@vapi-network/cli 0.9.2 → 0.9.4

package/dist/index.js

@@ -39356,8 +39356,10 @@ var listingIdentitySchema = external_exports.looseObject({
   }).optional().catch(void 0)
 });
 var listingDisclosureShape = {
-  group: listingGroupSchema.optional(),
-  fee: listingFeeSchema.optional(),
+  // Presentation metadata must not make an otherwise executable row vanish
+  // when the registry adds a new group or changes the fee display shape.
+  group: listingGroupSchema.optional().catch(void 0),
+  fee: listingFeeSchema.optional().catch(void 0),
   verification: listingVerificationFieldSchema,
   liveness: listingLivenessSchema.optional().catch(void 0),
   conformance: listingConformanceSchema.optional().catch(void 0),
@@ -39365,11 +39367,13 @@ var listingDisclosureShape = {
 };
 var marketplaceBadgeCodeSchema = external_exports.enum([
   "live_x402",
+  "mpp",
   "partner",
   "payout_wallet_confirmed",
   "vapi_verified",
   "external_catalog",
-  "approved_vendor"
+  "approved_vendor",
+  "unverified"
 ]);
 var marketplaceBadgeSchema = external_exports.looseObject({
   code: marketplaceBadgeCodeSchema,
@@ -39388,7 +39392,13 @@ var marketplaceCardSchema = external_exports.looseObject({
   summary: external_exports.string().trim().min(1).max(1e3),
   byline: external_exports.string().trim().min(1).max(160).optional(),
   bylineHref: marketplaceHrefSchema.optional(),
-  badges: external_exports.array(marketplaceBadgeSchema).max(8),
+  badges: external_exports.preprocess(
+    (badges) => Array.isArray(badges) ? badges.flatMap((badge) => {
+      const parsed = marketplaceBadgeSchema.safeParse(badge);
+      return parsed.success ? [parsed.data] : [];
+    }) : badges,
+    external_exports.array(marketplaceBadgeSchema).max(8)
+  ),
   facts: external_exports.array(marketplacePublicFactSchema).max(12)
 });
 var marketplaceHitBase = {
@@ -44869,9 +44879,9 @@ function createPublicFetch(options) {
     });
   });
 }
-function pinnedLookup(lookup) {
+function pinnedLookup(lookup2) {
   return (hostname3, dnsOptions, callback) => {
-    void lookup(normalizeHostname(hostname3)).then((addresses) => {
+    void lookup2(normalizeHostname(hostname3)).then((addresses) => {
       if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
         callback(guardError(new URL(`https://${hostname3}`)), "");
         return;
@@ -46009,9 +46019,9 @@ function isRecord2(value) {
 var CALLABLE_CATEGORIES = ["ai", "data", "crypto", "compute", "search"];
 var callableCategorySchema = external_exports.enum(CALLABLE_CATEGORIES);
 var DISCOVERY_CATEGORIES = [...CALLABLE_CATEGORIES, "other"];
-var discoveryCategorySchema = external_exports.enum(DISCOVERY_CATEGORIES);
+var discoveryCategorySchema = external_exports.string().trim().min(1);
 var CALLABLE_CATEGORY_SET = new Set(CALLABLE_CATEGORIES);
-var serviceTierSchema = external_exports.enum(["listed", "verified", "partner"]);
+var serviceTierSchema = external_exports.string().trim().min(1);
 var discoveryEndpointSchema = external_exports.looseObject({
   name: external_exports.string(),
   method: external_exports.string(),
@@ -46041,6 +46051,24 @@ var discoveryEndpointSchema = external_exports.looseObject({
       asset: external_exports.string().refine(isSolanaAddress, "Expected a Solana base58 address."),
       payTo: external_exports.string().refine(isSolanaAddress, "Expected a Solana base58 address."),
       checkedAt: external_exports.iso.datetime()
+    }),
+    external_exports.looseObject({
+      protocol: external_exports.literal("mpp"),
+      intent: external_exports.enum(["charge", "authorize", "subscription"]).nullable(),
+      method: external_exports.string().trim().min(1).max(40).nullable(),
+      checkedAt: external_exports.iso.datetime(),
+      // Keep common x402 properties readable on the union while making it
+      // impossible for MPP metadata to masquerade as executable x402 terms.
+      network: external_exports.never().optional(),
+      payTo: external_exports.never().optional()
+    }),
+    external_exports.looseObject({
+      // Future payment protocols remain visible to callers so the payment
+      // layer can refuse them explicitly instead of discovery losing the row.
+      protocol: external_exports.string().trim().min(1).max(40),
+      checkedAt: external_exports.iso.datetime(),
+      network: external_exports.never().optional(),
+      payTo: external_exports.never().optional()
     })
   ]).optional()
 });
@@ -46134,7 +46162,7 @@ function resolveTarget(service, endpointName) {
   }
   if (targets.size !== 1) {
     const paymentNetworks = service.endpoints.flatMap(
-      (endpoint) => endpoint.payment ? [endpoint.payment.network] : []
+      (endpoint) => typeof endpoint.payment?.network === "string" ? [endpoint.payment.network] : []
     );
     throw new DiscoveryCatalogError(
       "ambiguous_default",
@@ -47109,7 +47137,8 @@ function getVapiPaths(directory = process.env.VAPI_HOME?.trim() || join2(homedir
     keystore: join2(directory, "keystore.json"),
     receipts: join2(directory, "receipts.jsonl"),
     searches: join2(directory, "searches.jsonl"),
-    ledger: join2(directory, "spend-ledger.json")
+    ledger: join2(directory, "spend-ledger.json"),
+    updateCheck: join2(directory, "update-check.json")
   };
 }
 var getAgentCashPaths = getVapiPaths;
@@ -70373,7 +70402,7 @@ function windowsDataProtectionStore(platform2, run, env, installed) {
   };
 }
 function libsecretStore(platform2, run, installed) {
-  const lookup = async (name) => {
+  const lookup2 = async (name) => {
     const result = await run(SECRET_TOOL_BINARY, [
       "lookup",
       "service",
@@ -70392,9 +70421,9 @@ function libsecretStore(platform2, run, installed) {
     available: installed(SECRET_TOOL_BINARY),
     platform: platform2,
     description: "the libsecret keyring",
-    get: lookup,
+    get: lookup2,
     async has(name) {
-      return await lookup(name) !== void 0;
+      return await lookup2(name) !== void 0;
     },
     async set(name, passphrase) {
       requirePassphrase(passphrase);
@@ -70416,7 +70445,7 @@ function libsecretStore(platform2, run, installed) {
       requireSuccess(result, `store the passphrase of ${name} in the secret service`);
     },
     async remove(name) {
-      const existed = await lookup(name) !== void 0;
+      const existed = await lookup2(name) !== void 0;
       const result = await run(SECRET_TOOL_BINARY, [
         "clear",
         "service",
@@ -71479,6 +71508,8 @@ var VAULT_KEY_ACCOUNT = "vault-key";
 var VAULT_SESSION_ACCOUNT = "vault-session";
 var DEVICE_KEY_LENGTH = 32;
 var DEFAULT_SESSION_HOURS = 8;
+var RESTORE_GAP_LIMIT = 5;
+var MAX_RESTORE_ACCOUNTS = 1e4;
 var BASE64_PATTERN = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u;
 var deviceKeyOperations = Promise.resolve();
 var sessionSchema = external_exports.object({
@@ -71628,26 +71659,41 @@ async function restoreVault(args) {
     throw new VaultError("corrupt", "That recovery phrase is not valid.", { cause: error61 });
   }
   let seed;
-  let discoveredAccounts = 0;
+  if (args.accountCount !== void 0 && (!Number.isSafeInteger(args.accountCount) || args.accountCount < 1 || args.accountCount > MAX_RESTORE_ACCOUNTS)) {
+    throw new VaultError(
+      "corrupt",
+      `Account count must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  let discoveredAccounts = args.accountCount ?? 0;
+  let scannedAddresses = 0;
   try {
     seed = phraseToSeed(phrase);
   } catch (error61) {
     throw asVaultError2(error61, "Unable to derive an account while restoring the vault.");
   }
   try {
-    for (let index2 = 0; ; index2 += 1) {
+    for (let index2 = 0, emptyRun = 0; args.accountCount === void 0; index2 += 1) {
       let address4;
       try {
         address4 = privateKeyToAccount(deriveEvmPrivateKey(seed, `m/44'/60'/0'/0/${index2}`)).address;
       } catch (error61) {
         throw asVaultError2(error61, "Unable to derive an account while restoring the vault.");
       }
-      if (!await args.probe(address4)) break;
-      discoveredAccounts += 1;
+      const funded = await args.probe(address4);
+      scannedAddresses += 1;
+      if (funded) {
+        discoveredAccounts = index2 + 1;
+        emptyRun = 0;
+      } else {
+        emptyRun += 1;
+        if (emptyRun === RESTORE_GAP_LIMIT) break;
+      }
     }
   } finally {
     seed.fill(0);
   }
+  args.onScanComplete?.(scannedAddresses);
   let vault;
   try {
     vault = await createVault({ path: args.path, key: args.key, phrase, now: args.now });
@@ -72136,6 +72182,26 @@ var WalletStore = class _WalletStore {
       }
     );
   }
+  /** Checks a cached signer's current vault session without decrypting its account again. */
+  async assertSigningAuthority(name) {
+    const stored = await this.readVaultUnlocked();
+    if (!stored?.protected || !stored.accounts.some((account) => account.name === name)) return;
+    try {
+      const key2 = await unlockProtectedVault({
+        path: this.vaultPath,
+        secrets: this.secrets,
+        env: this.environment,
+        now: () => this.now()
+      });
+      key2.fill(0);
+    } catch (error61) {
+      this.dropVaultCache();
+      if (error61 instanceof VaultError && error61.code === "password_required") {
+        throw new KeystoreError(VAULT_LOCKED_MESSAGE, { cause: error61 });
+      }
+      throw error61;
+    }
+  }
   /** Returns one wallet's vault signer, migrating its legacy keystore if needed. */
   async unlock(name, passphrase) {
     const wallet = this.resolve({ name });
@@ -77522,7 +77588,7 @@ function createRunBudget(args) {
 import { mkdir as mkdir15, writeFile as writeFile8 } from "node:fs/promises";
 import { arch, platform, release } from "node:os";
 import { join as join13 } from "node:path";
-var VAPI_CLIENT_VERSION = "0.9.2";
+var VAPI_CLIENT_VERSION = "0.9.4";
 async function createSupportReport(options) {
   const message = options.message.trim();
   if (!message) throw new Error("Support report message must not be empty.");
@@ -77795,7 +77861,7 @@ async function completeX402Payment(args) {
   let paidAttempt;
   const requestStarted = nowMs();
   try {
-    paidAttempt = await args.send(paidRequest);
+    paidAttempt = await args.send(paidRequest, quote);
   } catch (error61) {
     if (trace) trace.phases.requestMs = elapsed(nowMs, requestStarted);
     throw settlementUnknown(
@@ -77813,7 +77879,7 @@ async function completeX402Payment(args) {
   const settleStarted = nowMs();
   const settlement = parseSettlementResponse(paidResponse.headers);
   const settlementOutcome = classifySettlement(settlement);
-  const receiptSettlement = sanitizeReceiptValue(settlement, receiptSecrets);
+  const receiptSettlement = sanitizeReturnedValue(settlement, receiptSecrets);
   if (trace) {
     const transaction2 = settlementTransaction(receiptSettlement);
     const explorerUrl = transaction2 ? explorerTransactionUrl(quote.accepted.network, transaction2) : void 0;
@@ -77890,6 +77956,7 @@ async function completeX402Payment(args) {
           trace.phases.requestMs = (trace.phases.requestMs ?? 0) + elapsed(nowMs, bodyStarted);
         }
       }
+      body = sanitizeReturnedValue(body, receiptSecrets);
     }
     const result = {
       response: paidResponse,
@@ -77898,7 +77965,11 @@ async function completeX402Payment(args) {
       quote,
       payer,
       ...payment.paymentId ? { paymentId: payment.paymentId } : {},
-      settlement,
+      paymentProof: sanitizeReturnedValue(
+        paidResponse.headers.get("x-vapi-payment-proof"),
+        receiptSecrets
+      ),
+      settlement: receiptSettlement,
       settlementOutcome
     };
     if (settlementOutcome === "succeeded" && args.ceilingSweep) {
@@ -78035,19 +78106,70 @@ function sanitizeThrownError(error61, secrets) {
   }
   return new Error(message, cause === void 0 ? void 0 : { cause });
 }
-function sanitizeReceiptValue(value, secrets, depth = 0) {
+function sanitizeReturnedValue(value, secrets) {
   if (typeof value === "string") return redactKnownSecrets(value, secrets);
-  if (value === null || typeof value !== "object") return value;
-  if (depth >= 16) return "[redacted nested settlement value]";
-  if (Array.isArray(value)) {
-    return value.map((item) => sanitizeReceiptValue(item, secrets, depth + 1));
+  if (!isPlainReturnedContainer(value)) return value;
+  const nodes = /* @__PURE__ */ new WeakMap();
+  const ordered = [];
+  const nodeFor = (source) => {
+    const existing = nodes.get(source);
+    if (existing) return existing;
+    const copy = Array.isArray(source) ? new Array(source.length) : Object.create(Object.getPrototypeOf(source));
+    const node2 = { source, copy, parents: /* @__PURE__ */ new Set(), changed: false };
+    nodes.set(source, node2);
+    ordered.push(node2);
+    return node2;
+  };
+  const root = nodeFor(value);
+  for (let index2 = 0; index2 < ordered.length; index2 += 1) {
+    const node2 = ordered[index2];
+    for (const [key2, item] of Object.entries(node2.source)) {
+      const safeKey = Array.isArray(node2.source) ? key2 : redactKnownSecrets(key2, secrets);
+      if (safeKey !== key2) node2.changed = true;
+      if (typeof item === "string") {
+        const safeItem = redactKnownSecrets(item, secrets);
+        defineReturnedProperty(node2.copy, safeKey, safeItem);
+        if (safeItem !== item) node2.changed = true;
+      } else if (isPlainReturnedContainer(item)) {
+        const child = nodeFor(item);
+        child.parents.add(node2);
+        defineReturnedProperty(node2.copy, safeKey, child.copy);
+      } else {
+        defineReturnedProperty(node2.copy, safeKey, item);
+      }
+    }
   }
-  return Object.fromEntries(
-    Object.entries(value).map(([key2, item]) => [
-      redactKnownSecrets(key2, secrets),
-      sanitizeReceiptValue(item, secrets, depth + 1)
-    ])
-  );
+  const changed = ordered.filter((node2) => node2.changed);
+  for (let index2 = 0; index2 < changed.length; index2 += 1) {
+    for (const parent of changed[index2].parents) {
+      if (parent.changed) continue;
+      parent.changed = true;
+      changed.push(parent);
+    }
+  }
+  for (const node2 of ordered) {
+    for (const [key2, item] of Object.entries(node2.source)) {
+      if (!isPlainReturnedContainer(item)) continue;
+      const safeKey = Array.isArray(node2.source) ? key2 : redactKnownSecrets(key2, secrets);
+      const child = nodes.get(item);
+      defineReturnedProperty(node2.copy, safeKey, child.changed ? child.copy : item);
+    }
+  }
+  return root.changed ? root.copy : value;
+}
+function defineReturnedProperty(target, key2, value) {
+  Object.defineProperty(target, key2, {
+    value,
+    enumerable: true,
+    configurable: true,
+    writable: true
+  });
+}
+function isPlainReturnedContainer(value) {
+  if (Array.isArray(value)) return true;
+  if (value === null || typeof value !== "object") return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
 }
 function redactKnownSecrets(value, secrets) {
   let redacted = value;
@@ -78082,9 +78204,7 @@ function possibleSettlement(quote, payment, payer, receipt) {
     payTo: quote.accepted.payTo,
     payer,
     ...payment.paymentId ? { paymentId: payment.paymentId } : {},
-    ...isSvmPaymentRequirements(quote.accepted) ? {
-      authorizationTransaction: "transaction" in payment.payload.payload ? payment.payload.payload.transaction : ""
-    } : "authorization" in payment.payload.payload ? {
+    ...isSvmPaymentRequirements(quote.accepted) ? {} : "authorization" in payment.payload.payload ? {
       authorizationNonce: payment.payload.payload.authorization.nonce,
       authorizationExpiresAt: payment.payload.payload.authorization.validBefore
     } : {},
@@ -78462,13 +78582,22 @@ async function sendRouterChat(deps, routerBaseUrl, routerKey, request, keyUsed)
   }
   const body = await responseText(response);
   if (!response.ok) {
-    if (response.status === 429 || body.includes("Budget has been exceeded") || body.includes("ExceededBudget")) {
+    if (/budget (?:has been )?exceeded|exceededbudget/iu.test(body)) {
       throw new RouterClientError(
         "budget_exhausted",
         "The Router key has no remaining budget.",
         response.status
       );
     }
+    if (response.status === 429) {
+      const retryAfter = response.headers.get("retry-after")?.trim();
+      const retrySeconds = retryAfter !== void 0 && /^\d+$/u.test(retryAfter) ? Number(retryAfter) : void 0;
+      throw new RouterClientError(
+        "rate_limited",
+        `The vAPI Router is rate limited. ${retrySeconds !== void 0 && Number.isFinite(retrySeconds) ? `Retry after ${retrySeconds} seconds.` : "Wait and retry shortly."}`,
+        response.status
+      );
+    }
     if (response.status === 401) {
       throw new RouterClientError(
         "no_router_key",
@@ -87745,12 +87874,13 @@ var BODY_HEADER_NAMES = [
   "content-type"
 ];
 async function callService(args) {
+  validateTimeoutSeconds(args.input.timeoutSeconds);
   const trace = createCallTrace(args);
   let execution;
   try {
     execution = await executeCallService(args, trace);
   } catch (error61) {
-    if (!(error61 instanceof VapiCallError && error61.code === "unsupported_network")) {
+    if (!(error61 instanceof VapiCallError && (error61.code === "unsupported_network" || error61.code === "unsupported_payment"))) {
       await recordCallError(args, error61, trace).catch(() => void 0);
     }
     throw error61;
@@ -87864,6 +87994,8 @@ async function executeCallService(args, trace) {
     body: method === "GET" || method === "HEAD" ? void 0 : requestBody
   });
   const request = createRequest(headers);
+  const probeTimeoutMs = input2.timeoutSeconds === void 0 ? args.timeoutMs ?? 3e4 : Math.min(input2.timeoutSeconds, 30) * 1e3;
+  let requestTimeoutMs = probeTimeoutMs;
   const fetchWithGuardedRedirects = async (candidateRequest, followRedirects = true) => {
     let currentRequest = candidateRequest;
     let followedRedirects = 0;
@@ -87871,7 +88003,7 @@ async function executeCallService(args, trace) {
       const attempt = await fetchAttempt(
         fetchImpl,
         new Request(currentRequest.clone(), { redirect: "manual" }),
-        args.timeoutMs ?? 3e4
+        requestTimeoutMs
       );
       const response = attempt.response;
       if (!isRedirectStatus2(response.status)) {
@@ -88026,7 +88158,12 @@ async function executeCallService(args, trace) {
       account,
       caps: args.spendCaps ?? config2.spendCaps,
       config: payableConfig(config2, account),
-      send: async (paidRequest) => {
+      send: async (paidRequest, quote) => {
+        requestTimeoutMs = paidRequestTimeoutMs(
+          input2.timeoutSeconds,
+          args.timeoutMs,
+          quote.accepted.maxTimeoutSeconds
+        );
         paidAttempt = await fetchWithGuardedRedirects(paidRequest, false);
         return paidAttempt;
       },
@@ -88065,7 +88202,7 @@ async function executeCallService(args, trace) {
         asset: completed.quote.accepted.asset,
         payTo: completed.quote.accepted.payTo,
         settlement: settlementWithExplorer2(completed.settlement, completed.quote.accepted.network),
-        proof: completed.response.headers.get("x-vapi-payment-proof")
+        proof: completed.paymentProof
       },
       ...verificationFor(endpoint),
       ...expectedRequestFor(endpoint, completed.response.status)
@@ -88312,8 +88449,16 @@ async function resolveCallEndpoint(id2, endpointName, marketplaceHit, config2, f
   );
 }
 function registeredEndpoint(listing, verification) {
+  const { payment, ...endpoint } = listing.endpoint;
+  if (payment && (typeof payment.protocol === "string" || typeof payment.network !== "string")) {
+    throw new VapiCallError(
+      "unsupported_payment",
+      `Payment protocol ${payment.protocol} is not supported. This client pays x402 exact USDC endpoints only.`
+    );
+  }
   return {
-    ...listing.endpoint,
+    ...endpoint,
+    ...payment ? { payment: { network: payment.network, payTo: payment.payTo } } : {},
     verification: verification ?? listing.service.verification,
     serviceNetworks: listing.service.networks,
     registered: true,
@@ -88475,7 +88620,7 @@ async function readResponseBody2(response) {
 async function fetchAttempt(fetchImpl, request, timeoutMs) {
   const controller = new AbortController();
   let rejectTimeout = null;
-  const timeoutError = new Error(`API request timed out after ${timeoutMs}ms.`);
+  const timeoutError = new Error(`API request timed out after ${timeoutMs / 1e3} seconds.`);
   const timedOut = new Promise((_resolve, reject) => {
     rejectTimeout = reject;
   });
@@ -88515,6 +88660,19 @@ async function fetchAttempt(fetchImpl, request, timeoutMs) {
     throw error61;
   }
 }
+function validateTimeoutSeconds(timeoutSeconds) {
+  if (timeoutSeconds !== void 0 && (!Number.isInteger(timeoutSeconds) || timeoutSeconds < 1 || timeoutSeconds > 300)) {
+    throw new Error("call timeoutSeconds must be an integer from 1 to 300 seconds.");
+  }
+}
+function paidRequestTimeoutMs(timeoutSeconds, internalTimeoutMs, offerTimeoutSeconds) {
+  const usableOfferTimeout = Number.isInteger(offerTimeoutSeconds) && offerTimeoutSeconds > 0 ? offerTimeoutSeconds : void 0;
+  if (timeoutSeconds !== void 0) {
+    return Math.min(timeoutSeconds, usableOfferTimeout ?? timeoutSeconds) * 1e3;
+  }
+  if (internalTimeoutMs !== void 0) return internalTimeoutMs;
+  return usableOfferTimeout === void 0 ? 12e4 : Math.min(12e4, Math.max(3e4, usableOfferTimeout * 1e3));
+}
 function mapX402PaymentError(error61, resumeId) {
   if (!(error61 instanceof X402PaymentError)) return error61;
   if (error61.code === "payment_rejected") {
@@ -88530,9 +88688,10 @@ function mapX402PaymentError(error61, resumeId) {
     });
   }
   const resume = resumeId !== void 0 && error61.possibleSettlement?.authorizationNonce ? ` Check whether it settled with \`vapi pay --resume ${resumeId}\` before paying again.` : "";
+  const timeoutDetail = error61.cause instanceof Error && error61.cause.message.startsWith("API request timed out after ") ? `${error61.cause.message} ` : "";
   return new VapiCallError(
     "settlement_unknown",
-    `${error61.message}${resume}`,
+    `${timeoutDetail}${error61.message}${resume}`,
     error61.possibleSettlement,
     { cause: error61.cause }
   );
@@ -88664,13 +88823,7 @@ var inspectToolResultSchema = external_exports.object({
   liveness: listingLivenessSchema.optional(),
   conformance: listingConformanceSchema.optional(),
   identity: listingIdentitySchema.optional(),
-  payment: external_exports.object({
-    scheme: external_exports.literal("exact"),
-    network: external_exports.string(),
-    asset: external_exports.string(),
-    payTo: external_exports.string(),
-    checkedAt: external_exports.string()
-  }).nullable()
+  payment: discoveryEndpointSchema.shape.payment.unwrap().nullable()
 });
 var callSearchInputSchema = external_exports.object({
   query: external_exports.string().trim().max(200).optional().describe("Capability, API, service, or request."),
@@ -88699,7 +88852,10 @@ var callPayInputSchema = external_exports.object({
     (value) => /^0x[0-9a-fA-F]{40}$/.test(value) || isSolanaAddress(value),
     "Expected an EVM or Solana address."
   ).optional(),
-  maxPriceUsd: external_exports.union([external_exports.number().nonnegative(), external_exports.string().regex(/^\d+(?:\.\d{1,6})?$/)]).optional()
+  maxPriceUsd: external_exports.union([external_exports.number().nonnegative(), external_exports.string().regex(/^\d+(?:\.\d{1,6})?$/)]).optional(),
+  timeoutSeconds: external_exports.number().int().min(1).max(300).optional().describe(
+    "Seconds to wait for the paid response. Default: the provider's maxTimeoutSeconds, at most 120."
+  )
 });
 var callSearch = defineAction({
   name: "call.search",
@@ -88962,7 +89118,7 @@ async function readResult(response, signal, secrets = []) {
   return {
     status: response.status,
     contentType: contentType === null ? null : redactKnownSecrets2(contentType, secrets),
-    body: sanitizeReturnedValue(await readResponseBody3(response, contentType, signal), secrets)
+    body: sanitizeReturnedValue2(await readResponseBody3(response, contentType, signal), secrets)
   };
 }
 async function readResponseBody3(response, contentType, signal) {
@@ -89007,17 +89163,17 @@ function isJsonContentType2(value) {
   const mediaType = value?.split(";", 1)[0]?.trim().toLowerCase() ?? "";
   return mediaType === "application/json" || mediaType.endsWith("+json");
 }
-function sanitizeReturnedValue(value, secrets, depth = 0) {
+function sanitizeReturnedValue2(value, secrets, depth = 0) {
   if (typeof value === "string") return redactKnownSecrets2(value, secrets);
   if (value === null || typeof value !== "object") return value;
   if (depth >= 16) return "[redacted nested response value]";
   if (Array.isArray(value)) {
-    return value.map((item) => sanitizeReturnedValue(item, secrets, depth + 1));
+    return value.map((item) => sanitizeReturnedValue2(item, secrets, depth + 1));
   }
   return Object.fromEntries(
     Object.entries(value).map(([key2, item]) => [
       redactKnownSecrets2(key2, secrets),
-      sanitizeReturnedValue(item, secrets, depth + 1)
+      sanitizeReturnedValue2(item, secrets, depth + 1)
     ])
   );
 }
@@ -94523,7 +94679,13 @@ function toolError(error61) {
     {
       error: error61.message,
       code: error61.code,
-      ...error61.possibleSettlement ? { possibleSettlement: error61.possibleSettlement } : {},
+      ...error61.possibleSettlement ? {
+        possibleSettlement: Object.fromEntries(
+          Object.entries(error61.possibleSettlement).filter(
+            ([key2]) => key2 !== "authorizationTransaction"
+          )
+        )
+      } : {},
       ...error61.paymentRejection ? { paymentRejection: error61.paymentRejection } : {},
       ...error61.confirmedSettlement ? { confirmedSettlement: error61.confirmedSettlement } : {}
     },
@@ -98017,7 +98179,7 @@ async function readProcessStdin() {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.9.2";
+var CLI_VERSION = "0.9.4";
 
 // src/status.ts
 async function statusCommand(argv, json2, io, dependencies) {
@@ -101519,7 +101681,7 @@ function createLocalRuntime(options) {
   const processCommand = options.processCommand ?? defaultProcessCommand;
   const ownsProcess = (handle, pid) => processCommand(pid)?.includes(runResultPath(home, handle.runId)) === true;
   const closeFd = options.closeFd ?? closeSync2;
-  const readFile29 = options.readFile ?? nodeReadFile;
+  const readFile30 = options.readFile ?? nodeReadFile;
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   const openLog = options.openLog ?? ((path) => {
     mkdirSync2(runsDirectory(home), { recursive: true, mode: 448 });
@@ -101574,7 +101736,7 @@ function createLocalRuntime(options) {
       return handle;
     },
     async status(handle) {
-      const result = await readResultFile(readFile29, runResultPath(home, handle.runId));
+      const result = await readResultFile(readFile30, runResultPath(home, handle.runId));
       if (result !== void 0) return result;
       const pid = localPid(handle);
       if (pid === void 0 || handle.kind !== "local") {
@@ -101677,10 +101839,10 @@ function childArguments(member, run) {
     ...run.drawUsd ? ["--draw", run.drawUsd] : []
   ];
 }
-async function readResultFile(readFile29, path) {
+async function readResultFile(readFile30, path) {
   let text;
   try {
-    text = await readFile29(path, "utf8");
+    text = await readFile30(path, "utf8");
   } catch (error61) {
     if (hasCode3(error61, "ENOENT")) return void 0;
     return { state: "failed", detail: "unreadable result file" };
@@ -102530,7 +102692,7 @@ function isMcpInstallApp(value) {
 function serverEntry(home, registry2) {
   return {
     command: "npx",
-    args: ["-y", "vapi-network", "mcp"],
+    args: ["-y", "vapi-network@latest", "mcp"],
     env: { VAPI_HOME: home, VAPI_REGISTRY_URL: registry2 }
   };
 }
@@ -102579,7 +102741,7 @@ function tomlConfig(existing, entry) {
   const block = [
     "[mcp_servers.vapi]",
     'command = "npx"',
-    'args = ["-y", "vapi-network", "mcp"]',
+    'args = ["-y", "vapi-network@latest", "mcp"]',
     `env = { VAPI_HOME = "${escapeToml(entry.env.VAPI_HOME)}", VAPI_REGISTRY_URL = "${escapeToml(entry.env.VAPI_REGISTRY_URL)}" }`,
     ""
   ].join("\n");
@@ -102746,13 +102908,13 @@ async function sendConfig(dependencies) {
 // src/setup.ts
 import { rm as rm5 } from "node:fs/promises";
 import { join as join26 } from "node:path";
-var SETUP_ARGUMENT_ERROR = "vapi setup accepts only --no-cloud-backup; a recovery phrase is typed at the prompt, never passed on the command line.";
+var SETUP_ARGUMENT_ERROR = `vapi setup accepts only --no-cloud-backup and --accounts <n> (1-${MAX_RESTORE_ACCOUNTS}); a recovery phrase is typed at the prompt, never passed on the command line.`;
 var VAULT_CHOICE = "Create a new vault, or restore one from a recovery phrase? [new/restore] ";
 async function setupCommand(argv, json2, io, dependencies) {
   let parsed;
   try {
     parsed = parseArguments(argv, {
-      valueOptions: /* @__PURE__ */ new Set(),
+      valueOptions: /* @__PURE__ */ new Set(["--accounts"]),
       booleanOptions: /* @__PURE__ */ new Set(["--no-cloud-backup"]),
       maximumPositionals: 0
     });
@@ -102763,6 +102925,7 @@ async function setupCommand(argv, json2, io, dependencies) {
   const paths = getVapiPaths();
   const steps = [];
   const humanIo = json2 ? stderrIo(io) : io;
+  const accountCount = parseAccountCount(parsed.one("--accounts"));
   if (!await fileExists2(paths.config)) {
     await writeDefaultConfig(paths.config, process.env, { networks: ["base"] });
     steps.push("config");
@@ -102773,6 +102936,7 @@ async function setupCommand(argv, json2, io, dependencies) {
   let changedVault = false;
   let changedAccount = false;
   let changedLink = false;
+  let scannedAddresses;
   if (!await fileExists2(join26(paths.directory, "vault.json"))) {
     const choice = await vaultChoice(dependencies);
     if (choice === "restore") {
@@ -102780,12 +102944,14 @@ async function setupCommand(argv, json2, io, dependencies) {
         throw new Error("Restoring needs a terminal to type the phrase.");
       }
       const readSecret = dependencies.prompts?.secret ?? promptForSecret;
-      await restoreVaultFromPhrase(
+      const restored = await restoreVaultFromPhrase(
         await readSecret("Recovery phrase: "),
         config2,
         humanIo,
-        dependencies
+        dependencies,
+        accountCount
       );
+      scannedAddresses = restored.scannedAddresses;
       store = await WalletStore.open(paths.directory, {
         secrets: getSecretStore(dependencies),
         env: dependencies.env ?? process.env,
@@ -102838,22 +103004,35 @@ async function setupCommand(argv, json2, io, dependencies) {
   }
   if (json2) {
     io.stdout(
-      JSON.stringify({ vault, account, address: address4, linked, steps, cloudBackup })
+      JSON.stringify({
+        vault,
+        account,
+        address: address4,
+        linked,
+        steps,
+        cloudBackup,
+        ...scannedAddresses === void 0 ? {} : { scannedAddresses }
+      })
     );
   }
 }
-async function restoreVaultFromPhrase(phrase, config2, io, dependencies) {
+async function restoreVaultFromPhrase(phrase, config2, io, dependencies, accountCount) {
   const paths = getVapiPaths();
   const validatedPhrase = validateRecoveryPhrase(phrase);
   const readBalance3 = baseUsdcBalanceReader(config2, dependencies);
   const key2 = await loadOrCreateDeviceKey({ secrets: getSecretStore(dependencies) });
   let names;
+  let scannedAddresses = 0;
   try {
     const restored = await restoreVault({
       path: join26(paths.directory, "vault.json"),
       key: key2,
       phrase: validatedPhrase,
       probe: async (address4) => await readBalance3(address4) > 0n,
+      ...accountCount === void 0 ? {} : { accountCount },
+      onScanComplete: (count) => {
+        scannedAddresses = count;
+      },
       ...dependencies.now === void 0 ? {} : { now: dependencies.now }
     });
     names = restored.accounts().map((account) => account.name);
@@ -102865,8 +103044,25 @@ async function restoreVaultFromPhrase(phrase, config2, io, dependencies) {
     ...names[0] === void 0 ? {} : { wallet: names[0] },
     detail: `${names.length} account(s)`
   });
-  io.stdout(`Vault restored with ${names.length} account(s): ${names.join(", ")}`);
-  return { names };
+  io.stdout(
+    `Vault restored with ${names.length} account(s): ${names.join(", ")}. ${scannedAddresses} address(es) scanned.`
+  );
+  return { names, scannedAddresses };
+}
+function parseAccountCount(value) {
+  if (value === void 0) return void 0;
+  if (!/^\d+$/u.test(value)) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  const count = Number(value);
+  if (!Number.isSafeInteger(count) || count < 1 || count > MAX_RESTORE_ACCOUNTS) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  return count;
 }
 async function vaultChoice(dependencies) {
   const answer = dependencies.prompts?.line === void 0 ? isInteractive(dependencies) ? await promptForLine(VAULT_CHOICE) : "" : await dependencies.prompts.line(VAULT_CHOICE);
@@ -104974,6 +105170,7 @@ async function referencedSleep(milliseconds, signal) {
 // src/vault.ts
 import { join as join27 } from "node:path";
 var VAULT_USAGE = "Usage: vapi vault protect|unprotect|lock|unlock|status [--json]";
+var RESTORE_USAGE = "Usage: vapi restore [--accounts <n> | --from-owner [--owner <0x\u2026>]] [--json]";
 var LEGACY_PASSWORD_NOTICE = "VAPI_KEYSTORE_PASSWORD is deprecated for vault passwords; use VAPI_VAULT_PASSWORD instead.";
 async function vaultCommand(argv, json2, io, dependencies) {
   const subcommand = argv[0];
@@ -105003,9 +105200,17 @@ async function restoreCommand(argv, json2, io, dependencies) {
     await restoreFromOwnerCommand(argv, json2, io, dependencies);
     return;
   }
-  if (argv.length > 0) {
-    throw new UsageError("Usage: vapi restore [--from-owner [--owner <0x\u2026>]] [--json]");
+  let parsed;
+  try {
+    parsed = parseArguments(argv, {
+      valueOptions: /* @__PURE__ */ new Set(["--accounts"]),
+      maximumPositionals: 0
+    });
+  } catch (error61) {
+    if (error61 instanceof UsageError) throw new UsageError(RESTORE_USAGE);
+    throw error61;
   }
+  const accountCount = parseRestoreAccountCount(parsed.one("--accounts"));
   const paths = getVapiPaths();
   const path = join27(paths.directory, "vault.json");
   if (await fileExists2(path)) {
@@ -105019,13 +105224,39 @@ async function restoreCommand(argv, json2, io, dependencies) {
   const config2 = await readConfig(paths.config, json2 ? quietIo(io) : io);
   const phrase = isStdinInteractive(dependencies) ? await getPrompts(dependencies).secret("Recovery phrase: ") : await (dependencies.readStdin ?? readProcessStdin3)();
   const restoreIo = json2 ? quietIo(io) : io;
-  const { names } = await restoreVaultFromPhrase(phrase.trim(), config2, restoreIo, dependencies);
+  const { names, scannedAddresses } = await restoreVaultFromPhrase(
+    phrase.trim(),
+    config2,
+    restoreIo,
+    dependencies,
+    accountCount
+  );
   if (json2) {
-    output3(io, true, { command: "restore", vault: "restored", accounts: names }, "");
+    output3(
+      io,
+      true,
+      { command: "restore", vault: "restored", accounts: names, scannedAddresses },
+      ""
+    );
     return;
   }
   io.stdout(`Run vapi setup to link ${names[0]}.`);
 }
+function parseRestoreAccountCount(value) {
+  if (value === void 0) return void 0;
+  if (!/^\d+$/u.test(value)) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  const count = Number(value);
+  if (!Number.isSafeInteger(count) || count < 1 || count > MAX_RESTORE_ACCOUNTS) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  return count;
+}
 async function protectCommand(argv, json2, io, dependencies) {
   requireNoArguments(argv);
   const env = getEnvironment(dependencies);
@@ -105155,8 +105386,8 @@ var HELP_HEADING = "vAPI Network";
 var HELP = `${HELP_HEADING}
 
 Usage:
-  vapi init [--networks <base,arc,solana>] [--json]
-  vapi setup [--no-cloud-backup] [--json]
+  vapi init [--networks <base,arc>] [--json]
+  vapi setup [--no-cloud-backup] [--accounts <n>] [--json]
   vapi accounts [--all] [--json]
   vapi accounts add <name> [--label <text>] [--no-link] [--json]
   vapi accounts import <name> [--keystore <path> | --key-file <path>] [--label <text>] [--json]
@@ -105186,7 +105417,7 @@ Usage:
   vapi docs read <url-or-path> [--json]
   vapi search [query] [--kind <kind>] [--network <caip2>] [--limit <n>] [--cursor <cursor>] [--include-unverified] [--json]
   vapi inspect <id> [--endpoint <name>] [--json]
-  vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--account <name>] [--json]
+  vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--timeout <seconds>] [--account <name>] [--json]
   vapi pay --resume <receipt-id> [--json]
   vapi check <url> [--method <method>] [--json]
   vapi balance [--account <name>] [--json]
@@ -105232,8 +105463,8 @@ Usage:
   vapi task status <id> [--account <name>] [--json]
   vapi export-key [--network <caip2>] [--account <name>] [--json]
   vapi backup [--account <name>] [--cloud [off]] [--json]
-  vapi restore [--from-owner [--owner <0x\u2026>]] [--json]
-  vapi import (--phrase | --key) [--account <name>] [--networks <base,arc,solana>] [--replace] [--force] [--json]
+  vapi restore [--accounts <n> | --from-owner [--owner <0x\u2026>]] [--json]
+  vapi import (--phrase | --key) [--account <name>] [--networks <base,arc>] [--replace] [--force] [--json]
   vapi passphrase [--account <name>] [--json]
   vapi vault protect [--json]
   vapi vault unprotect [--json]
@@ -105261,6 +105492,8 @@ Every command that touches a wallet takes \`--account <name>\`, falls back to \`
 
 \`vapi search\` answers with vAPI-verified listings plus the mirrored external catalogs. \`--include-unverified\` also returns self-listed APIs that passed vAPI's automated x402 probe but were never reviewed; every result is tagged \`[verified]\`, \`[requested]\`, \`[unverified]\` or \`[external]\`.
 
+Solana listings remain searchable; inspect and pay return \`unsupported_network\`. Solana keys are not part of the device vault yet.
+
 \`vapi docs\` asks the public vAPI documentation assistant; \`vapi docs search\` searches documentation excerpts and \`vapi docs read\` reads one Markdown page. They need no account, wallet or payment.
 
 \`vapi task --help\` lists task options and availability. Task exit codes: 0 ok, 1 error, 2 policy refusal (JSON ok:false with a policy. reason) or invalid usage (JSON error), 3 approval needed in non-interactive mode. Posting moves no money; the current create-order contract does not store amount, deadline, intake, max awards or webhook yet.
@@ -105273,7 +105506,7 @@ Every command that touches a wallet takes \`--account <name>\`, falls back to \`
 
 \`vapi vault protect\` adds a password to the device vault. \`vapi vault unlock\` opens it on this device for 8 hours; for unattended use, set \`VAPI_VAULT_PASSWORD\`. \`vapi unlock\` and \`vapi lock\` remain aliases for one release.
 
-\`vapi backup\` and \`vapi export-key\` print a secret, so they run only on a real terminal, never for an agent, and ask you to type the wallet name first. \`vapi backup --cloud\` keeps an encrypted vault copy that only the owner can approve for recovery. \`vapi restore\` rebuilds the vault from the phrase and re-derives accounts until an unused address. Set \`VAPI_NO_SECRETS=1\` to switch exports off entirely. Every export and every wallet change is logged to ~/.vapi/audit.log.
+\`vapi backup\` and \`vapi export-key\` print a secret, so they run only on a real terminal, never for an agent, and ask you to type the wallet name first. \`vapi backup --cloud\` keeps an encrypted vault copy that only the owner can approve for recovery. \`vapi restore\` rebuilds the vault from the phrase and re-derives accounts until five consecutive addresses have no Base USDC, and reports the number scanned. Use \`--accounts <n>\` with restore or setup to recover a fixed count without querying balances. Set \`VAPI_NO_SECRETS=1\` to switch exports off entirely. Every export and every wallet change is logged to ~/.vapi/audit.log.
 
 \`vapi publish <url>\` lists an API you own. vAPI probes the URL \u2014 an origin, one endpoint, or an OpenAPI document \u2014 you choose which endpoints to list, and your wallet signs one line naming where the payouts go. Listing is permissionless: a listing that passed the probe goes live with \`vapi publish activate <slug>\`, and \`vapi publish verify-request <slug>\` asks for the review that puts it in the default search. Deploying the FeeSplitter that receives the payouts is a wallet transaction and stays in the console. A catalog of more than 20 endpoints is listed as several listings of up to 20, with one result line per endpoint; \`--resume\` skips every endpoint this key already lists.
 
@@ -106062,7 +106295,7 @@ async function inspectCommand(argv, json2, io, dependencies) {
   );
   output3(io, json2, result, formatInspect(result));
 }
-var PAY_USAGE = "Usage: vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--account <name>] [--json]";
+var PAY_USAGE = "Usage: vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--timeout <seconds>] [--account <name>] [--json]";
 async function payCommand(argv, json2, io, dependencies) {
   if (argv.includes(RESUME_OPTION)) {
     await payResumeCommand(argv, json2, io, dependencies);
@@ -106078,11 +106311,13 @@ async function payCommand(argv, json2, io, dependencies) {
       "--expected-pay-to",
       "--max",
       "--max-price-usd",
+      "--timeout",
       WALLET_OPTION5
     ]),
     maximumPositionals: 1
   });
   const target = requiredPositional(parsed.positionals[0], "<id-or-url>", PAY_USAGE);
+  const timeoutSeconds = optionalBoundedInteger(parsed.one("--timeout"), "--timeout", 1, 300);
   const paths = getVapiPaths();
   const config2 = await readConfig(paths.config, io);
   const wallet = await targetWallet(parsed, dependencies);
@@ -106098,7 +106333,8 @@ async function payCommand(argv, json2, io, dependencies) {
     ...parsed.one("--content-type") ? { contentType: parsed.one("--content-type") } : {},
     ...parsed.one("--network") ? { network: parsed.one("--network") } : {},
     ...parsed.one("--expected-pay-to") ? { expectedPayTo: parsed.one("--expected-pay-to") } : {},
-    ...maxPriceUsd ? { maxPriceUsd } : {}
+    ...maxPriceUsd ? { maxPriceUsd } : {},
+    ...timeoutSeconds === void 0 ? {} : { timeoutSeconds }
   };
   const call2 = createCallPort({
     config: config2,
@@ -107773,7 +108009,7 @@ function buildNextSteps(address4) {
     formatNextStep("Pay", "vapi pay <ref> --max 0.02"),
     formatNextStep(
       "Agent",
-      'add {"command":"npx","args":["-y","vapi-network","mcp"]} to your MCP config'
+      'add {"command":"npx","args":["-y","vapi-network@latest","mcp"]} to your MCP config'
     )
   ];
 }
@@ -107954,6 +108190,17 @@ function optionalPositiveInteger(value, option) {
   if (result === 0) throw new UsageError(`${option} must be a positive integer.`);
   return result;
 }
+function optionalBoundedInteger(value, option, minimum, maximum) {
+  if (value === void 0) return void 0;
+  if (!/^\d+$/.test(value)) {
+    throw new UsageError(`${option} must be an integer from ${minimum} to ${maximum}.`);
+  }
+  const parsed = Number(value);
+  if (!Number.isSafeInteger(parsed) || parsed < minimum || parsed > maximum) {
+    throw new UsageError(`${option} must be an integer from ${minimum} to ${maximum}.`);
+  }
+  return parsed;
+}
 function optionalUsdAmount(value, option) {
   if (value === void 0) return void 0;
   if (!/^\d+(?:\.\d{1,2})?$/.test(value)) {
@@ -108014,17 +108261,144 @@ function parseInitNetworks(value) {
   }
   for (const network of networks) {
     if (network !== "base" && network !== "arc" && network !== "solana") {
-      throw new UsageError("--networks supports base, arc and solana.");
+      throw new UsageError("--networks supports base and arc; Solana vault setup is unavailable.");
     }
   }
   return networks;
 }
+
+// src/update-check.ts
+import { lookup } from "node:dns/promises";
+import { mkdir as mkdir21, readFile as readFile29, writeFile as writeFile12 } from "node:fs/promises";
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var CHECK_TIMEOUT_MS = 1500;
+var LATEST_URL = "https://registry.npmjs.org/vapi-network/latest";
+async function runCliWithUpdateCheck(argv = process.argv.slice(2), io = {
+  stdout: (message) => console.log(message),
+  stderr: (message) => console.error(message)
+}, dependencies = {}, options = {}) {
+  const notice = checkForUpdate({ ...options, env: options.env ?? dependencies.env, argv });
+  const code = await runCli(argv, io, dependencies);
+  const message = await notice;
+  if (message) io.stderr(message);
+  return code;
+}
+async function checkForUpdate(options = {}) {
+  const env = options.env ?? process.env;
+  const argv = options.argv ?? process.argv.slice(2);
+  if (!(options.stderrIsTTY ?? process.stderr.isTTY) || argv.includes("--json") || argv[0] === "mcp" && argv[1] !== "install" || env.VAPI_NO_UPDATE_CHECK === "1" || env.CI !== void 0) {
+    return void 0;
+  }
+  const controller = new AbortController();
+  let timer;
+  try {
+    return await Promise.race([
+      latestNotice(options, env, controller.signal),
+      new Promise((resolve2) => {
+        timer = setTimeout(() => {
+          controller.abort();
+          resolve2(void 0);
+        }, CHECK_TIMEOUT_MS);
+      })
+    ]);
+  } catch {
+    return void 0;
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+    controller.abort();
+  }
+}
+async function latestNotice(options, env, signal) {
+  const paths = getVapiPaths(options.home ?? (env.VAPI_HOME?.trim() || void 0));
+  const now = (options.nowMs ?? Date.now)();
+  let cached2;
+  try {
+    const value = JSON.parse(await readFile29(paths.updateCheck, "utf8"));
+    if (isRecord12(value) && typeof value.checkedAt === "number" && Number.isFinite(value.checkedAt) && typeof value.latest === "string" && parseVersion(value.latest)) {
+      cached2 = { checkedAt: value.checkedAt, latest: value.latest };
+    }
+  } catch {
+  }
+  signal.throwIfAborted();
+  let latest = cached2?.latest ?? CLI_VERSION;
+  if (cached2 === void 0 || now - cached2.checkedAt >= CHECK_INTERVAL_MS || now < cached2.checkedAt) {
+    await mkdir21(paths.directory, { recursive: true });
+    signal.throwIfAborted();
+    await writeFile12(paths.updateCheck, JSON.stringify({ checkedAt: now, latest }), { mode: 384 });
+    signal.throwIfAborted();
+    const fetchImpl = options.fetchImpl ?? createPublicFetch({
+      allowPrivateNetwork: false,
+      lookup: async (hostname3) => {
+        let onAbort;
+        const aborted2 = new Promise((_resolve, reject) => {
+          onAbort = () => reject(signal.reason);
+          signal.addEventListener("abort", onAbort, { once: true });
+        });
+        try {
+          signal.throwIfAborted();
+          const addresses = await Promise.race([lookup(hostname3, { all: true }), aborted2]);
+          return addresses.map(({ address: address4 }) => address4);
+        } finally {
+          signal.removeEventListener("abort", onAbort);
+        }
+      }
+    });
+    const response = await fetchImpl(LATEST_URL, { signal, redirect: "error" });
+    if (!response.ok) return void 0;
+    const body = await response.json();
+    signal.throwIfAborted();
+    if (!isRecord12(body) || typeof body.version !== "string" || !parseVersion(body.version)) {
+      return void 0;
+    }
+    latest = body.version;
+    await writeFile12(paths.updateCheck, JSON.stringify({ checkedAt: now, latest }), { mode: 384 });
+  }
+  signal.throwIfAborted();
+  return isNewerVersion(latest, CLI_VERSION) ? `vapi-network ${latest} is available (you have ${CLI_VERSION}). Update: npm i -g vapi-network@latest` : void 0;
+}
+function isRecord12(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseVersion(version5) {
+  const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([\da-zA-Z.-]+))?(?:\+[\da-zA-Z-]+(?:\.[\da-zA-Z-]+)*)?$/.exec(
+    version5
+  );
+  if (!match) return void 0;
+  const prerelease = match[4]?.split(".");
+  if (prerelease?.some((part) => part === "" || /^\d+$/.test(part) && /^0\d/.test(part))) {
+    return void 0;
+  }
+  return { core: match.slice(1, 4).map(BigInt), prerelease };
+}
+function isNewerVersion(latest, current) {
+  const next = parseVersion(latest);
+  const running = parseVersion(current);
+  for (let index2 = 0; index2 < 3; index2 += 1) {
+    if (next.core[index2] !== running.core[index2]) return next.core[index2] > running.core[index2];
+  }
+  if (running.prerelease === void 0) return false;
+  if (next.prerelease === void 0) return true;
+  for (let index2 = 0; index2 < Math.max(next.prerelease.length, running.prerelease.length); index2 += 1) {
+    const a = next.prerelease[index2];
+    const b = running.prerelease[index2];
+    if (a === b) continue;
+    if (a === void 0) return false;
+    if (b === void 0) return true;
+    const aNumeric = /^\d+$/.test(a);
+    const bNumeric = /^\d+$/.test(b);
+    if (aNumeric && bNumeric) return BigInt(a) > BigInt(b);
+    if (aNumeric !== bNumeric) return !aNumeric;
+    return a > b;
+  }
+  return false;
+}
 export {
   HELP,
   createLocalRuntime,
   parseRuntimeKind,
   resolveRuntime,
   runCli,
+  runCliWithUpdateCheck,
   runtimeForKind
 };
 //# sourceMappingURL=index.js.map