viveworker 0.6.3 → 0.7.0-beta.1

package/README.md

@@ -190,6 +190,28 @@ Typical commands:
 
 The current public File Share surface is focused on private static artefact delivery from your Mac and your agents.
 
+## Experimental: Deliverable Unlock Flow
+
+`viveworker` is also experimenting with a testnet-only unlock flow for agent deliverables.
+
+The idea is simple:
+
+- an agent receives a task
+- the work runs locally
+- the result is handed back through File Share
+- the requester unlocks the deliverable on testnet
+
+This is not meant as a generic "payments feature."
+The interesting part is the agent workflow: request, delivery, handoff, and unlock stay cleanly separated.
+
+Current status:
+
+- experimental
+- testnet only
+- feedback wanted from people already building agent-to-agent workflows
+
+The goal is to learn whether deliverable unlock feels like a natural settlement point for real agent tasks.
+
 ## Claude Desktop Integration
 
 During `npx viveworker setup`, viveworker checks whether Claude Desktop is already installed and, if so, automatically installs hook entries into `~/.claude/settings.json` (`UserPromptSubmit`, `Notification`, `Stop`, `PermissionRequest`, `PreToolUse`, `PostToolUse`, `PostToolUseFailure`, `SessionEnd`).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "viveworker",
-  "version": "0.6.3",
+  "version": "0.7.0-beta.1",
   "description": "Open mobile control surface for Codex, Claude, Thread Sharing, File Share, Moltbook, and A2A tasks on your trusted LAN.",
   "author": "Yuta Hoshino <hoshino.lireneo@gmail.com>",
   "license": "MIT",

package/scripts/share-cli.mjs

@@ -7,12 +7,18 @@
  *   .html .htm .pdf .png .jpg .jpeg .gif .webp .csv
  *
  * Commands:
- *   viveworker share upload <file> [--password <pw>] [--expires-days <n>] [--no-optimize] [--json]
+ *   viveworker share upload <file> [--password <pw>] [--price <usd> --pay-to <0x…>] [--expires-days <n>] [--no-optimize] [--json]
  *   viveworker share list [--json]
- *   viveworker share update <slug> [--password <pw>] [--no-password] [--expires-days <n>] [--json]
+ *   viveworker share update <slug> [--password <pw>] [--no-password] [--price <usd>] [--no-price] [--pay-to <0x…>] [--expires-days <n>] [--json]
  *   viveworker share link <slug> --password <pw> [--ttl-hours <n>] [--json]
  *   viveworker share delete <slug>
  *
+ * Paid shares: `--price 0.10 --pay-to 0x…` attaches an x402 payment gate.
+ * Buyers hit HTTP 402 on first view, pay USDC on Base (testnet or mainnet
+ * depending on worker config), and the worker serves the content. Any
+ * x402-compatible client (e.g. `x402-fetch` on npm) can pay; viveworker
+ * itself does not currently ship a buyer wallet.
+ *
  * Environment overrides:
  *   VIVEWORKER_SHARE_URL — share worker base URL (default: https://share.viveworker.com)
  */
@@ -71,9 +77,9 @@ export async function runShareCli(args) {
 
 function printHelp() {
   console.log("Commands:");
-  console.log("  viveworker share upload <file> [--password <pw>] [--expires-days <n>] [--no-optimize] [--json]");
-  console.log("  viveworker share list [--json]");
-  console.log("  viveworker share update <slug> [--password <pw>] [--no-password] [--expires-days <n>] [--json]");
+  console.log("  viveworker share upload <file> [--password <pw>] [--price <usd> --pay-to <0x…>] [--expires-days <n>] [--no-optimize] [--json]");
+  console.log("  viveworker share list [--metrics] [--json]");
+  console.log("  viveworker share update <slug> [--password <pw>] [--no-password] [--price <usd>] [--no-price] [--pay-to <0x…>] [--expires-days <n>] [--json]");
   console.log("  viveworker share link <slug> --password <pw> [--ttl-hours <n>] [--json]");
   console.log("  viveworker share delete <slug>");
   console.log("");
@@ -81,9 +87,17 @@ function printHelp() {
   console.log("CSV files are rendered as an HTML table on view; append ?raw=1 for bytes.");
   console.log("HTML uploads are optimized by default when possible (use --no-optimize to disable).");
   console.log("");
+  console.log("Paid shares (x402 / USDC on Base — CLOSED BETA, testnet only): --price 0.10 --pay-to 0x…");
+  console.log("  Buyers use any x402-compatible client (e.g. `x402-fetch` on npm).");
+  console.log("  --price and --password are mutually exclusive on a single share.");
+  console.log("  `share list --metrics` prints 24h / 7d payment-flow stats for your shares.");
+  console.log("");
   console.log("Credentials are read from ~/.viveworker/a2a.env (same as `viveworker a2a`).");
 }
 
+const PRICE_REGEX = /^\d+(\.\d{1,6})?$/;
+const ETH_ADDR_REGEX = /^0x[0-9a-fA-F]{40}$/;
+
 // ---------------------------------------------------------------------------
 // upload
 // ---------------------------------------------------------------------------
@@ -119,6 +133,8 @@ async function handleUpload(args) {
 
   const password = flags["password"] || "";
   const expiresDays = flags["expires-days"] || flags["expiresDays"] || "";
+  const price = flags["price"] || "";
+  const payTo = flags["pay-to"] || flags["payTo"] || "";
 
   if (password && password.length > 256) {
     throw new Error("Password too long (max 256 chars)");
@@ -130,6 +146,24 @@ async function handleUpload(args) {
     }
   }
 
+  // --price / --pay-to are both required or both absent.
+  const anyPrice = Boolean(price);
+  const anyPayTo = Boolean(payTo);
+  if (anyPrice !== anyPayTo) {
+    throw new Error("--price and --pay-to must be supplied together");
+  }
+  if (anyPrice) {
+    if (!PRICE_REGEX.test(price)) {
+      throw new Error("--price must be a decimal with ≤6 fractional digits (e.g. `0.10`)");
+    }
+    if (!ETH_ADDR_REGEX.test(payTo)) {
+      throw new Error("--pay-to must be a 0x-prefixed 40-hex-char EVM address");
+    }
+    if (password) {
+      throw new Error("--price and --password cannot be combined on a single share");
+    }
+  }
+
   const { apiKey, userId, shareUrl } = await resolveCredentials();
 
   const originalBytes = await fs.readFile(absolute);
@@ -150,6 +184,10 @@ async function handleUpload(args) {
   form.set("file", file);
   if (password) form.set("password", password);
   if (expiresDays) form.set("expiresDays", String(expiresDays));
+  if (anyPrice) {
+    form.set("price", price);
+    form.set("payTo", payTo);
+  }
 
   const res = await fetchWithTimeout(`${shareUrl}/api/upload`, {
     method: "POST",
@@ -185,8 +223,11 @@ async function handleUpload(args) {
   console.log(`   ${body.url}`);
   console.log("");
   if (body.hasPassword) console.log(`   🔒 Password-protected`);
+  if (body.price && body.payTo) {
+    console.log(`   💰 Paid — ${formatUsdc(body.price)} USDC on ${body.network || "?"} → ${body.payTo}`);
+  }
   if (body.expiresAtMs) console.log(`   ⏱  Expires ${new Date(body.expiresAtMs).toISOString()}`);
-  if (body.hasPassword || body.expiresAtMs) console.log("");
+  if (body.hasPassword || body.price || body.expiresAtMs) console.log("");
   console.log(`   Slug: ${body.slug}`);
   console.log(`   Delete: viveworker share delete ${body.slug}`);
   if (body.quota) {
@@ -294,25 +335,51 @@ function stringifyForHtmlScriptTag(value) {
 
 async function handleList(args) {
   const flags = parseFlags(args);
+  const wantsMetrics = Boolean(flags.metrics);
   const { apiKey, userId, shareUrl } = await resolveCredentials();
 
-  const res = await fetchWithTimeout(`${shareUrl}/api/list`, {
+  // Fire both requests in parallel when --metrics is set; the file list is
+  // authoritative, the metrics bucket is best-effort (it 501s when the
+  // worker's CF_ACCOUNT_ID / CF_API_TOKEN secrets aren't configured).
+  const listReq = fetchWithTimeout(`${shareUrl}/api/list`, {
     method: "GET",
-    headers: {
-      "x-a2a-user": userId,
-      "x-a2a-key": apiKey,
-    },
+    headers: { "x-a2a-user": userId, "x-a2a-key": apiKey },
   }, 30_000);
-
+  const metricsReq = wantsMetrics
+    ? fetchWithTimeout(`${shareUrl}/api/metrics`, {
+        method: "GET",
+        headers: { "x-a2a-user": userId, "x-a2a-key": apiKey },
+      }, 30_000).catch((err) => ({ _netErr: String(err?.message || err) }))
+    : null;
+
+  const res = await listReq;
   const body = await readJson(res);
   if (!res.ok || body.error) {
     throw new Error(formatApiError("List", res.status, body));
   }
 
+  let metricsBody = null;
+  let metricsErr = null;
+  if (metricsReq) {
+    const mRes = await metricsReq;
+    if (mRes && mRes._netErr) {
+      metricsErr = `metrics fetch failed: ${mRes._netErr}`;
+    } else {
+      metricsBody = await readJson(mRes);
+      if (!mRes.ok || metricsBody?.error) {
+        metricsErr = formatApiError("Metrics", mRes.status, metricsBody);
+        metricsBody = null;
+      }
+    }
+  }
+
   const items = body.items || [];
 
   if (flags.json) {
-    console.log(JSON.stringify(body, null, 2));
+    const combined = wantsMetrics
+      ? { ...body, metrics: metricsBody, metricsError: metricsErr }
+      : body;
+    console.log(JSON.stringify(combined, null, 2));
     return;
   }
 
@@ -324,6 +391,7 @@ async function handleList(args) {
     } else {
       console.log("(no uploads yet)");
     }
+    if (wantsMetrics) printMetricsSection(metricsBody, metricsErr);
     return;
   }
 
@@ -335,13 +403,77 @@ async function handleList(args) {
   for (const item of items) {
     const age = formatRelative(now - (item.createdAtMs || now));
     const size = formatSize(item.size || 0);
-    const lockIcon = item.hasPassword ? "🔒" : "  ";
+    const gateIcon = item.hasPassword
+      ? "🔒"
+      : item.price
+      ? "💰"
+      : "  ";
     const expiry = item.expiresAtMs ? ` · exp ${new Date(item.expiresAtMs).toISOString().slice(0, 10)}` : "";
-    console.log(`  ${lockIcon} ${item.slug}  ${size.padStart(8)}  ${age.padStart(10)}${expiry}`);
+    console.log(`  ${gateIcon} ${item.slug}  ${size.padStart(8)}  ${age.padStart(10)}${expiry}`);
     console.log(`     ${item.url}`);
     if (item.originalName) console.log(`     ${item.originalName}`);
+    if (item.price && item.payTo) {
+      console.log(`     💰 ${formatUsdc(item.price)} USDC on ${item.network || "?"} → ${item.payTo}`);
+    }
     console.log("");
   }
+
+  if (wantsMetrics) printMetricsSection(metricsBody, metricsErr);
+}
+
+// Pretty-prints the Analytics Engine summary returned by GET /api/metrics.
+// Kept inline with handleList because it's only invoked from there; lifting it
+// into its own subcommand would duplicate auth + formatters for no real gain.
+function printMetricsSection(metrics, err) {
+  console.log("Paid-share metrics");
+  if (err) {
+    console.log(`  ⚠ ${err}`);
+    console.log("");
+    return;
+  }
+  if (!metrics) {
+    console.log("  ⚠ no data returned from /api/metrics");
+    console.log("");
+    return;
+  }
+  const networkLabel = metrics.network ? ` on ${metrics.network}` : "";
+  console.log(`  (x402 closed beta${networkLabel})`);
+  console.log("");
+  const labels = {
+    upload_paid: "paid shares uploaded",
+    "402_served": "402 responses served (GET)",
+    "402_served_head": "402 responses served (HEAD)",
+    paid_view: "verified paid views",
+    paid_cookie_hit: "paid session reloads",
+    verify_failed: "verification rejections",
+    facilitator_unavailable: "facilitator unreachable",
+    settle_failed: "async settle failures",
+  };
+  const pad = Math.max(...Object.values(labels).map((s) => s.length));
+  const row = (label, d, w) => {
+    const padded = label.padEnd(pad);
+    const dStr = String(d).padStart(6);
+    const wStr = String(w).padStart(6);
+    console.log(`  ${padded}   24h ${dStr}   · 7d ${wStr}`);
+  };
+  for (const [k, label] of Object.entries(labels)) {
+    row(label, metrics.last24h?.[k] ?? 0, metrics.last7d?.[k] ?? 0);
+  }
+  const perSlug = Array.isArray(metrics.perSlug7d) ? metrics.perSlug7d : [];
+  if (perSlug.length > 0) {
+    console.log("");
+    console.log(`  Per-share (last 7d, top ${Math.min(5, perSlug.length)}):`);
+    for (const entry of perSlug.slice(0, 5)) {
+      const c = entry.counts || {};
+      const views = (c.paid_view || 0) + (c.paid_cookie_hit || 0);
+      const fails = (c.verify_failed || 0) + (c.facilitator_unavailable || 0) + (c.settle_failed || 0);
+      const fourOhTwos = (c["402_served"] || 0) + (c["402_served_head"] || 0);
+      console.log(
+        `    ${entry.slug}  views=${views}  402=${fourOhTwos}  fails=${fails}`
+      );
+    }
+  }
+  console.log("");
 }
 
 // ---------------------------------------------------------------------------
@@ -353,7 +485,7 @@ async function handleUpdate(args) {
   const slug = flags._[0];
   if (!slug) {
     throw new Error(
-      "Usage: viveworker share update <slug> [--password <pw>] [--no-password] [--expires-days <n>]"
+      "Usage: viveworker share update <slug> [--password <pw>] [--no-password] [--price <usd>] [--no-price] [--pay-to <0x…>] [--expires-days <n>]"
     );
   }
   if (!/^[A-Za-z0-9]+$/.test(slug)) {
@@ -364,13 +496,24 @@ async function handleUpdate(args) {
   const hasNoPassword = Object.prototype.hasOwnProperty.call(flags, "no-password");
   const hasExpires = Object.prototype.hasOwnProperty.call(flags, "expires-days") ||
     Object.prototype.hasOwnProperty.call(flags, "expiresDays");
+  const hasPrice = Object.prototype.hasOwnProperty.call(flags, "price");
+  const hasNoPrice = Object.prototype.hasOwnProperty.call(flags, "no-price") ||
+    Object.prototype.hasOwnProperty.call(flags, "noPrice");
+  const hasPayTo = Object.prototype.hasOwnProperty.call(flags, "pay-to") ||
+    Object.prototype.hasOwnProperty.call(flags, "payTo");
 
   if (hasPassword && hasNoPassword) {
     throw new Error("Pass either --password OR --no-password, not both");
   }
-  if (!hasPassword && !hasNoPassword && !hasExpires) {
+  if (hasPrice && hasNoPrice) {
+    throw new Error("Pass either --price OR --no-price, not both");
+  }
+  if (hasPrice && hasPassword) {
+    throw new Error("--price and --password cannot be combined on a single share");
+  }
+  if (!hasPassword && !hasNoPassword && !hasExpires && !hasPrice && !hasNoPrice && !hasPayTo) {
     throw new Error(
-      "Nothing to update — specify at least one of --password <pw>, --no-password, --expires-days <n>"
+      "Nothing to update — specify at least one of --password <pw>, --no-password, --price <usd>, --no-price, --pay-to <0x…>, --expires-days <n>"
     );
   }
 
@@ -389,6 +532,42 @@ async function handleUpdate(args) {
     body.password = null;
   }
 
+  if (hasPrice) {
+    const pv = flags.price;
+    if (typeof pv !== "string" || pv.length === 0) {
+      throw new Error("--price requires a value (use --no-price to clear)");
+    }
+    if (!PRICE_REGEX.test(pv)) {
+      throw new Error("--price must be a decimal with ≤6 fractional digits (e.g. `0.10`)");
+    }
+    body.price = pv;
+    // --pay-to is only required on first set; the worker rejects with
+    // `payTo-required-on-first-price` if the share had no payTo before, so
+    // let it do the policy enforcement. But if the user passed --pay-to
+    // alongside --price, thread it through now.
+    if (hasPayTo) {
+      const addr = flags["pay-to"] || flags["payTo"];
+      if (typeof addr !== "string" || !ETH_ADDR_REGEX.test(addr)) {
+        throw new Error("--pay-to must be a 0x-prefixed 40-hex-char EVM address");
+      }
+      body.payTo = addr;
+    }
+  } else if (hasNoPrice) {
+    body.price = null;
+    if (hasPayTo) {
+      throw new Error("--no-price clears both price and payTo; drop --pay-to when removing the gate");
+    }
+  } else if (hasPayTo) {
+    // Change recipient only — does not rotate paymentSalt; existing paid
+    // sessions keep working. Worker rejects this when the share has no
+    // price gate attached.
+    const addr = flags["pay-to"] || flags["payTo"];
+    if (typeof addr !== "string" || !ETH_ADDR_REGEX.test(addr)) {
+      throw new Error("--pay-to must be a 0x-prefixed 40-hex-char EVM address");
+    }
+    body.payTo = addr;
+  }
+
   if (hasExpires) {
     const raw = flags["expires-days"] || flags["expiresDays"];
     const n = Number(raw);
@@ -430,6 +609,14 @@ async function handleUpdate(args) {
   } else if (hasNoPassword) {
     console.log(`   🔓 Password removed`);
   }
+  if (respBody.price && respBody.payTo) {
+    const rotated = hasPrice ? " (paid sessions invalidated)" : "";
+    console.log(
+      `   💰 Paid — ${formatUsdc(respBody.price)} USDC on ${respBody.network || "?"} → ${respBody.payTo}${rotated}`
+    );
+  } else if (hasNoPrice) {
+    console.log(`   💸 Payment gate removed`);
+  }
   if (respBody.expiresAtMs) {
     console.log(`   ⏱  Expires ${new Date(respBody.expiresAtMs).toISOString()}`);
   }
@@ -575,6 +762,42 @@ function formatApiError(op, status, body) {
       return `${op} failed (${status}): share has no password — no link token needed, just share the URL directly`;
     case "invalid-ttlHours":
       return `${op} failed (${status}): --ttl-hours must be between 1 and ${body.maxHours || 168}`;
+    // x402 / paid-share error codes — thrown by the worker on upload,
+    // PATCH, or view. Keep the messages actionable; agents read these
+    // back to the user verbatim.
+    case "invalid-price":
+      return `${op} failed (${status}): --price must be a decimal with ≤6 fractional digits (e.g. \`0.10\`)`;
+    case "price-out-of-range":
+      return `${op} failed (${status}): price must be between $${formatUsdc(body.minAtomic || "10000")} and $${formatUsdc(body.maxAtomic || "1000000000")}`;
+    case "invalid-payTo":
+      return `${op} failed (${status}): --pay-to must be a 0x-prefixed 40-hex-char EVM address`;
+    case "price-payTo-both-required":
+      return `${op} failed (${status}): both --price and --pay-to must be supplied together`;
+    case "price-and-password-mutually-exclusive":
+      return `${op} failed (${status}): --price and --password cannot be combined on a single share`;
+    case "payTo-without-price":
+      return `${op} failed (${status}): cannot set --pay-to on a free share — use --price together with --pay-to to add the gate first`;
+    case "payTo-cannot-be-cleared-alone":
+      return `${op} failed (${status}): --no-price clears both price and payTo; clearing payTo alone is not supported`;
+    case "payment-network-not-configured":
+      return `${op} failed (${status}): the worker's X402_NETWORK var is not set to a supported chain (base / base-sepolia)`;
+    case "payment-required":
+      return `${op} failed (${status}): this share requires payment (x402). Use an x402-compatible client (e.g. \`x402-fetch\` on npm) to pay.`;
+    case "payment-verification-failed":
+    case "malformed-x-payment":
+      return `${op} failed (${status}): payment verification failed — the facilitator rejected the X-PAYMENT header`;
+    case "facilitator-unavailable":
+      return `${op} failed (${status}): x402 facilitator is unreachable — try again shortly`;
+    case "paid-shares-closed-beta": {
+      // Closed-beta gate on --price / --pay-to uploads and PATCHes while x402
+      // is pinned to testnet. The hint + network come from the worker so the
+      // message stays accurate even if we flip to mainnet.
+      const net = body?.network ? ` (network: ${body.network})` : "";
+      const hint = body?.hint ? `\n  hint: ${body.hint}` : "";
+      return `${op} failed (${status}): paid shares are in closed beta${net}.${hint}`;
+    }
+    case "metrics-not-configured":
+      return `${op} failed (${status}): metrics endpoint is not configured on the worker (missing CF_ACCOUNT_ID / CF_API_TOKEN secrets). Ask the operator to set them.`;
     default:
       return `${op} failed (${status}): ${code || body?.statusText || "unknown error"}`;
   }
@@ -670,6 +893,26 @@ function formatSize(bytes) {
   return `${(bytes / (1024 * 1024)).toFixed(2)} MB`;
 }
 
+// USDC uses 6-decimals. `atomic` is a stringified integer ("100000" = $0.10).
+// Returns a human-facing decimal with at least two fractional digits and
+// trailing zeros beyond that trimmed (so "1000000" → "1.00", "123456" →
+// "0.123456", "12" → "0.000012"). Accepts either strings or bigints; falls
+// back to "0.00" on anything unparseable so we never crash the CLI output
+// on a malformed server response.
+function formatUsdc(atomic) {
+  let n;
+  try {
+    n = BigInt(String(atomic ?? "0"));
+  } catch {
+    return "0.00";
+  }
+  if (n < 0n) n = -n;
+  const whole = n / 1_000_000n;
+  const frac = (n % 1_000_000n).toString().padStart(6, "0").replace(/0+$/u, "");
+  if (!frac) return `${whole}.00`;
+  return `${whole}.${frac.padEnd(2, "0")}`;
+}
+
 function formatRelative(ms) {
   const sec = Math.floor(ms / 1000);
   if (sec < 60) return `${sec}s ago`;

package/web/app.css

@@ -623,12 +623,15 @@ code {
   white-space: nowrap;
 }
 
+/* When a badge renders an SVG icon instead of a text label (e.g. the
+ * password / paid markers on the File Share settings page), tighten the
+ * padding and size the icon to match the surrounding line height. The SVG
+ * inherits color via currentColor, so the badge's `color` rule drives it. */
 .settings-compose-badge svg {
   width: 0.85rem;
   height: 0.85rem;
   display: block;
 }
-
 .settings-compose-badge:has(> svg) {
   padding: 0.18rem 0.3rem;
 }
@@ -643,6 +646,13 @@ code {
   color: rgba(190, 160, 255, 0.92);
 }
 
+/* Paid-share marker on the A2A Share settings page. Amber tone echoes the
+ * 💰 emoji and the CLOSED BETA banner on the 402 HTML. */
+.settings-compose-badge--paid {
+  background: rgba(240, 180, 40, 0.2);
+  color: rgba(255, 210, 110, 0.95);
+}
+
 .settings-compose-entry {
   display: flex;
   flex-direction: column;

package/web/app.js

@@ -3316,7 +3316,7 @@ function renderSettingsDevicePage(context) {
           </div>
           <div class="settings-command-card">
             <span class="settings-command-card__label">${escapeHtml(L("settings.device.addAnother.commandLabel"))}</span>
-            <code class="settings-command-card__value">npx viveworker setup --pair</code>
+            <code class="settings-command-card__value">npx viveworker pair</code>
           </div>
         </div>
       </section>
@@ -3619,10 +3619,27 @@ function renderSettingsA2aSharePage(context) {
   const visible = items.slice(0, visibleCount);
   const hasMore = items.length > visibleCount;
   const filesList = visible.map((item) => {
+    // Badges use SVG icons (see renderIcon "lock" / "coin") to match the
+    // rest of the settings UI. `title` drives the hover tooltip;
+    // `aria-label` names the span for screen readers since the SVG itself
+    // is decorative.
     const passwordLabel = L("settings.a2aShare.passwordProtected");
     const lock = item.hasPassword
       ? `<span class="settings-compose-badge settings-compose-badge--reply" role="img" title="${escapeHtml(passwordLabel)}" aria-label="${escapeHtml(passwordLabel)}">${renderIcon("lock")}</span>`
       : "";
+    // Paid-share badge. `price` is atomic USDC (6-decimals) on the item.
+    // Mutually exclusive with hasPassword at upload time, so the two badges
+    // never both render, but the HTML doesn't assume that — it just renders
+    // whichever are set.
+    const paidLabel = item.price
+      ? L("settings.a2aShare.paidShare", {
+          price: formatUsdcAtomic(item.price),
+          network: item.network || "?",
+        })
+      : "";
+    const paid = item.price
+      ? `<span class="settings-compose-badge settings-compose-badge--paid" role="img" title="${escapeHtml(paidLabel)}" aria-label="${escapeHtml(paidLabel)}">${renderIcon("coin")}</span>`
+      : "";
     const label = escapeHtml(item.originalName || item.slug);
     const link = item.url
       ? `<a href="${escapeHtml(item.url)}" target="_blank" rel="noopener">${label}</a>`
@@ -3641,7 +3658,7 @@ function renderSettingsA2aSharePage(context) {
         <span class="settings-icon-entry__body">
           <span class="settings-icon-entry__title-row">
             <span class="settings-compose-entry__title">${link}</span>
-            ${lock}
+            ${lock}${paid}
           </span>
           ${meta ? `<span class="settings-compose-entry__meta muted">${meta}</span>` : ""}
         </span>
@@ -3718,6 +3735,24 @@ function formatExpiresIn(ms) {
   return rtf ? rtf.format(hr, "hour") : `in ${hr}h`;
 }
 
+// USDC has 6 decimals, stored as atomic units in a string (e.g. "100000" ⇒
+// $0.10). Mirrors formatUsdc() in scripts/share-cli.mjs — kept as a small
+// standalone helper rather than a shared module since the app bundle has no
+// build step that pulls from scripts/.
+function formatUsdcAtomic(atomic) {
+  let n;
+  try {
+    n = BigInt(String(atomic ?? "0"));
+  } catch {
+    return "0.00";
+  }
+  if (n < 0n) n = -n;
+  const whole = n / 1_000_000n;
+  const frac = (n % 1_000_000n).toString().padStart(6, "0").replace(/0+$/u, "");
+  if (!frac) return `${whole}.00`;
+  return `${whole}.${frac.padEnd(2, "0")}`;
+}
+
 function renderSettingsInfoRow(label, value, options = {}) {
   const rowClassName = ["settings-info-row", options.rowClassName || ""].filter(Boolean).join(" ");
   const valueClassName = ["settings-info-row__value", options.valueClassName || ""].filter(Boolean).join(" ");
@@ -6860,6 +6895,8 @@ function renderIcon(name) {
       return `<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round"><path d="m6.8 12.5 3.2 3.2 7.2-7.4"/></svg>`;
     case "lock":
       return `<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><rect x="5.5" y="10.5" width="13" height="9" rx="2"/><path d="M8 10.5V7.5a4 4 0 0 1 8 0v3"/></svg>`;
+    case "coin":
+      return `<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="8.5"/><path d="M12 7v10"/><path d="M14.5 9.3c-.6-.8-1.5-1.3-2.5-1.3-1.4 0-2.5 1-2.5 2.2 0 1.3 1.1 2 2.5 2s2.5.7 2.5 2c0 1.2-1.1 2.2-2.5 2.2-1 0-1.9-.5-2.5-1.3"/></svg>`;
     case "back":
       return `<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m15 18-6-6 6-6"/></svg>`;
     case "chevron-down":

package/web/i18n.js

@@ -333,8 +333,8 @@ const translations = {
     "settings.device.section.current": "This device",
     "settings.device.section.other": "Other trusted devices",
     "settings.device.thisDevice": "This device",
-    "settings.device.emptyCurrent": "This device is not listed right now.",
-    "settings.device.emptyOther": "No other trusted devices are active.",
+    "settings.device.emptyCurrent": "This device is not in the active trusted-device list right now. Its previous trust may have expired or been revoked. Re-pair it from your Mac with `npx viveworker pair` if needed.",
+    "settings.device.emptyOther": "No other trusted devices are active. Expired or revoked devices are hidden here. Re-pair another device from your Mac with `npx viveworker pair` if needed.",
     "settings.device.addAnother.title": "Add another device",
     "settings.device.addAnother.heading": "Add a new device or browser",
     "settings.device.addAnother.copy":
@@ -455,6 +455,7 @@ const translations = {
     "settings.a2aShare.days": ({ count }) => `${count} ${count === 1 ? "day" : "days"}`,
     "settings.a2aShare.ratePerHour": ({ count }) => `${count} / hour`,
     "settings.a2aShare.passwordProtected": "Password protected",
+    "settings.a2aShare.paidShare": ({ price, network }) => `Paid — ${price} USDC on ${network}`,
     "settings.a2aShare.showMore": "{count} more…",
     "settings.a2aShare.showLess": "Show less",
     "settings.a2aShare.expired": "Expired",
@@ -1111,8 +1112,8 @@ const translations = {
     "settings.device.section.current": "この端末",
     "settings.device.section.other": "他の信頼済み端末",
     "settings.device.thisDevice": "この端末",
-    "settings.device.emptyCurrent": "この端末の情報はまだ表示できません。",
-    "settings.device.emptyOther": "他に有効な信頼済み端末はありません。",
+    "settings.device.emptyCurrent": "この端末は現在の有効な信頼済み端末一覧には入っていません。以前の信頼期限が切れたか、削除された可能性があります。必要なら Mac で `npx viveworker pair` を実行して再ペアリングしてください。",
+    "settings.device.emptyOther": "他に有効な信頼済み端末はありません。期限切れまたは削除済みの端末はここには表示されません。必要なら Mac で `npx viveworker pair` を実行して再ペアリングしてください。",
     "settings.device.addAnother.title": "端末を追加する",
     "settings.device.addAnother.heading": "新しい端末 / ブラウザを追加",
     "settings.device.addAnother.copy":
@@ -1233,6 +1234,7 @@ const translations = {
     "settings.a2aShare.days": ({ count }) => `${count} 日`,
     "settings.a2aShare.ratePerHour": ({ count }) => `${count} 件 / 1 時間`,
     "settings.a2aShare.passwordProtected": "パスワード保護",
+    "settings.a2aShare.paidShare": ({ price, network }) => `有料 — ${price} USDC (${network})`,
     "settings.a2aShare.showMore": "さらに {count} 件…",
     "settings.a2aShare.showLess": "閉じる",
     "settings.a2aShare.expired": "期限切れ",