arc402-cli 0.9.18 → 0.10.0

package/src/commands/dispute.ts

@@ -1,375 +0,0 @@
-import { Command } from "commander";
-import { ethers } from "ethers";
-import prompts from "prompts";
-import { ArbitrationVote, DirectDisputeReason, DisputeClass, DisputeMode, DisputeOutcome, EvidenceType, ServiceAgreementClient, DisputeArbitrationClient } from "@arc402/sdk";
-import { loadConfig } from "../config.js";
-import { getClient, requireSigner } from "../client.js";
-import { hashFile, hashString } from "../utils/hash.js";
-import { printSenderInfo, executeContractWriteViaWallet } from "../wallet-router.js";
-import { SERVICE_AGREEMENT_ABI } from "../abis.js";
-import { c } from '../ui/colors.js';
-import { startSpinner } from '../ui/spinner.js';
-
-export function registerDisputeCommand(program: Command): void {
-  const dispute = program.command("dispute").description("Formal dispute workflow; remediation-first by default, with narrow hard-fail direct-dispute exceptions");
-
-  // Fee quote (requires DisputeArbitration configured) — read-only, no wallet routing needed
-  dispute.command("fee-quote <agreementId>")
-    .description("Get dispute fee quote for an agreement")
-    .requiredOption("--price <price>", "Agreement price in wei/token units")
-    .requiredOption("--token <token>", "Token address (0x0 for ETH)")
-    .requiredOption("--mode <mode>", "unilateral|mutual")
-    .requiredOption("--class <class>", "hard-failure|ambiguity|high-sensitivity")
-    .action(async (agreementId, opts) => {
-      const config = loadConfig();
-      if (!config.disputeArbitrationAddress) throw new Error("disputeArbitrationAddress missing in config");
-      const { provider } = await getClient(config);
-      const client = new DisputeArbitrationClient(config.disputeArbitrationAddress, provider);
-      const modeMap: Record<string, DisputeMode> = { unilateral: DisputeMode.UNILATERAL, mutual: DisputeMode.MUTUAL };
-      const classMap: Record<string, DisputeClass> = {
-        'hard-failure': DisputeClass.HARD_FAILURE,
-        'ambiguity': DisputeClass.AMBIGUITY_QUALITY,
-        'high-sensitivity': DisputeClass.HIGH_SENSITIVITY,
-      };
-      const mode = modeMap[String(opts.mode).toLowerCase()];
-      const disputeClass = classMap[String(opts.class).toLowerCase()];
-      if (!mode || !disputeClass) throw new Error("Invalid --mode or --class");
-      const feeInTokens = await client.getFeeQuote(BigInt(opts.price), opts.token, mode, disputeClass);
-      console.log(' ' + c.mark + c.white(` Fee quote — agreement #${agreementId}: ${feeInTokens.toString()} tokens`));
-    });
-
-  // Open with explicit mode/class
-  dispute.command("open-with-mode <agreementId>")
-    .description("Open dispute with specific mode and class (requires fee in msg.value for ETH)")
-    .requiredOption("--mode <mode>", "unilateral|mutual")
-    .requiredOption("--class <class>", "hard-failure|ambiguity|high-sensitivity")
-    .requiredOption("--reason <reason>")
-    .option("--fee <fee>", "Fee in wei (for ETH agreements)", "0")
-    .action(async (agreementId, opts) => {
-      const config = loadConfig();
-      if (!config.serviceAgreementAddress) throw new Error("serviceAgreementAddress missing in config");
-      const { signer } = await requireSigner(config);
-      const modeMap: Record<string, DisputeMode> = { unilateral: DisputeMode.UNILATERAL, mutual: DisputeMode.MUTUAL };
-      const classMap: Record<string, DisputeClass> = {
-        'hard-failure': DisputeClass.HARD_FAILURE,
-        'ambiguity': DisputeClass.AMBIGUITY_QUALITY,
-        'high-sensitivity': DisputeClass.HIGH_SENSITIVITY,
-      };
-      const mode = modeMap[String(opts.mode).toLowerCase()];
-      const disputeClass = classMap[String(opts.class).toLowerCase()];
-      if (!mode || !disputeClass) throw new Error("Invalid --mode or --class");
-      printSenderInfo(config);
-      if (config.walletContractAddress) {
-        await executeContractWriteViaWallet(
-          config.walletContractAddress, signer, config.serviceAgreementAddress,
-          SERVICE_AGREEMENT_ABI, "openDisputeWithMode",
-          [BigInt(agreementId), mode, disputeClass, opts.reason],
-          BigInt(opts.fee),
-        );
-      } else {
-        const client = new ServiceAgreementClient(config.serviceAgreementAddress, signer);
-        await client.openDisputeWithMode(BigInt(agreementId), mode, disputeClass, opts.reason, BigInt(opts.fee));
-      }
-      console.log(' ' + c.success + c.white(` Dispute opened — agreement #${agreementId}`));
-    });
-
-  // Join mutual dispute (respondent pays their half) — DisputeArbitration contract, no wallet routing
-  dispute.command("join <agreementId>")
-    .description("Join a mutual dispute as respondent (pays half the fee)")
-    .option("--fee <fee>", "Half-fee in wei (for ETH agreements)", "0")
-    .action(async (agreementId, opts) => {
-      const config = loadConfig();
-      if (!config.disputeArbitrationAddress) throw new Error("disputeArbitrationAddress missing in config");
-      const { signer } = await requireSigner(config);
-      const client = new DisputeArbitrationClient(config.disputeArbitrationAddress, signer);
-      await client.joinMutualDispute(BigInt(agreementId), BigInt(opts.fee));
-      console.log(' ' + c.success + c.white(` Joined mutual dispute — agreement #${agreementId}`));
-    });
-
-  dispute.command("open <id>")
-    .requiredOption("--reason <reason>")
-    .option("--escalated", "Use escalateToDispute after remediation", false)
-    .option("--direct <type>", "Direct-dispute hard-fail reason: no-delivery|deadline-breach|invalid-deliverable|safety-critical")
-    .action(async (id, opts) => {
-      const config = loadConfig();
-      if (!config.serviceAgreementAddress) throw new Error("serviceAgreementAddress missing in config");
-
-      // Pre-flight: check disputeModule is configured (J4-01)
-      {
-        const { provider: dpProvider } = await getClient(config);
-        const saCheck = new ethers.Contract(
-          config.serviceAgreementAddress,
-          ["function disputeModule() external view returns (address)"],
-          dpProvider,
-        );
-        let disputeModuleAddr: string = ethers.ZeroAddress;
-        try {
-          disputeModuleAddr = await saCheck.disputeModule();
-        } catch { /* assume not configured */ }
-        if (disputeModuleAddr === ethers.ZeroAddress) {
-          console.error(`No dispute module configured on this ServiceAgreement.`);
-          console.error(`Disputes require a DisputeModule to be set by the SA owner.`);
-          console.error(`This protocol deployment may not support formal disputes.`);
-          process.exit(1);
-        }
-      }
-
-      // Pre-flight: read dispute fee and prompt user (J4-02)
-      if (config.disputeArbitrationAddress) {
-        const { provider: feeProvider } = await getClient(config);
-        const daCheck = new ethers.Contract(
-          config.disputeArbitrationAddress,
-          ["function getDisputeFee() external view returns (uint256)"],
-          feeProvider,
-        );
-        let feeWei = 0n;
-        try {
-          feeWei = await daCheck.getDisputeFee();
-        } catch { /* fee getter may not exist — assume 0 */ }
-        if (feeWei > 0n) {
-          const feeEth = ethers.formatEther(feeWei);
-          console.log(`\nDispute fee: ${feeEth} ETH. This will be deducted from your wallet.`);
-          const { proceed } = await prompts({
-            type: "confirm",
-            name: "proceed",
-            message: "Continue?",
-            initial: true,
-          });
-          if (!proceed) { console.log("Aborted."); process.exit(0); }
-        }
-      }
-
-      const { signer } = await requireSigner(config);
-      const directMap: Record<string, DirectDisputeReason> = {
-        'no-delivery': DirectDisputeReason.NO_DELIVERY,
-        'deadline-breach': DirectDisputeReason.HARD_DEADLINE_BREACH,
-        'invalid-deliverable': DirectDisputeReason.INVALID_OR_FRAUDULENT_DELIVERABLE,
-        'safety-critical': DirectDisputeReason.SAFETY_CRITICAL_VIOLATION,
-      };
-      if (opts.escalated && opts.direct) throw new Error('Choose either --escalated or --direct, not both');
-      printSenderInfo(config);
-      if (config.walletContractAddress) {
-        if (opts.direct) {
-          const directReason = directMap[String(opts.direct).toLowerCase()];
-          if (directReason === undefined) throw new Error('Unsupported --direct reason');
-          await executeContractWriteViaWallet(
-            config.walletContractAddress, signer, config.serviceAgreementAddress,
-            SERVICE_AGREEMENT_ABI, "directDispute", [BigInt(id), directReason, opts.reason],
-          );
-        } else if (opts.escalated) {
-          await executeContractWriteViaWallet(
-            config.walletContractAddress, signer, config.serviceAgreementAddress,
-            SERVICE_AGREEMENT_ABI, "escalateToDispute", [BigInt(id), opts.reason],
-          );
-        } else {
-          await executeContractWriteViaWallet(
-            config.walletContractAddress, signer, config.serviceAgreementAddress,
-            SERVICE_AGREEMENT_ABI, "dispute", [BigInt(id), opts.reason],
-          );
-        }
-      } else {
-        const client = new ServiceAgreementClient(config.serviceAgreementAddress, signer);
-        if (opts.direct) {
-          const directReason = directMap[String(opts.direct).toLowerCase()];
-          if (directReason === undefined) throw new Error('Unsupported --direct reason');
-          await client.directDispute(BigInt(id), directReason, opts.reason);
-        } else if (opts.escalated) {
-          await client.escalateToDispute(BigInt(id), opts.reason);
-        } else {
-          await client.dispute(BigInt(id), opts.reason);
-        }
-      }
-      console.log(' ' + c.success + c.white(` Dispute opened — agreement #${id}`));
-
-      // J4-04: Display arbitration selection window deadline
-      try {
-        const { provider: dpAW } = await getClient(config);
-        const saAW = new ethers.Contract(
-          config.serviceAgreementAddress,
-          ["function ARBITRATION_SELECTION_WINDOW() external view returns (uint256)"],
-          dpAW,
-        );
-        const selectionWindow: bigint = await saAW.ARBITRATION_SELECTION_WINDOW();
-        const deadlineDate = new Date(Date.now() + Number(selectionWindow) * 1000);
-        console.log(`Arbitration selection window closes: ${deadlineDate.toLocaleString()}. An arbitrator must be assigned before then.`);
-      } catch { /* not available on this deployment */ }
-    });
-
-  dispute.command("evidence <id>").requiredOption("--type <type>", "transcript|deliverable|acceptance|communication|external|other").option("--file <path>").option("--text <text>").option("--uri <uri>", "External evidence URI", "").action(async (id, opts) => {
-    const config = loadConfig();
-    if (!config.serviceAgreementAddress) throw new Error("serviceAgreementAddress missing in config");
-    const { signer } = await requireSigner(config);
-    const mapping: Record<string, EvidenceType> = { transcript: EvidenceType.TRANSCRIPT, deliverable: EvidenceType.DELIVERABLE, acceptance: EvidenceType.ACCEPTANCE_CRITERIA, communication: EvidenceType.COMMUNICATION, external: EvidenceType.EXTERNAL_REFERENCE, other: EvidenceType.OTHER };
-    const hash = opts.file ? hashFile(opts.file) : hashString(opts.text ?? opts.uri ?? `evidence:${id}`);
-    const evidenceType = mapping[String(opts.type).toLowerCase()] ?? EvidenceType.OTHER;
-    printSenderInfo(config);
-    if (config.walletContractAddress) {
-      await executeContractWriteViaWallet(
-        config.walletContractAddress, signer, config.serviceAgreementAddress,
-        SERVICE_AGREEMENT_ABI, "submitDisputeEvidence", [BigInt(id), evidenceType, hash, opts.uri],
-      );
-    } else {
-      const client = new ServiceAgreementClient(config.serviceAgreementAddress, signer);
-      await client.submitDisputeEvidence(BigInt(id), evidenceType, hash, opts.uri);
-    }
-    console.log(' ' + c.success + c.white(` Evidence submitted — agreement #${id}`));
-  });
-
-  // status — read-only, no wallet routing needed
-  dispute.command("status <id>").option("--json").action(async (id, opts) => {
-    const config = loadConfig();
-    if (!config.serviceAgreementAddress) throw new Error("serviceAgreementAddress missing in config");
-    const { provider } = await getClient(config); const client = new ServiceAgreementClient(config.serviceAgreementAddress, provider);
-    const result = {
-      case: await client.getDisputeCase(BigInt(id)),
-      arbitration: await client.getArbitrationCase(BigInt(id)),
-      evidence: await client.getDisputeEvidenceAll(BigInt(id)),
-    };
-    console.log(JSON.stringify(result, (_k, value) => typeof value === 'bigint' ? value.toString() : value, opts.json ? 2 : 2));
-  });
-
-  dispute.command("nominate <id>")
-    .description("Nominate an arbitrator during the on-chain arbitration phase")
-    .requiredOption("--arbitrator <address>")
-    .action(async (id, opts) => {
-      const config = loadConfig();
-      if (!config.serviceAgreementAddress) throw new Error("serviceAgreementAddress missing in config");
-
-      // Pre-flight: check arbitrator is approved (J4-03)
-      if (config.disputeArbitrationAddress) {
-        const { provider: arbProvider } = await getClient(config);
-        const daCheck = new ethers.Contract(
-          config.disputeArbitrationAddress,
-          ["function isApprovedArbitrator(address arbitrator) external view returns (bool)"],
-          arbProvider,
-        );
-        let isApproved = true;
-        try {
-          isApproved = await daCheck.isApprovedArbitrator(opts.arbitrator);
-        } catch { /* assume approved if read fails */ }
-        if (!isApproved) {
-          console.error(`Arbitrator ${opts.arbitrator} is not approved.`);
-          console.error(`Use \`arc402 dispute list-arbitrators\` to see approved arbitrators.`);
-          process.exit(1);
-        }
-      }
-
-      const { signer } = await requireSigner(config);
-      printSenderInfo(config);
-      if (config.walletContractAddress) {
-        await executeContractWriteViaWallet(
-          config.walletContractAddress, signer, config.serviceAgreementAddress,
-          SERVICE_AGREEMENT_ABI, "nominateArbitrator", [BigInt(id), opts.arbitrator],
-        );
-      } else {
-        const client = new ServiceAgreementClient(config.serviceAgreementAddress, signer);
-        await client.nominateArbitrator(BigInt(id), opts.arbitrator);
-      }
-      console.log(' ' + c.success + c.white(` Arbitrator nominated — agreement #${id}`));
-    });
-
-  dispute.command("vote <id>")
-    .description("Cast an arbitration vote on-chain")
-    .requiredOption("--vote <vote>", "provider|refund|split|human-review")
-    .option("--provider-award <amount>", "Wei/token units", "0")
-    .option("--client-award <amount>", "Wei/token units", "0")
-    .action(async (id, opts) => {
-      const config = loadConfig();
-      if (!config.serviceAgreementAddress) throw new Error("serviceAgreementAddress missing in config");
-      const { signer, address: voterAddress, provider: voteProvider } = await requireSigner(config);
-
-      // J4-05: Pre-flight — verify caller is on the arbitration panel
-      try {
-        const saClient = new ServiceAgreementClient(config.serviceAgreementAddress, voteProvider);
-        const arbCase = await saClient.getArbitrationCase(BigInt(id));
-        const onPanel = arbCase.arbitrators.map((a: string) => a.toLowerCase()).includes(voterAddress.toLowerCase());
-        if (!onPanel) {
-          console.error(`You are not on the arbitration panel for agreement ${id}. Only assigned arbitrators can vote.`);
-          process.exit(1);
-        }
-      } catch (e) {
-        if ((e as NodeJS.ErrnoException)?.code === 'ERR_USE_AFTER_CLOSE' || String(e).includes('process.exit')) throw e;
-        // If read fails, skip the check and let the transaction reveal the error
-      }
-
-      const mapping: Record<string, ArbitrationVote> = {
-        provider: ArbitrationVote.PROVIDER_WINS,
-        refund: ArbitrationVote.CLIENT_REFUND,
-        split: ArbitrationVote.SPLIT,
-        'human-review': ArbitrationVote.HUMAN_REVIEW_REQUIRED,
-      };
-      const vote = mapping[String(opts.vote).toLowerCase()];
-      if (vote === undefined) throw new Error('Unsupported --vote value');
-      printSenderInfo(config);
-      if (config.walletContractAddress) {
-        await executeContractWriteViaWallet(
-          config.walletContractAddress, signer, config.serviceAgreementAddress,
-          SERVICE_AGREEMENT_ABI, "castArbitrationVote",
-          [BigInt(id), vote, BigInt(opts.providerAward), BigInt(opts.clientAward)],
-        );
-      } else {
-        const client = new ServiceAgreementClient(config.serviceAgreementAddress, signer);
-        await client.castArbitrationVote(BigInt(id), vote, BigInt(opts.providerAward), BigInt(opts.clientAward));
-      }
-      console.log(' ' + c.success + c.white(` Vote recorded — agreement #${id}`));
-    });
-
-  dispute.command("human <id>")
-    .description("Request human escalation when arbitration stalls or requires human backstop")
-    .requiredOption("--reason <reason>")
-    .action(async (id, opts) => {
-      const config = loadConfig();
-      if (!config.serviceAgreementAddress) throw new Error("serviceAgreementAddress missing in config");
-      const { signer } = await requireSigner(config);
-      printSenderInfo(config);
-      if (config.walletContractAddress) {
-        await executeContractWriteViaWallet(
-          config.walletContractAddress, signer, config.serviceAgreementAddress,
-          SERVICE_AGREEMENT_ABI, "requestHumanEscalation", [BigInt(id), opts.reason],
-        );
-      } else {
-        const client = new ServiceAgreementClient(config.serviceAgreementAddress, signer);
-        await client.requestHumanEscalation(BigInt(id), opts.reason);
-      }
-      console.log(' ' + c.success + c.white(` Escalated to human — agreement #${id}`));
-    });
-
-  dispute.command("resolve <id>").description("Owner-only admin path if you are operating the dispute contract").requiredOption("--outcome <outcome>", "provider|refund|partial-provider|partial-client|mutual-cancel|human-review").option("--provider-award <amount>", "Wei/token units", "0").option("--client-award <amount>", "Wei/token units", "0").action(async (id, opts) => {
-    const config = loadConfig();
-    if (!config.serviceAgreementAddress) throw new Error("serviceAgreementAddress missing in config");
-    const { signer } = await requireSigner(config);
-    const mapping: Record<string, DisputeOutcome> = { provider: DisputeOutcome.PROVIDER_WINS, refund: DisputeOutcome.CLIENT_REFUND, 'partial-provider': DisputeOutcome.PARTIAL_PROVIDER, 'partial-client': DisputeOutcome.PARTIAL_CLIENT, 'mutual-cancel': DisputeOutcome.MUTUAL_CANCEL, 'human-review': DisputeOutcome.HUMAN_REVIEW_REQUIRED };
-    printSenderInfo(config);
-    if (config.walletContractAddress) {
-      await executeContractWriteViaWallet(
-        config.walletContractAddress, signer, config.serviceAgreementAddress,
-        SERVICE_AGREEMENT_ABI, "resolveDisputeDetailed",
-        [BigInt(id), mapping[String(opts.outcome)], BigInt(opts.providerAward), BigInt(opts.clientAward)],
-      );
-    } else {
-      const client = new ServiceAgreementClient(config.serviceAgreementAddress, signer);
-      await client.resolveDisputeDetailed(BigInt(id), mapping[String(opts.outcome)], BigInt(opts.providerAward), BigInt(opts.clientAward));
-    }
-    console.log(' ' + c.success + c.white(` Resolved — agreement #${id}`));
-  });
-
-  dispute.command("owner-resolve <agreementId>")
-    .description("Owner-only: resolve a dispute directly in favor of provider or client. Requires DISPUTED or ESCALATED_TO_HUMAN status.")
-    .option("--favor-provider", "Resolve in favor of the provider (default: false = favor client)", false)
-    .action(async (agreementId, opts) => {
-      const config = loadConfig();
-      if (!config.serviceAgreementAddress) throw new Error("serviceAgreementAddress missing in config");
-      const { signer } = await requireSigner(config);
-      printSenderInfo(config);
-      if (config.walletContractAddress) {
-        await executeContractWriteViaWallet(
-          config.walletContractAddress, signer, config.serviceAgreementAddress,
-          SERVICE_AGREEMENT_ABI, "ownerResolveDispute", [BigInt(agreementId), !!opts.favorProvider],
-        );
-      } else {
-        const client = new ServiceAgreementClient(config.serviceAgreementAddress, signer);
-        await client.ownerResolveDispute(BigInt(agreementId), !!opts.favorProvider);
-      }
-      console.log(' ' + c.success + c.white(` Owner resolved — agreement #${agreementId}`));
-    });
-}

package/src/commands/doctor.ts

@@ -1,172 +0,0 @@
-import { Command } from "commander";
-import chalk from "chalk";
-import * as fs from "fs";
-import * as path from "path";
-import * as os from "os";
-import { spawnSync } from "child_process";
-import { configExists, loadConfig } from "../config.js";
-import { c } from "../ui/colors.js";
-
-const ARC402_DIR = path.join(os.homedir(), ".arc402");
-const CONFIG_PATH = path.join(ARC402_DIR, "config.json");
-const DAEMON_PID_PATH = path.join(ARC402_DIR, "daemon.pid");
-
-function ok(label: string, detail?: string): void {
-  process.stdout.write(
-    "  " + chalk.green("✓") + " " + chalk.white(label) + (detail ? chalk.dim("  " + detail) : "") + "\n"
-  );
-}
-
-function fail(label: string, detail?: string): void {
-  process.stdout.write(
-    "  " + chalk.red("✗") + " " + chalk.white(label) + (detail ? chalk.dim("  " + detail) : "") + "\n"
-  );
-}
-
-function warn(label: string, detail?: string): void {
-  process.stdout.write(
-    "  " + chalk.yellow("⚠") + " " + chalk.white(label) + (detail ? chalk.dim("  " + detail) : "") + "\n"
-  );
-}
-
-async function fetchJson(url: string, timeoutMs = 4000): Promise<unknown> {
-  const res = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
-  return res.json();
-}
-
-export function registerDoctorCommand(program: Command): void {
-  program
-    .command("doctor")
-    .description("Check ARC-402 environment health")
-    .action(async () => {
-      process.stdout.write("\n" + c.cyan("◈ ") + chalk.white("arc402 doctor") + "\n\n");
-
-      // ── 1. Config exists ───────────────────────────────────────────────────
-      if (configExists()) {
-        ok("Config found", CONFIG_PATH);
-      } else {
-        fail("Config not found", "Run: arc402 config init");
-        process.stdout.write("\n");
-        return;
-      }
-
-      const config = loadConfig();
-
-      // ── 2. RPC reachable ───────────────────────────────────────────────────
-      try {
-        const body = JSON.stringify({ jsonrpc: "2.0", method: "eth_blockNumber", params: [], id: 1 });
-        const res = await fetch(config.rpcUrl, {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body,
-          signal: AbortSignal.timeout(5000),
-        });
-        const json = await res.json() as { result?: string };
-        if (json.result) {
-          const block = parseInt(json.result, 16);
-          ok("RPC reachable", `block #${block.toLocaleString()}`);
-        } else {
-          fail("RPC returned no block", config.rpcUrl);
-        }
-      } catch (err) {
-        fail("RPC unreachable", config.rpcUrl + " — " + (err instanceof Error ? err.message : String(err)));
-      }
-
-      // ── 3. Wallet deployed ─────────────────────────────────────────────────
-      if (config.walletContractAddress) {
-        try {
-          const body = JSON.stringify({
-            jsonrpc: "2.0",
-            method: "eth_getCode",
-            params: [config.walletContractAddress, "latest"],
-            id: 1,
-          });
-          const res = await fetch(config.rpcUrl, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body,
-            signal: AbortSignal.timeout(5000),
-          });
-          const json = await res.json() as { result?: string };
-          if (json.result && json.result !== "0x" && json.result.length > 2) {
-            ok("Wallet deployed", config.walletContractAddress);
-          } else {
-            fail("Wallet not deployed", config.walletContractAddress + " — no code at address");
-          }
-        } catch (err) {
-          warn("Wallet check failed", err instanceof Error ? err.message : String(err));
-        }
-      } else {
-        warn("Wallet not configured", "Run: arc402 wallet deploy");
-      }
-
-      // ── 4. Machine key authorized ──────────────────────────────────────────
-      if (config.privateKey && config.walletContractAddress) {
-        try {
-          const { ethers } = await import("ethers");
-          const machineKey = new ethers.Wallet(config.privateKey);
-          const provider = new ethers.JsonRpcProvider(config.rpcUrl);
-          const iface = new ethers.Interface(["function authorizedMachineKeys(address) external view returns (bool)"]);
-          const data = iface.encodeFunctionData("authorizedMachineKeys", [machineKey.address]);
-          const result = await Promise.race([
-            provider.call({ to: config.walletContractAddress, data }),
-            new Promise<never>((_, r) => setTimeout(() => r(new Error("timeout")), 4000)),
-          ]);
-          const authorized = iface.decodeFunctionResult("authorizedMachineKeys", result)[0] as boolean;
-          if (authorized) {
-            ok("Machine key authorized", machineKey.address);
-          } else {
-            fail("Machine key not authorized", machineKey.address + " — run: arc402 wallet onboard");
-          }
-        } catch (err) {
-          warn("Machine key check failed", err instanceof Error ? err.message : String(err));
-        }
-      } else if (!config.privateKey) {
-        warn("Machine key not configured", "No privateKey in config");
-      }
-
-      // ── 5. Daemon running ──────────────────────────────────────────────────
-      let daemonRunning = false;
-      if (fs.existsSync(DAEMON_PID_PATH)) {
-        try {
-          const pid = parseInt(fs.readFileSync(DAEMON_PID_PATH, "utf-8").trim(), 10);
-          // Check if process is alive
-          process.kill(pid, 0);
-          daemonRunning = true;
-          ok("Daemon running", `PID ${pid}`);
-        } catch {
-          fail("Daemon PID file stale", "Run: arc402 daemon start");
-        }
-      } else {
-        fail("Daemon not running", "Run: arc402 daemon start");
-      }
-
-      // ── 6. Docker available ────────────────────────────────────────────────
-      try {
-        const docker = spawnSync("docker", ["--version"], { encoding: "utf-8", timeout: 3000 });
-        if (docker.status === 0) {
-          ok("Docker available", docker.stdout.trim().split("\n")[0]);
-        } else {
-          warn("Docker not found", "Install from https://docs.docker.com/get-docker/");
-        }
-      } catch {
-        warn("Docker not found", "Install from https://docs.docker.com/get-docker/");
-      }
-
-      // ── 7. HTTP relay reachable (if daemon is running) ─────────────────────
-      if (daemonRunning) {
-        try {
-          const health = await fetchJson("http://localhost:4402/health") as { status?: string };
-          if (health.status === "online") {
-            ok("HTTP relay reachable", "http://localhost:4402");
-          } else {
-            warn("HTTP relay responded", JSON.stringify(health));
-          }
-        } catch {
-          fail("HTTP relay not reachable", "http://localhost:4402 — daemon may still be starting");
-        }
-      }
-
-      process.stdout.write("\n");
-    });
-}