@vapi-network/cli 0.9.2 → 0.9.5

package/dist/cli.js

@@ -9442,13 +9442,13 @@ var init_getCallError = __esm({
 
 // ../../node_modules/.pnpm/viem@2.56.1_typescript@6.0.3_zod@4.5.4/node_modules/viem/_esm/utils/promise/withResolvers.js
 function withResolvers() {
-  let resolve2 = () => void 0;
+  let resolve3 = () => void 0;
   let reject = () => void 0;
   const promise2 = new Promise((resolve_, reject_) => {
-    resolve2 = resolve_;
+    resolve3 = resolve_;
     reject = reject_;
   });
-  return { promise: promise2, resolve: resolve2, reject };
+  return { promise: promise2, resolve: resolve3, reject };
 }
 var init_withResolvers = __esm({
   "../../node_modules/.pnpm/viem@2.56.1_typescript@6.0.3_zod@4.5.4/node_modules/viem/_esm/utils/promise/withResolvers.js"() {
@@ -9467,8 +9467,8 @@ function createBatchScheduler({ fn, id: id2, shouldSplitBatch, wait: wait2 = 0,
       if (sort && Array.isArray(data))
         data.sort(sort);
       for (let i = 0; i < scheduler.length; i++) {
-        const { resolve: resolve2 } = scheduler[i];
-        resolve2?.([data[i], data]);
+        const { resolve: resolve3 } = scheduler[i];
+        resolve3?.([data[i], data]);
       }
     }).catch((err) => {
       for (let i = 0; i < scheduler.length; i++) {
@@ -9484,16 +9484,16 @@ function createBatchScheduler({ fn, id: id2, shouldSplitBatch, wait: wait2 = 0,
   return {
     flush,
     async schedule(args) {
-      const { promise: promise2, resolve: resolve2, reject } = withResolvers();
+      const { promise: promise2, resolve: resolve3, reject } = withResolvers();
       const split2 = shouldSplitBatch?.([...getBatchedArgs(), args]);
       if (split2)
         exec();
       const hasActiveScheduler = getScheduler().length > 0;
       if (hasActiveScheduler) {
-        setScheduler({ args, resolve: resolve2, reject });
+        setScheduler({ args, resolve: resolve3, reject });
         return promise2;
       }
-      setScheduler({ args, resolve: resolve2, reject });
+      setScheduler({ args, resolve: resolve3, reject });
       setTimeout(exec, wait2);
       return promise2;
     }
@@ -10116,11 +10116,9 @@ var init_call = __esm({
   }
 });
 
-// src/cli.ts
-import { spawn as spawn3 } from "node:child_process";
-import { stat as stat16 } from "node:fs/promises";
-import { join as join28 } from "node:path";
-import { createInterface as createInterface3 } from "node:readline/promises";
+// src/update-check.ts
+import { lookup } from "node:dns/promises";
+import { mkdir as mkdir21, readFile as readFile29, writeFile as writeFile12 } from "node:fs/promises";
 
 // ../../node_modules/.pnpm/zod@4.5.4/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -30775,7 +30773,7 @@ function observe(observerId, callbacks, fn) {
 // ../../node_modules/.pnpm/viem@2.56.1_typescript@6.0.3_zod@4.5.4/node_modules/viem/_esm/utils/wait.js
 init_utils3();
 async function wait(time3, { signal } = {}) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     if (signal?.aborted) {
       reject(getAbortError(signal));
       return;
@@ -30783,7 +30781,7 @@ async function wait(time3, { signal } = {}) {
     const cleanup = () => signal?.removeEventListener("abort", onAbort);
     const timeout = setTimeout(() => {
       cleanup();
-      resolve2();
+      resolve3();
     }, time3);
     const onAbort = () => {
       clearTimeout(timeout);
@@ -31359,7 +31357,7 @@ init_withResolvers();
 // ../../node_modules/.pnpm/viem@2.56.1_typescript@6.0.3_zod@4.5.4/node_modules/viem/_esm/utils/promise/withRetry.js
 init_utils3();
 function withRetry(fn, { delay: delay_ = 100, retryCount = 2, shouldRetry: shouldRetry2 = () => true, signal } = {}) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     const attemptRetry = async ({ count = 0 } = {}) => {
       if (signal?.aborted) {
         reject(getAbortError(signal));
@@ -31379,7 +31377,7 @@ function withRetry(fn, { delay: delay_ = 100, retryCount = 2, shouldRetry: shoul
       };
       try {
         const data = await fn();
-        resolve2(data);
+        resolve3(data);
       } catch (err) {
         if (signal?.aborted) {
           reject(getAbortError(signal));
@@ -31530,7 +31528,7 @@ async function sendCalls(client, parameters) {
           results.push({ reason, status: "rejected" });
         }
         if (experimental_fallbackDelay > 0)
-          await new Promise((resolve2) => setTimeout(resolve2, experimental_fallbackDelay));
+          await new Promise((resolve3) => setTimeout(resolve3, experimental_fallbackDelay));
       }
       if (results.every((r) => r.status === "rejected"))
         throw results[0].reason;
@@ -31633,9 +31631,9 @@ async function waitForCallsStatus(client, parameters) {
     throwOnFailure = false
   } = parameters;
   const observerId = stringify(["waitForCallsStatus", client.uid, id2]);
-  const { promise: promise2, resolve: resolve2, reject } = withResolvers();
+  const { promise: promise2, resolve: resolve3, reject } = withResolvers();
   let timer;
-  const unobserve = observe(observerId, { resolve: resolve2, reject }, (emit) => {
+  const unobserve = observe(observerId, { resolve: resolve3, reject }, (emit) => {
     const unpoll = poll(async () => {
       const done = (fn) => {
         clearTimeout(timer);
@@ -32017,13 +32015,13 @@ async function isImageUri(uri) {
     }
     if (!Object.hasOwn(globalThis, "Image"))
       return false;
-    return new Promise((resolve2) => {
+    return new Promise((resolve3) => {
       const img = new Image();
       img.onload = () => {
-        resolve2(true);
+        resolve3(true);
       };
       img.onerror = () => {
-        resolve2(false);
+        resolve3(false);
       };
       img.src = uri;
     });
@@ -33486,7 +33484,7 @@ init_utils3();
 // ../../node_modules/.pnpm/viem@2.56.1_typescript@6.0.3_zod@4.5.4/node_modules/viem/_esm/utils/promise/withTimeout.js
 init_utils3();
 function withTimeout(fn, { errorInstance = new Error("timed out"), timeout, signal }) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     ;
     (async () => {
       let timeoutId;
@@ -33501,7 +33499,7 @@ function withTimeout(fn, { errorInstance = new Error("timed out"), timeout, sign
             }
           }, timeout);
         }
-        resolve2(await fn({ signal: controller?.signal || null }));
+        resolve3(await fn({ signal: controller?.signal || null }));
       } catch (err) {
         if (controller?.signal.aborted && isAbortError(err)) {
           reject(errorInstance);
@@ -37481,13 +37479,13 @@ async function waitForTransactionReceipt(client, parameters) {
   let retrying = false;
   let _unobserve;
   let _unwatch;
-  const { promise: promise2, resolve: resolve2, reject } = withResolvers();
+  const { promise: promise2, resolve: resolve3, reject } = withResolvers();
   const timer = timeout ? setTimeout(() => {
     _unwatch?.();
     _unobserve?.();
     reject(new WaitForTransactionReceiptTimeoutError({ hash: hash5 }));
   }, timeout) : void 0;
-  _unobserve = observe(observerId, { onReplaced, resolve: resolve2, reject }, async (emit) => {
+  _unobserve = observe(observerId, { onReplaced, resolve: resolve3, reject }, async (emit) => {
     receipt = await getAction(client, getTransactionReceipt, "getTransactionReceipt")({ hash: hash5 }).catch(() => void 0);
     if (receipt && confirmations <= 1) {
       clearTimeout(timer);
@@ -39357,8 +39355,10 @@ var listingIdentitySchema = external_exports.looseObject({
   }).optional().catch(void 0)
 });
 var listingDisclosureShape = {
-  group: listingGroupSchema.optional(),
-  fee: listingFeeSchema.optional(),
+  // Presentation metadata must not make an otherwise executable row vanish
+  // when the registry adds a new group or changes the fee display shape.
+  group: listingGroupSchema.optional().catch(void 0),
+  fee: listingFeeSchema.optional().catch(void 0),
   verification: listingVerificationFieldSchema,
   liveness: listingLivenessSchema.optional().catch(void 0),
   conformance: listingConformanceSchema.optional().catch(void 0),
@@ -39366,11 +39366,13 @@ var listingDisclosureShape = {
 };
 var marketplaceBadgeCodeSchema = external_exports.enum([
   "live_x402",
+  "mpp",
   "partner",
   "payout_wallet_confirmed",
   "vapi_verified",
   "external_catalog",
-  "approved_vendor"
+  "approved_vendor",
+  "unverified"
 ]);
 var marketplaceBadgeSchema = external_exports.looseObject({
   code: marketplaceBadgeCodeSchema,
@@ -39389,7 +39391,13 @@ var marketplaceCardSchema = external_exports.looseObject({
   summary: external_exports.string().trim().min(1).max(1e3),
   byline: external_exports.string().trim().min(1).max(160).optional(),
   bylineHref: marketplaceHrefSchema.optional(),
-  badges: external_exports.array(marketplaceBadgeSchema).max(8),
+  badges: external_exports.preprocess(
+    (badges) => Array.isArray(badges) ? badges.flatMap((badge) => {
+      const parsed = marketplaceBadgeSchema.safeParse(badge);
+      return parsed.success ? [parsed.data] : [];
+    }) : badges,
+    external_exports.array(marketplaceBadgeSchema).max(8)
+  ),
   facts: external_exports.array(marketplacePublicFactSchema).max(12)
 });
 var marketplaceHitBase = {
@@ -43436,7 +43444,7 @@ function getRpcTransportWithRequestCoalescing(transport, getDeduplicationKey) {
     coalescedRequest.numConsumers++;
     if (signal) {
       const responsePromise = coalescedRequest.responsePromise;
-      return await new Promise((resolve2, reject) => {
+      return await new Promise((resolve3, reject) => {
         const handleAbort = (e22) => {
           signal.removeEventListener("abort", handleAbort);
           coalescedRequest.numConsumers -= 1;
@@ -43449,7 +43457,7 @@ function getRpcTransportWithRequestCoalescing(transport, getDeduplicationKey) {
           reject(e22.target.reason);
         };
         signal.addEventListener("abort", handleAbort);
-        responsePromise.then(resolve2).catch(reject).finally(() => {
+        responsePromise.then(resolve3).catch(reject).finally(() => {
           signal.removeEventListener("abort", handleAbort);
         });
       });
@@ -44832,7 +44840,7 @@ function createPublicFetch(options) {
     });
     const normalized = new Request(input2, init);
     const bytes = normalized.body ? Buffer.from(await normalized.arrayBuffer()) : null;
-    return await new Promise((resolve2, reject) => {
+    return await new Promise((resolve3, reject) => {
       const requestOptions2 = {
         method: normalized.method,
         headers: Object.fromEntries(normalized.headers),
@@ -44857,7 +44865,7 @@ function createPublicFetch(options) {
             { status, statusText: incoming.statusMessage, headers }
           );
           Object.defineProperty(response, "url", { value: url2.toString() });
-          resolve2(response);
+          resolve3(response);
         } catch (error61) {
           incoming.destroy();
           reject(error61);
@@ -44870,9 +44878,9 @@ function createPublicFetch(options) {
     });
   });
 }
-function pinnedLookup(lookup) {
+function pinnedLookup(lookup2) {
   return (hostname3, dnsOptions, callback) => {
-    void lookup(normalizeHostname(hostname3)).then((addresses) => {
+    void lookup2(normalizeHostname(hostname3)).then((addresses) => {
       if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
         callback(guardError(new URL(`https://${hostname3}`)), "");
         return;
@@ -45626,8 +45634,8 @@ var svmFetchQueue = Promise.resolve();
 async function withGuardedSvmFetch(fetchImpl, operation) {
   const previous = svmFetchQueue;
   let release2;
-  svmFetchQueue = new Promise((resolve2) => {
-    release2 = resolve2;
+  svmFetchQueue = new Promise((resolve3) => {
+    release2 = resolve3;
   });
   await previous;
   const originalFetch = globalThis.fetch;
@@ -46010,9 +46018,9 @@ function isRecord2(value) {
 var CALLABLE_CATEGORIES = ["ai", "data", "crypto", "compute", "search"];
 var callableCategorySchema = external_exports.enum(CALLABLE_CATEGORIES);
 var DISCOVERY_CATEGORIES = [...CALLABLE_CATEGORIES, "other"];
-var discoveryCategorySchema = external_exports.enum(DISCOVERY_CATEGORIES);
+var discoveryCategorySchema = external_exports.string().trim().min(1);
 var CALLABLE_CATEGORY_SET = new Set(CALLABLE_CATEGORIES);
-var serviceTierSchema = external_exports.enum(["listed", "verified", "partner"]);
+var serviceTierSchema = external_exports.string().trim().min(1);
 var discoveryEndpointSchema = external_exports.looseObject({
   name: external_exports.string(),
   method: external_exports.string(),
@@ -46042,6 +46050,24 @@ var discoveryEndpointSchema = external_exports.looseObject({
       asset: external_exports.string().refine(isSolanaAddress, "Expected a Solana base58 address."),
       payTo: external_exports.string().refine(isSolanaAddress, "Expected a Solana base58 address."),
       checkedAt: external_exports.iso.datetime()
+    }),
+    external_exports.looseObject({
+      protocol: external_exports.literal("mpp"),
+      intent: external_exports.enum(["charge", "authorize", "subscription"]).nullable(),
+      method: external_exports.string().trim().min(1).max(40).nullable(),
+      checkedAt: external_exports.iso.datetime(),
+      // Keep common x402 properties readable on the union while making it
+      // impossible for MPP metadata to masquerade as executable x402 terms.
+      network: external_exports.never().optional(),
+      payTo: external_exports.never().optional()
+    }),
+    external_exports.looseObject({
+      // Future payment protocols remain visible to callers so the payment
+      // layer can refuse them explicitly instead of discovery losing the row.
+      protocol: external_exports.string().trim().min(1).max(40),
+      checkedAt: external_exports.iso.datetime(),
+      network: external_exports.never().optional(),
+      payTo: external_exports.never().optional()
     })
   ]).optional()
 });
@@ -46135,7 +46161,7 @@ function resolveTarget(service, endpointName) {
   }
   if (targets.size !== 1) {
     const paymentNetworks = service.endpoints.flatMap(
-      (endpoint) => endpoint.payment ? [endpoint.payment.network] : []
+      (endpoint) => typeof endpoint.payment?.network === "string" ? [endpoint.payment.network] : []
     );
     throw new DiscoveryCatalogError(
       "ambiguous_default",
@@ -46822,7 +46848,7 @@ async function withFileLock(lockPath, fn, options = {}) {
           if (Date.now() >= deadline) {
             throw new FileLockedError(options.lockedMessage);
           }
-          await new Promise((resolve2) => setTimeout(resolve2, LOCK_RETRY_MS));
+          await new Promise((resolve3) => setTimeout(resolve3, LOCK_RETRY_MS));
           continue;
         }
         handle = candidate;
@@ -46837,7 +46863,7 @@ async function withFileLock(lockPath, fn, options = {}) {
       if (Date.now() >= deadline) {
         throw new FileLockedError(options.lockedMessage);
       }
-      await new Promise((resolve2) => setTimeout(resolve2, LOCK_RETRY_MS));
+      await new Promise((resolve3) => setTimeout(resolve3, LOCK_RETRY_MS));
     }
   }
   const ownedHandle = handle;
@@ -46958,7 +46984,7 @@ async function restoreRenamedLock(path, tombPath) {
     } catch (error61) {
       if (hasCode(error61, "ENOENT")) return;
       if (!hasCode(error61, "EEXIST")) throw error61;
-      await new Promise((resolve2) => setTimeout(resolve2, LOCK_RETRY_MS));
+      await new Promise((resolve3) => setTimeout(resolve3, LOCK_RETRY_MS));
     }
   }
 }
@@ -47110,7 +47136,8 @@ function getVapiPaths(directory = process.env.VAPI_HOME?.trim() || join2(homedir
     keystore: join2(directory, "keystore.json"),
     receipts: join2(directory, "receipts.jsonl"),
     searches: join2(directory, "searches.jsonl"),
-    ledger: join2(directory, "spend-ledger.json")
+    ledger: join2(directory, "spend-ledger.json"),
+    updateCheck: join2(directory, "update-check.json")
   };
 }
 var getAgentCashPaths = getVapiPaths;
@@ -47956,7 +47983,7 @@ async function withAgentCredentialLock(wallets, clientId, operation) {
       if (Date.now() >= deadline) {
         throw httpError("Timed out waiting to update the agent credentials.");
       }
-      await new Promise((resolve2) => setTimeout(resolve2, 20));
+      await new Promise((resolve3) => setTimeout(resolve3, 20));
     }
   }
   try {
@@ -48109,7 +48136,7 @@ function splitScopes(scope) {
   return scope.split(/\s+/u).filter(Boolean);
 }
 async function sleepFor(milliseconds) {
-  await new Promise((resolve2) => setTimeout(resolve2, milliseconds));
+  await new Promise((resolve3) => setTimeout(resolve3, milliseconds));
 }
 
 // ../core/src/keystore.ts
@@ -69587,7 +69614,7 @@ function decryptWithKey(key2, sealed) {
   return Buffer.concat([decipher.update(sealed.ciphertext), decipher.final()]);
 }
 async function deriveScryptKey(passphrase, salt) {
-  return await new Promise((resolve2, reject) => {
+  return await new Promise((resolve3, reject) => {
     scrypt(
       passphrase,
       salt,
@@ -69603,7 +69630,7 @@ async function deriveScryptKey(passphrase, salt) {
           reject(error61);
           return;
         }
-        resolve2(derivedKey);
+        resolve3(derivedKey);
       }
     );
   });
@@ -69927,7 +69954,7 @@ async function promptForSecret(prompt, noTerminalHint) {
   stdin.setRawMode(true);
   stdin.resume();
   stdin.setEncoding("utf8");
-  return await new Promise((resolve2, reject) => {
+  return await new Promise((resolve3, reject) => {
     let value = "";
     const cleanup = () => {
       stdin.off("data", onData);
@@ -69944,7 +69971,7 @@ async function promptForSecret(prompt, noTerminalHint) {
         }
         if (character === "\r" || character === "\n") {
           cleanup();
-          resolve2(value);
+          resolve3(value);
           return;
         }
         if (character === "\x7F" || character === "\b") {
@@ -70006,7 +70033,7 @@ async function withAccountMovementLock(home, account, timeoutMs, operation, sign
       if (!(error61 instanceof Error && "code" in error61 && error61.code === "EEXIST")) throw error61;
       await removeStaleLock2(path);
       if (Date.now() >= deadline) throw new AccountMovementLockedError(account);
-      await new Promise((resolve2) => setTimeout(resolve2, 20));
+      await new Promise((resolve3) => setTimeout(resolve3, 20));
     }
   }
   const ownedHandle = handle;
@@ -70374,7 +70401,7 @@ function windowsDataProtectionStore(platform2, run, env, installed) {
   };
 }
 function libsecretStore(platform2, run, installed) {
-  const lookup = async (name) => {
+  const lookup2 = async (name) => {
     const result = await run(SECRET_TOOL_BINARY, [
       "lookup",
       "service",
@@ -70393,9 +70420,9 @@ function libsecretStore(platform2, run, installed) {
     available: installed(SECRET_TOOL_BINARY),
     platform: platform2,
     description: "the libsecret keyring",
-    get: lookup,
+    get: lookup2,
     async has(name) {
-      return await lookup(name) !== void 0;
+      return await lookup2(name) !== void 0;
     },
     async set(name, passphrase) {
       requirePassphrase(passphrase);
@@ -70417,7 +70444,7 @@ function libsecretStore(platform2, run, installed) {
       requireSuccess(result, `store the passphrase of ${name} in the secret service`);
     },
     async remove(name) {
-      const existed = await lookup(name) !== void 0;
+      const existed = await lookup2(name) !== void 0;
       const result = await run(SECRET_TOOL_BINARY, [
         "clear",
         "service",
@@ -70477,14 +70504,14 @@ function requireSuccess(result, what) {
 function withoutTrailingNewline(value) {
   return value.replace(/\r?\n$/u, "");
 }
-var spawnRunner = async (file2, args, input2) => await new Promise((resolve2) => {
+var spawnRunner = async (file2, args, input2) => await new Promise((resolve3) => {
   let stdout = "";
   let stderr2 = "";
   let settled = false;
   const finish = (outcome) => {
     if (settled) return;
     settled = true;
-    resolve2(outcome);
+    resolve3(outcome);
   };
   const child = spawn(file2, [...args], {
     detached: true,
@@ -71447,7 +71474,7 @@ async function withVaultLock(path, operation) {
       if (Date.now() >= deadline) {
         throw new VaultError("corrupt", "Timed out waiting for the vault lock.");
       }
-      await new Promise((resolve2) => setTimeout(resolve2, 20));
+      await new Promise((resolve3) => setTimeout(resolve3, 20));
     }
   }
   try {
@@ -71480,6 +71507,8 @@ var VAULT_KEY_ACCOUNT = "vault-key";
 var VAULT_SESSION_ACCOUNT = "vault-session";
 var DEVICE_KEY_LENGTH = 32;
 var DEFAULT_SESSION_HOURS = 8;
+var RESTORE_GAP_LIMIT = 5;
+var MAX_RESTORE_ACCOUNTS = 1e4;
 var BASE64_PATTERN = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u;
 var deviceKeyOperations = Promise.resolve();
 var sessionSchema = external_exports.object({
@@ -71629,26 +71658,41 @@ async function restoreVault(args) {
     throw new VaultError("corrupt", "That recovery phrase is not valid.", { cause: error61 });
   }
   let seed;
-  let discoveredAccounts = 0;
+  if (args.accountCount !== void 0 && (!Number.isSafeInteger(args.accountCount) || args.accountCount < 1 || args.accountCount > MAX_RESTORE_ACCOUNTS)) {
+    throw new VaultError(
+      "corrupt",
+      `Account count must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  let discoveredAccounts = args.accountCount ?? 0;
+  let scannedAddresses = 0;
   try {
     seed = phraseToSeed(phrase);
   } catch (error61) {
     throw asVaultError2(error61, "Unable to derive an account while restoring the vault.");
   }
   try {
-    for (let index2 = 0; ; index2 += 1) {
+    for (let index2 = 0, emptyRun = 0; args.accountCount === void 0; index2 += 1) {
       let address4;
       try {
         address4 = privateKeyToAccount(deriveEvmPrivateKey(seed, `m/44'/60'/0'/0/${index2}`)).address;
       } catch (error61) {
         throw asVaultError2(error61, "Unable to derive an account while restoring the vault.");
       }
-      if (!await args.probe(address4)) break;
-      discoveredAccounts += 1;
+      const funded = await args.probe(address4);
+      scannedAddresses += 1;
+      if (funded) {
+        discoveredAccounts = index2 + 1;
+        emptyRun = 0;
+      } else {
+        emptyRun += 1;
+        if (emptyRun === RESTORE_GAP_LIMIT) break;
+      }
     }
   } finally {
     seed.fill(0);
   }
+  args.onScanComplete?.(scannedAddresses);
   let vault;
   try {
     vault = await createVault({ path: args.path, key: args.key, phrase, now: args.now });
@@ -72137,6 +72181,26 @@ var WalletStore = class _WalletStore {
       }
     );
   }
+  /** Checks a cached signer's current vault session without decrypting its account again. */
+  async assertSigningAuthority(name) {
+    const stored = await this.readVaultUnlocked();
+    if (!stored?.protected || !stored.accounts.some((account) => account.name === name)) return;
+    try {
+      const key2 = await unlockProtectedVault({
+        path: this.vaultPath,
+        secrets: this.secrets,
+        env: this.environment,
+        now: () => this.now()
+      });
+      key2.fill(0);
+    } catch (error61) {
+      this.dropVaultCache();
+      if (error61 instanceof VaultError && error61.code === "password_required") {
+        throw new KeystoreError(VAULT_LOCKED_MESSAGE, { cause: error61 });
+      }
+      throw error61;
+    }
+  }
   /** Returns one wallet's vault signer, migrating its legacy keystore if needed. */
   async unlock(name, passphrase) {
     const wallet = this.resolve({ name });
@@ -73143,7 +73207,7 @@ async function withRegistryLock(path, operation) {
       if (Date.now() >= deadline) {
         throw new KeystoreError("Timed out waiting for the wallet registry lock.");
       }
-      await new Promise((resolve2) => setTimeout(resolve2, 20));
+      await new Promise((resolve3) => setTimeout(resolve3, 20));
     }
   }
   try {
@@ -73489,11 +73553,11 @@ function publicErrorMessage(error61, fallback, sensitiveValues = []) {
   return error61 instanceof Error ? message : fallback;
 }
 async function unrefSleep(milliseconds, signal) {
-  await new Promise((resolve2) => {
+  await new Promise((resolve3) => {
     const finish = () => {
       clearTimeout(timer);
       signal?.removeEventListener("abort", finish);
-      resolve2();
+      resolve3();
     };
     const timer = setTimeout(finish, milliseconds);
     timer.unref();
@@ -74030,7 +74094,7 @@ async function withLedgerLock(path, operation) {
       if (Date.now() >= deadline) {
         throw new Error("Timed out waiting for the spend ledger lock.");
       }
-      await new Promise((resolve2) => setTimeout(resolve2, 20));
+      await new Promise((resolve3) => setTimeout(resolve3, 20));
     }
   }
   try {
@@ -74664,7 +74728,7 @@ async function withTransferLock(context, nonce, operation) {
       if (Date.now() >= deadline) {
         throw new Error("Timed out waiting for the transfer lock.");
       }
-      await new Promise((resolve2) => setTimeout(resolve2, 20));
+      await new Promise((resolve3) => setTimeout(resolve3, 20));
     }
   }
   try {
@@ -76382,8 +76446,8 @@ async function sweepAllAboveCeiling(args) {
 }
 var pendingCeilingSweeps = /* @__PURE__ */ new Set();
 function scheduleCeilingSweep(hook) {
-  const task = new Promise((resolve2) => {
-    setTimeout(resolve2, 0);
+  const task = new Promise((resolve3) => {
+    setTimeout(resolve3, 0);
   }).then(async () => {
     const timeoutMs = hook.timeoutMs ?? CEILING_SWEEP_TIMEOUT_MS;
     const controller = new AbortController();
@@ -76423,8 +76487,8 @@ async function drainCeilingSweeps(timeoutMs = CEILING_SWEEP_TIMEOUT_MS) {
   try {
     await Promise.race([
       Promise.allSettled(pending),
-      new Promise((resolve2) => {
-        timeout = setTimeout(resolve2, timeoutMs);
+      new Promise((resolve3) => {
+        timeout = setTimeout(resolve3, timeoutMs);
       })
     ]);
   } finally {
@@ -77523,7 +77587,7 @@ function createRunBudget(args) {
 import { mkdir as mkdir15, writeFile as writeFile8 } from "node:fs/promises";
 import { arch, platform, release } from "node:os";
 import { join as join13 } from "node:path";
-var VAPI_CLIENT_VERSION = "0.9.2";
+var VAPI_CLIENT_VERSION = "0.9.5";
 async function createSupportReport(options) {
   const message = options.message.trim();
   if (!message) throw new Error("Support report message must not be empty.");
@@ -77796,7 +77860,7 @@ async function completeX402Payment(args) {
   let paidAttempt;
   const requestStarted = nowMs();
   try {
-    paidAttempt = await args.send(paidRequest);
+    paidAttempt = await args.send(paidRequest, quote);
   } catch (error61) {
     if (trace) trace.phases.requestMs = elapsed(nowMs, requestStarted);
     throw settlementUnknown(
@@ -77814,7 +77878,7 @@ async function completeX402Payment(args) {
   const settleStarted = nowMs();
   const settlement = parseSettlementResponse(paidResponse.headers);
   const settlementOutcome = classifySettlement(settlement);
-  const receiptSettlement = sanitizeReceiptValue(settlement, receiptSecrets);
+  const receiptSettlement = sanitizeReturnedValue(settlement, receiptSecrets);
   if (trace) {
     const transaction2 = settlementTransaction(receiptSettlement);
     const explorerUrl = transaction2 ? explorerTransactionUrl(quote.accepted.network, transaction2) : void 0;
@@ -77891,6 +77955,7 @@ async function completeX402Payment(args) {
           trace.phases.requestMs = (trace.phases.requestMs ?? 0) + elapsed(nowMs, bodyStarted);
         }
       }
+      body = sanitizeReturnedValue(body, receiptSecrets);
     }
     const result = {
       response: paidResponse,
@@ -77899,7 +77964,11 @@ async function completeX402Payment(args) {
       quote,
       payer,
       ...payment.paymentId ? { paymentId: payment.paymentId } : {},
-      settlement,
+      paymentProof: sanitizeReturnedValue(
+        paidResponse.headers.get("x-vapi-payment-proof"),
+        receiptSecrets
+      ),
+      settlement: receiptSettlement,
       settlementOutcome
     };
     if (settlementOutcome === "succeeded" && args.ceilingSweep) {
@@ -78036,19 +78105,70 @@ function sanitizeThrownError(error61, secrets) {
   }
   return new Error(message, cause === void 0 ? void 0 : { cause });
 }
-function sanitizeReceiptValue(value, secrets, depth = 0) {
+function sanitizeReturnedValue(value, secrets) {
   if (typeof value === "string") return redactKnownSecrets(value, secrets);
-  if (value === null || typeof value !== "object") return value;
-  if (depth >= 16) return "[redacted nested settlement value]";
-  if (Array.isArray(value)) {
-    return value.map((item) => sanitizeReceiptValue(item, secrets, depth + 1));
+  if (!isPlainReturnedContainer(value)) return value;
+  const nodes = /* @__PURE__ */ new WeakMap();
+  const ordered = [];
+  const nodeFor = (source) => {
+    const existing = nodes.get(source);
+    if (existing) return existing;
+    const copy = Array.isArray(source) ? new Array(source.length) : Object.create(Object.getPrototypeOf(source));
+    const node2 = { source, copy, parents: /* @__PURE__ */ new Set(), changed: false };
+    nodes.set(source, node2);
+    ordered.push(node2);
+    return node2;
+  };
+  const root = nodeFor(value);
+  for (let index2 = 0; index2 < ordered.length; index2 += 1) {
+    const node2 = ordered[index2];
+    for (const [key2, item] of Object.entries(node2.source)) {
+      const safeKey = Array.isArray(node2.source) ? key2 : redactKnownSecrets(key2, secrets);
+      if (safeKey !== key2) node2.changed = true;
+      if (typeof item === "string") {
+        const safeItem = redactKnownSecrets(item, secrets);
+        defineReturnedProperty(node2.copy, safeKey, safeItem);
+        if (safeItem !== item) node2.changed = true;
+      } else if (isPlainReturnedContainer(item)) {
+        const child = nodeFor(item);
+        child.parents.add(node2);
+        defineReturnedProperty(node2.copy, safeKey, child.copy);
+      } else {
+        defineReturnedProperty(node2.copy, safeKey, item);
+      }
+    }
   }
-  return Object.fromEntries(
-    Object.entries(value).map(([key2, item]) => [
-      redactKnownSecrets(key2, secrets),
-      sanitizeReceiptValue(item, secrets, depth + 1)
-    ])
-  );
+  const changed = ordered.filter((node2) => node2.changed);
+  for (let index2 = 0; index2 < changed.length; index2 += 1) {
+    for (const parent of changed[index2].parents) {
+      if (parent.changed) continue;
+      parent.changed = true;
+      changed.push(parent);
+    }
+  }
+  for (const node2 of ordered) {
+    for (const [key2, item] of Object.entries(node2.source)) {
+      if (!isPlainReturnedContainer(item)) continue;
+      const safeKey = Array.isArray(node2.source) ? key2 : redactKnownSecrets(key2, secrets);
+      const child = nodes.get(item);
+      defineReturnedProperty(node2.copy, safeKey, child.changed ? child.copy : item);
+    }
+  }
+  return root.changed ? root.copy : value;
+}
+function defineReturnedProperty(target, key2, value) {
+  Object.defineProperty(target, key2, {
+    value,
+    enumerable: true,
+    configurable: true,
+    writable: true
+  });
+}
+function isPlainReturnedContainer(value) {
+  if (Array.isArray(value)) return true;
+  if (value === null || typeof value !== "object") return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
 }
 function redactKnownSecrets(value, secrets) {
   let redacted = value;
@@ -78083,9 +78203,7 @@ function possibleSettlement(quote, payment, payer, receipt) {
     payTo: quote.accepted.payTo,
     payer,
     ...payment.paymentId ? { paymentId: payment.paymentId } : {},
-    ...isSvmPaymentRequirements(quote.accepted) ? {
-      authorizationTransaction: "transaction" in payment.payload.payload ? payment.payload.payload.transaction : ""
-    } : "authorization" in payment.payload.payload ? {
+    ...isSvmPaymentRequirements(quote.accepted) ? {} : "authorization" in payment.payload.payload ? {
       authorizationNonce: payment.payload.payload.authorization.nonce,
       authorizationExpiresAt: payment.payload.payload.authorization.validBefore
     } : {},
@@ -78463,13 +78581,22 @@ async function sendRouterChat(deps, routerBaseUrl, routerKey, request, keyUsed)
   }
   const body = await responseText(response);
   if (!response.ok) {
-    if (response.status === 429 || body.includes("Budget has been exceeded") || body.includes("ExceededBudget")) {
+    if (/budget (?:has been )?exceeded|exceededbudget/iu.test(body)) {
       throw new RouterClientError(
         "budget_exhausted",
         "The Router key has no remaining budget.",
         response.status
       );
     }
+    if (response.status === 429) {
+      const retryAfter = response.headers.get("retry-after")?.trim();
+      const retrySeconds = retryAfter !== void 0 && /^\d+$/u.test(retryAfter) ? Number(retryAfter) : void 0;
+      throw new RouterClientError(
+        "rate_limited",
+        `The vAPI Router is rate limited. ${retrySeconds !== void 0 && Number.isFinite(retrySeconds) ? `Retry after ${retrySeconds} seconds.` : "Wait and retry shortly."}`,
+        response.status
+      );
+    }
     if (response.status === 401) {
       throw new RouterClientError(
         "no_router_key",
@@ -81166,7 +81293,7 @@ var authorizationTypes = {
 function createTasksChain(options) {
   const { account, client, pending, rpcFor } = options;
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
-  const sleep = options.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms)));
+  const sleep = options.sleep ?? ((ms) => new Promise((resolve3) => setTimeout(resolve3, ms)));
   const randomBytes17 = options.randomBytes ?? cryptoRandomBytes2;
   const confirmations = options.confirmations ?? 2;
   if (!Number.isSafeInteger(confirmations) || confirmations < 1)
@@ -81971,7 +82098,7 @@ async function waitForMilestone(client, input2) {
     throw new RangeError("The milestone wait timeout must be non-negative and finite.");
   if (!Number.isFinite(intervalMs) || intervalMs <= 0)
     throw new RangeError("The milestone wait interval must be positive and finite.");
-  const sleep = input2.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms)));
+  const sleep = input2.sleep ?? ((ms) => new Promise((resolve3) => setTimeout(resolve3, ms)));
   const now = input2.now ?? (() => /* @__PURE__ */ new Date());
   const started = now().getTime();
   const deadline = started + timeoutMs;
@@ -86573,10 +86700,10 @@ async function buildStatus(deps) {
   const timers = deps.timers ?? { setTimeout, clearTimeout };
   const controller = new AbortController();
   let timeout;
-  const deadline = new Promise((resolve2) => {
+  const deadline = new Promise((resolve3) => {
     timeout = timers.setTimeout(() => {
       controller.abort(new Error("Status request deadline exceeded."));
-      resolve2();
+      resolve3();
     }, deps.timeoutMs ?? STATUS_TIMEOUT_MS);
   });
   try {
@@ -87055,6 +87182,12 @@ function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/cli.ts
+import { spawn as spawn3 } from "node:child_process";
+import { stat as stat16 } from "node:fs/promises";
+import { join as join28 } from "node:path";
+import { createInterface as createInterface3 } from "node:readline/promises";
+
 // ../core/src/member-bundle.ts
 var MEMBER_BUNDLE_MAX_BYTES = 32 * 1024;
 var REMOTE_BLOCKED_GRANTS = /* @__PURE__ */ new Set([
@@ -87746,12 +87879,13 @@ var BODY_HEADER_NAMES = [
   "content-type"
 ];
 async function callService(args) {
+  validateTimeoutSeconds(args.input.timeoutSeconds);
   const trace = createCallTrace(args);
   let execution;
   try {
     execution = await executeCallService(args, trace);
   } catch (error61) {
-    if (!(error61 instanceof VapiCallError && error61.code === "unsupported_network")) {
+    if (!(error61 instanceof VapiCallError && (error61.code === "unsupported_network" || error61.code === "unsupported_payment"))) {
       await recordCallError(args, error61, trace).catch(() => void 0);
     }
     throw error61;
@@ -87865,6 +87999,8 @@ async function executeCallService(args, trace) {
     body: method === "GET" || method === "HEAD" ? void 0 : requestBody
   });
   const request = createRequest(headers);
+  const probeTimeoutMs = input2.timeoutSeconds === void 0 ? args.timeoutMs ?? 3e4 : Math.min(input2.timeoutSeconds, 30) * 1e3;
+  let requestTimeoutMs = probeTimeoutMs;
   const fetchWithGuardedRedirects = async (candidateRequest, followRedirects = true) => {
     let currentRequest = candidateRequest;
     let followedRedirects = 0;
@@ -87872,7 +88008,7 @@ async function executeCallService(args, trace) {
       const attempt = await fetchAttempt(
         fetchImpl,
         new Request(currentRequest.clone(), { redirect: "manual" }),
-        args.timeoutMs ?? 3e4
+        requestTimeoutMs
       );
       const response = attempt.response;
       if (!isRedirectStatus2(response.status)) {
@@ -88027,7 +88163,12 @@ async function executeCallService(args, trace) {
       account,
       caps: args.spendCaps ?? config2.spendCaps,
       config: payableConfig(config2, account),
-      send: async (paidRequest) => {
+      send: async (paidRequest, quote) => {
+        requestTimeoutMs = paidRequestTimeoutMs(
+          input2.timeoutSeconds,
+          args.timeoutMs,
+          quote.accepted.maxTimeoutSeconds
+        );
         paidAttempt = await fetchWithGuardedRedirects(paidRequest, false);
         return paidAttempt;
       },
@@ -88066,7 +88207,7 @@ async function executeCallService(args, trace) {
         asset: completed.quote.accepted.asset,
         payTo: completed.quote.accepted.payTo,
         settlement: settlementWithExplorer2(completed.settlement, completed.quote.accepted.network),
-        proof: completed.response.headers.get("x-vapi-payment-proof")
+        proof: completed.paymentProof
       },
       ...verificationFor(endpoint),
       ...expectedRequestFor(endpoint, completed.response.status)
@@ -88313,8 +88454,16 @@ async function resolveCallEndpoint(id2, endpointName, marketplaceHit, config2, f
   );
 }
 function registeredEndpoint(listing, verification) {
+  const { payment, ...endpoint } = listing.endpoint;
+  if (payment && (typeof payment.protocol === "string" || typeof payment.network !== "string")) {
+    throw new VapiCallError(
+      "unsupported_payment",
+      `Payment protocol ${payment.protocol} is not supported. This client pays x402 exact USDC endpoints only.`
+    );
+  }
   return {
-    ...listing.endpoint,
+    ...endpoint,
+    ...payment ? { payment: { network: payment.network, payTo: payment.payTo } } : {},
     verification: verification ?? listing.service.verification,
     serviceNetworks: listing.service.networks,
     registered: true,
@@ -88476,7 +88625,7 @@ async function readResponseBody2(response) {
 async function fetchAttempt(fetchImpl, request, timeoutMs) {
   const controller = new AbortController();
   let rejectTimeout = null;
-  const timeoutError = new Error(`API request timed out after ${timeoutMs}ms.`);
+  const timeoutError = new Error(`API request timed out after ${timeoutMs / 1e3} seconds.`);
   const timedOut = new Promise((_resolve, reject) => {
     rejectTimeout = reject;
   });
@@ -88516,6 +88665,19 @@ async function fetchAttempt(fetchImpl, request, timeoutMs) {
     throw error61;
   }
 }
+function validateTimeoutSeconds(timeoutSeconds) {
+  if (timeoutSeconds !== void 0 && (!Number.isInteger(timeoutSeconds) || timeoutSeconds < 1 || timeoutSeconds > 300)) {
+    throw new Error("call timeoutSeconds must be an integer from 1 to 300 seconds.");
+  }
+}
+function paidRequestTimeoutMs(timeoutSeconds, internalTimeoutMs, offerTimeoutSeconds) {
+  const usableOfferTimeout = Number.isInteger(offerTimeoutSeconds) && offerTimeoutSeconds > 0 ? offerTimeoutSeconds : void 0;
+  if (timeoutSeconds !== void 0) {
+    return Math.min(timeoutSeconds, usableOfferTimeout ?? timeoutSeconds) * 1e3;
+  }
+  if (internalTimeoutMs !== void 0) return internalTimeoutMs;
+  return usableOfferTimeout === void 0 ? 12e4 : Math.min(12e4, Math.max(3e4, usableOfferTimeout * 1e3));
+}
 function mapX402PaymentError(error61, resumeId) {
   if (!(error61 instanceof X402PaymentError)) return error61;
   if (error61.code === "payment_rejected") {
@@ -88531,9 +88693,10 @@ function mapX402PaymentError(error61, resumeId) {
     });
   }
   const resume = resumeId !== void 0 && error61.possibleSettlement?.authorizationNonce ? ` Check whether it settled with \`vapi pay --resume ${resumeId}\` before paying again.` : "";
+  const timeoutDetail = error61.cause instanceof Error && error61.cause.message.startsWith("API request timed out after ") ? `${error61.cause.message} ` : "";
   return new VapiCallError(
     "settlement_unknown",
-    `${error61.message}${resume}`,
+    `${timeoutDetail}${error61.message}${resume}`,
     error61.possibleSettlement,
     { cause: error61.cause }
   );
@@ -88665,13 +88828,7 @@ var inspectToolResultSchema = external_exports.object({
   liveness: listingLivenessSchema.optional(),
   conformance: listingConformanceSchema.optional(),
   identity: listingIdentitySchema.optional(),
-  payment: external_exports.object({
-    scheme: external_exports.literal("exact"),
-    network: external_exports.string(),
-    asset: external_exports.string(),
-    payTo: external_exports.string(),
-    checkedAt: external_exports.string()
-  }).nullable()
+  payment: discoveryEndpointSchema.shape.payment.unwrap().nullable()
 });
 var callSearchInputSchema = external_exports.object({
   query: external_exports.string().trim().max(200).optional().describe("Capability, API, service, or request."),
@@ -88700,7 +88857,10 @@ var callPayInputSchema = external_exports.object({
     (value) => /^0x[0-9a-fA-F]{40}$/.test(value) || isSolanaAddress(value),
     "Expected an EVM or Solana address."
   ).optional(),
-  maxPriceUsd: external_exports.union([external_exports.number().nonnegative(), external_exports.string().regex(/^\d+(?:\.\d{1,6})?$/)]).optional()
+  maxPriceUsd: external_exports.union([external_exports.number().nonnegative(), external_exports.string().regex(/^\d+(?:\.\d{1,6})?$/)]).optional(),
+  timeoutSeconds: external_exports.number().int().min(1).max(300).optional().describe(
+    "Seconds to wait for the paid response. Default: the provider's maxTimeoutSeconds, at most 120."
+  )
 });
 var callSearch = defineAction({
   name: "call.search",
@@ -88963,7 +89123,7 @@ async function readResult(response, signal, secrets = []) {
   return {
     status: response.status,
     contentType: contentType === null ? null : redactKnownSecrets2(contentType, secrets),
-    body: sanitizeReturnedValue(await readResponseBody3(response, contentType, signal), secrets)
+    body: sanitizeReturnedValue2(await readResponseBody3(response, contentType, signal), secrets)
   };
 }
 async function readResponseBody3(response, contentType, signal) {
@@ -89008,17 +89168,17 @@ function isJsonContentType2(value) {
   const mediaType = value?.split(";", 1)[0]?.trim().toLowerCase() ?? "";
   return mediaType === "application/json" || mediaType.endsWith("+json");
 }
-function sanitizeReturnedValue(value, secrets, depth = 0) {
+function sanitizeReturnedValue2(value, secrets, depth = 0) {
   if (typeof value === "string") return redactKnownSecrets2(value, secrets);
   if (value === null || typeof value !== "object") return value;
   if (depth >= 16) return "[redacted nested response value]";
   if (Array.isArray(value)) {
-    return value.map((item) => sanitizeReturnedValue(item, secrets, depth + 1));
+    return value.map((item) => sanitizeReturnedValue2(item, secrets, depth + 1));
   }
   return Object.fromEntries(
     Object.entries(value).map(([key2, item]) => [
       redactKnownSecrets2(key2, secrets),
-      sanitizeReturnedValue(item, secrets, depth + 1)
+      sanitizeReturnedValue2(item, secrets, depth + 1)
     ])
   );
 }
@@ -94524,7 +94684,13 @@ function toolError(error61) {
     {
       error: error61.message,
       code: error61.code,
-      ...error61.possibleSettlement ? { possibleSettlement: error61.possibleSettlement } : {},
+      ...error61.possibleSettlement ? {
+        possibleSettlement: Object.fromEntries(
+          Object.entries(error61.possibleSettlement).filter(
+            ([key2]) => key2 !== "authorizationTransaction"
+          )
+        )
+      } : {},
       ...error61.paymentRejection ? { paymentRejection: error61.paymentRejection } : {},
       ...error61.confirmedSettlement ? { confirmedSettlement: error61.confirmedSettlement } : {}
     },
@@ -94706,6 +94872,9 @@ function rgbToAnsi256(red, green, blue) {
 import { readFile as readFile24, stat as stat14 } from "node:fs/promises";
 import { join as join21 } from "node:path";
 
+// src/dashboard.ts
+import { resolve as resolve2 } from "node:path";
+
 // src/publish-client.ts
 var LISTING_CATEGORIES = ["ai", "data", "crypto", "compute", "search"];
 var PROBE_MODES = ["origin", "endpoint", "openapi"];
@@ -95026,7 +95195,8 @@ async function runLoginFlow(argv, json2, io, dependencies, options = {}) {
     booleanOptions: /* @__PURE__ */ new Set(["--publish", "--no-browser"]),
     maximumPositionals: 0
   });
-  const target = await targetWallet(parsed, dependencies);
+  const paths = getVapiPaths(options.home);
+  const target = await targetWallet(parsed, dependencies, paths.directory);
   const { account } = await unlockTarget(target, dependencies);
   const label = parsed.one("--label") ?? target.name;
   const scopes = [
@@ -95035,13 +95205,13 @@ async function runLoginFlow(argv, json2, io, dependencies, options = {}) {
     "tasks:write",
     ...parsed.has("--publish") ? ["call.publish"] : []
   ];
-  const config2 = await loadConfig(getVapiPaths().config, process.env, { notice: io.stderr });
-  const apiBase = registryBaseUrl(config2);
+  const config2 = await loadConfig(paths.config, process.env, { notice: io.stderr });
+  const apiBase = options.apiBase ?? registryBaseUrl(config2);
   const fetchImpl = dependencies.fetchImpl ?? createPublicFetch({ allowPrivateNetwork: false });
   const secrets = getSecretStore(dependencies);
   const device = await ensureDeviceName({
     env: getEnvironment(dependencies),
-    configPath: getVapiPaths().config,
+    configPath: paths.config,
     ...dependencies.hostname === void 0 ? {} : { hostname: dependencies.hostname() }
   });
   const bearer = await trustedLinkBearer({
@@ -95295,6 +95465,87 @@ function shortAddress(address4) {
   return address4.length <= 12 ? address4 : `${address4.slice(0, 6)}\u2026${address4.slice(-4)}`;
 }
 
+// src/dashboard.ts
+function dashboardUrl(apiBase) {
+  return `${apiBase.replace(/\/+$/u, "")}/agents`;
+}
+async function offerDashboardLink({
+  name,
+  json: json2,
+  noLink = false,
+  io,
+  dependencies,
+  home = getVapiPaths().directory,
+  apiBase
+}) {
+  const otherHome = resolve2(home) !== resolve2(getVapiPaths().directory);
+  const command = `${otherHome ? `VAPI_HOME=${shellQuote(home)} ` : ""}${apiBase === void 0 ? "" : `VAPI_REGISTRY_URL=${shellQuote(apiBase)} `}vapi login --account ${name}`;
+  const unlinked = {
+    linked: false,
+    next: [{ kind: "link", account: name, command }]
+  };
+  const hint = () => {
+    if (!json2) io.stdout(`Run \`${command}\` to see this wallet on your dashboard.`);
+    return unlinked;
+  };
+  try {
+    const store = await WalletStore.open(home, {
+      secrets: getSecretStore(dependencies),
+      env: getEnvironment(dependencies)
+    });
+    if (store.entry(name)?.link !== void 0) return { linked: true };
+    if (noLink || json2 || !isInteractive(dependencies) || activeAgentMarker(getEnvironment(dependencies)) !== void 0) {
+      return hint();
+    }
+    const answer = (await getLinePrompt(dependencies)(`Link ${name} to your vAPI dashboard? [Y/n] `)).trim();
+    if (!/^(?:y|yes)?$/iu.test(answer)) return hint();
+    await runLoginFlow(["--account", name, "--label", name], false, io, dependencies, {
+      home,
+      ...apiBase === void 0 ? {} : { apiBase }
+    });
+    await store.reload();
+    const link3 = store.entry(name)?.link;
+    if (link3 === void 0) return hint();
+    io.stdout(`See it on your dashboard: ${dashboardUrl(link3.apiBase)}`);
+    return { linked: true };
+  } catch (error61) {
+    if (!json2) {
+      io.stderr(`Link not completed: ${error61 instanceof Error ? error61.message : String(error61)}`);
+    }
+    return hint();
+  }
+}
+async function dashboardCommand(argv, json2, io, dependencies) {
+  const parsed = parseArguments(argv, {
+    valueOptions: /* @__PURE__ */ new Set(["--wallet"]),
+    booleanOptions: /* @__PURE__ */ new Set(["--no-browser", "--no-link"]),
+    maximumPositionals: 0
+  });
+  const target = await targetWallet(parsed, dependencies);
+  let status = { linked: true };
+  if (target.entry.link === void 0) {
+    if (!json2) io.stdout(`${target.name} is not linked to your vAPI dashboard yet.`);
+    status = await offerDashboardLink({
+      name: target.name,
+      json: json2,
+      noLink: parsed.has("--no-link"),
+      io,
+      dependencies: parsed.has("--no-browser") ? { ...dependencies, openUrl: () => false } : dependencies
+    });
+  }
+  await target.store.reload();
+  const apiBase = target.store.entry(target.name)?.link?.apiBase ?? registryBaseUrl(await readConfig(getVapiPaths().config, io));
+  const url2 = dashboardUrl(apiBase);
+  let opened = false;
+  if (status.linked && !parsed.has("--no-browser") && (dependencies.interactive ?? Boolean(process.stdout.isTTY)) && activeAgentMarker(getEnvironment(dependencies)) === void 0) {
+    opened = (dependencies.openUrl ?? openInBrowser)(url2);
+  }
+  io.stdout(json2 ? JSON.stringify({ account: target.name, url: url2, ...status, opened }) : url2);
+}
+function shellQuote(value) {
+  return /^[a-zA-Z0-9_./-]+$/u.test(value) ? value : `'${value.replace(/'/gu, "'\\''")}'`;
+}
+
 // src/status.ts
 import { stat as stat13 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
@@ -97680,10 +97931,10 @@ function apiEndpoint2(apiBase, path) {
 }
 async function sleepFor2(milliseconds, signal) {
   if (signal?.aborted === true) throw signal.reason;
-  await new Promise((resolve2, reject) => {
+  await new Promise((resolve3, reject) => {
     const finish = () => {
       signal?.removeEventListener("abort", abort);
-      resolve2();
+      resolve3();
     };
     const timeout = setTimeout(finish, milliseconds);
     const abort = () => {
@@ -98018,7 +98269,7 @@ async function readProcessStdin() {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.9.2";
+var CLI_VERSION = "0.9.5";
 
 // src/status.ts
 async function statusCommand(argv, json2, io, dependencies) {
@@ -98162,10 +98413,10 @@ async function runStatusSweep(args) {
         timeoutMs,
         ...args.warn === void 0 ? {} : { warn: args.warn }
       }),
-      new Promise((resolve2) => {
+      new Promise((resolve3) => {
         timeout = setTimeout(() => {
           controller.abort();
-          resolve2();
+          resolve3();
         }, timeoutMs);
         timeout.unref();
       })
@@ -98394,7 +98645,7 @@ async function siblingsFetchImpl(dependencies) {
 function shortAddress3(address4) {
   return address4.length <= 12 ? address4 : `${address4.slice(0, 6)}\u2026${address4.slice(-4)}`;
 }
-async function accountsAddCommand(argv, json2, io, dependencies) {
+async function accountsAddCommand(argv, json2, io, dependencies, options = { link: "always" }) {
   const parsed = parseArguments(argv, {
     valueOptions: /* @__PURE__ */ new Set(["--label"]),
     booleanOptions: /* @__PURE__ */ new Set(["--no-link"]),
@@ -98411,6 +98662,18 @@ async function accountsAddCommand(argv, json2, io, dependencies) {
   });
   await recordAudit(dependencies, "wallet.create", { wallet: created.account });
   const address4 = created.address;
+  if (options.link === "offer") {
+    if (!json2) io.stdout(`Account ${created.account} derived: ${address4}`);
+    const link3 = await offerDashboardLink({
+      name: created.account,
+      json: json2,
+      noLink: parsed.has("--no-link"),
+      io,
+      dependencies
+    });
+    if (json2) io.stdout(JSON.stringify({ account: created.account, address: address4, ...link3 }));
+    return;
+  }
   if (parsed.has("--no-link")) {
     output2(
       io,
@@ -99226,10 +99489,10 @@ async function autoUploadBackup(io, json2, dependencies) {
   const timeoutMs = dependencies.cloudBackup?.uploadTimeoutMs ?? DEFAULT_UPLOAD_TIMEOUT_MS;
   const controller = new AbortController();
   let timer;
-  const timeout = new Promise((resolve2) => {
+  const timeout = new Promise((resolve3) => {
     timer = setTimeout(() => {
       controller.abort();
-      resolve2({ status: "skipped", reason: "timeout" });
+      resolve3({ status: "skipped", reason: "timeout" });
     }, timeoutMs);
     timer.unref();
   });
@@ -100453,7 +100716,7 @@ var HTTP_NOT_FOUND_PATTERN = /\b404\b/u;
 var OTHER_SCOPE_PATTERN = /\b(?:project|environment|service|workspace|team|token|user|account|volume|deployment|command|file|directory|module|package)s?\b/iu;
 var SIDECAR_SUFFIX = ".railway.json";
 var MINIMUM_SECRET_LENGTH = 8;
-var defaultRailwayExec = (file2, args) => new Promise((resolve2, reject) => {
+var defaultRailwayExec = (file2, args) => new Promise((resolve3, reject) => {
   const child = spawn2(file2, [...args], {
     stdio: ["ignore", "pipe", "pipe"],
     env: process.env,
@@ -100468,7 +100731,7 @@ var defaultRailwayExec = (file2, args) => new Promise((resolve2, reject) => {
     stderr2 += chunk;
   });
   child.once("error", reject);
-  child.once("close", (code) => resolve2({ code, stdout, stderr: stderr2 }));
+  child.once("close", (code) => resolve3({ code, stdout, stderr: stderr2 }));
 });
 function parseSandboxId(stdout) {
   const trimmed = stdout.trim();
@@ -100601,8 +100864,8 @@ function createRailwayRuntime(options) {
   const readyAttempts = options.readyAttempts ?? DEFAULT_RAILWAY_READY_ATTEMPTS;
   const readyIntervalMs = options.readyIntervalMs ?? DEFAULT_RAILWAY_READY_INTERVAL_MS;
   const signalDestroyTimeoutMs = options.signalDestroyTimeoutMs ?? DEFAULT_RAILWAY_SIGNAL_DESTROY_TIMEOUT_MS;
-  const sleep = options.sleep ?? ((milliseconds) => new Promise((resolve2) => {
-    setTimeout(resolve2, milliseconds);
+  const sleep = options.sleep ?? ((milliseconds) => new Promise((resolve3) => {
+    setTimeout(resolve3, milliseconds);
   }));
   let secrets = options.secrets;
   const getSecrets = () => secrets ??= secretStore();
@@ -101520,7 +101783,7 @@ function createLocalRuntime(options) {
   const processCommand = options.processCommand ?? defaultProcessCommand;
   const ownsProcess = (handle, pid) => processCommand(pid)?.includes(runResultPath(home, handle.runId)) === true;
   const closeFd = options.closeFd ?? closeSync2;
-  const readFile29 = options.readFile ?? nodeReadFile;
+  const readFile30 = options.readFile ?? nodeReadFile;
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   const openLog = options.openLog ?? ((path) => {
     mkdirSync2(runsDirectory(home), { recursive: true, mode: 448 });
@@ -101575,7 +101838,7 @@ function createLocalRuntime(options) {
       return handle;
     },
     async status(handle) {
-      const result = await readResultFile(readFile29, runResultPath(home, handle.runId));
+      const result = await readResultFile(readFile30, runResultPath(home, handle.runId));
       if (result !== void 0) return result;
       const pid = localPid(handle);
       if (pid === void 0 || handle.kind !== "local") {
@@ -101678,10 +101941,10 @@ function childArguments(member, run) {
     ...run.drawUsd ? ["--draw", run.drawUsd] : []
   ];
 }
-async function readResultFile(readFile29, path) {
+async function readResultFile(readFile30, path) {
   let text;
   try {
-    text = await readFile29(path, "utf8");
+    text = await readFile30(path, "utf8");
   } catch (error61) {
     if (hasCode3(error61, "ENOENT")) return void 0;
     return { state: "failed", detail: "unreadable result file" };
@@ -102455,7 +102718,7 @@ function usd(value, minimumDecimals = 0) {
 import { mkdir as mkdir20, readFile as readFile27, writeFile as writeFile11 } from "node:fs/promises";
 import { homedir as systemHomedir } from "node:os";
 import { dirname as dirname14, posix, win32 as win322 } from "node:path";
-var MCP_INSTALL_USAGE = "Usage: vapi mcp install <claude|cursor|codex> [--home <dir>] [--registry <url>] [--json]";
+var MCP_INSTALL_USAGE = "Usage: vapi mcp install <claude|cursor|codex> [--home <dir>] [--registry <url>] [--no-link] [--json]";
 var APPS = /* @__PURE__ */ new Set(["claude", "cursor", "codex"]);
 var NEXT_STEP = {
   claude: 'Restart Claude Desktop, then ask it: "Search vAPI for a weather API."',
@@ -102496,6 +102759,7 @@ function mcpInstallTarget(app, context) {
 async function mcpInstallCommand(argv, json2, io, dependencies) {
   const parsed = parseArguments(argv, {
     valueOptions: /* @__PURE__ */ new Set(["--home", "--registry"]),
+    booleanOptions: /* @__PURE__ */ new Set(["--no-link"]),
     maximumPositionals: 1
   });
   const appValue = parsed.positionals[0];
@@ -102517,13 +102781,39 @@ ${MCP_INSTALL_USAGE}`
   });
   const entry = serverEntry(home, registry2);
   const created = await writeMcpConfig(target, entry);
+  const name = await unlinkedDefaultAccount(home, dependencies);
+  const offerLink = (name2) => offerDashboardLink({
+    name: name2,
+    json: json2,
+    noLink: parsed.has("--no-link"),
+    io,
+    dependencies,
+    home,
+    apiBase: parsed.one("--registry")
+  });
+  const link3 = json2 && name !== void 0 ? await offerLink(name) : {};
   output3(
     io,
     json2,
-    { command: "mcp install", app: appValue, path: target.path, created, home, registry: registry2 },
+    { ...link3, command: "mcp install", app: appValue, path: target.path, created, home, registry: registry2 },
     `${created ? "Wrote" : "Updated"} ${target.path}.`
   );
-  if (!json2) io.stdout(NEXT_STEP[appValue]);
+  if (!json2) {
+    io.stdout(NEXT_STEP[appValue]);
+    if (name !== void 0) await offerLink(name);
+  }
+}
+async function unlinkedDefaultAccount(home, dependencies) {
+  try {
+    const store = await WalletStore.open(home, {
+      secrets: getSecretStore(dependencies),
+      env: getEnvironment(dependencies)
+    });
+    const name = store.defaultName;
+    if (name !== void 0 && store.resolve({ name }).entry.link === void 0) return name;
+  } catch {
+  }
+  return void 0;
 }
 function isMcpInstallApp(value) {
   return APPS.has(value);
@@ -102531,7 +102821,7 @@ function isMcpInstallApp(value) {
 function serverEntry(home, registry2) {
   return {
     command: "npx",
-    args: ["-y", "vapi-network", "mcp"],
+    args: ["-y", "vapi-network@latest", "mcp"],
     env: { VAPI_HOME: home, VAPI_REGISTRY_URL: registry2 }
   };
 }
@@ -102580,7 +102870,7 @@ function tomlConfig(existing, entry) {
   const block = [
     "[mcp_servers.vapi]",
     'command = "npx"',
-    'args = ["-y", "vapi-network", "mcp"]',
+    'args = ["-y", "vapi-network@latest", "mcp"]',
     `env = { VAPI_HOME = "${escapeToml(entry.env.VAPI_HOME)}", VAPI_REGISTRY_URL = "${escapeToml(entry.env.VAPI_REGISTRY_URL)}" }`,
     ""
   ].join("\n");
@@ -102747,13 +103037,13 @@ async function sendConfig(dependencies) {
 // src/setup.ts
 import { rm as rm5 } from "node:fs/promises";
 import { join as join26 } from "node:path";
-var SETUP_ARGUMENT_ERROR = "vapi setup accepts only --no-cloud-backup; a recovery phrase is typed at the prompt, never passed on the command line.";
+var SETUP_ARGUMENT_ERROR = `vapi setup accepts only --no-cloud-backup and --accounts <n> (1-${MAX_RESTORE_ACCOUNTS}); a recovery phrase is typed at the prompt, never passed on the command line.`;
 var VAULT_CHOICE = "Create a new vault, or restore one from a recovery phrase? [new/restore] ";
 async function setupCommand(argv, json2, io, dependencies) {
   let parsed;
   try {
     parsed = parseArguments(argv, {
-      valueOptions: /* @__PURE__ */ new Set(),
+      valueOptions: /* @__PURE__ */ new Set(["--accounts"]),
       booleanOptions: /* @__PURE__ */ new Set(["--no-cloud-backup"]),
       maximumPositionals: 0
     });
@@ -102764,6 +103054,7 @@ async function setupCommand(argv, json2, io, dependencies) {
   const paths = getVapiPaths();
   const steps = [];
   const humanIo = json2 ? stderrIo(io) : io;
+  const accountCount = parseAccountCount(parsed.one("--accounts"));
   if (!await fileExists2(paths.config)) {
     await writeDefaultConfig(paths.config, process.env, { networks: ["base"] });
     steps.push("config");
@@ -102774,6 +103065,7 @@ async function setupCommand(argv, json2, io, dependencies) {
   let changedVault = false;
   let changedAccount = false;
   let changedLink = false;
+  let scannedAddresses;
   if (!await fileExists2(join26(paths.directory, "vault.json"))) {
     const choice = await vaultChoice(dependencies);
     if (choice === "restore") {
@@ -102781,12 +103073,14 @@ async function setupCommand(argv, json2, io, dependencies) {
         throw new Error("Restoring needs a terminal to type the phrase.");
       }
       const readSecret = dependencies.prompts?.secret ?? promptForSecret;
-      await restoreVaultFromPhrase(
+      const restored = await restoreVaultFromPhrase(
         await readSecret("Recovery phrase: "),
         config2,
         humanIo,
-        dependencies
+        dependencies,
+        accountCount
       );
+      scannedAddresses = restored.scannedAddresses;
       store = await WalletStore.open(paths.directory, {
         secrets: getSecretStore(dependencies),
         env: dependencies.env ?? process.env,
@@ -102839,22 +103133,35 @@ async function setupCommand(argv, json2, io, dependencies) {
   }
   if (json2) {
     io.stdout(
-      JSON.stringify({ vault, account, address: address4, linked, steps, cloudBackup })
+      JSON.stringify({
+        vault,
+        account,
+        address: address4,
+        linked,
+        steps,
+        cloudBackup,
+        ...scannedAddresses === void 0 ? {} : { scannedAddresses }
+      })
     );
   }
 }
-async function restoreVaultFromPhrase(phrase, config2, io, dependencies) {
+async function restoreVaultFromPhrase(phrase, config2, io, dependencies, accountCount) {
   const paths = getVapiPaths();
   const validatedPhrase = validateRecoveryPhrase(phrase);
   const readBalance3 = baseUsdcBalanceReader(config2, dependencies);
   const key2 = await loadOrCreateDeviceKey({ secrets: getSecretStore(dependencies) });
   let names;
+  let scannedAddresses = 0;
   try {
     const restored = await restoreVault({
       path: join26(paths.directory, "vault.json"),
       key: key2,
       phrase: validatedPhrase,
       probe: async (address4) => await readBalance3(address4) > 0n,
+      ...accountCount === void 0 ? {} : { accountCount },
+      onScanComplete: (count) => {
+        scannedAddresses = count;
+      },
       ...dependencies.now === void 0 ? {} : { now: dependencies.now }
     });
     names = restored.accounts().map((account) => account.name);
@@ -102866,8 +103173,25 @@ async function restoreVaultFromPhrase(phrase, config2, io, dependencies) {
     ...names[0] === void 0 ? {} : { wallet: names[0] },
     detail: `${names.length} account(s)`
   });
-  io.stdout(`Vault restored with ${names.length} account(s): ${names.join(", ")}`);
-  return { names };
+  io.stdout(
+    `Vault restored with ${names.length} account(s): ${names.join(", ")}. ${scannedAddresses} address(es) scanned.`
+  );
+  return { names, scannedAddresses };
+}
+function parseAccountCount(value) {
+  if (value === void 0) return void 0;
+  if (!/^\d+$/u.test(value)) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  const count = Number(value);
+  if (!Number.isSafeInteger(count) || count < 1 || count > MAX_RESTORE_ACCOUNTS) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  return count;
 }
 async function vaultChoice(dependencies) {
   const answer = dependencies.prompts?.line === void 0 ? isInteractive(dependencies) ? await promptForLine(VAULT_CHOICE) : "" : await dependencies.prompts.line(VAULT_CHOICE);
@@ -103159,7 +103483,7 @@ async function taskContext(parsed, io, dependencies, publicOnly = false) {
     pending,
     randomUUID: dependencies.tasks?.randomUUID ?? randomUUID6,
     signInHint: "Run vapi login for the acting wallet.",
-    sleep: dependencies.tasks?.sleep ?? ((milliseconds) => new Promise((resolve2) => setTimeout(resolve2, milliseconds)))
+    sleep: dependencies.tasks?.sleep ?? ((milliseconds) => new Promise((resolve3) => setTimeout(resolve3, milliseconds)))
   };
 }
 async function taskRequest2(verb, route, operation) {
@@ -104959,11 +105283,11 @@ ${usage}`);
   }
 }
 async function referencedSleep(milliseconds, signal) {
-  await new Promise((resolve2) => {
+  await new Promise((resolve3) => {
     const finish = () => {
       clearTimeout(timer);
       signal?.removeEventListener("abort", finish);
-      resolve2();
+      resolve3();
     };
     const timer = setTimeout(finish, milliseconds);
     if (signal === void 0) return;
@@ -104975,6 +105299,7 @@ async function referencedSleep(milliseconds, signal) {
 // src/vault.ts
 import { join as join27 } from "node:path";
 var VAULT_USAGE = "Usage: vapi vault protect|unprotect|lock|unlock|status [--json]";
+var RESTORE_USAGE = "Usage: vapi restore [--accounts <n> | --from-owner [--owner <0x\u2026>]] [--json]";
 var LEGACY_PASSWORD_NOTICE = "VAPI_KEYSTORE_PASSWORD is deprecated for vault passwords; use VAPI_VAULT_PASSWORD instead.";
 async function vaultCommand(argv, json2, io, dependencies) {
   const subcommand = argv[0];
@@ -105004,9 +105329,17 @@ async function restoreCommand(argv, json2, io, dependencies) {
     await restoreFromOwnerCommand(argv, json2, io, dependencies);
     return;
   }
-  if (argv.length > 0) {
-    throw new UsageError("Usage: vapi restore [--from-owner [--owner <0x\u2026>]] [--json]");
+  let parsed;
+  try {
+    parsed = parseArguments(argv, {
+      valueOptions: /* @__PURE__ */ new Set(["--accounts"]),
+      maximumPositionals: 0
+    });
+  } catch (error61) {
+    if (error61 instanceof UsageError) throw new UsageError(RESTORE_USAGE);
+    throw error61;
   }
+  const accountCount = parseRestoreAccountCount(parsed.one("--accounts"));
   const paths = getVapiPaths();
   const path = join27(paths.directory, "vault.json");
   if (await fileExists2(path)) {
@@ -105020,13 +105353,39 @@ async function restoreCommand(argv, json2, io, dependencies) {
   const config2 = await readConfig(paths.config, json2 ? quietIo(io) : io);
   const phrase = isStdinInteractive(dependencies) ? await getPrompts(dependencies).secret("Recovery phrase: ") : await (dependencies.readStdin ?? readProcessStdin3)();
   const restoreIo = json2 ? quietIo(io) : io;
-  const { names } = await restoreVaultFromPhrase(phrase.trim(), config2, restoreIo, dependencies);
+  const { names, scannedAddresses } = await restoreVaultFromPhrase(
+    phrase.trim(),
+    config2,
+    restoreIo,
+    dependencies,
+    accountCount
+  );
   if (json2) {
-    output3(io, true, { command: "restore", vault: "restored", accounts: names }, "");
+    output3(
+      io,
+      true,
+      { command: "restore", vault: "restored", accounts: names, scannedAddresses },
+      ""
+    );
     return;
   }
   io.stdout(`Run vapi setup to link ${names[0]}.`);
 }
+function parseRestoreAccountCount(value) {
+  if (value === void 0) return void 0;
+  if (!/^\d+$/u.test(value)) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  const count = Number(value);
+  if (!Number.isSafeInteger(count) || count < 1 || count > MAX_RESTORE_ACCOUNTS) {
+    throw new UsageError(
+      `--accounts must be a positive integer no greater than ${MAX_RESTORE_ACCOUNTS}.`
+    );
+  }
+  return count;
+}
 async function protectCommand(argv, json2, io, dependencies) {
   requireNoArguments(argv);
   const env = getEnvironment(dependencies);
@@ -105156,8 +105515,8 @@ var HELP_HEADING = "vAPI Network";
 var HELP = `${HELP_HEADING}
 
 Usage:
-  vapi init [--networks <base,arc,solana>] [--json]
-  vapi setup [--no-cloud-backup] [--json]
+  vapi init [--networks <base,arc>] [--no-link] [--json]
+  vapi setup [--no-cloud-backup] [--accounts <n>] [--json]
   vapi accounts [--all] [--json]
   vapi accounts add <name> [--label <text>] [--no-link] [--json]
   vapi accounts import <name> [--keystore <path> | --key-file <path>] [--label <text>] [--json]
@@ -105187,7 +105546,7 @@ Usage:
   vapi docs read <url-or-path> [--json]
   vapi search [query] [--kind <kind>] [--network <caip2>] [--limit <n>] [--cursor <cursor>] [--include-unverified] [--json]
   vapi inspect <id> [--endpoint <name>] [--json]
-  vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--account <name>] [--json]
+  vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--timeout <seconds>] [--account <name>] [--json]
   vapi pay --resume <receipt-id> [--json]
   vapi check <url> [--method <method>] [--json]
   vapi balance [--account <name>] [--json]
@@ -105203,6 +105562,7 @@ Usage:
   vapi agent pause <name> [--json]
   vapi agent resume <name> [--json]
   vapi agent revoke <name> [--json]
+  vapi dashboard [--account <name>] [--no-browser] [--json]
   vapi login [--account <name>] [--label <name>] [--publish] [--no-browser] [--json]
   vapi logout [--account <name>] [--json]
   vapi whoami [--account <name>] [--json]
@@ -105233,8 +105593,8 @@ Usage:
   vapi task status <id> [--account <name>] [--json]
   vapi export-key [--network <caip2>] [--account <name>] [--json]
   vapi backup [--account <name>] [--cloud [off]] [--json]
-  vapi restore [--from-owner [--owner <0x\u2026>]] [--json]
-  vapi import (--phrase | --key) [--account <name>] [--networks <base,arc,solana>] [--replace] [--force] [--json]
+  vapi restore [--accounts <n> | --from-owner [--owner <0x\u2026>]] [--json]
+  vapi import (--phrase | --key) [--account <name>] [--networks <base,arc>] [--replace] [--force] [--json]
   vapi passphrase [--account <name>] [--json]
   vapi vault protect [--json]
   vapi vault unprotect [--json]
@@ -105253,15 +105613,19 @@ Usage:
   vapi publish list [--json]
   vapi claim <origin> [--account <name>] [--json]
   vapi mcp [--account <name>] [--json]
-  vapi mcp install <claude|cursor|codex> [--home <dir>] [--registry <url>] [--json]
+  vapi mcp install <claude|cursor|codex> [--home <dir>] [--registry <url>] [--no-link] [--json]
   vapi serve [--json]
   vapi version [--json]
   vapi help [--json]
 
+\`vapi init\`, \`vapi wallet create\` and \`vapi mcp install\` offer to link the wallet to your vAPI dashboard. Use \`--no-link\` to skip the prompt.
+
 Every command that touches a wallet takes \`--account <name>\`, falls back to \`VAPI_WALLET\`, then to the default account set by \`vapi accounts use\`, and names the wallet it used on its first line.
 
 \`vapi search\` answers with vAPI-verified listings plus the mirrored external catalogs. \`--include-unverified\` also returns self-listed APIs that passed vAPI's automated x402 probe but were never reviewed; every result is tagged \`[verified]\`, \`[requested]\`, \`[unverified]\` or \`[external]\`.
 
+Solana listings remain searchable; inspect and pay return \`unsupported_network\`. Solana keys are not part of the device vault yet.
+
 \`vapi docs\` asks the public vAPI documentation assistant; \`vapi docs search\` searches documentation excerpts and \`vapi docs read\` reads one Markdown page. They need no account, wallet or payment.
 
 \`vapi task --help\` lists task options and availability. Task exit codes: 0 ok, 1 error, 2 policy refusal (JSON ok:false with a policy. reason) or invalid usage (JSON error), 3 approval needed in non-interactive mode. Posting moves no money; the current create-order contract does not store amount, deadline, intake, max awards or webhook yet.
@@ -105274,7 +105638,7 @@ Every command that touches a wallet takes \`--account <name>\`, falls back to \`
 
 \`vapi vault protect\` adds a password to the device vault. \`vapi vault unlock\` opens it on this device for 8 hours; for unattended use, set \`VAPI_VAULT_PASSWORD\`. \`vapi unlock\` and \`vapi lock\` remain aliases for one release.
 
-\`vapi backup\` and \`vapi export-key\` print a secret, so they run only on a real terminal, never for an agent, and ask you to type the wallet name first. \`vapi backup --cloud\` keeps an encrypted vault copy that only the owner can approve for recovery. \`vapi restore\` rebuilds the vault from the phrase and re-derives accounts until an unused address. Set \`VAPI_NO_SECRETS=1\` to switch exports off entirely. Every export and every wallet change is logged to ~/.vapi/audit.log.
+\`vapi backup\` and \`vapi export-key\` print a secret, so they run only on a real terminal, never for an agent, and ask you to type the wallet name first. \`vapi backup --cloud\` keeps an encrypted vault copy that only the owner can approve for recovery. \`vapi restore\` rebuilds the vault from the phrase and re-derives accounts until five consecutive addresses have no Base USDC, and reports the number scanned. Use \`--accounts <n>\` with restore or setup to recover a fixed count without querying balances. Set \`VAPI_NO_SECRETS=1\` to switch exports off entirely. Every export and every wallet change is logged to ~/.vapi/audit.log.
 
 \`vapi publish <url>\` lists an API you own. vAPI probes the URL \u2014 an origin, one endpoint, or an OpenAPI document \u2014 you choose which endpoints to list, and your wallet signs one line naming where the payouts go. Listing is permissionless: a listing that passed the probe goes live with \`vapi publish activate <slug>\`, and \`vapi publish verify-request <slug>\` asks for the review that puts it in the default search. Deploying the FeeSplitter that receives the payouts is a wallet transaction and stays in the console. A catalog of more than 20 endpoints is listed as several listings of up to 20, with one result line per endpoint; \`--resume\` skips every endpoint this key already lists.
 
@@ -105320,8 +105684,8 @@ var ACCOUNT_OPTION2 = "--account";
 var WALLET_OPTION_DEPRECATION = "--wallet is now --account; --wallet keeps working for one release.";
 var SOLANA_VAULT_UNAVAILABLE2 = "Solana keys are not part of the device vault yet.";
 var INCLUDE_UNVERIFIED_OPTION = "--include-unverified";
-async function openWalletStore(dependencies) {
-  return await WalletStore.open(getVapiPaths().directory, {
+async function openWalletStore(dependencies, home = getVapiPaths().directory) {
+  return await WalletStore.open(home, {
     secrets: getSecretStore(dependencies),
     env: getEnvironment(dependencies),
     ...dependencies.now === void 0 ? {} : { now: dependencies.now }
@@ -105336,8 +105700,8 @@ async function selectWallet(store, parsed, dependencies) {
   const address4 = await store.readAddress(resolved.name);
   return { store, ...resolved, ...address4 === void 0 ? {} : { address: address4 } };
 }
-async function targetWallet(parsed, dependencies) {
-  return await selectWallet(await openWalletStore(dependencies), parsed, dependencies);
+async function targetWallet(parsed, dependencies, home = getVapiPaths().directory) {
+  return await selectWallet(await openWalletStore(dependencies, home), parsed, dependencies);
 }
 function getSecretStore(dependencies) {
   return dependencies.secretStore ?? secretStore();
@@ -105516,6 +105880,10 @@ async function runCli(argv = process.argv.slice(2), io = processIo, dependencies
       case "agent":
         exitCode = await agentCommand(args.slice(1), json2, runIo, dependencies);
         break;
+      case "dashboard":
+        await dashboardCommand(args.slice(1), json2, io, dependencies);
+        exitCode = 0;
+        break;
       case "login":
         await loginCommand(args.slice(1), json2, io, dependencies);
         exitCode = 0;
@@ -105730,6 +106098,7 @@ function shouldAutoUploadAfterFailure(args) {
 async function initCommand(argv, json2, io, dependencies) {
   const parsed = parseArguments(argv, {
     valueOptions: /* @__PURE__ */ new Set(["--networks"]),
+    booleanOptions: /* @__PURE__ */ new Set(["--no-link"]),
     maximumPositionals: 0
   });
   const networks = parseInitNetworks(parsed.one("--networks") ?? "base");
@@ -105777,7 +106146,14 @@ async function initCommand(argv, json2, io, dependencies) {
     nextSteps: buildNextSteps(account.address)
   };
   if (json2) {
-    io.stdout(JSON.stringify(result));
+    const link3 = await offerDashboardLink({
+      name: created.name,
+      json: json2,
+      noLink: parsed.has("--no-link"),
+      io,
+      dependencies
+    });
+    io.stdout(JSON.stringify({ ...result, ...link3 }));
     return;
   }
   if (configRewrites.length > 0) io.stdout(formatLegacyRegistryRewrites(configRewrites));
@@ -105798,6 +106174,13 @@ async function initCommand(argv, json2, io, dependencies) {
   io.stdout(formatAccounts(accounts));
   io.stdout("");
   io.stdout(result.nextSteps.join("\n"));
+  await offerDashboardLink({
+    name: created.name,
+    json: json2,
+    noLink: parsed.has("--no-link"),
+    io,
+    dependencies
+  });
 }
 var INIT_ALREADY_DONE = "This machine already has a wallet, so vapi init created nothing.";
 async function reportExistingWallets(store, json2, io, dependencies) {
@@ -105833,12 +106216,11 @@ async function walletCommand(argv, json2, io, dependencies) {
       `Unknown wallet subcommand ${JSON.stringify(subcommand)}. ${WALLET_USAGE}`
     );
   }
-  await accountsCommand(
-    [mapped2, ...rest, ...subcommand === "create" ? ["--no-link"] : []],
-    json2,
-    io,
-    dependencies
-  );
+  if (subcommand === "create") {
+    await accountsAddCommand(rest, json2, io, dependencies, { link: "offer" });
+    return;
+  }
+  await accountsCommand([mapped2, ...rest], json2, io, dependencies);
 }
 async function unlockedWallets(walletsStore, wallets, dependencies) {
   const secrets = getSecretStore(dependencies);
@@ -106063,7 +106445,7 @@ async function inspectCommand(argv, json2, io, dependencies) {
   );
   output3(io, json2, result, formatInspect(result));
 }
-var PAY_USAGE = "Usage: vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--account <name>] [--json]";
+var PAY_USAGE = "Usage: vapi pay <id-or-url> [--method <method>] [--endpoint <name>] [--body <json>] [--content-type <type>] [--network <caip2>] [--expected-pay-to <address>] [--max <amount>] [--timeout <seconds>] [--account <name>] [--json]";
 async function payCommand(argv, json2, io, dependencies) {
   if (argv.includes(RESUME_OPTION)) {
     await payResumeCommand(argv, json2, io, dependencies);
@@ -106079,11 +106461,13 @@ async function payCommand(argv, json2, io, dependencies) {
       "--expected-pay-to",
       "--max",
       "--max-price-usd",
+      "--timeout",
       WALLET_OPTION5
     ]),
     maximumPositionals: 1
   });
   const target = requiredPositional(parsed.positionals[0], "<id-or-url>", PAY_USAGE);
+  const timeoutSeconds = optionalBoundedInteger(parsed.one("--timeout"), "--timeout", 1, 300);
   const paths = getVapiPaths();
   const config2 = await readConfig(paths.config, io);
   const wallet = await targetWallet(parsed, dependencies);
@@ -106099,7 +106483,8 @@ async function payCommand(argv, json2, io, dependencies) {
     ...parsed.one("--content-type") ? { contentType: parsed.one("--content-type") } : {},
     ...parsed.one("--network") ? { network: parsed.one("--network") } : {},
     ...parsed.one("--expected-pay-to") ? { expectedPayTo: parsed.one("--expected-pay-to") } : {},
-    ...maxPriceUsd ? { maxPriceUsd } : {}
+    ...maxPriceUsd ? { maxPriceUsd } : {},
+    ...timeoutSeconds === void 0 ? {} : { timeoutSeconds }
   };
   const call2 = createCallPort({
     config: config2,
@@ -106377,8 +106762,8 @@ async function fetchNetworkStats(dependencies) {
     })();
     let timeout;
     try {
-      const timedOut = new Promise((resolve2) => {
-        timeout = setTimeout(() => resolve2(null), NETWORK_STATS_REQUEST_TIMEOUT_MS);
+      const timedOut = new Promise((resolve3) => {
+        timeout = setTimeout(() => resolve3(null), NETWORK_STATS_REQUEST_TIMEOUT_MS);
       });
       return await Promise.race([request, timedOut]);
     } finally {
@@ -107774,7 +108159,7 @@ function buildNextSteps(address4) {
     formatNextStep("Pay", "vapi pay <ref> --max 0.02"),
     formatNextStep(
       "Agent",
-      'add {"command":"npx","args":["-y","vapi-network","mcp"]} to your MCP config'
+      'add {"command":"npx","args":["-y","vapi-network@latest","mcp"]} to your MCP config'
     )
   ];
 }
@@ -107955,6 +108340,17 @@ function optionalPositiveInteger(value, option) {
   if (result === 0) throw new UsageError(`${option} must be a positive integer.`);
   return result;
 }
+function optionalBoundedInteger(value, option, minimum, maximum) {
+  if (value === void 0) return void 0;
+  if (!/^\d+$/.test(value)) {
+    throw new UsageError(`${option} must be an integer from ${minimum} to ${maximum}.`);
+  }
+  const parsed = Number(value);
+  if (!Number.isSafeInteger(parsed) || parsed < minimum || parsed > maximum) {
+    throw new UsageError(`${option} must be an integer from ${minimum} to ${maximum}.`);
+  }
+  return parsed;
+}
 function optionalUsdAmount(value, option) {
   if (value === void 0) return void 0;
   if (!/^\d+(?:\.\d{1,2})?$/.test(value)) {
@@ -108015,12 +108411,136 @@ function parseInitNetworks(value) {
   }
   for (const network of networks) {
     if (network !== "base" && network !== "arc" && network !== "solana") {
-      throw new UsageError("--networks supports base, arc and solana.");
+      throw new UsageError("--networks supports base and arc; Solana vault setup is unavailable.");
     }
   }
   return networks;
 }
 
+// src/update-check.ts
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var CHECK_TIMEOUT_MS = 1500;
+var LATEST_URL = "https://registry.npmjs.org/vapi-network/latest";
+async function runCliWithUpdateCheck(argv = process.argv.slice(2), io = {
+  stdout: (message) => console.log(message),
+  stderr: (message) => console.error(message)
+}, dependencies = {}, options = {}) {
+  const notice = checkForUpdate({ ...options, env: options.env ?? dependencies.env, argv });
+  const code = await runCli(argv, io, dependencies);
+  const message = await notice;
+  if (message) io.stderr(message);
+  return code;
+}
+async function checkForUpdate(options = {}) {
+  const env = options.env ?? process.env;
+  const argv = options.argv ?? process.argv.slice(2);
+  if (!(options.stderrIsTTY ?? process.stderr.isTTY) || argv.includes("--json") || argv[0] === "mcp" && argv[1] !== "install" || env.VAPI_NO_UPDATE_CHECK === "1" || env.CI !== void 0) {
+    return void 0;
+  }
+  const controller = new AbortController();
+  let timer;
+  try {
+    return await Promise.race([
+      latestNotice(options, env, controller.signal),
+      new Promise((resolve3) => {
+        timer = setTimeout(() => {
+          controller.abort();
+          resolve3(void 0);
+        }, CHECK_TIMEOUT_MS);
+      })
+    ]);
+  } catch {
+    return void 0;
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+    controller.abort();
+  }
+}
+async function latestNotice(options, env, signal) {
+  const paths = getVapiPaths(options.home ?? (env.VAPI_HOME?.trim() || void 0));
+  const now = (options.nowMs ?? Date.now)();
+  let cached2;
+  try {
+    const value = JSON.parse(await readFile29(paths.updateCheck, "utf8"));
+    if (isRecord12(value) && typeof value.checkedAt === "number" && Number.isFinite(value.checkedAt) && typeof value.latest === "string" && parseVersion(value.latest)) {
+      cached2 = { checkedAt: value.checkedAt, latest: value.latest };
+    }
+  } catch {
+  }
+  signal.throwIfAborted();
+  let latest = cached2?.latest ?? CLI_VERSION;
+  if (cached2 === void 0 || now - cached2.checkedAt >= CHECK_INTERVAL_MS || now < cached2.checkedAt) {
+    await mkdir21(paths.directory, { recursive: true });
+    signal.throwIfAborted();
+    await writeFile12(paths.updateCheck, JSON.stringify({ checkedAt: now, latest }), { mode: 384 });
+    signal.throwIfAborted();
+    const fetchImpl = options.fetchImpl ?? createPublicFetch({
+      allowPrivateNetwork: false,
+      lookup: async (hostname3) => {
+        let onAbort;
+        const aborted2 = new Promise((_resolve, reject) => {
+          onAbort = () => reject(signal.reason);
+          signal.addEventListener("abort", onAbort, { once: true });
+        });
+        try {
+          signal.throwIfAborted();
+          const addresses = await Promise.race([lookup(hostname3, { all: true }), aborted2]);
+          return addresses.map(({ address: address4 }) => address4);
+        } finally {
+          signal.removeEventListener("abort", onAbort);
+        }
+      }
+    });
+    const response = await fetchImpl(LATEST_URL, { signal, redirect: "error" });
+    if (!response.ok) return void 0;
+    const body = await response.json();
+    signal.throwIfAborted();
+    if (!isRecord12(body) || typeof body.version !== "string" || !parseVersion(body.version)) {
+      return void 0;
+    }
+    latest = body.version;
+    await writeFile12(paths.updateCheck, JSON.stringify({ checkedAt: now, latest }), { mode: 384 });
+  }
+  signal.throwIfAborted();
+  return isNewerVersion(latest, CLI_VERSION) ? `vapi-network ${latest} is available (you have ${CLI_VERSION}). Update: npm i -g vapi-network@latest` : void 0;
+}
+function isRecord12(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseVersion(version5) {
+  const match = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([\da-zA-Z.-]+))?(?:\+[\da-zA-Z-]+(?:\.[\da-zA-Z-]+)*)?$/.exec(
+    version5
+  );
+  if (!match) return void 0;
+  const prerelease = match[4]?.split(".");
+  if (prerelease?.some((part) => part === "" || /^\d+$/.test(part) && /^0\d/.test(part))) {
+    return void 0;
+  }
+  return { core: match.slice(1, 4).map(BigInt), prerelease };
+}
+function isNewerVersion(latest, current) {
+  const next = parseVersion(latest);
+  const running = parseVersion(current);
+  for (let index2 = 0; index2 < 3; index2 += 1) {
+    if (next.core[index2] !== running.core[index2]) return next.core[index2] > running.core[index2];
+  }
+  if (running.prerelease === void 0) return false;
+  if (next.prerelease === void 0) return true;
+  for (let index2 = 0; index2 < Math.max(next.prerelease.length, running.prerelease.length); index2 += 1) {
+    const a = next.prerelease[index2];
+    const b = running.prerelease[index2];
+    if (a === b) continue;
+    if (a === void 0) return false;
+    if (b === void 0) return true;
+    const aNumeric = /^\d+$/.test(a);
+    const bNumeric = /^\d+$/.test(b);
+    if (aNumeric && bNumeric) return BigInt(a) > BigInt(b);
+    if (aNumeric !== bNumeric) return !aNumeric;
+    return a > b;
+  }
+  return false;
+}
+
 // src/main-module.ts
 import { realpathSync as realpathSync2 } from "node:fs";
 import { pathToFileURL } from "node:url";
@@ -108037,7 +108557,7 @@ function isMainModule(entry, moduleUrl, realpath = realpathSync2) {
 
 // src/bin.ts
 if (isMainModule(process.argv[1], import.meta.url)) {
-  process.exitCode = await runCli();
+  process.exitCode = await runCliWithUpdateCheck();
 }
 export {
   CUSTODY_NOTICE,