arc402-cli 0.7.0 → 0.7.1

package/dist/commands/watch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../src/commands/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkB3D"}
+{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../src/commands/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2DpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgK3D"}

package/dist/commands/watch.js

@@ -1,21 +1,158 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerWatchCommand = registerWatchCommand;
-const colors_1 = require("../ui/colors");
+const ethers_1 = require("ethers");
 const config_1 = require("../config");
+const client_1 = require("../client");
+const colors_1 = require("../ui/colors");
+// ─── Minimal ABIs for event watching ─────────────────────────────────────────
+const AGENT_REGISTRY_WATCH_ABI = [
+    "event AgentRegistered(address indexed wallet, string name, string serviceType, uint256 timestamp)",
+    "event AgentUpdated(address indexed wallet, string name, string serviceType)",
+    "event AgentDeactivated(address indexed wallet)",
+];
+const SERVICE_AGREEMENT_WATCH_ABI = [
+    "event AgreementProposed(uint256 indexed id, address indexed client, address indexed provider, string serviceType, uint256 price, address token, uint256 deadline)",
+    "event AgreementAccepted(uint256 indexed id, address indexed provider)",
+    "event AgreementFulfilled(uint256 indexed id, address indexed provider, bytes32 deliverablesHash)",
+    "event AgreementDisputed(uint256 indexed id, address indexed initiator, string reason)",
+    "event AgreementCancelled(uint256 indexed id, address indexed client)",
+];
+const HANDSHAKE_WATCH_ABI = [
+    "event HandshakeSent(uint256 indexed handshakeId, address indexed from, address indexed to, uint8 hsType, address token, uint256 amount, string note, uint256 timestamp)",
+];
+const DISPUTE_MODULE_WATCH_ABI = [
+    "event DisputeRaised(uint256 indexed agreementId, address indexed initiator, string reason)",
+    "event DisputeResolved(uint256 indexed agreementId, bool favorProvider, string resolution)",
+];
+const HS_TYPE_LABELS = {
+    0: "Respected",
+    1: "Curious",
+    2: "Endorsed",
+    3: "Thanked",
+    4: "Collaborated",
+    5: "Challenged",
+    6: "Referred",
+    7: "Hello",
+};
+function shortAddr(addr) {
+    return addr.length > 10 ? `${addr.slice(0, 6)}...${addr.slice(-4)}` : addr;
+}
+function nowHHMM() {
+    const d = new Date();
+    const h = d.getHours().toString().padStart(2, "0");
+    const m = d.getMinutes().toString().padStart(2, "0");
+    return `${h}:${m}`;
+}
+function printEvent(label, detail, status) {
+    const ts = colors_1.c.dim(`[${nowHHMM()}]`);
+    const col = status === "ok" ? colors_1.c.green : status === "err" ? colors_1.c.red : status === "warn" ? colors_1.c.yellow : colors_1.c.white;
+    process.stdout.write(`  ${ts}  ${col(label)}  ${colors_1.c.dim(detail)}\n`);
+}
 function registerWatchCommand(program) {
     program
         .command("watch")
-        .description("Watch wallet activity in real-time")
+        .description("Watch wallet activity in real-time (live onchain event feed)")
         .action(async () => {
         const config = (0, config_1.loadConfig)();
-        const wallet = config.walletContractAddress ?? "(no wallet)";
-        const shortWallet = wallet.length > 10
-            ? `${wallet.slice(0, 6)}...${wallet.slice(-4)}`
-            : wallet;
-        const line = "─".repeat(20);
-        console.log(`${colors_1.c.mark}  ARC-402  Watching ${colors_1.c.white(shortWallet)} ${colors_1.c.dim(line)}`);
-        console.log(`${colors_1.c.dim("···")}  ${colors_1.c.dim("waiting")}`);
+        const { provider } = await (0, client_1.getClient)(config);
+        const myWallet = (config.walletContractAddress ?? "").toLowerCase();
+        const shortMe = myWallet ? shortAddr(config.walletContractAddress) : "(no wallet)";
+        const line = "─".repeat(22);
+        console.log(`\n  ${colors_1.c.mark} ${colors_1.c.white("ARC-402  Live Feed")}  ${colors_1.c.dim(line)}`);
+        console.log(`  ${colors_1.c.dim("Watching")} ${colors_1.c.brightCyan(shortMe)} ${colors_1.c.dim("on")} ${colors_1.c.dim(config.network)}`);
+        console.log(`  ${colors_1.c.dim("Ctrl+C to exit")}\n`);
+        // ── Build contract instances ───────────────────────────────────────────
+        const contractLabels = [];
+        if (config.agentRegistryAddress)
+            contractLabels.push("AgentRegistry");
+        if (config.serviceAgreementAddress)
+            contractLabels.push("ServiceAgreement");
+        if (config.handshakeAddress)
+            contractLabels.push("Handshake");
+        if (config.disputeModuleAddress)
+            contractLabels.push("DisputeModule");
+        if (contractLabels.length === 0) {
+            console.log(`  ${colors_1.c.warning} No contract addresses configured. Run arc402 config init.`);
+            process.exit(1);
+        }
+        console.log(`  ${colors_1.c.dim(`Monitoring ${contractLabels.length} contract${contractLabels.length !== 1 ? "s" : ""}: ${contractLabels.join(", ")}`)}\n`);
+        // ── Helpers ────────────────────────────────────────────────────────────
+        function isMe(addr) {
+            return myWallet !== "" && addr.toLowerCase() === myWallet;
+        }
+        function fmtAddr(addr) {
+            return isMe(addr) ? colors_1.c.brightCyan("you") : colors_1.c.dim(shortAddr(addr));
+        }
+        // ── AgentRegistry ──────────────────────────────────────────────────────
+        if (config.agentRegistryAddress) {
+            const reg = new ethers_1.ethers.Contract(config.agentRegistryAddress, AGENT_REGISTRY_WATCH_ABI, provider);
+            reg.on("AgentRegistered", (wallet, name, serviceType) => {
+                printEvent(`Agent registered: ${name}`, `${fmtAddr(wallet)}  ${colors_1.c.dim(serviceType)}`, "ok");
+            });
+            reg.on("AgentUpdated", (wallet, name, serviceType) => {
+                printEvent(`Agent updated: ${name}`, `${fmtAddr(wallet)}  ${colors_1.c.dim(serviceType)}`);
+            });
+            reg.on("AgentDeactivated", (wallet) => {
+                printEvent(`Agent deactivated`, fmtAddr(wallet), "warn");
+            });
+        }
+        // ── ServiceAgreement ───────────────────────────────────────────────────
+        if (config.serviceAgreementAddress) {
+            const sa = new ethers_1.ethers.Contract(config.serviceAgreementAddress, SERVICE_AGREEMENT_WATCH_ABI, provider);
+            sa.on("AgreementProposed", (id, client, agentProvider, serviceType) => {
+                const involved = isMe(client) || isMe(agentProvider);
+                printEvent(`Agreement #${id} proposed`, `${fmtAddr(client)} → ${fmtAddr(agentProvider)}  ${colors_1.c.dim(serviceType)}`, involved ? "ok" : undefined);
+            });
+            sa.on("AgreementAccepted", (id, agentProvider) => {
+                printEvent(`Agreement #${id} → ${colors_1.c.green("ACCEPTED")}`, fmtAddr(agentProvider));
+            });
+            sa.on("AgreementFulfilled", (id, agentProvider, deliverablesHash) => {
+                printEvent(`Agreement #${id} → ${colors_1.c.green("DELIVERED")}`, `${fmtAddr(agentProvider)}  ${colors_1.c.dim(deliverablesHash.slice(0, 10) + "...")}`, "ok");
+            });
+            sa.on("AgreementDisputed", (id, initiator, reason) => {
+                printEvent(`Agreement #${id} → ${colors_1.c.red("DISPUTED")}`, `${fmtAddr(initiator)}  ${colors_1.c.dim(reason.slice(0, 40))}`, "err");
+            });
+            sa.on("AgreementCancelled", (id, client) => {
+                printEvent(`Agreement #${id} → ${colors_1.c.yellow("CANCELLED")}`, fmtAddr(client), "warn");
+            });
+        }
+        // ── Handshake ──────────────────────────────────────────────────────────
+        if (config.handshakeAddress) {
+            const hs = new ethers_1.ethers.Contract(config.handshakeAddress, HANDSHAKE_WATCH_ABI, provider);
+            hs.on("HandshakeSent", (_id, from, to, hsType, _token, _amount, note) => {
+                const typeLabel = HS_TYPE_LABELS[hsType] ?? `type ${hsType}`;
+                const toMe = isMe(to);
+                const noteStr = note ? `  ${colors_1.c.dim(`(${note.slice(0, 30)})`)}` : "";
+                printEvent(`Handshake from ${fmtAddr(from)} → ${fmtAddr(to)}`, `${colors_1.c.dim(typeLabel)}${noteStr}`, toMe ? "ok" : undefined);
+            });
+        }
+        // ── DisputeModule ──────────────────────────────────────────────────────
+        if (config.disputeModuleAddress) {
+            const dm = new ethers_1.ethers.Contract(config.disputeModuleAddress, DISPUTE_MODULE_WATCH_ABI, provider);
+            dm.on("DisputeRaised", (agreementId, initiator, reason) => {
+                printEvent(`Dispute raised on #${agreementId}`, `${fmtAddr(initiator)}  ${colors_1.c.dim(reason.slice(0, 40))}`, "err");
+            });
+            dm.on("DisputeResolved", (agreementId, favorProvider, resolution) => {
+                printEvent(`Dispute #${agreementId} → ${colors_1.c.green("RESOLVED")}`, `${colors_1.c.dim(favorProvider ? "provider wins" : "client wins")}  ${colors_1.c.dim(resolution.slice(0, 30))}`, "ok");
+            });
+        }
+        // ── Block heartbeat (shows feed is alive) ──────────────────────────────
+        let lastBlock = 0;
+        provider.on("block", (blockNumber) => {
+            if (blockNumber > lastBlock) {
+                lastBlock = blockNumber;
+                if (blockNumber % 10 === 0) {
+                    process.stdout.write(`  ${colors_1.c.dim(`· block ${blockNumber}`)}\n`);
+                }
+            }
+        });
+        // ── Clean exit ─────────────────────────────────────────────────────────
+        process.on("SIGINT", () => {
+            console.log(`\n  ${colors_1.c.dim("Feed stopped.")}`);
+            provider.removeAllListeners();
+            process.exit(0);
+        });
         // Keep process alive
         process.stdin.resume();
     });

package/dist/commands/watch.js.map

@@ -1 +1 @@
-{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/commands/watch.ts"],"names":[],"mappings":";;AAIA,oDAkBC;AArBD,yCAAiC;AACjC,sCAAuC;AAEvC,SAAgB,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,oCAAoC,CAAC;SACjD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,qBAAqB,IAAI,aAAa,CAAC;QAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE;YACpC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/C,CAAC,CAAC,MAAM,CAAC;QACX,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE5B,OAAO,CAAC,GAAG,CAAC,GAAG,UAAC,CAAC,IAAI,uBAAuB,UAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,UAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,GAAG,UAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAEpD,qBAAqB;QACrB,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/commands/watch.ts"],"names":[],"mappings":";;AA2DA,oDAgKC;AA1ND,mCAAgC;AAChC,sCAAuC;AACvC,sCAAsC;AACtC,yCAAiC;AAEjC,gFAAgF;AAEhF,MAAM,wBAAwB,GAAG;IAC/B,mGAAmG;IACnG,6EAA6E;IAC7E,gDAAgD;CACjD,CAAC;AAEF,MAAM,2BAA2B,GAAG;IAClC,mKAAmK;IACnK,uEAAuE;IACvE,kGAAkG;IAClG,uFAAuF;IACvF,sEAAsE;CACvE,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,yKAAyK;CAC1K,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,4FAA4F;IAC5F,2FAA2F;CAC5F,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C,CAAC,EAAE,WAAW;IACd,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,cAAc;IACjB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,OAAO;CACX,CAAC;AAEF,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,OAAO;IACd,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,MAA8B;IAC/E,MAAM,EAAE,GAAG,UAAC,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,UAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,UAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,UAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAC,CAAC,KAAK,CAAC;IAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,8DAA8D,CAAC;SAC3E,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;QAC5B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,kBAAS,EAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,qBAAsB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QAEpF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,OAAO,UAAC,CAAC,IAAI,IAAI,UAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvG,OAAO,CAAC,GAAG,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAE9C,0EAA0E;QAE1E,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,IAAI,MAAM,CAAC,oBAAoB;YAAE,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,uBAAuB;YAAE,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,gBAAgB;YAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,oBAAoB;YAAE,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAEtE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,KAAK,UAAC,CAAC,OAAO,4DAA4D,CAAC,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,cAAc,cAAc,CAAC,MAAM,YAAY,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAEnJ,0EAA0E;QAE1E,SAAS,IAAI,CAAC,IAAY;YACxB,OAAO,QAAQ,KAAK,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;QAC5D,CAAC;QAED,SAAS,OAAO,CAAC,IAAY;YAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC;QAED,0EAA0E;QAE1E,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,eAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,QAAQ,CAAC,CAAC;YAEjG,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,MAAc,EAAE,IAAY,EAAE,WAAmB,EAAE,EAAE;gBAC9E,UAAU,CAAC,qBAAqB,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,MAAc,EAAE,IAAY,EAAE,WAAmB,EAAE,EAAE;gBAC3E,UAAU,CAAC,kBAAkB,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,MAAc,EAAE,EAAE;gBAC5C,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;QACL,CAAC;QAED,0EAA0E;QAE1E,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,IAAI,eAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAuB,EAAE,2BAA2B,EAAE,QAAQ,CAAC,CAAC;YAEtG,EAAE,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAU,EAAE,MAAc,EAAE,aAAqB,EAAE,WAAmB,EAAE,EAAE;gBACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;gBACrD,UAAU,CACR,cAAc,EAAE,WAAW,EAC3B,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EACvE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAC5B,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAU,EAAE,aAAqB,EAAE,EAAE;gBAC/D,UAAU,CAAC,cAAc,EAAE,MAAM,UAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,EAAU,EAAE,aAAqB,EAAE,gBAAwB,EAAE,EAAE;gBAC1F,UAAU,CACR,cAAc,EAAE,MAAM,UAAC,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAC5C,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,EAC5E,IAAI,CACL,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAU,EAAE,SAAiB,EAAE,MAAc,EAAE,EAAE;gBAC3E,UAAU,CACR,cAAc,EAAE,MAAM,UAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EACzC,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EACtD,KAAK,CACN,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,EAAU,EAAE,MAAc,EAAE,EAAE;gBACzD,UAAU,CAAC,cAAc,EAAE,MAAM,UAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YACrF,CAAC,CAAC,CAAC;QACL,CAAC;QAED,0EAA0E;QAE1E,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,IAAI,eAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;YAEvF,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,GAAW,EAAE,IAAY,EAAE,EAAU,EAAE,MAAc,EAAE,MAAc,EAAE,OAAe,EAAE,IAAY,EAAE,EAAE;gBAC9H,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,QAAQ,MAAM,EAAE,CAAC;gBAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,UAAU,CACR,kBAAkB,OAAO,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,EAAE,EAClD,GAAG,UAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,OAAO,EAAE,EAC/B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CACxB,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,0EAA0E;QAE1E,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,IAAI,eAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,QAAQ,CAAC,CAAC;YAEhG,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,WAAmB,EAAE,SAAiB,EAAE,MAAc,EAAE,EAAE;gBAChF,UAAU,CACR,sBAAsB,WAAW,EAAE,EACnC,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EACtD,KAAK,CACN,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,WAAmB,EAAE,aAAsB,EAAE,UAAkB,EAAE,EAAE;gBAC3F,UAAU,CACR,YAAY,WAAW,MAAM,UAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAClD,GAAG,UAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAC9F,IAAI,CACL,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,0EAA0E;QAE1E,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,WAAmB,EAAE,EAAE;YAC3C,IAAI,WAAW,GAAG,SAAS,EAAE,CAAC;gBAC5B,SAAS,GAAG,WAAW,CAAC;gBACxB,IAAI,WAAW,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,UAAC,CAAC,GAAG,CAAC,WAAW,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAE1E,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,OAAO,CAAC,GAAG,CAAC,OAAO,UAAC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAC7C,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,qBAAqB;QACrB,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/config.d.ts

@@ -36,12 +36,20 @@ export interface Arc402Config {
     telegramBotToken?: string;
     telegramChatId?: string;
     telegramThreadId?: number;
+    /** Tracks onboarding progress so `wallet deploy` can resume after interruption. */
+    onboardingProgress?: {
+        walletAddress: string;
+        step: number;
+        completedSteps: string[];
+    };
     wcSession?: {
         topic: string;
         expiry: number;
         account: string;
         chainId: number;
     };
+    deviceId?: string;
+    lastCliVersion?: string;
 }
 export declare const getWcProjectId: () => string;
 export declare const getConfigPath: () => string;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,cAAc,GAAG,cAAc,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAOD,eAAO,MAAM,cAAc,cAA2D,CAAC;AAEvF,eAAO,MAAM,aAAa,cAAoB,CAAC;AAE/C,wBAAgB,UAAU,IAAI,YAAY,CA4BzC;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAOrD;AAED,eAAO,MAAM,YAAY,eAAmC,CAAC;AAG7D,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAC1D,eAAO,MAAM,gBAAgB,6BAA6B,CAAC;AAE3D;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAK1D;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CA4D5F,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,QAAQ,YAAY,WAAwD,CAAC;AAE5G,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE5D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,cAAc,GAAG,cAAc,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,kBAAkB,CAAC,EAAE;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAQD,eAAO,MAAM,cAAc,cAA2D,CAAC;AAEvF,eAAO,MAAM,aAAa,cAAoB,CAAC;AAa/C,wBAAgB,UAAU,IAAI,YAAY,CA6CzC;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAOrD;AAED,eAAO,MAAM,YAAY,eAAmC,CAAC;AAG7D,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAC1D,eAAO,MAAM,gBAAgB,6BAA6B,CAAC;AAE3D;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAK1D;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CA4D5F,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,QAAQ,YAAY,WAAwD,CAAC;AAE5G,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAE5D"}

package/dist/config.js

@@ -41,15 +41,28 @@ exports.getSubdomainApi = getSubdomainApi;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const os = __importStar(require("os"));
+const crypto_1 = require("crypto");
 const CONFIG_DIR = path.join(os.homedir(), ".arc402");
 const CONFIG_PATH = process.env.ARC402_CONFIG || path.join(CONFIG_DIR, "config.json");
+const DEVICE_ID_PATH = path.join(CONFIG_DIR, "device.id");
 // WalletConnect project ID — get your own at cloud.walletconnect.com
 const DEFAULT_WC_PROJECT_ID = "455e9425343b9156fce1428250c9a54a";
 const getWcProjectId = () => process.env.WC_PROJECT_ID ?? DEFAULT_WC_PROJECT_ID;
 exports.getWcProjectId = getWcProjectId;
 const getConfigPath = () => CONFIG_PATH;
 exports.getConfigPath = getConfigPath;
+/** Returns this device's stable UUID, creating it on first call. */
+function getOrCreateDeviceId() {
+    if (fs.existsSync(DEVICE_ID_PATH)) {
+        return fs.readFileSync(DEVICE_ID_PATH, "utf-8").trim();
+    }
+    const id = (0, crypto_1.randomUUID)();
+    fs.mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
+    fs.writeFileSync(DEVICE_ID_PATH, id, { mode: 0o600 });
+    return id;
+}
 function loadConfig() {
+    const thisDeviceId = getOrCreateDeviceId();
     if (!fs.existsSync(CONFIG_PATH)) {
         // Auto-create with Base Mainnet defaults — zero friction
         const defaults = exports.NETWORK_DEFAULTS["base-mainnet"] ?? {};
@@ -70,13 +83,24 @@ function loadConfig() {
             walletFactoryAddress: defaults.walletFactoryAddress,
             sessionChannelsAddress: defaults.sessionChannelsAddress,
             disputeModuleAddress: defaults.disputeModuleAddress,
+            deviceId: thisDeviceId,
         };
         saveConfig(autoConfig);
         console.log(`◈ Config auto-created at ${CONFIG_PATH} (Base Mainnet)`);
         console.log("⚠ Base Mainnet — real funds at risk. Use arc402 config init for testnet.");
         return autoConfig;
     }
-    return JSON.parse(fs.readFileSync(CONFIG_PATH, "utf-8"));
+    const config = JSON.parse(fs.readFileSync(CONFIG_PATH, "utf-8"));
+    // Multi-device awareness: warn if config was created on a different device
+    if (config.deviceId && config.deviceId !== thisDeviceId) {
+        console.warn("⚠ This config was created on a different device. Some keys may not work.");
+    }
+    // Backfill deviceId if missing (older config)
+    if (!config.deviceId) {
+        config.deviceId = thisDeviceId;
+        saveConfig(config);
+    }
+    return config;
 }
 function saveConfig(config) {
     const configDir = path.dirname(CONFIG_PATH);

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,gCA4BC;AAED,gCAOC;AAYD,0CAKC;AAkED,0CAEC;AArLD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAgDzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACtD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAEtF,qEAAqE;AACrE,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAC1D,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,qBAAqB,CAAC;AAA1E,QAAA,cAAc,kBAA4D;AAEhF,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC;AAAlC,QAAA,aAAa,iBAAqB;AAE/C,SAAgB,UAAU;IACxB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,yDAAyD;QACzD,MAAM,QAAQ,GAAG,wBAAgB,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,QAA4C,CAAC;QACvD,MAAM,UAAU,GAAiB;YAC/B,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,0BAA0B;YACrD,sBAAsB,EAAE,IAAA,sBAAc,GAAE;YACxC,YAAY,EAAE,SAAS;YACvB,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB,IAAI,EAAE;YACzD,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,IAAI,QAAQ,CAAC,oBAAoB;YAC/E,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;YACzD,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;YACzD,6BAA6B,EAAE,QAAQ,CAAC,6BAA6B;YACrE,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB;YAC7D,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;YACnD,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;YACvD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;SACpD,CAAC;QACF,UAAU,CAAC,UAAU,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,4BAA4B,WAAW,iBAAiB,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;QACxF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAiB,CAAC;AAC3E,CAAC;AAED,SAAgB,UAAU,CAAC,MAAoB;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAEM,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAAhD,QAAA,YAAY,gBAAoC;AAE7D,iFAAiF;AACpE,QAAA,eAAe,GAAG,0BAA0B,CAAC;AAC7C,QAAA,gBAAgB,GAAG,0BAA0B,CAAC;AAE3D;;;GAGG;AACH,SAAgB,eAAe,CAAC,MAAoB;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAe,IAAI,MAAM,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,2GAA2G,CAAC,CAAC;QAC1H,OAAO,CAAC,IAAI,CAAC,2CAA2C,wBAAgB,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAEY,QAAA,gBAAgB,GAAoE;IAC/F,cAAc,EAAE;QACd,MAAM,EAAE,wBAAgB;QACxB,WAAW,EAAE,4CAA4C;QACzD,YAAY,EAAE,qFAAqF;QACnG,oDAAoD;QACpD,mBAAmB,EAAY,4CAA4C;QAC3E,oBAAoB,EAAW,4CAA4C,EAAI,uBAAuB;QACtG,sBAAsB,EAAS,4CAA4C,EAAI,6BAA6B;QAC5G,wBAAwB,EAAO,4CAA4C;QAC3E,4BAA4B,EAAE,4CAA4C,EAAG,0BAA0B;QACvG,oBAAoB,EAAW,4CAA4C,EAAI,mBAAmB;QAClG,sBAAsB,EAAS,4CAA4C,EAAI,gBAAgB;QAC/F,oBAAoB,EAAW,4CAA4C,EAAI,uFAAuF;QACtK,6BAA6B,EAAE,4CAA4C;QAC3E,uBAAuB,EAAQ,4CAA4C;QAC3E,sBAAsB,EAAS,4CAA4C;QAC3E,oBAAoB,EAAW,4CAA4C;QAC3E,uBAAuB,EAAQ,4CAA4C;QAC3E,iBAAiB,EAAc,4CAA4C,EAAI,mBAAmB;QAClG,eAAe,EAAgB,4CAA4C,EAAI,iBAAiB;QAChG,qBAAqB,EAAU,4CAA4C,EAAI,wBAAwB;QACvG,oBAAoB,EAAW,4CAA4C;QAC3E,yBAAyB,EAAM,4CAA4C;QAC3E,yBAAyB,EAAM,4CAA4C;QAC3E,6BAA6B,EAAE,4CAA4C;QAC3E,yBAAyB,EAAM,4CAA4C;QAC3E,uBAAuB,EAAQ,4CAA4C;QAC3E,wBAAwB,EAAO,4CAA4C;QAC3E,gBAAgB,EAAe,4CAA4C;KAC5E;IACD,cAAc,EAAE;QACd,MAAM,EAAE,0BAA0B;QAClC,WAAW,EAAE,4CAA4C;QACzD,mEAAmE;QACnE,0BAA0B;QAC1B,mBAAmB,EAAW,4CAA4C;QAC1E,wBAAwB,EAAM,4CAA4C;QAC1E,4BAA4B,EAAE,4CAA4C;QAC1E,sBAAsB,EAAQ,4CAA4C,EAAE,gBAAgB;QAC5F,uBAAuB,EAAO,4CAA4C;QAC1E,oBAAoB,EAAU,4CAA4C;QAC1E,6BAA6B,EAAC,4CAA4C;QAC1E,iBAAiB,EAAa,4CAA4C;QAC1E,eAAe,EAAe,4CAA4C;QAC1E,qBAAqB,EAAS,4CAA4C;QAC1E,oBAAoB,EAAU,4CAA4C;QAC1E,yBAAyB,EAAK,4CAA4C;QAC1E,6BAA6B,EAAC,4CAA4C;QAC1E,yBAAyB,EAAK,4CAA4C;QAC1E,4CAA4C;QAC5C,oBAAoB,EAAU,4CAA4C,EAAE,kBAAkB;QAC9F,oBAAoB,EAAU,4CAA4C,EAAE,mBAAmB;QAC/F,uBAAuB,EAAO,4CAA4C;QAC1E,sBAAsB,EAAQ,4CAA4C;QAC1E,oBAAoB,EAAU,4CAA4C;QAC1E,yBAAyB,EAAK,4CAA4C;QAC1E,uBAAuB,EAAO,4CAA4C;QAC1E,wBAAwB,EAAM,4CAA4C;KAC3E;CACF,CAAC;AAEK,MAAM,cAAc,GAAG,CAAC,MAAoB,EAAE,EAAE,CAAC,wBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;AAA/F,QAAA,cAAc,kBAAiF;AAE5G,SAAgB,eAAe,CAAC,MAAoB;IAClD,OAAO,MAAM,CAAC,YAAY,IAAI,wBAAwB,CAAC;AACzD,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFA,gCA6CC;AAED,gCAOC;AAYD,0CAKC;AAkED,0CAEC;AA3ND,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,mCAAoC;AAwDpC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACtD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AACtF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAE1D,qEAAqE;AACrE,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAC1D,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,qBAAqB,CAAC;AAA1E,QAAA,cAAc,kBAA4D;AAEhF,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC;AAAlC,QAAA,aAAa,iBAAqB;AAE/C,oEAAoE;AACpE,SAAS,mBAAmB;IAC1B,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAC;IACxB,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAE3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,yDAAyD;QACzD,MAAM,QAAQ,GAAG,wBAAgB,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,QAA4C,CAAC;QACvD,MAAM,UAAU,GAAiB;YAC/B,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,0BAA0B;YACrD,sBAAsB,EAAE,IAAA,sBAAc,GAAE;YACxC,YAAY,EAAE,SAAS;YACvB,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB,IAAI,EAAE;YACzD,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,IAAI,QAAQ,CAAC,oBAAoB;YAC/E,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;YACzD,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB;YACzD,6BAA6B,EAAE,QAAQ,CAAC,6BAA6B;YACrE,yBAAyB,EAAE,QAAQ,CAAC,yBAAyB;YAC7D,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;YACnD,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;YACvD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;YACnD,QAAQ,EAAE,YAAY;SACvB,CAAC;QACF,UAAU,CAAC,UAAU,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,4BAA4B,WAAW,iBAAiB,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;QACxF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAiB,CAAC;IAEjF,2EAA2E;IAC3E,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAC3F,CAAC;IAED,8CAA8C;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,CAAC,QAAQ,GAAG,YAAY,CAAC;QAC/B,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,UAAU,CAAC,MAAoB;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAEM,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAAhD,QAAA,YAAY,gBAAoC;AAE7D,iFAAiF;AACpE,QAAA,eAAe,GAAG,0BAA0B,CAAC;AAC7C,QAAA,gBAAgB,GAAG,0BAA0B,CAAC;AAE3D;;;GAGG;AACH,SAAgB,eAAe,CAAC,MAAoB;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAe,IAAI,MAAM,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,2GAA2G,CAAC,CAAC;QAC1H,OAAO,CAAC,IAAI,CAAC,2CAA2C,wBAAgB,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAEY,QAAA,gBAAgB,GAAoE;IAC/F,cAAc,EAAE;QACd,MAAM,EAAE,wBAAgB;QACxB,WAAW,EAAE,4CAA4C;QACzD,YAAY,EAAE,qFAAqF;QACnG,oDAAoD;QACpD,mBAAmB,EAAY,4CAA4C;QAC3E,oBAAoB,EAAW,4CAA4C,EAAI,uBAAuB;QACtG,sBAAsB,EAAS,4CAA4C,EAAI,6BAA6B;QAC5G,wBAAwB,EAAO,4CAA4C;QAC3E,4BAA4B,EAAE,4CAA4C,EAAG,0BAA0B;QACvG,oBAAoB,EAAW,4CAA4C,EAAI,mBAAmB;QAClG,sBAAsB,EAAS,4CAA4C,EAAI,gBAAgB;QAC/F,oBAAoB,EAAW,4CAA4C,EAAI,uFAAuF;QACtK,6BAA6B,EAAE,4CAA4C;QAC3E,uBAAuB,EAAQ,4CAA4C;QAC3E,sBAAsB,EAAS,4CAA4C;QAC3E,oBAAoB,EAAW,4CAA4C;QAC3E,uBAAuB,EAAQ,4CAA4C;QAC3E,iBAAiB,EAAc,4CAA4C,EAAI,mBAAmB;QAClG,eAAe,EAAgB,4CAA4C,EAAI,iBAAiB;QAChG,qBAAqB,EAAU,4CAA4C,EAAI,wBAAwB;QACvG,oBAAoB,EAAW,4CAA4C;QAC3E,yBAAyB,EAAM,4CAA4C;QAC3E,yBAAyB,EAAM,4CAA4C;QAC3E,6BAA6B,EAAE,4CAA4C;QAC3E,yBAAyB,EAAM,4CAA4C;QAC3E,uBAAuB,EAAQ,4CAA4C;QAC3E,wBAAwB,EAAO,4CAA4C;QAC3E,gBAAgB,EAAe,4CAA4C;KAC5E;IACD,cAAc,EAAE;QACd,MAAM,EAAE,0BAA0B;QAClC,WAAW,EAAE,4CAA4C;QACzD,mEAAmE;QACnE,0BAA0B;QAC1B,mBAAmB,EAAW,4CAA4C;QAC1E,wBAAwB,EAAM,4CAA4C;QAC1E,4BAA4B,EAAE,4CAA4C;QAC1E,sBAAsB,EAAQ,4CAA4C,EAAE,gBAAgB;QAC5F,uBAAuB,EAAO,4CAA4C;QAC1E,oBAAoB,EAAU,4CAA4C;QAC1E,6BAA6B,EAAC,4CAA4C;QAC1E,iBAAiB,EAAa,4CAA4C;QAC1E,eAAe,EAAe,4CAA4C;QAC1E,qBAAqB,EAAS,4CAA4C;QAC1E,oBAAoB,EAAU,4CAA4C;QAC1E,yBAAyB,EAAK,4CAA4C;QAC1E,6BAA6B,EAAC,4CAA4C;QAC1E,yBAAyB,EAAK,4CAA4C;QAC1E,4CAA4C;QAC5C,oBAAoB,EAAU,4CAA4C,EAAE,kBAAkB;QAC9F,oBAAoB,EAAU,4CAA4C,EAAE,mBAAmB;QAC/F,uBAAuB,EAAO,4CAA4C;QAC1E,sBAAsB,EAAQ,4CAA4C;QAC1E,oBAAoB,EAAU,4CAA4C;QAC1E,yBAAyB,EAAK,4CAA4C;QAC1E,uBAAuB,EAAO,4CAA4C;QAC1E,wBAAwB,EAAM,4CAA4C;KAC3E;CACF,CAAC;AAEK,MAAM,cAAc,GAAG,CAAC,MAAoB,EAAE,EAAE,CAAC,wBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;AAA/F,QAAA,cAAc,kBAAiF;AAE5G,SAAgB,eAAe,CAAC,MAAoB;IAClD,OAAO,MAAM,CAAC,YAAY,IAAI,wBAAwB,CAAC;AACzD,CAAC"}

package/dist/daemon/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/daemon/index.ts"],"names":[],"mappings":"AAoCA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC;IAChF,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjF,uBAAuB,IAAI,cAAc,EAAE,CAAC;IAC5C,sBAAsB,IAAI,cAAc,EAAE,CAAC;IAC3C,uBAAuB,IAAI,MAAM,CAAC;IAClC,KAAK,IAAI,IAAI,CAAC;CACf;AAqXD,OAAO,QAAQ,UAAU,CAAC;IACxB,UAAU,YAAY;QACpB,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC;CACF;AAED,wBAAsB,SAAS,CAAC,UAAU,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAulBjE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/daemon/index.ts"],"names":[],"mappings":"AAoCA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC;IAChF,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IACvD,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjF,uBAAuB,IAAI,cAAc,EAAE,CAAC;IAC5C,sBAAsB,IAAI,cAAc,EAAE,CAAC;IAC3C,uBAAuB,IAAI,MAAM,CAAC;IAClC,KAAK,IAAI,IAAI,CAAC;CACf;AAwXD,OAAO,QAAQ,UAAU,CAAC;IACxB,UAAU,YAAY;QACpB,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC;CACF;AAED,wBAAsB,SAAS,CAAC,UAAU,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAuoBjE"}

package/dist/daemon/index.js

@@ -175,6 +175,8 @@ function checkRateLimit(ip) {
     bucket.count++;
     return bucket.count <= RATE_LIMIT;
 }
+// Cleanup stale rate limit entries every 5 minutes to prevent unbounded growth
+let rateLimitCleanupInterval = null;
 // ─── Body size limit ──────────────────────────────────────────────────────────
 const MAX_BODY_SIZE = 1024 * 1024; // 1 MB
 // ─── Logger ───────────────────────────────────────────────────────────────────
@@ -511,6 +513,14 @@ async function runDaemon(foreground = false) {
             }
         }
     }, 30000);
+    // Rate limit map cleanup — every 5 minutes (prevents unbounded growth)
+    rateLimitCleanupInterval = setInterval(() => {
+        const now = Date.now();
+        for (const [ip, bucket] of rateLimitMap) {
+            if (bucket.resetTime < now)
+                rateLimitMap.delete(ip);
+        }
+    }, 5 * 60 * 1000);
     // Balance monitor — every 5 minutes
     const balanceInterval = setInterval(async () => {
         try {
@@ -536,6 +546,28 @@ async function runDaemon(foreground = false) {
     const ipcServer = startIpcServer(ipcCtx, log, apiToken);
     // ── Start HTTP relay server (public endpoint) ────────────────────────────
     const httpPort = config.relay.listen_port ?? 4402;
+    /**
+     * Optionally verifies X-ARC402-Signature against the request body.
+     * Logs the result but never rejects — unsigned requests are accepted for backwards compat.
+     */
+    function verifyRequestSignature(body, req) {
+        const sig = req.headers["x-arc402-signature"];
+        if (!sig)
+            return;
+        const claimedSigner = req.headers["x-arc402-signer"];
+        try {
+            const recovered = ethers_1.ethers.verifyMessage(body, sig);
+            if (claimedSigner && recovered.toLowerCase() !== claimedSigner.toLowerCase()) {
+                log({ event: "sig_mismatch", claimed: claimedSigner, recovered });
+            }
+            else {
+                log({ event: "sig_verified", signer: recovered });
+            }
+        }
+        catch {
+            log({ event: "sig_invalid" });
+        }
+    }
     /**
      * Read request body with a size cap. Destroys the request and sends 413
      * if the body exceeds MAX_BODY_SIZE. Returns null in that case.
@@ -560,11 +592,22 @@ async function runDaemon(foreground = false) {
         });
     }
     const PUBLIC_GET_PATHS = new Set(["/", "/health", "/agent", "/capabilities", "/status"]);
+    // CORS whitelist — localhost for local tooling, arc402.xyz for the web app
+    const CORS_WHITELIST = new Set(["localhost", "127.0.0.1", "arc402.xyz", "app.arc402.xyz"]);
     const httpServer = http.createServer(async (req, res) => {
-        // CORS headers
-        res.setHeader("Access-Control-Allow-Origin", "*");
-        res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
-        res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
+        // CORS — only reflect origin header if it's in the whitelist
+        const origin = (req.headers["origin"] ?? "");
+        if (origin) {
+            try {
+                const { hostname } = new URL(origin);
+                if (CORS_WHITELIST.has(hostname)) {
+                    res.setHeader("Access-Control-Allow-Origin", origin);
+                    res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+                    res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
+                }
+            }
+            catch { /* ignore invalid origin */ }
+        }
         if (req.method === "OPTIONS") {
             res.writeHead(204);
             res.end();
@@ -623,6 +666,7 @@ async function runDaemon(foreground = false) {
             const body = await readBody(req, res);
             if (body === null)
                 return;
+            verifyRequestSignature(body, req);
             try {
                 const msg = JSON.parse(body);
                 // Feed into the hire listener's message handler
@@ -696,6 +740,7 @@ async function runDaemon(foreground = false) {
             const body = await readBody(req, res);
             if (body === null)
                 return;
+            verifyRequestSignature(body, req);
             try {
                 const msg = JSON.parse(body);
                 log({ event: "handshake_received", from: msg.from, type: msg.type, note: msg.note });
@@ -735,6 +780,7 @@ async function runDaemon(foreground = false) {
             const body = await readBody(req, res);
             if (body === null)
                 return;
+            verifyRequestSignature(body, req);
             try {
                 const msg = JSON.parse(body);
                 const from = String(msg.from ?? "");
@@ -756,6 +802,7 @@ async function runDaemon(foreground = false) {
             const body = await readBody(req, res);
             if (body === null)
                 return;
+            verifyRequestSignature(body, req);
             try {
                 const msg = JSON.parse(body);
                 const agreementId = String(msg.agreementId ?? msg.agreement_id ?? "");
@@ -878,21 +925,25 @@ async function runDaemon(foreground = false) {
             }));
             return;
         }
-        // GET /status — health with active agreement count
+        // GET /status — health with active agreement count (sensitive counts only for authenticated)
         if (pathname === "/status" && req.method === "GET") {
-            const activeList = db.listActiveHireRequests();
-            const pendingList = db.listPendingHireRequests();
-            res.writeHead(200, { "Content-Type": "application/json" });
-            res.end(JSON.stringify({
+            const statusAuth = (req.headers["authorization"] ?? "");
+            const statusToken = statusAuth.startsWith("Bearer ") ? statusAuth.slice(7) : "";
+            const statusAuthed = statusToken === apiToken;
+            const statusPayload = {
                 protocol: "arc-402",
                 version: "0.3.0",
                 agent: config.wallet.contract_address,
                 status: "online",
                 uptime: Math.floor((Date.now() - ipcCtx.startTime) / 1000),
-                active_agreements: activeList.length,
-                pending_approval: pendingList.length,
                 capabilities: config.policy.allowed_capabilities,
-            }));
+            };
+            if (statusAuthed) {
+                statusPayload.active_agreements = db.listActiveHireRequests().length;
+                statusPayload.pending_approval = db.listPendingHireRequests().length;
+            }
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify(statusPayload));
             return;
         }
         // 404
@@ -924,6 +975,8 @@ async function runDaemon(foreground = false) {
             clearInterval(relayInterval);
         clearInterval(timeoutInterval);
         clearInterval(balanceInterval);
+        if (rateLimitCleanupInterval)
+            clearInterval(rateLimitCleanupInterval);
         // Close HTTP + IPC
         httpServer.close();
         ipcServer.close();