(message, cause === void 0 ? void 0 : { cause });
 }
-function sanitizeReceiptValue(value, secrets, depth = 0) {
+function sanitizeReturnedValue(value, secrets) {
   if (typeof value === "string") return redactKnownSecrets(value, secrets);
-  if (value === null || typeof value !== "object") return value;
-  if (depth >= 16) return "[redacted nested settlement value]";
-  if (Array.isArray(value)) {
-    return value.map((item) => sanitizeReceiptValue(item, secrets, depth + 1));
+  if (!isPlainReturnedContainer(value)) return value;
+  const nodes = /* @__PURE__ */ new WeakMap();
+  const ordered = [];
+  const nodeFor = (source) => {
+    const existing = nodes.get(source);
+    if (existing) return existing;
+    const copy = Array.isArray(source) ? new Array(source.length) : Object.create(Object.getPrototypeOf(source));
+    const node2 = { source, copy, parents: /* @__PURE__ */ new Set(), changed: false };
+    nodes.set(source, node2);
+    ordered.push(node2);
+    return node2;
+  };
+  const root = nodeFor(value);
+  for (let index2 = 0; index2 < ordered.length; index2 += 1) {
+    const node2 = ordered[index2];
+    for (const [key2, item] of Object.entries(node2.source)) {
+      const safeKey = Array.isArray(node2.source) ? key2 : redactKnownSecrets(key2, secrets);
+      if (safeKey !== key2) node2.changed = true;
+      if (typeof item === "string") {
+        const safeItem = redactKnownSecrets(item, secrets);
+        defineReturnedProperty(node2.copy, safeKey, safeItem);
+        if (safeItem !== item) node2.changed = true;
+      } else if (isPlainReturnedContainer(item)) {
+        const child = nodeFor(item);
+        child.parents.add(node2);
+        defineReturnedProperty(node2.copy, safeKey, child.copy);
+      } else {
+        defineReturnedProperty(node2.copy, safeKey, item);
+      }
+    }
   }
-  return Object.fromEntries(
-    Object.entries(value).map(([key2, item]) => [
-      redactKnownSecrets(key2, secrets),
-      sanitizeReceiptValue(item, secrets, depth + 1)
-    ])
-  );
+  const changed = ordered.filter((node2) => node2.changed);
+  for (let index2 = 0; index2 < changed.length; index2 += 1) {
+    for (const parent of changed[index2].parents) {
+      if (parent.changed) continue;
+      parent.changed = true;
+      changed.push(parent);
+    }
+  }
+  for (const node2 of ordered) {
+    for (const [key2, item] of Object.entries(node2.source)) {
+      if (!isPlainReturnedContainer(item)) continue;
+      const safeKey = Array.isArray(node2.source) ? key2 : redactKnownSecrets(key2, secrets);
+      const child = nodes.get(item);
+      defineReturnedProperty(node2.copy, safeKey, child.changed ? child.copy : item);
+    }
+  }
+  return root.changed ? root.copy : value;
+}
+function defineReturnedProperty(target, key2, value) {
+  Object.defineProperty(target, key2, {
+    value,
+    enumerable: true,
+    configurable: true,
+    writable: true
+  });
+}
+function isPlainReturnedContainer(value) {
+  if (Array.isArray(value)) return true;
+  if (value === null || typeof value !== "object") return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
 }
 function redactKnownSecrets(value, secrets) {
   let redacted = value;
@@ -78044,9 +78203,7 @@ function possibleSettlement(quote, payment, payer, receipt) {
     payTo: quote.accepted.payTo,
     payer,
     ...payment.paymentId ? { paymentId: payment.paymentId } : {},
-    ...isSvmPaymentRequirements(quote.accepted) ? {
-      authorizationTransaction: "transaction" in payment.payload.payload ? payment.payload.payload.transaction : ""
-    } : "authorization" in payment.payload.payload ? {
+    ...isSvmPaymentRequirements(quote.accepted) ? {} : "authorization" in payment.payload.payload ? {
       authorizationNonce: payment.payload.payload.authorization.nonce,
       authorizationExpiresAt: payment.payload.payload.authorization.validBefore
     } : {},
@@ -78424,13 +78581,22 @@ async function sendRouterChat(deps, routerBaseUrl, routerKey, request, keyUsed)
   }
   const body = await responseText(response);
   if (!response.ok) {
-    if (response.status === 429 || body.includes("Budget has been exceeded") || body.includes("ExceededBudget")) {
+    if (/budget (?:has been )?exceeded|exceededbudget/iu.test(body)) {
       throw new RouterClientError(
         "budget_exhausted",
         "The Router key has no remaining budget.",
         response.status
       );
     }
+    if (response.status === 429) {
+      const retryAfter = response.headers.get("retry-after")?.trim();
+      const retrySeconds = retryAfter !== void 0 && /^\d+$/u.test(retryAfter) ? Number(retryAfter) : void 0;
+      throw new RouterClientError(
+        "rate_limited",
+        `The vAPI Router is rate limited. ${retrySeconds !== void 0 && Number.isFinite(retrySeconds) ? `Retry after ${retrySeconds} seconds.` : "Wait and retry shortly."}`,
+        response.status
+      );
+    }
     if (response.status === 401) {
       throw new RouterClientError(
         "no_router_key",
@@ -78997,6 +79163,7 @@ var missingTasksChain = {
 
 // ../core/src/tasks/types.ts
 var uuidSchema = external_exports.uuid();
+var profileIdSchema = external_exports.string().min(1).max(64).regex(/^[A-Za-z0-9_-]+$/);
 var isoDateTimeSchema = external_exports.iso.datetime();
 var addressSchema5 = external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/).transform((value) => value.toLowerCase());
 var bytes32Schema = external_exports.string().regex(/^0x[0-9a-fA-F]{64}$/).transform((value) => value.toLowerCase());
@@ -79334,7 +79501,7 @@ var deliveryResponseSchema = external_exports.looseObject({
   version: external_exports.number().int().positive(),
   manifest: manifestResponseSchema,
   manifestHash: bytes32Schema,
-  submittedByProfileId: uuidSchema,
+  submittedByProfileId: profileIdSchema,
   createdAt: isoDateTimeSchema
 });
 var orderDeliveryResponseSchema = external_exports.looseObject({
@@ -79440,7 +79607,7 @@ var reviewResponseSchema = external_exports.looseObject({
   id: uuidSchema,
   workOrderId: uuidSchema,
   clientAddress: addressSchema5,
-  vendorProfileId: uuidSchema,
+  vendorProfileId: profileIdSchema,
   rating: external_exports.number().int().min(1).max(5),
   body: external_exports.string(),
   subRatings: external_exports.json().nullable(),
@@ -79983,12 +80150,15 @@ function createTasksClient(options) {
         const parsed2 = serverErrorSchema.safeParse(errorBody);
         const server = parsed2.success ? parsed2.data : void 0;
         const nested = typeof server?.error === "object" ? server.error : void 0;
-        const message = (typeof server?.error === "string" ? server.error : nested?.message) || server?.message || response.statusText || `HTTP ${response.status}`;
+        const serverCode = nested?.code ?? server?.code;
+        const serverMessage = (typeof server?.error === "string" ? server.error : nested?.message) || server?.message;
+        const fallback = response.statusText || `HTTP ${response.status}`;
+        const message = response.status === 401 || response.status === 403 ? serverCode ?? fallback : serverMessage || (errorBody === void 0 && raw.trim() ? raw.replace(/\s+/gu, " ").trim().slice(0, 300) : fallback);
         throw new TasksClientError(
           "http",
           message,
           response.status,
-          nested?.code ?? server?.code,
+          serverCode,
           response.headers.get("Retry-After") ?? void 0
         );
       }
@@ -80391,9 +80561,10 @@ function safeTasksChainError(cause, broadcast, authorizationExposed, txHash) {
   let message = "Task chain operation failed.";
   if (cause instanceof TasksValidationError || cause instanceof TasksChainError)
     message = cause.message;
-  else if (cause instanceof TasksClientError)
-    message = `Tasks service request failed${cause.status === void 0 ? "" : ` (status ${cause.status})`}.`;
-  else if (cause instanceof Error) {
+  else if (cause instanceof TasksClientError) {
+    const code = cause.serverCode ?? (cause.status ? `http_${cause.status}` : cause.code);
+    message = cause.status === 401 || cause.status === 403 ? `${code} (status ${cause.status})` : `${code}: ${cause.message}`;
+  } else if (cause instanceof Error) {
     const short = "shortMessage" in cause && typeof cause.shortMessage === "string" ? cause.shortMessage : void 0;
     let statusCode;
     const seen = /* @__PURE__ */ new Set();
@@ -81201,6 +81372,44 @@ function createTasksChain(options) {
       return idempotencyKey;
     });
   }
+  async function prepareOrResume(prepare, expected, idempotencyKey, kind, steps, authorizationExposed = false, beforeSign) {
+    let prepared;
+    let resumedFromServer = false;
+    try {
+      prepared = await prepare();
+    } catch (error61) {
+      if (!uncertainPreparation(error61)) throw error61;
+      const fresh = await order(expected.milestone.workOrderId);
+      const matches = fresh.milestones.filter((item) => item.id === expected.milestone.id);
+      if (matches.length !== 1 || matches[0].workOrderId !== fresh.id)
+        throw new TasksValidationError("The task milestone does not match its parent order.");
+      const selected = matches[0];
+      const operation = selected.chainOperation;
+      if (expected.verb === "deliver" && selected.delivery && !operation)
+        throw new TasksValidationError(
+          "The server recorded this delivery but has no chain operation for it; open the task in the console to continue."
+        );
+      if (!operation || operation.kind !== kind || !(typeof steps === "string" ? [steps] : steps).includes(operation.step) || !["prepared", "submitted", "confirmed"].includes(operation.state))
+        throw error61;
+      if (expected.verb === "deliver" && selected.delivery && selected.delivery.manifestHash !== expected.manifestHash)
+        throw new TasksValidationError(
+          "The server recorded a different delivery manifest; refusing to continue."
+        );
+      prepared = {
+        operation,
+        milestone: { id: selected.id, workOrderId: selected.workOrderId }
+      };
+      resumedFromServer = true;
+    }
+    const result = await execute(
+      prepared,
+      expected,
+      idempotencyKey,
+      authorizationExposed,
+      beforeSign
+    );
+    return resumedFromServer ? { ...result, resumedFromServer: true } : result;
+  }
   async function verifyReceipt(operation, expected, hash5) {
     const rpc = rpcFor(expected.deployment.chainId);
     const receipt = await rpc.waitForTransactionReceipt({ hash: hash5, confirmations });
@@ -81242,6 +81451,7 @@ function createTasksChain(options) {
       throw new TasksValidationError(
         "The RPC transaction input does not match the verified task plan."
       );
+    return receipt.blockNumber.toString();
   }
   async function retryConflict(call2) {
     let waited = 0;
@@ -81269,6 +81479,7 @@ function createTasksChain(options) {
       current = { ...initial, operation: live };
     let broadcast = current.operation.state === "submitted";
     let txHash = current.operation.transactionHash ?? void 0;
+    let blockNumber;
     const operationId = initial.operation.id;
     function checkTransition(previous, next) {
       if (previous !== next && !(previous === "approve-usdc" && next === afterApproval))
@@ -81304,7 +81515,7 @@ function createTasksChain(options) {
           if (!operation.transactionHash)
             throw new TasksValidationError("The confirmed task operation has no transaction hash.");
           if (!checkpoint) {
-            await verifyReceipt(operation, expected, operation.transactionHash);
+            blockNumber = await verifyReceipt(operation, expected, operation.transactionHash);
             await pending.complete(operation.id, operation.step, current);
           }
           const fresh = await order(expected.milestone.workOrderId);
@@ -81313,7 +81524,12 @@ function createTasksChain(options) {
           );
           if (!resultMilestone)
             throw new TasksValidationError("The reconciled task milestone is unavailable.");
-          return { txHash: operation.transactionHash, operation, milestone: resultMilestone };
+          return {
+            txHash: operation.transactionHash,
+            operation,
+            milestone: resultMilestone,
+            blockNumber
+          };
         }
         const rpc = rpcFor(expected.deployment.chainId);
         if (operation.state === "prepared") {
@@ -81509,7 +81725,7 @@ function createTasksChain(options) {
         }
         if (operation.state !== "submitted" || !operation.transactionHash)
           throw new TasksValidationError("The task operation has no submitted transaction.");
-        await verifyReceipt(operation, expected, operation.transactionHash);
+        blockNumber = await verifyReceipt(operation, expected, operation.transactionHash);
         const reconciled = await retryConflict(
           () => client.reconcileOperation(
             operation.id,
@@ -81532,6 +81748,7 @@ function createTasksChain(options) {
         if (reconciled.operation.state !== "confirmed" && !(operation.step === "approve-usdc" && reconciled.operation.state === "prepared" && reconciled.operation.step === afterApproval))
           throw new TasksValidationError("The task transaction was not reconciled.");
         await pending.complete(operation.id, operation.step, reconciled);
+        if (reconciled.operation.step !== operation.step) blockNumber = void 0;
         current = reconciled;
       }
       throw new TasksValidationError("The task operation exceeded its allowed step transitions.");
@@ -81566,14 +81783,16 @@ function createTasksChain(options) {
         );
       const prepareKey = await preparation(input2, verb, { evidenceHash: input2.evidenceHash });
       const call2 = verb === "dispute" ? client.disputeEscrow.bind(client) : client.counterEvidenceEscrow.bind(client);
-      return await execute(
-        await call2(
+      return await prepareOrResume(
+        () => call2(
           input2.escrowId,
           { evidenceHash: input2.evidenceHash },
           { idempotencyKey: prepareKey }
         ),
         { ...expected, evidenceHash: input2.evidenceHash },
         prepareKey,
+        verb === "dispute" ? "escrow-dispute" : "escrow-counter-evidence",
+        expected.steps,
         exposed,
         input2.beforeSign
       );
@@ -81593,11 +81812,34 @@ function createTasksChain(options) {
       await options.bindings.put(binding);
     },
     createEscrow: (input2) => safe(async () => {
-      const workOrder = await order(input2.orderId);
+      let workOrder = await order(input2.orderId);
       const ready = await deployment();
-      const prepared = await client.createEscrow(input2.orderId, {
-        idempotencyKey: input2.idempotencyKey
-      });
+      let prepared;
+      let resumedFromServer = false;
+      try {
+        prepared = await client.createEscrow(input2.orderId, {
+          idempotencyKey: input2.idempotencyKey
+        });
+      } catch (error61) {
+        if (!uncertainPreparation(error61)) throw error61;
+        const fresh = await order(input2.orderId);
+        const candidates = fresh.milestones.filter((item) => {
+          const previous = workOrder.milestones.find((prior) => prior.id === item.id);
+          const operation = item.chainOperation;
+          return item.workOrderId === input2.orderId && previous && operation && operation.kind === "escrow-create" && operation.step === "create-escrow" && (previous.escrowState === null || previous.chainOperation?.id === operation.id);
+        });
+        if (candidates.length !== 1) throw error61;
+        const selected2 = candidates[0];
+        prepared = {
+          operation: selected2.chainOperation,
+          milestone: {
+            id: selected2.id,
+            workOrderId: selected2.workOrderId
+          }
+        };
+        workOrder = fresh;
+        resumedFromServer = true;
+      }
       const selected = workOrder.milestones.find((item) => item.id === prepared.milestone.id);
       if (!selected || selected.workOrderId !== input2.orderId)
         throw new TasksValidationError(
@@ -81607,11 +81849,12 @@ function createTasksChain(options) {
         { escrowId: selected.id, idempotencyKey: input2.idempotencyKey },
         "createEscrow"
       );
-      return await execute(
+      const result = await execute(
         prepared,
         await expectation(selected, ready, "createEscrow", ["create-escrow"], input2.counterparty),
         prepareKey
       );
+      return resumedFromServer ? { ...result, resumedFromServer: true } : result;
     }),
     async fund(input2) {
       let exposed = true;
@@ -81699,10 +81942,14 @@ function createTasksChain(options) {
         }
         exposed = true;
         await pending.markExposure(selected.id);
-        const prepared = await client.fundEscrow(input2.escrowId, body, {
-          idempotencyKey: prepareKey
-        });
-        return await execute(prepared, expected, prepareKey, exposed);
+        return await prepareOrResume(
+          () => client.fundEscrow(input2.escrowId, body, { idempotencyKey: prepareKey }),
+          expected,
+          prepareKey,
+          "escrow-funding",
+          expected.steps,
+          exposed
+        );
       } catch (cause) {
         throw chainError(cause, false, exposed);
       }
@@ -81727,22 +81974,26 @@ function createTasksChain(options) {
         manifest: frozen.manifest,
         note: input2.note
       });
-      const prepared = await client.deliverEscrow(
-        input2.escrowId,
-        { fileIds: frozen.manifest.files.map((file2) => file2.fileId), note: input2.note },
-        { idempotencyKey: prepareKey }
-      );
-      if (prepared.delivery.manifestHash !== frozen.manifestHash)
-        throw new TasksValidationError(
-          "The server task delivery manifest hash does not match the local manifest."
-        );
-      return await execute(
-        prepared,
+      return await prepareOrResume(
+        async () => {
+          const prepared = await client.deliverEscrow(
+            input2.escrowId,
+            { fileIds: frozen.manifest.files.map((file2) => file2.fileId), note: input2.note },
+            { idempotencyKey: prepareKey }
+          );
+          if (prepared.delivery.manifestHash !== frozen.manifestHash)
+            throw new TasksValidationError(
+              "The server task delivery manifest hash does not match the local manifest."
+            );
+          return prepared;
+        },
         {
           ...expected,
           manifestHash: frozen.manifestHash
         },
-        prepareKey
+        prepareKey,
+        "escrow-delivery",
+        "submit-delivery"
       );
     }),
     release: (input2) => safe(async () => {
@@ -81756,10 +82007,12 @@ function createTasksChain(options) {
         input2.counterparty
       );
       const prepareKey = await preparation(input2, "release");
-      return await execute(
-        await client.releaseEscrow(input2.escrowId, { idempotencyKey: prepareKey }),
+      return await prepareOrResume(
+        () => client.releaseEscrow(input2.escrowId, { idempotencyKey: prepareKey }),
         expected,
-        prepareKey
+        prepareKey,
+        "escrow-release",
+        "release-funds"
       );
     }),
     refund: (input2) => safe(async () => {
@@ -81773,10 +82026,12 @@ function createTasksChain(options) {
         input2.counterparty
       );
       const prepareKey = await preparation(input2, "refund");
-      return await execute(
-        await client.refundEscrow(input2.escrowId, { idempotencyKey: prepareKey }),
+      return await prepareOrResume(
+        () => client.refundEscrow(input2.escrowId, { idempotencyKey: prepareKey }),
         expected,
-        prepareKey
+        prepareKey,
+        "escrow-release",
+        "refund-buyer"
       );
     }),
     disputeFee: (input2) => safe(async () => {
@@ -81804,16 +82059,21 @@ function createTasksChain(options) {
         input2.counterparty
       );
       const prepareKey = await preparation(input2, "resolve-unmatched");
-      return execute(
-        await client.resolveUnmatchedEscrow(input2.escrowId, { idempotencyKey: prepareKey }),
+      return prepareOrResume(
+        () => client.resolveUnmatchedEscrow(input2.escrowId, { idempotencyKey: prepareKey }),
         expected,
-        prepareKey
+        prepareKey,
+        "escrow-unmatched-resolution",
+        "resolve-unmatched-dispute"
       );
     }),
     signScopeMessage: (message) => safe(() => account.signMessage({ message }))
   };
 }
 var chainError = safeTasksChainError;
+function uncertainPreparation(error61) {
+  return error61 instanceof TasksClientError && ((error61.status ?? 0) >= 400 || error61.code === "network" || error61.code === "timeout");
+}
 function retryDelay(header, now) {
   if (/^\d+(?:\.\d+)?$/u.test(header.trim())) return Math.max(1, Math.ceil(Number(header) * 1e3));
   const date5 = Date.parse(header);
@@ -81830,6 +82090,60 @@ function alreadySent(error61) {
   return error61 instanceof Error && /already known|known transaction|nonce (?:is )?too low/iu.test(error61.message);
 }
 
+// ../core/src/tasks/wait.ts
+async function waitForMilestone(client, input2) {
+  const timeoutMs = input2.timeoutMs ?? 12e4;
+  const intervalMs = input2.intervalMs ?? 3e3;
+  if (!Number.isFinite(timeoutMs) || timeoutMs < 0)
+    throw new RangeError("The milestone wait timeout must be non-negative and finite.");
+  if (!Number.isFinite(intervalMs) || intervalMs <= 0)
+    throw new RangeError("The milestone wait interval must be positive and finite.");
+  const sleep = input2.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms)));
+  const now = input2.now ?? (() => /* @__PURE__ */ new Date());
+  const started = now().getTime();
+  const deadline = started + timeoutMs;
+  let polls = 0;
+  let milestone;
+  function result(reached) {
+    return { reached, milestone, polls, elapsedMs: now().getTime() - started };
+  }
+  for (; ; ) {
+    const remaining = deadline - now().getTime();
+    if (remaining <= 0) return result(false);
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), remaining);
+    let response;
+    polls++;
+    try {
+      response = await client.getOrder(input2.orderId, { signal: controller.signal });
+    } catch (error61) {
+      if (controller.signal.aborted) return result(false);
+      throw error61;
+    } finally {
+      clearTimeout(timer);
+    }
+    if (controller.signal.aborted || now().getTime() >= deadline) return result(false);
+    const { workOrder } = response;
+    milestone = workOrder.id === input2.orderId && workOrder.version === "work-order-view-v1" ? workOrder.milestones.find(
+      (item) => item.id === input2.milestoneId && item.workOrderId === input2.orderId
+    ) : void 0;
+    if (milestone && reachedTarget(milestone, input2.target)) return result(true);
+    await sleep(Math.min(intervalMs, deadline - now().getTime()));
+  }
+}
+function reachedTarget(milestone, target) {
+  switch (target) {
+    case "created":
+      return milestone.escrowState !== null;
+    case "locked":
+      return ["locked", "submitted", "disputed", "resolved"].includes(milestone.escrowState ?? "");
+    case "delivered":
+      return ["submitted", "disputed", "resolved"].includes(milestone.escrowState ?? "");
+    case "released":
+      return milestone.escrowState === "resolved";
+  }
+}
+
 // ../core/src/tasks/rpc.ts
 function createTasksRpcFor(config2, options = {}) {
   const clients = /* @__PURE__ */ new Map();
@@ -82946,7 +83260,10 @@ async function taskRequest(verb, route, operation, options) {
           "not_signed_in",
           `${verb} needs sign-in. ${options.signInHint}`
         );
-      throw new TaskOperationError(error61.serverCode ?? error61.code, error61.message);
+      throw new TaskOperationError(
+        error61.serverCode ?? (error61.status ? `http_${error61.status}` : error61.code),
+        error61.message
+      );
     }
     throw error61;
   }
@@ -83067,7 +83384,8 @@ function proposalTerms(id2, address4, deployment, terms) {
   return {
     version: "work-proposal-v1",
     workOrderId: id2,
-    providerAddress: address4,
+    // The server lowercases addresses before canonicalizing the signed payload.
+    providerAddress: address4.toLowerCase(),
     pricingModel: "fixed",
     milestones: [
       {
@@ -83454,6 +83772,55 @@ async function showTask(context, input2) {
   };
 }
 async function taskStatus(context, input2) {
+  if (input2.signedIn) {
+    const chainState = await taskRequest(
+      "status",
+      "chainState",
+      async () => {
+        try {
+          return await context.client.chainState(input2.id);
+        } catch (error61) {
+          if (error61 instanceof TasksClientError && error61.status === 404) {
+            if (isMissingTaskEntity(error61.serverCode, error61.message))
+              throw new TaskOperationError("not_found", error61.message);
+            throw new TaskOperationError(
+              "not_available",
+              "GET /v1/work-orders/:id/chain-state is not available on this server."
+            );
+          }
+          throw error61;
+        }
+      },
+      context
+    );
+    if (chainState.workOrderId !== input2.id)
+      throw new TaskOperationError("invalid_response", "The response belongs to a different task.");
+    const page = await taskRequest(
+      "status",
+      "events",
+      async () => {
+        try {
+          return await context.client.events(input2.id, { wait: 0 });
+        } catch (error61) {
+          if (error61 instanceof TasksClientError && error61.status === 404) {
+            if (isMissingTaskEntity(error61.serverCode, error61.message)) return null;
+            throw new TaskOperationError(
+              "not_available",
+              "GET /v1/work-orders/:id/events is not available on this server."
+            );
+          }
+          throw error61;
+        }
+      },
+      context
+    );
+    return {
+      task: { id: input2.id },
+      chainState,
+      events: page ? [...page.events].sort((a, b) => a.sequence - b.sequence) : null,
+      nextAfter: page?.nextAfter ?? null
+    };
+  }
   const task = await taskRequest(
     "status",
     "publicTask",
@@ -83809,6 +84176,7 @@ var searchEventSchema = external_exports.strictObject({
       source: external_exports.string().min(1),
       latencyMs: external_exports.number().nonnegative().finite(),
       count: external_exports.number().int().nonnegative(),
+      dropped: external_exports.number().int().nonnegative().optional(),
       error: external_exports.string().optional()
     })
   ),
@@ -86814,6 +87182,12 @@ function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/cli.ts
+import { spawn as spawn3 } from "node:child_process";
+import { stat as stat16 } from "node:fs/promises";
+import { join as join28 } from "node:path";
+import { createInterface as createInterface3 } from "node:readline/promises";
+
 // ../core/src/member-bundle.ts
 var MEMBER_BUNDLE_MAX_BYTES = 32 * 1024;
 var REMOTE_BLOCKED_GRANTS = /* @__PURE__ */ new Set([
@@ -86880,7 +87254,7 @@ var memberBundleConfigSchema = external_exports.unknown().refine((value) => !has
       external_exports.strictObject({ usdc: external_exports.string() })
     ).refine(
       (networks) => Object.entries(networks).every(
-        ([id2, network]) => isMemberBundleNetwork(id2) && network.usdc === NETWORKS[id2].usdc
+        ([id2, network]) => isMemberBundleNetwork(id2) && network.usdc === NETWORKS2[id2].usdc
       ),
       { message: "Expected the canonical USDC token of each network." }
     ).refine((networks) => Object.keys(networks).length === 1, {
@@ -86919,14 +87293,14 @@ function memberBundleConfig(owner, network) {
   return {
     discoveryUrl,
     marketplaceDiscoveryUrl,
-    networks: { [network]: { usdc: NETWORKS[network].usdc } }
+    networks: { [network]: { usdc: NETWORKS2[network].usdc } }
   };
 }
 function headlessConfigFromBundle(config2) {
   const networks = {};
   for (const [id2, network] of Object.entries(config2.networks)) {
     if (!isMemberBundleNetwork(id2) || network === void 0) continue;
-    networks[id2] = { rpcUrl: NETWORKS[id2].publicRpcUrl, usdc: network.usdc };
+    networks[id2] = { rpcUrl: NETWORKS2[id2].publicRpcUrl, usdc: network.usdc };
   }
   return configSchema.parse({
     discoveryUrl: config2.discoveryUrl,
@@ -87019,7 +87393,7 @@ function parseStoredTokens(value) {
   }
 }
 function isMemberBundleNetwork(id2) {
-  return Object.hasOwn(NETWORKS, id2) && typeof NETWORKS[id2].publicRpcUrl === "string";
+  return Object.hasOwn(NETWORKS2, id2) && typeof NETWORKS2[id2].publicRpcUrl === "string";
 }
 function hasForbiddenConfigKey(value) {
   if (Array.isArray(value)) return value.some(hasForbiddenConfigKey);
@@ -87321,11 +87695,28 @@ async function searchMarketplace(input2, config2, fetchImpl, options = {}) {
         }
       }
     });
-    const page = marketplaceDiscoveryPageSchema.parse(await response.json());
-    mergedCount = page.items.length;
+    const envelope = marketplaceDiscoveryEnvelopeSchema.parse(await response.json());
+    const items = [];
+    let dropped = 0;
+    for (const [index2, rawItem] of envelope.items.entries()) {
+      const parsed = marketplaceHitSchema.safeParse(rawItem);
+      if (parsed.success) {
+        items.push(parsed.data);
+        continue;
+      }
+      dropped += 1;
+      try {
+        options.debug?.(`vAPI marketplace discovery dropped invalid row at index ${index2}.`);
+      } catch {
+      }
+    }
+    mergedCount = items.length;
     const attempt = attempts.at(-1);
-    if (attempt) attempt.count = mergedCount;
-    return page;
+    if (attempt) {
+      attempt.count = mergedCount;
+      if (dropped > 0) attempt.dropped = dropped;
+    }
+    return { ...envelope, items };
   } finally {
     if (options.searchesPath) {
       await appendSearchEvent(
@@ -87451,6 +87842,34 @@ var VapiCallError = class extends Error {
   paymentRejection;
   confirmedSettlement;
 };
+var SOLANA_PAYMENTS_UNSUPPORTED_MESSAGE = "Solana payments are not supported in this version of vAPI yet; they arrive in a later release.";
+function isSolanaCaip2(network) {
+  return network.startsWith("solana:");
+}
+function listingPaymentNetwork(endpointNetwork, serviceNetworks) {
+  if (endpointNetwork !== void 0) return endpointNetwork;
+  return serviceNetworks?.length && serviceNetworks.every(isSolanaCaip2) ? serviceNetworks[0] : void 0;
+}
+function assertSupportedListingNetwork(network) {
+  if (network !== void 0 && isSolanaCaip2(network)) {
+    throw new VapiCallError(
+      "unsupported_network",
+      `${SOLANA_PAYMENTS_UNSUPPORTED_MESSAGE} This listing pays on ${network}.`
+    );
+  }
+}
+function assertSupportedListingResolution(error61) {
+  if (isDiscoveryCatalogError(error61) && error61.code === "ambiguous_default" && error61.paymentNetworks?.length && error61.paymentNetworks.every(isSolanaCaip2)) {
+    assertSupportedListingNetwork(error61.paymentNetworks[0]);
+  }
+}
+function payableConfig(config2, account) {
+  if (account.solana !== void 0) return config2;
+  const networks = Object.fromEntries(
+    Object.entries(config2.networks).filter(([network]) => !isSolanaCaip2(network))
+  );
+  return { ...config2, networks };
+}
 var MAX_RESPONSE_BYTES = 1048576;
 var BODY_HEADER_NAMES = [
   "content-encoding",
@@ -87460,12 +87879,15 @@ var BODY_HEADER_NAMES = [
   "content-type"
 ];
 async function callService(args) {
+  validateTimeoutSeconds(args.input.timeoutSeconds);
   const trace = createCallTrace(args);
   let execution;
   try {
     execution = await executeCallService(args, trace);
   } catch (error61) {
-    await recordCallError(args, error61, trace).catch(() => void 0);
+    if (!(error61 instanceof VapiCallError && (error61.code === "unsupported_network" || error61.code === "unsupported_payment"))) {
+      await recordCallError(args, error61, trace).catch(() => void 0);
+    }
     throw error61;
   }
   try {
@@ -87513,10 +87935,16 @@ async function executeCallService(args, trace) {
         config2,
         fetchImpl
       );
+    } catch (error61) {
+      assertSupportedListingResolution(error61);
+      throw error61;
     } finally {
       trace.phases.discoverMs = elapsed2(trace, discoverStarted);
     }
   }
+  assertSupportedListingNetwork(
+    listingPaymentNetwork(endpoint?.payment?.network, endpoint?.serviceNetworks)
+  );
   const requestedNetwork = normalizeRequiredNetwork(input2.network);
   const listingNetwork = endpoint?.payment?.network;
   if (requestedNetwork && listingNetwork && !areSamePaymentNetwork(requestedNetwork, listingNetwork)) {
@@ -87571,6 +87999,8 @@ async function executeCallService(args, trace) {
     body: method === "GET" || method === "HEAD" ? void 0 : requestBody
   });
   const request = createRequest(headers);
+  const probeTimeoutMs = input2.timeoutSeconds === void 0 ? args.timeoutMs ?? 3e4 : Math.min(input2.timeoutSeconds, 30) * 1e3;
+  let requestTimeoutMs = probeTimeoutMs;
   const fetchWithGuardedRedirects = async (candidateRequest, followRedirects = true) => {
     let currentRequest = candidateRequest;
     let followedRedirects = 0;
@@ -87578,7 +88008,7 @@ async function executeCallService(args, trace) {
       const attempt = await fetchAttempt(
         fetchImpl,
         new Request(currentRequest.clone(), { redirect: "manual" }),
-        args.timeoutMs ?? 3e4
+        requestTimeoutMs
       );
       const response = attempt.response;
       if (!isRedirectStatus2(response.status)) {
@@ -87732,8 +88162,13 @@ async function executeCallService(args, trace) {
       challenge: challengeAttempt,
       account,
       caps: args.spendCaps ?? config2.spendCaps,
-      config: config2,
-      send: async (paidRequest) => {
+      config: payableConfig(config2, account),
+      send: async (paidRequest, quote) => {
+        requestTimeoutMs = paidRequestTimeoutMs(
+          input2.timeoutSeconds,
+          args.timeoutMs,
+          quote.accepted.maxTimeoutSeconds
+        );
         paidAttempt = await fetchWithGuardedRedirects(paidRequest, false);
         return paidAttempt;
       },
@@ -87772,7 +88207,7 @@ async function executeCallService(args, trace) {
         asset: completed.quote.accepted.asset,
         payTo: completed.quote.accepted.payTo,
         settlement: settlementWithExplorer2(completed.settlement, completed.quote.accepted.network),
-        proof: completed.response.headers.get("x-vapi-payment-proof")
+        proof: completed.paymentProof
       },
       ...verificationFor(endpoint),
       ...expectedRequestFor(endpoint, completed.response.status)
@@ -87982,7 +88417,7 @@ async function resolveCallEndpoint(id2, endpointName, marketplaceHit, config2, f
     try {
       return registeredEndpoint(await resolveServiceListing(id2, config2, fetchImpl, endpointName));
     } catch (error61) {
-      if (!(error61 instanceof DiscoveryCatalogError) || error61.code !== "service_not_found") {
+      if (!isDiscoveryCatalogError(error61) || error61.code !== "service_not_found") {
         throw error61;
       }
       const discovered = await findMarketplaceApiByRef(id2, config2, fetchImpl);
@@ -88019,9 +88454,18 @@ async function resolveCallEndpoint(id2, endpointName, marketplaceHit, config2, f
   );
 }
 function registeredEndpoint(listing, verification) {
+  const { payment, ...endpoint } = listing.endpoint;
+  if (payment && (typeof payment.protocol === "string" || typeof payment.network !== "string")) {
+    throw new VapiCallError(
+      "unsupported_payment",
+      `Payment protocol ${payment.protocol} is not supported. This client pays x402 exact USDC endpoints only.`
+    );
+  }
   return {
-    ...listing.endpoint,
+    ...endpoint,
+    ...payment ? { payment: { network: payment.network, payTo: payment.payTo } } : {},
     verification: verification ?? listing.service.verification,
+    serviceNetworks: listing.service.networks,
     registered: true,
     resolvedListing: true
   };
@@ -88181,7 +88625,7 @@ async function readResponseBody2(response) {
 async function fetchAttempt(fetchImpl, request, timeoutMs) {
   const controller = new AbortController();
   let rejectTimeout = null;
-  const timeoutError = new Error(`API request timed out after ${timeoutMs}ms.`);
+  const timeoutError = new Error(`API request timed out after ${timeoutMs / 1e3} seconds.`);
   const timedOut = new Promise((_resolve, reject) => {
     rejectTimeout = reject;
   });
@@ -88221,6 +88665,19 @@ async function fetchAttempt(fetchImpl, request, timeoutMs) {
     throw error61;
   }
 }
+function validateTimeoutSeconds(timeoutSeconds) {
+  if (timeoutSeconds !== void 0 && (!Number.isInteger(timeoutSeconds) || timeoutSeconds < 1 || timeoutSeconds > 300)) {
+    throw new Error("call timeoutSeconds must be an integer from 1 to 300 seconds.");
+  }
+}
+function paidRequestTimeoutMs(timeoutSeconds, internalTimeoutMs, offerTimeoutSeconds) {
+  const usableOfferTimeout = Number.isInteger(offerTimeoutSeconds) && offerTimeoutSeconds > 0 ? offerTimeoutSeconds : void 0;
+  if (timeoutSeconds !== void 0) {
+    return Math.min(timeoutSeconds, usableOfferTimeout ?? timeoutSeconds) * 1e3;
+  }
+  if (internalTimeoutMs !== void 0) return internalTimeoutMs;
+  return usableOfferTimeout === void 0 ? 12e4 : Math.min(12e4, Math.max(3e4, usableOfferTimeout * 1e3));
+}
 function mapX402PaymentError(error61, resumeId) {
   if (!(error61 instanceof X402PaymentError)) return error61;
   if (error61.code === "payment_rejected") {
@@ -88236,9 +88693,10 @@ function mapX402PaymentError(error61, resumeId) {
     });
   }
   const resume = resumeId !== void 0 && error61.possibleSettlement?.authorizationNonce ? ` Check whether it settled with \`vapi pay --resume ${resumeId}\` before paying again.` : "";
+  const timeoutDetail = error61.cause instanceof Error && error61.cause.message.startsWith("API request timed out after ") ? `${error61.cause.message} ` : "";
   return new VapiCallError(
     "settlement_unknown",
-    `${error61.message}${resume}`,
+    `${timeoutDetail}${error61.message}${resume}`,
     error61.possibleSettlement,
     { cause: error61.cause }
   );
@@ -88260,14 +88718,17 @@ async function inspectService(input2, config2, fetchImpl) {
   try {
     listing = await resolveServiceListing(input2.id, config2, fetchImpl, input2.endpoint);
   } catch (error61) {
-    if (input2.endpoint || !(error61 instanceof DiscoveryCatalogError) || error61.code !== "service_not_found") {
+    assertSupportedListingResolution(error61);
+    if (input2.endpoint || !isDiscoveryCatalogError(error61) || error61.code !== "service_not_found") {
       throw error61;
     }
     const hit = await findMarketplaceApiByRef(input2.id, config2, fetchImpl);
     if (!hit || hit.kind !== "api" || hit.provenance !== "indexed") throw error61;
+    assertSupportedListingNetwork(hit.execution.network);
     return inspectIndexedHit(hit);
   }
   const { endpoint, service } = listing;
+  assertSupportedListingNetwork(listingPaymentNetwork(endpoint.payment?.network, service.networks));
   return {
     name: endpoint.name,
     method: endpoint.method,
@@ -88367,13 +88828,7 @@ var inspectToolResultSchema = external_exports.object({
   liveness: listingLivenessSchema.optional(),
   conformance: listingConformanceSchema.optional(),
   identity: listingIdentitySchema.optional(),
-  payment: external_exports.object({
-    scheme: external_exports.literal("exact"),
-    network: external_exports.string(),
-    asset: external_exports.string(),
-    payTo: external_exports.string(),
-    checkedAt: external_exports.string()
-  }).nullable()
+  payment: discoveryEndpointSchema.shape.payment.unwrap().nullable()
 });
 var callSearchInputSchema = external_exports.object({
   query: external_exports.string().trim().max(200).optional().describe("Capability, API, service, or request."),
@@ -88402,7 +88857,10 @@ var callPayInputSchema = external_exports.object({
     (value) => /^0x[0-9a-fA-F]{40}$/.test(value) || isSolanaAddress(value),
     "Expected an EVM or Solana address."
   ).optional(),
-  maxPriceUsd: external_exports.union([external_exports.number().nonnegative(), external_exports.string().regex(/^\d+(?:\.\d{1,6})?$/)]).optional()
+  maxPriceUsd: external_exports.union([external_exports.number().nonnegative(), external_exports.string().regex(/^\d+(?:\.\d{1,6})?$/)]).optional(),
+  timeoutSeconds: external_exports.number().int().min(1).max(300).optional().describe(
+    "Seconds to wait for the paid response. Default: the provider's maxTimeoutSeconds, at most 120."
+  )
 });
 var callSearch = defineAction({
   name: "call.search",
@@ -88665,7 +89123,7 @@ async function readResult(response, signal, secrets = []) {
   return {
     status: response.status,
     contentType: contentType === null ? null : redactKnownSecrets2(contentType, secrets),
-    body: sanitizeReturnedValue(await readResponseBody3(response, contentType, signal), secrets)
+    body: sanitizeReturnedValue2(await readResponseBody3(response, contentType, signal), secrets)
   };
 }
 async function readResponseBody3(response, contentType, signal) {
@@ -88710,17 +89168,17 @@ function isJsonContentType2(value) {
   const mediaType = value?.split(";", 1)[0]?.trim().toLowerCase() ?? "";
   return mediaType === "application/json" || mediaType.endsWith("+json");
 }
-function sanitizeReturnedValue(value, secrets, depth = 0) {
+function sanitizeReturnedValue2(value, secrets, depth = 0) {
   if (typeof value === "string") return redactKnownSecrets2(value, secrets);
   if (value === null || typeof value !== "object") return value;
   if (depth >= 16) return "[redacted nested response value]";
   if (Array.isArray(value)) {
-    return value.map((item) => sanitizeReturnedValue(item, secrets, depth + 1));
+    return value.map((item) => sanitizeReturnedValue2(item, secrets, depth + 1));
   }
   return Object.fromEntries(
     Object.entries(value).map(([key2, item]) => [
       redactKnownSecrets2(key2, secrets),
-      sanitizeReturnedValue(item, secrets, depth + 1)
+      sanitizeReturnedValue2(item, secrets, depth + 1)
     ])
   );
 }
@@ -92037,6 +92495,7 @@ var moneyParticipant = {
     "Checksummed 0x address of the other party, taken from tasks.show (the poster's clientAddress when you are the worker; the accepted proposal's providerAddress when you are the poster). The human must supply it; it is compared with the signed scope and stored as local consent. Without it tasks.sign refuses and no local party binding is created, so tasks.fund/deliver/release cannot run from this machine."
   ).optional()
 };
+var waitForIndexer = external_exports.boolean().default(true).describe("Wait up to 60 seconds for vAPI to index the chain result before returning.");
 var cursor = external_exports.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 function usdWithinEscrow(value, positive = false) {
   try {
@@ -92083,7 +92542,10 @@ var tasksPostTool = descriptor(
     deadline: external_exports.string(),
     intake: external_exports.enum(["proposals", "submissions"]).optional(),
     maxAwards: external_exports.number().int().min(TASK_LIMITS.maxAwardsMin).max(TASK_LIMITS.maxAwardsMax).optional(),
-    webhookUrl: httpsUrl.optional()
+    webhookUrl: httpsUrl.optional(),
+    vendor: external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/u).describe(
+      "Optional 0x address of a vendor to invite directly; the task is addressed to that wallet and shows up for them. Anyone may still propose."
+    ).optional()
   }
 );
 var tasksProposeTool = descriptor(
@@ -92108,42 +92570,43 @@ var tasksAwardTool = descriptor(
   { ...participant, proposalId: id }
 );
 var tasksSignTool = descriptor(
-  "Does not move money. Sign the current counterparty scope locally after the human confirms the money direction via counterparty; a worker may also create the unfunded escrow with the local vault wallet.",
-  moneyParticipant
+  "Signs the user's own task scope locally with the user's vault wallet after the human confirms the money direction via counterparty; a worker may also create the unfunded escrow; nothing is custodial. Does not move money. Waits up to 60 seconds for vAPI to index a created escrow by default.",
+  { ...moneyParticipant, wait: waitForIndexer }
 );
 var tasksFundTool = descriptor(
-  "Moves money: locks the task amount in USDC escrow subject to the acting wallet's policy and daily cap. MCP cannot grant human approval; amounts above the approval threshold are refused with approval:true.",
-  moneyParticipant
+  "Executes the user's own funding of this task from the user's vault wallet, within the spend policy the user configured; nothing is custodial. MCP cannot grant human approval; amounts above the approval threshold are refused with approval:true. Waits up to 60 seconds for vAPI to index the locked escrow by default.",
+  { ...moneyParticipant, wait: waitForIndexer }
 );
 var tasksDeliverTool = descriptor(
-  "Does not move money. Upload local delivery files, freeze the manifest and record delivery with the local vault wallet.",
+  "Does not move money. Upload local delivery files, freeze the manifest and record delivery with the local vault wallet. Waits up to 60 seconds for vAPI to index the delivery by default.",
   {
     ...moneyParticipant,
+    wait: waitForIndexer,
     files: external_exports.array(localPath).min(TASK_LIMITS.deliveryFilesMin).max(TASK_LIMITS.deliveryFilesMax),
     note: external_exports.string().max(TASK_LIMITS.deliveryNoteMax).refine((value) => value.trim().length > 0)
   }
 );
 var tasksReleaseTool = descriptor(
-  "Moves money: pays the worker from escrow with the local vault wallet. Returns gross \xB7 fee \xB7 net using the deployed fee.",
-  moneyParticipant
+  "Executes the user's own payment to the worker from task escrow with the user's vault wallet; nothing is custodial. Returns gross \xB7 fee \xB7 net using the deployed fee. Waits up to 60 seconds for vAPI to index the release by default.",
+  { ...moneyParticipant, wait: waitForIndexer }
 );
 var tasksRefundTool = descriptor(
-  "Moves money: returns escrowed USDC to the poster with the local vault wallet. Returns gross \xB7 fee \xB7 net using the deployed fee.",
+  "Executes the user's own refund of escrowed USDC to the poster with the user's vault wallet; nothing is custodial. Returns gross \xB7 fee \xB7 net using the deployed fee.",
   moneyParticipant
 );
 var tasksDisputeTool = descriptor(
-  "Moves money: approves the verified dispute fee and raises a dispute with the local vault wallet. Applies task and daily caps; MCP refuses human approval with approval:true. Accepts a precomputed evidence hash.",
+  "Executes the user's own approval of the verified dispute fee and raises a dispute with the user's vault wallet; nothing is custodial. Applies task and daily caps; MCP refuses human approval with approval:true. Accepts a precomputed evidence hash.",
   {
     ...moneyParticipant,
     evidenceHash: external_exports.string().regex(TASK_LIMITS.disputeEvidenceHash)
   }
 );
 var tasksCounterEvidenceTool = descriptor(
-  "Moves money: approves the verified dispute fee and submits counter-evidence as the non-opener before the onchain deadline. Applies task and daily caps; MCP refuses human approval with approval:true.",
+  "Executes the user's own counter-evidence submission and approval of the verified dispute fee with the user's vault wallet as the non-opener before the onchain deadline; nothing is custodial. Applies task and daily caps; MCP refuses human approval with approval:true.",
   { ...moneyParticipant, evidenceHash: external_exports.string().regex(TASK_LIMITS.disputeEvidenceHash) }
 );
 var tasksResolveUnmatchedTool = descriptor(
-  "Moves money: resolves an unmatched dispute after the onchain counter-evidence deadline when no counter-evidence was submitted.",
+  "Executes the user's own resolution of an unmatched dispute with the user's vault wallet after the onchain counter-evidence deadline when no counter-evidence was submitted; nothing is custodial.",
   moneyParticipant
 );
 var tasksMessageTool = descriptor(
@@ -92167,8 +92630,8 @@ var tasksWatchTool = descriptor(
   }
 );
 var tasksStatusTool = descriptor(
-  "Does not move money. Read the public task card and receipt URL when settled; sign-in is not required.",
-  { id }
+  "Does not move money. Read signed-in chain state and participant events, or the public task card without sign-in.",
+  participant
 );
 var signInHint = "Call auth.link for the acting wallet.";
 function lazyTasksChain(factory, pending) {
@@ -92308,6 +92771,22 @@ function createTasksTools(options) {
       };
     };
   }
+  async function waitAfterChain(ctx, orderId, milestoneId, target) {
+    return await taskRequest(
+      target,
+      "getOrder",
+      () => waitForMilestone(ctx.client, {
+        orderId,
+        milestoneId,
+        target,
+        timeoutMs: 6e4,
+        intervalMs: 3e3,
+        ...options.sleep === void 0 ? {} : { sleep: options.sleep },
+        now
+      }),
+      ctx
+    );
+  }
   async function feeAction(verb, input2) {
     const ctx = await acting(input2.wallet);
     const policy = await taskPolicyForWallet({
@@ -92350,7 +92829,12 @@ function createTasksTools(options) {
         throw new TaskInputError("deadline must be at least 10 minutes from now.");
       const ctx = await acting(input2.wallet);
       const outcome = await postTask(ctx, {
-        order: { title: input2.title, description: input2.brief, policyFamily: "general-digital" },
+        order: {
+          title: input2.title,
+          description: input2.brief,
+          policyFamily: "general-digital",
+          ...input2.vendor === void 0 ? {} : { invitedProviderAddress: input2.vendor }
+        },
         amount: parseUsdToBaseUnits(input2.amountUsd),
         deadlineAt: new Date(postedAt.getTime() + deadlineDuration).toISOString(),
         ...input2.intake === void 0 ? {} : { intake: input2.intake },
@@ -92408,15 +92892,15 @@ function createTasksTools(options) {
       const ctx = await acting(input2.wallet);
       const signerAddress = (await options.session.addressesFor(ctx.selected.name)).address;
       try {
-        return taskResult(
-          await signTaskScope(ctx, {
-            id: input2.id,
-            counterparty: input2.counterparty,
-            signerAddress,
-            bindings: createScopeBindings(home),
-            signMessage: async (message) => (await unlock(ctx.selected.name)()).signMessage(message)
-          })
-        );
+        const outcome = await signTaskScope(ctx, {
+          id: input2.id,
+          counterparty: input2.counterparty,
+          signerAddress,
+          bindings: createScopeBindings(home),
+          signMessage: async (message) => (await unlock(ctx.selected.name)()).signMessage(message)
+        });
+        const wait2 = input2.wait && outcome.escrowCreation ? await waitAfterChain(ctx, input2.id, outcome.escrowCreation.milestone.id, "created") : null;
+        return taskResult({ ...outcome, wait: wait2 });
       } catch (error61) {
         if (!(error61 instanceof TasksScopeCreationError)) throw error61;
         try {
@@ -92452,28 +92936,31 @@ function createTasksTools(options) {
         // Stdio has no human approval channel. Model arguments cannot grant approval.
         approval: { granted: false }
       });
-      return taskResult(outcome, !outcome.ok);
+      const wait2 = input2.wait && outcome.ok ? await waitAfterChain(ctx, input2.id, outcome.result.milestone.id, "locked") : null;
+      return taskResult({ ...outcome, wait: wait2 }, !outcome.ok);
     },
     async deliver(input2) {
       const files = (await Promise.all(input2.files.map(readTaskFile))).map(
         ({ fileName: name, bytes, contentType }) => ({ name, bytes, contentType })
       );
-      return taskResult(
-        await deliverTaskOperation(await acting(input2.wallet), {
-          id: input2.id,
-          ...input2.counterparty === void 0 ? {} : { counterparty: input2.counterparty },
-          files,
-          note: input2.note
-        })
-      );
+      const ctx = await acting(input2.wallet);
+      const outcome = await deliverTaskOperation(ctx, {
+        id: input2.id,
+        ...input2.counterparty === void 0 ? {} : { counterparty: input2.counterparty },
+        files,
+        note: input2.note
+      });
+      const wait2 = input2.wait ? await waitAfterChain(ctx, input2.id, outcome.result.milestone.id, "delivered") : null;
+      return taskResult({ ...outcome, wait: wait2 });
     },
     async release(input2) {
-      return taskResult(
-        await releaseTaskOperation(await acting(input2.wallet), {
-          id: input2.id,
-          ...input2.counterparty === void 0 ? {} : { counterparty: input2.counterparty }
-        })
-      );
+      const ctx = await acting(input2.wallet);
+      const outcome = await releaseTaskOperation(ctx, {
+        id: input2.id,
+        ...input2.counterparty === void 0 ? {} : { counterparty: input2.counterparty }
+      });
+      const wait2 = input2.wait ? await waitAfterChain(ctx, input2.id, outcome.result.milestone.id, "released") : null;
+      return taskResult({ ...outcome, wait: wait2 });
     },
     async refund(input2) {
       return taskResult(
@@ -92540,7 +93027,11 @@ function createTasksTools(options) {
       }
     },
     async status(input2) {
-      return taskResult(await taskStatus(await context(void 0, true), { id: input2.id }));
+      await options.wallets?.reload();
+      const publicOnly = input2.wallet === void 0 && options.session.activeName === void 0 && options.wallets !== void 0 && options.wallets.names().length === 0;
+      const candidate = await context(input2.wallet, publicOnly);
+      const ctx = candidate.token || publicOnly ? candidate : await context(void 0, true);
+      return taskResult(await taskStatus(ctx, { id: input2.id, signedIn: Boolean(ctx.token) }));
     }
   };
 }
@@ -93297,6 +93788,11 @@ var statsToolResultSchema = external_exports.object({
     )
   })
 });
+function objectOutputSchema(schema) {
+  if (!schema) return {};
+  const json2 = external_exports.toJSONSchema(schema);
+  return json2.type === "object" ? { outputSchema: json2 } : {};
+}
 var VapiMcpServer = class {
   #tools = /* @__PURE__ */ new Map();
   #onClose;
@@ -93320,7 +93816,7 @@ var VapiMcpServer = class {
         name,
         ...tool.description ? { description: tool.description } : {},
         inputSchema: external_exports.toJSONSchema(tool.inputSchema),
-        ...tool.outputSchema ? { outputSchema: external_exports.toJSONSchema(tool.outputSchema) } : {}
+        ...objectOutputSchema(tool.outputSchema)
       }))
     };
   }
@@ -94188,7 +94684,13 @@ function toolError(error61) {
     {
       error: error61.message,
       code: error61.code,
-      ...error61.possibleSettlement ? { possibleSettlement: error61.possibleSettlement } : {},
+      ...error61.possibleSettlement ? {
+        possibleSettlement: Object.fromEntries(
+          Object.entries(error61.possibleSettlement).filter(
+            ([key2]) => key2 !== "authorizationTransaction"
+          )
+        )
+      } : {},
       ...error61.paymentRejection ? { paymentRejection: error61.paymentRejection } : {},
       ...error61.confirmedSettlement ? { confirmedSettlement: error61.confirmedSettlement } : {}
     },
@@ -97682,7 +98184,7 @@ async function readProcessStdin() {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.9.0";
+var CLI_VERSION = "0.9.4";
 
 // src/status.ts
 async function statusCommand(argv, json2, io, dependencies) {
@@ -101184,7 +101686,7 @@ function createLocalRuntime(options) {
   const processCommand = options.processCommand ?? defaultProcessCommand;
   const ownsProcess = (handle, pid) => processCommand(pid)?.includes(runResultPath(home, handle.runId)) === true;
   const closeFd = options.closeFd ?? closeSync2;
-  const readFile29 = options.readFile ?? nodeReadFile;
+  const readFile30 = options.readFile ?? nodeReadFile;
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   const openLog = options.openLog ?? ((path) => {
     mkdirSync2(runsDirectory(home), { recursive: true, mode: 448 });
@@ -101239,7 +101741,7 @@ function createLocalRuntime(options) {
       return handle;
     },
     async status(handle) {
-      const result = await readResultFile(readFile29, runResultPath(home, handle.runId));
+      const result = await readResultFile(readFile30, runResultPath(home, handle.runId));
       if (result !== void 0) return result;
       const pid = localPid(handle);
       if (pid === void 0 || handle.kind !== "local") {
@@ -101342,10 +101844,10 @@ function childArguments(member, run) {
     ...run.drawUsd ? ["--draw", run.drawUsd] : []
   ];
 }
-async function readResultFile(readFile29, path) {
+async function readResultFile(readFile30, path) {
   let text;
   try {
-    text = await readFile29(path, "utf8");
+    text = await readFile30(path, "utf8");
   } catch (error61) {
     if (hasCode3(error61, "ENOENT")) return void 0;
     return { state: "failed", detail: "unreadable result file" };
@@ -102195,7 +102697,7 @@ function isMcpInstallApp(value) {
 function serverEntry(home, registry2) {
   return {
     command: "npx",
-    args: ["-y", "vapi-network", "mcp"],
+    args: ["-y", "vapi-network@latest", "mcp"],
     env: { VAPI_HOME: home, VAPI_REGISTRY_URL: registry2 }
   };
 }
@@ -102244,7 +102746,7 @@ function tomlConfig(existing, entry) {
   const block = [
     "[mcp_servers.vapi]",
     'command = "npx"',
-    'args = ["-y", "vapi-network", "mcp"]',
+    'args = ["-y", "vapi-network@latest", "mcp"]',
     `env = { VAPI_HOME = "${escapeToml(entry.env.VAPI_HOME)}", VAPI_REGISTRY_URL = "${escapeToml(entry.env.VAPI_REGISTRY_URL)}" }`,
     ""
   ].join("\n");
@@ -102411,13 +102913,13 @@ async function sendConfig(dependencies) {
 // src/setup.ts
 import { rm as rm5 } from "node:fs/promises";
 import { join as join26 } from "node:path";
-var SETUP_ARGUMENT_ERROR = "vapi setup accepts only --no-cloud-backup; a recovery phrase is typed at the prompt, never passed on the command line.";
+var SETUP_ARGUMENT_ERROR = `vapi setup accepts only --no-cloud-backup and --accounts <n> (1-${MAX_RESTORE_ACCOUNTS}); a recovery phrase is typed at the prompt, never passed on the command line.`;
 var VAULT_CHOICE = "Create a new vault, or restore one from a recovery phrase? [new/restore] ";
 async function setupCommand(argv, json2, io, dependencies) {
   let parsed;
   try {
     parsed = parseArguments(argv, {
-      valueOptions: /* @__PURE__ */ new Set(),
+      valueOptions: /* @__PURE__ */ new Set(["--accounts"]),
       booleanOptions: /* @__PURE__ */ new Set(["--no-cloud-backup"]),
       maximumPositionals: 0
     });
@@ -102428,6 +102930,7 @@ async function setupCommand(argv, json2, io, dependencies) {
   const paths = getVapiPaths();
   const steps = [];
   const humanIo = json2 ? stderrIo(io) : io;
+  const accountCount = parseAccountCount(parsed.one("--accounts"));
   if (!await fileExists2(paths.config)) {
     await writeDefaultConfig(paths.config, process.env, { networks: ["base"] });
     steps.push("config");
@@ -102438,6 +102941,7 @@ async function setupCommand(argv, json2, io, dependencies) {
   let changedVault = false;
   let changedAccount = false;
   let changedLink = false;
+  let scannedAddresses;
   if (!await fileExists2(join26(paths.directory, "vault.json"))) {
     const choice = await vaultChoice(dependencies);
     if (choice === "restore") {
@@ -102445,12 +102949,14 @@ async function setupCommand(argv, json2, io, dependencies) {
         throw new Error("Restoring needs a terminal to type the phrase.");
       }
       const readSecret = dependencies.prompts?.secret ?? promptForSecret;
-      await restoreVaultFromPhrase(
+      const restored = await restoreVaultFromPhrase(
         await readSecret("Recovery phrase: "),
         config2,
         humanIo,
-        dependencies
+        dependencies,
+        accountCount
       );
+      scannedAddresses = restored.scannedAddresses;
       store = await WalletStore.open(paths.directory, {
         secrets: getSecretStore(dependencies),
         env: dependencies.env ?? process.env,
@@ -102503,22 +103009,35 @@ async function setupCommand(argv, json2, io, dependencies) {
   }
   if (json2) {
     io.stdout(
-      JSON.stringify({ vault, account, address: address4, linked, steps, cloudBackup })
+      JSON.stringify({
+        vault,
+        account,
+        address: address4,
+        linked,
+        steps,
+        cloudBackup,
+        ...scannedAddresses === void 0 ? {} : { scannedAddresses }
+      })
     );
   }
 }
-async function restoreVaultFromPhrase(phrase, config2, io, dependencies) {
+async function restoreVaultFromPhrase(phrase, config2, io, dependencies, accountCount) {
   const paths = getVapiPaths();
   const validatedPhrase = validateRecoveryPhrase(phrase);
   const readBalance3 = baseUsdcBalanceReader(config2, dependencies);
   const key2 = await loadOrCreateDeviceKey({ secrets: getSecretStore(dependencies) });
   let names;
+  let scannedAddresses = 0;
   try {
     const restored = await restoreVault({
       path: join26(paths.directory, "vault.json"),
       key: key2,
       phrase: validatedPhrase,
       probe: async (address4) => await readBalance3(address4) > 0n,
+      ...accountCount === void 0 ? {} : { accountCount },
+      onScanComplete: (count) => {
+        scannedAddresses = count;
+      },
       ...dependencies.now === void 0 ? {} : { now: dependencies.now }
     });
     names = restored.accounts().map((account) => account.name);
@@ -102530,8 +103049,25 @@ async function restoreVaultFromPhrase(phrase, config2, io, dependencies) {
     ...names[0] === void 0 ? {} : { wallet: names[0] },
     detail: `${names.length} account(s)`
   });
-  io.stdout(`Vault restored with ${names.length} account(s): ${names.join(", ")}`);
-  return { names };
+  io.stdout(
+    `Vault restored with ${names.length} account(s): ${names.join(", ")}. ${scannedAddresses} address(es) scanned.`
+  );
+  return { names, scannedAddresses };
+}
+function parseAccountCount(value) {
+  if (value === void 0) return void 0;
+  if (!/^\d+$/u.test(value)) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  const count = Number(value);
+  if (!Number.isSafeInteger(count) || count < 1 || count > MAX_RESTORE_ACCOUNTS) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  return count;
 }
 async function vaultChoice(dependencies) {
   const answer = dependencies.prompts?.line === void 0 ? isInteractive(dependencies) ? await promptForLine(VAULT_CHOICE) : "" : await dependencies.prompts.line(VAULT_CHOICE);
@@ -102631,10 +103167,10 @@ var TASK_HELP = `Usage:
   vapi task propose <id> --price <usd> --duration <duration> --note <text> [--account <name>] [--json]
   vapi task submit <id> --proof <https-url> [--proof <https-url>...] [--file <path>...] [--account <name>] [--json]
   vapi task award <id> <proposalId> [--account <name>] [--json]
-  vapi task sign <id> [--yes] [--counterparty <0x\u2026>] [--account <name>] [--json]
-  vapi task fund <id> [--yes] [--counterparty <0x\u2026>] [--account <name>] [--json]
-  vapi task deliver <id> --files <path...> --note <text> [--counterparty <0x\u2026>] [--account <name>] [--json]
-  vapi task release <id> [--counterparty <0x\u2026>] [--account <name>] [--json]
+  vapi task sign <id> [--yes] [--no-wait] [--timeout 120s] [--counterparty <0x\u2026>] [--account <name>] [--json]
+  vapi task fund <id> [--yes] [--no-wait] [--timeout 120s] [--counterparty <0x\u2026>] [--account <name>] [--json]
+  vapi task deliver <id> --files <path...> --note <text> [--no-wait] [--timeout 120s] [--counterparty <0x\u2026>] [--account <name>] [--json]
+  vapi task release <id> [--no-wait] [--timeout 120s] [--counterparty <0x\u2026>] [--account <name>] [--json]
   vapi task refund <id> [--counterparty <0x\u2026>] [--account <name>] [--json]
   vapi task dispute <id> --evidence-hash <0x + 64 hex> [--yes] [--counterparty <0x\u2026>] [--account <name>] [--json]
   vapi task counter-evidence <id> --evidence-hash <0x + 64 hex> [--yes] [--counterparty <0x\u2026>] [--account <name>] [--json]
@@ -102657,23 +103193,25 @@ Exit codes:
   2  policy refusal only (JSON ok:false with reason policy.perTask or policy.perDay)
   3  approval needed in non-interactive mode
 
-Fund, deliver, release, refund, dispute, counter-evidence, resolve-unmatched and watch auto-release sign with the local vault wallet. The CLI waits for two confirmations and records pending transactions for recovery. It never retries a chain mutation automatically.`;
+Fund, deliver, release, refund, dispute, counter-evidence, resolve-unmatched and watch auto-release sign with the local vault wallet. The CLI waits for two confirmations and records pending transactions for recovery. It never retries a chain mutation automatically. Sign, fund, deliver and release wait up to 120s for vAPI to index a confirmed transaction unless --no-wait is set; an indexing timeout keeps exit code 0.`;
 var IMPLEMENTED_VERBS = TASKS_CLIENT_VERBS;
 var USAGE = `Usage: vapi task <${IMPLEMENTED_VERBS.join("|")}>. Run vapi task --help.`;
 var TaskCommandError = class extends Error {
-  constructor(code, message, manifestHash) {
+  constructor(code, message, manifestHash, prefixCode = false) {
     super(message);
     this.code = code;
     this.manifestHash = manifestHash;
+    this.prefixCode = prefixCode;
     this.name = "TaskCommandError";
   }
   code;
   manifestHash;
+  prefixCode;
 };
 function mapTaskError(error61) {
   if (error61 instanceof TaskInputError) return new UsageError(error61.message);
   if (error61 instanceof TaskOperationError)
-    return new TaskCommandError(error61.code, error61.message, error61.manifestHash);
+    return new TaskCommandError(error61.code, error61.message, error61.manifestHash, true);
   return error61;
 }
 async function mapped(operation) {
@@ -102892,11 +103430,13 @@ async function taskCommandInner(argv, json2, io, dependencies) {
         "--intake",
         "--max-awards",
         "--webhook"
-      ] : verb === "propose" ? ["--price", "--duration", "--note"] : verb === "submit" ? ["--proof", "--file"] : verb === "thread" ? ["--after"] : verb === "deliver" ? ["--files", "--note"] : ["dispute", "counter-evidence"].includes(verb) ? ["--evidence-hash"] : verb === "watch" ? ["--until", "--timeout", "--interval"] : []
+      ] : verb === "propose" ? ["--price", "--duration", "--note"] : verb === "submit" ? ["--proof", "--file"] : verb === "thread" ? ["--after"] : verb === "deliver" ? ["--files", "--note"] : ["dispute", "counter-evidence"].includes(verb) ? ["--evidence-hash"] : verb === "watch" ? ["--until", "--timeout", "--interval"] : [],
+      ...["sign", "fund", "deliver", "release"].includes(verb) ? ["--timeout"] : []
     ]),
     booleanOptions: /* @__PURE__ */ new Set([
       ...verb === "search" ? ["--open"] : [],
       ...["sign", "fund", "dispute", "counter-evidence"].includes(verb) ? ["--yes"] : [],
+      ...["sign", "fund", "deliver", "release"].includes(verb) ? ["--no-wait"] : [],
       ...verb === "watch" ? ["--auto-release"] : []
     ]),
     repeatableOptions: /* @__PURE__ */ new Set([
@@ -103052,7 +103592,7 @@ async function taskCommandInner(argv, json2, io, dependencies) {
       throw new UsageError("message needs text between 1 and 10000 characters.");
   }
   if (verb === "thread") cursor2 = optionalInteger(parsed.one("--after"), "--after");
-  const context = await taskContext(parsed, io, dependencies, verb === "status");
+  const context = await taskContext(parsed, io, dependencies);
   if (verb === "show" || verb === "status") {
     if (verb === "show" && context.token) {
       const result = await showTask(context, { id: id2, signedIn: true });
@@ -103062,7 +103602,21 @@ async function taskCommandInner(argv, json2, io, dependencies) {
         ...receipts.map((receipt) => `Receipt (from escrow): ${receipt.receiptUrl}`)
       ]);
     } else {
-      const result = verb === "status" ? await taskStatus(context, { id: id2 }) : await showTask(context, { id: id2, signedIn: false });
+      const result = verb === "status" ? await taskStatus(context, { id: id2, signedIn: Boolean(context.token) }) : await showTask(context, { id: id2, signedIn: false });
+      if ("chainState" in result) {
+        const milestoneLines = result.chainState.milestones.map((milestone) => {
+          const ordinal = "ordinal" in milestone && typeof milestone.ordinal === "number" && Number.isFinite(milestone.ordinal) ? milestone.ordinal : milestone.milestoneId;
+          const state = "state" in milestone.read ? ` ${milestone.read.state}` : "";
+          const explorer = milestone.explorerUrl ? ` ${milestone.explorerUrl}` : "";
+          return `milestone ${ordinal}: ${milestone.read.status}${state}${explorer}`;
+        });
+        const eventLines = (result.events ?? []).slice(-10).map((event) => {
+          const createdAt = "createdAt" in event && typeof event.createdAt === "string" ? event.createdAt : event.at;
+          return `${event.sequence} ${event.type} ${createdAt}`;
+        });
+        taskOutput(io, json2, context, verb, result, [...milestoneLines, ...eventLines]);
+        return;
+      }
       const task = result.task;
       taskOutput(
         io,
@@ -103106,6 +103660,11 @@ async function taskCommandInner(argv, json2, io, dependencies) {
 async function escrowTaskCommand(verb, id2, parsed, json2, io, dependencies, now) {
   taskCounterparty(parsed);
   if (verb === "watch") return await watchTask(id2, parsed, json2, io, dependencies, now);
+  const waitsForIndex = ["sign", "fund", "deliver", "release"].includes(verb);
+  const waitTimeoutText = parsed.one("--timeout") ?? "120s";
+  const waitTimeoutMs = waitsForIndex ? parseTaskDuration2(waitTimeoutText, now) : void 0;
+  if (waitTimeoutMs !== void 0 && waitTimeoutMs <= 0)
+    throw new UsageError("--timeout must be positive.");
   const disputeEvidenceHash = ["dispute", "counter-evidence"].includes(verb) ? required3(parsed, "--evidence-hash") : void 0;
   const counterparty = taskCounterparty(parsed);
   if (disputeEvidenceHash !== void 0 && !TASK_LIMITS.disputeEvidenceHash.test(disputeEvidenceHash))
@@ -103155,9 +103714,24 @@ async function escrowTaskCommand(verb, id2, parsed, json2, io, dependencies, now
           return await account.signMessage({ message });
         }
       });
-      taskOutput(io, json2, displayContext, verb, result2, [
+      if (!json2 && result2.escrowCreation?.resumedFromServer)
+        io.stdout("The server had already prepared escrow creation; resumed from it.");
+      const wait3 = result2.escrowCreation ? await waitForTaskIndex(
+        context,
+        dependencies,
+        parsed,
+        json2,
+        io,
+        id2,
+        result2.escrowCreation,
+        "created",
+        "escrow creation",
+        waitTimeoutText,
+        waitTimeoutMs
+      ) : null;
+      taskOutput(io, json2, displayContext, verb, { ...result2, wait: wait3 }, [
         `Accepted scope for task ${id2}.`,
-        ...result2.escrowCreation ? ["Created the task escrow."] : []
+        ...result2.escrowCreation && (wait3 === null || wait3.reached) ? ["escrow created"] : []
       ]);
       return;
     } catch (error61) {
@@ -103191,7 +103765,23 @@ async function escrowTaskCommand(verb, id2, parsed, json2, io, dependencies, now
           taskOutput(io, false, context, verb, {}, [`Prepared delivery manifest ${manifestHash}.`]);
       }
     });
-    taskOutput(io, json2, context, verb, outcome, [`Delivered task ${id2}.`]);
+    const wait3 = await waitForTaskIndex(
+      context,
+      dependencies,
+      parsed,
+      json2,
+      io,
+      id2,
+      outcome.result,
+      "delivered",
+      "delivery",
+      waitTimeoutText,
+      waitTimeoutMs
+    );
+    taskOutput(io, json2, context, verb, { ...outcome, wait: wait3 }, [
+      ...wait3 === null || wait3.reached ? ["delivery recorded"] : [],
+      ...outcome.result.resumedFromServer === true ? ["The server had already recorded this delivery; resumed from it."] : []
+    ]);
     return;
   }
   const snapshot = await taskMoneySnapshot(context.client, id2, void 0, {
@@ -103254,15 +103844,82 @@ async function escrowTaskCommand(verb, id2, parsed, json2, io, dependencies, now
     }
     if (!outcome.ok && "declined" in outcome)
       throw new TaskCommandError("not_approved", "Not approved; nothing was signed.");
-    taskOutput(io, json2, context, verb, outcome, [
-      verb === "fund" ? `Funded task ${id2}.` : `Completed task ${verb} for ${id2}.`
-    ]);
+    if (!json2 && outcome.result.resumedFromServer)
+      io.stdout("The server had already prepared this task operation; resumed from it.");
+    const wait3 = verb === "fund" ? await waitForTaskIndex(
+      context,
+      dependencies,
+      parsed,
+      json2,
+      io,
+      id2,
+      outcome.result,
+      "locked",
+      "funding",
+      waitTimeoutText,
+      waitTimeoutMs
+    ) : void 0;
+    taskOutput(
+      io,
+      json2,
+      context,
+      verb,
+      wait3 === void 0 ? outcome : { ...outcome, wait: wait3 },
+      verb === "fund" ? wait3 === null || wait3?.reached ? ["escrow funded"] : [] : [`Completed task ${verb} for ${id2}.`]
+    );
     return;
   }
   if (!json2) io.stdout("Policy: explicit user instruction.");
   const settlementInput = { id: id2, snapshot, ...counterparty === void 0 ? {} : { counterparty } };
   const result = verb === "release" ? await releaseTaskOperation(context, settlementInput) : verb === "refund" ? await refundTaskOperation(context, settlementInput) : await resolveUnmatchedTaskOperation(context, settlementInput);
-  taskOutput(io, json2, context, verb, result, [`Completed task ${verb} for ${id2}.`]);
+  if (!json2 && result.result.resumedFromServer)
+    io.stdout("The server had already prepared this task operation; resumed from it.");
+  const wait2 = verb === "release" ? await waitForTaskIndex(
+    context,
+    dependencies,
+    parsed,
+    json2,
+    io,
+    id2,
+    result.result,
+    "released",
+    "release",
+    waitTimeoutText,
+    waitTimeoutMs
+  ) : void 0;
+  taskOutput(
+    io,
+    json2,
+    context,
+    verb,
+    wait2 === void 0 ? result : { ...result, wait: wait2 },
+    verb === "release" ? wait2 === null || wait2?.reached ? ["funds released"] : [] : [`Completed task ${verb} for ${id2}.`]
+  );
+}
+async function waitForTaskIndex(context, dependencies, parsed, json2, io, orderId, result, target, description, timeoutText, timeoutMs) {
+  if (parsed.has("--no-wait")) return null;
+  if (!json2)
+    io.stdout(
+      `confirmed on chain${result.blockNumber === void 0 ? "" : ` in block ${result.blockNumber}`}, waiting for vAPI to index\u2026`
+    );
+  const wait2 = await taskRequest2(
+    description,
+    "getOrder",
+    () => waitForMilestone(context.client, {
+      orderId,
+      milestoneId: result.milestone.id,
+      target,
+      timeoutMs,
+      intervalMs: 3e3,
+      sleep: context.sleep,
+      now: dependencies.now ?? (() => /* @__PURE__ */ new Date())
+    })
+  );
+  if (!wait2.reached)
+    io.stderr(
+      `vAPI has not indexed the ${description} yet after ${timeoutText}; run vapi task status ${orderId} later.`
+    );
+  return wait2;
 }
 var ScopeApprovalNeeded = class extends Error {
   constructor(terms) {
@@ -104518,6 +105175,7 @@ async function referencedSleep(milliseconds, signal) {
 // src/vault.ts
 import { join as join27 } from "node:path";
 var VAULT_USAGE = "Usage: vapi vault protect|unprotect|lock|unlock|status [--json]";
+var RESTORE_USAGE = "Usage: vapi restore [--accounts <n> | --from-owner [--owner <0x\u2026>]] [--json]";
 var LEGACY_PASSWORD_NOTICE = "VAPI_KEYSTORE_PASSWORD is deprecated for vault passwords; use VAPI_VAULT_PASSWORD instead.";
 async function vaultCommand(argv, json2, io, dependencies) {
   const subcommand = argv[0];
@@ -104547,9 +105205,17 @@ async function restoreCommand(argv, json2, io, dependencies) {
     await restoreFromOwnerCommand(argv, json2, io, dependencies);
     return;
   }
-  if (argv.length > 0) {
-    throw new UsageError("Usage: vapi restore [--from-owner [--owner <0x\u2026>]] [--json]");
+  let parsed;
+  try {
+    parsed = parseArguments(argv, {
+      valueOptions: /* @__PURE__ */ new Set(["--accounts"]),
+      maximumPositionals: 0
+    });
+  } catch (error61) {
+    if (error61 instanceof UsageError) throw new UsageError(RESTORE_USAGE);
+    throw error61;
   }
+  const accountCount = parseRestoreAccountCount(parsed.one("--accounts"));
   const paths = getVapiPaths();
   const path = join27(paths.directory, "vault.json");
   if (await fileExists2(path)) {
@@ -104563,13 +105229,39 @@ async function restoreCommand(argv, json2, io, dependencies) {
   const config2 = await readConfig(paths.config, json2 ? quietIo(io) : io);
   const phrase = isStdinInteractive(dependencies) ? await getPrompts(dependencies).secret("Recovery phrase: ") : await (dependencies.readStdin ?? readProcessStdin3)();
   const restoreIo = json2 ? quietIo(io) : io;
-  const { names } = await restoreVaultFromPhrase(phrase.trim(), config2, restoreIo, dependencies);
+  const { names, scannedAddresses } = await restoreVaultFromPhrase(
+    phrase.trim(),
+    config2,
+    restoreIo,
+    dependencies,
+    accountCount
+  );
   if (json2) {
-    output3(io, true, { command: "restore", vault: "restored", accounts: names }, "");
+    output3(
+      io,
+      true,
+      { command: "restore", vault: "restored", accounts: names, scannedAddresses },
+      ""
+    );
     return;
   }
   io.stdout(`Run vapi setup to link ${names[0]}.`);
 }
+function parseRestoreAccountCount(value) {
+  if (value === void 0) return void 0;
+  if (!/^\d+$/u.test(value)) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  const count = Number(value);
+  if (!Number.isSafeInteger(count) || count < 1 || count > MAX_RESTORE_ACCOUNTS) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  return count;
+}
 async function protectCommand(argv, json2, io, dependencies) {
   requireNoArguments(argv);
   const env = getEnvironment(dependencies);
@@ -104699,8 +105391,8 @@ var HELP_HEADING = "vAPI Network";
 var HELP = `${HELP_HEADING}
 
 Usage:
-  vapi init [--networks <base,arc,solana>] [--json]
-  vapi setup [--no-cloud-backup] [--json]
+  vapi init [--networks <base,arc>] [--json]
+  vapi setup [--no-cloud-backup] [--accounts <n>] [--json]
   vapi accounts [--all] [--json]
   vapi accounts add <name> [--label <text>] [--no-link] [--json]
   vapi accounts import <name> [--keystore <path> | --key-file <path>] [--label <text>] [--json]
@@ -104730,7 +105422,7 @@ Usage:
   vapi docs read <url-or-path> [--json]
   vapi search [query] [--kind <kind>] [--network <caip2>] [--limit <n>] [--cursor <cursor>] [--include-unverified] [--json]
   vapi inspect <id> [--endpoint <name>] [--json]
-  vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--account <name>] [--json]
+  vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--timeout <seconds>] [--account <name>] [--json]
   vapi pay --resume <receipt-id> [--json]
   vapi check <url> [--method <method>] [--json]
   vapi balance [--account <name>] [--json]
@@ -104776,8 +105468,8 @@ Usage:
   vapi task status <id> [--account <name>] [--json]
   vapi export-key [--network <caip2>] [--account <name>] [--json]
   vapi backup [--account <name>] [--cloud [off]] [--json]
-  vapi restore [--from-owner [--owner <0x\u2026>]] [--json]
-  vapi import (--phrase | --key) [--account <name>] [--networks <base,arc,solana>] [--replace] [--force] [--json]
+  vapi restore [--accounts <n> | --from-owner [--owner <0x\u2026>]] [--json]
+  vapi import (--phrase | --key) [--account <name>] [--networks <base,arc>] [--replace] [--force] [--json]
   vapi passphrase [--account <name>] [--json]
   vapi vault protect [--json]
   vapi vault unprotect [--json]
@@ -104805,6 +105497,8 @@ Every command that touches a wallet takes \`--account <name>\`, falls back to \`
 
 \`vapi search\` answers with vAPI-verified listings plus the mirrored external catalogs. \`--include-unverified\` also returns self-listed APIs that passed vAPI's automated x402 probe but were never reviewed; every result is tagged \`[verified]\`, \`[requested]\`, \`[unverified]\` or \`[external]\`.
 
+Solana listings remain searchable; inspect and pay return \`unsupported_network\`. Solana keys are not part of the device vault yet.
+
 \`vapi docs\` asks the public vAPI documentation assistant; \`vapi docs search\` searches documentation excerpts and \`vapi docs read\` reads one Markdown page. They need no account, wallet or payment.
 
 \`vapi task --help\` lists task options and availability. Task exit codes: 0 ok, 1 error, 2 policy refusal (JSON ok:false with a policy. reason) or invalid usage (JSON error), 3 approval needed in non-interactive mode. Posting moves no money; the current create-order contract does not store amount, deadline, intake, max awards or webhook yet.
@@ -104817,7 +105511,7 @@ Every command that touches a wallet takes \`--account <name>\`, falls back to \`
 
 \`vapi vault protect\` adds a password to the device vault. \`vapi vault unlock\` opens it on this device for 8 hours; for unattended use, set \`VAPI_VAULT_PASSWORD\`. \`vapi unlock\` and \`vapi lock\` remain aliases for one release.
 
-\`vapi backup\` and \`vapi export-key\` print a secret, so they run only on a real terminal, never for an agent, and ask you to type the wallet name first. \`vapi backup --cloud\` keeps an encrypted vault copy that only the owner can approve for recovery. \`vapi restore\` rebuilds the vault from the phrase and re-derives accounts until an unused address. Set \`VAPI_NO_SECRETS=1\` to switch exports off entirely. Every export and every wallet change is logged to ~/.vapi/audit.log.
+\`vapi backup\` and \`vapi export-key\` print a secret, so they run only on a real terminal, never for an agent, and ask you to type the wallet name first. \`vapi backup --cloud\` keeps an encrypted vault copy that only the owner can approve for recovery. \`vapi restore\` rebuilds the vault from the phrase and re-derives accounts until five consecutive addresses have no Base USDC, and reports the number scanned. Use \`--accounts <n>\` with restore or setup to recover a fixed count without querying balances. Set \`VAPI_NO_SECRETS=1\` to switch exports off entirely. Every export and every wallet change is logged to ~/.vapi/audit.log.
 
 \`vapi publish <url>\` lists an API you own. vAPI probes the URL \u2014 an origin, one endpoint, or an OpenAPI document \u2014 you choose which endpoints to list, and your wallet signs one line naming where the payouts go. Listing is permissionless: a listing that passed the probe goes live with \`vapi publish activate <slug>\`, and \`vapi publish verify-request <slug>\` asks for the review that puts it in the default search. Deploying the FeeSplitter that receives the payouts is a wallet transaction and stays in the console. A catalog of more than 20 endpoints is listed as several listings of up to 20, with one result line per endpoint; \`--resume\` skips every endpoint this key already lists.
 
@@ -105194,6 +105888,7 @@ async function runCli(argv = process.argv.slice(2), io = processIo, dependencies
             error: message,
             exitCode: code,
             ...error61 instanceof RuntimeError ? { code: error61.code } : {},
+            ...error61 instanceof VapiCallError ? { code: error61.code } : {},
             ...error61 instanceof DocsError ? { code: error61.code } : {},
             ...error61 instanceof RemoteKeyRefusedError ? { code: error61.code } : {},
             ...error61 instanceof TransferError ? { code: error61.code, moneyMoved: error61.moneyMoved } : {}
@@ -105201,7 +105896,10 @@ async function runCli(argv = process.argv.slice(2), io = processIo, dependencies
         );
       }
     } else {
-      runIo.stderr(message);
+      const errorCode2 = taskInvocation && error61 instanceof TaskCommandError && error61.prefixCode ? errorCodeOf(error61) : void 0;
+      runIo.stderr(
+        errorCode2 !== void 0 && !message.startsWith(`${errorCode2}: `) ? `${errorCode2}: ${message}` : message
+      );
     }
     if (shouldAutoUploadAfterFailure(argv.filter((argument) => argument !== "--json"))) {
       await autoUploadBackup(io, json2, dependencies);
@@ -105602,7 +106300,7 @@ async function inspectCommand(argv, json2, io, dependencies) {
   );
   output3(io, json2, result, formatInspect(result));
 }
-var PAY_USAGE = "Usage: vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--account <name>] [--json]";
+var PAY_USAGE = "Usage: vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--timeout <seconds>] [--account <name>] [--json]";
 async function payCommand(argv, json2, io, dependencies) {
   if (argv.includes(RESUME_OPTION)) {
     await payResumeCommand(argv, json2, io, dependencies);
@@ -105618,11 +106316,13 @@ async function payCommand(argv, json2, io, dependencies) {
       "--expected-pay-to",
       "--max",
       "--max-price-usd",
+      "--timeout",
       WALLET_OPTION5
     ]),
     maximumPositionals: 1
   });
   const target = requiredPositional(parsed.positionals[0], "<id-or-url>", PAY_USAGE);
+  const timeoutSeconds = optionalBoundedInteger(parsed.one("--timeout"), "--timeout", 1, 300);
   const paths = getVapiPaths();
   const config2 = await readConfig(paths.config, io);
   const wallet = await targetWallet(parsed, dependencies);
@@ -105638,7 +106338,8 @@ async function payCommand(argv, json2, io, dependencies) {
     ...parsed.one("--content-type") ? { contentType: parsed.one("--content-type") } : {},
     ...parsed.one("--network") ? { network: parsed.one("--network") } : {},
     ...parsed.one("--expected-pay-to") ? { expectedPayTo: parsed.one("--expected-pay-to") } : {},
-    ...maxPriceUsd ? { maxPriceUsd } : {}
+    ...maxPriceUsd ? { maxPriceUsd } : {},
+    ...timeoutSeconds === void 0 ? {} : { timeoutSeconds }
   };
   const call2 = createCallPort({
     config: config2,
@@ -107313,7 +108014,7 @@ function buildNextSteps(address4) {
     formatNextStep("Pay", "vapi pay <ref> --max 0.02"),
     formatNextStep(
       "Agent",
-      'add {"command":"npx","args":["-y","vapi-network","mcp"]} to your MCP config'
+      'add {"command":"npx","args":["-y","vapi-network@latest","mcp"]} to your MCP config'
     )
   ];
 }
@@ -107494,6 +108195,17 @@ function optionalPositiveInteger(value, option) {
   if (result === 0) throw new UsageError(`${option} must be a positive integer.`);
   return result;
 }
+function optionalBoundedInteger(value, option, minimum, maximum) {
+  if (value === void 0) return void 0;
+  if (!/^\d+$/.test(value)) {
+    throw new UsageError(`${option} must be an integer from ${minimum} to ${maximum}.`);
+  }
+  const parsed = Number(value);
+  if (!Number.isSafeInteger(parsed) || parsed < minimum || parsed > maximum) {
+    throw new UsageError(`${option} must be an integer from ${minimum} to ${maximum}.`);
+  }
+  return parsed;
+}
 function optionalUsdAmount(value, option) {
   if (value === void 0) return void 0;
   if (!/^\d+(?:\.\d{1,2})?$/.test(value)) {
@@ -107554,12 +108266,136 @@ function parseInitNetworks(value) {
   }
   for (const network of networks) {
     if (network !== "base" && network !== "arc" && network !== "solana") {
-      throw new UsageError("--networks supports base, arc and solana.");
+      throw new UsageError("--networks supports base and arc; Solana vault setup is unavailable.");
     }
   }
   return networks;
 }
 
+// src/update-check.ts
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var CHECK_TIMEOUT_MS = 1500;
+var LATEST_URL = "https://registry.npmjs.org/vapi-network/latest";
+async function runCliWithUpdateCheck(argv = process.argv.slice(2), io = {
+  stdout: (message) => console.log(message),
+  stderr: (message) => console.error(message)
+}, dependencies = {}, options = {}) {
+  const notice = checkForUpdate({ ...options, env: options.env ?? dependencies.env, argv });
+  const code = await runCli(argv, io, dependencies);
+  const message = await notice;
+  if (message) io.stderr(message);
+  return code;
+}
+async function checkForUpdate(options = {}) {
+  const env = options.env ?? process.env;
+  const argv = options.argv ?? process.argv.slice(2);
+  if (!(options.stderrIsTTY ?? process.stderr.isTTY) || argv.includes("--json") || argv[0] === "mcp" && argv[1] !== "install" || env.VAPI_NO_UPDATE_CHECK === "1" || env.CI !== void 0) {
+    return void 0;
+  }
+  const controller = new AbortController();
+  let timer;
+  try {
+    return await Promise.race([
+      latestNotice(options, env, controller.signal),
+      new Promise((resolve2) => {
+        timer = setTimeout(() => {
+          controller.abort();
+          resolve2(void 0);
+        }, CHECK_TIMEOUT_MS);
+      })
+    ]);
+  } catch {
+    return void 0;
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+    controller.abort();
+  }
+}
+async function latestNotice(options, env, signal) {
+  const paths = getVapiPaths(options.home ?? (env.VAPI_HOME?.trim() || void 0));
+  const now = (options.nowMs ?? Date.now)();
+  let cached2;
+  try {
+    const value = JSON.parse(await readFile29(paths.updateCheck, "utf8"));
+    if (isRecord12(value) && typeof value.checkedAt === "number" && Number.isFinite(value.checkedAt) && typeof value.latest === "string" && parseVersion(value.latest)) {
+      cached2 = { checkedAt: value.checkedAt, latest: value.latest };
+    }
+  } catch {
+  }
+  signal.throwIfAborted();
+  let latest = cached2?.latest ?? CLI_VERSION;
+  if (cached2 === void 0 || now - cached2.checkedAt >= CHECK_INTERVAL_MS || now < cached2.checkedAt) {
+    await mkdir21(paths.directory, { recursive: true });
+    signal.throwIfAborted();
+    await writeFile12(paths.updateCheck, JSON.stringify({ checkedAt: now, latest }), { mode: 384 });
+    signal.throwIfAborted();
+    const fetchImpl = options.fetchImpl ?? createPublicFetch({
+      allowPrivateNetwork: false,
+      lookup: async (hostname3) => {
+        let onAbort;
+        const aborted2 = new Promise((_resolve, reject) => {
+          onAbort = () => reject(signal.reason);
+          signal.addEventListener("abort", onAbort, { once: true });
+        });
+        try {
+          signal.throwIfAborted();
+          const addresses = await Promise.race([lookup(hostname3, { all: true }), aborted2]);
+          return addresses.map(({ address: address4 }) => address4);
+        } finally {
+          signal.removeEventListener("abort", onAbort);
+        }
+      }
+    });
+    const response = await fetchImpl(LATEST_URL, { signal, redirect: "error" });
+    if (!response.ok) return void 0;
+    const body = await response.json();
+    signal.throwIfAborted();
+    if (!isRecord12(body) || typeof body.version !== "string" || !parseVersion(body.version)) {
+      return void 0;
+    }
+    latest = body.version;
+    await writeFile12(paths.updateCheck, JSON.stringify({ checkedAt: now, latest }), { mode: 384 });
+  }
+  signal.throwIfAborted();
+  return isNewerVersion(latest, CLI_VERSION) ? `vapi-network ${latest} is available (you have ${CLI_VERSION}). Update: npm i -g vapi-network@latest` : void 0;
+}
+function isRecord12(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseVersion(version5) {
+  const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([\da-zA-Z.-]+))?(?:\+[\da-zA-Z-]+(?:\.[\da-zA-Z-]+)*)?$/.exec(
+    version5
+  );
+  if (!match) return void 0;
+  const prerelease = match[4]?.split(".");
+  if (prerelease?.some((part) => part === "" || /^\d+$/.test(part) && /^0\d/.test(part))) {
+    return void 0;
+  }
+  return { core: match.slice(1, 4).map(BigInt), prerelease };
+}
+function isNewerVersion(latest, current) {
+  const next = parseVersion(latest);
+  const running = parseVersion(current);
+  for (let index2 = 0; index2 < 3; index2 += 1) {
+    if (next.core[index2] !== running.core[index2]) return next.core[index2] > running.core[index2];
+  }
+  if (running.prerelease === void 0) return false;
+  if (next.prerelease === void 0) return true;
+  for (let index2 = 0; index2 < Math.max(next.prerelease.length, running.prerelease.length); index2 += 1) {
+    const a = next.prerelease[index2];
+    const b = running.prerelease[index2];
+    if (a === b) continue;
+    if (a === void 0) return false;
+    if (b === void 0) return true;
+    const aNumeric = /^\d+$/.test(a);
+    const bNumeric = /^\d+$/.test(b);
+    if (aNumeric && bNumeric) return BigInt(a) > BigInt(b);
+    if (aNumeric !== bNumeric) return !aNumeric;
+    return a > b;
+  }
+  return false;
+}
+
 // src/main-module.ts
 import { realpathSync as realpathSync2 } from "node:fs";
 import { pathToFileURL } from "node:url";
@@ -107576,7 +108412,7 @@ function isMainModule(entry, moduleUrl, realpath = realpathSync2) {
 
 // src/bin.ts
 if (isMainModule(process.argv[1], import.meta.url)) {
-  process.exitCode = await runCli();
+  process.exitCode = await runCliWithUpdateCheck();
 }
 export {
   CUSTODY_NOTICE,