@xona-labs/xpay 0.2.24 → 0.2.26

package/dist/agenc/api.js

@@ -1,11 +1,11 @@
 /**
- * AgenC marketplace client — keyless reads of Solana-mainnet marketplace state.
+ * AgenC marketplace client - keyless reads of Solana-mainnet marketplace state.
  *
  * AgenC (https://agenc.ag) lists standing service offers from registered
  * on-chain agents. Discovery goes through AgenC's hosted indexer via the SDK's
- * `createIndexerClient` — their documented "intended scale read path" (the
+ * `createIndexerClient` - their documented "intended scale read path" (the
  * legacy REST `?hireable=true` filter went dark after a program upgrade).
- * Execution is NOT x402 — hiring escrows native SOL on-chain via
+ * Execution is NOT x402 - hiring escrows native SOL on-chain via
  * `@tetsuo-ai/marketplace-sdk` (see ./hire.ts).
  */
 import { z } from "zod";
@@ -37,7 +37,7 @@ const AgencListingSchema = z
     createdAtUnix: z.number().optional(),
 })
     .passthrough();
-/** Task shape returned by GET /api/tasks/:pda — used to poll hire progress. */
+/** Task shape returned by GET /api/tasks/:pda - used to poll hire progress. */
 const AgencTaskSchema = z
     .object({
     pda: z.string(),
@@ -54,7 +54,7 @@ const AgencTaskSchema = z
  * Fetch all active, SOL-priced listings via AgenC's hosted indexer and map
  * them into xpay's Resource shape. Discovery is deliberately permissive:
  * listings without a fresh moderation attestation are still shown (matching
- * agenc.ag's own browse page) — the hire path is the fail-closed gate.
+ * agenc.ag's own browse page) - the hire path is the fail-closed gate.
  */
 export async function fetchAgencResources(opts = {}) {
     const endpoint = opts.endpoint ?? process.env.XPAY_AGENC_ENDPOINT ?? DEFAULT_ENDPOINT;
@@ -76,7 +76,7 @@ export async function fetchAgencResources(opts = {}) {
 /**
  * Map an AgenC listing into xpay's Resource shape. Everything `hire.ts` needs
  * to execute rides in `accepts[0].extra`, so a discovered resource is
- * self-contained — no extra API round-trips at hire time.
+ * self-contained - no extra API round-trips at hire time.
  */
 export function listingToResource(l) {
     return {
@@ -117,7 +117,7 @@ export function isAgencResource(r) {
     return r.accepts.some((a) => a.scheme === AGENC_SCHEME);
 }
 /**
- * Fetch a single listing by PDA via the indexer — used as the pre-hire
+ * Fetch a single listing by PDA via the indexer - used as the pre-hire
  * freshness check. Decodes the raw on-chain account bytes for byte-true
  * parity with what the program will see. Returns undefined when the listing
  * doesn't exist.
@@ -186,17 +186,17 @@ function normalizeAccount(pda, a) {
         };
     }
     catch {
-        return null; // malformed row — skip rather than kill discovery
+        return null; // malformed row - skip rather than kill discovery
     }
 }
-/** Fetch a task by PDA (GET /api/tasks/:pda) — the status of a hire. */
+/** Fetch a task by PDA (GET /api/tasks/:pda) - the status of a hire. */
 export async function fetchAgencTask(pda, opts = {}) {
     const endpoint = opts.endpoint ?? process.env.XPAY_AGENC_ENDPOINT ?? DEFAULT_ENDPOINT;
     const fetchImpl = opts.fetch ?? fetch;
     const url = new URL(`/api/tasks/${encodeURIComponent(pda)}`, endpoint);
     const res = await fetchImpl(url.toString(), { headers: { accept: "application/json" } });
     if (res.status === 404) {
-        throw new Error(`AgenC task ${pda} not found. The API snapshot rebuilds ~every 45s — ` +
+        throw new Error(`AgenC task ${pda} not found. The API snapshot rebuilds ~every 45s - ` +
             `if this hire just landed, retry in about a minute.`);
     }
     if (!res.ok)
@@ -214,7 +214,7 @@ async function apiError(what, res) {
     try {
         const body = (await res.json());
         if (body?.error)
-            reason = ` — ${body.error}`;
+            reason = ` - ${body.error}`;
     }
     catch {
         /* no JSON body */

package/dist/agenc/hire.d.ts

@@ -1,12 +1,12 @@
 /**
- * AgenC hire execution — the non-x402 payment rail.
+ * AgenC hire execution - the non-x402 payment rail.
  *
  * Hiring a listing is a Solana transaction (program
  * HJsZ53Zb27b8QMRbQpuDngE44AdwCGxvEZr61Zmxw1xK) that escrows the listing's
  * price in native SOL and creates a Task + HireRecord on-chain. The provider
  * then works ASYNCHRONOUSLY: escrow → work → review → settle. So unlike an
  * x402 call, `use()` on an AgenC resource returns a hire *receipt*, not a
- * response body — poll progress with `xpay agenc status <taskPda>`.
+ * response body - poll progress with `xpay agenc status <taskPda>`.
  *
  * The humanless entry point pins the task to CreatorReview, so escrowed funds
  * never auto-release without the buyer accepting the result.
@@ -26,7 +26,7 @@ export interface AgencHireReceipt {
     kind: "agenc-hire-receipt";
     /** Listing PDA that was hired. */
     listing: string;
-    /** Task PDA created by the hire — the handle for status polling and review. */
+    /** Task PDA created by the hire - the handle for status polling and review. */
     task: string;
     /** HireRecord PDA linking the task back to the listing. */
     hireRecord: string;
@@ -53,7 +53,7 @@ interface ResolvedModeration {
  *   2. v2 seeds ["listing_moderation_v2", listing, specHash, globalAuthority]
  *   3. getProgramAccounts scan (discriminator + listing memcmp)
  * Whatever record is found, its CONTENT names the moderator the hire gate
- * expects — return both so the facade can skip its own derivation.
+ * expects - return both so the facade can skip its own derivation.
  */
 export declare function resolveListingModeration(sdk: AgencSdk, rpc: unknown, listingPda: string, specHashHex: string): Promise<ResolvedModeration | null>;
 export {};

package/dist/agenc/hire.js

@@ -1,12 +1,12 @@
 /**
- * AgenC hire execution — the non-x402 payment rail.
+ * AgenC hire execution - the non-x402 payment rail.
  *
  * Hiring a listing is a Solana transaction (program
  * HJsZ53Zb27b8QMRbQpuDngE44AdwCGxvEZr61Zmxw1xK) that escrows the listing's
  * price in native SOL and creates a Task + HireRecord on-chain. The provider
  * then works ASYNCHRONOUSLY: escrow → work → review → settle. So unlike an
  * x402 call, `use()` on an AgenC resource returns a hire *receipt*, not a
- * response body — poll progress with `xpay agenc status <taskPda>`.
+ * response body - poll progress with `xpay agenc status <taskPda>`.
  *
  * The humanless entry point pins the task to CreatorReview, so escrowed funds
  * never auto-release without the buyer accepting the result.
@@ -21,9 +21,9 @@ export async function useAgencHire(args) {
     }
     const extra = parseExtra(req);
     const cfg = args.agenc ?? {};
-    // Guardrail runs *before* signing — same security boundary as the x402 path.
+    // Guardrail runs *before* signing - same security boundary as the x402 path.
     await args.guardrail.check({ resource: args.resource, requirement: req });
-    // Freshness check: the catalog snapshot may be stale — refuse if the listing
+    // Freshness check: the catalog snapshot may be stale - refuse if the listing
     // was paused/retired or repriced upward since discovery. The on-chain
     // expectedPrice/expectedVersion checks are the fail-closed backstop.
     const live = await fetchAgencListing(extra.listingPda, { endpoint: cfg.endpoint });
@@ -43,14 +43,14 @@ export async function useAgencHire(args) {
     const kitSigner = (await signer.getKitSigner());
     const rpcUrl = cfg.rpcUrl ?? process.env.XPAY_SOLANA_RPC ?? DEFAULT_RPC;
     // Pre-flight: the hire escrows priceLamports in NATIVE SOL (plus fees/rent),
-    // so check the SOL balance — the USDC insufficient-balance path doesn't apply.
+    // so check the SOL balance - the USDC insufficient-balance path doesn't apply.
     const { createSolanaRpc, address } = await import("@solana/kit");
     const rpc = createSolanaRpc(rpcUrl);
     const FEE_BUFFER_LAMPORTS = 10000000n; // ~0.01 SOL for fees + PDA rent
     const needed = BigInt(live.priceLamports) + FEE_BUFFER_LAMPORTS;
     const { value: lamports } = await rpc.getBalance(address(signer.address)).send();
     if (BigInt(lamports) < needed) {
-        throw new Error(`xpay.agenc: insufficient SOL — hire needs ~${fmtSol(needed)} SOL ` +
+        throw new Error(`xpay.agenc: insufficient SOL - hire needs ~${fmtSol(needed)} SOL ` +
             `(${fmtSol(BigInt(live.priceLamports))} escrow + fees) but ${signer.address} ` +
             `holds ${fmtSol(BigInt(lamports))} SOL. Fund the wallet and retry.`);
     }
@@ -63,19 +63,19 @@ export async function useAgencHire(args) {
     const surface = await deployedSurface(sdk, rpc);
     if (!surface.listings) {
         throw new Error(`xpay.agenc: the deployed AgenC program (surface revision ${surface.surfaceRevision}) ` +
-            `does not expose listings/hires on this cluster. xpay may need an update — check ` +
+            `does not expose listings/hires on this cluster. xpay may need an update - check ` +
             `for a newer @xona-labs/xpay release.`);
     }
     // Resolve the listing's moderation attestation. The record's on-chain
     // ADDRESS has changed seed schemes across program upgrades, but its CONTENT
-    // always names the moderator the hire gate expects — so we locate the
+    // always names the moderator the hire gate expects - so we locate the
     // record (trying each known derivation, newest data wins) and pass both
     // the moderator and the explicit record address to the facade. Fail-closed
     // BEFORE the guardrail/payment path if no attestation exists.
     const moderation = await resolveListingModeration(sdk, rpc, extra.listingPda, extra.specHash);
     if (!moderation) {
         throw new Error(`xpay.agenc: listing ${extra.listingPda} has no on-chain moderation attestation yet ` +
-            `(AgenC re-attests listings after program upgrades). The hire gate is fail-closed — ` +
+            `(AgenC re-attests listings after program upgrades). The hire gate is fail-closed - ` +
             `pick another listing or retry later.`);
     }
     const client = createMarketplaceClient({ rpcUrl, signer: kitSigner });
@@ -103,7 +103,7 @@ export async function useAgencHire(args) {
         txSig: signature,
         status: "escrowed",
         statusHint: "SOL is escrowed on-chain; the provider works asynchronously. Poll progress with " +
-            `\`xpay agenc status ${taskPda}\` — funds settle to the provider after your review window.`,
+            `\`xpay agenc status ${taskPda}\` - funds settle to the provider after your review window.`,
         explorer: `https://solscan.io/tx/${signature}`,
         surfaceRevision: surface.surfaceRevision,
     };
@@ -127,13 +127,13 @@ function parseExtra(req) {
     if (typeof listingPda !== "string" ||
         typeof specHash !== "string" ||
         typeof version !== "string") {
-        throw new Error("xpay.agenc: malformed AgenC resource — missing listingPda/specHash/version in " +
+        throw new Error("xpay.agenc: malformed AgenC resource - missing listingPda/specHash/version in " +
             "accepts[].extra. Re-run discover to get a fresh listing.");
     }
     return { listingPda, specHash, version };
 }
 let surfaceCache;
-/** Deployed instruction surface, cached 10 min — one account fetch. */
+/** Deployed instruction surface, cached 10 min - one account fetch. */
 async function deployedSurface(sdk, rpc) {
     if (surfaceCache && Date.now() - surfaceCache.at < 600_000)
         return surfaceCache.value;
@@ -149,13 +149,13 @@ async function deployedSurface(sdk, rpc) {
  *   2. v2 seeds ["listing_moderation_v2", listing, specHash, globalAuthority]
  *   3. getProgramAccounts scan (discriminator + listing memcmp)
  * Whatever record is found, its CONTENT names the moderator the hire gate
- * expects — return both so the facade can skip its own derivation.
+ * expects - return both so the facade can skip its own derivation.
  */
 export async function resolveListingModeration(sdk, rpc, listingPda, specHashHex) {
     const { getProgramDerivedAddress, getAddressEncoder, getUtf8Encoder, getBase58Decoder, address } = await import("@solana/kit");
     const specHash = hexToBytes(specHashHex);
     const candidates = [];
-    // 1) v1 seeds — pre-upgrade attestations (still honored by the program).
+    // 1) v1 seeds - pre-upgrade attestations (still honored by the program).
     const [v1] = await getProgramDerivedAddress({
         programAddress: sdk.AGENC_COORDINATION_PROGRAM_ADDRESS,
         seeds: [
@@ -179,7 +179,7 @@ export async function resolveListingModeration(sdk, rpc, listingPda, specHashHex
         }
     }
     catch {
-        /* moderation config unreadable — continue with what we have */
+        /* moderation config unreadable - continue with what we have */
     }
     for (const candidate of candidates) {
         const found = await tryDecodeModeration(sdk, rpc, candidate);
@@ -187,7 +187,7 @@ export async function resolveListingModeration(sdk, rpc, listingPda, specHashHex
             return found;
     }
     // 3) Seed-agnostic: scan the program's moderation records for this listing.
-    //    Best effort — some RPCs rate-limit or forbid getProgramAccounts.
+    //    Best effort - some RPCs rate-limit or forbid getProgramAccounts.
     try {
         const disc = getBase58Decoder().decode(sdk.LISTING_MODERATION_DISCRIMINATOR);
         const rows = await rpc
@@ -206,7 +206,7 @@ export async function resolveListingModeration(sdk, rpc, listingPda, specHashHex
         }
     }
     catch {
-        /* scan unavailable — fall through to fail-closed */
+        /* scan unavailable - fall through to fail-closed */
     }
     return null;
 }

package/dist/agenc/price.d.ts

@@ -1,5 +1,5 @@
 /**
- * SOL/USD spot price — AgenC listings are priced in native SOL, but the
+ * SOL/USD spot price - AgenC listings are priced in native SOL, but the
  * guardrail's policy surface (maxPerTx / maxPerDay / requireApprovalAbove)
  * is USD-denominated. Tries several keyless public feeds in order (corporate
  * proxies commonly block one or another), cached for 60s.

package/dist/agenc/price.js

@@ -1,5 +1,5 @@
 /**
- * SOL/USD spot price — AgenC listings are priced in native SOL, but the
+ * SOL/USD spot price - AgenC listings are priced in native SOL, but the
  * guardrail's policy surface (maxPerTx / maxPerDay / requireApprovalAbove)
  * is USD-denominated. Tries several keyless public feeds in order (corporate
  * proxies commonly block one or another), cached for 60s.

package/dist/biometric/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * Biometric unlock (macOS Touch ID / Watch) — gates access to the wallet
+ * Biometric unlock (macOS Touch ID / Watch) - gates access to the wallet
  * passphrase, it does not replace it. The passphrase is stored in the user's
  * login keychain and only released by a small native helper after a
  * successful LocalAuthentication check. The scrypt/AES wallet encryption is
@@ -10,7 +10,7 @@
  * Embedding the source keeps the npm package dependency-free and lets tsc
  * ship it inside dist/ without a native build step at install time.
  */
-/** Keychain item identity — must match `kService` in the Swift source. */
+/** Keychain item identity - must match `kService` in the Swift source. */
 export declare const KEYCHAIN_SERVICE = "com.xona-labs.xpay.wallet";
 export type BiometryType = "touchid" | "faceid";
 /** Thrown when biometrics can't work here at all (non-macOS, no swiftc, no enrolled biometry). */
@@ -34,7 +34,7 @@ export declare function biometricPrompt(reason: string): Promise<boolean>;
 export declare function storeBiometricPassphrase(account: string, passphrase: string): Promise<void>;
 /**
  * Biometric-gated read of the stored passphrase. Returns null when the user
- * cancels/fails the check or no passphrase is stored — both mean "fall back
+ * cancels/fails the check or no passphrase is stored - both mean "fall back
  * to typing the passphrase". Throws {@link BiometricUnavailableError} when
  * biometry can't be evaluated at all.
  */

package/dist/biometric/index.js

@@ -1,5 +1,5 @@
 /**
- * Biometric unlock (macOS Touch ID / Watch) — gates access to the wallet
+ * Biometric unlock (macOS Touch ID / Watch) - gates access to the wallet
  * passphrase, it does not replace it. The passphrase is stored in the user's
  * login keychain and only released by a small native helper after a
  * successful LocalAuthentication check. The scrypt/AES wallet encryption is
@@ -16,7 +16,7 @@ import { existsSync, mkdirSync, writeFileSync, readdirSync, unlinkSync } from "n
 import { createHash } from "node:crypto";
 import { execFileSync, execFile } from "node:child_process";
 import { xpayHome } from "../profile/storage.js";
-/** Keychain item identity — must match `kService` in the Swift source. */
+/** Keychain item identity - must match `kService` in the Swift source. */
 export const KEYCHAIN_SERVICE = "com.xona-labs.xpay.wallet";
 const HELPER_BASENAME = "xpay-biometric";
 // Helper exit codes (mirrored in the Swift source).
@@ -24,7 +24,7 @@ const EXIT_OK = 0;
 const EXIT_UNAVAILABLE = 2;
 const EXIT_DENIED = 3;
 const EXIT_NOT_FOUND = 4;
-const SWIFT_SOURCE = `// xpay-biometric — generated by @xona-labs/xpay; do not edit.
+const SWIFT_SOURCE = `// xpay-biometric - generated by @xona-labs/xpay; do not edit.
 import Foundation
 import LocalAuthentication
 import Security
@@ -136,7 +136,7 @@ function binDir() {
  * Compile the helper if this exact source hasn't been compiled yet. The
  * binary name carries a source hash so upgrades recompile automatically;
  * stale versions are swept. Note: a freshly compiled binary triggers a new
- * macOS "allow keychain access" prompt on its first read — expected.
+ * macOS "allow keychain access" prompt on its first read - expected.
  */
 function ensureHelper() {
     if (!biometricPlatformSupported()) {
@@ -153,7 +153,7 @@ function ensureHelper() {
         execFileSync("swiftc", ["-O", "-o", bin, src], { stdio: ["ignore", "ignore", "pipe"] });
     }
     catch {
-        throw new BiometricUnavailableError("Could not compile the Touch ID helper — are the Xcode Command Line Tools installed? (xcode-select --install)");
+        throw new BiometricUnavailableError("Could not compile the Touch ID helper - are the Xcode Command Line Tools installed? (xcode-select --install)");
     }
     for (const f of readdirSync(binDir())) {
         if (f.startsWith(`${HELPER_BASENAME}-`) && f !== `${HELPER_BASENAME}-${hash}`) {
@@ -216,7 +216,7 @@ export async function storeBiometricPassphrase(account, passphrase) {
 }
 /**
  * Biometric-gated read of the stored passphrase. Returns null when the user
- * cancels/fails the check or no passphrase is stored — both mean "fall back
+ * cancels/fails the check or no passphrase is stored - both mean "fall back
  * to typing the passphrase". Throws {@link BiometricUnavailableError} when
  * biometry can't be evaluated at all.
  */

package/dist/cli/accounts.d.ts

@@ -1,5 +1,5 @@
 /**
- * `xpay accounts` — multi-profile management.
+ * `xpay accounts` - multi-profile management.
  *
  *   xpay accounts list             list known profiles
  *   xpay accounts show [name]      show addresses for a profile

package/dist/cli/accounts.js

@@ -1,5 +1,5 @@
 /**
- * `xpay accounts` — multi-profile management.
+ * `xpay accounts` - multi-profile management.
  *
  *   xpay accounts list             list known profiles
  *   xpay accounts show [name]      show addresses for a profile

package/dist/cli/agenc.d.ts

@@ -1,5 +1,5 @@
 /**
- * `xpay agenc <hire|status>` — AgenC marketplace (agenc.ag).
+ * `xpay agenc <hire|status>` - AgenC marketplace (agenc.ag).
  *
  * AgenC listings show up in `xpay discover` alongside x402 services, but they
  * execute differently: hiring escrows the price in native SOL on-chain, the
@@ -17,6 +17,6 @@ export declare function runAgencHire(listingPda: string, opts: AgencHireCmdOptio
 export interface AgencStatusCmdOptions {
     json?: boolean;
 }
-/** Read-only — no profile unlock needed. */
+/** Read-only - no profile unlock needed. */
 export declare function runAgencStatus(taskPda: string, opts: AgencStatusCmdOptions): Promise<void>;
 //# sourceMappingURL=agenc.d.ts.map

package/dist/cli/agenc.js

@@ -1,5 +1,5 @@
 /**
- * `xpay agenc <hire|status>` — AgenC marketplace (agenc.ag).
+ * `xpay agenc <hire|status>` - AgenC marketplace (agenc.ag).
  *
  * AgenC listings show up in `xpay discover` alongside x402 services, but they
  * execute differently: hiring escrows the price in native SOL on-chain, the
@@ -60,7 +60,7 @@ export async function runAgencHire(listingPda, opts) {
         const receipt = result.data;
         const elapsed = Date.now() - t0;
         console.log("");
-        console.log(chalk.green(`✔ Hired — ◎${sol.toFixed(4)} SOL escrowed in ${elapsed}ms`));
+        console.log(chalk.green(`✔ Hired - ◎${sol.toFixed(4)} SOL escrowed in ${elapsed}ms`));
         console.log(`  ${chalk.dim("task:")}     ${receipt.task}`);
         console.log(`  ${chalk.dim("tx:")}       ${receipt.txSig}`);
         console.log(`  ${chalk.dim("explorer:")} ${receipt.explorer}`);
@@ -75,7 +75,7 @@ export async function runAgencHire(listingPda, opts) {
         process.exit(1);
     }
 }
-/** Read-only — no profile unlock needed. */
+/** Read-only - no profile unlock needed. */
 export async function runAgencStatus(taskPda, opts) {
     try {
         const task = await fetchAgencTask(taskPda);
@@ -99,7 +99,7 @@ export async function runAgencStatus(taskPda, opts) {
         }
         console.log("");
         if (task.status === "review") {
-            console.log(chalk.dim("The provider submitted a result — review it at:"));
+            console.log(chalk.dim("The provider submitted a result - review it at:"));
             console.log(chalk.cyan(`  https://agenc.ag/tasks/${taskPda}`));
         }
         else if (!["settled", "cancelled", "disputed"].includes(task.status)) {

package/dist/cli/balance.d.ts

@@ -1,5 +1,5 @@
 /**
- * `xpay balance` — show USDC balance per network for the active profile.
+ * `xpay balance` - show USDC balance per network for the active profile.
  *
  * Unlocks the active profile (prompts for passphrase if encrypted, unless
  * $XPAY_PASSPHRASE is set for non-interactive use), then queries each

package/dist/cli/balance.js

@@ -1,5 +1,5 @@
 /**
- * `xpay balance` — show USDC balance per network for the active profile.
+ * `xpay balance` - show USDC balance per network for the active profile.
  *
  * Unlocks the active profile (prompts for passphrase if encrypted, unless
  * $XPAY_PASSPHRASE is set for non-interactive use), then queries each
@@ -16,7 +16,7 @@ export async function runBalance(opts) {
     const signers = signersFromProfile(profile);
     // Robinhood Chain and Stable always have a signer (see signersFromProfile)
     // even when they're not in the profile's `networks`, so surface them in the
-    // default view too — handy as the deposit address for funding trades and
+    // default view too - handy as the deposit address for funding trades and
     // for /stable/* x402 calls.
     const configured = profile.config.networks;
     const networks = opts.network
@@ -41,7 +41,7 @@ export async function runBalance(opts) {
             // lookup (Solana only; EVM balances pass through unchanged).
             let tokens = net === "solana" ? await enrichTokenBalances(raw) : raw;
             // Robinhood Chain: the signer only knows a hardcoded token list (WETH),
-            // so pull the wallet's full ERC-20 holdings from the chain explorer —
+            // so pull the wallet's full ERC-20 holdings from the chain explorer -
             // this is how memecoins bought via `xpay trade` show up. Keep the
             // signer's native ETH entry and take every ERC-20 from the explorer.
             if (net === "robinhood") {
@@ -59,7 +59,7 @@ export async function runBalance(opts) {
                 const flag = t.verified === false && !t.isNative ? chalk.yellow(" ⚠ unverified") : "";
                 console.log(`    ${label.padEnd(18)}  ${chalk.white(val.padEnd(14))} ${usd}${flag}`);
                 // USDT0 is Stable's USDT (an ERC-20 OFT), and its native gas coin
-                // reports as USDT — both are dollars, so both count.
+                // reports as USDT - both are dollars, so both count.
                 if (t.symbol === "USDC" || t.symbol === "USDT" || t.symbol === "USDT0")
                     usdcTotal += t.balance;
                 if (t.usdValue !== undefined)

package/dist/cli/bento.d.ts

@@ -1,14 +1,14 @@
 /**
- * `xpay bento enable|disable|status` — toggle the Bento Guard intent firewall
+ * `xpay bento enable|disable|status` - toggle the Bento Guard intent firewall
  * for the active profile.
  *
  * Unlike Sana, Bento has no API key: it authenticates with the wallet's own
  * key (createXPay exposes it via AGENT_WALLET_PRIVATE_KEY at runtime). The one
- * manual step is registering the wallet address once at app.bentoguard.xyz —
+ * manual step is registering the wallet address once at app.bentoguard.xyz -
  * `enable` prints that address and walks you through it.
  *
  * When enabled, every pay / transfer is screened by Bento's protect() for
- * malicious intent (prompt-injection, wallet-drain) before signing — a second
+ * malicious intent (prompt-injection, wallet-drain) before signing - a second
  * gate on top of the local guardrail caps.
  */
 export declare function runBentoEnable(opts: {

package/dist/cli/bento.js

@@ -1,14 +1,14 @@
 /**
- * `xpay bento enable|disable|status` — toggle the Bento Guard intent firewall
+ * `xpay bento enable|disable|status` - toggle the Bento Guard intent firewall
  * for the active profile.
  *
  * Unlike Sana, Bento has no API key: it authenticates with the wallet's own
  * key (createXPay exposes it via AGENT_WALLET_PRIVATE_KEY at runtime). The one
- * manual step is registering the wallet address once at app.bentoguard.xyz —
+ * manual step is registering the wallet address once at app.bentoguard.xyz -
  * `enable` prints that address and walks you through it.
  *
  * When enabled, every pay / transfer is screened by Bento's protect() for
- * malicious intent (prompt-injection, wallet-drain) before signing — a second
+ * malicious intent (prompt-injection, wallet-drain) before signing - a second
  * gate on top of the local guardrail caps.
  */
 import chalk from "chalk";
@@ -31,18 +31,18 @@ export function runBentoEnable(opts) {
     console.log("");
     console.log(chalk.green(`✔ Bento intent firewall enabled for "${name}".`));
     console.log("");
-    console.log(chalk.bold("  One-time setup — register this AGENT wallet:"));
+    console.log(chalk.bold("  One-time setup - register this AGENT wallet:"));
     console.log(`    1. Log in to ${chalk.cyan(DASHBOARD)} with your owner wallet (e.g. Phantom).`);
-    console.log(`    2. Register THIS agent wallet address (an on-chain tx — owner pays gas):`);
+    console.log(`    2. Register THIS agent wallet address (an on-chain tx - owner pays gas):`);
     console.log(`       ${chalk.yellow(addresses.solana)}`);
-    console.log(`    3. Leave spend limits unset — xPay's own guardrail handles caps; Bento adds intent screening.`);
-    console.log(chalk.dim("    Note: the owner wallet (dashboard login) and this agent wallet are usually different —"));
+    console.log(`    3. Leave spend limits unset - xPay's own guardrail handles caps; Bento adds intent screening.`);
+    console.log(chalk.dim("    Note: the owner wallet (dashboard login) and this agent wallet are usually different - "));
     console.log(chalk.dim("    register the address shown above, not your login wallet."));
     console.log("");
     console.log(chalk.dim("  From now on every pay / transfer is screened by Bento's intent"));
     console.log(chalk.dim("  analysis (prompt-injection / wallet-drain) before signing."));
     console.log(chalk.dim("  Until the address is registered, paid calls fail with a"));
-    console.log(chalk.dim('  "not registered" error — that is expected.'));
+    console.log(chalk.dim('  "not registered" error - that is expected.'));
     console.log("");
 }
 export function runBentoDisable(opts) {

package/dist/cli/bento.js.map

@@ -1 +1 @@
-{"version":3,"file":"bento.js","sourceRoot":"","sources":["../../src/cli/bento.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAEhD,SAAS,oBAAoB,CAAC,WAAoB;IAChD,MAAM,IAAI,GAAG,WAAW,IAAI,gBAAgB,EAAE,CAAC;IAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,uCAAuC,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAA0B;IACvD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wCAAwC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CACT,mGAAmG,CACpG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,4FAA4F,CAC7F,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAA0B;IACxD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yCAAyC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAA0B;IACvD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"bento.js","sourceRoot":"","sources":["../../src/cli/bento.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAEhD,SAAS,oBAAoB,CAAC,WAAoB;IAChD,MAAM,IAAI,GAAG,WAAW,IAAI,gBAAgB,EAAE,CAAC;IAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,uCAAuC,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAA0B;IACvD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wCAAwC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CACT,mGAAmG,CACpG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,6FAA6F,CAC9F,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAA0B;IACxD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yCAAyC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAA0B;IACvD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAExD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/cli/biometric.d.ts

@@ -1,5 +1,5 @@
 /**
- * `xpay biometric enable|disable|status` — Touch ID unlock for a profile
+ * `xpay biometric enable|disable|status` - Touch ID unlock for a profile
  * (macOS only). `enable` verifies the passphrase against the wallet, runs a
  * Touch ID check, then stores the passphrase in the login keychain; from
  * then on `unlockActive` offers Touch ID before falling back to typing.

package/dist/cli/biometric.js

@@ -1,5 +1,5 @@
 /**
- * `xpay biometric enable|disable|status` — Touch ID unlock for a profile
+ * `xpay biometric enable|disable|status` - Touch ID unlock for a profile
  * (macOS only). `enable` verifies the passphrase against the wallet, runs a
  * Touch ID check, then stores the passphrase in the login keychain; from
  * then on `unlockActive` offers Touch ID before falling back to typing.
@@ -26,7 +26,7 @@ export async function runBiometricEnable(opts) {
     }
     const wallet = readWalletFile(profilePath(name));
     if (!wallet.encrypted) {
-        console.error(chalk.red(`✗ Profile "${name}" is unencrypted (dev wallet) — there is no passphrase to protect.`));
+        console.error(chalk.red(`✗ Profile "${name}" is unencrypted (dev wallet) - there is no passphrase to protect.`));
         process.exit(1);
     }
     let biometry;
@@ -38,7 +38,7 @@ export async function runBiometricEnable(opts) {
         process.exit(1);
     }
     if (!biometry) {
-        console.error(chalk.red("✗ No usable biometry — enroll Touch ID in System Settings first."));
+        console.error(chalk.red("✗ No usable biometry - enroll Touch ID in System Settings first."));
         process.exit(1);
     }
     // Verify the passphrase actually unlocks this wallet before storing it.
@@ -59,14 +59,14 @@ export async function runBiometricEnable(opts) {
     try {
         const ok = await biometricPrompt(`enable Touch ID unlock for the xPay profile "${name}"`);
         if (!ok) {
-            console.log(chalk.yellow("Cancelled — biometric unlock not enabled."));
+            console.log(chalk.yellow("Cancelled - biometric unlock not enabled."));
             return;
         }
         await storeBiometricPassphrase(name, passphrase);
     }
     catch (err) {
         const msg = err instanceof BiometricUnavailableError
-            ? `${err.message} — biometric unlock not enabled.`
+            ? `${err.message} - biometric unlock not enabled.`
             : err.message;
         console.error(chalk.red(`✗ ${msg}`));
         process.exit(1);
@@ -75,7 +75,7 @@ export async function runBiometricEnable(opts) {
     console.log("");
     console.log(chalk.green(`✔ Touch ID unlock enabled for "${name}".`));
     console.log(chalk.dim("  The passphrase now lives in your login keychain, gated by Touch ID."));
-    console.log(chalk.dim("  macOS may ask once to allow keychain access — choose \"Always Allow\"."));
+    console.log(chalk.dim("  macOS may ask once to allow keychain access - choose \"Always Allow\"."));
     console.log(chalk.dim("  Your passphrase still works everywhere and remains the recovery path."));
 }
 export async function runBiometricDisable(opts) {
@@ -88,10 +88,10 @@ export async function runBiometricDisable(opts) {
             console.error(chalk.red(`✗ ${err.message}`));
             process.exit(1);
         }
-        // Helper unbuildable (e.g. CLT removed) — still clear the config flag.
+        // Helper unbuildable (e.g. CLT removed) - still clear the config flag.
     }
     setProfileBiometric(name, false);
-    console.log(chalk.green(`✔ Touch ID unlock disabled for "${name}" — keychain entry removed.`));
+    console.log(chalk.green(`✔ Touch ID unlock disabled for "${name}" - keychain entry removed.`));
 }
 export async function runBiometricStatus(profileName) {
     const name = resolveProfileOrExit(profileName);