opencrowd 0.16.3 → 0.16.5

package/bundle/opencrowd.js

@@ -262,7 +262,7 @@ var init_paths = __esm({
 });
 
 // ../../packages/core/dist/artifacts.js
-import { mkdir as mkdir3, readFile as readFile3 } from "node:fs/promises";
+import { mkdir as mkdir3, readFile as readFile3, readdir, stat } from "node:fs/promises";
 import { dirname as dirname4, join as join3, relative as relative2 } from "node:path";
 async function saveArtifact(state, path3, content, metadata) {
   const target = await safeArtifactPath(state, path3);
@@ -283,21 +283,75 @@ async function readArtifact(state, path3) {
   return readFile3(await safeArtifactPath(state, path3), "utf8");
 }
 async function listArtifacts(state, prefix = "") {
-  const { readdir: readdir3 } = await import("node:fs/promises");
   const start = await safeArtifactPath(state, prefix || ".");
   const files = [];
-  await walk4(start, files, state.artifactsDir);
+  await walkFiles(start, state.artifactsDir, files);
   return files.sort();
-  async function walk4(dir, out, root) {
-    for (const entry of await readdir3(dir, { withFileTypes: true })) {
-      const full = join3(dir, entry.name);
-      if (entry.isDirectory()) {
-        await walk4(full, out, root);
-      } else if (entry.isFile()) {
-        out.push(relative2(root, full));
-      }
+}
+async function listOtherChatArtifacts(state) {
+  const sessionsDir = dirname4(state.sessionDir);
+  let entries;
+  try {
+    entries = await readdir(sessionsDir, { withFileTypes: true });
+  } catch {
+    return { chats: [], truncated: false };
+  }
+  const others = [];
+  for (const entry of entries) {
+    if (!entry.isDirectory() || entry.name === state.sessionId)
+      continue;
+    try {
+      assertPathId(entry.name);
+    } catch {
+      continue;
+    }
+    const dir = join3(sessionsDir, entry.name, "artifacts");
+    try {
+      const info = await stat(join3(sessionsDir, entry.name));
+      others.push({ id: entry.name, dir, mtime: info.mtimeMs });
+    } catch {
     }
   }
+  others.sort((a, b) => b.mtime - a.mtime);
+  const chats = [];
+  let remaining = OTHER_CHAT_FILE_LIMIT, truncated = false;
+  for (const other of others) {
+    if (remaining <= 0) {
+      truncated = true;
+      break;
+    }
+    let root;
+    try {
+      root = await containedPath(sessionsDir, join3(other.id, "artifacts"));
+    } catch {
+      continue;
+    }
+    const files = [];
+    try {
+      await walkFiles(root, root, files);
+    } catch {
+      continue;
+    }
+    if (!files.length)
+      continue;
+    files.sort();
+    if (files.length > remaining) {
+      truncated = true;
+      files.length = remaining;
+    }
+    remaining -= files.length;
+    chats.push({ session_id: other.id, shell_dir: `../${other.id}/artifacts`, files });
+  }
+  return { chats, truncated };
+}
+async function walkFiles(dir, root, out) {
+  for (const entry of await readdir(dir, { withFileTypes: true })) {
+    const full = join3(dir, entry.name);
+    if (entry.isDirectory())
+      await walkFiles(full, root, out);
+    else if (entry.isFile())
+      out.push(relative2(root, full));
+  }
 }
 function safeArtifactPath(state, requestedPath) {
   const normalizedRequest = requestedPath.replace(/^artifacts\//, "");
@@ -305,11 +359,13 @@ function safeArtifactPath(state, requestedPath) {
     throw new Error(`artifact path: ${error53.message}`);
   });
 }
+var OTHER_CHAT_FILE_LIMIT;
 var init_artifacts = __esm({
   "../../packages/core/dist/artifacts.js"() {
     "use strict";
     init_ledger();
     init_paths();
+    OTHER_CHAT_FILE_LIMIT = 300;
   }
 });
 
@@ -16176,7 +16232,7 @@ var init_context = __esm({
     };
     CONTEXT_COST_BUDGET_USD = 0.02;
     CONTEXT_MIN_HISTORY_TOKENS = 24e3;
-    centsPer1kToUsdPerMillion = (cents) => typeof cents === "number" && Number.isFinite(cents) && cents > 0 ? cents * 10 : void 0;
+    centsPer1kToUsdPerMillion = (cents2) => typeof cents2 === "number" && Number.isFinite(cents2) && cents2 > 0 ? cents2 * 10 : void 0;
   }
 });
 
@@ -16506,7 +16562,7 @@ async function reserveBudget(state, amountCents, action) {
     assertCents(amountCents, "reservation");
     if (state.query) {
       const committed = state.spentCents - state.query.startSpentCents + state.reservedCents;
-      const atomic2 = (cents) => String(Math.round(cents * 1e4));
+      const atomic2 = (cents2) => String(Math.round(cents2 * 1e4));
       const check3 = spendingDecision({
         amount: atomic2(amountCents),
         perCall: atomic2(state.perCallCents ?? 100),
@@ -17017,7 +17073,7 @@ function toolDescription(name) {
     case "read_file":
       return "Read a session artifact.";
     case "list_files":
-      return "List session artifacts.";
+      return `List this chat's artifacts. Each chat with the owner has its own artifacts/ directory, but the owner's Files view shows every chat's files together: set scope="all" to also list files from your other chats before you say a file the owner mentions does not exist.`;
     case "run_shell":
       return "Run a gated local shell command only when shell access is enabled for the session.";
     case "spawn_subagent":
@@ -17041,7 +17097,10 @@ function toolParameters(name) {
     case "get_budget_status":
       return objectSchema({});
     case "list_files":
-      return objectSchema({ prefix: stringSchema("Optional artifact path prefix.") });
+      return objectSchema({
+        prefix: stringSchema("Optional artifact path prefix (this chat only)."),
+        scope: { type: "string", enum: ["chat", "all"], description: "chat (default): this chat's artifacts. all: also every other chat's files, each with the shell_dir to reach it from run_shell." }
+      });
     case "save_file":
       return objectSchema({
         path: stringSchema("Relative artifact path."),
@@ -17151,6 +17210,8 @@ function summarizeToolInput(name, args) {
       return pick3({ url: text(args.url), method: text(args.method), max_cost_cents: text(args.max_cost_cents) });
     case "review_paid_service":
       return pick3({ purchase_id: text(args.purchase_id), rating: text(args.rating) });
+    case "plan_funding":
+      return pick3({ calls: text(Array.isArray(args.calls) ? args.calls.map((call2) => call2?.url).filter((url3) => typeof url3 === "string").join(" ") : void 0) });
     case "bridge_usdc":
       return pick3({
         from: text(args.from),
@@ -17237,8 +17298,21 @@ async function executeTool(name, args, context) {
         return ok(await saveArtifact(context.session, requiredString(args.path, "path"), requiredString(args.content, "content"), objectValue(args.metadata)));
       case "read_file":
         return ok({ content: await readArtifact(context.session, requiredString(args.path, "path")) });
-      case "list_files":
-        return ok(await listArtifacts(context.session, optionalString(args.prefix, "prefix") ?? ""));
+      case "list_files": {
+        const files = await listArtifacts(context.session, optionalString(args.prefix, "prefix") ?? "");
+        const scope = optionalString(args.scope, "scope") ?? "chat";
+        if (scope !== "chat" && scope !== "all")
+          throw new Error("scope must be chat or all");
+        if (scope === "chat")
+          return ok(files);
+        const other = await listOtherChatArtifacts(context.session);
+        return ok({
+          files,
+          other_chats: other.chats,
+          ...other.truncated ? { truncated: true } : {},
+          note: other.chats.length ? "Files from other chats are already the owner's and already in their Files view. Read one with run_shell at <shell_dir>/<file> (run_shell starts in this chat's session directory). To attach or upload one from this chat, copy it into artifacts/ first; never re-buy or regenerate a file you already hold." : "No other chat of this agent has files."
+        });
+      }
       case "run_shell": {
         context.onProgress?.({ type: "running_shell", message: "Running gated shell command" });
         const result = await runShell(context.session, requiredString(args.command, "command"), optionalString(args.cwd, "cwd") ?? context.session.sessionDir, shellTimeoutMs(args.timeout_ms), { signal: context.signal });
@@ -55927,13 +56001,13 @@ var init_approve = __esm({
         });
       }
       approve2.estimateGas = estimateGas2;
-      async function simulate(client, parameters) {
+      async function simulate2(client, parameters) {
         return simulateContract(client, {
           ...pickWriteParameters(parameters),
           ...approve2.call(client, parameters)
         });
       }
-      approve2.simulate = simulate;
+      approve2.simulate = simulate2;
       function extractEvent(logs) {
         const [log] = parseEventLogs({
           abi: erc20Abi,
@@ -56408,13 +56482,13 @@ var init_transfer = __esm({
         });
       }
       transfer2.estimateGas = estimateGas2;
-      async function simulate(client, parameters) {
+      async function simulate2(client, parameters) {
         return simulateContract(client, {
           ...pickWriteParameters(parameters),
           ...transfer2.call(client, parameters)
         });
       }
-      transfer2.simulate = simulate;
+      transfer2.simulate = simulate2;
       function extractEvent(logs) {
         const [log] = parseEventLogs({
           abi: erc20Abi,
@@ -57752,7 +57826,8 @@ function classifyOffer(option) {
     protocol,
     rail,
     ...price_usd !== void 0 ? { price_usd } : {},
-    ...typeof option?.payTo === "string" ? { pay_to: option.payTo } : {}
+    ...typeof option?.payTo === "string" ? { pay_to: option.payTo } : {},
+    ...protocol === "mpp" && rail === "mppx" && price_usd === 0 ? { free: true } : {}
   };
 }
 function selectOffer(offers, selection) {
@@ -57914,8 +57989,10 @@ var init_discovery = __esm({
             network: candidate.network_name ?? candidate.network,
             protocol: candidate.protocol,
             price_usd: candidate.price_usd,
-            payable: payable.includes(candidate)
+            payable: payable.includes(candidate),
+            ...candidate.free ? { free: true } : {}
           })) } : {},
+          ...offer?.free ? { free: true } : {},
           input_schema: advisory.inputSchema,
           output_schema: advisory.outputSchema,
           description: advisory.summary,
@@ -57935,13 +58012,20 @@ var init_discovery = __esm({
       }
       note(offers, offer) {
         const quote = "Inspect with sample_body for the exact quote.";
+        if (offer?.free)
+          return `Free: this endpoint asks only for proof of which wallet is calling (a zero-amount MPP challenge on ${offer.network_name ?? "Tempo"}). Calling it signs that proof; nothing is paid and no balance is needed on ${offer.network_name ?? "that network"} or anywhere else, so never move funds for it. Call it with call_paid_service.`;
         if (!offer) {
           const offered = [...new Set(offers.map(networkLabel))];
           return `${offered.length ? `This service offers ${offered.join(", ")}` : "This service advertises no recognised payment option"}; payable here: ${describeRails(this.rails)}. ${quote}`;
         }
         if (this.options.negotiated) {
-          const networks = payableNetworks(offers, this.rails).map((name) => networkLabel({ ...offer, network_name: name, rail: "x402-base" }));
-          return `The hosted gateway pays the cheapest of ${networks.join(", ")} that your balance on that network covers; price_usd is the ceiling across them. ${quote}`;
+          const payable = offers.filter((candidate) => candidate.rail !== "unsupported" && this.rails.includes(candidate.rail));
+          const networks = payableNetworks(offers, this.rails).map((name) => {
+            const price = payable.filter((candidate) => candidate.network_name === name).map((candidate) => candidate.price_usd ?? 0).sort((a, b) => a - b)[0];
+            return `${networkLabel({ ...offer, network_name: name, rail: "x402-base" })}${price !== void 0 ? ` ($${price.toFixed(price < 0.01 ? 4 : 2)})` : ""}`;
+          });
+          const one = networks.length > 1 ? " Any one of these networks covering the price is enough: no move is needed while one of them does." : "";
+          return `Payable on ${networks.join(", ")}. The hosted gateway pays the cheapest of them that your spendable balance on that network covers, Base first on a tie; price_usd is the ceiling across them.${one} ${quote}`;
         }
         const preferred = this.options.paymentNetwork ?? "base";
         const reason = payableNetworks(offers, this.rails).includes(preferred) ? `your ${preferred} balance does not cover it` : `${preferred} is not offered`;
@@ -58013,14 +58097,14 @@ var init_discovery = __esm({
        */
       async search(query, options = {}) {
         const limit = Math.min(20, Math.max(1, options.limit ?? 8));
-        const { rank, ...searchOptions } = options;
+        const { rank: rank2, ...searchOptions } = options;
         const [result, balances] = await Promise.all([
           bounded(() => this.searchApi(query, { ...searchOptions, limit: Math.min(50, limit * 3) }), CATALOG_DEADLINE_MS, "AgentCash search"),
-          rank && this.options.balances ? withDeadline(() => this.options.balances(), CATALOG_DEADLINE_MS, "wallet balance read").catch(() => void 0) : Promise.resolve(void 0)
+          rank2 && this.options.balances ? withDeadline(() => this.options.balances(), CATALOG_DEADLINE_MS, "wallet balance read").catch(() => void 0) : Promise.resolve(void 0)
         ]);
         const candidates = result.ok ? searchResults(result.data) : [];
-        if (rank) {
-          const ranking = await bounded(() => rank({
+        if (rank2) {
+          const ranking = await bounded(() => rank2({
             query,
             networks: this.networks(),
             ...balances ? { balances } : {},
@@ -58039,7 +58123,7 @@ var init_discovery = __esm({
         const verified = await this.verified(candidates, limit);
         return { ok: true, data: {
           services: verified.services,
-          note: `AgentCash discovery${rank ? " (CrowdCode ranking unavailable)" : ""}, verified ${describeRails(this.rails)}. New/unreviewed services are allowed. Inspect the chosen endpoint before paying.${this.partialNote(verified.incomplete)}`
+          note: `AgentCash discovery${rank2 ? " (CrowdCode ranking unavailable)" : ""}, verified ${describeRails(this.rails)}. New/unreviewed services are allowed. Inspect the chosen endpoint before paying.${this.partialNote(verified.incomplete)}`
         } };
       }
       async discoverEndpoints(origin) {
@@ -58477,9 +58561,82 @@ var init_crowdcode = __esm({
   }
 });
 
+// ../../packages/economy/dist/follow-ups.js
+import { readFile as readFile8, writeFile as writeFile4 } from "node:fs/promises";
+import { join as join10 } from "node:path";
+function findFollowUpTokens(body) {
+  const found = [];
+  const walk4 = (value, path3, depth) => {
+    if (!value || typeof value !== "object" || Array.isArray(value) || depth > MAX_DEPTH)
+      return;
+    for (const [key, child] of Object.entries(value)) {
+      if (typeof child === "string" && TOKEN_FIELD.test(key) && child.length > 0 && child.length <= MAX_TOKEN_CHARS)
+        found.push({ field: [...path3, key].join("."), value: child });
+      else
+        walk4(child, [...path3, key], depth + 1);
+    }
+  };
+  walk4(body, [], 0);
+  return found;
+}
+function matchesTemplate(template, path3) {
+  const pattern = template.split("/").map((part) => /^\{[^}]+\}$/.test(part) ? "[^/]+" : part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("/");
+  return new RegExp(`^${pattern}/?$`).test(path3);
+}
+function documentedHeader(openapi, url3, method, field) {
+  const paths2 = openapi?.paths;
+  if (!paths2 || typeof paths2 !== "object")
+    return void 0;
+  const { pathname } = new URL(url3);
+  const leaf = field.split(".").pop().toLowerCase();
+  for (const [template, item] of Object.entries(paths2)) {
+    if (!matchesTemplate(template, pathname))
+      continue;
+    const operation = item?.[method.toLowerCase()] ?? {};
+    const parameters = [...item.parameters ?? [], ...operation.parameters ?? []].filter((p) => !!p && typeof p === "object" && p.in === "header" && typeof p.name === "string");
+    const named = parameters.find((p) => (p.description ?? "").toLowerCase().includes(leaf)) ?? parameters.find((p) => /unlock|re-?read/i.test(p.name));
+    if (named && /^[A-Za-z0-9-]{1,64}$/.test(named.name) && !/^(authorization|cookie|payment-signature|x-payment)$/i.test(named.name))
+      return named.name;
+  }
+  return void 0;
+}
+async function loadFollowUps(session) {
+  try {
+    const parsed = JSON.parse(await readFile8(storePath(session), "utf8"));
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+async function saveFollowUp(session, key, credential) {
+  const all = await loadFollowUps(session);
+  all[key] = credential;
+  await writeFile4(storePath(session), JSON.stringify(all, null, 2), { mode: 384 });
+}
+async function sellerOpenApi(origin, fetchJson) {
+  for (const path3 of OPENAPI_PATHS) {
+    const document = await fetchJson(`${origin}${path3}`).catch(() => void 0);
+    if (document && typeof document === "object" && "paths" in document)
+      return document;
+  }
+  return void 0;
+}
+var TOKEN_FIELD, MAX_DEPTH, MAX_TOKEN_CHARS, OPENAPI_PATHS, storePath, followUpKey;
+var init_follow_ups = __esm({
+  "../../packages/economy/dist/follow-ups.js"() {
+    "use strict";
+    TOKEN_FIELD = /^(unlock|re-?read|access|entitlement)[_-]?token$/i;
+    MAX_DEPTH = 4;
+    MAX_TOKEN_CHARS = 4096;
+    OPENAPI_PATHS = ["/openapi.json", "/.well-known/openapi.json"];
+    storePath = (session) => join10(session.sessionDir, "follow-up-credentials.json");
+    followUpKey = (method, url3) => `${method.toUpperCase()} ${url3}`;
+  }
+});
+
 // ../../packages/economy/dist/crowdcode-preferences.js
-import { mkdir as mkdir8, readFile as readFile8, rename as rename2, writeFile as writeFile4 } from "node:fs/promises";
-import { dirname as dirname8, join as join10 } from "node:path";
+import { mkdir as mkdir8, readFile as readFile9, rename as rename2, writeFile as writeFile5 } from "node:fs/promises";
+import { dirname as dirname8, join as join11 } from "node:path";
 import { randomUUID as randomUUID4 } from "node:crypto";
 var CrowdCodePreferences;
 var init_crowdcode_preferences = __esm({
@@ -58491,11 +58648,11 @@ var init_crowdcode_preferences = __esm({
         this.session = session;
       }
       path(scope) {
-        return join10(scope === "session" ? this.session.sessionDir : this.session.workspaceRoot, "crowdcode-preferences.json");
+        return join11(scope === "session" ? this.session.sessionDir : this.session.workspaceRoot, "crowdcode-preferences.json");
       }
       async read(scope) {
         try {
-          const value = JSON.parse(await readFile8(this.path(scope), "utf8"));
+          const value = JSON.parse(await readFile9(this.path(scope), "utf8"));
           return typeof value.enabled === "boolean" ? value.enabled : void 0;
         } catch (error53) {
           if (error53.code === "ENOENT")
@@ -58511,7 +58668,7 @@ var init_crowdcode_preferences = __esm({
       async write(scope, enabled) {
         const path3 = this.path(scope), temporary = `${path3}.${randomUUID4()}.tmp`;
         await mkdir8(dirname8(path3), { recursive: true });
-        await writeFile4(temporary, JSON.stringify({ enabled }) + "\n", { mode: 384 });
+        await writeFile5(temporary, JSON.stringify({ enabled }) + "\n", { mode: 384 });
         await rename2(temporary, path3);
       }
       async set(enabled, scope) {
@@ -58635,11 +58792,11 @@ var init_media = __esm({
 });
 
 // ../../packages/economy/dist/purchases.js
-import { appendFile as appendFile3, mkdir as mkdir9, readFile as readFile9 } from "node:fs/promises";
-import { dirname as dirname9, join as join11 } from "node:path";
+import { appendFile as appendFile3, mkdir as mkdir9, readFile as readFile10 } from "node:fs/promises";
+import { dirname as dirname9, join as join12 } from "node:path";
 import { randomUUID as randomUUID5 } from "node:crypto";
 function purchasesPath(session) {
-  return join11(session.sessionDir, "purchases.jsonl");
+  return join12(session.sessionDir, "purchases.jsonl");
 }
 function newPurchaseId() {
   return `pur_${randomUUID5().slice(0, 12)}`;
@@ -58676,7 +58833,7 @@ async function appendPurchaseEvent(session, event) {
 async function listPurchases(session) {
   let text;
   try {
-    text = await readFile9(purchasesPath(session), "utf8");
+    text = await readFile10(purchasesPath(session), "utf8");
   } catch (error53) {
     if (error53.code === "ENOENT") {
       return [];
@@ -58745,8 +58902,8 @@ var init_purchases = __esm({
 });
 
 // ../../packages/economy/dist/gateway.js
-import { readFile as readFile10, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join12 } from "node:path";
+import { readFile as readFile11, writeFile as writeFile6 } from "node:fs/promises";
+import { join as join13 } from "node:path";
 async function boundResponse(session, data) {
   return capStrings(await extractMedia(session, data), MAX_EXTERNAL_STRING_CHARS);
 }
@@ -58847,6 +59004,7 @@ var init_gateway = __esm({
     init_dist();
     init_dist2();
     init_offers();
+    init_follow_ups();
     init_approvals();
     init_purchases();
     GATEWAY_TOOL_NAMES = [
@@ -58878,14 +59036,14 @@ var init_gateway = __esm({
         this.options = options;
       }
       get inspectionsPath() {
-        return join12(this.options.session.sessionDir, "inspections.json");
+        return join13(this.options.session.sessionDir, "inspections.json");
       }
       async loadInspections() {
         if (this.inspections)
           return this.inspections;
         const map3 = /* @__PURE__ */ new Map();
         try {
-          const stored = JSON.parse(await readFile10(this.inspectionsPath, "utf8"));
+          const stored = JSON.parse(await readFile11(this.inspectionsPath, "utf8"));
           for (const [key, value] of Object.entries(stored))
             map3.set(key, value);
         } catch {
@@ -58896,7 +59054,7 @@ var init_gateway = __esm({
       async rememberInspection(key, inspection) {
         const map3 = await this.loadInspections();
         map3.set(key, inspection);
-        await writeFile5(this.inspectionsPath, JSON.stringify(Object.fromEntries(map3)), "utf8");
+        await writeFile6(this.inspectionsPath, JSON.stringify(Object.fromEntries(map3)), "utf8");
       }
       definitions() {
         return GATEWAY_TOOL_DEFINITIONS;
@@ -58997,8 +59155,8 @@ var init_gateway = __esm({
         }
         if (query) {
           const findServices = this.options.crowdcode.findServices?.bind(this.options.crowdcode);
-          const rank = findServices && await this.crowdcodeEnabled().catch(() => false) ? findServices : void 0;
-          const result = await this.options.agentcash.search(query, { limit: intArg(args.limit), ...rank ? { rank } : {} });
+          const rank2 = findServices && await this.crowdcodeEnabled().catch(() => false) ? findServices : void 0;
+          const result = await this.options.agentcash.search(query, { limit: intArg(args.limit), ...rank2 ? { rank: rank2 } : {} });
           return result.ok ? { ok: true, data: result.data } : { ok: false, error: result.error };
         }
         return { ok: false, error: "find_paid_service requires `origin` (known origin) or `query` (capability search)" };
@@ -59019,7 +59177,8 @@ var init_gateway = __esm({
         }
         const evidence = await this.serviceEvidence(endpoint);
         const rail = railFromSchema(schema.data);
-        const priceCeilingCents = priceCeilingFromSchema(schema.data);
+        const free = schema.data?.free === true;
+        const priceCeilingCents = free ? 0 : priceCeilingFromSchema(schema.data);
         const payTo = schema.data && typeof schema.data === "object" && typeof schema.data.pay_to === "string" ? schema.data.pay_to : void 0;
         await this.rememberInspection(inspectionKey(endpoint, method), {
           endpoint,
@@ -59037,6 +59196,8 @@ var init_gateway = __esm({
             method,
             rail,
             price_ceiling_cents: priceCeilingCents,
+            // A free, signed call is the one thing never to move funds for; say it first.
+            ...free ? { free: true, note: schema.data.note } : {},
             schema: schema.data,
             reputation: evidence.ok ? {
               score: evidence.score,
@@ -59080,6 +59241,9 @@ var init_gateway = __esm({
             error: `this endpoint offers no payment rail this agent can pay automatically (payable: ${describeRails(rails)})`
           };
         }
+        const reread = await this.followUpRead(target, method, body);
+        if (reread)
+          return reread;
         const requestedCostCents = intArg(args.max_cost_cents) ?? inspection.priceCeilingCents;
         let quotedCostCents = requestedCostCents;
         let quoteIdentity;
@@ -59200,6 +59364,7 @@ var init_gateway = __esm({
             ].join(" ")
           };
         }
+        const followUp = result.ok && paid ? await this.keepFollowUp(target, method, result.data, purchaseId) : void 0;
         return {
           ok: result.ok,
           data: {
@@ -59211,12 +59376,84 @@ var init_gateway = __esm({
             review_required: record3.review_required,
             review_available: true,
             ...result.note ? { note: result.note } : {},
+            ...followUp ? { follow_up: followUp } : {},
             data: result.data,
             ...result.ok ? {} : { error: result.error }
           },
           ...result.ok ? {} : { error: result.error }
         };
       }
+      /**
+       * Keep a follow-up token a paid answer carried, with the request header its
+       * seller documents for it, and tell the model what it is for.
+       */
+      async keepFollowUp(url3, method, data, purchaseId) {
+        const tokens2 = findFollowUpTokens(data);
+        if (!tokens2.length)
+          return void 0;
+        const fetchFree = this.options.agentcash.fetchFree?.bind(this.options.agentcash);
+        const openapi = fetchFree ? await sellerOpenApi(originOf2(url3), async (address2) => {
+          const response = await fetchFree({ url: address2, method: "GET" });
+          return response.ok ? response.data : void 0;
+        }).catch(() => void 0) : void 0;
+        for (const token of tokens2) {
+          const header = openapi ? documentedHeader(openapi, url3, method, token.field) : void 0;
+          if (!header)
+            continue;
+          await saveFollowUp(this.options.session, followUpKey(method, url3), { header, value: token.value, field: token.field, purchaseId, savedAt: (/* @__PURE__ */ new Date()).toISOString() });
+          return {
+            header,
+            token_field: token.field,
+            saved: true,
+            note: `The seller issued a follow-up token (${token.field}) and documents the ${header} request header for it. It is saved: calling this same URL again with call_paid_service sends ${header} automatically, and a seller that honours it answers without charging.`
+          };
+        }
+        return {
+          token_field: tokens2[0].field,
+          saved: false,
+          note: `This answer carries a follow-up token (${tokens2[0].field}), but the seller's OpenAPI names no request header for it. Check the seller's documentation before paying for the same request again.`
+        };
+      }
+      /** The same request again with a saved follow-up token, unpaid. */
+      async followUpRead(url3, method, body) {
+        const fetchFree = this.options.agentcash.fetchFree?.bind(this.options.agentcash);
+        if (!fetchFree)
+          return void 0;
+        const credential = (await loadFollowUps(this.options.session))[followUpKey(method, url3)];
+        if (!credential)
+          return void 0;
+        const result = await fetchFree({
+          url: url3,
+          method,
+          body: typeof body === "string" ? body : body === void 0 ? void 0 : JSON.stringify(body),
+          headers: { [credential.header]: credential.value }
+        }).catch(() => void 0);
+        if (!result?.ok || result.status === 402 || result.data === void 0)
+          return void 0;
+        const data = await boundResponse(this.options.session, result.data);
+        const artifact = await saveArtifact(this.options.session, `service-calls/${Date.now()}-${slugUrl(url3)}.json`, JSON.stringify({ status: result.status, body: data }, null, 2), { endpoint: url3, method });
+        await appendLedgerEntry(this.options.session.ledgerPath, {
+          session_id: this.options.session.sessionId,
+          type: "service_call",
+          resource_url: url3,
+          method,
+          quoted_cost_cents: 0,
+          charged_cost_cents: 0,
+          status: "ok",
+          approval_mode: this.options.session.approvalMode,
+          artifact_path: artifact?.path,
+          notes: `free follow-up with ${credential.header} from purchase ${credential.purchaseId ?? "?"}`
+        });
+        return { ok: true, data: {
+          outcome: "free",
+          status: result.status,
+          charged_cost_cents: 0,
+          artifact_path: artifact?.path,
+          review_required: false,
+          note: `Free re-read: sent the ${credential.header} token this seller issued with your earlier purchase${credential.purchaseId ? ` ${credential.purchaseId}` : ""}; nothing was paid. This is the same content that purchase bought.`,
+          data
+        } };
+      }
       async resolveApproval(endpoint, method, quotedCostCents, evidence) {
         const origin = originOf2(endpoint);
         const rules = await loadApprovalRules(this.options.approvalRulesPath);
@@ -59771,6 +60008,7 @@ var init_dist4 = __esm({
     init_agentcash2();
     init_approvals();
     init_crowdcode();
+    init_follow_ups();
     init_gateway();
     init_mcp();
     init_media();
@@ -59785,7 +60023,7 @@ var init_dist4 = __esm({
 
 // ../../packages/agent-runtime/dist/context.js
 import { createHash as createHash3 } from "node:crypto";
-import { relative as relative3, join as join13 } from "node:path";
+import { relative as relative3, join as join14 } from "node:path";
 function requestMessages(messages, state) {
   if (state.trailingMessage)
     return [...messages, state.trailingMessage];
@@ -59897,14 +60135,14 @@ async function compactContext(session, messages, options) {
     return { tokensBefore, tokensAfter: tokensBefore };
   const raw = messages.map((message) => JSON.stringify(message)).join("\n") + "\n";
   const digest = createHash3("sha256").update(raw).digest("hex");
-  const dir = await containedPath(session.sessionDir, join13("context", digest));
-  const path3 = join13(dir, "transcript.jsonl");
+  const dir = await containedPath(session.sessionDir, join14("context", digest));
+  const path3 = join14(dir, "transcript.jsonl");
   await atomicWrite(path3, raw);
   const archivePath = relative3(session.sessionDir, path3).split("\\").join("/");
   const ref = (index2) => `${relative3(session.sessionDir, dir).split("\\").join("/")}/message-${index2 + 1}.txt`;
   const saved = /* @__PURE__ */ new Set();
   const externalize = async (message, index2) => {
-    await atomicWrite(join13(dir, `message-${index2 + 1}.txt`), messages[index2].content);
+    await atomicWrite(join14(dir, `message-${index2 + 1}.txt`), messages[index2].content);
     saved.add(index2);
     const preview = message.role === "user" ? ` It began: "${oneLine(messages[index2].content, EXTERNALIZE_PREVIEW_CHARS)}"` : "";
     return `[Full ${message.role} message saved verbatim to ${ref(index2)}. Use rg/grep and sed/head/tail to read relevant portions before proceeding; do not load the entire file.${preview}]`;
@@ -60029,8 +60267,8 @@ var init_context2 = __esm({
 });
 
 // ../../packages/agent-runtime/dist/knowledge.js
-import { access, cp, mkdir as mkdir10, readFile as readFile11, writeFile as writeFile6 } from "node:fs/promises";
-import { dirname as dirname10, join as join14, resolve as resolve4 } from "node:path";
+import { access, cp, mkdir as mkdir10, readFile as readFile12, writeFile as writeFile7 } from "node:fs/promises";
+import { dirname as dirname10, join as join15, resolve as resolve4 } from "node:path";
 import { fileURLToPath } from "node:url";
 function bundledKnowledgeDir() {
   return resolve4(dirname10(fileURLToPath(import.meta.url)), "..", "knowledge");
@@ -60049,7 +60287,7 @@ async function resolveKnowledgeDir(options = {}) {
   }
   const bundled = bundledKnowledgeDir();
   try {
-    await access(join14(bundled, "L0.md"));
+    await access(join15(bundled, "L0.md"));
     return bundled;
   } catch {
     return void 0;
@@ -60062,12 +60300,12 @@ async function loadKnowledgeTree(session, options = {}) {
   }
   let l0;
   try {
-    l0 = (await readFile11(join14(dir, "L0.md"), "utf8")).trim();
+    l0 = (await readFile12(join15(dir, "L0.md"), "utf8")).trim();
   } catch {
     return void 0;
   }
   const version6 = await readVersion(dir, l0);
-  const target = join14(session.artifactsDir, "knowledge");
+  const target = join15(session.artifactsDir, "knowledge");
   if (await currentVersion(target) !== version6) {
     await mkdir10(session.artifactsDir, { recursive: true });
     await cp(dir, target, {
@@ -60075,7 +60313,7 @@ async function loadKnowledgeTree(session, options = {}) {
       force: true,
       filter: (source) => !source.endsWith("proposal.raw.txt")
     });
-    await writeFile6(join14(target, VERSION_FILE), `${version6}
+    await writeFile7(join15(target, VERSION_FILE), `${version6}
 `, "utf8");
   }
   if (session.knowledge?.version !== version6 || session.knowledge?.source !== dir) {
@@ -60093,7 +60331,7 @@ function renderCapabilityIndex(l0) {
 }
 async function readVersion(dir, l0) {
   try {
-    const meta4 = JSON.parse(await readFile11(join14(dir, "meta.json"), "utf8"));
+    const meta4 = JSON.parse(await readFile12(join15(dir, "meta.json"), "utf8"));
     if (typeof meta4.content_hash === "string" && meta4.content_hash) {
       return meta4.id ? `${meta4.id}@${meta4.content_hash}` : meta4.content_hash;
     }
@@ -60104,7 +60342,7 @@ async function readVersion(dir, l0) {
 }
 async function currentVersion(target) {
   try {
-    return (await readFile11(join14(target, VERSION_FILE), "utf8")).trim();
+    return (await readFile12(join15(target, VERSION_FILE), "utf8")).trim();
   } catch {
     return void 0;
   }
@@ -87223,8 +87461,8 @@ var init_economy_tools = __esm({
 });
 
 // ../../packages/agent-runtime/dist/runtime.js
-import { readFile as readFile12, rm as rm2 } from "node:fs/promises";
-import { join as join19 } from "node:path";
+import { readFile as readFile13, rm as rm2 } from "node:fs/promises";
+import { join as join20 } from "node:path";
 import { randomUUID as randomUUID6 } from "node:crypto";
 function createOpenCrowdRuntime(options) {
   const storage = options.storage ?? localRuntimeStorage;
@@ -87257,10 +87495,10 @@ function createOpenCrowdRuntime(options) {
     };
   }
   async function execute2(session, task, runOptions = {}) {
-    const path3 = join19(session.sessionDir, "query-checkpoint.json");
+    const path3 = join20(session.sessionDir, "query-checkpoint.json");
     let persisted;
     try {
-      persisted = JSON.parse(await readFile12(path3, "utf8"));
+      persisted = JSON.parse(await readFile13(path3, "utf8"));
     } catch (error53) {
       if (error53.code !== "ENOENT")
         throw error53;
@@ -87545,9 +87783,180 @@ var init_hosted_provider = __esm({
   }
 });
 
+// ../../packages/agent-runtime/dist/funding-plan.js
+function spendable(funds) {
+  return Math.max(0, funds.availableUsd - (funds.keepUsd ?? 0));
+}
+function simulate(calls, start) {
+  const left = new Map(start);
+  const assigned = [];
+  for (const call2 of calls) {
+    const free = call2.offers.find((offer) => offer.free);
+    if (free) {
+      assigned.push({ url: call2.url, method: call2.method, count: call2.count, network: free.network, priceUsd: 0, totalUsd: 0, free: true });
+      continue;
+    }
+    if (!call2.offers.length) {
+      assigned.push({ url: call2.url, method: call2.method, count: call2.count, totalUsd: 0, unpaid: true, error: call2.error ?? "no payable offer" });
+      continue;
+    }
+    for (let i = 0; i < call2.count; i++) {
+      const offer = [...call2.offers].filter((candidate) => (left.get(candidate.network) ?? 0) + 1e-9 >= candidate.priceUsd).sort((a, b) => a.priceUsd - b.priceUsd || rank(a.network) - rank(b.network))[0];
+      const previous = assigned[assigned.length - 1];
+      const sameAsPrevious = i > 0 && previous && previous.network === offer?.network && !previous.unpaid;
+      if (offer)
+        left.set(offer.network, (left.get(offer.network) ?? 0) - offer.priceUsd);
+      if (sameAsPrevious) {
+        previous.count += 1;
+        previous.totalUsd = cents(previous.totalUsd + offer.priceUsd);
+        continue;
+      }
+      const cheapest = [...call2.offers].sort((a, b) => a.priceUsd - b.priceUsd || rank(a.network) - rank(b.network))[0];
+      assigned.push(offer ? { url: call2.url, method: call2.method, count: 1, network: offer.network, priceUsd: offer.priceUsd, totalUsd: offer.priceUsd } : { url: call2.url, method: call2.method, count: 1, priceUsd: cheapest.priceUsd, totalUsd: cheapest.priceUsd, unpaid: true });
+    }
+  }
+  const merged = [];
+  for (const call2 of assigned) {
+    const last = merged[merged.length - 1];
+    if (last && last.unpaid && call2.unpaid && last.url === call2.url && last.method === call2.method && !last.error && !call2.error) {
+      last.count += call2.count;
+      last.totalUsd = cents(last.totalUsd + call2.totalUsd);
+    } else
+      merged.push({ ...call2 });
+  }
+  return { calls: merged, left, unpaid: merged.some((call2) => call2.unpaid && !call2.error) };
+}
+function planTaskFunding(calls, funds) {
+  const start = new Map(funds.map((entry) => [entry.network, headroom(entry)]));
+  const report = (planned, moves, outcome, short) => ({
+    outcome,
+    calls: planned.calls,
+    moves,
+    ...short ? { short } : {},
+    networks: funds.map((entry) => {
+      const moved = moves.reduce((sum, move) => sum + (move.to === entry.network ? move.amountUsd - PLAN_FEE_ALLOWANCE_USD : 0) - (move.from === entry.network ? move.amountUsd : 0), 0);
+      const plannedUsd = planned.calls.filter((call2) => call2.network === entry.network && !call2.unpaid).reduce((sum, call2) => sum + call2.totalUsd, 0);
+      return {
+        network: entry.network,
+        availableUsd: cents(entry.availableUsd),
+        hostingOwedUsd: cents(entry.hostingOwedUsd ?? 0),
+        keepUsd: cents(entry.keepUsd ?? 0),
+        spendableUsd: cents(spendable(entry)),
+        plannedUsd: cents(plannedUsd),
+        afterUsd: cents(headroom(entry) + moved - plannedUsd)
+      };
+    })
+  });
+  const now = simulate(calls, start);
+  if (!now.unpaid)
+    return report(now, [], "no_move");
+  const targets = [...new Set(now.calls.filter((call2) => call2.unpaid && !call2.error).flatMap((call2) => calls.find((c) => c.url === call2.url && c.method === call2.method)?.offers.map((offer) => offer.network) ?? []))];
+  let best;
+  let closest;
+  for (const target of targets.sort((a, b) => rank(a) - rank(b))) {
+    const unlimited = simulate(calls, new Map([...start, [target, Number.MAX_SAFE_INTEGER]]));
+    if (unlimited.unpaid)
+      continue;
+    const used = /* @__PURE__ */ new Map();
+    for (const call2 of unlimited.calls)
+      if (call2.network && !call2.unpaid)
+        used.set(call2.network, (used.get(call2.network) ?? 0) + call2.totalUsd);
+    const arrive = Math.max(0, (used.get(target) ?? 0) - (start.get(target) ?? 0));
+    const amountUsd = up(arrive + PLAN_FEE_ALLOWANCE_USD);
+    const sources = funds.filter((entry) => entry.network !== target).map((entry) => ({ network: entry.network, spare: (start.get(entry.network) ?? 0) - (used.get(entry.network) ?? 0) })).sort((a, b) => b.spare - a.spare);
+    const source = sources[0];
+    const gap = source ? amountUsd - source.spare : amountUsd;
+    if (!closest || gap < closest.amountUsd)
+      closest = { network: target, amountUsd: up(Math.max(0, gap)) };
+    if (!source || source.spare + 1e-9 < amountUsd)
+      continue;
+    const move = { from: source.network, to: target, amountUsd };
+    const after = simulate(calls, new Map([...start, [target, (start.get(target) ?? 0) + arrive], [source.network, (start.get(source.network) ?? 0) - amountUsd]]));
+    if (after.unpaid)
+      continue;
+    if (!best || amountUsd < best.move.amountUsd)
+      best = { move, planned: after };
+  }
+  if (best)
+    return report(best.planned, [best.move], "one_move");
+  const direct = targets.map((network) => {
+    const unlimited = simulate(calls, new Map([...start, [network, Number.MAX_SAFE_INTEGER]]));
+    const used = unlimited.calls.filter((call2) => call2.network === network && !call2.unpaid).reduce((sum, call2) => sum + call2.totalUsd, 0);
+    return { network, amountUsd: up(Math.max(0, used - (start.get(network) ?? 0))) };
+  }).sort((a, b) => a.amountUsd - b.amountUsd || rank(a.network) - rank(b.network))[0];
+  return report(now, [], "short", direct ?? closest);
+}
+function describePlan(plan) {
+  const money = (usd3) => `$${usd3.toFixed(2)}`;
+  const steps = plan.calls.map((call2) => call2.free ? `${call2.method} ${call2.url}: free (a signed wallet-identity proof on ${call2.network}; nothing moves, no balance needed)` : call2.error ? `${call2.method} ${call2.url}: ${call2.error}` : call2.unpaid ? `${call2.count}\xD7 ${call2.method} ${call2.url}: not payable with these funds (${money(call2.totalUsd)})` : `${call2.count}\xD7 ${call2.method} ${call2.url}: pays ${money(call2.totalUsd)} on ${call2.network}`);
+  const move = plan.moves[0];
+  const instruction = plan.outcome === "no_move" ? "No move is needed: every planned call is payable where the funds already are. Do not call bridge_usdc for this task." : plan.outcome === "one_move" ? `Make exactly this one move, once, before the first purchase: bridge_usdc {"from":"${move.from}","to":"${move.to}","amount_usd":${move.amountUsd}} (about $0.03 of it is the fee). Then make the calls; do not move funds again, and never back the other way, in this run.` : `These funds cannot pay for the whole task with one move. Do the part that is payable without any move if it is worth doing alone, and tell the owner the exact gap: add ${money(plan.short?.amountUsd ?? 0)} on ${plan.short?.network ?? "the network the service is sold on"}. Do not move funds back and forth to make up the difference.`;
+  return {
+    outcome: plan.outcome,
+    steps,
+    moves: plan.moves.map((m) => ({ from: m.from, to: m.to, amount_usd: m.amountUsd })),
+    ...plan.short ? { short: { network: plan.short.network, amount_usd: plan.short.amountUsd } } : {},
+    networks: plan.networks.map((n) => ({
+      network: n.network,
+      available_usd: n.availableUsd,
+      hosting_owed_usd: n.hostingOwedUsd,
+      kept_usd: n.keepUsd,
+      spendable_usd: n.spendableUsd,
+      planned_usd: n.plannedUsd,
+      left_after_usd: n.afterUsd
+    })),
+    instruction,
+    note: `spendable = available (balance less payment holds and, on Base, hosting owed) less what is kept: the $${HOSTING_RESERVE_USD.toFixed(2)} hosting reserve, and $${PLAN_INFERENCE_ALLOWANCE_USD.toFixed(2)} on Base for this run's own model calls.`
+  };
+}
+var GATEWAY_PREFERENCE, PLAN_FEE_ALLOWANCE_USD, PLAN_INFERENCE_ALLOWANCE_USD, HOSTING_RESERVE_USD, cents, up, rank, headroom, PLAN_FUNDING_TOOL;
+var init_funding_plan = __esm({
+  "../../packages/agent-runtime/dist/funding-plan.js"() {
+    "use strict";
+    GATEWAY_PREFERENCE = ["base", "solana", "tempo"];
+    PLAN_FEE_ALLOWANCE_USD = 0.05;
+    PLAN_INFERENCE_ALLOWANCE_USD = 0.25;
+    HOSTING_RESERVE_USD = 0.1;
+    cents = (usd3) => Math.round(usd3 * 100) / 100;
+    up = (usd3) => Math.ceil(usd3 * 100 - 1e-9) / 100;
+    rank = (network) => {
+      const index2 = GATEWAY_PREFERENCE.indexOf(network);
+      return index2 < 0 ? GATEWAY_PREFERENCE.length : index2;
+    };
+    headroom = (funds) => funds.availableUsd - (funds.keepUsd ?? 0);
+    PLAN_FUNDING_TOOL = {
+      name: "plan_funding",
+      description: "Plan a task's funding once, before its first purchase, whenever the task will make more than one paid call or a call on a network you hold little on. List every call you intend to make (url, method, how many times). It reads every network and protocol each endpoint accepts \u2014 including free calls that only need a signed wallet-identity proof \u2014 and what each of your networks can really spend (balance less holds, hosting owed, the hosting reserve and an allowance for your own model calls), then says which network will pay each call and the at most one bridge_usdc move the task needs, sized to it. Read-only: nothing is paid or moved.",
+      parameters: {
+        type: "object",
+        properties: {
+          calls: {
+            type: "array",
+            minItems: 1,
+            maxItems: 12,
+            items: {
+              type: "object",
+              properties: {
+                url: { type: "string", description: "Exact endpoint URL, as you will call it" },
+                method: { type: "string", enum: ["GET", "POST"] },
+                count: { type: "integer", minimum: 1, maximum: 20, description: "How many times you will call it (default 1)" },
+                sample_body: { type: "object", description: "For POST: a representative body, for the exact quote" }
+              },
+              required: ["url"],
+              additionalProperties: false
+            }
+          }
+        },
+        required: ["calls"],
+        additionalProperties: false
+      }
+    };
+  }
+});
+
 // ../../packages/agent-runtime/dist/hosted-economy.js
 import { randomUUID as randomUUID7, createHash as createHash4 } from "node:crypto";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 function describeTransferError(reply) {
   return reply.code ? `${reply.error ?? "transfer refused"} (${reply.code})` : reply.error ?? "transfer refused";
 }
@@ -87573,31 +87982,53 @@ function createHostedEconomy(options) {
   const fetcher = options.fetcher ?? fetch;
   const socket = { socketPath: options.socketPath, runId: options.runId, sessionId: options.sessionId };
   const directory = new ServiceDirectory(fetcher, (options.crowdcodeBase ?? DEFAULT_CROWDCODE_BASE).replace(/\/+$/, ""));
-  return new EconomyGateway({
+  const agentcash = new HostedAgentCashAdapter(directory, socket, fetcher, options.reconcileDelayMs, options.transferWait);
+  const gateway = new EconomyGateway({
     session: options.session,
-    agentcash: new HostedAgentCashAdapter(directory, socket, fetcher, options.reconcileDelayMs, options.transferWait),
+    agentcash,
     crowdcode: new HostedCrowdCodeAdapter(directory, socket),
     approvalMode: "auto",
     hostedSpending: true,
     minServiceScore: 2,
     paymentRails: HOSTED_RAILS,
     // Hosted rules live with the agent's session, never in a user config dir.
-    approvalRulesPath: join20(options.session.sessionDir, "approval-rules.json")
+    approvalRulesPath: join21(options.session.sessionDir, "approval-rules.json")
   });
+  return Object.assign(gateway, { planFunding: (args) => agentcash.planFunding(args) });
 }
 function hostedDynamicTools(economy) {
   const tools = economyTools(economy);
-  return { ...tools, definitions: tools.definitions.map((tool) => tool.name === "get_wallet_status" ? { ...tool, description: "Read this hosted agent's USDC wallet: the total across networks, each network's balance (Base, Solana, Tempo), and authoritative current-run inference spending, service spending, transfer fees, payment holds and authorized budget. A payment on a network needs that network's balance. Read-only." } : tool.name === "bridge_usdc" ? HOSTED_BRIDGE_TOOL : tool) };
+  const plan = economy.planFunding;
+  const definitions = tools.definitions.map((tool) => tool.name === "get_wallet_status" ? { ...tool, description: "Read this hosted agent's USDC wallet: the total across networks, each network's balance (Base, Solana, Tempo), what each can spend after payment holds and (on Base) hosting owed, and authoritative current-run inference spending, service spending, transfer fees, payment holds and authorized budget. A payment on a network needs that network's spendable balance. Read-only." } : tool.name === "bridge_usdc" ? HOSTED_BRIDGE_TOOL : tool);
+  return {
+    ...tools,
+    definitions: plan ? [...definitions, PLAN_FUNDING_TOOL] : definitions,
+    execute: async (name, args, operationId) => name === "plan_funding" && plan ? plan(args) : tools.execute(name, args, operationId)
+  };
+}
+function walletFunds(data) {
+  const wallet = objectValue5(data);
+  const networks = Array.isArray(wallet?.networks) ? wallet.networks : [];
+  const owed = numberValue6(wallet?.hosting_owed_usd) ?? 0;
+  const reserve = numberValue6(wallet?.hosting_reserve_usd) ?? HOSTING_RESERVE_USD;
+  return networks.map(objectValue5).flatMap((row) => {
+    const network = networkName(row?.network) ?? networkName(row?.caip2) ?? stringValue5(row?.network);
+    const available = numberValue6(row?.available_usd ?? row?.balance_usd);
+    if (!network || available === void 0)
+      return [];
+    const base2 = network === "base";
+    return [{ network, availableUsd: available, hostingOwedUsd: base2 ? numberValue6(row?.hosting_owed_usd) ?? owed : 0, keepUsd: base2 ? reserve + PLAN_INFERENCE_ALLOWANCE_USD : 0 }];
+  });
 }
 function planFundingMove(target, priceUsd, available) {
-  const cents = (usd3) => Math.floor(usd3 * 100) / 100;
+  const cents2 = (usd3) => Math.floor(usd3 * 100) / 100;
   const needed = Math.ceil((priceUsd + MOVE_FEE_ALLOWANCE_USD) * 100) / 100;
   const source = available.filter((n) => n.network !== target).sort((a, b) => b.usd - a.usd)[0];
   if (!source)
     return void 0;
   const reserve = source.network === "base" ? BASE_WORKING_RESERVE_USD : 0;
-  const spare = cents(Math.max(0, source.usd - reserve));
-  const ceiling = Math.min(Math.max(needed, spare), cents(source.usd));
+  const spare = cents2(Math.max(0, source.usd - reserve));
+  const ceiling = Math.min(Math.max(needed, spare), cents2(source.usd));
   const amount = Math.min(Math.max(PREFERRED_MOVE_USD, needed), ceiling);
   if (amount < needed)
     return void 0;
@@ -87676,6 +88107,7 @@ var init_hosted_economy = __esm({
     init_dist4();
     init_dist();
     init_hosted_provider();
+    init_funding_plan();
     init_economy_tools();
     DEFAULT_CROWDCODE_BASE = "https://crowdcode-backend.onrender.com";
     LIST_CACHE_MS = 6e4;
@@ -87865,6 +88297,18 @@ var init_hosted_economy = __esm({
               note: "This is your own service, so CrowdCode ran this call as a free owner test: nothing was paid or earned. Buyers pay the listed price as usual."
             };
           }
+          if (data.outcome === "free_proof") {
+            const ok4 = status !== void 0 && status < 400;
+            return {
+              ok: ok4,
+              ambiguous: false,
+              status,
+              data: decodeBody(data.body, data.content_type),
+              authMode: "free",
+              error: ok4 ? void 0 : `the service answered HTTP ${status ?? "?"} to a signed identity proof`,
+              note: `Free: the service asked only for proof of which wallet is calling (a zero-amount MPP challenge on ${stringValue5(data.network) ?? "tempo"}). CrowdCode signed it; no USDC moved and no balance was needed on any network, so never move funds for a call like this.`
+            };
+          }
           const outcome = data.outcome === "paid_success" ? "paid_success" : "paid_failure";
           const paidAtomic = numberValue6(data.amount_atomic);
           const network = stringValue5(data.network);
@@ -87922,6 +88366,10 @@ var init_hosted_economy = __esm({
           return void 0;
         }
       }
+      /** An unpaid request with extra headers: a seller's documented follow-up, or its OpenAPI. */
+      fetchFree(request2) {
+        return this.fetchUnpaid(request2.url, request2.method.toUpperCase(), request2.body, request2.headers);
+      }
       /** The supervisor found no 402: the endpoint is free, so the worker fetches it itself. */
       async fetchUnpaid(url3, method, body, headers) {
         try {
@@ -87953,12 +88401,12 @@ var init_hosted_economy = __esm({
        */
       async fundingHint(request2) {
         const wallet = await this.getBalance().catch(() => void 0);
-        const networks = Array.isArray(wallet?.data?.networks) ? wallet.data.networks : [];
-        const available = networks.map((n) => ({ network: stringValue5(n.network) ?? "?", usd: numberValue6(n.available_usd ?? n.balance_usd) })).filter((n) => n.usd !== void 0);
+        const available = walletFunds(wallet?.data).map((n) => ({ network: n.network, usd: n.availableUsd, owed: n.hostingOwedUsd ?? 0 }));
         if (!available.length)
           return " Check get_wallet_status for where your USDC is.";
         const total = available.reduce((sum, n) => sum + n.usd, 0);
-        const line = ` Your available USDC: ${available.map((n) => `${n.network} ${n.usd.toFixed(2)}`).join(", ")} (total ${total.toFixed(2)}).`;
+        const owed = available.filter((n) => n.owed > 0).map((n) => `; ${n.network} is net of $${n.owed.toFixed(2)} owed for hosting`).join("");
+        const line = ` Your spendable USDC: ${available.map((n) => `${n.network} ${n.usd.toFixed(2)}`).join(", ")} (total ${total.toFixed(2)}${owed}). If this task makes more paid calls, call plan_funding with all of them before moving anything: one move sized to the whole task, not one per call.`;
         const target = RAIL_NETWORK2[request2.rail];
         const funded = available.filter((n) => n.network !== target && n.usd >= request2.maxAmountUsd).map((n) => n.network);
         const elsewhere = funded.length ? ` First look for an equivalent service you can already pay: find_paid_service lists every result's networks, and one on ${funded.join(" or ")} costs you no transfer fee.` : "";
@@ -87970,6 +88418,32 @@ var init_hosted_economy = __esm({
           return `${line}${elsewhere} Moving funds is the other way, but the most ${move.from} can spare is ${size5}, and a fee of ${cost} is ${Math.round(move.feeShare * 100)}% of that \u2014 too much to spend without asking. If no equivalent service fits, say exactly that to the owner: this service is sold only on ${target}, moving ${size5} there would cost ${cost} in fees, and ask whether to do it.`;
         return `${line}${elsewhere} Otherwise move the funds yourself and retry \u2014 a move this size is within the policy and is not something to ask the owner about, any more than paying for the call is: bridge_usdc {"from":"${move.from}","to":"${target}","amount_usd":${move.amount}} (fee ${cost}, counted as spending; the spending guard pauses it for approval by itself if the owner's mode requires that), then retry this call.`;
       }
+      /**
+       * plan_funding: probe every planned call for every network it accepts, read
+       * what each network can spend, and plan the task's funding once
+       * (funding-plan.ts). Read-only; the probes are unpaid.
+       */
+      async planFunding(args) {
+        const raw = Array.isArray(args.calls) ? args.calls.slice(0, 12) : [];
+        const wanted = raw.map(objectValue5).filter((call2) => !!call2 && !!stringValue5(call2.url));
+        if (!wanted.length)
+          return { ok: false, error: "plan_funding needs calls: [{url, method, count}]" };
+        const [calls, wallet] = await Promise.all([
+          Promise.all(wanted.map(async (call2) => {
+            const url3 = stringValue5(call2.url), method = (stringValue5(call2.method) ?? "GET").toUpperCase();
+            const count = Math.min(20, Math.max(1, Math.floor(numberValue6(call2.count) ?? 1)));
+            const probe = await this.discovery.inspect({ url: url3, method, body: objectValue5(call2.sample_body) }).catch((error53) => ({ ok: false, error: error53.message, data: void 0 }));
+            const offers = Array.isArray(probe.data?.offers) ? probe.data.offers : [];
+            const payable = offers.filter((offer) => offer.payable === true && numberValue6(offer.price_usd) !== void 0).map((offer) => ({ network: stringValue5(offer.network) ?? "?", priceUsd: numberValue6(offer.price_usd), ...offer.free === true ? { free: true } : {} }));
+            return { url: url3, method, count, offers: payable, ...probe.ok ? payable.length ? {} : { error: "the endpoint offers nothing this wallet can pay" } : { error: probe.error ?? "the endpoint could not be probed" } };
+          })),
+          this.getBalance().catch(() => void 0)
+        ]);
+        const funds = walletFunds(wallet?.data);
+        if (!funds.length)
+          return { ok: false, error: "the wallet's balances could not be read; nothing was planned. Try again shortly." };
+        return { ok: true, data: describePlan(planTaskFunding(calls, funds)) };
+      }
       /**
        * Moves this agent's own USDC between its networks through the supervisor:
        * a quote, or an executed move keyed by the tool call that waits for the
@@ -88121,7 +88595,7 @@ var init_hosted_economy = __esm({
     };
     HOSTED_BRIDGE_TOOL = {
       name: "bridge_usdc",
-      description: "Move your own USDC between your networks (base, solana, tempo); it always arrives at your own address. Use it when the owner asks, or when a paid call failed with funding_required and no equivalent service is sold on a network you already fund. quote_only shows the fee and expected amount without moving. Executing re-quotes, applies the owner's approval policy to the fee (it may pause for approval) and waits for the funds to arrive, usually within a minute. Fees are about $0.02-0.03 and count as spending, so aim for about $1 and one fee funds many calls; when the wallet holds less, move what the call needs plus the fee, as long as the fee stays under about a fifth of what moves (roughly $0.15 and up). A move within that rule needs no permission from the owner: the spending guard applies their approval mode to the fee by itself. Below the rule, quote_only first and ask, rather than spending most of the move on its fee. Pass transfer_id alone to check a pending move.",
+      description: "Move your own USDC between your networks (base, solana, tempo); it always arrives at your own address. Use it when the owner asks, when plan_funding lists a move, or when a paid call failed with funding_required and no equivalent service is sold on a network you already fund. A run moves into each network at most once and never back the other way: plan a multi-call task with plan_funding first, then make its one move. quote_only shows the fee and expected amount without moving. Executing re-quotes, applies the owner's approval policy to the fee (it may pause for approval) and waits for the funds to arrive, usually within a minute. Fees are about $0.02-0.03 and count as spending, so aim for about $1 and one fee funds many calls; when the wallet holds less, move what the call needs plus the fee, as long as the fee stays under about a fifth of what moves (roughly $0.15 and up). A move within that rule needs no permission from the owner: the spending guard applies their approval mode to the fee by itself. Below the rule, quote_only first and ask, rather than spending most of the move on its fee. Pass transfer_id alone to check a pending move.",
       parameters: {
         type: "object",
         properties: {
@@ -88176,8 +88650,8 @@ var init_tool_deadlines = __esm({
 });
 
 // ../../packages/agent-runtime/dist/worker.js
-import { readFile as readFile13, mkdir as mkdir11 } from "node:fs/promises";
-import { join as join21 } from "node:path";
+import { readFile as readFile14, mkdir as mkdir11 } from "node:fs/promises";
+import { join as join22 } from "node:path";
 import { createHash as createHash5, randomUUID as randomUUID8 } from "node:crypto";
 function isWaiting(outcome) {
   return ["waiting_for_approval", "waiting_for_funds", "waiting_for_delegation", "payment_unknown"].includes(outcome);
@@ -88236,13 +88710,13 @@ var init_worker = __esm({
       constructor(options) {
         this.options = options;
         this.paths = resolveAgentPaths({ agentHome: options.agentHome });
-        this.statePath = join21(this.paths.metadata, "worker.json");
+        this.statePath = join22(this.paths.metadata, "worker.json");
       }
       async initialize() {
         await containedPath(this.paths.home, "metadata/worker.json");
         await mkdir11(this.paths.metadata, { recursive: true });
         try {
-          const raw = await readFile13(this.statePath, "utf8");
+          const raw = await readFile14(this.statePath, "utf8");
           this.state = JSON.parse(raw);
           if (this.state.version !== 1 || !Number.isSafeInteger(this.state.seq) || !this.state.commands || !this.state.runs) {
             throw new Error("worker checkpoint version or shape is invalid");
@@ -88417,13 +88891,13 @@ var init_worker = __esm({
           } catch (error53) {
             if (error53.code !== "ENOENT" || run.start.payload.session.kind === "existing")
               throw error53;
-            const cents = BigInt(run.start.payload.budget.limit) / 10000n;
-            if (cents > BigInt(Number.MAX_SAFE_INTEGER))
+            const cents2 = BigInt(run.start.payload.budget.limit) / 10000n;
+            if (cents2 > BigInt(Number.MAX_SAFE_INTEGER))
               throw new Error("budget exceeds local accounting range");
             session = await createSession({
               workspaceRoot: this.paths.workspace,
               sessionId: run.sessionId,
-              budgetCents: Number(cents),
+              budgetCents: Number(cents2),
               approvalMode: run.start.payload.approvalMode,
               shellEnabled: true
             });
@@ -88595,7 +89069,7 @@ var init_worker = __esm({
                 run.checkpoint = checkpoint;
                 run.checkpointId = randomUUID8();
               });
-              await atomicWrite(join21(session.sessionDir, "messages.jsonl"), checkpoint.messages.filter((m) => m.role !== "system").map((message) => JSON.stringify({ type: "message", timestamp: (/* @__PURE__ */ new Date()).toISOString(), message }) + "\n").join(""));
+              await atomicWrite(join22(session.sessionDir, "messages.jsonl"), checkpoint.messages.filter((m) => m.role !== "system").map((message) => JSON.stringify({ type: "message", timestamp: (/* @__PURE__ */ new Date()).toISOString(), message }) + "\n").join(""));
             },
             onMessage: async (message) => {
               const content = message.role === "assistant" && !message.housekeeping ? stripReasoning(message.content) : "";
@@ -88658,7 +89132,7 @@ var init_worker = __esm({
       }
       async history(session) {
         try {
-          return (await readFile13(join21(session.sessionDir, "messages.jsonl"), "utf8")).split("\n").filter(Boolean).map((line) => JSON.parse(line).message).filter(Boolean);
+          return (await readFile14(join22(session.sessionDir, "messages.jsonl"), "utf8")).split("\n").filter(Boolean).map((line) => JSON.parse(line).message).filter(Boolean);
         } catch (error53) {
           if (error53.code === "ENOENT")
             return [];
@@ -88696,7 +89170,7 @@ var init_worker = __esm({
 });
 
 // ../../packages/agent-runtime/dist/inbox.js
-import { readFile as readFile14 } from "node:fs/promises";
+import { readFile as readFile15 } from "node:fs/promises";
 var FileSteeringInbox;
 var init_inbox = __esm({
   "../../packages/agent-runtime/dist/inbox.js"() {
@@ -88710,7 +89184,7 @@ var init_inbox = __esm({
       }
       async read() {
         try {
-          return JSON.parse(await readFile14(this.path, "utf8"));
+          return JSON.parse(await readFile15(this.path, "utf8"));
         } catch (e6) {
           if (e6.code === "ENOENT")
             return [];
@@ -88755,8 +89229,8 @@ var init_non_answer = __esm({
 
 // ../../packages/agent-runtime/dist/index.js
 import { createHash as createHash6 } from "node:crypto";
-import { appendFile as appendFile4, mkdir as mkdir12, readFile as readFile15 } from "node:fs/promises";
-import { join as join22 } from "node:path";
+import { appendFile as appendFile4, mkdir as mkdir12, readFile as readFile16 } from "node:fs/promises";
+import { join as join23 } from "node:path";
 function lastUserMessageIndex(messages) {
   for (let index2 = messages.length - 1; index2 >= 0; index2 -= 1) {
     if (messages[index2].role === "user") {
@@ -88779,8 +89253,10 @@ function createMockToolExecutor() {
           });
         case "read_file":
           return ok3({ content: `Mock file content for ${stringValue6(args.path) ?? "unknown path"}.` });
-        case "list_files":
-          return ok3(["mock-output.txt"].filter((path3) => path3.startsWith(stringValue6(args.prefix) ?? "")));
+        case "list_files": {
+          const files = ["mock-output.txt"].filter((path3) => path3.startsWith(stringValue6(args.prefix) ?? ""));
+          return ok3(args.scope === "all" ? { files, other_chats: [], note: "No other chat of this agent has files." } : files);
+        }
         case "run_shell":
           context.onProgress?.({ type: "running_shell", message: "Mock running gated shell command" });
           return ok3({
@@ -88890,13 +89366,13 @@ function chargedCostCents(usage, modelId, catalog) {
   }
   const model = catalog?.find((candidate) => candidate.id === modelId);
   if (model && (model.inputCostCentsPer1k !== void 0 || model.outputCostCentsPer1k !== void 0) && (usage.inputTokens !== void 0 || usage.outputTokens !== void 0)) {
-    const cents = (usage.inputTokens ?? 0) / 1e3 * (model.inputCostCentsPer1k ?? 0) + (usage.outputTokens ?? 0) / 1e3 * (model.outputCostCentsPer1k ?? 0);
-    return Math.max(0, roundCents(cents));
+    const cents2 = (usage.inputTokens ?? 0) / 1e3 * (model.inputCostCentsPer1k ?? 0) + (usage.outputTokens ?? 0) / 1e3 * (model.outputCostCentsPer1k ?? 0);
+    return Math.max(0, roundCents(cents2));
   }
   return 0;
 }
-function roundCents(cents) {
-  return Math.round(cents * 1e4) / 1e4;
+function roundCents(cents2) {
+  return Math.round(cents2 * 1e4) / 1e4;
 }
 function usageMetricsNote(completion) {
   const usage = completion.usage;
@@ -88956,11 +89432,12 @@ async function runAgentTaskDetailed(session, task, options = {}) {
   if (options.hosted)
     systemPromptParts.push("You operate this service for its owner. Inference and paid tools debit its USDC wallet. When authorized to build or sell a service, take concrete steps within the owner's configured scope and budget. Ask only for missing information or permissions that materially block progress. Report actual costs and outcomes. Financial sustainability is the owner's business objective; respect their stop controls.", "You are a continuous autonomous agent, not a turn-based assistant. Maintain unfinished goals, promised follow-ups, recurring work, and conditions worth monitoring. When future work would clearly help, proactively create a persistent automation instead of waiting for the owner to say schedule. Use a one-time automation for a future reminder or follow-up and a cron automation for monitoring, recurring reports, or maintenance. It runs in this same conversation. Never create duplicates or noisy schedules, and always tell the owner exactly what you created, its timezone, and next run.", "Before finishing a substantive task, consider whether a follow-up, reminder, monitoring loop, recurring report, or maintenance check would materially advance the owner's goal; create one when the need is clear, but do not schedule ordinary one-off work.", "Financial state: the current hosted financial snapshot is authoritative. It arrives as budget_after_tool_call in the latest tool result or, when no tool has just run, as an automatic CrowdCode note at the start of the latest user message; that note is context, not something the user said, so never reply to it or mention it unless the user asks about money. Historical local session budget figures are not wallet balances and may omit inference spending. Wallet balance, pending payment holds, settled inference spend, settled service spend, and remaining run budget are separate. When the snapshot lists wallet networks, each network's balance is separate: a payment on a network needs that network's available balance. Report the wallet to the owner as one total, mentioning the per-network split only when it matters. Spending totals cover only the identified current run. A budget limit does not supply funds. An unavailable balance is unknown, not zero. The snapshot before a model call excludes that call's eventual charge; never claim a response was free or that you spent nothing merely because no paid tool ran. Use get_budget_status or get_wallet_status for refreshed financial state. Respect approval mode and per-call limits; over-limit requests require the owner's approval.");
   if (options.hosted)
-    systemPromptParts.push("Files the owner sends you: an attached file is saved in this session under uploads/ before its message reaches you, and the message names each one with its path, size and type. Read a text file with read_file at uploads/<name>, and any file with run_shell at artifacts/uploads/<name> from the session directory. Those files are already the owner's and already in their file list: work from them, and never copy or re-save one under artifacts/ to hand it back. Write your own outputs elsewhere under artifacts/; uploads/ is the owner's directory and nothing you write there is delivered. If a file the message names is missing, say so and ask the owner to send it again rather than guessing at its contents.", "Files you produce: only the artifacts/ directory of this session reaches the owner. save_file writes there; anything you write elsewhere is scratch they never see. The owner sees each file at its path without that prefix, so artifacts/generated/report.pdf is generated/report.pdf to them. Name a produced file in your final message by exactly that path as plain text and nothing else \u2014 the owner's interface turns it into a working download and preview link. Never invent a download URL, a sandbox: link, a /mnt/data path, or any other path the owner cannot open, and never claim a file exists before you have verified it.");
+    systemPromptParts.push("Files the owner sends you: an attached file is saved in this session under uploads/ before its message reaches you, and the message names each one with its path, size and type. Read a text file with read_file at uploads/<name>, and any file with run_shell at artifacts/uploads/<name> from the session directory. Those files are already the owner's and already in their file list: work from them, and never copy or re-save one under artifacts/ to hand it back. Write your own outputs elsewhere under artifacts/; uploads/ is the owner's directory and nothing you write there is delivered. If a file the message names is missing, say so and ask the owner to send it again rather than guessing at its contents.", "Files you produce: only the artifacts/ directory of this session reaches the owner. save_file writes there; anything you write elsewhere is scratch they never see. The owner sees each file at its path without that prefix, so artifacts/generated/report.pdf is generated/report.pdf to them. Name a produced file in your final message by exactly that path as plain text and nothing else \u2014 the owner's interface turns it into a working download and preview link. Never invent a download URL, a sandbox: link, a /mnt/data path, or any other path the owner cannot open, and never claim a file exists before you have verified it.", `Files from your other chats: each chat with the owner is its own session with its own artifacts/, so list_files and read_file see only this one, while the owner's Files view shows every chat's files together. When the owner mentions a file, PDF or report you do not see here, call list_files with scope="all" before you say it does not exist; it lists each other chat's files with the shell_dir that run_shell reaches them at.`);
   if (options.dynamicTools) {
     systemPromptParts.push("When the local computer is not the right environment, or after one clear local capability failure, buy external capability: find_paid_service to discover, inspect_paid_service to see the exact schema/price/reputation, call_paid_service to execute through the enforced purchase lifecycle, and review_paid_service for the required review after every confirmed paid call (success or failure). The same review tool accepts unpaid experiences; review relevant free results or failed attempts without inventing payment evidence. Distinguish provider faults from local errors and uncertain failures: a call that never reached the seller is never the seller's fault. funding_required means your USDC is on the wrong network, a cap or a declined approval means the owner's policy stopped you, and an unpayable rail means you could not pay at all \u2014 in every one of those the service was never asked, so it gets no review and certainly not a low rating. Fix the cause and call it again instead; the gateway refuses those reviews, and trying anyway wastes a turn. A platform judge, not you, writes the public score and text of a paid review from the platform's record of the call; your rating and notes are evidence it reads, so report accurately and never try to talk it into a rating.", `Choosing a service: find_paid_service with a short capability query (for example "web search" or "object storage", not the task's subject) searches every catalog (AgentCash, Coinbase's x402 catalog, the MPP catalog and CrowdCode's reviews) across Base, Solana and Tempo and returns services you can pay, ranked best first by CrowdCode: quality (score and verified reviews), then effective price on the service's best network, including about $0.03 to move USDC between your own networks when that network's balance is short, then your balance there. Prefer the highest-ranked service that fits the task, whatever its network; a better or cheaper service on Solana or Tempo beats a Base default. Each result also lists \`networks\`, the networks it can be paid on; between services that fit the task equally well, one you can pay from a balance you already hold beats one that needs a transfer first, because a move costs about $0.03. When the chosen service is marked transfer_needed, move USDC between your own networks first if you have a tool for that; otherwise tell the user which network needs funds. When the ranking is unavailable, compare candidates yourself with inspect_paid_service (reputation, price and network) against your per-network balances.`, ...options.hosted ? [
       "You can use new services without prior CrowdCode reviews. Payable: x402 USDC on Base or Solana and MPP USDC.e on Tempo; the hosted gateway pays the cheapest offered network your balance on that network covers. Other networks, including Monad, are not payable here. Payments stay within the user's configured limits; over-limit quotes request approval. Use read_service for authenticated job polling and never resubmit a pending generation job.",
-      "funding_required means your USDC is on the wrong network, not that you are out of money, and a wallet with money in it finishes the job. First go back to find_paid_service and look for an equivalent service sold on a network you already hold USDC on \u2014 every result lists its `networks`, and paying from an existing balance costs no transfer fee. If none fits, move funds with bridge_usdc and retry the same call: aim for about $1 so one fee funds many later calls, and when the wallet holds less than that, move what the call needs plus the fee, as long as the fee stays under about a fifth of what moves (roughly $0.15 and up at a $0.03 fee). A move inside that rule is ordinary work, not a decision for the owner: make it and retry, exactly as you would pay for the call itself. The spending guard applies the owner's approval mode to the fee by itself and pauses the run if it has to, so you never need permission before calling bridge_usdc. Stopping to ask whether you may spend three cents moving the owner's own money to the network a seller wants is the dead end this rule exists to prevent. Only below that threshold is a move not worth making on your own: quote_only it, then ask. When the owner asks you to move funds, quote first, state the fee, then execute and report both transaction ids and the amount received. Moves follow the owner's approval mode like payments; never move funds without a reason.",
+      "funding_required means your USDC is on the wrong network, not that you are out of money, and a wallet with money in it finishes the job. First go back to find_paid_service and look for an equivalent service sold on a network you already hold USDC on \u2014 every result lists its `networks`, and paying from an existing balance costs no transfer fee. If none fits, move funds with bridge_usdc and retry the same call: move what plan_funding says, or, for a single call, about $1 so one fee funds many later calls, and when the wallet holds less than that, move what the call needs plus the fee, as long as the fee stays under about a fifth of what moves (roughly $0.15 and up at a $0.03 fee). A move inside that rule is ordinary work, not a decision for the owner: make it and retry, exactly as you would pay for the call itself. The spending guard applies the owner's approval mode to the fee by itself and pauses the run if it has to, so you never need permission before calling bridge_usdc. Stopping to ask whether you may spend three cents moving the owner's own money to the network a seller wants is the dead end this rule exists to prevent. Only below that threshold is a move not worth making on your own: quote_only it, then ask. When the owner asks you to move funds, quote first, state the fee, then execute and report both transaction ids and the amount received. Moves follow the owner's approval mode like payments; never move funds without a reason.",
+      "Plan a task's funding once, before its first purchase. When a task will make more than one paid call, or call a service sold on a network you hold little on, call plan_funding with every call you intend to make. One seller can need two networks for one task \u2014 articles paid on Base, a free search that only asks a signed wallet proof on Tempo \u2014 and plan_funding reads every network each endpoint accepts against what each of your networks can really spend (balance less holds, hosting owed and what is kept for hosting and your own model calls). Make exactly the moves it lists, at most one into any network, and never move funds back the other way in the same run: a round trip pays two fees for nothing. A call whose offer is free (price 0, marked free) needs no balance on any network; never move funds for it. When a paid answer carries a follow-up token (for example a free re-read), the runtime saves it and sends it on the next call to the same URL, so a repeat costs nothing; never pay twice for content you already bought.",
       "When money is what blocks a task, say exactly that and nothing else: which network the service is sold on, what you hold where, and the single thing you need \u2014 permission for a move you have quoted, or USDC added on that network. Never dress a funding problem up as the service being unsuitable or unavailable, never imply your wallet is empty when it is not, and never offer a recorded request_service as though it were the answer the owner asked for."
     ] : [], capabilityIndex ?? DEFAULT_CAPABILITY_INDEX, "When a task needs current web facts, search results, or unfamiliar page content, make one paid web search your FIRST move \u2014 do not serially guess URLs with curl; one paid search replaces minutes of blind fetching and costs less than the LLM turns it saves.", "Approval, budget, reputation, and payment rails are enforced in code \u2014 you cannot bypass them, so state costs plainly and never invent payment details.", "When the user says CrowdCode on/off, call set_crowdcode_enabled; default to session scope unless they ask for a persistent default. Use list_my_reviews and delete_my_review for user-directed review management, including while off. Before finishing a substantive task, consider concrete paid services that would fix real shortcomings and submit qualifying demand with request_service (input, output, problem, price_per_call), unless CrowdCode is off. Never invent a purchase or demand.", "Generated media never reaches you as base64 you can read: when a service returns audio, an image, video or a PDF, the runtime has already written the bytes to a file and handed you {artifact_path, bytes, media_type} instead. Work from that path with run_shell \u2014 ffmpeg, python3 and node are installed, so converting a wav to the mp3 the owner asked for is one command \u2014 and leave the deliverable under artifacts/ in the format they asked for. Never pay a second time for a file you already hold.", "Each tool result includes the budget before and after that tool call. Never ask for wallet private keys or secrets.", ...options.promptSections ?? []);
   } else {
@@ -89421,8 +89898,8 @@ async function runSubagentTask(session, args, subagent, index2, parentOptions, o
     return { ok: false, error: "spawn_subagent requires a task" };
   }
   const subagentId = `${session.sessionId}#sub${index2}`;
-  const trajectoryDir = join22(session.sessionDir, "subagents", operationKey ?? String(index2));
-  const trajectoryPath = join22(trajectoryDir, "messages.jsonl");
+  const trajectoryDir = join23(session.sessionDir, "subagents", operationKey ?? String(index2));
+  const trajectoryPath = join23(trajectoryDir, "messages.jsonl");
   await mkdir12(trajectoryDir, { recursive: true });
   const record3 = async (message) => {
     await appendFile4(trajectoryPath, `${JSON.stringify({ type: "message", timestamp: (/* @__PURE__ */ new Date()).toISOString(), message })}
@@ -89453,11 +89930,11 @@ async function runSubagentTask(session, args, subagent, index2, parentOptions, o
       ].filter(Boolean).join("\n\n")
     }
   ];
-  const statePath = join22(trajectoryDir, "checkpoint.json");
+  const statePath = join23(trajectoryDir, "checkpoint.json");
   let saved;
   if (operationKey)
     try {
-      saved = JSON.parse(await readFile15(statePath, "utf8"));
+      saved = JSON.parse(await readFile16(statePath, "utf8"));
     } catch (e6) {
       if (e6.code !== "ENOENT")
         throw e6;
@@ -89909,8 +90386,8 @@ function truncateMiddle(value, maxLength) {
   const tail = Math.floor((maxLength - 1) / 2);
   return `${value.slice(0, head)}\u2026${value.slice(value.length - tail)}`;
 }
-function formatCents(cents) {
-  return `$${(cents / 100).toFixed(cents > 0 && cents < 1 ? 4 : 2)}`;
+function formatCents(cents2) {
+  return `$${(cents2 / 100).toFixed(cents2 > 0 && cents2 < 1 ? 4 : 2)}`;
 }
 function sumCents2(rows) {
   const total = rows.reduce((sum, row) => {
@@ -90188,8 +90665,8 @@ var init_dist6 = __esm({
 });
 
 // src/shared.ts
-import { readdir } from "node:fs/promises";
-import { join as join23, resolve as resolve5 } from "node:path";
+import { readdir as readdir2 } from "node:fs/promises";
+import { join as join24, resolve as resolve5 } from "node:path";
 import { stdout as output } from "node:process";
 function renderKeyValues(value) {
   return Object.entries(value).filter(([, item]) => item !== void 0).map(([key, item]) => `  ${style(key, "muted").padEnd(24)} ${formatCell(item, 80, key)}`).join("\n");
@@ -90222,9 +90699,9 @@ function formatCell(value, maxLength, key = "") {
     return "-";
   }
   if ((typeof value === "number" || typeof value === "string") && /cost|cents|spend|remaining|budget|max/i.test(key)) {
-    const cents = Number(value);
-    if (Number.isFinite(cents)) {
-      return formatCents2(cents);
+    const cents2 = Number(value);
+    if (Number.isFinite(cents2)) {
+      return formatCents2(cents2);
     }
   }
   if (typeof value === "number" && Number.isFinite(value) && /_cents$/.test(key)) {
@@ -90249,8 +90726,8 @@ function shortUrl(value) {
     return truncateMiddle2(value, 48);
   }
 }
-function formatCents2(cents) {
-  return `$${(cents / 100).toFixed(cents > 0 && cents < 1 ? 4 : 2)}`;
+function formatCents2(cents2) {
+  return `$${(cents2 / 100).toFixed(cents2 > 0 && cents2 < 1 ? 4 : 2)}`;
 }
 function terminalWidth() {
   return Math.max(60, Math.min(140, output.columns ?? 100));
@@ -90311,9 +90788,9 @@ function isConsumedOption(args, index2, options) {
   return options.includes(args[index2]) || index2 > 0 && options.includes(args[index2 - 1]);
 }
 async function latestSessionId(workspaceRoot) {
-  const sessionsDir = join23(resolve5(workspaceRoot), "sessions");
+  const sessionsDir = join24(resolve5(workspaceRoot), "sessions");
   try {
-    const entries = await readdir(sessionsDir, { withFileTypes: true });
+    const entries = await readdir2(sessionsDir, { withFileTypes: true });
     return entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort().at(-1);
   } catch (error53) {
     if (error53.code === "ENOENT") {
@@ -90481,8 +90958,8 @@ var init_doctor = __esm({
 });
 
 // ../../packages/evals/dist/gaia.js
-import { mkdir as mkdir13, readFile as readFile16, writeFile as writeFile7, access as access2 } from "node:fs/promises";
-import { dirname as dirname12, join as join25 } from "node:path";
+import { mkdir as mkdir13, readFile as readFile17, writeFile as writeFile8, access as access2 } from "node:fs/promises";
+import { dirname as dirname12, join as join26 } from "node:path";
 import { homedir as homedir7 } from "node:os";
 function isUnsupportedModality(fileName) {
   if (!fileName) {
@@ -90492,18 +90969,18 @@ function isUnsupportedModality(fileName) {
   return UNSUPPORTED_EXTENSIONS.some((extension2) => lower.endsWith(extension2));
 }
 function defaultGaiaCacheDir() {
-  return process.env.OPENCROWD_GAIA_CACHE_DIR ?? join25(homedir7(), ".cache", "opencrowd", "gaia", "2023", "validation");
+  return process.env.OPENCROWD_GAIA_CACHE_DIR ?? join26(homedir7(), ".cache", "opencrowd", "gaia", "2023", "validation");
 }
 async function fetchGaiaValidation(options = {}) {
   const cacheDir = options.cacheDir ?? defaultGaiaCacheDir();
   await mkdir13(cacheDir, { recursive: true });
-  const metadataPath = join25(cacheDir, "metadata.jsonl");
+  const metadataPath = join26(cacheDir, "metadata.jsonl");
   let metadataText;
   try {
-    metadataText = await readFile16(metadataPath, "utf8");
+    metadataText = await readFile17(metadataPath, "utf8");
   } catch {
     metadataText = await fetchValidationRows(options);
-    await writeFile7(metadataPath, metadataText, "utf8");
+    await writeFile8(metadataPath, metadataText, "utf8");
   }
   return metadataText.split(/\r?\n/).filter(Boolean).map((line) => parseGaiaRecord(JSON.parse(line)));
 }
@@ -90552,7 +91029,7 @@ async function ensureGaiaAttachments(questions, options = {}) {
   const cacheDir = options.cacheDir ?? defaultGaiaCacheDir();
   for (const question of questions) {
     if (question.file_name && !isUnsupportedModality(question.file_name)) {
-      const filePath = join25(cacheDir, question.file_name);
+      const filePath = join26(cacheDir, question.file_name);
       await cachedDownload(filePath, `${GAIA_BASE_URL}/${encodeURIComponent(question.file_name)}`, options, true);
       question.file_path = filePath;
     }
@@ -90582,7 +91059,7 @@ function parseGaiaRecord(record3) {
 async function cachedDownload(path3, url3, options, binary = false) {
   try {
     await access2(path3);
-    return binary ? "" : await readFile16(path3, "utf8");
+    return binary ? "" : await readFile17(path3, "utf8");
   } catch {
   }
   options.log?.(`fetching ${url3}`);
@@ -90604,11 +91081,11 @@ async function cachedDownload(path3, url3, options, binary = false) {
   await mkdir13(dirname12(path3), { recursive: true });
   if (binary) {
     const buffer2 = Buffer.from(await response.arrayBuffer());
-    await writeFile7(path3, buffer2);
+    await writeFile8(path3, buffer2);
     return "";
   }
   const text = await response.text();
-  await writeFile7(path3, text, "utf8");
+  await writeFile8(path3, text, "utf8");
   return text;
 }
 var GAIA_BASE_URL, GAIA_ROWS_URL, GAIA_TIERS, UNSUPPORTED_EXTENSIONS;
@@ -90642,9 +91119,9 @@ var init_gaia = __esm({
 });
 
 // ../../packages/evals/dist/grader.js
-import { readFile as readFile17 } from "node:fs/promises";
+import { readFile as readFile18 } from "node:fs/promises";
 async function gradeTrajectoryFile(path3) {
-  const text = await readFile17(path3, "utf8");
+  const text = await readFile18(path3, "utf8");
   const entries = text.split(/\r?\n/).filter(Boolean).map((line) => JSON.parse(line));
   return gradeTrajectory(entries);
 }
@@ -90777,8 +91254,8 @@ var init_grader = __esm({
 // ../../packages/evals/dist/harnesses.js
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { copyFile, mkdir as mkdir14, readFile as readFile18 } from "node:fs/promises";
-import { basename, join as join26 } from "node:path";
+import { copyFile, mkdir as mkdir14, readFile as readFile19 } from "node:fs/promises";
+import { basename, join as join27 } from "node:path";
 function resolveHarness(name) {
   switch (name) {
     case "opencrowd":
@@ -90807,7 +91284,7 @@ function gaiaPrompt(question, attachmentNote) {
 }
 async function countPaidPurchases(path3) {
   try {
-    const text = await readFile18(path3, "utf8");
+    const text = await readFile19(path3, "utf8");
     return text.split(/\r?\n/).filter(Boolean).filter((line) => {
       const entry = asRecord3(parseJson4(line));
       const outcome = asRecord3(entry.record).outcome ?? entry.outcome;
@@ -90822,7 +91299,7 @@ async function comparatorPrompt(context) {
     return context.prompt;
   }
   const name = basename(context.attachmentPath);
-  await copyFile(context.attachmentPath, join26(context.runDir, name));
+  await copyFile(context.attachmentPath, join27(context.runDir, name));
   return `${context.prompt}
 
 An input file is available in the working directory at ./${name}`;
@@ -90917,10 +91394,10 @@ var init_harnesses = __esm({
         if (context.attachmentPath) {
           const name = basename(context.attachmentPath);
           await mkdir14(session.artifactsDir, { recursive: true });
-          await copyFile(context.attachmentPath, join26(session.artifactsDir, name));
+          await copyFile(context.attachmentPath, join27(session.artifactsDir, name));
           prompt = `${prompt}
 
-An input file is available at the session artifact path \`${name}\` (use read_file, or run_shell against ${join26(session.artifactsDir, name)}).`;
+An input file is available at the session artifact path \`${name}\` (use read_file, or run_shell against ${join27(session.artifactsDir, name)}).`;
         }
         const llm = context.testMode ? void 0 : await resolveLlmRuntime(session, {
           model: context.model,
@@ -90951,7 +91428,7 @@ An input file is available at the session artifact path \`${name}\` (use read_fi
           onMessage: (message) => appendConversationMessage(session, message)
         });
         const budget = asRecord3(result.summary.budget);
-        const trajectoryPath = join26(session.sessionDir, "messages.jsonl");
+        const trajectoryPath = join27(session.sessionDir, "messages.jsonl");
         return {
           final_message: String(result.summary.final_message ?? ""),
           turns: result.turns,
@@ -90962,7 +91439,7 @@ An input file is available at the session artifact path \`${name}\` (use read_fi
           knowledge_version: session.knowledge?.version,
           session_dir: session.sessionDir,
           artifacts_dir: session.artifactsDir,
-          paid_calls: await countPaidPurchases(join26(session.sessionDir, "purchases.jsonl")),
+          paid_calls: await countPaidPurchases(join27(session.sessionDir, "purchases.jsonl")),
           model_policy: llm?.models,
           compliance: await gradeTrajectoryFile(trajectoryPath).catch(() => void 0)
         };
@@ -91165,8 +91642,8 @@ var init_scorer = __esm({
 });
 
 // ../../packages/evals/dist/runner.js
-import { appendFile as appendFile5, mkdir as mkdir15, writeFile as writeFile8 } from "node:fs/promises";
-import { join as join27, resolve as resolve6 } from "node:path";
+import { appendFile as appendFile5, mkdir as mkdir15, writeFile as writeFile9 } from "node:fs/promises";
+import { join as join28, resolve as resolve6 } from "node:path";
 async function runGaiaBenchmark(options) {
   const log = options.log ?? (() => void 0);
   const harnesses = options.harnesses.map(resolveHarness);
@@ -91193,7 +91670,7 @@ async function runGaiaBenchmark(options) {
   const runId = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const resultsDir = resolve6(options.workspaceRoot, "evals", "gaia", runId);
   await mkdir15(resultsDir, { recursive: true });
-  const resultsPath = join27(resultsDir, "results.jsonl");
+  const resultsPath = join28(resultsDir, "results.jsonl");
   log(`GAIA ${options.tier}: ${runnable.length} questions, ${skipped.length} skipped (unsupported modality), results in ${resultsDir}`);
   const parallel = Math.max(1, options.parallel ?? 4);
   const rows = [];
@@ -91219,12 +91696,12 @@ async function runGaiaBenchmark(options) {
     harnesses: harnesses.map((harness) => summarizeHarness(harness, rows.filter((row) => row.harness === harness.name))),
     rows
   };
-  await writeFile8(join27(resultsDir, "report.json"), `${JSON.stringify(report, null, 2)}
+  await writeFile9(join28(resultsDir, "report.json"), `${JSON.stringify(report, null, 2)}
 `, "utf8");
   return report;
 }
 async function runOneQuestion(harness, question, resultsDir, options) {
-  const runDir = join27(resultsDir, harness.name, question.task_id);
+  const runDir = join28(resultsDir, harness.name, question.task_id);
   await mkdir15(runDir, { recursive: true });
   const prompt = gaiaPrompt(question);
   const started = Date.now();
@@ -91356,9 +91833,9 @@ var init_runner = __esm({
 });
 
 // ../../packages/evals/dist/tasks.js
-import { readFile as readFile19 } from "node:fs/promises";
+import { readFile as readFile20 } from "node:fs/promises";
 import { createHash as createHash7 } from "node:crypto";
-import { dirname as dirname13, join as join28 } from "node:path";
+import { dirname as dirname13, join as join29 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { homedir as homedir8 } from "node:os";
 async function loadTaskSet(name, options = {}) {
@@ -91380,10 +91857,10 @@ async function loadTaskSet(name, options = {}) {
   }
 }
 function tasksDir() {
-  return join28(dirname13(fileURLToPath2(import.meta.url)), "..", "tasks");
+  return join29(dirname13(fileURLToPath2(import.meta.url)), "..", "tasks");
 }
 async function loadUsageTasks() {
-  const raw = JSON.parse(await readFile19(join28(tasksDir(), "usage.json"), "utf8"));
+  const raw = JSON.parse(await readFile20(join29(tasksDir(), "usage.json"), "utf8"));
   return raw.tasks.map((task) => ({
     task_id: String(task.id),
     suite: "usage",
@@ -91395,7 +91872,7 @@ async function loadUsageTasks() {
     capability: typeof task.capability === "string" ? task.capability : void 0,
     expect_paid: task.expect_paid,
     file_name: typeof task.attachment === "string" ? task.attachment : void 0,
-    file_path: typeof task.attachment === "string" ? join28(tasksDir(), "attachments", task.attachment) : void 0
+    file_path: typeof task.attachment === "string" ? join29(tasksDir(), "attachments", task.attachment) : void 0
   }));
 }
 async function loadGaiaHard(options = {}) {
@@ -91421,13 +91898,13 @@ function gaiaToTask(question) {
   };
 }
 function defaultAssistantBenchCachePath() {
-  return process.env.OPENCROWD_ASSISTANTBENCH_CACHE ?? join28(homedir8(), ".cache", "opencrowd", "assistantbench", "validation.jsonl");
+  return process.env.OPENCROWD_ASSISTANTBENCH_CACHE ?? join29(homedir8(), ".cache", "opencrowd", "assistantbench", "validation.jsonl");
 }
 async function loadAssistantBench(options = {}) {
   const cachePath = defaultAssistantBenchCachePath();
   let text;
   try {
-    text = await readFile19(cachePath, "utf8");
+    text = await readFile20(cachePath, "utf8");
   } catch {
     options.log?.(`fetching ${ASSISTANTBENCH_ROWS_URL}`);
     const headers = options.hfToken ? { authorization: `Bearer ${options.hfToken}` } : {};
@@ -91438,9 +91915,9 @@ async function loadAssistantBench(options = {}) {
     const body = await response.json();
     text = `${(body.rows ?? []).map((item) => JSON.stringify(item.row)).join("\n")}
 `;
-    const { mkdir: mkdir21, writeFile: writeFile13 } = await import("node:fs/promises");
+    const { mkdir: mkdir21, writeFile: writeFile14 } = await import("node:fs/promises");
     await mkdir21(dirname13(cachePath), { recursive: true });
-    await writeFile13(cachePath, text, "utf8");
+    await writeFile14(cachePath, text, "utf8");
   }
   const rows = text.split(/\r?\n/).filter(Boolean).map((line) => JSON.parse(line));
   const selected = seededSample(rows, ASSISTANTBENCH_COUNT, `${options.seed ?? DEFAULT_SEED}:assistantbench`, (row) => String(row.id));
@@ -91496,9 +91973,9 @@ var init_tasks = __esm({
 });
 
 // ../../packages/evals/dist/scoring.js
-import { readFile as readFile20, stat } from "node:fs/promises";
+import { readFile as readFile21, stat as stat2 } from "node:fs/promises";
 import { resolve as resolveDns } from "node:dns/promises";
-import { join as join29 } from "node:path";
+import { join as join30 } from "node:path";
 async function scoreTask(task, finalMessage, context = {}) {
   const answer = extractAnswerText(finalMessage);
   const spec = task.scorer;
@@ -91543,17 +92020,17 @@ async function scoreTask(task, finalMessage, context = {}) {
         return { score: 0, correct: false, detail: "no artifacts dir" };
       }
       for (const name of spec.names) {
-        const path3 = join29(context.artifactsDir, name);
+        const path3 = join30(context.artifactsDir, name);
         let size5;
         try {
-          size5 = (await stat(path3)).size;
+          size5 = (await stat2(path3)).size;
         } catch {
           continue;
         }
         if (spec.min_bytes !== void 0 && size5 < spec.min_bytes) {
           return { score: 0, correct: false, detail: `${name} too small (${size5} bytes)` };
         }
-        const buffer2 = await readFile20(path3);
+        const buffer2 = await readFile21(path3);
         if (spec.image && !looksLikeImage(buffer2)) {
           return { score: 0, correct: false, detail: `${name} is not a PNG/JPEG/WebP` };
         }
@@ -91740,8 +92217,8 @@ var init_scoring = __esm({
 });
 
 // ../../packages/evals/dist/suite.js
-import { appendFile as appendFile6, mkdir as mkdir16, writeFile as writeFile9 } from "node:fs/promises";
-import { join as join30, resolve as resolve7 } from "node:path";
+import { appendFile as appendFile6, mkdir as mkdir16, writeFile as writeFile10 } from "node:fs/promises";
+import { join as join31, resolve as resolve7 } from "node:path";
 async function runSuite(options) {
   const log = options.log ?? (() => void 0);
   const harness = resolveHarness(options.harness ?? "opencrowd");
@@ -91756,7 +92233,7 @@ async function runSuite(options) {
   const runId = `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}${options.tag ? `-${slug(options.tag)}` : ""}`;
   const resultsDir = resolve7(options.resultsRoot, runId);
   await mkdir16(resultsDir, { recursive: true });
-  const resultsPath = join30(resultsDir, "results.jsonl");
+  const resultsPath = join31(resultsDir, "results.jsonl");
   log(`suite ${options.set}${options.tag ? ` [${options.tag}]` : ""}: ${tasks.length} tasks, knowledge=${options.knowledgeDir ?? "none"}, results in ${resultsDir}`);
   const limit = createLimiter3(Math.max(1, options.parallel ?? 3));
   const rows = await Promise.all(tasks.map((task, index2) => limit(async () => {
@@ -91780,14 +92257,14 @@ async function runSuite(options) {
     summary: summarize(rows),
     rows
   };
-  await writeFile9(join30(resultsDir, "report.json"), `${JSON.stringify(report, null, 2)}
+  await writeFile10(join31(resultsDir, "report.json"), `${JSON.stringify(report, null, 2)}
 `, "utf8");
-  await writeFile9(join30(resultsDir, "report.md"), `${renderSuiteReport(report)}
+  await writeFile10(join31(resultsDir, "report.md"), `${renderSuiteReport(report)}
 `, "utf8");
   return report;
 }
 async function runOneTask(harnessName, harness, task, resultsDir, runId, options) {
-  const runDir = join30(resultsDir, harnessName, task.task_id);
+  const runDir = join31(resultsDir, harnessName, task.task_id);
   await mkdir16(runDir, { recursive: true });
   const started = Date.now();
   let run;
@@ -91947,13 +92424,13 @@ var init_suite = __esm({
 });
 
 // ../../packages/evals/dist/evidence.js
-import { mkdir as mkdir17, readFile as readFile21, writeFile as writeFile10 } from "node:fs/promises";
+import { mkdir as mkdir17, readFile as readFile22, writeFile as writeFile11 } from "node:fs/promises";
 import { dirname as dirname14 } from "node:path";
 async function fetchCrowdCodeEvidence(options = {}) {
   const cachePath = options.cachePath;
   if (cachePath && options.useCache !== false) {
     try {
-      return JSON.parse(await readFile21(cachePath, "utf8"));
+      return JSON.parse(await readFile22(cachePath, "utf8"));
     } catch {
     }
   }
@@ -91966,7 +92443,7 @@ async function fetchCrowdCodeEvidence(options = {}) {
     if (exported) {
       if (cachePath) {
         await mkdir17(dirname14(cachePath), { recursive: true });
-        await writeFile10(cachePath, `${JSON.stringify(exported, null, 1)}
+        await writeFile11(cachePath, `${JSON.stringify(exported, null, 1)}
 `, "utf8");
       }
       return exported;
@@ -91997,7 +92474,7 @@ async function fetchCrowdCodeEvidence(options = {}) {
   };
   if (cachePath) {
     await mkdir17(dirname14(cachePath), { recursive: true });
-    await writeFile10(cachePath, `${JSON.stringify(bundle, null, 1)}
+    await writeFile11(cachePath, `${JSON.stringify(bundle, null, 1)}
 `, "utf8");
   }
   return bundle;
@@ -92144,8 +92621,8 @@ var init_evidence = __esm({
 
 // ../../packages/evals/dist/knowledge.js
 import { createHash as createHash8 } from "node:crypto";
-import { mkdir as mkdir18, readdir as readdir2, readFile as readFile22, writeFile as writeFile11 } from "node:fs/promises";
-import { dirname as dirname15, join as join31, relative as relative4 } from "node:path";
+import { mkdir as mkdir18, readdir as readdir3, readFile as readFile23, writeFile as writeFile12 } from "node:fs/promises";
+import { dirname as dirname15, join as join32, relative as relative4 } from "node:path";
 function approxTokens(text) {
   return Math.ceil(text.length / 4);
 }
@@ -92236,30 +92713,30 @@ function validateTree(tree, evidence) {
 async function writeTree(dir, tree, meta4) {
   await mkdir18(dir, { recursive: true });
   for (const [name, content] of Object.entries(tree)) {
-    const path3 = join31(dir, name);
+    const path3 = join32(dir, name);
     await mkdir18(dirname15(path3), { recursive: true });
-    await writeFile11(path3, content.endsWith("\n") ? content : `${content}
+    await writeFile12(path3, content.endsWith("\n") ? content : `${content}
 `, "utf8");
   }
-  await writeFile11(join31(dir, "meta.json"), `${JSON.stringify(meta4, null, 2)}
+  await writeFile12(join32(dir, "meta.json"), `${JSON.stringify(meta4, null, 2)}
 `, "utf8");
 }
 async function readTree(dir) {
   const tree = {};
   const walk4 = async (current) => {
-    for (const entry of await readdir2(current, { withFileTypes: true })) {
-      const path3 = join31(current, entry.name);
+    for (const entry of await readdir3(current, { withFileTypes: true })) {
+      const path3 = join32(current, entry.name);
       if (entry.isDirectory()) {
         await walk4(path3);
       } else if (entry.name.endsWith(".md")) {
-        tree[relative4(dir, path3)] = await readFile22(path3, "utf8");
+        tree[relative4(dir, path3)] = await readFile23(path3, "utf8");
       }
     }
   };
   await walk4(dir);
   let meta4;
   try {
-    meta4 = JSON.parse(await readFile22(join31(dir, "meta.json"), "utf8"));
+    meta4 = JSON.parse(await readFile23(join32(dir, "meta.json"), "utf8"));
   } catch {
     meta4 = void 0;
   }
@@ -92267,7 +92744,7 @@ async function readTree(dir) {
 }
 async function updateTreeMeta(dir, patch) {
   const { meta: meta4 } = await readTree(dir);
-  await writeFile11(join31(dir, "meta.json"), `${JSON.stringify({ ...meta4 ?? {}, ...patch }, null, 2)}
+  await writeFile12(join32(dir, "meta.json"), `${JSON.stringify({ ...meta4 ?? {}, ...patch }, null, 2)}
 `, "utf8");
 }
 async function proposeTree(options) {
@@ -92383,23 +92860,23 @@ var init_knowledge2 = __esm({
 });
 
 // ../../packages/evals/dist/evolve.js
-import { mkdir as mkdir19, readFile as readFile23, writeFile as writeFile12 } from "node:fs/promises";
-import { join as join32, resolve as resolve8 } from "node:path";
+import { mkdir as mkdir19, readFile as readFile24, writeFile as writeFile13 } from "node:fs/promises";
+import { join as join33, resolve as resolve8 } from "node:path";
 async function runEvolution(options) {
   const log = options.log ?? (() => void 0);
   const root = resolve8(options.resultsRoot);
-  const treesDir = join32(root, "trees");
-  const runsDir = join32(root, "runs");
+  const treesDir = join33(root, "trees");
+  const runsDir = join33(root, "runs");
   await mkdir19(treesDir, { recursive: true });
   await mkdir19(runsDir, { recursive: true });
-  const evidencePath = options.evidencePath ?? join32(root, "evidence", "crowdcode-evidence.json");
+  const evidencePath = options.evidencePath ?? join33(root, "evidence", "crowdcode-evidence.json");
   const evidence = await fetchCrowdCodeEvidence({ cachePath: evidencePath, useCache: !options.refreshEvidence, log });
   const digest = renderEvidenceDigest(evidence, { detailTop: 90, maxPointsPerService: 9 });
   const evidenceHash = hashContent(digest);
   log(`evidence: ${evidence.stats.services} services, ${evidence.stats.reviews} reviews, digest ~${Math.round(digest.length / 4)} tokens`);
   const heldin = await loadTaskSet("heldin", { hfToken: options.hfToken, log });
   const proposer = await buildProposerProviders(root, options.proposerModels);
-  const archivePath = join32(root, "archive.json");
+  const archivePath = join33(root, "archive.json");
   const archive = await readArchive(archivePath) ?? {
     started_at: (/* @__PURE__ */ new Date()).toISOString(),
     agent_model: options.agentModel,
@@ -92407,9 +92884,9 @@ async function runEvolution(options) {
     entries: []
   };
   const save = async () => {
-    await writeFile12(archivePath, `${JSON.stringify(archive, null, 2)}
+    await writeFile13(archivePath, `${JSON.stringify(archive, null, 2)}
 `, "utf8");
-    await writeFile12(join32(root, "frontier.md"), `${renderArchive(archive)}
+    await writeFile13(join33(root, "frontier.md"), `${renderArchive(archive)}
 `, "utf8");
   };
   const evaluate = async (entry, knowledgeDir) => {
@@ -92436,7 +92913,7 @@ async function runEvolution(options) {
   if (!archive.entries.some((entry) => entry.id === "baseline")) {
     const baseline = { id: "baseline", generation: 0, children: 0, status: "evaluated" };
     if (options.baselineReport) {
-      const report = JSON.parse(await readFile23(options.baselineReport, "utf8"));
+      const report = JSON.parse(await readFile24(options.baselineReport, "utf8"));
       const rows = report.rows.filter((row) => row.suite === "usage");
       baseline.report_dir = report.results_dir;
       baseline.metrics = metricsOfRows(rows);
@@ -92517,7 +92994,7 @@ async function runEvolution(options) {
   }
   const best = bestEntry(archive);
   if (best?.dir) {
-    await writeFile12(join32(root, "BEST"), `${best.dir}
+    await writeFile13(join33(root, "BEST"), `${best.dir}
 `, "utf8");
   }
   await save();
@@ -92550,9 +93027,9 @@ async function proposeCandidate(input2) {
         log: input2.log
       });
       const validation = validateTree(proposal.tree, input2.evidence);
-      const dir = join32(input2.treesDir, id);
+      const dir = join33(input2.treesDir, id);
       await mkdir19(dir, { recursive: true });
-      await writeFile12(join32(dir, "proposal.raw.txt"), proposal.rawResponse, "utf8");
+      await writeFile13(join33(dir, "proposal.raw.txt"), proposal.rawResponse, "utf8");
       if (!validation.ok) {
         errors = validation.errors;
         input2.log(`${id}: invalid (${validation.errors.join("; ")})`);
@@ -92639,7 +93116,7 @@ function metricsOfRows(rows) {
   };
 }
 async function casesFromReport(reportDir) {
-  const report = JSON.parse(await readFile23(join32(reportDir, "report.json"), "utf8"));
+  const report = JSON.parse(await readFile24(join33(reportDir, "report.json"), "utf8"));
   const cases = [];
   for (const row of report.rows) {
     cases.push({
@@ -92660,7 +93137,7 @@ async function casesFromReport(reportDir) {
 async function summarizeTrajectory(path3) {
   let text;
   try {
-    text = await readFile23(path3, "utf8");
+    text = await readFile24(path3, "utf8");
   } catch {
     return void 0;
   }
@@ -92692,7 +93169,7 @@ async function summarizeTrajectory(path3) {
   return steps.length > 0 ? steps.join(" -> ") : void 0;
 }
 async function buildProposerProviders(root, models) {
-  const session = await createOpenCrowdSession({ workspaceRoot: join32(root, "proposer"), approvalMode: "auto", shellEnabled: false });
+  const session = await createOpenCrowdSession({ workspaceRoot: join33(root, "proposer"), approvalMode: "auto", shellEnabled: false });
   const providers = /* @__PURE__ */ new Map();
   for (const model of new Set(models)) {
     const llm = await resolveLlmRuntime(session, { model, subagentModel: "off", nonInteractive: true });
@@ -92709,7 +93186,7 @@ async function buildProposerProviders(root, models) {
 }
 async function readArchive(path3) {
   try {
-    return JSON.parse(await readFile23(path3, "utf8"));
+    return JSON.parse(await readFile24(path3, "utf8"));
   } catch {
     return void 0;
   }
@@ -92854,8 +93331,8 @@ init_dist2();
 init_dist4();
 init_dist6();
 init_shared();
-import { copyFile as copyFile2, mkdir as mkdir20, readFile as readFile24, rm as rm3 } from "node:fs/promises";
-import { basename as basename2, join as join33 } from "node:path";
+import { copyFile as copyFile2, mkdir as mkdir20, readFile as readFile25, rm as rm3 } from "node:fs/promises";
+import { basename as basename2, join as join34 } from "node:path";
 import { createInterface as createInterface2 } from "node:readline/promises";
 import { stdin as input, stdout as output2 } from "node:process";
 
@@ -93228,14 +93705,14 @@ function parseUsdCents(data) {
 var BASE_USDC_CONTRACT = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
 var BASE_CHAIN_ID2 = 8453;
 var SUGGESTED_FUND_CENTS = 2e3;
-function usdcUnits(cents) {
-  return BigInt(Math.max(0, Math.round(cents))) * 10000n;
+function usdcUnits(cents2) {
+  return BigInt(Math.max(0, Math.round(cents2))) * 10000n;
 }
-function usdcTransferUri(address2, cents) {
-  return `ethereum:${BASE_USDC_CONTRACT}@${BASE_CHAIN_ID2}/transfer?address=${address2}&uint256=${usdcUnits(cents)}`;
+function usdcTransferUri(address2, cents2) {
+  return `ethereum:${BASE_USDC_CONTRACT}@${BASE_CHAIN_ID2}/transfer?address=${address2}&uint256=${usdcUnits(cents2)}`;
 }
-function metamaskDeepLink(address2, cents) {
-  return `https://metamask.app.link/send/${BASE_USDC_CONTRACT}@${BASE_CHAIN_ID2}/transfer?address=${address2}&uint256=${usdcUnits(cents)}`;
+function metamaskDeepLink(address2, cents2) {
+  return `https://metamask.app.link/send/${BASE_USDC_CONTRACT}@${BASE_CHAIN_ID2}/transfer?address=${address2}&uint256=${usdcUnits(cents2)}`;
 }
 async function qrTerminal(text) {
   const { toString: toString3 } = await import("qrcode");
@@ -93612,7 +94089,7 @@ function indent(text) {
 
 // src/tui/app.tsx
 init_dist2();
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 import { randomUUID as randomUUID9 } from "node:crypto";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { Box, render, Static, Text, useApp, useInput, usePaste, useStdout } from "ink";
@@ -93652,7 +94129,7 @@ function App({ session: initialSession, initialTestMode, initialTestSeed, defaul
   const runningRef = useRef(false);
   const inboxPausedRef = useRef(false);
   const [inboxRevision, setInboxRevision] = useState(0);
-  const inbox = useMemo(() => new FileSteeringInbox(join24(session.sessionDir, "inbox.json")), [session.sessionDir]);
+  const inbox = useMemo(() => new FileSteeringInbox(join25(session.sessionDir, "inbox.json")), [session.sessionDir]);
   const [activity, setActivity] = useState("");
   const [spinnerFrame, setSpinnerFrame] = useState(0);
   const [modal, setModal] = useState(null);
@@ -93729,11 +94206,11 @@ function App({ session: initialSession, initialTestMode, initialTestSeed, defaul
     const poll2 = async () => {
       try {
         const summary = await walletSummary();
-        const cents = summary.totalCents ?? Number.NaN;
-        if (cancelled || !Number.isFinite(cents)) {
+        const cents2 = summary.totalCents ?? Number.NaN;
+        if (cancelled || !Number.isFinite(cents2)) {
           return;
         }
-        if (cents > 0) {
+        if (cents2 > 0) {
           const budgetCents = session.budgetCents;
           if (!cancelled) {
             setWizard({ step: "done", funded: true, budgetCents });
@@ -93741,7 +94218,7 @@ function App({ session: initialSession, initialTestMode, initialTestSeed, defaul
           }
           return;
         }
-        setWizard((current) => current?.step === "fund" ? { ...current, balanceCents: Math.max(0, cents) } : current);
+        setWizard((current) => current?.step === "fund" ? { ...current, balanceCents: Math.max(0, cents2) } : current);
       } catch {
       }
     };
@@ -94030,9 +94507,9 @@ function App({ session: initialSession, initialTestMode, initialTestSeed, defaul
       if (modal.budget !== void 0) {
         if (isReturn) {
           try {
-            const cents = parseUsd(modal.budget);
-            if (cents <= modal.request.queryLimitCents || cents < modal.request.projectedCents) throw new Error("Enter a higher budget covering this call and committed spending.");
-            modal.resolve({ decision: "approve", queryBudgetCents: cents });
+            const cents2 = parseUsd(modal.budget);
+            if (cents2 <= modal.request.queryLimitCents || cents2 < modal.request.projectedCents) throw new Error("Enter a higher budget covering this call and committed spending.");
+            modal.resolve({ decision: "approve", queryBudgetCents: cents2 });
           } catch (e6) {
             push({ kind: "error", text: e6.message });
           }
@@ -94511,7 +94988,7 @@ async function main(argv) {
     case "--version":
     case "-v":
     case "version": {
-      const pkg2 = JSON.parse(await readFile24(new URL("../package.json", import.meta.url), "utf8"));
+      const pkg2 = JSON.parse(await readFile25(new URL("../package.json", import.meta.url), "utf8"));
       console.log(pkg2.version);
       return;
     }
@@ -94617,10 +95094,10 @@ async function headlessRunCommand(args) {
   if (attach) {
     const attachmentName = basename2(attach);
     await mkdir20(session.artifactsDir, { recursive: true });
-    await copyFile2(attach, join33(session.artifactsDir, attachmentName));
+    await copyFile2(attach, join34(session.artifactsDir, attachmentName));
     task = `${prompt}
 
-An input file is available at the session artifact path \`${attachmentName}\` (use read_file, or run_shell against ${join33(session.artifactsDir, attachmentName)}).`;
+An input file is available at the session artifact path \`${attachmentName}\` (use read_file, or run_shell against ${join34(session.artifactsDir, attachmentName)}).`;
   }
   const result = await runPersistentAgentTaskDetailed(session, task, {
     model: readOption(args, "--model"),
@@ -94644,7 +95121,7 @@ An input file is available at the session artifact path \`${attachmentName}\` (u
     final_message: result.summary.final_message ?? null,
     session_id: session.sessionId,
     session_dir: session.sessionDir,
-    trajectory_path: join33(session.sessionDir, "messages.jsonl"),
+    trajectory_path: join34(session.sessionDir, "messages.jsonl"),
     turns: result.turns,
     model_policy: session.models ?? null,
     usdc_spent_cents: {
@@ -94736,7 +95213,7 @@ async function ledgerCommand(args) {
   if (!sessionId) {
     throw new Error("no local sessions found");
   }
-  const rows = await readLedger(join33(process.cwd(), "sessions", sessionId, "ledger.csv"));
+  const rows = await readLedger(join34(process.cwd(), "sessions", sessionId, "ledger.csv"));
   printValue("Ledger", rows, {
     json: json3,
     pretty: renderTable(rows.map(asRecord), [
@@ -94773,7 +95250,7 @@ async function resumeCommand(args) {
       } catch (e6) {
         if (!(e6 instanceof SpendingDeclined)) throw e6;
       }
-      await rm3(join33(session.sessionDir, "query-checkpoint.json"), { force: true });
+      await rm3(join34(session.sessionDir, "query-checkpoint.json"), { force: true });
       console.log("Query declined. Nothing was paid for the pending call.");
       return;
     }
@@ -94925,7 +95402,7 @@ async function evalsSuiteCommand(rest) {
   const report = await runSuite2({
     set: set3,
     harness: readOption(rest, "--harness") ?? "opencrowd",
-    resultsRoot: readOption(rest, "--out") ?? join33(process.cwd(), "evals", "suite"),
+    resultsRoot: readOption(rest, "--out") ?? join34(process.cwd(), "evals", "suite"),
     tag: readOption(rest, "--tag"),
     knowledgeDir: readOption(rest, "--knowledge"),
     hfToken: readOption(rest, "--hf-token") ?? process.env.HF_TOKEN,
@@ -94944,7 +95421,7 @@ async function evalsSuiteCommand(rest) {
 async function evalsEvolveCommand(rest) {
   const { runEvolution: runEvolution2, renderArchive: renderArchive2 } = await Promise.resolve().then(() => (init_dist7(), dist_exports));
   const { archive, best } = await runEvolution2({
-    resultsRoot: readOption(rest, "--out") ?? join33(process.cwd(), "evals", "evolve"),
+    resultsRoot: readOption(rest, "--out") ?? join34(process.cwd(), "evals", "evolve"),
     evidencePath: readOption(rest, "--evidence"),
     refreshEvidence: rest.includes("--refresh-evidence"),
     generations: Number(readOption(rest, "--generations") ?? 2),