@zeroxyz/cli 0.0.24 → 0.0.25

package/dist/index.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 
 // src/app.ts
-import { Command as Command10 } from "commander";
+import { Command as Command11 } from "commander";
 
 // package.json
 var package_default = {
   name: "@zeroxyz/cli",
-  version: "0.0.24",
+  version: "0.0.25",
   type: "module",
   bin: {
     zero: "dist/index.js",
@@ -279,10 +279,14 @@ var ApiService = class {
     const json = await this.request("POST", "/v1/bug-reports", data);
     return createBugReportResponseSchema.parse(json);
   };
-  getFundingUrl = async (amount) => {
+  getFundingUrl = async (amount, provider = "coinbase") => {
     try {
-      const qs = amount ? `?amount=${encodeURIComponent(amount)}` : "";
-      const json = await this.request("GET", `/v1/wallet/fund-url${qs}`);
+      const params = new URLSearchParams({ provider });
+      if (amount) params.set("amount", amount);
+      const json = await this.request(
+        "GET",
+        `/v1/wallet/fund-url?${params.toString()}`
+      );
       const parsed = z.object({ url: z.string() }).parse(json);
       return parsed.url;
     } catch {
@@ -567,125 +571,634 @@ var configCommand = (_appContext) => new Command2("config").description("View or
 
 // src/commands/fetch-command.ts
 import { Command as Command3 } from "commander";
+import { formatUnits as formatUnits2 } from "viem";
 
-// src/util/infer-schema.ts
-var inferSchema = (value, depth = 0) => {
-  if (depth > 6) return { type: typeOf(value) };
-  if (value === null) return { type: "null" };
-  if (Array.isArray(value)) {
-    const itemSchemas = value.slice(0, 3).map((v) => inferSchema(v, depth + 1));
-    return {
-      type: "array",
-      items: itemSchemas[0] ?? { type: "unknown" }
-    };
+// src/services/payment-service.ts
+import {
+  adaptViemWallet,
+  convertViemChainToRelayChain,
+  createClient as createRelayClient,
+  getClient as getRelayClient,
+  MAINNET_RELAY_API
+} from "@relayprotocol/relay-sdk";
+import { x402Client as X402Client } from "@x402/core/client";
+import { decodePaymentResponseHeader, x402HTTPClient } from "@x402/core/http";
+import { ExactEvmScheme } from "@x402/evm/exact/client";
+import { createSIWxClientHook } from "@x402/extensions/sign-in-with-x";
+import { wrapFetchWithPayment } from "@x402/fetch";
+import { Challenge, Receipt } from "mppx";
+import { Mppx, tempo } from "mppx/client";
+import {
+  createPublicClient,
+  createWalletClient,
+  formatUnits,
+  http
+} from "viem";
+import { base, baseSepolia } from "viem/chains";
+var SessionCloseFailedError = class extends Error {
+  session;
+  response;
+  capturedAmount;
+  constructor(params) {
+    super(params.message);
+    this.name = "SessionCloseFailedError";
+    this.session = params.session;
+    this.response = params.response;
+    this.capturedAmount = params.capturedAmount;
   }
-  if (typeof value === "object") {
-    const obj = value;
-    const properties = {};
-    const required = [];
-    for (const [k, v] of Object.entries(obj)) {
-      properties[k] = inferSchema(v, depth + 1);
-      required.push(k);
-    }
-    return { type: "object", properties, required };
+};
+var USDC_BASE = "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
+var USDC_BASE_SEPOLIA = "0x036CbD53842c5426634e7929541eC2318f3dCF7e";
+var USDC_TEMPO = "0x20c000000000000000000000b9537d11c60e8b50";
+var PATHUSD_TEMPO = "0x20c0000000000000000000000000000000000000";
+var BASE_CHAIN_ID = 8453;
+var TEMPO_CHAIN_ID = 4217;
+var TEMPO_TESTNET_CHAIN_ID = 42431;
+var DEFAULT_MAX_DEPOSIT = "100";
+var KNOWN_EIP712_DOMAINS = {
+  // USDC on Base
+  [USDC_BASE.toLowerCase()]: { name: "USDC", version: "2" },
+  // USDC on Base Sepolia
+  [USDC_BASE_SEPOLIA.toLowerCase()]: { name: "USDC", version: "2" }
+};
+var buildRelayClientOptions = () => ({
+  baseApiUrl: MAINNET_RELAY_API,
+  source: "zero-cli",
+  chains: [convertViemChainToRelayChain(base)]
+});
+var calculateBuffer = (baseBalance) => {
+  const twentyFivePercent = baseBalance / 4n;
+  const twoDollars = 2000000n;
+  return twentyFivePercent < twoDollars ? twentyFivePercent : twoDollars;
+};
+var tempoChain = {
+  id: TEMPO_CHAIN_ID,
+  name: "Tempo",
+  nativeCurrency: { name: "USD", symbol: "USD", decimals: 18 },
+  rpcUrls: {
+    default: { http: ["https://rpc.tempo.xyz"] }
   }
-  return { type: typeOf(value) };
 };
-var typeOf = (v) => {
-  if (v === null) return "null";
-  if (Array.isArray(v)) return "array";
-  return typeof v;
+var tempoTestnetChain = {
+  id: TEMPO_TESTNET_CHAIN_ID,
+  name: "Tempo Testnet",
+  nativeCurrency: { name: "USD", symbol: "USD", decimals: 18 },
+  rpcUrls: {
+    default: { http: ["https://rpc.moderato.tempo.xyz"] }
+  }
 };
-var tryParseJson = (text) => {
+var ERC20_BALANCE_ABI = [
+  {
+    inputs: [{ name: "account", type: "address" }],
+    name: "balanceOf",
+    outputs: [{ name: "", type: "uint256" }],
+    stateMutability: "view",
+    type: "function"
+  }
+];
+var decodeSessionReceiptHeader = (header) => {
+  if (!header) return null;
   try {
-    return JSON.parse(text);
+    const padLen = (4 - header.length % 4) % 4;
+    const padded = header.replace(/-/g, "+").replace(/_/g, "/") + "=".repeat(padLen);
+    const json = Buffer.from(padded, "base64").toString("utf8");
+    const parsed = JSON.parse(json);
+    if (typeof parsed.channelId !== "string" || typeof parsed.acceptedCumulative !== "string" || typeof parsed.spent !== "string" || typeof parsed.challengeId !== "string") {
+      return null;
+    }
+    return parsed;
   } catch {
     return null;
   }
 };
-
-// src/commands/fetch-command.ts
-var detectPaymentRequirement = (headers, status) => {
-  if (status !== 402) return null;
-  const x402Header = headers.get("payment-required") ?? headers.get("x-payment-required");
-  if (x402Header) {
-    try {
-      const decoded = JSON.parse(
-        Buffer.from(x402Header, "base64").toString("utf8")
+var readSessionReceipt = (response) => decodeSessionReceiptHeader(
+  response.headers.get("Payment-Receipt") ?? response.headers.get("payment-receipt")
+);
+var pickSessionCloseAmount = (receipt, openTimeCumulative) => {
+  if (!receipt) return openTimeCumulative;
+  const accepted = BigInt(receipt.acceptedCumulative);
+  const spent = BigInt(receipt.spent);
+  const fromReceipt = accepted > spent ? accepted : spent;
+  return fromReceipt > openTimeCumulative ? fromReceipt : openTimeCumulative;
+};
+var PaymentService = class {
+  constructor(account, config, deps = {}) {
+    this.account = account;
+    this.config = config;
+    this.fetchOverride = deps.fetchImpl;
+  }
+  relayInitialized = false;
+  fetchOverride;
+  /**
+   * Resolve the fetch implementation lazily so tests can `vi.stubGlobal`
+   * the global `fetch` after the service is constructed.
+   */
+  get fetchImpl() {
+    return this.fetchOverride ?? globalThis.fetch;
+  }
+  getAccount = () => this.account;
+  ensureRelayClient = () => {
+    if (!this.relayInitialized) {
+      createRelayClient(buildRelayClientOptions());
+      this.relayInitialized = true;
+    }
+  };
+  bridgeToTempo = async (requiredAmount, onProgress) => {
+    if (!this.account) throw new Error("No wallet configured");
+    this.ensureRelayClient();
+    const baseBalance = await this.getBalanceRaw("base");
+    const buffer = calculateBuffer(baseBalance);
+    const bridgeAmount = requiredAmount + buffer;
+    if (baseBalance < bridgeAmount) {
+      throw new Error(
+        `Insufficient Base USDC to bridge: have ${formatUnits(baseBalance, 6)}, need ${formatUnits(bridgeAmount, 6)} (${formatUnits(requiredAmount, 6)} + ${formatUnits(buffer, 6)} buffer)`
       );
-      return { protocol: "x402", raw: decoded };
-    } catch {
-      return { protocol: "x402", raw: { encoded: x402Header } };
     }
-  }
-  const wwwAuth = headers.get("www-authenticate");
-  if (wwwAuth?.toLowerCase().includes("payment")) {
-    return { protocol: "mpp", raw: { "www-authenticate": wwwAuth } };
-  }
-  return { protocol: "unknown", raw: {} };
-};
-var fetchCommand = (appContext) => new Command3("fetch").description("Fetch a capability URL with automatic payment handling").argument("<url>", "URL to fetch").option(
-  "-X, --method <method>",
-  "HTTP method (GET, POST, PUT, PATCH, DELETE). Defaults to POST when -d is set, otherwise GET"
-).option("-d, --data <body>", "Request body (JSON string)").option("-H, --header <header...>", "Headers in Key:Value format").option("--max-pay <amount>", "Maximum amount willing to pay (USDC)").option(
-  "--capability <id>",
-  "Bind this fetch to a capability (uid or slug) so a reviewable run is recorded even without a prior `zero search`"
-).option(
-  "--json",
-  "Emit {runId, status, latencyMs, payment, body} as JSON on stdout (for batch/non-TTY use)"
-).action(
-  async (url, options) => {
-    try {
-      const {
-        analyticsService,
-        apiService,
-        paymentService,
-        stateService,
-        walletService
-      } = appContext.services;
-      const startTime = Date.now();
-      const headers = {};
-      if (options.header) {
-        for (const h of options.header) {
-          const colonIdx = h.indexOf(":");
-          if (colonIdx > 0) {
-            headers[h.slice(0, colonIdx).trim()] = h.slice(colonIdx + 1).trim();
-          }
+    onProgress?.(
+      `Bridging ${formatUnits(bridgeAmount, 6)} USDC from Base to Tempo...`
+    );
+    const walletClient = createWalletClient({
+      account: this.account,
+      chain: base,
+      transport: http()
+    });
+    const quote = await getRelayClient().actions.getQuote({
+      chainId: BASE_CHAIN_ID,
+      toChainId: TEMPO_CHAIN_ID,
+      currency: USDC_BASE,
+      toCurrency: USDC_TEMPO,
+      amount: bridgeAmount.toString(),
+      tradeType: "EXACT_INPUT",
+      user: this.account.address,
+      recipient: this.account.address,
+      options: {
+        usePermit: true
+      }
+    });
+    let bridgeTxHash = null;
+    await getRelayClient().actions.execute({
+      quote,
+      wallet: adaptViemWallet(walletClient),
+      onProgress: ({ txHashes }) => {
+        if (txHashes?.length && !bridgeTxHash) {
+          bridgeTxHash = txHashes[0]?.txHash ?? null;
         }
       }
-      const hasContentType = Object.keys(headers).some(
-        (k) => k.toLowerCase() === "content-type"
+    });
+    return bridgeTxHash;
+  };
+  handlePayment = async (url, request, paymentRequirement, maxPay, onProgress) => {
+    if (!this.account) {
+      throw new Error(
+        "No wallet configured \u2014 run `zero init` or set ZERO_PRIVATE_KEY"
       );
-      if (options.data && !hasContentType) {
-        headers["content-type"] = "application/json";
-      }
-      const log = (msg) => console.error(`  ${msg}`);
-      const method = options.method ? options.method.toUpperCase() : options.data ? "POST" : "GET";
-      const requestInit = {
-        method,
-        headers,
-        body: options.data
-      };
-      const lastSearch = stateService.loadLastSearch();
-      const matchedCapability = lastSearch?.capabilities.find(
-        (c) => url.startsWith(c.url)
+    }
+    if (paymentRequirement.protocol === "x402") {
+      onProgress?.("Paying via x402 on Base...");
+      return this.payX402(url, request, paymentRequirement.raw, maxPay);
+    }
+    if (paymentRequirement.protocol === "mpp") {
+      onProgress?.("Paying via MPP on Tempo...");
+      return this.payMpp(
+        url,
+        request,
+        paymentRequirement.raw,
+        maxPay,
+        onProgress
       );
-      const capabilityId = options.capability ?? matchedCapability?.id ?? null;
-      const searchId = matchedCapability ? lastSearch?.searchId : void 0;
-      const skipReasons = [];
-      if (!apiService.walletAddress) {
-        skipReasons.push(
-          "no wallet configured (run `zero wallet import` / set ZERO_PRIVATE_KEY)"
-        );
+    }
+    throw new Error("Unrecognized 402 payment protocol");
+  };
+  payX402 = async (url, request, _raw, maxPay) => {
+    if (!this.account) throw new Error("No wallet configured");
+    let capturedAmount = "0";
+    const client = new X402Client().register(
+      "eip155:*",
+      new ExactEvmScheme(this.account)
+    );
+    client.onBeforePaymentCreation(async (context) => {
+      const selected = context.selectedRequirements;
+      if (selected && (!selected.extra?.name || !selected.extra?.version)) {
+        const known = KNOWN_EIP712_DOMAINS[selected.asset?.toLowerCase() ?? ""];
+        if (known) {
+          selected.extra = { ...selected.extra, ...known };
+        }
       }
-      if (!capabilityId) {
-        skipReasons.push(
-          "no capability resolved \u2014 pass --capability <uid|slug> or run `zero search` first so the URL can be matched"
+      const requirement = context.paymentRequired.accepts[0];
+      if (!requirement) return;
+      capturedAmount = formatUnits(BigInt(requirement.amount), 6);
+      if (maxPay && Number.parseFloat(capturedAmount) > Number.parseFloat(maxPay)) {
+        return {
+          abort: true,
+          reason: `Payment of ${capturedAmount} USDC exceeds --max-pay ${maxPay}`
+        };
+      }
+    });
+    const httpClient = new x402HTTPClient(client).onPaymentRequired(
+      createSIWxClientHook(this.account)
+    );
+    const wrappedFetch = wrapFetchWithPayment(fetch, httpClient);
+    const response = await wrappedFetch(url, {
+      method: request.method,
+      headers: request.headers,
+      body: request.body
+    });
+    let txHash = null;
+    const paymentResponseHeader = response.headers.get("payment-response") ?? response.headers.get("x-payment-response");
+    if (paymentResponseHeader) {
+      try {
+        const settlement = decodePaymentResponseHeader(paymentResponseHeader);
+        txHash = settlement.transaction ?? null;
+      } catch {
+      }
+    }
+    return {
+      response,
+      protocol: "x402",
+      chain: "base",
+      txHash,
+      amount: capturedAmount,
+      asset: "USDC"
+    };
+  };
+  /**
+   * Shared pre-payment work: compute the Tempo amount we need, enforce
+   * --max-pay, and bridge from Base USDC if the Tempo balance is short.
+   * Invoked from mppx's `onChallenge` — i.e. AFTER the server's 402 and
+   * BEFORE mppx signs a credential — so balance/bridge logic runs in-band
+   * without adding a pre-probe round-trip.
+   */
+  prepareTempoFunds = async (challenge, maxPay, onProgress) => {
+    const challengeRequest = challenge.request;
+    let requiredRaw;
+    if (challenge.intent === "session") {
+      const suggestedDeposit = challengeRequest.suggestedDeposit;
+      requiredRaw = suggestedDeposit ? BigInt(suggestedDeposit) : BigInt(
+        Math.floor(
+          Number.parseFloat(maxPay ?? DEFAULT_MAX_DEPOSIT) * 1e6
+        )
+      );
+    } else {
+      requiredRaw = BigInt(challengeRequest.amount);
+    }
+    const capturedAmount = formatUnits(requiredRaw, 6);
+    if (maxPay && Number.parseFloat(capturedAmount) > Number.parseFloat(maxPay)) {
+      throw new Error(
+        `Payment of ${capturedAmount} USDC exceeds --max-pay ${maxPay}`
+      );
+    }
+    const methodDetails = challengeRequest.methodDetails;
+    const challengeChainId = challengeRequest.chainId ?? methodDetails?.chainId;
+    const isTestnet = challengeChainId === TEMPO_TESTNET_CHAIN_ID;
+    onProgress?.(`Checking Tempo balance...`);
+    const tempoBalance = await this.getBalanceRaw(
+      isTestnet ? "tempo-testnet" : "tempo"
+    );
+    if (tempoBalance < requiredRaw) {
+      if (isTestnet) {
+        throw new Error(
+          `Insufficient pathUSD on Tempo testnet: have ${formatUnits(tempoBalance, 6)}, need ${capturedAmount}. Fund your wallet with the Tempo testnet faucet: https://docs.tempo.xyz/quickstart/faucet`
+        );
+      }
+      await this.bridgeToTempo(requiredRaw, onProgress);
+    }
+    return capturedAmount;
+  };
+  /**
+   * MPP payment entrypoint. Runs a SINGLE `mppx.fetch` and uses mppx's
+   * `onChallenge` callback to run balance/bridge/max-pay logic in-band
+   * with the server's 402. After the 200 comes back, we branch on the
+   * captured challenge intent + whether the tempo method reported the
+   * channel as opened (only session lifecycle fires `onChannelUpdate`).
+   *
+   * Why no pre-probe: a pre-probe adds an extra unauthenticated POST
+   * before mppx's own 402 dance (2 → 3 server-side requests). Session-
+   * intent facilitators that re-run the LLM per request can't reconcile
+   * the extra state and return `410 "channel not found"` on the close.
+   * This mirrors the working production v0.0.21 single-fetch flow.
+   */
+  payMpp = async (url, request, _raw, maxPay, onProgress) => {
+    const account = this.account;
+    if (!account) throw new Error("No wallet configured");
+    let capturedAmount = "0";
+    let capturedChallenge;
+    let channelEntry;
+    const mppx = Mppx.create({
+      polyfill: false,
+      fetch: this.fetchImpl,
+      methods: [
+        tempo({
+          account,
+          maxDeposit: maxPay ?? DEFAULT_MAX_DEPOSIT,
+          onChannelUpdate: (entry) => {
+            channelEntry = {
+              channelId: entry.channelId,
+              escrowContract: entry.escrowContract,
+              cumulativeAmount: entry.cumulativeAmount,
+              opened: entry.opened
+            };
+          }
+        })
+      ],
+      onChallenge: async (challenge) => {
+        capturedChallenge = challenge;
+        capturedAmount = await this.prepareTempoFunds(
+          challenge,
+          maxPay,
+          onProgress
+        );
+        return void 0;
+      }
+    });
+    const response = await mppx.fetch(url, {
+      method: request.method,
+      headers: request.headers,
+      body: request.body
+    });
+    if (capturedChallenge?.intent === "session" && channelEntry?.opened) {
+      return this.completeMppSession({
+        url,
+        request,
+        challenge: capturedChallenge,
+        channelEntry,
+        response,
+        capturedAmount,
+        mppx
+      });
+    }
+    let txHash = null;
+    try {
+      const receipt = Receipt.fromResponse(response);
+      txHash = receipt.reference ?? null;
+    } catch {
+    }
+    return {
+      response,
+      protocol: "mpp",
+      chain: "tempo",
+      txHash,
+      amount: capturedAmount,
+      asset: "USDC"
+    };
+  };
+  /**
+   * Close an opened MPP session channel after the seller returns a 200.
+   *
+   * Decodes the server's `Payment-Receipt` to get the settled
+   * `acceptedCumulative`/`spent`, signs a close voucher at that amount
+   * (never below on-chain settled), and POSTs it back to the seller.
+   * Needed for dynamic-pricing sellers whose open-time `amount` is `0` —
+   * signing close with `cumulativeAmount=0` would be rejected with
+   * `voucher cumulativeAmount is below on-chain settled amount`.
+   *
+   * When the seller's facilitator rejects the close (e.g. strict matching
+   * of fresh challenge IDs per request), `SessionCloseFailedError` is
+   * thrown carrying the session metadata so the caller can record the run
+   * against the orphaned channel.
+   */
+  completeMppSession = async (params) => {
+    const {
+      url,
+      request,
+      challenge,
+      channelEntry,
+      response,
+      capturedAmount,
+      mppx
+    } = params;
+    const challengeRequest = challenge.request;
+    const recipient = challengeRequest.recipient;
+    const methodDetails = challengeRequest.methodDetails;
+    const challengeEscrow = methodDetails?.escrowContract;
+    const challengeChainId = challengeRequest.chainId ?? methodDetails?.chainId;
+    if (!recipient || !challengeEscrow) {
+      throw new Error("session challenge missing recipient/escrowContract");
+    }
+    if (!challengeChainId) {
+      throw new Error("session challenge missing chainId");
+    }
+    const {
+      channelId,
+      escrowContract,
+      cumulativeAmount: openTimeCumulative
+    } = channelEntry;
+    const receipt = readSessionReceipt(response);
+    const closeAmount = pickSessionCloseAmount(receipt, openTimeCumulative);
+    const orphanedSession = {
+      channelId,
+      escrowContract,
+      chainId: challengeChainId,
+      recipient,
+      cumulativeAmount: closeAmount.toString()
+    };
+    const closeFailed = (message) => new SessionCloseFailedError({
+      message,
+      session: orphanedSession,
+      response,
+      capturedAmount
+    });
+    const closeChallengeResponse = new Response("", {
+      status: 402,
+      headers: { "WWW-Authenticate": Challenge.serialize(challenge) }
+    });
+    let closeCredential;
+    try {
+      closeCredential = await mppx.createCredential(closeChallengeResponse, {
+        action: "close",
+        channelId,
+        cumulativeAmountRaw: closeAmount.toString()
+      });
+    } catch (err) {
+      throw closeFailed(
+        `Session close credential build failed for channel ${channelId}: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+    const closeMethod = request.method.toUpperCase();
+    const methodCarriesBody = closeMethod === "POST" || closeMethod === "PUT" || closeMethod === "PATCH";
+    const closeResponse = await this.fetchImpl(url, {
+      method: closeMethod,
+      headers: {
+        ...request.headers,
+        // biome-ignore lint/style/useNamingConvention: HTTP header name
+        Authorization: closeCredential
+      },
+      ...methodCarriesBody && request.body ? { body: request.body } : {}
+    });
+    if (!closeResponse.ok) {
+      const body = await closeResponse.text().catch(() => "");
+      throw closeFailed(
+        `Seller rejected close credential (status ${closeResponse.status}${body ? `: ${body.slice(0, 200)}` : ""}) for channel ${channelId}`
+      );
+    }
+    const closeReceipt = readSessionReceipt(closeResponse);
+    return {
+      response,
+      protocol: "mpp",
+      chain: "tempo",
+      txHash: null,
+      amount: capturedAmount,
+      asset: "USDC",
+      session: {
+        channelId,
+        escrowContract,
+        chainId: challengeChainId,
+        recipient,
+        cumulativeAmount: closeReceipt?.acceptedCumulative ?? closeAmount.toString()
+      }
+    };
+  };
+  resolveChainConfig = (chain) => {
+    switch (chain) {
+      case "base":
+        return { viemChain: base, token: USDC_BASE };
+      case "base-sepolia":
+        return { viemChain: baseSepolia, token: USDC_BASE_SEPOLIA };
+      case "tempo":
+        return { viemChain: tempoChain, token: USDC_TEMPO };
+      case "tempo-testnet":
+        return { viemChain: tempoTestnetChain, token: PATHUSD_TEMPO };
+    }
+  };
+  getBalanceRaw = async (chain) => {
+    if (!this.account) return 0n;
+    const { viemChain, token } = this.resolveChainConfig(chain);
+    const client = createPublicClient({
+      chain: viemChain,
+      transport: http()
+    });
+    const balance = await client.readContract({
+      address: token,
+      abi: ERC20_BALANCE_ABI,
+      functionName: "balanceOf",
+      args: [this.account.address]
+    });
+    return balance;
+  };
+  getBalance = async (chain) => {
+    const raw = await this.getBalanceRaw(chain);
+    return { amount: formatUnits(raw, 6), asset: "USDC" };
+  };
+};
+
+// src/util/infer-schema.ts
+var inferSchema = (value, depth = 0) => {
+  if (depth > 6) return { type: typeOf(value) };
+  if (value === null) return { type: "null" };
+  if (Array.isArray(value)) {
+    const itemSchemas = value.slice(0, 3).map((v) => inferSchema(v, depth + 1));
+    return {
+      type: "array",
+      items: itemSchemas[0] ?? { type: "unknown" }
+    };
+  }
+  if (typeof value === "object") {
+    const obj = value;
+    const properties = {};
+    const required = [];
+    for (const [k, v] of Object.entries(obj)) {
+      properties[k] = inferSchema(v, depth + 1);
+      required.push(k);
+    }
+    return { type: "object", properties, required };
+  }
+  return { type: typeOf(value) };
+};
+var typeOf = (v) => {
+  if (v === null) return "null";
+  if (Array.isArray(v)) return "array";
+  return typeof v;
+};
+var tryParseJson = (text) => {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+};
+
+// src/commands/fetch-command.ts
+var detectPaymentRequirement = (headers, status) => {
+  if (status !== 402) return null;
+  const x402Header = headers.get("payment-required") ?? headers.get("x-payment-required");
+  if (x402Header) {
+    try {
+      const decoded = JSON.parse(
+        Buffer.from(x402Header, "base64").toString("utf8")
+      );
+      return { protocol: "x402", raw: decoded };
+    } catch {
+      return { protocol: "x402", raw: { encoded: x402Header } };
+    }
+  }
+  const wwwAuth = headers.get("www-authenticate");
+  if (wwwAuth?.toLowerCase().includes("payment")) {
+    return { protocol: "mpp", raw: { "www-authenticate": wwwAuth } };
+  }
+  return { protocol: "unknown", raw: {} };
+};
+var fetchCommand = (appContext) => new Command3("fetch").description("Fetch a capability URL with automatic payment handling").argument("<url>", "URL to fetch").option(
+  "-X, --method <method>",
+  "HTTP method (GET, POST, PUT, PATCH, DELETE). Defaults to POST when -d is set, otherwise GET"
+).option("-d, --data <body>", "Request body (JSON string)").option("-H, --header <header...>", "Headers in Key:Value format").option("--max-pay <amount>", "Maximum amount willing to pay (USDC)").option(
+  "--capability <id>",
+  "Bind this fetch to a capability (uid or slug) so a reviewable run is recorded even without a prior `zero search`"
+).option(
+  "--json",
+  "Emit {runId, status, latencyMs, payment, body} as JSON on stdout (for batch/non-TTY use)"
+).action(
+  async (url, options) => {
+    try {
+      const {
+        analyticsService,
+        apiService,
+        paymentService,
+        stateService,
+        walletService
+      } = appContext.services;
+      const startTime = Date.now();
+      const headers = {};
+      if (options.header) {
+        for (const h of options.header) {
+          const colonIdx = h.indexOf(":");
+          if (colonIdx > 0) {
+            headers[h.slice(0, colonIdx).trim()] = h.slice(colonIdx + 1).trim();
+          }
+        }
+      }
+      const hasContentType = Object.keys(headers).some(
+        (k) => k.toLowerCase() === "content-type"
+      );
+      if (options.data && !hasContentType) {
+        headers["content-type"] = "application/json";
+      }
+      const log = (msg) => console.error(`  ${msg}`);
+      const method = options.method ? options.method.toUpperCase() : options.data ? "POST" : "GET";
+      const requestInit = {
+        method,
+        headers,
+        body: options.data
+      };
+      const lastSearch = stateService.loadLastSearch();
+      const matchedCapability = lastSearch?.capabilities.find(
+        (c) => url.startsWith(c.url)
+      );
+      const capabilityId = options.capability ?? matchedCapability?.id ?? null;
+      const searchId = matchedCapability ? lastSearch?.searchId : void 0;
+      const skipReasons = [];
+      if (!apiService.walletAddress) {
+        skipReasons.push(
+          "no wallet configured (run `zero wallet import` / set ZERO_PRIVATE_KEY)"
+        );
+      }
+      if (!capabilityId) {
+        skipReasons.push(
+          "no capability resolved \u2014 pass --capability <uid|slug> or run `zero search` first so the URL can be matched"
         );
       }
       let finalResponse;
       let body = "";
       let paymentMeta;
+      let sessionMeta;
       let fetchError;
       try {
         log(`Calling ${url}...`);
@@ -711,17 +1224,50 @@ var fetchCommand = (appContext) => new Command3("fetch").description("Fetch a ca
             chain: result.chain,
             txHash: result.txHash,
             amount: result.amount,
-            asset: result.asset
+            asset: result.asset,
+            ...result.session && { session: result.session }
           };
           log(
             `Paid ${result.amount} ${result.asset} via ${result.protocol} on ${result.chain}`
           );
+          if (result.session) {
+            sessionMeta = result.session;
+            log(
+              `MPP session closed \u2014 channel ${result.session.channelId.slice(0, 10)}... \u2192 ${result.session.recipient.slice(0, 8)}... (${formatUnits2(BigInt(result.session.cumulativeAmount), 6)} USDC settled)`
+            );
+          }
         } else {
           finalResponse = response;
         }
         body = await finalResponse.text();
       } catch (err) {
-        fetchError = err instanceof Error ? err : new Error(String(err));
+        if (err instanceof SessionCloseFailedError) {
+          finalResponse = err.response;
+          body = await err.response.text().catch(() => "");
+          paymentMeta = {
+            protocol: "mpp",
+            chain: "tempo",
+            txHash: null,
+            amount: err.capturedAmount,
+            asset: "USDC",
+            session: err.session
+          };
+          sessionMeta = err.session;
+          fetchError = err;
+          console.error(
+            [
+              "",
+              "  WARNING: failed to auto-close MPP session.",
+              `  ${err.message}`,
+              `  Channel ${err.session.channelId} is still open on chain \u2014 see payment.session in --json output.`,
+              "  Contact the seller to settle the channel from their facilitator, or use",
+              "  your wallet to call escrow.close/requestClose directly.",
+              ""
+            ].join("\n")
+          );
+        } else {
+          fetchError = err instanceof Error ? err : new Error(String(err));
+        }
       }
       const latencyMs = Date.now() - startTime;
       if (finalResponse && !options.json) {
@@ -782,7 +1328,7 @@ var fetchCommand = (appContext) => new Command3("fetch").description("Fetch a ca
               paymentProtocol: paymentMeta.protocol,
               paymentChain: paymentMeta.chain,
               paymentTxHash: paymentMeta.txHash ?? void 0,
-              paymentMode: "charge"
+              paymentMode: sessionMeta ? "session" : "charge"
             }
           });
           runId = runResult.runId;
@@ -1247,7 +1793,7 @@ To remove them, run: zero init cleanup`
     );
   }
   console.error(
-    'Zero is ready! Run `zero search` to find capabilities.\n\nTry:\n  zero search "translate text to Spanish"\n  zero search "generate an image"\n  zero search "weather forecast"'
+    'Zero is ready! Run `zero search` to find capabilities.\n\nBy using Zero, you agree to our Terms of Service:\n  https://zero.xyz/terms-of-service\n\nRun `zero terms` to view the full terms.\n\nTry:\n  zero search "translate text to Spanish"\n  zero search "generate an image"\n  zero search "weather forecast"'
   );
   appContext.services.analyticsService.capture("wallet_initialized", {
     // biome-ignore lint/style/useNamingConvention: snake_case for analytics
@@ -1606,14 +2152,34 @@ var searchCommand = (appContext) => new Command8("search").description("Search f
   }
 );
 
+// src/commands/terms-command.ts
+import { Command as Command9 } from "commander";
+var TERMS_URL = "https://zero.xyz/terms-of-service";
+var termsCommand = (_appContext) => new Command9("terms").description("View the ZeroClick Terms of Service").action(async () => {
+  console.log(
+    `ZeroClick Agentic Capability Search \u2014 Terms of Service
+
+By using Zero, you agree to our Terms of Service.
+
+Read the full terms at: ${TERMS_URL}
+`
+  );
+  try {
+    const { exec } = await import("child_process");
+    const openCmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
+    exec(`${openCmd} ${TERMS_URL}`);
+  } catch {
+  }
+});
+
 // src/commands/wallet-command.ts
 import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join3 } from "path";
-import { Command as Command9 } from "commander";
+import { Command as Command10 } from "commander";
 import open from "open";
 import { privateKeyToAccount as privateKeyToAccount2 } from "viem/accounts";
-var walletBalanceCommand = (appContext) => new Command9("balance").description("Show wallet balance").action(async () => {
+var walletBalanceCommand = (appContext) => new Command10("balance").description("Show wallet balance").action(async () => {
   const { walletService } = appContext.services;
   const balance = await walletService.getBalance();
   if (balance === null) {
@@ -1628,7 +2194,11 @@ var walletBalanceCommand = (appContext) => new Command9("balance").description("
   }
   console.log(`${balance.amount} ${balance.asset}`);
 });
-var walletFundCommand = (appContext) => new Command9("fund").description("Fund your wallet").argument("[amount]", "Amount to fund in USDC").option("--manual", "Show wallet address for manual transfer").action(
+var walletFundCommand = (appContext) => new Command10("fund").description("Fund your wallet").argument("[amount]", "Amount to fund in USDC").option("--manual", "Show wallet address for manual transfer").option(
+  "--use <provider>",
+  "Onramp provider: coinbase or stripe",
+  "coinbase"
+).action(
   async (amount, options) => {
     const { analyticsService, walletService } = appContext.services;
     const address = walletService.getAddress();
@@ -1646,7 +2216,11 @@ ${address}`);
       });
       return;
     }
-    const url = await appContext.services.apiService.getFundingUrl(amount);
+    const provider = options.use === "stripe" ? "stripe" : "coinbase";
+    const url = await appContext.services.apiService.getFundingUrl(
+      amount,
+      provider
+    );
     if (url) {
       await open(url);
       console.log("Opened funding page in your browser.");
@@ -1665,7 +2239,7 @@ ${address}`);
     }
   }
 );
-var walletAddressCommand = (appContext) => new Command9("address").description("Show wallet address").action(() => {
+var walletAddressCommand = (appContext) => new Command10("address").description("Show wallet address").action(() => {
   const { walletService } = appContext.services;
   const address = walletService.getAddress();
   if (!address) {
@@ -1675,7 +2249,7 @@ var walletAddressCommand = (appContext) => new Command9("address").description("
   }
   console.log(address);
 });
-var walletSetCommand = (appContext) => new Command9("set").description("Set wallet from an existing private key").argument("<privateKey>", "Hex-encoded private key (0x-prefixed)").option("--force", "Overwrite existing wallet without prompting").action(async (privateKey, options) => {
+var walletSetCommand = (appContext) => new Command10("set").description("Set wallet from an existing private key").argument("<privateKey>", "Hex-encoded private key (0x-prefixed)").option("--force", "Overwrite existing wallet without prompting").action(async (privateKey, options) => {
   const { analyticsService } = appContext.services;
   if (!privateKey.startsWith("0x")) {
     console.error("Private key must be 0x-prefixed hex string.");
@@ -1727,7 +2301,7 @@ var walletSetCommand = (appContext) => new Command9("set").description("Set wall
   });
 });
 var walletCommand = (appContext) => {
-  const cmd = new Command9("wallet").description("Manage your wallet");
+  const cmd = new Command10("wallet").description("Manage your wallet");
   cmd.addCommand(walletBalanceCommand(appContext));
   cmd.addCommand(walletFundCommand(appContext));
   cmd.addCommand(walletAddressCommand(appContext));
@@ -1738,7 +2312,7 @@ var walletCommand = (appContext) => {
 // src/app.ts
 var createApp = (appContext) => {
   const { analyticsService } = appContext.services;
-  const program = new Command10().name("zero").description("Zero CLI \u2014 Search engine and payment platform for AI agents").version(package_default.version, "-v, --version").exitOverride().hook("preAction", (_thisCommand, actionCommand) => {
+  const program = new Command11().name("zero").description("Zero CLI \u2014 Search engine and payment platform for AI agents").version(package_default.version, "-v, --version").exitOverride().hook("preAction", async (_thisCommand, actionCommand) => {
     analyticsService.capture("command_executed", {
       command: actionCommand.name()
     });
@@ -1752,6 +2326,7 @@ var createApp = (appContext) => {
   program.addCommand(bugReportCommand(appContext));
   program.addCommand(walletCommand(appContext));
   program.addCommand(configCommand(appContext));
+  program.addCommand(termsCommand(appContext));
   return program;
 };
 
@@ -1865,311 +2440,6 @@ var AnalyticsService = class {
   }
 };
 
-// src/services/payment-service.ts
-import {
-  adaptViemWallet,
-  convertViemChainToRelayChain,
-  createClient as createRelayClient,
-  getClient as getRelayClient,
-  MAINNET_RELAY_API
-} from "@relayprotocol/relay-sdk";
-import { x402Client as X402Client } from "@x402/core/client";
-import { decodePaymentResponseHeader, x402HTTPClient } from "@x402/core/http";
-import { ExactEvmScheme } from "@x402/evm/exact/client";
-import { createSIWxClientHook } from "@x402/extensions/sign-in-with-x";
-import { wrapFetchWithPayment } from "@x402/fetch";
-import { Receipt } from "mppx";
-import { Mppx, tempo } from "mppx/client";
-import {
-  createPublicClient,
-  createWalletClient,
-  formatUnits,
-  http
-} from "viem";
-import { base, baseSepolia } from "viem/chains";
-var USDC_BASE = "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
-var USDC_BASE_SEPOLIA = "0x036CbD53842c5426634e7929541eC2318f3dCF7e";
-var USDC_TEMPO = "0x20c000000000000000000000b9537d11c60e8b50";
-var PATHUSD_TEMPO = "0x20c0000000000000000000000000000000000000";
-var BASE_CHAIN_ID = 8453;
-var TEMPO_CHAIN_ID = 4217;
-var TEMPO_TESTNET_CHAIN_ID = 42431;
-var DEFAULT_MAX_DEPOSIT = "100";
-var KNOWN_EIP712_DOMAINS = {
-  // USDC on Base
-  [USDC_BASE.toLowerCase()]: { name: "USDC", version: "2" },
-  // USDC on Base Sepolia
-  [USDC_BASE_SEPOLIA.toLowerCase()]: { name: "USDC", version: "2" }
-};
-var buildRelayClientOptions = () => ({
-  baseApiUrl: MAINNET_RELAY_API,
-  source: "zero-cli",
-  chains: [convertViemChainToRelayChain(base)]
-});
-var calculateBuffer = (baseBalance) => {
-  const twentyFivePercent = baseBalance / 4n;
-  const twoDollars = 2000000n;
-  return twentyFivePercent < twoDollars ? twentyFivePercent : twoDollars;
-};
-var tempoChain = {
-  id: TEMPO_CHAIN_ID,
-  name: "Tempo",
-  nativeCurrency: { name: "USD", symbol: "USD", decimals: 18 },
-  rpcUrls: {
-    default: { http: ["https://rpc.tempo.xyz"] }
-  }
-};
-var tempoTestnetChain = {
-  id: TEMPO_TESTNET_CHAIN_ID,
-  name: "Tempo Testnet",
-  nativeCurrency: { name: "USD", symbol: "USD", decimals: 18 },
-  rpcUrls: {
-    default: { http: ["https://rpc.moderato.tempo.xyz"] }
-  }
-};
-var ERC20_BALANCE_ABI = [
-  {
-    inputs: [{ name: "account", type: "address" }],
-    name: "balanceOf",
-    outputs: [{ name: "", type: "uint256" }],
-    stateMutability: "view",
-    type: "function"
-  }
-];
-var PaymentService = class {
-  constructor(account, config) {
-    this.account = account;
-    this.config = config;
-  }
-  relayInitialized = false;
-  ensureRelayClient = () => {
-    if (!this.relayInitialized) {
-      createRelayClient(buildRelayClientOptions());
-      this.relayInitialized = true;
-    }
-  };
-  bridgeToTempo = async (requiredAmount, onProgress) => {
-    if (!this.account) throw new Error("No wallet configured");
-    this.ensureRelayClient();
-    const baseBalance = await this.getBalanceRaw("base");
-    const buffer = calculateBuffer(baseBalance);
-    const bridgeAmount = requiredAmount + buffer;
-    if (baseBalance < bridgeAmount) {
-      throw new Error(
-        `Insufficient Base USDC to bridge: have ${formatUnits(baseBalance, 6)}, need ${formatUnits(bridgeAmount, 6)} (${formatUnits(requiredAmount, 6)} + ${formatUnits(buffer, 6)} buffer)`
-      );
-    }
-    onProgress?.(
-      `Bridging ${formatUnits(bridgeAmount, 6)} USDC from Base to Tempo...`
-    );
-    const walletClient = createWalletClient({
-      account: this.account,
-      chain: base,
-      transport: http()
-    });
-    const quote = await getRelayClient().actions.getQuote({
-      chainId: BASE_CHAIN_ID,
-      toChainId: TEMPO_CHAIN_ID,
-      currency: USDC_BASE,
-      toCurrency: USDC_TEMPO,
-      amount: bridgeAmount.toString(),
-      tradeType: "EXACT_INPUT",
-      user: this.account.address,
-      recipient: this.account.address,
-      options: {
-        usePermit: true
-      }
-    });
-    let bridgeTxHash = null;
-    await getRelayClient().actions.execute({
-      quote,
-      wallet: adaptViemWallet(walletClient),
-      onProgress: ({ txHashes }) => {
-        if (txHashes?.length && !bridgeTxHash) {
-          bridgeTxHash = txHashes[0]?.txHash ?? null;
-        }
-      }
-    });
-    return bridgeTxHash;
-  };
-  handlePayment = async (url, request, paymentRequirement, maxPay, onProgress) => {
-    if (!this.account) {
-      throw new Error(
-        "No wallet configured \u2014 run `zero init` or set ZERO_PRIVATE_KEY"
-      );
-    }
-    if (paymentRequirement.protocol === "x402") {
-      onProgress?.("Paying via x402 on Base...");
-      return this.payX402(url, request, paymentRequirement.raw, maxPay);
-    }
-    if (paymentRequirement.protocol === "mpp") {
-      onProgress?.("Paying via MPP on Tempo...");
-      return this.payMpp(
-        url,
-        request,
-        paymentRequirement.raw,
-        maxPay,
-        onProgress
-      );
-    }
-    throw new Error("Unrecognized 402 payment protocol");
-  };
-  payX402 = async (url, request, _raw, maxPay) => {
-    if (!this.account) throw new Error("No wallet configured");
-    let capturedAmount = "0";
-    const client = new X402Client().register(
-      "eip155:*",
-      new ExactEvmScheme(this.account)
-    );
-    client.onBeforePaymentCreation(async (context) => {
-      const selected = context.selectedRequirements;
-      if (selected && (!selected.extra?.name || !selected.extra?.version)) {
-        const known = KNOWN_EIP712_DOMAINS[selected.asset?.toLowerCase() ?? ""];
-        if (known) {
-          selected.extra = { ...selected.extra, ...known };
-        }
-      }
-      const requirement = context.paymentRequired.accepts[0];
-      if (!requirement) return;
-      capturedAmount = formatUnits(BigInt(requirement.amount), 6);
-      if (maxPay && Number.parseFloat(capturedAmount) > Number.parseFloat(maxPay)) {
-        return {
-          abort: true,
-          reason: `Payment of ${capturedAmount} USDC exceeds --max-pay ${maxPay}`
-        };
-      }
-    });
-    const httpClient = new x402HTTPClient(client).onPaymentRequired(
-      createSIWxClientHook(this.account)
-    );
-    const wrappedFetch = wrapFetchWithPayment(fetch, httpClient);
-    const response = await wrappedFetch(url, {
-      method: request.method,
-      headers: request.headers,
-      body: request.body
-    });
-    let txHash = null;
-    const paymentResponseHeader = response.headers.get("payment-response") ?? response.headers.get("x-payment-response");
-    if (paymentResponseHeader) {
-      try {
-        const settlement = decodePaymentResponseHeader(paymentResponseHeader);
-        txHash = settlement.transaction ?? null;
-      } catch {
-      }
-    }
-    return {
-      response,
-      protocol: "x402",
-      chain: "base",
-      txHash,
-      amount: capturedAmount,
-      asset: "USDC"
-    };
-  };
-  payMpp = async (url, request, _raw, maxPay, onProgress) => {
-    if (!this.account) throw new Error("No wallet configured");
-    let capturedAmount = "0";
-    const mppx = Mppx.create({
-      polyfill: false,
-      methods: [
-        tempo({
-          account: this.account,
-          maxDeposit: maxPay ?? DEFAULT_MAX_DEPOSIT
-        })
-      ],
-      onChallenge: async (challenge) => {
-        const challengeRequest = challenge.request;
-        const intent = challenge.intent;
-        let requiredRaw;
-        if (intent === "session") {
-          const suggestedDeposit = challengeRequest.suggestedDeposit;
-          if (suggestedDeposit) {
-            requiredRaw = BigInt(suggestedDeposit);
-          } else {
-            const depositStr = maxPay ?? DEFAULT_MAX_DEPOSIT;
-            requiredRaw = BigInt(
-              Math.floor(Number.parseFloat(depositStr) * 1e6)
-            );
-          }
-        } else {
-          requiredRaw = BigInt(challengeRequest.amount);
-        }
-        capturedAmount = formatUnits(requiredRaw, 6);
-        if (maxPay && Number.parseFloat(capturedAmount) > Number.parseFloat(maxPay)) {
-          throw new Error(
-            `Payment of ${capturedAmount} USDC exceeds --max-pay ${maxPay}`
-          );
-        }
-        const methodDetails = challengeRequest.methodDetails;
-        const challengeChainId = challengeRequest.chainId ?? methodDetails?.chainId;
-        const isTestnet = challengeChainId === TEMPO_TESTNET_CHAIN_ID;
-        const balanceChain = isTestnet ? "tempo-testnet" : "tempo";
-        onProgress?.(`Checking Tempo balance...`);
-        const tempoBalance = await this.getBalanceRaw(balanceChain);
-        if (tempoBalance < requiredRaw) {
-          if (isTestnet) {
-            throw new Error(
-              `Insufficient pathUSD on Tempo testnet: have ${formatUnits(tempoBalance, 6)}, need ${capturedAmount}. Fund your wallet with the Tempo testnet faucet: https://docs.tempo.xyz/quickstart/faucet`
-            );
-          }
-          await this.bridgeToTempo(requiredRaw, onProgress);
-        }
-        return void 0;
-      }
-    });
-    const response = await mppx.fetch(url, {
-      method: request.method,
-      headers: request.headers,
-      body: request.body
-    });
-    let txHash = null;
-    try {
-      const receipt = Receipt.fromResponse(response);
-      txHash = receipt.reference ?? null;
-    } catch {
-    }
-    return {
-      response,
-      protocol: "mpp",
-      chain: "tempo",
-      txHash,
-      amount: capturedAmount,
-      asset: "USDC"
-    };
-  };
-  resolveChainConfig = (chain) => {
-    switch (chain) {
-      case "base":
-        return { viemChain: base, token: USDC_BASE };
-      case "base-sepolia":
-        return { viemChain: baseSepolia, token: USDC_BASE_SEPOLIA };
-      case "tempo":
-        return { viemChain: tempoChain, token: USDC_TEMPO };
-      case "tempo-testnet":
-        return { viemChain: tempoTestnetChain, token: PATHUSD_TEMPO };
-    }
-  };
-  getBalanceRaw = async (chain) => {
-    if (!this.account) return 0n;
-    const { viemChain, token } = this.resolveChainConfig(chain);
-    const client = createPublicClient({
-      chain: viemChain,
-      transport: http()
-    });
-    const balance = await client.readContract({
-      address: token,
-      abi: ERC20_BALANCE_ABI,
-      functionName: "balanceOf",
-      args: [this.account.address]
-    });
-    return balance;
-  };
-  getBalance = async (chain) => {
-    const raw = await this.getBalanceRaw(chain);
-    return { amount: formatUnits(raw, 6), asset: "USDC" };
-  };
-};
-
 // src/services/state-service.ts
 import { existsSync as existsSync5, mkdirSync as mkdirSync5, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "fs";
 import { join as join4 } from "path";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@zeroxyz/cli",
-	"version": "0.0.24",
+	"version": "0.0.25",
 	"type": "module",
 	"bin": {
 		"zero": "dist/index.js",

package/skills/zero/SKILL.md

@@ -27,6 +27,8 @@ Zero is your default fallback for tasks you cannot do natively. Before telling t
 
 **Do NOT use Zero for:** Tasks you can already handle — writing code, answering questions from your training data, reading/editing local files, running shell commands, math, etc.
 
+**Terms of Service:** By using Zero, you agree to the ZeroClick Terms of Service at https://zero.xyz/terms-of-service. Run `zero terms` to view the full terms.
+
 ## Setup
 
 Run these commands in order. Do not skip steps.