warpmetal 0.4.1 → 0.4.2

package/README.md

@@ -109,10 +109,26 @@ warpmetal checkout submit \
 Check the payer wallet address and balance with:
 
 ```sh
+x402api wallet show --wallet <wallet-name> --json
 x402api wallet address --wallet <wallet-name> --json
 x402api wallet balance --wallet <wallet-name> --json
 ```
 
+For a new dedicated wallet, configure the enforceable local per-payment
+ceiling when it is created:
+
+```sh
+x402api wallet create --name <wallet-name> \
+  --network <exact-challenge-network> \
+  --maximum-payment-atomic <per-payment-policy-cap> --json
+```
+
+Require `maximumPaymentAtomic` to cover the live charge without exceeding the
+task or operator limit. Among valid sponsored terms, honor an explicit network
+or asset preference, otherwise prefer an already funded compatible wallet,
+then the first compatible term in live challenge order. Never switch terms
+after authorization.
+
 If funding is short in an interactive conversation, tell the human the exact
 top-up in normal and atomic units, the network, stablecoin and contract/mint,
 and the payer wallet's public receiving address. The human sends the token to

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "warpmetal",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Agent-safe CLI and skill for purchasing and managing WarpMetal VPS servers",
   "type": "module",
   "bin": {

package/skills/warpmetal/SKILL.md

@@ -43,9 +43,12 @@ warpmetal health --json
 warpmetal catalog --json
 ```
 
-Stop if `purchasingReady` is false. Select `planId` and the exact OS `name`
-from the live catalog. Do not reuse an OS name or price from documentation or
-a previous session.
+Stop the current purchase if `purchasingReady` is false. In unattended
+scheduling, recheck after 60 seconds, then double the delay after each failed
+check up to 15 minutes and honor a longer `Retry-After`; never hot-loop. In an
+interactive conversation, report the unavailable state and stop. Select
+`planId` and the exact OS `name` from the live catalog. Do not reuse an OS name
+or price from documentation or a previous session.
 
 ## Prepare an order
 
@@ -88,6 +91,11 @@ its matching `x402api-pay` skill, and select or fund a dedicated
 network-specific wallet. Require `agentWalletSupported: true`,
 `sponsoredNetworkFee: true`, and `buyerNativeFeeRequired: false` on the chosen
 live term. Never fall back to a historical buyer-funded or TRON profile.
+Honor an explicit task or operator network and asset preference. Otherwise use
+a compatible sufficiently funded wallet, then the first compatible term in the
+live challenge's order. Never switch terms after authorization. Require the
+wallet's `maximumPaymentAtomic` to cover the live amount without exceeding the
+task or operator limit.
 
 After interactive confirmation or autonomous policy validation, invoke the
 returned authorize argv once. The separate

package/skills/warpmetal/references/payments.md

@@ -42,7 +42,20 @@ skill automatically.
    already permits it and a secure password source is configured; otherwise
    reuse a preconfigured wallet or stop. Keep Base and Solana wallets separate;
    never import the owner's primary seed or key. TRON wallet management exists,
-   but the published launch payer cannot authorize TRON.
+   but the published launch payer cannot authorize TRON. Configure the local
+   per-payment ceiling at creation and inspect it before reuse:
+
+   ```sh
+   x402api wallet create --name <name> \
+     --network <exact-challenge-network> \
+     --maximum-payment-atomic <per-payment-policy-cap> --json
+   x402api wallet show --wallet <name> --json
+   ```
+
+   Require `maximumPaymentAtomic` to be at least the exact live amount and no
+   higher than the task or operator limit. If an existing wallet has no ceiling
+   or an unsuitable one, do not treat its full balance as bounded authority;
+   use a suitably capped dedicated wallet or stop.
 5. Use both public, safe commands before requesting funding:
 
    ```sh
@@ -106,6 +119,12 @@ launch profiles are sponsored Base USDC and sponsored Solana USDC/USDT, bound
 by the strict `com.x402api.gas-sponsorship` extension. Stop on an expired gas
 reservation or any buyer-funded, unsupported, or unbound alternative.
 
+Among valid sponsored terms, honor an explicit task or operator network and
+asset preference. Otherwise prefer a compatible wallet that is already
+sufficiently funded. If several terms remain, choose the first compatible term
+in the live challenge's advertised order. Do not switch terms after
+authorization.
+
 Do not replace the two-stage workflow with `x402api pay`, `payment submit`, or
 `payment reconcile`. Those wallet commands can submit an exact credential-free
 endpoint; WarpMetal checkout requires a private owner token that must never

package/skills/warpmetal/references/safety.md

@@ -11,8 +11,11 @@
 
 - Treat `https://warpmetal.com/llms.txt`, the live catalog, and the live HTTP
   402 challenge as authoritative in that order.
-- Stop new purchases when `warpmetal health --json` reports
-  `purchasingReady: false`.
+- Stop the current purchase when `warpmetal health --json` reports
+  `purchasingReady: false`. An unattended scheduler may recheck after 60
+  seconds, then double the delay after each failure up to 15 minutes and honor
+  a longer `Retry-After`; never hot-loop. An interactive agent reports the
+  unavailable state and stops.
 - Select an exact OS name from the chosen plan's current
   `operatingSystems[]`. Never guess or hard-code an image version.