@xgamesfun/solana 0.24.0 → 0.25.1

package/DISCLAIMER.md

@@ -35,7 +35,7 @@ Read this before you use this package, its tools or the loot program. Using them
 
 ## Limitation of liability
 
-To the fullest extent the law allows, games.fun, XGamesFun and the contributors to this package are not liable for any
+To the fullest extent the law allows, xgames.fun, XGamesFun and the contributors to this package are not liable for any
 loss or damage of any kind, direct or indirect, including lost funds, tokens, NFTs, profits or data, arising from the
 use of, or inability to use, this package, the loot program, the results server or anything built with them, even if
 told such loss was possible.

package/NOTICE

@@ -1,10 +1,10 @@
 loot
-Copyright 2026 games.fun
+Copyright 2026 xgames.fun
 
-This product includes software developed at games.fun.
+This product includes software developed at xgames.fun.
 
-Parts of the JavaScript client and tools (js/) are adapted from the games.fun kit,
-MIT License, Copyright (c) 2026 games.fun.
+Parts of the JavaScript client and tools (js/) are adapted from the xgames.fun kit,
+MIT License, Copyright (c) 2026 xgames.fun.
 
 The tests run upstream Solana programs (SPL Token, Token-2022, Associated Token, Memo,
 Metaplex Core, Token Metadata, Bubblegum, Account Compression, Noop, MagicBlock VRF) as

package/README.md

@@ -6,19 +6,65 @@ package `@xgamesfun/solana`:
 - a JavaScript client with no Solana SDK (`@xgamesfun/solana/client`), a player module for apps (`/play`) and a results
   client (`/results`);
 - the economy spec and its checker, quick simulation, cost and plain-words explainer;
-- the `xsolana` CLI and an MCP server with ten `xsolana_*` tools;
+- the `xsolana` CLI and an MCP server with eleven `xsolana_*` tools;
 - the `xsolana-economy` skill, and one plugin that carries the tools and the skill to Claude Code and Codex;
 - a local approval page where a project's owner approves going live in their own wallet.
 
 An economy is a JSON spec, not a new smart contract. Every project shares the one program, and none writes its own.
 
-> **Status:** loot 0.24.0, program ID `9cwqM1TXytPnFZsLfmUyv2dg4uW6Ch9C6UJVPns7NFQ`, **devnet only**. The program is
-> not independently audited, and nothing runs on mainnet until it is. See [SECURITY.md](SECURITY.md).
+> **Status:** these tools are for loot 0.25.0, program ID `9cwqM1TXytPnFZsLfmUyv2dg4uW6Ch9C6UJVPns7NFQ`, **devnet
+> only** (deployed 2026-11-08, slot 519,994,814). The program is not independently audited, and nothing runs
+> on mainnet until it is. See [SECURITY.md](SECURITY.md).
 
 > **Disclaimer:** provided as is, with no warranty and no guarantee that the program or the tools are safe. Use them
 > at your own risk; you are responsible for every transaction you approve and for making sure what you build is legal
 > where it runs. Nothing here is legal or financial advice. Read [DISCLAIMER.md](DISCLAIMER.md) before you use it.
 
+## Before you use it
+
+- **Devnet only, and not independently audited.** Nothing here is for real money yet. Use a devnet wallet.
+- **The program can be upgraded, and an upgrade can mean starting again.** Its upgrade authority can replace the
+  program's code, which is power over every economy on it (on mainnet that key is to be a multisig). No version so far
+  has carried accounts over from the one before: an economy made on 0.23 was made again for 0.24. Pin the package
+  version (each one names the program build it is for in `release.json`) and expect to set an economy up again after an
+  upgrade.
+- **Players trust the project.** Its owner and authority are trusted keys with no caps: the authority mints, moves the
+  project's pool funds, decides contests and writes its NFTs. The program protects players from each other, from the
+  platform and from mistakes, not from the project they chose to play. Money held for a record (an order, a bid, a
+  farm's stakes, a contest's or lottery's pot) leaves only by that record's rules.
+- **Players also trust the token and the collection.** A mint's issuer (a freeze authority, a pause, a transfer hook, a
+  permanent delegate) or a collection's controller can stop or move what loot holds. USDC has a freeze authority.
+- **The chain can't see a game.** Results a game reports (a win, a score, a clear) are vouched for by a key the project
+  trusts, a results server or deciders. Checking that a player really did it is the project's job, on its own server:
+  a server that decides the result, replays it, or only bounds what the page reports leaves a cheater very different
+  amounts. A grant says which in `trust`, and `xsolana review` says what a cheater gets on every route
+  ([trust and cheating](skills/xsolana-economy/references/trust-and-cheating.md)).
+- **The hosted results server is optional.** `https://play.xgames.fun/xsolana` (`@xgamesfun/solana/results`'s
+  default) signs vouchers for games without a server of their own. It can only pay what a grant allows, and only for a
+  grant whose owner named its key in `vouchers`. It sends nothing on chain, and it is offered as is: it can be down, and
+  it is behind for a while after each program upgrade. A game with its own server signs its own vouchers
+  (`signVoucher`), which is the better choice once it has one.
+- **Nothing runs by itself.** Someone sends every step: settles (the player, the project's keys, or a key the player
+  named), lottery draws, auction ends, refunds (anyone), contest results (the authority or its deciders) and schedule
+  runs (the project's keys). A run nobody sends on time is missed, except a sealed schedule's fixed amount. Apps built
+  with `@xgamesfun/solana/play` send the steps a player needs. Don't count on a hosted keeper.
+- **The rules are strict.** A prize is a fixed amount: a jackpot that grows is a lottery's pot. A lottery says where its
+  places are paid from: a pot that carries over (gifts and what earlier rounds left count), or each round's own ticket
+  money, which nothing from outside can change. A prize never shifts to a later round. A draw uses the odds
+  as written. When an outcome runs out, a box either stops selling (`stopSales`, the default) or keeps selling and
+  draws among what's left (`drawLeft`, which lets a player empty a common outcome to make a rare one likelier).
+- **Chance comes from an oracle.** MagicBlock's VRF answers every random roll and draw. If it stops answering, rolls wait. An
+  order still unanswered after 7 days can be refunded. Once a roll has waited 10 minutes, a buyer who sees a late
+  answer coming can take a refund instead.
+- **Fees and rent.** The platform sets two flat fees: by default 0.002 SOL a player action and 0.00001 SOL a project
+  action. Each is capped at 0.01 SOL, and a raise waits 7 days. Accounts cost rent: going live, and each settle that
+  opens or mints something. `xsolana cost` gives the totals. The platform can suspend purchases, but it never stops
+  payouts, refunds or unstakes (the one exception is a recipe that charges).
+- **Some things aren't built,** and some limits are kept by design. Read
+  [Known limits](docs/program.md#known-limits) before promising players something unusual.
+- **The law is yours to check.** The checker's legal flags (chance at money, resellable random items, revenue
+  sharing) are reminders, not advice. A spec with no flag isn't therefore legal.
+
 ## What an economy can be made of
 
 - payments and splits, in tokens or with an NFT
@@ -59,13 +105,13 @@ codex plugin add xsolana@xgamesfun
 ```
 
 **Any agent with MCP** (Cursor, opencode, Cline…): run the server with
-`npx -y --package=@xgamesfun/solana@0.24.0 xsolana mcp`. Or let `npx -y @xgamesfun/solana@0.24.0 connect` register it, with
+`npx -y --package=@xgamesfun/solana@0.25.1 xsolana mcp`. Or let `npx -y @xgamesfun/solana@0.25.1 connect` register it, with
 the skill, for Claude Code and Codex.
 
-Then ask for an economy, for example *"a fishing game where each cast costs 0.02 SOL, with a rare golden fish and a
-monthly draw"*.
+Then ask for an economy, for example _"a fishing game where each cast costs 0.02 SOL, with a rare golden fish and a
+monthly draw"_.
 
-Going live is always yours: `npx -y @xgamesfun/solana@0.24.0 approve` opens a page on your computer where you connect a
+Going live is always yours: `npx -y @xgamesfun/solana@0.25.1 approve` opens a page on your computer where you connect a
 devnet wallet and approve each transaction. The agent never signs and never asks for a key.
 
 ## Use it from a terminal
@@ -73,12 +119,13 @@ devnet wallet and approve each transaction. The agent never signs and never asks
 Every tool runs from the CLI too, on a spec file (`xsolana.json` by default):
 
 ```bash
-npx -y @xgamesfun/solana@0.24.0 examples shop with loot boxes   # the nearest worked examples
-npx -y @xgamesfun/solana@0.24.0 check xsolana.json                 # refusals and warnings
-npx -y @xgamesfun/solana@0.24.0 simulate xsolana.json              # where the money goes, day by day
-npx -y @xgamesfun/solana@0.24.0 cost xsolana.json                  # what going live and each action cost
-npx -y @xgamesfun/solana@0.24.0 explain xsolana.json               # the economy in plain words
-npx -y @xgamesfun/solana@0.24.0 approve xsolana.json               # go live, approved in your own wallet
+npx -y @xgamesfun/solana@0.25.1 examples shop with loot boxes   # the nearest worked examples
+npx -y @xgamesfun/solana@0.25.1 check xsolana.json                 # refusals and warnings
+npx -y @xgamesfun/solana@0.25.1 simulate xsolana.json              # where the money goes, day by day
+npx -y @xgamesfun/solana@0.25.1 cost xsolana.json                  # what going live and each action cost
+npx -y @xgamesfun/solana@0.25.1 explain xsolana.json               # the economy in plain words
+npx -y @xgamesfun/solana@0.25.1 review xsolana.json                # what a cheater gets on each route (exits 1 on a high finding)
+npx -y @xgamesfun/solana@0.25.1 approve xsolana.json               # go live, approved in your own wallet
 ```
 
 `xsolana help` lists every command. Every command names the exact version, so `npx` runs that release and never whatever
@@ -95,45 +142,46 @@ import * as loot from '@xgamesfun/solana/client';
 const ix = loot.openBoxIx({ player, project, box, nonce }); // one builder per instruction, no Solana SDK
 ```
 
-| Import | What |
-| --- | --- |
-| `@xgamesfun/solana` | the economy tools: `check`, `simulate`, `plan`, `cost`, `explainEconomy`, `model` |
-| `@xgamesfun/solana/client` | every PDA, one builder per instruction, account and receipt decoders, grant vouchers |
-| `@xgamesfun/solana/play` | `solanaApp`: what a player does with a live economy, from a browser app |
-| `@xgamesfun/solana/results` | results and vouchers a game's server signs |
-| `@xgamesfun/solana/chain/*` | browser-safe Solana primitives: base58, Borsh, transactions, PDAs, tokens, Core |
-| `@xgamesfun/solana/idl.json` | the program's IDL, the authority for account and argument layouts |
-| `@xgamesfun/solana/release.json` | the program build, IDL and client this release is pinned to |
+| Import                           | What                                                                                        |
+| -------------------------------- | ------------------------------------------------------------------------------------------- |
+| `@xgamesfun/solana`              | the economy tools: `check`, `simulate`, `plan`, `cost`, `explainEconomy`, `review`, `model` |
+| `@xgamesfun/solana/client`       | every PDA, one builder per instruction, account and receipt decoders, grant vouchers        |
+| `@xgamesfun/solana/play`         | `solanaApp`: what a player does with a live economy, from a browser app                     |
+| `@xgamesfun/solana/results`      | results and vouchers a game's server signs                                                  |
+| `@xgamesfun/solana/chain/*`      | browser-safe Solana primitives: base58, Borsh, transactions, PDAs, tokens, Core             |
+| `@xgamesfun/solana/idl.json`     | the program's IDL, the authority for account and argument layouts                           |
+| `@xgamesfun/solana/release.json` | the program build, IDL and client this release is pinned to                                 |
 
 The client, chain and play modules run in browsers and Node 22 or later, with no bundler required. The package
 ships TypeScript declarations for every entry point.
 
 ## Documentation
 
-| | |
-| --- | --- |
-| [`docs/program.md`](docs/program.md) | the program: who signs, accounts, every instruction, fees, limits, receipts, costs |
-| [`docs/nfts.md`](docs/nfts.md) | NFTs and tokens, with and without the project's authority |
-| [`docs/harnesses.md`](docs/harnesses.md) | how the plugin reaches Claude Code and Codex, and the release checklist |
-| [`skills/xsolana-economy`](skills/xsolana-economy/SKILL.md) | the skill an agent follows |
-| [`examples/`](examples) | whole economies that check and go live in the tests; `ideas.json`, 112 real economies rated |
-| [`evals/`](evals/README.md) | fresh-session evals of agents building on loot |
-| [`CHANGELOG.md`](CHANGELOG.md), [`SECURITY.md`](SECURITY.md) | versions, the trust model, reporting a vulnerability |
+|                                                                                    |                                                                                             |
+| ---------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------- |
+| [`docs/program.md`](docs/program.md)                                               | the program: who signs, accounts, every instruction, fees, limits, receipts, costs          |
+| [`docs/nfts.md`](docs/nfts.md)                                                     | NFTs and tokens, with and without the project's authority                                   |
+| [`docs/harnesses.md`](docs/harnesses.md)                                           | how the plugin reaches Claude Code and Codex, and the release checklist                     |
+| [`skills/xsolana-economy`](skills/xsolana-economy/SKILL.md)                        | the skill an agent follows                                                                  |
+| [`trust-and-cheating.md`](skills/xsolana-economy/references/trust-and-cheating.md) | what a server decides, replays or bounds; who gets paid; an exploit checklist               |
+| [`examples/`](examples)                                                            | whole economies that check and go live in the tests; `ideas.json`, 112 real economies rated |
+| [`evals/`](evals/README.md)                                                        | fresh-session evals of agents building on loot                                              |
+| [`CHANGELOG.md`](CHANGELOG.md), [`SECURITY.md`](SECURITY.md)                       | versions, the trust model, reporting a vulnerability                                        |
 
 ## Layout
 
-| Path | What |
-| --- | --- |
-| `js/chain/` | browser-safe Solana primitives, no SDK |
-| `js/client/` | the client; `idl/` is the program's IDL |
-| `js/economy/` | the economy spec (version 2, `schema.json`), checker, simulation, setup plan, cost, explainer, guide |
-| `js/play/`, `js/results/` | a player's side of a live economy; results a server vouches for |
-| `js/approve/`, `js/mcp/`, `js/connect/` | the approval page, the MCP server and its tools, `xsolana connect` |
-| `js/sim/`, `js/test/` | LiteSVM running the real program; the tests and their pinned fixtures |
-| `bin/xsolana.mjs` | the CLI |
-| `skills/`, `plugin/` | the skill (copied to `plugin/skills`, `.claude/skills`, `.agents/skills`) and the plugin |
-| `scripts/` | fixtures, skill sync, IDL sync, release manifest, a devnet end-to-end run |
-| `release.json` | the program binary, IDL and client hashes this version is pinned to |
+| Path                                    | What                                                                                                 |
+| --------------------------------------- | ---------------------------------------------------------------------------------------------------- |
+| `js/chain/`                             | browser-safe Solana primitives, no SDK                                                               |
+| `js/client/`                            | the client; `idl/` is the program's IDL                                                              |
+| `js/economy/`                           | the economy spec (version 2, `schema.json`), checker, simulation, setup plan, cost, explainer, guide |
+| `js/play/`, `js/results/`               | a player's side of a live economy; results a server vouches for                                      |
+| `js/approve/`, `js/mcp/`, `js/connect/` | the approval page, the MCP server and its tools, `xsolana connect`                                   |
+| `js/sim/`, `js/test/`                   | LiteSVM running the real program; the tests and their pinned fixtures                                |
+| `bin/xsolana.mjs`                       | the CLI                                                                                              |
+| `skills/`, `plugin/`                    | the skill (copied to `plugin/skills`, `.claude/skills`, `.agents/skills`) and the plugin             |
+| `scripts/`                              | fixtures, skill sync, IDL sync, release manifest, a devnet end-to-end run                            |
+| `release.json`                          | the program binary, IDL and client hashes this version is pinned to                                  |
 
 ## Development
 
@@ -143,20 +191,20 @@ Node 22 or later.
 npm ci
 npm run fixtures   # downloads the loot program from devnet and the programs it calls from mainnet, each checked by hash
 npm test           # every instruction the client builds, and every example's whole setup, against the real program in LiteSVM
-npm run lint       # ESLint
+npm run lint       # ESLint and Prettier (npm run format fixes the formatting)
 npm run check      # fixtures, skill copies and release.json in step, lint, then the tests
 ```
 
 Nothing in the tests deploys or spends SOL.
 
-| Variable | What it does |
-| --- | --- |
-| `XSOLANA_RPC_URL` | a devnet RPC of your own for `xsolana approve` and `xsolana status` (a mainnet URL is refused) |
-| `XSOLANA_NO_OPEN` | `xsolana approve` prints its link without opening a browser |
-| `XSOLANA_DEBUG` | the CLI prints a failure's whole stack, not one line |
-| `XSOLANA_PROGRAM_DIR` | the tests run that program build's `target/deploy/loot.so`, and check the IDL against it | To try the tools in your own agent from a clone,
-`node bin/xsolana.mjs connect --local` registers this checkout's MCP server and the skill with Claude Code and Codex
-(`--remove` takes them out again).
+| Variable                                                                                                             | What it does                                                                                   |
+| -------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------- |
+| `XSOLANA_RPC_URL`                                                                                                    | a devnet RPC of your own for `xsolana approve` and `xsolana status` (a mainnet URL is refused) |
+| `XSOLANA_NO_OPEN`                                                                                                    | `xsolana approve` prints its link without opening a browser                                    |
+| `XSOLANA_DEBUG`                                                                                                      | the CLI prints a failure's whole stack, not one line                                           |
+| `XSOLANA_PROGRAM_DIR`                                                                                                | the tests run that program build's `target/deploy/loot.so`, and check the IDL against it       | To try the tools in your own agent from a clone, |
+| `node bin/xsolana.mjs connect --local` registers this checkout's MCP server and the skill with Claude Code and Codex |
+| (`--remove` takes them out again).                                                                                   |
 
 After editing `skills/`, run `npm run sync-skills`. Changes to tool texts, the skill or the plugin are best measured
 with the evals before and after ([`evals/README.md`](evals/README.md)). [`AGENTS.md`](AGENTS.md) has the rules for

package/bin/xsolana.mjs

@@ -5,7 +5,7 @@
 //   xsolana mcp                          serve the tools over stdio (what a plugin's MCP config runs)
 //   xsolana guide [part] [--json]        what an economy can be made of, and what loot cannot do
 //   xsolana examples [words…] [--json]   the nearest worked examples and rated economies
-//   xsolana check|simulate|cost|explain|publish|status [file] [--json]   one tool on a spec file (default xsolana.json)
+//   xsolana check|simulate|cost|explain|review|publish|status [file] [--json]   one tool on a spec file (default xsolana.json)
 //   xsolana approve [file] [--port n] [--no-open]   open the local page where the owner approves going live in their wallet
 //   xsolana connect [--agent claude|codex] [--scope user|project] [--local] [--remove] [--dry-run]   register the MCP server and the skill
 //   xsolana tool --list | xsolana tool <name> '<json>' [--args-file f] [--json]   any tool by name
@@ -25,6 +25,7 @@ const USAGE = `xsolana: the tools for loot, one shared Solana program for game a
   xsolana simulate [file]         the quick simulation
   xsolana cost [file]             what going live and each action cost
   xsolana explain [file]          the economy in plain words
+  xsolana review [file]           what a cheater gets on each route, and what to fix before going live
   xsolana publish [file]          what going live does, and how to approve it
   xsolana approve [file]          approve going live in your own wallet (a local page; --port n, --no-open)
   xsolana status [file]           a live economy on chain
@@ -33,7 +34,8 @@ const USAGE = `xsolana: the tools for loot, one shared Solana program for game a
   xsolana tool --list             every tool; xsolana tool <name> '<json>' runs one (--args-file f)
   xsolana version                 this package's xsolana version and program
 
-  A tool's command (guide, examples, check … status, tool) takes --json for its whole answer as JSON.`;
+  A tool's command (guide, examples, check … status, tool) takes --json for its whole answer as JSON.
+  review exits 1 when it finds something high.`;
 
 /** A failure the person caused (a bad flag, a missing file): said in one line, without a stack. */
 class UsageError extends Error {}
@@ -50,6 +52,7 @@ const FLAGS = {
   simulate: TOOL_FLAGS,
   cost: TOOL_FLAGS,
   explain: TOOL_FLAGS,
+  review: TOOL_FLAGS,
   publish: TOOL_FLAGS,
   status: TOOL_FLAGS,
   approve: ['--port', '--no-open'],
@@ -74,7 +77,8 @@ function parseArgs(rest) {
     flags.add(name);
     if (eq > 0) values.set(name, a.slice(eq + 1));
     else if (VALUED.has(name)) {
-      if (i + 1 >= rest.length || rest[i + 1].startsWith('--')) throw new UsageError(`${name} needs a value (${name} <value> or ${name}=<value>).`);
+      if (i + 1 >= rest.length || rest[i + 1].startsWith('--'))
+        throw new UsageError(`${name} needs a value (${name} <value> or ${name}=<value>).`);
       values.set(name, rest[++i]);
     }
   }
@@ -85,7 +89,8 @@ function parseArgs(rest) {
 function portOf(value) {
   if (value === undefined) return undefined;
   const n = Number(value);
-  if (!/^\d+$/.test(String(value)) || n < 1 || n > 65535) throw new UsageError(`--port must be a whole number from 1 to 65535, not ${JSON.stringify(value)}.`);
+  if (!/^\d+$/.test(String(value)) || n < 1 || n > 65535)
+    throw new UsageError(`--port must be a whole number from 1 to 65535, not ${JSON.stringify(value)}.`);
   return n;
 }
 
@@ -93,15 +98,20 @@ async function main(argv) {
   const [command, ...rest] = argv;
   const { flags, values, positional } = parseArgs(rest);
   const takes = Object.hasOwn(FLAGS, command) ? FLAGS[command] : null;
-  const unknown = takes && [...flags].find((f) => !takes.includes(f));
-  if (unknown) throw new UsageError(`“${command}” takes no ${unknown} flag (${takes.length ? `only ${takes.join(', ')}` : 'it takes none'}).`);
+  const unknown = takes && [...flags].find(f => !takes.includes(f));
+  if (unknown)
+    throw new UsageError(
+      `“${command}” takes no ${unknown} flag (${takes.length ? `only ${takes.join(', ')}` : 'it takes none'}).`,
+    );
 
   async function tool(name, input) {
     const { runTool } = await import('../js/mcp/server.mjs');
     const r = await runTool(name, input, { cwd: process.cwd() });
     const failed = Boolean(r.isError || r.ok === false);
+    // A review is a report whatever it finds: printed on stdout, its exit code saying whether a finding is high.
+    const report = name === 'xsolana_review' && !r.isError && !r.refusals;
     if (flags.has('--json')) console.log(JSON.stringify(r, (_, v) => (typeof v === 'bigint' ? v.toString() : v), 2));
-    else (failed ? console.error : console.log)(r.text ?? JSON.stringify(r, null, 2));
+    else (failed && !report ? console.error : console.log)(r.text ?? JSON.stringify(r, null, 2));
     if (failed) process.exitCode = 1;
   }
 
@@ -123,6 +133,7 @@ async function main(argv) {
     case 'simulate':
     case 'cost':
     case 'explain':
+    case 'review':
     case 'publish':
     case 'status':
       await tool(`xsolana_${command}`, fileInput());
@@ -135,7 +146,13 @@ async function main(argv) {
     }
     case 'connect': {
       const { connect } = await import('../js/connect/connect.mjs');
-      process.exitCode = await connect({ agent: values.get('--agent'), local: flags.has('--local'), remove: flags.has('--remove'), dryRun: flags.has('--dry-run'), scope: values.get('--scope') });
+      process.exitCode = await connect({
+        agent: values.get('--agent'),
+        local: flags.has('--local'),
+        remove: flags.has('--remove'),
+        dryRun: flags.has('--dry-run'),
+        scope: values.get('--scope'),
+      });
       break;
     }
     case 'tool': {
@@ -145,12 +162,15 @@ async function main(argv) {
         break;
       }
       const from = values.get('--args-file');
-      const raw = from ? await readFile(from, 'utf8') : positional[1] ?? '{}';
+      const raw = from ? await readFile(from, 'utf8') : (positional[1] ?? '{}');
       let input;
       try {
         input = JSON.parse(raw);
       } catch (e) {
-        throw new UsageError(`The arguments ${from ? `in ${from} ` : ''}are not JSON (${e.message}). Give them as one word, as in: xsolana tool xsolana_check '{"file":"xsolana.json"}'.`, { cause: e });
+        throw new UsageError(
+          `The arguments ${from ? `in ${from} ` : ''}are not JSON (${e.message}). Give them as one word, as in: xsolana tool xsolana_check '{"file":"xsolana.json"}'.`,
+          { cause: e },
+        );
       }
       await tool(positional[0], input);
       break;
@@ -176,7 +196,8 @@ async function main(argv) {
 /** One line for a failure: what went wrong, without a stack (a missing file names the file). */
 function oneLine(e) {
   if (e?.code === 'ENOENT' && e.path) return `${e.path} does not exist.`;
-  if (e?.code === 'EADDRINUSE') return `Port ${e.port} is in use: pick another with --port, or leave it out for any free one.`;
+  if (e?.code === 'EADDRINUSE')
+    return `Port ${e.port} is in use: pick another with --port, or leave it out for any free one.`;
   return String(e?.message ?? e);
 }
 

package/examples/blind-forge.json

@@ -109,12 +109,10 @@
     {
       "key": "buyers-draw",
       "name": "Buyers' draw",
+      "pot": 0,
       "price": 1,
       "cutPercent": 5,
-      "places": [
-        70,
-        30
-      ],
+      "places": [70, 30],
       "every": "7d"
     }
   ],

package/examples/coin-flip-arena.json

@@ -65,12 +65,9 @@
     {
       "key": "weekly",
       "name": "Weekly draw",
+      "pot": 0,
       "price": 0.01,
-      "places": [
-        50,
-        30,
-        20
-      ],
+      "places": [50, 30, 20],
       "every": "7d",
       "firstDraw": "publish+7d"
     }

package/examples/duel-arena.json

@@ -59,10 +59,7 @@
       "name": "Duel",
       "currency": "usdc",
       "sides": 2,
-      "sideNames": [
-        "Red",
-        "Blue"
-      ],
+      "sideNames": ["Red", "Blue"],
       "entriesClose": "10m",
       "resultDue": "1h",
       "every": "1h",

package/examples/fair-presale.json

@@ -24,9 +24,7 @@
       "name": "The raise",
       "currency": "sol",
       "sides": 1,
-      "sideNames": [
-        "Back it"
-      ],
+      "sideNames": ["Back it"],
       "entriesClose": "7d",
       "resultDue": "8d",
       "minPot": 50,

package/examples/hero-trials.json

@@ -26,7 +26,13 @@
         { "gives": "nothing", "chance": 25, "shifts": [{ "attribute": "level", "by": -1 }] },
         { "gives": "nothing", "chance": 5, "then": "burn" }
       ],
-      "odds": [{ "outcome": 0, "when": { "item": "hero", "attribute": "level", "atLeast": 0 }, "add": { "perPointPercent": 10, "upTo": 10 } }]
+      "odds": [
+        {
+          "outcome": 0,
+          "when": { "item": "hero", "attribute": "level", "atLeast": 0 },
+          "add": { "perPointPercent": 10, "upTo": 10 }
+        }
+      ]
     },
     {
       "key": "expedition-result",
@@ -39,7 +45,13 @@
         { "gives": "nothing", "chance": 30, "shifts": [{ "attribute": "affection", "by": -2 }] },
         { "gives": "nothing", "chance": 10, "then": "treasury" }
       ],
-      "odds": [{ "outcome": 0, "when": { "item": "hero", "attribute": "level", "atLeast": 0 }, "add": { "perPointPercent": 20, "upTo": 10 } }]
+      "odds": [
+        {
+          "outcome": 0,
+          "when": { "item": "hero", "attribute": "level", "atLeast": 0 },
+          "add": { "perPointPercent": 20, "upTo": 10 }
+        }
+      ]
     },
     {
       "key": "forge",