@vapi-network/core 0.8.0 → 0.9.2

package/dist/index.js

@@ -28912,378 +28912,6 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
-// src/marketplace-contracts.ts
-var MARKETPLACE_DISCOVERY_PROTOCOL = "vapi.marketplace.discovery/1";
-var MARKETPLACE_RANKING_VERSION = "marketplace-ranking-v1";
-var MARKETPLACE_KINDS = ["api", "service_offer", "open_request"];
-var MARKETPLACE_EXECUTION_METHODS = [
-  "GET",
-  "HEAD",
-  "POST",
-  "PUT",
-  "PATCH",
-  "DELETE"
-];
-var marketplaceExecutionMethodSchema = external_exports.enum(MARKETPLACE_EXECUTION_METHODS);
-var marketplaceKindSchema = external_exports.enum(MARKETPLACE_KINDS);
-var EXECUTION_MODES = ["direct", "gateway"];
-var executionModeSchema = external_exports.enum(EXECUTION_MODES);
-var PROVENANCES = ["indexed", "self_listed", "partner"];
-var provenanceSchema = external_exports.enum(PROVENANCES);
-var FIRST_PARTY_PROVENANCES = ["self_listed", "partner"];
-var firstPartyProvenanceSchema = external_exports.enum(FIRST_PARTY_PROVENANCES);
-var LISTING_GROUPS = ["vapi", "added", "partner", "external"];
-var listingGroupSchema = external_exports.enum(LISTING_GROUPS);
-var listingFeeSchema = external_exports.looseObject({
-  bps: external_exports.number().int().min(0),
-  label: external_exports.string()
-});
-var LISTING_VERIFICATIONS = ["none", "requested", "verified"];
-var listingVerificationSchema = external_exports.enum(LISTING_VERIFICATIONS);
-var listingVerificationFieldSchema = listingVerificationSchema.default("none").catch("none");
-var listingLivenessSchema = external_exports.looseObject({
-  uptime7d: external_exports.number().min(0).max(1),
-  latencyP50Ms: external_exports.number().nonnegative().nullable(),
-  latencyP95Ms: external_exports.number().nonnegative().nullable(),
-  checks7d: external_exports.number().int().nonnegative()
-});
-var listingConformanceSchema = external_exports.looseObject({
-  declaredVersion: external_exports.union([external_exports.literal(1), external_exports.literal(2)]).nullable(),
-  versionConformant: external_exports.boolean(),
-  offerTransport: external_exports.enum(["body", "header", "both"]),
-  issues: external_exports.array(external_exports.string())
-});
-var listingIdentitySchema = external_exports.looseObject({
-  erc8004Id: external_exports.string().trim().min(1),
-  reputation: external_exports.looseObject({
-    score: external_exports.number().finite(),
-    count: external_exports.number().int().nonnegative()
-  }).optional().catch(void 0)
-});
-var listingDisclosureShape = {
-  group: listingGroupSchema.optional(),
-  fee: listingFeeSchema.optional(),
-  verification: listingVerificationFieldSchema,
-  liveness: listingLivenessSchema.optional().catch(void 0),
-  conformance: listingConformanceSchema.optional().catch(void 0),
-  identity: listingIdentitySchema.optional().catch(void 0)
-};
-var marketplaceBadgeCodeSchema = external_exports.enum([
-  "live_x402",
-  "partner",
-  "payout_wallet_confirmed",
-  "vapi_verified",
-  "external_catalog",
-  "approved_vendor"
-]);
-var marketplaceBadgeSchema = external_exports.looseObject({
-  code: marketplaceBadgeCodeSchema,
-  label: external_exports.string().trim().min(1).max(80)
-});
-var marketplacePublicFactSchema = external_exports.looseObject({
-  label: external_exports.string().trim().min(1).max(80),
-  value: external_exports.string().trim().min(1).max(160)
-});
-var marketplaceHrefSchema = external_exports.union([
-  external_exports.string().trim().min(1).max(2048).regex(/^\/(?!\/)/),
-  external_exports.url().max(2048).regex(/^https:\/\//)
-]);
-var marketplaceCardSchema = external_exports.looseObject({
-  title: external_exports.string().trim().min(1).max(160),
-  summary: external_exports.string().trim().min(1).max(1e3),
-  byline: external_exports.string().trim().min(1).max(160).optional(),
-  bylineHref: marketplaceHrefSchema.optional(),
-  badges: external_exports.array(marketplaceBadgeSchema).max(8),
-  facts: external_exports.array(marketplacePublicFactSchema).max(12)
-});
-var marketplaceHitBase = {
-  ref: external_exports.string().trim().min(1).max(512),
-  card: marketplaceCardSchema,
-  ...listingDisclosureShape
-};
-var invokeApiActionSchema = external_exports.looseObject({
-  type: external_exports.literal("invoke_api"),
-  href: marketplaceHrefSchema
-});
-var firstPartyApiMarketplaceHitSchema = external_exports.looseObject({
-  ...marketplaceHitBase,
-  kind: external_exports.literal("api"),
-  provenance: firstPartyProvenanceSchema,
-  execution: external_exports.looseObject({
-    mode: executionModeSchema
-  }),
-  action: invokeApiActionSchema
-});
-var mirroredApiMarketplaceHitSchema = external_exports.looseObject({
-  ...marketplaceHitBase,
-  kind: external_exports.literal("api"),
-  provenance: external_exports.literal("indexed"),
-  execution: external_exports.looseObject({
-    mode: external_exports.literal("direct"),
-    url: external_exports.url().max(2048).regex(/^https:\/\/(?![^/?#]*@)/),
-    method: marketplaceExecutionMethodSchema.nullable(),
-    network: external_exports.string().trim().max(160).regex(/^eip155:[1-9]\d*$/)
-  }),
-  action: invokeApiActionSchema
-});
-var apiMarketplaceHitSchema = external_exports.discriminatedUnion("provenance", [
-  firstPartyApiMarketplaceHitSchema,
-  mirroredApiMarketplaceHitSchema
-]);
-var serviceOfferMarketplaceHitSchema = external_exports.looseObject({
-  ...marketplaceHitBase,
-  kind: external_exports.literal("service_offer"),
-  action: external_exports.looseObject({
-    type: external_exports.literal("start_engagement"),
-    href: marketplaceHrefSchema
-  })
-});
-var openRequestMarketplaceHitSchema = external_exports.looseObject({
-  ...marketplaceHitBase,
-  kind: external_exports.literal("open_request"),
-  action: external_exports.looseObject({
-    type: external_exports.literal("propose_to_request"),
-    href: marketplaceHrefSchema
-  })
-});
-var marketplaceHitSchema = external_exports.union([
-  apiMarketplaceHitSchema,
-  serviceOfferMarketplaceHitSchema,
-  openRequestMarketplaceHitSchema
-]);
-var marketplaceDiscoveryInputSchema = external_exports.strictObject({
-  q: external_exports.string().trim().max(200).optional(),
-  kinds: external_exports.array(marketplaceKindSchema).min(1).max(MARKETPLACE_KINDS.length).optional(),
-  network: external_exports.string().trim().min(1).max(160).optional(),
-  cursor: external_exports.string().trim().min(1).max(4096).optional(),
-  limit: external_exports.number().int().min(1).max(50).optional(),
-  includeUnverified: external_exports.boolean().optional()
-}).superRefine((input2, context) => {
-  if (input2.kinds && new Set(input2.kinds).size !== input2.kinds.length) {
-    context.addIssue({
-      code: "custom",
-      path: ["kinds"],
-      message: "Marketplace kinds must be unique"
-    });
-  }
-});
-function isMirroredHit(hit) {
-  return hit.kind === "api" && hit.provenance === "indexed";
-}
-var marketplaceDiscoveryPageSchema = external_exports.looseObject({
-  protocol: external_exports.literal(MARKETPLACE_DISCOVERY_PROTOCOL),
-  items: external_exports.array(marketplaceHitSchema),
-  nextCursor: external_exports.string().min(1).max(4096).nullable(),
-  unavailableKinds: external_exports.array(marketplaceKindSchema).max(MARKETPLACE_KINDS.length),
-  rankingVersion: external_exports.literal(MARKETPLACE_RANKING_VERSION)
-});
-
-// src/call-contracts-wire.ts
-var CALLABLE_KIND = "agent";
-var CALLABLE_CATEGORIES = ["ai", "data", "crypto", "compute", "search"];
-var callableCategorySchema = external_exports.enum(CALLABLE_CATEGORIES);
-var DISCOVERY_CATEGORIES = [...CALLABLE_CATEGORIES, "other"];
-var discoveryCategorySchema = external_exports.enum(DISCOVERY_CATEGORIES);
-var CALLABLE_CATEGORY_LABELS = {
-  ai: { catalog: "AI / LLM", publish: "AI and models" },
-  data: { catalog: "Data", publish: "Data" },
-  crypto: { catalog: "Crypto", publish: "Crypto" },
-  compute: { catalog: "Compute", publish: "Compute" },
-  search: { catalog: "Search", publish: "Search" }
-};
-var CALLABLE_CATEGORY_SET = new Set(CALLABLE_CATEGORIES);
-function isCallableListing(kind, category) {
-  return kind === CALLABLE_KIND && CALLABLE_CATEGORY_SET.has(category);
-}
-var serviceTierSchema = external_exports.enum(["listed", "verified", "partner"]);
-var discoveryEndpointSchema = external_exports.looseObject({
-  name: external_exports.string(),
-  method: external_exports.string(),
-  url: external_exports.url(),
-  price: external_exports.string(),
-  description: external_exports.string(),
-  operationId: external_exports.string().trim().min(1).optional(),
-  requestContentType: external_exports.string().trim().min(1).optional(),
-  requestSchema: external_exports.json().optional(),
-  responseContentType: external_exports.string().trim().min(1).optional(),
-  pathTemplate: external_exports.string().trim().min(1).optional(),
-  pathParameters: external_exports.array(external_exports.string().trim().min(1)).optional(),
-  payment: external_exports.looseObject({
-    scheme: external_exports.literal("exact"),
-    network: external_exports.string().regex(/^eip155:\d+$/),
-    asset: external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/),
-    payTo: external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/),
-    checkedAt: external_exports.iso.datetime()
-  }).optional()
-});
-var serviceSummarySchema = external_exports.looseObject({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  description: external_exports.string(),
-  category: discoveryCategorySchema,
-  tier: serviceTierSchema,
-  ...listingDisclosureShape,
-  verified: external_exports.boolean(),
-  wrapped: external_exports.boolean(),
-  price: external_exports.string(),
-  networks: external_exports.array(external_exports.string()),
-  endpoints: external_exports.array(discoveryEndpointSchema)
-});
-var searchServicesResponseSchema = external_exports.looseObject({
-  services: external_exports.array(serviceSummarySchema)
-});
-var listServicesResponseSchema = searchServicesResponseSchema;
-var discoveryServiceSchema = serviceSummarySchema;
-var discoveryResponseSchema = searchServicesResponseSchema;
-
-// src/call-contracts.ts
-var DiscoveryCatalogError = class extends Error {
-  name = "DiscoveryCatalogError";
-  code;
-  serviceId;
-  constructor(code, message, serviceId) {
-    super(message);
-    this.code = code;
-    this.serviceId = serviceId;
-  }
-};
-function parseDiscovery(raw) {
-  const parsed = discoveryResponseSchema.safeParse(raw);
-  if (!parsed.success) {
-    const malformedUrl = parsed.error.issues.find(
-      (issue2) => issue2.path.at(-1) === "url" && issue2.path.includes("endpoints")
-    );
-    if (malformedUrl) {
-      const serviceIndex = pathIndexAfter(malformedUrl.path, "services");
-      const serviceId = rawServiceId(raw, serviceIndex);
-      throw new DiscoveryCatalogError(
-        "malformed_url",
-        `Service ${JSON.stringify(serviceId ?? "unknown")} has a malformed endpoint URL.`,
-        serviceId
-      );
-    }
-    throw new DiscoveryCatalogError("invalid_discovery", "Discovery response is malformed.");
-  }
-  for (const service of parsed.data.services) {
-    buildTargets(service);
-  }
-  const resolveListing = (serviceId, endpointName) => {
-    const service = parsed.data.services.find((candidate) => candidate.id === serviceId);
-    if (!service) {
-      throw new DiscoveryCatalogError(
-        "service_not_found",
-        `No payable endpoint found for service ${JSON.stringify(serviceId)}.`,
-        serviceId
-      );
-    }
-    return { service, endpoint: resolveTarget(service, endpointName) };
-  };
-  return {
-    services: parsed.data.services,
-    resolve: (serviceId, endpointName) => resolveListing(serviceId, endpointName).endpoint,
-    resolveListing
-  };
-}
-function resolveTarget(service, endpointName) {
-  const { targets, targetsByName } = buildTargets(service);
-  if (endpointName !== void 0) {
-    const selected = targetsByName.get(endpointName.trim());
-    if (!selected) {
-      throw new DiscoveryCatalogError(
-        "endpoint_not_found",
-        `Service ${JSON.stringify(service.id)} has no endpoint ${JSON.stringify(endpointName)}. Available endpoints: ${[...targetsByName.keys()].join(", ")}.`,
-        service.id
-      );
-    }
-    return { ...selected };
-  }
-  if (targets.size !== 1) {
-    throw new DiscoveryCatalogError(
-      "ambiguous_default",
-      `Service ${JSON.stringify(service.id)} has ${targets.size} distinct payable endpoints. Choose one with endpoint: ${[...targetsByName.keys()].join(", ")}.`,
-      service.id
-    );
-  }
-  return targets.values().next().value;
-}
-function buildTargets(service) {
-  if (service.endpoints.length === 0) {
-    throw new DiscoveryCatalogError(
-      "no_endpoint",
-      `Service ${JSON.stringify(service.id)} has no payable endpoint.`,
-      service.id
-    );
-  }
-  const namedEndpoints = [...service.endpoints].sort(
-    (left, right) => compareNames(left.name.trim(), right.name.trim())
-  );
-  const names = /* @__PURE__ */ new Set();
-  const targets = /* @__PURE__ */ new Map();
-  const targetsByName = /* @__PURE__ */ new Map();
-  for (const endpoint of namedEndpoints) {
-    const name = endpoint.name.trim();
-    if (!name) {
-      throw new DiscoveryCatalogError(
-        "invalid_endpoint_name",
-        `Service ${JSON.stringify(service.id)} has a blank endpoint name.`,
-        service.id
-      );
-    }
-    if (names.has(name)) {
-      throw new DiscoveryCatalogError(
-        "duplicate_endpoint_name",
-        `Service ${JSON.stringify(service.id)} has duplicate endpoint name ${JSON.stringify(name)}.`,
-        service.id
-      );
-    }
-    names.add(name);
-    const method = endpoint.method.trim().toUpperCase();
-    if (!method) {
-      throw new DiscoveryCatalogError(
-        "blank_method",
-        `Service ${JSON.stringify(service.id)} has a blank endpoint method.`,
-        service.id
-      );
-    }
-    const url2 = new URL(endpoint.url);
-    if (url2.protocol !== "http:" && url2.protocol !== "https:") {
-      throw new DiscoveryCatalogError(
-        "malformed_url",
-        `Service ${JSON.stringify(service.id)} has a non-HTTP endpoint URL.`,
-        service.id
-      );
-    }
-    const transportKey = `${method}\0${endpoint.url}`;
-    const normalized = { ...endpoint, name, method };
-    targetsByName.set(name, normalized);
-    if (!targets.has(transportKey)) targets.set(transportKey, normalized);
-  }
-  return { targets, targetsByName };
-}
-function compareNames(left, right) {
-  return left < right ? -1 : left > right ? 1 : 0;
-}
-function pathIndexAfter(path, key) {
-  const keyIndex = path.indexOf(key);
-  const candidate = path[keyIndex + 1];
-  return typeof candidate === "number" ? candidate : void 0;
-}
-function rawServiceId(raw, serviceIndex) {
-  if (serviceIndex === void 0 || typeof raw !== "object" || raw === null) {
-    return void 0;
-  }
-  const services = Reflect.get(raw, "services");
-  if (!Array.isArray(services)) {
-    return void 0;
-  }
-  const service = services[serviceIndex];
-  if (typeof service !== "object" || service === null) {
-    return void 0;
-  }
-  const id = Reflect.get(service, "id");
-  return typeof id === "string" ? id : void 0;
-}
-
 // ../../node_modules/.pnpm/viem@2.56.1_typescript@6.0.3_zod@4.5.4/node_modules/viem/_esm/utils/getAction.js
 function getAction(client, actionFn, name) {
   const action_implicit = client[actionFn.name];
@@ -39074,7 +38702,9 @@ function http(url2, config2 = {}) {
 // ../../node_modules/.pnpm/viem@2.56.1_typescript@6.0.3_zod@4.5.4/node_modules/viem/_esm/index.js
 init_getAddress();
 init_isAddress();
+init_toBytes();
 init_toHex();
+init_keccak256();
 
 // src/x402-networks.ts
 var BASE_MAINNET_CAIP2 = "eip155:8453";
@@ -39082,6 +38712,7 @@ var ARC_MAINNET_CAIP2 = "eip155:5042";
 var ARC_TESTNET_CAIP2 = "eip155:5042002";
 var SOLANA_MAINNET_CAIP2 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d";
 var X402_SOLANA_MAINNET_CAIP2 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+var SOLANA_DEVNET_CAIP2 = "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1";
 var SOLANA_MAINNET_USDC = "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v";
 function canonicalIdentity(usdc, eip712Domain) {
   return Object.freeze({
@@ -39125,375 +38756,184 @@ var BROWSER_ENABLED_X402_NETWORK_CONFIG = Object.freeze({
   [ARC_TESTNET_CAIP2]: browserNetwork(arcTestnetUsdc)
 });
 
-// src/net-guard.ts
-import { lookup as dnsLookup } from "node:dns/promises";
-import { request as httpRequest } from "node:http";
-import { request as httpsRequest } from "node:https";
-import { isIP } from "node:net";
-import { Readable } from "node:stream";
-var defaultLookup = async (hostname3) => {
-  const addresses = await dnsLookup(hostname3, { all: true });
-  return addresses.map(({ address: address2 }) => address2);
+// src/marketplace-contracts.ts
+var MARKETPLACE_DISCOVERY_PROTOCOL = "vapi.marketplace.discovery/1";
+var MARKETPLACE_RANKING_VERSION = "marketplace-ranking-v1";
+var MARKETPLACE_KINDS = ["api", "service_offer", "open_request"];
+var MARKETPLACE_EXECUTION_METHODS = [
+  "GET",
+  "HEAD",
+  "POST",
+  "PUT",
+  "PATCH",
+  "DELETE"
+];
+var marketplaceExecutionMethodSchema = external_exports.enum(MARKETPLACE_EXECUTION_METHODS);
+var marketplaceKindSchema = external_exports.enum(MARKETPLACE_KINDS);
+var EXECUTION_MODES = ["direct", "gateway"];
+var executionModeSchema = external_exports.enum(EXECUTION_MODES);
+var PROVENANCES = ["indexed", "self_listed", "partner"];
+var provenanceSchema = external_exports.enum(PROVENANCES);
+var FIRST_PARTY_PROVENANCES = ["self_listed", "partner"];
+var firstPartyProvenanceSchema = external_exports.enum(FIRST_PARTY_PROVENANCES);
+var LISTING_GROUPS = ["vapi", "added", "partner", "external"];
+var listingGroupSchema = external_exports.enum(LISTING_GROUPS);
+var listingFeeSchema = external_exports.looseObject({
+  bps: external_exports.number().int().min(0),
+  label: external_exports.string()
+});
+var LISTING_VERIFICATIONS = ["none", "requested", "verified"];
+var listingVerificationSchema = external_exports.enum(LISTING_VERIFICATIONS);
+var listingVerificationFieldSchema = listingVerificationSchema.default("none").catch("none");
+var listingLivenessSchema = external_exports.looseObject({
+  uptime7d: external_exports.number().min(0).max(1),
+  latencyP50Ms: external_exports.number().nonnegative().nullable(),
+  latencyP95Ms: external_exports.number().nonnegative().nullable(),
+  checks7d: external_exports.number().int().nonnegative()
+});
+var listingConformanceSchema = external_exports.looseObject({
+  declaredVersion: external_exports.union([external_exports.literal(1), external_exports.literal(2)]).nullable(),
+  versionConformant: external_exports.boolean(),
+  offerTransport: external_exports.enum(["body", "header", "both"]),
+  issues: external_exports.array(external_exports.string())
+});
+var listingIdentitySchema = external_exports.looseObject({
+  erc8004Id: external_exports.string().trim().min(1),
+  reputation: external_exports.looseObject({
+    score: external_exports.number().finite(),
+    count: external_exports.number().int().nonnegative()
+  }).optional().catch(void 0)
+});
+var listingDisclosureShape = {
+  group: listingGroupSchema.optional(),
+  fee: listingFeeSchema.optional(),
+  verification: listingVerificationFieldSchema,
+  liveness: listingLivenessSchema.optional().catch(void 0),
+  conformance: listingConformanceSchema.optional().catch(void 0),
+  identity: listingIdentitySchema.optional().catch(void 0)
 };
-async function assertPublicUrl(url2, options) {
-  if (url2.username || url2.password) {
-    throw guardError(url2);
-  }
-  if (url2.protocol !== "http:" && url2.protocol !== "https:") {
-    throw guardError(url2);
-  }
-  if (options.allowPrivateNetwork) {
-    return;
-  }
-  const hostname3 = normalizeHostname(url2.hostname);
-  const lowercaseHostname = hostname3.toLowerCase();
-  if (!lowercaseHostname || lowercaseHostname === "localhost" || lowercaseHostname.endsWith(".localhost") || lowercaseHostname.endsWith(".local") || lowercaseHostname.endsWith(".internal")) {
-    throw guardError(url2);
-  }
-  if (isIP(hostname3)) {
-    if (isNonPublicAddress(hostname3)) {
-      throw guardError(url2);
-    }
-    return;
-  }
-  let addresses;
-  try {
-    addresses = await withTimeout2(
-      (options.lookup ?? defaultLookup)(hostname3),
-      options.timeoutMs ?? 5e3
-    );
-  } catch {
-    throw guardError(url2);
-  }
-  if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
-    throw guardError(url2);
-  }
-}
-function createPublicFetch(options) {
-  const lookupFn = options.lookup ?? defaultLookup;
-  return (async (input2, init) => {
-    const url2 = new URL(input2 instanceof Request ? input2.url : input2);
-    await assertPublicUrl(url2, {
-      allowPrivateNetwork: options.allowPrivateNetwork,
-      lookup: lookupFn,
-      timeoutMs: 5e3
-    });
-    const normalized = new Request(input2, init);
-    const bytes = normalized.body ? Buffer.from(await normalized.arrayBuffer()) : null;
-    return await new Promise((resolve2, reject) => {
-      const requestOptions = {
-        method: normalized.method,
-        headers: Object.fromEntries(normalized.headers),
-        signal: normalized.signal,
-        ...options.allowPrivateNetwork ? {} : { lookup: pinnedLookup(lookupFn) }
-      };
-      const onResponse = (incoming) => {
-        try {
-          const headers = new Headers();
-          for (const [name, value] of Object.entries(incoming.headers)) {
-            if (Array.isArray(value)) {
-              for (const item of value) headers.append(name, item);
-            } else if (value !== void 0) {
-              headers.set(name, value);
-            }
-          }
-          const status = incoming.statusCode ?? 500;
-          const bodyForbidden = normalized.method === "HEAD" || [204, 205, 304].includes(status);
-          if (bodyForbidden) incoming.resume();
-          const response = new Response(
-            bodyForbidden ? null : Readable.toWeb(incoming),
-            { status, statusText: incoming.statusMessage, headers }
-          );
-          Object.defineProperty(response, "url", { value: url2.toString() });
-          resolve2(response);
-        } catch (error61) {
-          incoming.destroy();
-          reject(error61);
-        }
-      };
-      const request = url2.protocol === "https:" ? httpsRequest(url2, requestOptions, onResponse) : httpRequest(url2, requestOptions, onResponse);
-      request.on("error", reject);
-      if (bytes) request.write(bytes);
-      request.end();
-    });
-  });
-}
-function pinnedLookup(lookup) {
-  return (hostname3, dnsOptions, callback) => {
-    void lookup(normalizeHostname(hostname3)).then((addresses) => {
-      if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
-        callback(guardError(new URL(`https://${hostname3}`)), "");
-        return;
-      }
-      const address2 = addresses[0];
-      const family = isIP(address2);
-      callback(
-        null,
-        dnsOptions.all ? [{ address: address2, family }] : address2,
-        dnsOptions.all ? void 0 : family
-      );
-    }).catch(
-      (error61) => callback(error61 instanceof Error ? error61 : new Error("DNS lookup failed."), "")
-    );
-  };
-}
-async function withTimeout2(operation, timeoutMs) {
-  let timeout;
-  try {
-    return await Promise.race([
-      operation,
-      new Promise((_resolve, reject) => {
-        timeout = setTimeout(() => reject(new Error("DNS lookup timed out.")), timeoutMs);
-      })
-    ]);
-  } finally {
-    if (timeout) clearTimeout(timeout);
-  }
-}
-function normalizeHostname(hostname3) {
-  const unbracketed = hostname3.startsWith("[") && hostname3.endsWith("]") ? hostname3.slice(1, -1) : hostname3;
-  return unbracketed.endsWith(".") ? unbracketed.slice(0, -1) : unbracketed;
-}
-function isNonPublicAddress(address2) {
-  const normalized = normalizeHostname(address2);
-  const version5 = isIP(normalized);
-  if (version5 === 4) {
-    return isNonPublicIpv4(parseIpv4(normalized));
-  }
-  if (version5 === 6) {
-    return isNonPublicIpv6(parseIpv6(normalized));
-  }
-  return true;
-}
-function parseIpv4(address2) {
-  const octets = address2.split(".").map(Number);
-  return [octets[0], octets[1], octets[2], octets[3]];
-}
-function isNonPublicIpv4([first, second, third]) {
-  return first === 0 || first === 10 || first === 100 && second >= 64 && second <= 127 || first === 127 || first === 169 && second === 254 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 0 && (third === 0 || third === 2) || first === 192 && second === 168 || first === 198 && second >= 18 && second <= 19 || first === 198 && second === 51 && third === 100 || first === 203 && second === 0 && third === 113 || first >= 224;
-}
-function parseIpv6(address2) {
-  let normalized = address2.toLowerCase();
-  const lastColon = normalized.lastIndexOf(":");
-  const dottedTail = normalized.slice(lastColon + 1);
-  if (dottedTail.includes(".")) {
-    const [first, second, third, fourth] = parseIpv4(dottedTail);
-    normalized = `${normalized.slice(0, lastColon + 1)}${(first << 8 | second).toString(16)}:${(third << 8 | fourth).toString(16)}`;
-  }
-  const halves = normalized.split("::");
-  const left = halves[0] ? halves[0].split(":").map(parseHex) : [];
-  const right = halves[1] ? halves[1].split(":").map(parseHex) : [];
-  const omittedCount = 8 - left.length - right.length;
-  return halves.length === 2 ? [...left, ...Array.from({ length: omittedCount }, () => 0), ...right] : left;
-}
-function parseHex(value) {
-  return Number.parseInt(value, 16);
-}
-function isNonPublicIpv6(hextets) {
-  if (hextets.slice(0, 5).every((hextet) => hextet === 0) && hextets[5] === 65535) {
-    const embeddedIpv4 = [
-      hextets[6] >> 8,
-      hextets[6] & 255,
-      hextets[7] >> 8,
-      hextets[7] & 255
-    ];
-    return isNonPublicIpv4(embeddedIpv4);
-  }
-  if (hextets.slice(0, 6).every((hextet) => hextet === 0)) {
-    const compatibleIpv4 = [
-      hextets[6] >> 8,
-      hextets[6] & 255,
-      hextets[7] >> 8,
-      hextets[7] & 255
-    ];
-    if (isNonPublicIpv4(compatibleIpv4)) return true;
-  }
-  const isUnspecified = hextets.every((hextet) => hextet === 0);
-  const isLoopback = hextets.slice(0, 7).every((hextet) => hextet === 0) && hextets[7] === 1;
-  const first = hextets[0];
-  const isUniqueLocal = first >= 64512 && first <= 65023;
-  const isLinkLocal = first >= 65152 && first <= 65215;
-  const isSiteLocal = first >= 65216 && first <= 65279;
-  const isMulticast = first >= 65280;
-  const isDocumentation = first === 8193 && hextets[1] === 3512;
-  return isUnspecified || isLoopback || isUniqueLocal || isLinkLocal || isSiteLocal || isMulticast || isDocumentation;
-}
-function guardError(url2) {
-  return new Error(
-    `URL hostname ${JSON.stringify(url2.hostname)} is not allowed; private or internal destinations require allowPrivateNetwork true in the vAPI config.`
-  );
-}
-
-// src/networks.ts
-var USDC_DECIMALS = 6;
-var DEFAULT_ARC_GAS_HEADROOM_ATOMIC = 50000n;
-var NETWORKS = {
-  [BASE_MAINNET_CAIP2]: {
-    family: "evm",
-    chainId: 8453,
-    name: "Base mainnet",
-    usdc: CANONICAL_X402_USDC_NETWORKS[BASE_MAINNET_CAIP2].usdc,
-    gasToken: "ETH",
-    rpcEnv: "BASE_RPC_URL",
-    publicRpcUrl: "https://mainnet.base.org",
-    explorerUrl: "https://basescan.org"
-  },
-  [ARC_MAINNET_CAIP2]: {
-    family: "evm",
-    chainId: 5042,
-    name: "Arc mainnet",
-    usdc: CANONICAL_X402_USDC_NETWORKS[ARC_MAINNET_CAIP2].usdc,
-    gasToken: "USDC",
-    rpcEnv: "ARC_RPC_URL",
-    publicRpcUrl: "https://rpc.mainnet.arc.io",
-    explorerUrl: "https://explorer.arc.io"
-  },
-  [ARC_TESTNET_CAIP2]: {
-    family: "evm",
-    chainId: 5042002,
-    name: "Arc testnet",
-    usdc: CANONICAL_X402_USDC_NETWORKS[ARC_TESTNET_CAIP2].usdc,
-    gasToken: "USDC",
-    rpcEnv: "ARC_TESTNET_RPC_URL"
-  },
-  [SOLANA_MAINNET_CAIP2]: {
-    family: "svm",
-    name: "Solana mainnet",
-    usdc: SOLANA_MAINNET_USDC,
-    gasToken: "SOL",
-    rpcEnv: "SOLANA_RPC_URL",
-    publicRpcUrl: "https://api.mainnet-beta.solana.com"
-  },
-  [X402_SOLANA_MAINNET_CAIP2]: {
-    family: "svm",
-    name: "Solana mainnet",
-    usdc: SOLANA_MAINNET_USDC,
-    gasToken: "SOL",
-    rpcEnv: "SOLANA_RPC_URL",
-    publicRpcUrl: "https://api.mainnet-beta.solana.com"
-  }
+var marketplaceBadgeCodeSchema = external_exports.enum([
+  "live_x402",
+  "partner",
+  "payout_wallet_confirmed",
+  "vapi_verified",
+  "external_catalog",
+  "approved_vendor"
+]);
+var marketplaceBadgeSchema = external_exports.looseObject({
+  code: marketplaceBadgeCodeSchema,
+  label: external_exports.string().trim().min(1).max(80)
+});
+var marketplacePublicFactSchema = external_exports.looseObject({
+  label: external_exports.string().trim().min(1).max(80),
+  value: external_exports.string().trim().min(1).max(160)
+});
+var marketplaceHrefSchema = external_exports.union([
+  external_exports.string().trim().min(1).max(2048).regex(/^\/(?!\/)/),
+  external_exports.url().max(2048).regex(/^https:\/\//)
+]);
+var marketplaceCardSchema = external_exports.looseObject({
+  title: external_exports.string().trim().min(1).max(160),
+  summary: external_exports.string().trim().min(1).max(1e3),
+  byline: external_exports.string().trim().min(1).max(160).optional(),
+  bylineHref: marketplaceHrefSchema.optional(),
+  badges: external_exports.array(marketplaceBadgeSchema).max(8),
+  facts: external_exports.array(marketplacePublicFactSchema).max(12)
+});
+var marketplaceHitBase = {
+  ref: external_exports.string().trim().min(1).max(512),
+  card: marketplaceCardSchema,
+  ...listingDisclosureShape
 };
-function parseEip155ChainId(network) {
-  const match = /^eip155:(\d+)$/.exec(network);
-  if (!match) {
-    throw new Error(`Unsupported network ${network}; expected eip155:<chainId>.`);
-  }
-  const chainId = Number(match[1]);
-  if (!Number.isSafeInteger(chainId) || chainId <= 0) {
-    throw new Error(`Invalid EVM chain ID in network ${network}.`);
-  }
-  return chainId;
-}
-function isSolanaNetwork(network) {
-  return network === SOLANA_MAINNET_CAIP2 || network === X402_SOLANA_MAINNET_CAIP2;
-}
-function usesUsdcGas(network) {
-  try {
-    return getNetworkDefinition(network).gasToken === "USDC";
-  } catch {
-    return false;
-  }
-}
-function explorerTransactionUrl(network, hash4) {
-  try {
-    const explorerUrl = getNetworkDefinition(network).explorerUrl;
-    return explorerUrl ? `${explorerUrl}/tx/${hash4}` : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function explorerAddressUrl(network, address2) {
-  try {
-    const explorerUrl = getNetworkDefinition(network).explorerUrl;
-    return explorerUrl ? `${explorerUrl}/address/${address2}` : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function areSamePaymentNetwork(left, right) {
-  return left === right || isSolanaNetwork(left) && isSolanaNetwork(right);
-}
-function isSupportedPaymentNetwork(network) {
-  if (isSolanaNetwork(network)) return true;
-  try {
-    parseEip155ChainId(network);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function configuredNetworkFor(networks, network) {
-  const configured = networks[network];
-  if (configured) return configured;
-  if (network === X402_SOLANA_MAINNET_CAIP2) return networks[SOLANA_MAINNET_CAIP2];
-  if (network === SOLANA_MAINNET_CAIP2) return networks[X402_SOLANA_MAINNET_CAIP2];
-  return void 0;
-}
-function getNetworkDefinition(network) {
-  const known = NETWORKS[network];
-  if (known) {
-    return known;
-  }
-  const chainId = parseEip155ChainId(network);
-  return {
-    family: "evm",
-    chainId,
-    name: network,
-    usdc: getAddress("0x0000000000000000000000000000000000000000"),
-    gasToken: "ETH",
-    rpcEnv: ""
-  };
-}
-function requireRpcUrl(network, configured) {
-  const definition = getNetworkDefinition(network);
-  const envUrl = definition.rpcEnv ? process.env[definition.rpcEnv]?.trim() : void 0;
-  const rpcUrl = envUrl || configured.rpcUrl.trim();
-  if (rpcUrl) {
-    return rpcUrl;
-  }
-  if (network === ARC_TESTNET_CAIP2) {
-    throw new Error(
-      "Arc testnet RPC is required. Set ARC_TESTNET_RPC_URL or add rpcUrl for eip155:5042002 in config.json."
-    );
-  }
-  throw new Error(`RPC URL is required for ${network}.`);
-}
-function createChain(network, rpcUrl) {
-  const definition = getNetworkDefinition(network);
-  if (definition.family !== "evm" || definition.chainId === void 0) {
-    throw new Error(`Network ${network} is not an EVM chain.`);
+var invokeApiActionSchema = external_exports.looseObject({
+  type: external_exports.literal("invoke_api"),
+  href: marketplaceHrefSchema
+});
+var firstPartyApiMarketplaceHitSchema = external_exports.looseObject({
+  ...marketplaceHitBase,
+  kind: external_exports.literal("api"),
+  provenance: firstPartyProvenanceSchema,
+  execution: external_exports.looseObject({
+    mode: executionModeSchema
+  }),
+  action: invokeApiActionSchema
+});
+var mirroredApiMarketplaceHitSchema = external_exports.looseObject({
+  ...marketplaceHitBase,
+  kind: external_exports.literal("api"),
+  provenance: external_exports.literal("indexed"),
+  execution: external_exports.looseObject({
+    mode: external_exports.literal("direct"),
+    url: external_exports.url().max(2048).regex(/^https:\/\/(?![^/?#]*@)/),
+    method: marketplaceExecutionMethodSchema.nullable(),
+    network: external_exports.string().trim().max(160).transform((network) => {
+      if (network === "solana") return X402_SOLANA_MAINNET_CAIP2;
+      if (network === "solana-devnet") return SOLANA_DEVNET_CAIP2;
+      return network;
+    }).pipe(
+      external_exports.union([
+        external_exports.string().regex(/^[-a-z0-9]{3,8}:[-_a-zA-Z0-9]{1,32}$/),
+        // Persisted mainnet configs also use the full genesis hash.
+        external_exports.literal(SOLANA_MAINNET_CAIP2)
+      ])
+    )
+  }),
+  action: invokeApiActionSchema
+});
+var apiMarketplaceHitSchema = external_exports.discriminatedUnion("provenance", [
+  firstPartyApiMarketplaceHitSchema,
+  mirroredApiMarketplaceHitSchema
+]);
+var serviceOfferMarketplaceHitSchema = external_exports.looseObject({
+  ...marketplaceHitBase,
+  kind: external_exports.literal("service_offer"),
+  action: external_exports.looseObject({
+    type: external_exports.literal("start_engagement"),
+    href: marketplaceHrefSchema
+  })
+});
+var openRequestMarketplaceHitSchema = external_exports.looseObject({
+  ...marketplaceHitBase,
+  kind: external_exports.literal("open_request"),
+  action: external_exports.looseObject({
+    type: external_exports.literal("propose_to_request"),
+    href: marketplaceHrefSchema
+  })
+});
+var marketplaceHitSchema = external_exports.union([
+  apiMarketplaceHitSchema,
+  serviceOfferMarketplaceHitSchema,
+  openRequestMarketplaceHitSchema
+]);
+var marketplaceDiscoveryInputSchema = external_exports.strictObject({
+  q: external_exports.string().trim().max(200).optional(),
+  kinds: external_exports.array(marketplaceKindSchema).min(1).max(MARKETPLACE_KINDS.length).optional(),
+  network: external_exports.string().trim().min(1).max(160).optional(),
+  cursor: external_exports.string().trim().min(1).max(4096).optional(),
+  limit: external_exports.number().int().min(1).max(50).optional(),
+  includeUnverified: external_exports.boolean().optional()
+}).superRefine((input2, context) => {
+  if (input2.kinds && new Set(input2.kinds).size !== input2.kinds.length) {
+    context.addIssue({
+      code: "custom",
+      path: ["kinds"],
+      message: "Marketplace kinds must be unique"
+    });
   }
-  return defineChain({
-    id: definition.chainId,
-    name: definition.name,
-    nativeCurrency: definition.gasToken === "USDC" ? { name: "USDC", symbol: "USDC", decimals: USDC_DECIMALS } : { name: "Ether", symbol: "ETH", decimals: 18 },
-    rpcUrls: {
-      default: { http: [rpcUrl] }
-    },
-    ...definition.explorerUrl ? {
-      blockExplorers: {
-        default: { name: `${definition.name} explorer`, url: definition.explorerUrl }
-      }
-    } : {}
-  });
-}
-function createNetworkPublicClient(network, configured, options = {}) {
-  const rpcUrl = requireRpcUrl(network, configured);
-  return createPublicClient({
-    chain: createChain(network, rpcUrl),
-    transport: createNetworkHttpTransport(rpcUrl, options)
-  });
-}
-function createNetworkHttpTransport(rpcUrl, options = {}) {
-  const fetchFn = options.fetch ?? createPublicFetch({
-    allowPrivateNetwork: options.allowPrivateNetwork ?? false,
-    ...options.lookup ? { lookup: options.lookup } : {}
-  });
-  return http(rpcUrl, { fetchFn, fetchOptions: { redirect: "manual" } });
-}
-function formatUsdc(amountAtomic) {
-  return formatUnits(amountAtomic, USDC_DECIMALS);
+});
+function isMirroredHit(hit) {
+  return hit.kind === "api" && hit.provenance === "indexed";
 }
+var marketplaceDiscoveryEnvelopeSchema = external_exports.looseObject({
+  protocol: external_exports.literal(MARKETPLACE_DISCOVERY_PROTOCOL),
+  items: external_exports.array(external_exports.unknown()),
+  nextCursor: external_exports.string().min(1).max(4096).nullable(),
+  unavailableKinds: external_exports.array(marketplaceKindSchema).max(MARKETPLACE_KINDS.length),
+  rankingVersion: external_exports.literal(MARKETPLACE_RANKING_VERSION)
+});
+var marketplaceDiscoveryPageSchema = marketplaceDiscoveryEnvelopeSchema.extend({
+  items: external_exports.array(marketplaceHitSchema)
+});
 
 // ../../node_modules/.pnpm/@solana+errors@5.5.1_typescript@6.0.3/node_modules/@solana/errors/dist/index.node.mjs
 var SOLANA_ERROR__BLOCK_HEIGHT_EXCEEDED = 1;
@@ -44475,16 +43915,16 @@ var DEFAULT_COMPUTE_UNIT_PRICE_MICROLAMPORTS = 1;
 var DEFAULT_COMPUTE_UNIT_LIMIT = 2e4;
 var MAX_MEMO_BYTES = 256;
 var SOLANA_MAINNET_CAIP22 = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
-var SOLANA_DEVNET_CAIP2 = "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1";
+var SOLANA_DEVNET_CAIP22 = "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1";
 var SOLANA_TESTNET_CAIP2 = "solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3z";
 var V1_TO_V2_NETWORK_MAP = {
   solana: SOLANA_MAINNET_CAIP22,
-  "solana-devnet": SOLANA_DEVNET_CAIP2,
+  "solana-devnet": SOLANA_DEVNET_CAIP22,
   "solana-testnet": SOLANA_TESTNET_CAIP2
 };
 function normalizeNetwork(network) {
   if (network.includes(":")) {
-    const supported = [SOLANA_MAINNET_CAIP22, SOLANA_DEVNET_CAIP2, SOLANA_TESTNET_CAIP2];
+    const supported = [SOLANA_MAINNET_CAIP22, SOLANA_DEVNET_CAIP22, SOLANA_TESTNET_CAIP2];
     if (!supported.includes(network)) {
       throw new Error(`Unsupported SVM network: ${network}`);
     }
@@ -44532,7 +43972,7 @@ var DEFAULT_ASSETS = {
       tokenProgram: TOKEN_2022_PROGRAM_ADDRESS2
     }
   ],
-  [SOLANA_DEVNET_CAIP2]: [
+  [SOLANA_DEVNET_CAIP22]: [
     {
       asset: USDC_DEVNET_ADDRESS,
       decimals: 6,
@@ -44587,7 +44027,7 @@ var findDefaultAsset = (asset, network) => {
 function createRpcClient(network, customRpcUrl) {
   const caip2Network = normalizeNetwork(network);
   switch (caip2Network) {
-    case SOLANA_DEVNET_CAIP2: {
+    case SOLANA_DEVNET_CAIP22: {
       const url2 = customRpcUrl || DEVNET_RPC_URL;
       return createSolanaRpc(devnet(url2));
     }
@@ -44785,6 +44225,376 @@ var ExactSvmScheme = class {
 var addressEncoder = getAddressEncoder();
 var compiledMessageDecoder = getCompiledTransactionMessageDecoder();
 
+// src/net-guard.ts
+import { lookup as dnsLookup } from "node:dns/promises";
+import { request as httpRequest } from "node:http";
+import { request as httpsRequest } from "node:https";
+import { isIP } from "node:net";
+import { Readable } from "node:stream";
+var defaultLookup = async (hostname3) => {
+  const addresses = await dnsLookup(hostname3, { all: true });
+  return addresses.map(({ address: address2 }) => address2);
+};
+async function assertPublicUrl(url2, options) {
+  if (url2.username || url2.password) {
+    throw guardError(url2);
+  }
+  if (url2.protocol !== "http:" && url2.protocol !== "https:") {
+    throw guardError(url2);
+  }
+  if (options.allowPrivateNetwork) {
+    return;
+  }
+  const hostname3 = normalizeHostname(url2.hostname);
+  const lowercaseHostname = hostname3.toLowerCase();
+  if (!lowercaseHostname || lowercaseHostname === "localhost" || lowercaseHostname.endsWith(".localhost") || lowercaseHostname.endsWith(".local") || lowercaseHostname.endsWith(".internal")) {
+    throw guardError(url2);
+  }
+  if (isIP(hostname3)) {
+    if (isNonPublicAddress(hostname3)) {
+      throw guardError(url2);
+    }
+    return;
+  }
+  let addresses;
+  try {
+    addresses = await withTimeout2(
+      (options.lookup ?? defaultLookup)(hostname3),
+      options.timeoutMs ?? 5e3
+    );
+  } catch {
+    throw guardError(url2);
+  }
+  if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
+    throw guardError(url2);
+  }
+}
+function createPublicFetch(options) {
+  const lookupFn = options.lookup ?? defaultLookup;
+  return (async (input2, init) => {
+    const url2 = new URL(input2 instanceof Request ? input2.url : input2);
+    await assertPublicUrl(url2, {
+      allowPrivateNetwork: options.allowPrivateNetwork,
+      lookup: lookupFn,
+      timeoutMs: 5e3
+    });
+    const normalized = new Request(input2, init);
+    const bytes = normalized.body ? Buffer.from(await normalized.arrayBuffer()) : null;
+    return await new Promise((resolve2, reject) => {
+      const requestOptions = {
+        method: normalized.method,
+        headers: Object.fromEntries(normalized.headers),
+        signal: normalized.signal,
+        ...options.allowPrivateNetwork ? {} : { lookup: pinnedLookup(lookupFn) }
+      };
+      const onResponse = (incoming) => {
+        try {
+          const headers = new Headers();
+          for (const [name, value] of Object.entries(incoming.headers)) {
+            if (Array.isArray(value)) {
+              for (const item of value) headers.append(name, item);
+            } else if (value !== void 0) {
+              headers.set(name, value);
+            }
+          }
+          const status = incoming.statusCode ?? 500;
+          const bodyForbidden = normalized.method === "HEAD" || [204, 205, 304].includes(status);
+          if (bodyForbidden) incoming.resume();
+          const response = new Response(
+            bodyForbidden ? null : Readable.toWeb(incoming),
+            { status, statusText: incoming.statusMessage, headers }
+          );
+          Object.defineProperty(response, "url", { value: url2.toString() });
+          resolve2(response);
+        } catch (error61) {
+          incoming.destroy();
+          reject(error61);
+        }
+      };
+      const request = url2.protocol === "https:" ? httpsRequest(url2, requestOptions, onResponse) : httpRequest(url2, requestOptions, onResponse);
+      request.on("error", reject);
+      if (bytes) request.write(bytes);
+      request.end();
+    });
+  });
+}
+function pinnedLookup(lookup) {
+  return (hostname3, dnsOptions, callback) => {
+    void lookup(normalizeHostname(hostname3)).then((addresses) => {
+      if (addresses.length === 0 || addresses.some(isNonPublicAddress)) {
+        callback(guardError(new URL(`https://${hostname3}`)), "");
+        return;
+      }
+      const address2 = addresses[0];
+      const family = isIP(address2);
+      callback(
+        null,
+        dnsOptions.all ? [{ address: address2, family }] : address2,
+        dnsOptions.all ? void 0 : family
+      );
+    }).catch(
+      (error61) => callback(error61 instanceof Error ? error61 : new Error("DNS lookup failed."), "")
+    );
+  };
+}
+async function withTimeout2(operation, timeoutMs) {
+  let timeout;
+  try {
+    return await Promise.race([
+      operation,
+      new Promise((_resolve, reject) => {
+        timeout = setTimeout(() => reject(new Error("DNS lookup timed out.")), timeoutMs);
+      })
+    ]);
+  } finally {
+    if (timeout) clearTimeout(timeout);
+  }
+}
+function normalizeHostname(hostname3) {
+  const unbracketed = hostname3.startsWith("[") && hostname3.endsWith("]") ? hostname3.slice(1, -1) : hostname3;
+  return unbracketed.endsWith(".") ? unbracketed.slice(0, -1) : unbracketed;
+}
+function isNonPublicAddress(address2) {
+  const normalized = normalizeHostname(address2);
+  const version5 = isIP(normalized);
+  if (version5 === 4) {
+    return isNonPublicIpv4(parseIpv4(normalized));
+  }
+  if (version5 === 6) {
+    return isNonPublicIpv6(parseIpv6(normalized));
+  }
+  return true;
+}
+function parseIpv4(address2) {
+  const octets = address2.split(".").map(Number);
+  return [octets[0], octets[1], octets[2], octets[3]];
+}
+function isNonPublicIpv4([first, second, third]) {
+  return first === 0 || first === 10 || first === 100 && second >= 64 && second <= 127 || first === 127 || first === 169 && second === 254 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 0 && (third === 0 || third === 2) || first === 192 && second === 168 || first === 198 && second >= 18 && second <= 19 || first === 198 && second === 51 && third === 100 || first === 203 && second === 0 && third === 113 || first >= 224;
+}
+function parseIpv6(address2) {
+  let normalized = address2.toLowerCase();
+  const lastColon = normalized.lastIndexOf(":");
+  const dottedTail = normalized.slice(lastColon + 1);
+  if (dottedTail.includes(".")) {
+    const [first, second, third, fourth] = parseIpv4(dottedTail);
+    normalized = `${normalized.slice(0, lastColon + 1)}${(first << 8 | second).toString(16)}:${(third << 8 | fourth).toString(16)}`;
+  }
+  const halves = normalized.split("::");
+  const left = halves[0] ? halves[0].split(":").map(parseHex) : [];
+  const right = halves[1] ? halves[1].split(":").map(parseHex) : [];
+  const omittedCount = 8 - left.length - right.length;
+  return halves.length === 2 ? [...left, ...Array.from({ length: omittedCount }, () => 0), ...right] : left;
+}
+function parseHex(value) {
+  return Number.parseInt(value, 16);
+}
+function isNonPublicIpv6(hextets) {
+  if (hextets.slice(0, 5).every((hextet) => hextet === 0) && hextets[5] === 65535) {
+    const embeddedIpv4 = [
+      hextets[6] >> 8,
+      hextets[6] & 255,
+      hextets[7] >> 8,
+      hextets[7] & 255
+    ];
+    return isNonPublicIpv4(embeddedIpv4);
+  }
+  if (hextets.slice(0, 6).every((hextet) => hextet === 0)) {
+    const compatibleIpv4 = [
+      hextets[6] >> 8,
+      hextets[6] & 255,
+      hextets[7] >> 8,
+      hextets[7] & 255
+    ];
+    if (isNonPublicIpv4(compatibleIpv4)) return true;
+  }
+  const isUnspecified = hextets.every((hextet) => hextet === 0);
+  const isLoopback = hextets.slice(0, 7).every((hextet) => hextet === 0) && hextets[7] === 1;
+  const first = hextets[0];
+  const isUniqueLocal = first >= 64512 && first <= 65023;
+  const isLinkLocal = first >= 65152 && first <= 65215;
+  const isSiteLocal = first >= 65216 && first <= 65279;
+  const isMulticast = first >= 65280;
+  const isDocumentation = first === 8193 && hextets[1] === 3512;
+  return isUnspecified || isLoopback || isUniqueLocal || isLinkLocal || isSiteLocal || isMulticast || isDocumentation;
+}
+function guardError(url2) {
+  return new Error(
+    `URL hostname ${JSON.stringify(url2.hostname)} is not allowed; private or internal destinations require allowPrivateNetwork true in the vAPI config.`
+  );
+}
+
+// src/networks.ts
+var USDC_DECIMALS = 6;
+var DEFAULT_ARC_GAS_HEADROOM_ATOMIC = 50000n;
+var NETWORKS2 = {
+  [BASE_MAINNET_CAIP2]: {
+    family: "evm",
+    chainId: 8453,
+    name: "Base mainnet",
+    usdc: CANONICAL_X402_USDC_NETWORKS[BASE_MAINNET_CAIP2].usdc,
+    gasToken: "ETH",
+    rpcEnv: "BASE_RPC_URL",
+    publicRpcUrl: "https://mainnet.base.org",
+    explorerUrl: "https://basescan.org"
+  },
+  [ARC_MAINNET_CAIP2]: {
+    family: "evm",
+    chainId: 5042,
+    name: "Arc mainnet",
+    usdc: CANONICAL_X402_USDC_NETWORKS[ARC_MAINNET_CAIP2].usdc,
+    gasToken: "USDC",
+    rpcEnv: "ARC_RPC_URL",
+    publicRpcUrl: "https://rpc.mainnet.arc.io",
+    explorerUrl: "https://explorer.arc.io"
+  },
+  [ARC_TESTNET_CAIP2]: {
+    family: "evm",
+    chainId: 5042002,
+    name: "Arc testnet",
+    usdc: CANONICAL_X402_USDC_NETWORKS[ARC_TESTNET_CAIP2].usdc,
+    gasToken: "USDC",
+    rpcEnv: "ARC_TESTNET_RPC_URL"
+  },
+  [SOLANA_MAINNET_CAIP2]: {
+    family: "svm",
+    name: "Solana mainnet",
+    usdc: SOLANA_MAINNET_USDC,
+    gasToken: "SOL",
+    rpcEnv: "SOLANA_RPC_URL",
+    publicRpcUrl: "https://api.mainnet-beta.solana.com"
+  },
+  [X402_SOLANA_MAINNET_CAIP2]: {
+    family: "svm",
+    name: "Solana mainnet",
+    usdc: SOLANA_MAINNET_USDC,
+    gasToken: "SOL",
+    rpcEnv: "SOLANA_RPC_URL",
+    publicRpcUrl: "https://api.mainnet-beta.solana.com"
+  }
+};
+function parseEip155ChainId(network) {
+  const match = /^eip155:(\d+)$/.exec(network);
+  if (!match) {
+    throw new Error(`Unsupported network ${network}; expected eip155:<chainId>.`);
+  }
+  const chainId = Number(match[1]);
+  if (!Number.isSafeInteger(chainId) || chainId <= 0) {
+    throw new Error(`Invalid EVM chain ID in network ${network}.`);
+  }
+  return chainId;
+}
+function isSolanaNetwork(network) {
+  return network === SOLANA_MAINNET_CAIP2 || network === X402_SOLANA_MAINNET_CAIP2;
+}
+function usesUsdcGas(network) {
+  try {
+    return getNetworkDefinition(network).gasToken === "USDC";
+  } catch {
+    return false;
+  }
+}
+function explorerTransactionUrl(network, hash4) {
+  try {
+    const explorerUrl = getNetworkDefinition(network).explorerUrl;
+    return explorerUrl ? `${explorerUrl}/tx/${hash4}` : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function explorerAddressUrl(network, address2) {
+  try {
+    const explorerUrl = getNetworkDefinition(network).explorerUrl;
+    return explorerUrl ? `${explorerUrl}/address/${address2}` : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function areSamePaymentNetwork(left, right) {
+  return left === right || isSolanaNetwork(left) && isSolanaNetwork(right);
+}
+function isSupportedPaymentNetwork(network) {
+  if (isSolanaNetwork(network)) return true;
+  try {
+    parseEip155ChainId(network);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function configuredNetworkFor(networks, network) {
+  const configured = networks[network];
+  if (configured) return configured;
+  if (network === X402_SOLANA_MAINNET_CAIP2) return networks[SOLANA_MAINNET_CAIP2];
+  if (network === SOLANA_MAINNET_CAIP2) return networks[X402_SOLANA_MAINNET_CAIP2];
+  return void 0;
+}
+function getNetworkDefinition(network) {
+  const known = NETWORKS2[network];
+  if (known) {
+    return known;
+  }
+  const chainId = parseEip155ChainId(network);
+  return {
+    family: "evm",
+    chainId,
+    name: network,
+    usdc: getAddress("0x0000000000000000000000000000000000000000"),
+    gasToken: "ETH",
+    rpcEnv: ""
+  };
+}
+function requireRpcUrl(network, configured) {
+  const definition = getNetworkDefinition(network);
+  const envUrl = definition.rpcEnv ? process.env[definition.rpcEnv]?.trim() : void 0;
+  const rpcUrl = envUrl || configured.rpcUrl.trim();
+  if (rpcUrl) {
+    return rpcUrl;
+  }
+  if (network === ARC_TESTNET_CAIP2) {
+    throw new Error(
+      "Arc testnet RPC is required. Set ARC_TESTNET_RPC_URL or add rpcUrl for eip155:5042002 in config.json."
+    );
+  }
+  throw new Error(`RPC URL is required for ${network}.`);
+}
+function createChain(network, rpcUrl) {
+  const definition = getNetworkDefinition(network);
+  if (definition.family !== "evm" || definition.chainId === void 0) {
+    throw new Error(`Network ${network} is not an EVM chain.`);
+  }
+  return defineChain({
+    id: definition.chainId,
+    name: definition.name,
+    nativeCurrency: definition.gasToken === "USDC" ? { name: "USDC", symbol: "USDC", decimals: USDC_DECIMALS } : { name: "Ether", symbol: "ETH", decimals: 18 },
+    rpcUrls: {
+      default: { http: [rpcUrl] }
+    },
+    ...definition.explorerUrl ? {
+      blockExplorers: {
+        default: { name: `${definition.name} explorer`, url: definition.explorerUrl }
+      }
+    } : {}
+  });
+}
+function createNetworkPublicClient(network, configured, options = {}) {
+  const rpcUrl = requireRpcUrl(network, configured);
+  return createPublicClient({
+    chain: createChain(network, rpcUrl),
+    transport: createNetworkHttpTransport(rpcUrl, options)
+  });
+}
+function createNetworkHttpTransport(rpcUrl, options = {}) {
+  const fetchFn = options.fetch ?? createPublicFetch({
+    allowPrivateNetwork: options.allowPrivateNetwork ?? false,
+    ...options.lookup ? { lookup: options.lookup } : {}
+  });
+  return http(rpcUrl, { fetchFn, fetchOptions: { redirect: "manual" } });
+}
+function formatUsdc(amountAtomic) {
+  return formatUnits(amountAtomic, USDC_DECIMALS);
+}
+
 // src/x402.ts
 var MAX_CHALLENGE_BYTES = 1048576;
 var MAX_UINT256 = (1n << 256n) - 1n;
@@ -45644,6 +45454,237 @@ function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/call-contracts-wire.ts
+var CALLABLE_KIND = "agent";
+var CALLABLE_CATEGORIES = ["ai", "data", "crypto", "compute", "search"];
+var callableCategorySchema = external_exports.enum(CALLABLE_CATEGORIES);
+var DISCOVERY_CATEGORIES = [...CALLABLE_CATEGORIES, "other"];
+var discoveryCategorySchema = external_exports.enum(DISCOVERY_CATEGORIES);
+var CALLABLE_CATEGORY_LABELS = {
+  ai: { catalog: "AI / LLM", publish: "AI and models" },
+  data: { catalog: "Data", publish: "Data" },
+  crypto: { catalog: "Crypto", publish: "Crypto" },
+  compute: { catalog: "Compute", publish: "Compute" },
+  search: { catalog: "Search", publish: "Search" }
+};
+var CALLABLE_CATEGORY_SET = new Set(CALLABLE_CATEGORIES);
+function isCallableListing(kind, category) {
+  return kind === CALLABLE_KIND && CALLABLE_CATEGORY_SET.has(category);
+}
+var serviceTierSchema = external_exports.enum(["listed", "verified", "partner"]);
+var discoveryEndpointSchema = external_exports.looseObject({
+  name: external_exports.string(),
+  method: external_exports.string(),
+  url: external_exports.url(),
+  price: external_exports.string(),
+  description: external_exports.string(),
+  operationId: external_exports.string().trim().min(1).optional(),
+  requestContentType: external_exports.string().trim().min(1).optional(),
+  requestSchema: external_exports.json().optional(),
+  responseContentType: external_exports.string().trim().min(1).optional(),
+  pathTemplate: external_exports.string().trim().min(1).optional(),
+  pathParameters: external_exports.array(external_exports.string().trim().min(1)).optional(),
+  payment: external_exports.union([
+    external_exports.looseObject({
+      scheme: external_exports.literal("exact"),
+      network: external_exports.string().regex(/^eip155:\d+$/),
+      asset: external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/),
+      payTo: external_exports.string().regex(/^0x[0-9a-fA-F]{40}$/),
+      checkedAt: external_exports.iso.datetime()
+    }),
+    external_exports.looseObject({
+      scheme: external_exports.literal("exact"),
+      network: external_exports.union([
+        external_exports.string().regex(/^solana:[-_a-zA-Z0-9]{1,32}$/),
+        external_exports.literal(SOLANA_MAINNET_CAIP2)
+      ]),
+      asset: external_exports.string().refine(isSolanaAddress, "Expected a Solana base58 address."),
+      payTo: external_exports.string().refine(isSolanaAddress, "Expected a Solana base58 address."),
+      checkedAt: external_exports.iso.datetime()
+    })
+  ]).optional()
+});
+var serviceSummarySchema = external_exports.looseObject({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  description: external_exports.string(),
+  category: discoveryCategorySchema,
+  tier: serviceTierSchema,
+  ...listingDisclosureShape,
+  verified: external_exports.boolean(),
+  wrapped: external_exports.boolean(),
+  price: external_exports.string(),
+  networks: external_exports.array(external_exports.string()),
+  endpoints: external_exports.array(discoveryEndpointSchema)
+});
+var searchServicesResponseSchema = external_exports.looseObject({
+  services: external_exports.array(serviceSummarySchema)
+});
+var listServicesResponseSchema = searchServicesResponseSchema;
+var discoveryServiceSchema = serviceSummarySchema;
+var discoveryResponseSchema = searchServicesResponseSchema;
+
+// src/call-contracts.ts
+var DiscoveryCatalogError = class extends Error {
+  constructor(code, message, serviceId, paymentNetworks) {
+    super(message);
+    this.paymentNetworks = paymentNetworks;
+    this.code = code;
+    this.serviceId = serviceId;
+  }
+  paymentNetworks;
+  name = "DiscoveryCatalogError";
+  code;
+  serviceId;
+};
+function isDiscoveryCatalogError(error61) {
+  if (!(error61 instanceof Error) || error61.name !== "DiscoveryCatalogError" || !("code" in error61) || typeof error61.code !== "string") {
+    return false;
+  }
+  const networks = Reflect.get(error61, "paymentNetworks");
+  return networks === void 0 || Array.isArray(networks) && networks.every((network) => typeof network === "string");
+}
+function parseDiscovery(raw) {
+  const parsed = discoveryResponseSchema.safeParse(raw);
+  if (!parsed.success) {
+    const malformedUrl = parsed.error.issues.find(
+      (issue2) => issue2.path.at(-1) === "url" && issue2.path.includes("endpoints")
+    );
+    if (malformedUrl) {
+      const serviceIndex = pathIndexAfter(malformedUrl.path, "services");
+      const serviceId = rawServiceId(raw, serviceIndex);
+      throw new DiscoveryCatalogError(
+        "malformed_url",
+        `Service ${JSON.stringify(serviceId ?? "unknown")} has a malformed endpoint URL.`,
+        serviceId
+      );
+    }
+    throw new DiscoveryCatalogError("invalid_discovery", "Discovery response is malformed.");
+  }
+  for (const service of parsed.data.services) {
+    buildTargets(service);
+  }
+  const resolveListing = (serviceId, endpointName) => {
+    const service = parsed.data.services.find((candidate) => candidate.id === serviceId);
+    if (!service) {
+      throw new DiscoveryCatalogError(
+        "service_not_found",
+        `No payable endpoint found for service ${JSON.stringify(serviceId)}.`,
+        serviceId
+      );
+    }
+    return { service, endpoint: resolveTarget(service, endpointName) };
+  };
+  return {
+    services: parsed.data.services,
+    resolve: (serviceId, endpointName) => resolveListing(serviceId, endpointName).endpoint,
+    resolveListing
+  };
+}
+function resolveTarget(service, endpointName) {
+  const { targets, targetsByName } = buildTargets(service);
+  if (endpointName !== void 0) {
+    const selected = targetsByName.get(endpointName.trim());
+    if (!selected) {
+      throw new DiscoveryCatalogError(
+        "endpoint_not_found",
+        `Service ${JSON.stringify(service.id)} has no endpoint ${JSON.stringify(endpointName)}. Available endpoints: ${[...targetsByName.keys()].join(", ")}.`,
+        service.id
+      );
+    }
+    return { ...selected };
+  }
+  if (targets.size !== 1) {
+    const paymentNetworks = service.endpoints.flatMap(
+      (endpoint) => endpoint.payment ? [endpoint.payment.network] : []
+    );
+    throw new DiscoveryCatalogError(
+      "ambiguous_default",
+      `Service ${JSON.stringify(service.id)} has ${targets.size} distinct payable endpoints. Choose one with endpoint: ${[...targetsByName.keys()].join(", ")}.`,
+      service.id,
+      paymentNetworks.length === service.endpoints.length ? paymentNetworks : void 0
+    );
+  }
+  return targets.values().next().value;
+}
+function buildTargets(service) {
+  if (service.endpoints.length === 0) {
+    throw new DiscoveryCatalogError(
+      "no_endpoint",
+      `Service ${JSON.stringify(service.id)} has no payable endpoint.`,
+      service.id
+    );
+  }
+  const namedEndpoints = [...service.endpoints].sort(
+    (left, right) => compareNames(left.name.trim(), right.name.trim())
+  );
+  const names = /* @__PURE__ */ new Set();
+  const targets = /* @__PURE__ */ new Map();
+  const targetsByName = /* @__PURE__ */ new Map();
+  for (const endpoint of namedEndpoints) {
+    const name = endpoint.name.trim();
+    if (!name) {
+      throw new DiscoveryCatalogError(
+        "invalid_endpoint_name",
+        `Service ${JSON.stringify(service.id)} has a blank endpoint name.`,
+        service.id
+      );
+    }
+    if (names.has(name)) {
+      throw new DiscoveryCatalogError(
+        "duplicate_endpoint_name",
+        `Service ${JSON.stringify(service.id)} has duplicate endpoint name ${JSON.stringify(name)}.`,
+        service.id
+      );
+    }
+    names.add(name);
+    const method = endpoint.method.trim().toUpperCase();
+    if (!method) {
+      throw new DiscoveryCatalogError(
+        "blank_method",
+        `Service ${JSON.stringify(service.id)} has a blank endpoint method.`,
+        service.id
+      );
+    }
+    const url2 = new URL(endpoint.url);
+    if (url2.protocol !== "http:" && url2.protocol !== "https:") {
+      throw new DiscoveryCatalogError(
+        "malformed_url",
+        `Service ${JSON.stringify(service.id)} has a non-HTTP endpoint URL.`,
+        service.id
+      );
+    }
+    const transportKey = `${method}\0${endpoint.url}`;
+    const normalized = { ...endpoint, name, method };
+    targetsByName.set(name, normalized);
+    if (!targets.has(transportKey)) targets.set(transportKey, normalized);
+  }
+  return { targets, targetsByName };
+}
+function compareNames(left, right) {
+  return left < right ? -1 : left > right ? 1 : 0;
+}
+function pathIndexAfter(path, key) {
+  const keyIndex = path.indexOf(key);
+  const candidate = path[keyIndex + 1];
+  return typeof candidate === "number" ? candidate : void 0;
+}
+function rawServiceId(raw, serviceIndex) {
+  if (serviceIndex === void 0 || typeof raw !== "object" || raw === null) {
+    return void 0;
+  }
+  const services = Reflect.get(raw, "services");
+  if (!Array.isArray(services)) {
+    return void 0;
+  }
+  const service = services[serviceIndex];
+  if (typeof service !== "object" || service === null) {
+    return void 0;
+  }
+  const id = Reflect.get(service, "id");
+  return typeof id === "string" ? id : void 0;
+}
+
 // src/sweep.ts
 var ERC20_ABI = [
   {
@@ -46438,6 +46479,8 @@ var DEFAULT_SPEND_CAPS = {
   perCallAtomic: "100000",
   perDayAtomic: "1000000"
 };
+var DEFAULT_MAX_PER_TASK_USD = 100;
+var DEFAULT_AUTO_RELEASE_BELOW_USD = 25;
 var DEFAULT_CEILING_ATOMIC = 5000000n;
 var atomicString = external_exports.string().regex(/^\d+$/, "Expected non-negative atomic units.");
 var spendCapsSchema = external_exports.object({
@@ -46454,6 +46497,14 @@ var configSchema = external_exports.object({
     })
   ).optional(),
   allowPrivateNetwork: external_exports.boolean().default(false).optional(),
+  tasksEscrowDurationOverrides: external_exports.record(
+    external_exports.string().regex(/^\d+$/),
+    external_exports.object({
+      workDurationSeconds: external_exports.number().int().positive().max(Number.MAX_SAFE_INTEGER).optional(),
+      reviewWindowSeconds: external_exports.number().int().positive().max(Number.MAX_SAFE_INTEGER).optional()
+    }).strict()
+  ).optional(),
+  tasksEscrowFactoryOverrides: external_exports.record(external_exports.string().regex(/^\d+$/), external_exports.string()).optional(),
   networks: external_exports.record(
     external_exports.string().refine((network) => isSupportedPaymentNetwork(network), {
       message: "Expected a supported eip155:<chainId> or Solana network identifier."
@@ -46472,9 +46523,20 @@ var configSchema = external_exports.object({
   spendCaps: spendCapsSchema,
   device: external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,31}$/).optional()
 }).superRefine((config2, context) => {
+  for (const [chainId, factory] of Object.entries(config2.tasksEscrowFactoryOverrides ?? {})) {
+    try {
+      getAddress(factory);
+    } catch {
+      context.addIssue({
+        code: "custom",
+        path: ["tasksEscrowFactoryOverrides", chainId],
+        message: "Expected a valid EVM escrow factory address."
+      });
+    }
+  }
   for (const [network, configured] of Object.entries(config2.networks)) {
     if (isSolanaNetwork(network)) {
-      if (configured.usdc !== NETWORKS[SOLANA_MAINNET_CAIP2].usdc) {
+      if (configured.usdc !== NETWORKS2[SOLANA_MAINNET_CAIP2].usdc) {
         context.addIssue({
           code: "custom",
           path: ["networks", network, "usdc"],
@@ -46485,7 +46547,7 @@ var configSchema = external_exports.object({
     }
     try {
       const usdc = getAddress(configured.usdc);
-      if ((network === ARC_MAINNET_CAIP2 || network === ARC_TESTNET_CAIP2) && usdc !== getAddress(NETWORKS[network].usdc)) {
+      if ((network === ARC_MAINNET_CAIP2 || network === ARC_TESTNET_CAIP2) && usdc !== getAddress(NETWORKS2[network].usdc)) {
         context.addIssue({
           code: "custom",
           path: ["networks", network, "usdc"],
@@ -46634,17 +46696,18 @@ function getDefaultConfig(source = process.env, options = {}) {
   const registry2 = registryEndpoints(source.VAPI_REGISTRY_URL?.trim() || DEFAULT_REGISTRY_URL);
   const requested = new Set(options.networks ?? ["base"]);
   const networks = {};
+  const tasksEscrowFactoryOverrides = tasksFactoryOverridesFromEnv(source);
   if (requested.has("base") || requested.has(BASE_MAINNET_CAIP2)) {
     networks[BASE_MAINNET_CAIP2] = {
-      rpcUrl: source.BASE_RPC_URL?.trim() || NETWORKS[BASE_MAINNET_CAIP2].publicRpcUrl,
-      usdc: NETWORKS[BASE_MAINNET_CAIP2].usdc
+      rpcUrl: source.BASE_RPC_URL?.trim() || NETWORKS2[BASE_MAINNET_CAIP2].publicRpcUrl,
+      usdc: NETWORKS2[BASE_MAINNET_CAIP2].usdc
     };
   }
   const arcMainnetRpcUrl = source.ARC_RPC_URL?.trim();
   if (arcMainnetRpcUrl || requested.has("arc") || requested.has(ARC_MAINNET_CAIP2)) {
     networks[ARC_MAINNET_CAIP2] = {
-      rpcUrl: arcMainnetRpcUrl || NETWORKS[ARC_MAINNET_CAIP2].publicRpcUrl,
-      usdc: NETWORKS[ARC_MAINNET_CAIP2].usdc
+      rpcUrl: arcMainnetRpcUrl || NETWORKS2[ARC_MAINNET_CAIP2].publicRpcUrl,
+      usdc: NETWORKS2[ARC_MAINNET_CAIP2].usdc
     };
   }
   const arcTestnetRpcUrl = source.ARC_TESTNET_RPC_URL?.trim();
@@ -46656,14 +46719,14 @@ function getDefaultConfig(source = process.env, options = {}) {
     }
     networks[ARC_TESTNET_CAIP2] = {
       rpcUrl: arcTestnetRpcUrl,
-      usdc: NETWORKS[ARC_TESTNET_CAIP2].usdc
+      usdc: NETWORKS2[ARC_TESTNET_CAIP2].usdc
     };
   }
   const solanaRpcUrl = source.SOLANA_RPC_URL?.trim();
   if (solanaRpcUrl || requested.has("solana") || requested.has(SOLANA_MAINNET_CAIP2)) {
     networks[SOLANA_MAINNET_CAIP2] = {
-      rpcUrl: solanaRpcUrl || NETWORKS[SOLANA_MAINNET_CAIP2].publicRpcUrl,
-      usdc: NETWORKS[SOLANA_MAINNET_CAIP2].usdc
+      rpcUrl: solanaRpcUrl || NETWORKS2[SOLANA_MAINNET_CAIP2].publicRpcUrl,
+      usdc: NETWORKS2[SOLANA_MAINNET_CAIP2].usdc
     };
   }
   return {
@@ -46671,6 +46734,8 @@ function getDefaultConfig(source = process.env, options = {}) {
     marketplaceDiscoveryUrl: source.VAPI_MARKETPLACE_DISCOVERY_URL?.trim() || registry2.marketplaceDiscoveryUrl,
     registryFallbacks: DEFAULT_REGISTRY_FALLBACKS.map((fallback) => ({ ...fallback })),
     allowPrivateNetwork: false,
+    tasksEscrowFactoryOverrides,
+    tasksEscrowDurationOverrides: tasksDurationOverridesFromEnv(source),
     networks,
     spendCaps: { ...DEFAULT_SPEND_CAPS }
   };
@@ -46688,8 +46753,10 @@ async function loadConfig(path = getVapiPaths().config, source = process.env, op
   }
   const parsed = configSchema.parse(JSON.parse(raw));
   parsed.registryFallbacks ??= DEFAULT_REGISTRY_FALLBACKS.map((fallback) => ({ ...fallback }));
+  parsed.tasksEscrowFactoryOverrides ??= {};
   const migrated = rewriteLegacyRegistryUrls(parsed);
   const config2 = migrated.config;
+  config2.tasksEscrowFactoryOverrides ??= {};
   if (migrated.changes.length > 0 && options.notice) {
     options.notice(
       `${formatLegacyRegistryRewrites(migrated.changes)}
@@ -46703,27 +46770,35 @@ Run vapi init to write the new URLs to ${path}.`
   const discoveryUrl = source.VAPI_DISCOVERY_URL?.trim();
   const marketplaceDiscoveryUrl = source.VAPI_MARKETPLACE_DISCOVERY_URL?.trim();
   const registryUrl = source.VAPI_REGISTRY_URL?.trim();
+  Object.assign(config2.tasksEscrowFactoryOverrides, tasksFactoryOverridesFromEnv(source));
+  config2.tasksEscrowDurationOverrides ??= {};
+  for (const [chainId, overrides] of Object.entries(tasksDurationOverridesFromEnv(source))) {
+    config2.tasksEscrowDurationOverrides[chainId] = {
+      ...config2.tasksEscrowDurationOverrides[chainId],
+      ...overrides
+    };
+  }
   if (config2.networks[BASE_MAINNET_CAIP2] && baseRpcUrl) {
     config2.networks[BASE_MAINNET_CAIP2].rpcUrl = baseRpcUrl;
   }
   if (arcMainnetRpcUrl) {
     const existing = config2.networks[ARC_MAINNET_CAIP2];
     config2.networks[ARC_MAINNET_CAIP2] = {
-      ...existing ?? { usdc: NETWORKS[ARC_MAINNET_CAIP2].usdc },
+      ...existing ?? { usdc: NETWORKS2[ARC_MAINNET_CAIP2].usdc },
       rpcUrl: arcMainnetRpcUrl
     };
   }
   if (arcTestnetRpcUrl) {
     const existing = config2.networks[ARC_TESTNET_CAIP2];
     config2.networks[ARC_TESTNET_CAIP2] = {
-      ...existing ?? { usdc: NETWORKS[ARC_TESTNET_CAIP2].usdc },
+      ...existing ?? { usdc: NETWORKS2[ARC_TESTNET_CAIP2].usdc },
       rpcUrl: arcTestnetRpcUrl
     };
   }
   if (solanaRpcUrl) {
     config2.networks[SOLANA_MAINNET_CAIP2] = {
       rpcUrl: solanaRpcUrl,
-      usdc: config2.networks[SOLANA_MAINNET_CAIP2]?.usdc ?? NETWORKS[SOLANA_MAINNET_CAIP2].usdc
+      usdc: config2.networks[SOLANA_MAINNET_CAIP2]?.usdc ?? NETWORKS2[SOLANA_MAINNET_CAIP2].usdc
     };
   }
   if (registryUrl) {
@@ -46736,13 +46811,38 @@ Run vapi init to write the new URLs to ${path}.`
   for (const [network, configured] of Object.entries(config2.networks)) {
     configured.rpcUrl = configured.rpcUrl.trim();
     configured.usdc = configured.usdc.trim();
-    if (isSolanaNetwork(network) && configured.usdc !== NETWORKS[SOLANA_MAINNET_CAIP2].usdc) {
+    if (isSolanaNetwork(network) && configured.usdc !== NETWORKS2[SOLANA_MAINNET_CAIP2].usdc) {
       throw new Error(`Network ${network} must use canonical Solana mainnet USDC.`);
     }
     if (!configured.rpcUrl) delete config2.networks[network];
   }
   return config2;
 }
+function tasksDurationOverridesFromEnv(source) {
+  const result = {};
+  for (const [name, raw] of Object.entries(source)) {
+    const match = /^VAPI_TASKS_(WORK_DURATION|REVIEW_WINDOW)_SECONDS_(\d+)$/.exec(name);
+    const value = raw?.trim();
+    if (!match || !value) continue;
+    const seconds = Number(value);
+    if (!/^\d+$/.test(value) || !Number.isSafeInteger(seconds) || seconds <= 0)
+      throw new Error(`Invalid trusted Tasks duration ${name}.`);
+    const entry = result[match[2]] ??= {};
+    if (match[1] === "WORK_DURATION") entry.workDurationSeconds = seconds;
+    else entry.reviewWindowSeconds = seconds;
+  }
+  return result;
+}
+function tasksFactoryOverridesFromEnv(source) {
+  const overrides = {};
+  for (const [name, raw] of Object.entries(source)) {
+    const match = /^VAPI_TASKS_ESCROW_FACTORY_(\d+)$/.exec(name);
+    const value = raw?.trim();
+    if (!match || !value) continue;
+    overrides[match[1]] = getAddress(value);
+  }
+  return overrides;
+}
 function registryEndpoints(baseUrl) {
   const base = new URL(baseUrl);
   base.search = "";
@@ -46767,14 +46867,14 @@ async function enableDefaultNetwork(network, path = getVapiPaths().config, sourc
   const config2 = await loadConfig(path, source);
   if (network === "solana") {
     config2.networks[SOLANA_MAINNET_CAIP2] = {
-      rpcUrl: source.SOLANA_RPC_URL?.trim() || NETWORKS[SOLANA_MAINNET_CAIP2].publicRpcUrl,
-      usdc: NETWORKS[SOLANA_MAINNET_CAIP2].usdc
+      rpcUrl: source.SOLANA_RPC_URL?.trim() || NETWORKS2[SOLANA_MAINNET_CAIP2].publicRpcUrl,
+      usdc: NETWORKS2[SOLANA_MAINNET_CAIP2].usdc
     };
   } else {
     const existing = config2.networks[ARC_MAINNET_CAIP2];
     config2.networks[ARC_MAINNET_CAIP2] = {
-      ...existing ?? { usdc: NETWORKS[ARC_MAINNET_CAIP2].usdc },
-      rpcUrl: source.ARC_RPC_URL?.trim() || NETWORKS[ARC_MAINNET_CAIP2].publicRpcUrl
+      ...existing ?? { usdc: NETWORKS2[ARC_MAINNET_CAIP2].usdc },
+      rpcUrl: source.ARC_RPC_URL?.trim() || NETWORKS2[ARC_MAINNET_CAIP2].publicRpcUrl
     };
   }
   await writeConfigFile(path, config2);
@@ -46999,7 +47099,12 @@ var AgentLinkError = class extends Error {
   code;
 };
 var DEFAULT_AGENT_SCOPES = ["mcp:call", "router.use"];
-var ALLOWED_AGENT_SCOPES = /* @__PURE__ */ new Set([...DEFAULT_AGENT_SCOPES, "call.publish"]);
+var ALLOWED_AGENT_SCOPES = /* @__PURE__ */ new Set([
+  ...DEFAULT_AGENT_SCOPES,
+  "call.publish",
+  "tasks:read",
+  "tasks:write"
+]);
 var publicFetch = createPublicFetch({ allowPrivateNetwork: false });
 async function startDeviceLink(args) {
   if (args.device !== void 0 && !DEVICE_NAME_PATTERN.test(args.device)) {
@@ -72953,6 +73058,8 @@ var agentProfileShape = {
   instructions: external_exports.string().max(2e4),
   verifiedOnly: external_exports.boolean().default(true),
   approveAboveUsd: external_exports.number().min(0).default(0.5),
+  maxPerTaskUsd: external_exports.number().min(0).default(DEFAULT_MAX_PER_TASK_USD),
+  autoReleaseBelowUsd: external_exports.number().min(0).default(DEFAULT_AUTO_RELEASE_BELOW_USD),
   maxSteps: external_exports.number().int().min(1).max(50).default(12),
   paused: external_exports.boolean().default(false),
   grants: external_exports.array(external_exports.enum(AGENT_GRANTS)).default([]),
@@ -73113,7 +73220,9 @@ var ledgerSchema = external_exports.object({
 });
 var spendReservationSchema = external_exports.object({
   id: external_exports.string().min(1),
-  amountAtomic: external_exports.string().regex(/^\d+$/)
+  amountAtomic: external_exports.string().regex(/^\d+$/),
+  kind: external_exports.enum(["payment", "escrow-funding", "dispute-fee"]).optional(),
+  taskKey: external_exports.string().optional()
 });
 var ledgerRowSchema = ledgerSchema.extend({
   wallet: walletNameSchema.optional(),
@@ -73139,6 +73248,29 @@ async function readSpendLedger(path = getAgentCashPaths().ledger, now = /* @__PU
   const row = rows.find((candidate) => candidate.wallet === wallet);
   return { date: utcDateKey(now), spentAtomic: row?.spentAtomic ?? "0" };
 }
+async function escrowFundingDayRemainingAtomic(input2) {
+  const perDayAtomic = parseAtomicCap(input2.caps.perDayAtomic, "per-day");
+  const rows = await readStoredSpendLedgerRows(input2.ledgerPath, input2.now);
+  const row = rows.find((candidate) => candidate.wallet === input2.wallet);
+  const reserved = input2.reservationId ? row?.reservations?.find((candidate) => candidate.id === input2.reservationId) : void 0;
+  const remaining = perDayAtomic - BigInt(row?.spentAtomic ?? "0") + BigInt(reserved?.amountAtomic ?? "0");
+  return remaining > 0n ? remaining : 0n;
+}
+async function taskReservedAtomic(input2) {
+  const rows = await readStoredSpendLedgerRows(input2.ledgerPath, input2.now, true);
+  return sumTaskReservations(rows, input2.wallet, input2.taskKey, input2.excludeReservationId);
+}
+function sumTaskReservations(rows, wallet, taskKey, excludeReservationId) {
+  let total = 0n;
+  for (const row of rows) {
+    if (row.wallet !== wallet) continue;
+    for (const reservation of row.reservations ?? []) {
+      if (reservation.taskKey === taskKey && reservation.id !== excludeReservationId)
+        total += BigInt(reservation.amountAtomic);
+    }
+  }
+  return total;
+}
 async function readSpendLedgerRows(path = getAgentCashPaths().ledger, now = /* @__PURE__ */ new Date()) {
   return (await readStoredSpendLedgerRows(path, now)).map(({ date: date5, spentAtomic, wallet }) => ({
     date: date5,
@@ -73146,7 +73278,7 @@ async function readSpendLedgerRows(path = getAgentCashPaths().ledger, now = /* @
     wallet
   }));
 }
-async function readStoredSpendLedgerRows(path, now) {
+async function readStoredSpendLedgerRows(path, now, allDays = false) {
   let raw;
   try {
     raw = await readFile13(path, "utf8");
@@ -73157,7 +73289,7 @@ async function readStoredSpendLedgerRows(path, now) {
   const parsed = ledgerFileSchema.parse(JSON.parse(raw));
   const rows = "rows" in parsed ? parsed.rows : [parsed];
   const today = utcDateKey(now);
-  return rows.filter((row) => row.date === today).map((row) => ({
+  return rows.filter((row) => allDays || row.date === today).map((row) => ({
     date: row.date,
     spentAtomic: row.spentAtomic,
     wallet: row.wallet ?? DEFAULT_WALLET_NAME,
@@ -73168,49 +73300,164 @@ async function reserveSpend(amountAtomic, caps, options) {
   if (amountAtomic < 0n) {
     throw new Error("Spend amount cannot be negative.");
   }
-  const perCallAtomic = parseAtomicCap(caps.perCallAtomic, "per-call");
-  const perDayAtomic = parseAtomicCap(caps.perDayAtomic, "per-day");
-  if (amountAtomic > perCallAtomic) {
-    throw new SpendCapError(
-      "per_call_cap_exceeded",
-      `Payment quote ${amountAtomic} atomic USDC exceeds the per-call cap ${perCallAtomic}. Refusing to sign.`
-    );
+  const kind = options?.kind ?? "payment";
+  let perDayAtomic;
+  if (kind === "escrow-funding" || kind === "dispute-fee") {
+    const maxPerTaskAtomic = options?.maxPerTaskAtomic;
+    if (maxPerTaskAtomic === void 0 || maxPerTaskAtomic < 0n) {
+      throw new Error("Escrow funding requires a non-negative per-task cap.");
+    }
+    if (amountAtomic > maxPerTaskAtomic) {
+      throw new SpendCapError(
+        "per_task_cap_exceeded",
+        `Escrow funding ${amountAtomic} atomic USDC exceeds the per-task cap ${maxPerTaskAtomic}. Refusing to sign.`
+      );
+    }
+    perDayAtomic = parseAtomicCap(caps.perDayAtomic, "per-day");
+  } else {
+    const perCallAtomic = parseAtomicCap(caps.perCallAtomic, "per-call");
+    perDayAtomic = parseAtomicCap(caps.perDayAtomic, "per-day");
+    if (amountAtomic > perCallAtomic) {
+      throw new SpendCapError(
+        "per_call_cap_exceeded",
+        `Payment quote ${amountAtomic} atomic USDC exceeds the per-call cap ${perCallAtomic}. Refusing to sign.`
+      );
+    }
   }
   const ledgerPath = options?.ledgerPath ?? getAgentCashPaths().ledger;
   const now = options?.now ?? /* @__PURE__ */ new Date();
   const wallet = options?.wallet ?? DEFAULT_WALLET_NAME;
   return await withLedgerLock(ledgerPath, async () => {
-    const rows = await readStoredSpendLedgerRows(ledgerPath, now);
-    const current = rows.find((row) => row.wallet === wallet);
+    const rows = await readStoredSpendLedgerRows(ledgerPath, now, true);
+    const today = utcDateKey(now);
+    const current = rows.find((row) => row.wallet === wallet && row.date === today);
+    if ((kind === "escrow-funding" || kind === "dispute-fee") && options?.taskKey !== void 0) {
+      const taskTotal = sumTaskReservations(
+        rows,
+        wallet,
+        options.taskKey,
+        options.reuseExistingEscrowReservation || options.resumeEscrowReservation ? options.reservationId : void 0
+      ) + amountAtomic;
+      if (taskTotal > options.maxPerTaskAtomic)
+        throw new SpendCapError(
+          "per_task_cap_exceeded",
+          `New spend ${amountAtomic} atomic USDC would raise the running total for task ${options.taskKey} and wallet ${wallet} to ${taskTotal}, above the per-task cap ${options.maxPerTaskAtomic}. Refusing to sign.`
+        );
+    }
     if (options?.reservationId !== void 0) {
-      if (current?.reservations?.some((reservation) => reservation.id === options.reservationId)) {
+      const existing = current?.reservations?.find(
+        (reservation) => reservation.id === options.reservationId
+      );
+      if (existing && options.reuseExistingEscrowReservation) {
+        if (kind !== "escrow-funding" && kind !== "dispute-fee" || existing.kind !== kind || existing.amountAtomic !== amountAtomic.toString() || existing.taskKey !== void 0 && existing.taskKey !== options.taskKey)
+          throw new Error(
+            `Spend reservation ${options.reservationId} does not match this funding.`
+          );
+        if (existing.taskKey === void 0 && options.taskKey !== void 0) {
+          existing.taskKey = options.taskKey;
+          await writeLedgerAtomically(ledgerPath, rows);
+        }
+        return {
+          date: current.date,
+          spentAtomic: current.spentAtomic,
+          reservationReused: true
+        };
+      }
+      if (existing) {
         throw new Error(`Spend reservation ${options.reservationId} already exists.`);
       }
+      if (options.resumeEscrowReservation) {
+        const resumed = options.resumeEscrowReservation;
+        const historical = rows.find((row) => row.wallet === wallet && row.date === resumed.date);
+        const stored = historical?.reservations?.find(
+          (reservation) => reservation.id === resumed.id
+        );
+        if (kind !== "escrow-funding" && kind !== "dispute-fee" || resumed.id !== options.reservationId || resumed.wallet !== wallet || resumed.amountAtomic !== amountAtomic.toString() || resumed.date >= utcDateKey(now) || resumed.exposed !== true || resumed.invalidated === true || stored !== void 0 && (stored.kind !== kind || stored.amountAtomic !== amountAtomic.toString() || stored.taskKey !== void 0 && stored.taskKey !== options.taskKey))
+          throw new Error(
+            `Spend reservation ${options.reservationId} does not match this funding.`
+          );
+        if (stored?.taskKey === void 0 && options.taskKey !== void 0) {
+          if (stored) stored.taskKey = options.taskKey;
+          else {
+            const reservation = {
+              id: resumed.id,
+              amountAtomic: resumed.amountAtomic,
+              kind,
+              taskKey: options.taskKey
+            };
+            if (historical)
+              historical.reservations = [...historical.reservations ?? [], reservation];
+            else
+              rows.push({
+                date: resumed.date,
+                spentAtomic: resumed.amountAtomic,
+                wallet,
+                reservations: [reservation]
+              });
+          }
+          await writeLedgerAtomically(ledgerPath, rows);
+        }
+        return {
+          date: resumed.date,
+          spentAtomic: current?.spentAtomic ?? "0",
+          reservationReused: true
+        };
+      }
     }
     const spentAtomic = current?.spentAtomic ?? "0";
     const nextSpent = BigInt(spentAtomic) + amountAtomic;
     if (nextSpent > perDayAtomic) {
       throw new SpendCapError(
         "per_day_cap_exceeded",
-        `Payment quote ${amountAtomic} atomic USDC would raise today's spend to ${nextSpent} for wallet ${wallet}, above the per-day cap ${perDayAtomic}. Refusing to sign.`
+        `${kind === "escrow-funding" ? "Escrow funding" : "Payment quote"} ${amountAtomic} atomic USDC would raise today's spend to ${nextSpent} for wallet ${wallet}, above the per-day cap ${perDayAtomic}. Refusing to sign.`
       );
     }
+    const reservationId = options?.reservationId ?? (options?.taskKey === void 0 ? void 0 : randomBytes10(16).toString("hex"));
     const nextRow = {
       date: utcDateKey(now),
       spentAtomic: nextSpent.toString(),
       wallet,
-      ...(current?.reservations?.length ?? 0) === 0 && options?.reservationId === void 0 ? {} : {
+      ...(current?.reservations?.length ?? 0) === 0 && reservationId === void 0 ? {} : {
         reservations: [
           ...current?.reservations ?? [],
-          ...options?.reservationId === void 0 ? [] : [{ id: options.reservationId, amountAtomic: amountAtomic.toString() }]
+          ...reservationId === void 0 ? [] : [
+            {
+              id: reservationId,
+              amountAtomic: amountAtomic.toString(),
+              ...kind !== "payment" ? { kind } : {},
+              ...options?.taskKey === void 0 ? {} : { taskKey: options.taskKey }
+            }
+          ]
         ]
       }
     };
-    const nextRows = [...rows.filter((row) => row.wallet !== wallet), nextRow].sort(
-      (a, b) => a.wallet.localeCompare(b.wallet)
+    const otherRows = rows.filter((row) => row.wallet !== wallet || row.date !== today).map((row) => {
+      if (row.wallet !== wallet || !options?.reuseExistingEscrowReservation || options.reservationId === void 0)
+        return row;
+      const previous = row.reservations?.find(
+        (reservation) => reservation.id === options.reservationId
+      );
+      if (!previous) return row;
+      if (kind !== "escrow-funding" && kind !== "dispute-fee" || previous.kind !== kind || previous.amountAtomic !== amountAtomic.toString() || previous.taskKey !== void 0 && previous.taskKey !== options.taskKey)
+        throw new Error(
+          `Spend reservation ${options.reservationId} does not match this funding.`
+        );
+      return {
+        ...row,
+        reservations: row.reservations.filter(
+          (reservation) => reservation.id !== options.reservationId
+        )
+      };
+    });
+    const nextRows = [...otherRows, nextRow].sort(
+      (a, b) => a.wallet.localeCompare(b.wallet) || a.date.localeCompare(b.date)
     );
     await writeLedgerAtomically(ledgerPath, nextRows);
-    return { date: nextRow.date, spentAtomic: nextRow.spentAtomic };
+    return {
+      date: nextRow.date,
+      spentAtomic: nextRow.spentAtomic,
+      ...options?.reservationId === void 0 && reservationId !== void 0 ? { reservationId } : {}
+    };
   });
 }
 async function releaseSpend(amountAtomic, options) {
@@ -73222,35 +73469,40 @@ async function releaseSpend(amountAtomic, options) {
   const wallet = options.wallet ?? DEFAULT_WALLET_NAME;
   return await withLedgerLock(ledgerPath, async () => {
     const today = utcDateKey(now);
-    const rows = await readStoredSpendLedgerRows(ledgerPath, now);
-    const current = rows.find((row) => row.wallet === wallet);
-    if (options.reservedOn !== today) {
+    const rows = await readStoredSpendLedgerRows(ledgerPath, now, true);
+    const current = rows.find((row) => row.wallet === wallet && row.date === today);
+    if (options.reservedOn !== today && options.reservationId === void 0) {
       return { date: today, spentAtomic: current?.spentAtomic ?? "0" };
     }
-    const reservation = options.reservationId === void 0 ? void 0 : current?.reservations?.find((candidate) => candidate.id === options.reservationId);
+    const reserved = rows.find((row) => row.wallet === wallet && row.date === options.reservedOn);
+    const reservation = options.reservationId === void 0 ? void 0 : reserved?.reservations?.find((candidate) => candidate.id === options.reservationId);
     if (options.reservationId !== void 0 && reservation === void 0) {
       return { date: today, spentAtomic: current?.spentAtomic ?? "0" };
     }
     if (reservation !== void 0 && reservation.amountAtomic !== amountAtomic.toString()) {
       throw new Error(`Spend reservation ${options.reservationId} has a different amount.`);
     }
-    const spentAtomic = BigInt(current?.spentAtomic ?? "0");
+    const spentAtomic = BigInt(reserved?.spentAtomic ?? "0");
     const releasedAmount = reservation === void 0 ? amountAtomic : BigInt(reservation.amountAtomic);
     const nextSpent = spentAtomic > releasedAmount ? spentAtomic - releasedAmount : 0n;
-    const remainingReservations = current?.reservations?.filter(
+    const remainingReservations = reserved?.reservations?.filter(
       (candidate) => candidate.id !== options.reservationId
     );
     const nextRow = {
-      date: today,
+      date: options.reservedOn,
       spentAtomic: nextSpent.toString(),
       wallet,
       ...remainingReservations === void 0 || remainingReservations.length === 0 ? {} : { reservations: remainingReservations }
     };
-    const nextRows = [...rows.filter((row) => row.wallet !== wallet), nextRow].sort(
-      (a, b) => a.wallet.localeCompare(b.wallet)
-    );
+    const nextRows = [
+      ...rows.filter((row) => row.wallet !== wallet || row.date !== options.reservedOn),
+      nextRow
+    ].sort((a, b) => a.wallet.localeCompare(b.wallet) || a.date.localeCompare(b.date));
     await writeLedgerAtomically(ledgerPath, nextRows);
-    return { date: nextRow.date, spentAtomic: nextRow.spentAtomic };
+    return {
+      date: today,
+      spentAtomic: options.reservedOn === today ? nextRow.spentAtomic : current?.spentAtomic ?? "0"
+    };
   });
 }
 function parseAtomicCap(value, label) {
@@ -73547,7 +73799,9 @@ async function transferBetweenAccounts(args) {
       );
       reservedOn = reservation.date;
     } catch (error61) {
-      if (error61 instanceof SpendCapError) throw transferError(error61.code);
+      if (error61 instanceof SpendCapError && isTransferErrorCode(error61.code)) {
+        throw transferError(error61.code);
+      }
       throw transferError("network_error");
     }
   }
@@ -76685,7 +76939,7 @@ function createRunBudget(args) {
 import { mkdir as mkdir15, writeFile as writeFile8 } from "node:fs/promises";
 import { arch, platform, release } from "node:os";
 import { join as join13 } from "node:path";
-var VAPI_CLIENT_VERSION = "0.8.0";
+var VAPI_CLIENT_VERSION = "0.9.2";
 async function createSupportReport(options) {
   const message = options.message.trim();
   if (!message) throw new Error("Support report message must not be empty.");
@@ -77687,6 +77941,115 @@ async function responseJson(response) {
   }
 }
 
+// src/tasks/canonical-json.ts
+function canonicalizeJson(value) {
+  if (value === null || typeof value === "string" || typeof value === "boolean") {
+    return value;
+  }
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) {
+      throw new Error("Value is not JSON serializable");
+    }
+    return value;
+  }
+  if (Array.isArray(value)) {
+    return value.map(canonicalizeJson);
+  }
+  if (typeof value === "object") {
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null) {
+      throw new Error("Value is not JSON serializable");
+    }
+    return Object.fromEntries(
+      Object.entries(value).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, item]) => [key, canonicalizeJson(item)])
+    );
+  }
+  throw new Error("Value is not JSON serializable");
+}
+function canonicalJson(value) {
+  return JSON.stringify(canonicalizeJson(value));
+}
+
+// src/tasks/delivery-manifest.ts
+import { createHash as createHash2 } from "node:crypto";
+var sha256Schema = external_exports.string().regex(/^[0-9a-fA-F]{64}$/).transform((digest) => digest.toLowerCase());
+var deliveryManifestSchema = external_exports.object({
+  files: external_exports.array(
+    external_exports.object({
+      fileId: external_exports.uuid(),
+      fileName: external_exports.string().min(1).max(255),
+      sha256: sha256Schema,
+      sizeBytes: external_exports.number().int().positive()
+    }).strict()
+  ).min(1).max(20),
+  noteSha256: sha256Schema
+}).strict().superRefine((manifest, context) => {
+  if (new Set(manifest.files.map((file2) => file2.fileId)).size !== manifest.files.length) {
+    context.addIssue({ code: "custom", path: ["files"], message: "File ids must be unique" });
+  }
+});
+function freezeDeliveryManifest(input2) {
+  const parsed = deliveryManifestSchema.parse(input2);
+  const manifest = deliveryManifestSchema.parse({
+    ...parsed,
+    files: [...parsed.files].sort((left, right) => left.fileId.localeCompare(right.fileId))
+  });
+  return {
+    manifest,
+    manifestHash: keccak256(toBytes(canonicalJson(manifest)))
+  };
+}
+async function sha256Hex(bytes) {
+  return createHash2("sha256").update(bytes).digest("hex");
+}
+async function prepareDeliveryManifest(files, note) {
+  if (files.length === 0) {
+    throw new Error("Upload at least one delivery file.");
+  }
+  const noteSha256 = await sha256Hex(new TextEncoder().encode(note));
+  return freezeDeliveryManifest({ files, noteSha256 });
+}
+
+// src/tasks/verbs.ts
+var TASKS_CLIENT_VERBS = [
+  "search",
+  "show",
+  "post",
+  "propose",
+  "submit",
+  "award",
+  "sign",
+  "fund",
+  "deliver",
+  "release",
+  "refund",
+  "dispute",
+  "counter-evidence",
+  "resolve-unmatched",
+  "message",
+  "thread",
+  "watch",
+  "status"
+];
+
+// src/funding-policy.ts
+function decideFunding(input2) {
+  validateAmount(input2.amountUsd);
+  if (input2.amountUsd > input2.maxPerTaskUsd) return { ok: false, reason: "policy.perTask" };
+  if (input2.amountUsd > input2.dayRemainingUsd) return { ok: false, reason: "policy.perDay" };
+  if (input2.amountUsd > input2.approveAboveUsd) return { approval: true };
+  return { ok: true };
+}
+function decideRelease(input2) {
+  validateAmount(input2.amountUsd);
+  return input2.amountUsd < input2.autoReleaseBelowUsd ? { auto: true } : { approval: true };
+}
+function validateAmount(amountUsd) {
+  if (!Number.isFinite(amountUsd) || amountUsd < 0) {
+    throw new Error("Task amount must be a finite, non-negative USD number.");
+  }
+}
+
 // src/searches.ts
 import { mkdir as mkdir16, open as open11, readFile as readFile16 } from "node:fs/promises";
 import { dirname as dirname10 } from "node:path";
@@ -77698,6 +78061,7 @@ var searchEventSchema = external_exports.strictObject({
       source: external_exports.string().min(1),
       latencyMs: external_exports.number().nonnegative().finite(),
       count: external_exports.number().int().nonnegative(),
+      dropped: external_exports.number().int().nonnegative().optional(),
       error: external_exports.string().optional()
     })
   ),
@@ -77867,6 +78231,351 @@ function dedupeProvenance(values) {
   });
 }
 
+// src/docs.ts
+var DEFAULT_DOCS_ORIGIN = "https://docs.vapinetwork.ai";
+var DOCS_URL_ENV = "VAPI_DOCS_URL";
+var DOCS_RESPONSE_MAX_BYTES = 2 * 1024 * 1024;
+var SEARCH_TIMEOUT_MS = 15e3;
+var READ_TIMEOUT_MS = 15e3;
+var ASK_TIMEOUT_MS = 6e4;
+var MAX_REDIRECTS = 5;
+var REDIRECT_STATUSES = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
+var DocsError = class extends Error {
+  constructor(code, message, options) {
+    super(message, options);
+    this.code = code;
+  }
+  code;
+  name = "DocsError";
+};
+var publicFetch3 = createPublicFetch({ allowPrivateNetwork: false });
+function resolveDocsOrigin(env = process.env) {
+  const configured = env[DOCS_URL_ENV]?.trim() || DEFAULT_DOCS_ORIGIN;
+  let url2;
+  try {
+    url2 = new URL(configured);
+  } catch (cause) {
+    throw new DocsError("host_not_allowed", `The configured docs origin is invalid.`, { cause });
+  }
+  if (url2.protocol !== "https:" || url2.username || url2.password || url2.pathname !== "/" || url2.search || url2.hash) {
+    throw new DocsError(
+      "host_not_allowed",
+      "The configured docs origin must be an HTTPS origin without credentials, a path, a query, or a fragment."
+    );
+  }
+  return url2.origin;
+}
+async function searchDocs(query, options = {}) {
+  const normalized = nonEmpty(query, "Search query");
+  if (options.limit !== void 0 && (!Number.isSafeInteger(options.limit) || options.limit < 1)) {
+    throw new DocsError("invalid_input", "Search limit must be a positive integer.");
+  }
+  const origin = resolveDocsOrigin(options.env);
+  const { text: body } = await requestText(
+    new URL("/~gitbook/mcp", origin),
+    {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        accept: "application/json, text/event-stream"
+      },
+      body: JSON.stringify({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "tools/call",
+        params: { name: "searchDocumentation", arguments: { query: normalized } }
+      })
+    },
+    {
+      operation: "search",
+      origin,
+      timeoutMs: options.timeoutMs ?? SEARCH_TIMEOUT_MS,
+      fetchImpl: options.fetchImpl
+    }
+  );
+  const payload = parseSearchEnvelope(body);
+  const blocks = searchTextBlocks(payload);
+  const results = blocks.flatMap((block) => {
+    const parsed = parseSearchBlock(block);
+    return parsed === void 0 ? [] : [parsed];
+  });
+  return { results: options.limit === void 0 ? results : results.slice(0, options.limit) };
+}
+async function readDocs(pageUrlOrPath, options = {}) {
+  const input2 = nonEmpty(pageUrlOrPath, "Documentation page");
+  const origin = resolveDocsOrigin(options.env);
+  const page = docsPagePath(input2, origin);
+  const requestOptions = {
+    operation: "read",
+    origin,
+    timeoutMs: options.timeoutMs ?? READ_TIMEOUT_MS,
+    fetchImpl: options.fetchImpl
+  };
+  const found = await readFirstMarkdown(page, requestOptions);
+  if (found !== void 0) return found;
+  const { url: canonical } = await requestText(
+    page,
+    { method: "HEAD" },
+    { ...requestOptions, notFoundOn404: true }
+  );
+  if (canonical.pathname !== page.pathname) {
+    const moved = await readFirstMarkdown(canonical, requestOptions);
+    if (moved !== void 0) return moved;
+  }
+  throw new DocsError("not_found", `Documentation page not found: ${page.href}`);
+}
+async function readFirstMarkdown(page, options) {
+  const path = page.pathname.replace(/\/+$/u, "");
+  const candidates = path ? [`${path}.md`, `${path}/readme.md`] : ["/readme.md"];
+  for (const pathname of candidates) {
+    const candidate = new URL(page);
+    candidate.pathname = pathname;
+    try {
+      const { text: markdown, url: url2 } = await requestText(
+        candidate,
+        { method: "GET", headers: { accept: "text/markdown" } },
+        { ...options, notFoundOn404: true }
+      );
+      if (!markdown.trimStart().startsWith("# Page Not Found")) {
+        return { url: url2.href, markdown };
+      }
+    } catch (error61) {
+      if (!(error61 instanceof DocsError && error61.code === "not_found")) throw error61;
+    }
+  }
+  return void 0;
+}
+async function askDocs(question, options = {}) {
+  const normalized = nonEmpty(question, "Question");
+  const origin = resolveDocsOrigin(options.env);
+  const url2 = new URL("/readme.md", origin);
+  url2.searchParams.set("ask", normalized);
+  const { text: markdown } = await requestText(
+    url2,
+    { method: "GET", headers: { accept: "text/markdown" } },
+    {
+      operation: "ask",
+      origin,
+      timeoutMs: options.timeoutMs ?? ASK_TIMEOUT_MS,
+      fetchImpl: options.fetchImpl
+    }
+  );
+  return parseAnswer(markdown);
+}
+function nonEmpty(value, label) {
+  const normalized = value.trim();
+  if (!normalized) throw new DocsError("invalid_input", `${label} must not be empty.`);
+  return normalized;
+}
+function docsPagePath(value, origin) {
+  let url2;
+  try {
+    url2 = new URL(value, `${origin}/`);
+  } catch (cause) {
+    throw new DocsError("invalid_input", "Documentation page must be a docs URL or path.", {
+      cause
+    });
+  }
+  if (url2.origin !== origin || url2.username || url2.password) {
+    throw new DocsError(
+      "host_not_allowed",
+      `Documentation pages must use the configured docs origin ${origin}.`
+    );
+  }
+  url2.search = "";
+  url2.hash = "";
+  url2.pathname = url2.pathname.replace(/\/+$/u, "").replace(/(?:\/readme)?\.md$/iu, "") || "/";
+  return url2;
+}
+async function requestText(requestUrl, init, options) {
+  if (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs < 1) {
+    throw new DocsError("invalid_input", "Documentation request timeout must be positive.");
+  }
+  assertAllowedUrl(requestUrl, options.origin);
+  const controller = new AbortController();
+  const timeoutError = new DocsError(
+    "timeout",
+    `The documentation ${options.operation} request timed out.`
+  );
+  let timer;
+  const timeout = new Promise((_resolve, reject) => {
+    timer = setTimeout(() => {
+      controller.abort(timeoutError);
+      reject(timeoutError);
+    }, options.timeoutMs);
+  });
+  let url2 = requestUrl;
+  try {
+    let response;
+    for (let hops = 0; ; hops += 1) {
+      response = await Promise.race([
+        (options.fetchImpl ?? publicFetch3)(url2, {
+          ...init,
+          redirect: "manual",
+          signal: controller.signal
+        }),
+        timeout
+      ]);
+      if (response.url) assertAllowedUrl(new URL(response.url), options.origin);
+      const location = response.headers.get("location");
+      if (init.method !== "GET" && init.method !== "HEAD" || !REDIRECT_STATUSES.has(response.status) || !location) {
+        break;
+      }
+      if (hops === MAX_REDIRECTS) {
+        throw new DocsError(
+          "bad_response",
+          `The documentation ${options.operation} request redirected too many times.`
+        );
+      }
+      await response.body?.cancel();
+      const next = new URL(location, url2);
+      assertAllowedUrl(next, options.origin);
+      url2 = next;
+    }
+    if (options.notFoundOn404 && response.status === 404) {
+      throw new DocsError("not_found", `Documentation page not found: ${url2.href}`);
+    }
+    if (!response.ok) {
+      throw new DocsError(
+        "bad_response",
+        `The documentation ${options.operation} request returned HTTP ${response.status}.`
+      );
+    }
+    return { text: await Promise.race([readCappedText(response), timeout]), url: url2 };
+  } catch (error61) {
+    if (error61 instanceof DocsError) throw error61;
+    if (controller.signal.aborted) throw timeoutError;
+    throw new DocsError("bad_response", `The documentation ${options.operation} request failed.`, {
+      cause: error61
+    });
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+  }
+}
+function assertAllowedUrl(url2, origin) {
+  if (url2.origin !== origin || url2.username || url2.password) {
+    throw new DocsError(
+      "host_not_allowed",
+      `Documentation requests may only contact the configured docs origin ${origin}.`
+    );
+  }
+}
+async function readCappedText(response) {
+  const contentLength = response.headers.get("content-length");
+  if (contentLength !== null && Number(contentLength) > DOCS_RESPONSE_MAX_BYTES) {
+    throw responseTooLarge();
+  }
+  if (response.body === null) return "";
+  const reader = response.body.getReader();
+  const chunks = [];
+  let size5 = 0;
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      size5 += value.byteLength;
+      if (size5 > DOCS_RESPONSE_MAX_BYTES) {
+        await reader.cancel();
+        throw responseTooLarge();
+      }
+      chunks.push(value);
+    }
+  } finally {
+    reader.releaseLock();
+  }
+  const bytes = new Uint8Array(size5);
+  let offset = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return new TextDecoder().decode(bytes);
+}
+function responseTooLarge() {
+  return new DocsError(
+    "bad_response",
+    `The documentation response exceeded ${DOCS_RESPONSE_MAX_BYTES} bytes.`
+  );
+}
+function parseSearchEnvelope(body) {
+  const trimmed = body.trim();
+  if (!trimmed) throw invalidSearchResponse();
+  if (trimmed.startsWith("{")) return parseJson2(trimmed);
+  const records = [];
+  let data = [];
+  for (const line of body.split(/\r?\n/u)) {
+    if (line === "") {
+      if (data.length > 0) records.push(data.join("\n"));
+      data = [];
+    } else if (line.startsWith("data:")) {
+      data.push(line.slice(5).trimStart());
+    }
+  }
+  if (data.length > 0) records.push(data.join("\n"));
+  for (const record2 of records) {
+    try {
+      return JSON.parse(record2);
+    } catch {
+    }
+  }
+  throw invalidSearchResponse();
+}
+function parseJson2(value) {
+  try {
+    return JSON.parse(value);
+  } catch (cause) {
+    throw new DocsError("bad_response", "The documentation search response was invalid JSON.", {
+      cause
+    });
+  }
+}
+function searchTextBlocks(payload) {
+  const envelope = asRecord(payload);
+  const rpcError = asRecord(envelope?.error);
+  if (rpcError !== void 0) {
+    const message = typeof rpcError.message === "string" ? `: ${rpcError.message}` : "";
+    throw new DocsError("bad_response", `The documentation search returned an error${message}`);
+  }
+  const result = asRecord(envelope?.result);
+  if (!Array.isArray(result?.content)) throw invalidSearchResponse();
+  return result.content.flatMap((item) => {
+    const block = asRecord(item);
+    return block?.type === "text" && typeof block.text === "string" ? [block.text] : [];
+  });
+}
+function parseSearchBlock(block) {
+  const match = /^Title:\s*([^\r\n]+)\r?\nLink:\s*([^\r\n]+)\r?\nContent:\s*([\s\S]*)$/u.exec(
+    block.trim()
+  );
+  if (!match) return void 0;
+  const title = match[1].trim();
+  const url2 = match[2].trim();
+  const excerpt = match[3].trim();
+  return title && url2 && excerpt ? { title, url: url2, excerpt } : void 0;
+}
+function invalidSearchResponse() {
+  return new DocsError("bad_response", "The documentation search response was invalid.");
+}
+function parseAnswer(markdown) {
+  const heading = /^# Sources:\s*$/gmu;
+  const matches = [...markdown.matchAll(heading)];
+  const last = matches.at(-1);
+  if (last?.index === void 0) return { answer: markdown.trimEnd(), sources: [] };
+  const answer = markdown.slice(0, last.index).trimEnd();
+  const sourceText = markdown.slice(last.index + last[0].length).trim();
+  const sources = sourceText.split(/\r?\n/u).flatMap((line) => {
+    const linked = /^\s*(?:[-*]|\d+\.)\s+\[([^\]]+)\]\((https?:\/\/[^)\s]+)\)\s*$/u.exec(line);
+    if (linked) return [{ title: linked[1].trim(), url: linked[2] }];
+    const bare = /^\s*(?:[-*]|\d+\.)\s+(https?:\/\/\S+)\s*$/u.exec(line);
+    if (!bare) return [];
+    return [{ title: bare[1], url: bare[1] }];
+  });
+  return { answer, sources };
+}
+function asRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+
 // src/distribute.ts
 var DistributeError = class extends Error {
   constructor(code, message, movementId) {
@@ -78425,7 +79134,7 @@ function csvCell(value) {
 }
 
 // src/swarm-capital.ts
-import { createHash as createHash2, randomBytes as randomBytes15 } from "node:crypto";
+import { createHash as createHash3, randomBytes as randomBytes15 } from "node:crypto";
 import { readFile as readFile17, unlink as unlink12 } from "node:fs/promises";
 import { join as join14 } from "node:path";
 var movementIdSchema3 = external_exports.string().regex(/^mv_[A-Za-z0-9_-]{8,128}$/u);
@@ -78497,7 +79206,7 @@ var resumableSwarmReasons = /* @__PURE__ */ new Set([
   "sweep"
 ]);
 function treasuryRequestMovementId(swarm, requestId) {
-  const digest = createHash2("sha256").update(`${swarm}
+  const digest = createHash3("sha256").update(`${swarm}
 ${requestId}`).digest("hex").slice(0, 24);
   return movementIdSchema3.parse(`mv_${digest}`);
 }
@@ -80556,9 +81265,12 @@ export {
   CEILING_SWEEP_TIMEOUT_MS,
   DEFAULT_AGENT_TOOLS,
   DEFAULT_ARC_GAS_HEADROOM_ATOMIC,
+  DEFAULT_AUTO_RELEASE_BELOW_USD,
   DEFAULT_CEILING_ATOMIC,
   DEFAULT_DISCOVERY_URL,
+  DEFAULT_DOCS_ORIGIN,
   DEFAULT_MARKETPLACE_DISCOVERY_URL,
+  DEFAULT_MAX_PER_TASK_USD,
   DEFAULT_REGISTRY_FALLBACKS,
   DEFAULT_REGISTRY_URL,
   DEFAULT_SPEND_CAPS,
@@ -80568,6 +81280,7 @@ export {
   DISCOVERY_CATEGORIES,
   DiscoveryCatalogError,
   DistributeError,
+  DocsError,
   EIP3009_AUTHORIZATION_STATE_ABI,
   EIP3009_AUTHORIZATION_TYPES,
   ERC20_ABI,
@@ -80584,7 +81297,7 @@ export {
   MARKETPLACE_KINDS,
   MARKETPLACE_RANKING_VERSION,
   MovementError,
-  NETWORKS,
+  NETWORKS2 as NETWORKS,
   ONRAMP_FALLBACK_INSTRUCTIONS,
   ONRAMP_NETWORK,
   PASSPHRASE_ENVIRONMENT_VARIABLE,
@@ -80599,6 +81312,7 @@ export {
   SIGN_IN_WITH_X,
   SIWxError,
   SOLANA_DERIVATION_PATH,
+  SOLANA_DEVNET_CAIP2,
   SOLANA_MAINNET_CAIP2,
   SOLANA_MAINNET_USDC,
   STATS_RANGES,
@@ -80611,6 +81325,7 @@ export {
   SpendPolicy,
   SwarmError,
   SweepGasError,
+  TASKS_CLIENT_VERBS,
   TransferError,
   USDC_DECIMALS,
   VAPI_BUILDER_CODE,
@@ -80637,6 +81352,7 @@ export {
   appendReceipt,
   appendSearchEvent,
   areSamePaymentNetwork,
+  askDocs,
   assertMaxPrice,
   assertPublicUrl,
   assertSIWxChallengeBoundToOrigin,
@@ -80674,6 +81390,8 @@ export {
   createRunId,
   createSIWxMessage,
   createSupportReport,
+  decideFunding,
+  decideRelease,
   decodePaymentRequiredHeader,
   deleteSwarmFile,
   deriveEvmPrivateKey,
@@ -80694,6 +81412,7 @@ export {
   encryptPrivateKey,
   ensureDeviceName,
   entropyToPhrase,
+  escrowFundingDayRemainingAtomic,
   executeMovement,
   executionModeSchema,
   explorerAddressUrl,
@@ -80717,6 +81436,7 @@ export {
   getNetworkDefinition,
   getVapiPaths,
   isCallableListing,
+  isDiscoveryCatalogError,
   isEvmPaymentRequirements,
   isMirroredHit,
   isMissingFile,
@@ -80749,6 +81469,7 @@ export {
   lowerAccountCaps,
   marketplaceBadgeCodeSchema,
   marketplaceBadgeSchema,
+  marketplaceDiscoveryEnvelopeSchema,
   marketplaceDiscoveryInputSchema,
   marketplaceDiscoveryPageSchema,
   marketplaceExecutionMethodSchema,
@@ -80778,12 +81499,14 @@ export {
   phraseToSeed,
   pinnedLookup,
   planAllocation,
+  prepareDeliveryManifest,
   promptForSecret,
   protectVault,
   provenanceSchema,
   readAgentProfile,
   readAuditLog,
   readDelegationRecord,
+  readDocs,
   readKeystoreAddress,
   readKeystoreVersion,
   readMovement,
@@ -80813,6 +81536,7 @@ export {
   roleGrants,
   runRefSchema,
   scheduleCeilingSweep,
+  searchDocs,
   searchServicesResponseSchema,
   secretStore,
   secretsAllowed,
@@ -80820,6 +81544,7 @@ export {
   serviceSummarySchema,
   serviceTierSchema,
   setupSwarm,
+  sha256Hex,
   slugifyDeviceName,
   spendCapsForWallet,
   spendCapsSchema,
@@ -80838,6 +81563,7 @@ export {
   sweepBack,
   sweepSolanaUsdc,
   sweepTarget,
+  taskReservedAtomic,
   transferBetweenAccounts,
   treasuryRequestMovementId,
   unlockKeystore,