zk-agent-cli 0.1.0-beta.7 → 0.1.0-beta.9

package/dist/index.js

@@ -7722,6 +7722,10 @@ function formatHumanErrorMessage(error) {
   pushDetailLine(lines, "reason", details.reason);
   pushDetailLine(lines, "note", details.note);
   pushDetailLine(lines, "suggested action", details.suggestedAction);
+  pushDetailLine(lines, "status command", details.statusCommand);
+  pushDetailLine(lines, "approve command", details.approveCommand);
+  pushDetailLine(lines, "relay inspect command", details.relayInspectCommand);
+  pushDetailLine(lines, "reissue remote approval command", details.reissueRemoteApprovalCommand);
   pushDetailLine(lines, "validation domain", details.validationDomain);
   pushDetailLine(lines, "validation stage", details.validationStage);
   const validation = asRecord2(details.validation);
@@ -7741,6 +7745,71 @@ function formatHumanErrorMessage(error) {
   return lines.join("\n");
 }
 
+// src/lib/discovery-summary.ts
+function createEmptyDiscoverySourceCounts() {
+  return {
+    localDeployments: 0,
+    tokenDirectory: 0,
+    unknown: 0
+  };
+}
+function createEmptyDiscoveryRoleCounts() {
+  return Object.fromEntries(
+    REGISTRY_TOKEN_ROLES.map((role) => [role, 0])
+  );
+}
+function summarizeDiscoveryEntrySources(entries) {
+  const counts = createEmptyDiscoverySourceCounts();
+  for (const entry of entries) {
+    if (entry.source === "local-deployments") {
+      counts.localDeployments += 1;
+      continue;
+    }
+    if (entry.source === "token-directory") {
+      counts.tokenDirectory += 1;
+      continue;
+    }
+    counts.unknown += 1;
+  }
+  return counts;
+}
+function summarizeDiscoveryRoleMatches(entries) {
+  const counts = createEmptyDiscoveryRoleCounts();
+  for (const entry of entries) {
+    for (const match of entry.defaultsRegistryMatches || []) {
+      counts[match.role] += 1;
+    }
+  }
+  return counts;
+}
+function countCurrentValidatedDefaultEntries(entries) {
+  return entries.filter(
+    (entry) => (entry.defaultsRegistryMatches || []).some((match) => match.isCurrentValidatedDefault)
+  ).length;
+}
+function listUniqueDiscoveryChains(entries) {
+  return [...new Set(
+    entries.map((entry) => entry.chainKey?.trim()).filter((value) => Boolean(value))
+  )];
+}
+function firstDiscoverySymbol(entries) {
+  return entries.find((entry) => entry.symbol?.trim())?.symbol?.trim() || null;
+}
+function firstDiscoverySource(entries) {
+  if (entries.length === 0) return null;
+  return entries[0]?.source || "unknown";
+}
+function summarizeTokenRegistrySources(sources) {
+  return sources.map((source) => ({
+    id: source.id,
+    enabled: source.enabled,
+    exists: source.exists
+  }));
+}
+function findNativeBalance(balances) {
+  return balances.find((balance) => balance.type === "native") || null;
+}
+
 // src/lib/recommended-commands.ts
 function appendPaymasterMode(command, paymasterMode) {
   if (!paymasterMode || paymasterMode === "none") {
@@ -7758,6 +7827,18 @@ function buildTopLevelNextRecommendedCommand(requestId, paymasterMode) {
 function buildWalletCreateRecommendedCommand() {
   return "zk-agent wallet create --await-local";
 }
+function buildRelayInspectRecommendedCommand(relayUrl = "<url>") {
+  return `zk-agent relay inspect --relay-url ${relayUrl}`;
+}
+function buildWalletCreateRemoteRecommendedCommand(relayUrl = "<url>", paymasterMode, walletName = "main", accountKind = "smart-account") {
+  const command = [
+    "zk-agent wallet create",
+    walletName !== "main" ? `--name ${walletName}` : "",
+    accountKind !== "smart-account" ? `--account-kind ${accountKind}` : "",
+    `--relay-url ${relayUrl} --wait-relay --prompt-code`
+  ].filter(Boolean).join(" ");
+  return appendPaymasterMode(command, paymasterMode);
+}
 function buildWalletListRecommendedCommand() {
   return "zk-agent wallet list";
 }
@@ -7784,6 +7865,12 @@ function buildResolveTokenRecommendedCommand(chain, symbol, role, source) {
   const withRole = role ? `${command} --role ${role}` : command;
   return source ? `${withRole} --source ${source}` : withRole;
 }
+function buildPaymasterFeeTokensRecommendedCommand(chain) {
+  return buildTokensRecommendedCommand(chain, void 0, "paymaster-fee-token");
+}
+function buildPaymasterFeeTokenResolveRecommendedCommand(chain, symbol) {
+  return buildResolveTokenRecommendedCommand(chain, symbol, "paymaster-fee-token");
+}
 function buildDiscoveryRecommendedCommands(input) {
   return {
     inspectDefaults: buildDefaultsRecommendedCommand(),
@@ -7814,6 +7901,9 @@ function buildDiscoveryRecommendedCommands(input) {
 function buildWalletReapproveRecommendedCommand(walletName) {
   return `zk-agent wallet reapprove --name ${walletName} --await-local`;
 }
+function buildWalletReapproveRemoteRecommendedCommand(walletName, relayUrl = "<url>") {
+  return `zk-agent wallet reapprove --name ${walletName} --relay-url ${relayUrl} --wait-relay --prompt-code`;
+}
 function buildWalletNextRecommendedCommand(walletName) {
   return `zk-agent wallet next --name ${walletName}`;
 }
@@ -8507,9 +8597,15 @@ function workflowFollowupLines(recommendedCommands) {
   if (recommendedCommands.discoverOwnedTokens) {
     lines.push(["discover owned tokens", recommendedCommands.discoverOwnedTokens]);
   }
+  if (recommendedCommands.discoverPaymasterTokens) {
+    lines.push(["discover paymaster tokens", recommendedCommands.discoverPaymasterTokens]);
+  }
   if (recommendedCommands.discoverTokens) {
     lines.push(["discover tokens", recommendedCommands.discoverTokens]);
   }
+  if (recommendedCommands.inspectPaymasterToken) {
+    lines.push(["inspect paymaster token", recommendedCommands.inspectPaymasterToken]);
+  }
   if (recommendedCommands.inspectToken) {
     lines.push(["inspect token", recommendedCommands.inspectToken]);
   }
@@ -9150,6 +9246,27 @@ function linesForMultiBalances(result) {
   }
   return lines;
 }
+function buildAssetsDiscoverySummary(result) {
+  const nativeBalance = findNativeBalance(result.balances);
+  const ownedTokenSymbols = (result.ownedTokenRegistry?.entries || []).map((entry) => entry.symbol?.trim()).filter((value) => Boolean(value));
+  return {
+    walletName: result.walletName,
+    chain: result.chain,
+    chainId: result.chainId,
+    assetCount: result.balances.length,
+    nativeAssetSymbol: nativeBalance?.symbol || null,
+    nativeAssetBalance: nativeBalance?.balance || null,
+    ownedTokenCount: result.ownedTokenRegistry?.entryCount || 0,
+    primaryOwnedTokenSymbol: firstDiscoverySymbol(result.ownedTokenRegistry?.entries || []),
+    ownedTokenSymbols,
+    ownedTokenSourceCounts: result.ownedTokenRegistry?.summary.sourceCounts || null,
+    ownedBridgeMappingCounts: result.ownedTokenRegistry?.summary.bridgeMappingCounts || null,
+    ownedRegistryRoleCounts: result.ownedTokenRegistry?.summary.registryRoleCounts || null
+  };
+}
+function buildBalancesDiscoverySummary(result) {
+  return buildAssetsDiscoverySummary(result);
+}
 function withPaymasterOptions(command) {
   return command.option("--paymaster-mode <mode>", "none, sponsored, or approval-based").option("--paymaster-address <address>", "Explicit paymaster contract address override").option("--paymaster-token <address>", "ERC-20 token address for approval-based paymaster mode");
 }
@@ -9209,12 +9326,46 @@ function createBalancesCommand(deps) {
       provider: resolvedDeps.provider,
       ownedTokens: options.ownedTokens
     });
-    printResult(linesForSingleBalances(payload), { ok: true, ...payload });
+    const discoverySummary = options.ownedTokens && "ownedTokenRegistry" in payload ? buildBalancesDiscoverySummary(payload) : void 0;
+    const recommendedCommands = options.ownedTokens ? buildDiscoveryRecommendedCommands({
+      walletName,
+      chain: payload.chain
+    }) : void 0;
+    printResult(
+      [
+        ...linesForSingleBalances(payload),
+        ...recommendedCommands ? workflowFollowupLines(recommendedCommands) : []
+      ],
+      {
+        ok: true,
+        ...discoverySummary ? { discoverySummary } : {},
+        ...recommendedCommands ? { recommendedCommands } : {},
+        ...payload
+      }
+    );
   });
 }
 function createAssetsCommand(deps) {
   const resolvedDeps = resolveBalancesCommandDeps(deps);
-  return new Command("assets").description("Fetch the preferred single-chain asset view with native balance plus registry-backed ERC-20 holdings").option("--wallet <name>", "Wallet name", "main").option("--chain <chain>", "Single chain override").action(async (options) => {
+  return new Command("assets").description("Fetch the preferred single-chain asset view with native balance plus registry-backed ERC-20 holdings").addHelpText(
+    "after",
+    [
+      "",
+      "Discovery asset path:",
+      "  Preferred single-chain asset entrypoint:",
+      "    zk-agent assets --wallet main",
+      "",
+      "  Narrower owned ERC-20 registry subset:",
+      "    zk-agent tokens --wallet main --owned",
+      "",
+      "  Symbol-first token lookup before a tokenized command:",
+      "    zk-agent tokens --chain zksync-sepolia --symbol USDC",
+      "    zk-agent resolve-token --chain zksync-sepolia --symbol USDC",
+      "",
+      "  For the machine-readable registry/default catalog:",
+      "    zk-agent defaults"
+    ].join("\n")
+  ).option("--wallet <name>", "Wallet name", "main").option("--chain <chain>", "Single chain override").action(async (options) => {
     const walletName = options.wallet;
     const wallet = await resolvedDeps.loadWallet(walletName);
     if (!wallet) throw new Error(`Wallet not found: ${walletName}`);
@@ -9230,9 +9381,12 @@ function createAssetsCommand(deps) {
       chain: payload.chain,
       includeAssets: false
     });
+    const discoverySummary = buildAssetsDiscoverySummary(
+      payload
+    );
     printResult(
       [...linesForSingleBalances(payload), ...workflowFollowupLines(recommendedCommands)],
-      { ok: true, recommendedCommands, ...payload }
+      { ok: true, discoverySummary, recommendedCommands, ...payload }
     );
   });
 }
@@ -9912,11 +10066,35 @@ function createPlannedCommands() {
 
 // src/commands/setup.ts
 import { Command as Command2 } from "commander";
+function buildSetupHelpText() {
+  return [
+    "",
+    "What setup does:",
+    "  Writes the local default chain and connector URL used by the first-run path.",
+    "",
+    "After setup, stay on the canonical local-first path:",
+    "  zk-agent next",
+    "  zk-agent wallet create --await-local",
+    "  zk-agent next",
+    "",
+    "If the browser is not colocated with this terminal, switch at the wallet step:",
+    "  zk-agent relay inspect --relay-url <url>",
+    "  zk-agent wallet create --relay-url <url> --wait-relay --prompt-code",
+    "  zk-agent next",
+    "",
+    "Environment note:",
+    "  No custom .env is required for setup, next, or wallet request creation.",
+    "  Add RPC env vars later, before live reads or broadcasts."
+  ].join("\n");
+}
 function createInitCommand() {
-  return new Command2("init").alias("setup").description("Initialize local zk-agent configuration").option("--default-chain <chain>", "Default chain key", "zksync-era").option("--connector-url <url>", "Connector UI base URL", "http://localhost:4444").option("--force", "Overwrite an existing config", false).action(async (options) => {
+  return new Command2("init").alias("setup").description("Initialize local zk-agent configuration for the default operator path").addHelpText("after", buildSetupHelpText()).option("--default-chain <chain>", "Default chain key", "zksync-era").option("--connector-url <url>", "Connector UI base URL", "http://localhost:4444").option("--force", "Overwrite an existing config", false).action(async (options) => {
     const recommendedCommands = {
+      next: buildTopLevelNextRecommendedCommand(),
       inspectDefaults: buildDefaultsRecommendedCommand(),
       createWallet: buildWalletCreateRecommendedCommand(),
+      relayInspect: buildRelayInspectRecommendedCommand(),
+      createWalletRemote: buildWalletCreateRemoteRecommendedCommand(),
       afterWalletApproval: buildTopLevelNextRecommendedCommand()
     };
     const existing = await loadProjectConfig();
@@ -9926,8 +10104,11 @@ function createInitCommand() {
           ["status", "Config already exists. Re-run with --force to overwrite."],
           ["default chain", existing.defaultChain],
           ["connector", existing.connectorUrl],
+          ["next", recommendedCommands.next],
           ["inspect defaults", recommendedCommands.inspectDefaults],
-          ["create wallet", recommendedCommands.createWallet],
+          ["create wallet (local)", recommendedCommands.createWallet],
+          ["relay inspect", recommendedCommands.relayInspect],
+          ["create wallet (remote)", recommendedCommands.createWalletRemote],
           ["after approval", recommendedCommands.afterWalletApproval]
         ],
         {
@@ -9952,8 +10133,11 @@ function createInitCommand() {
         ["status", "Config saved"],
         ["default chain", config.defaultChain],
         ["connector", config.connectorUrl],
+        ["next", recommendedCommands.next],
         ["inspect defaults", recommendedCommands.inspectDefaults],
-        ["create wallet", recommendedCommands.createWallet],
+        ["create wallet (local)", recommendedCommands.createWallet],
+        ["relay inspect", recommendedCommands.relayInspect],
+        ["create wallet (remote)", recommendedCommands.createWalletRemote],
         ["after approval", recommendedCommands.afterWalletApproval]
       ],
       { ok: true, config, recommendedCommands }
@@ -10330,6 +10514,36 @@ function buildWalletNextRecommendedCommands(walletName, summary) {
     ...summary.recommendedCommand ? { nextAction: summary.recommendedCommand } : {}
   };
 }
+function workflowIntentSupportsTokenDiscovery(intent) {
+  return intent === "send-token" || intent === "swap" || intent === "bridge" || intent === "deposit" || intent === "withdraw";
+}
+function buildWalletTokenDiscoverySummary(input) {
+  if (!input.recommendedCommands) {
+    return void 0;
+  }
+  const hasTokenDiscovery = Boolean(input.recommendedCommands.discoverAssets) || Boolean(input.recommendedCommands.discoverOwnedTokens) || Boolean(input.recommendedCommands.discoverTokens) || Boolean(input.recommendedCommands.inspectToken) || Boolean(input.recommendedCommands.discoverPaymasterTokens) || Boolean(input.recommendedCommands.inspectPaymasterToken);
+  if (!hasTokenDiscovery) {
+    return void 0;
+  }
+  return {
+    walletName: input.walletName,
+    chain: input.chain,
+    intent: input.intent || null,
+    nextAction: input.nextAction || null,
+    paymasterMode: input.paymasterMode || null,
+    tokenizedIntent: workflowIntentSupportsTokenDiscovery(input.intent),
+    includesAssetDiscovery: Boolean(input.recommendedCommands.discoverAssets),
+    includesOwnedTokenDiscovery: Boolean(input.recommendedCommands.discoverOwnedTokens),
+    includesChainTokenDiscovery: Boolean(input.recommendedCommands.discoverTokens),
+    includesDirectTokenInspection: Boolean(input.recommendedCommands.inspectToken),
+    includesPaymasterTokenDiscovery: Boolean(
+      input.recommendedCommands.discoverPaymasterTokens
+    ),
+    includesPaymasterTokenInspection: Boolean(
+      input.recommendedCommands.inspectPaymasterToken
+    )
+  };
+}
 function walletNextLines(summary) {
   const lines = [
     ["wallet", summary.walletName],
@@ -10364,7 +10578,7 @@ var defaultProvider = new ZkSyncWalletProvider();
 var defaultDefiProvider = new ZkSyncDefiProvider({
   walletWriter: defaultProvider
 });
-function workflowIntentSupportsTokenDiscovery(intent) {
+function workflowIntentSupportsTokenDiscovery2(intent) {
   return intent === "send-token" || intent === "swap" || intent === "bridge" || intent === "deposit" || intent === "withdraw";
 }
 function buildTopLevelWorkflowRecommendedCommands(input) {
@@ -10378,14 +10592,22 @@ function buildTopLevelWorkflowRecommendedCommands(input) {
     delete: buildWorkflowDeleteRecommendedCommand(input.requestId),
     walletStatus: buildWalletStatusRecommendedCommand(input.walletName),
     ...input.nextAction ? { nextAction: input.nextAction } : {},
-    ...workflowIntentSupportsTokenDiscovery(input.intent) ? {
+    ...workflowIntentSupportsTokenDiscovery2(input.intent) ? {
       discoverAssets: buildAssetsRecommendedCommand(input.walletName),
       discoverOwnedTokens: buildOwnedTokensRecommendedCommand(input.walletName),
       discoverTokens: buildTokensRecommendedCommand(input.chain),
       inspectToken: buildResolveTokenRecommendedCommand(input.chain)
+    } : {},
+    ...input.paymasterMode === "approval-based" ? {
+      discoverPaymasterTokens: buildPaymasterFeeTokensRecommendedCommand(input.chain),
+      inspectPaymasterToken: buildPaymasterFeeTokenResolveRecommendedCommand(input.chain)
     } : {}
   };
 }
+function extractCheckpointPaymasterMode(checkpoint) {
+  if (!("paymaster" in checkpoint.goal)) return void 0;
+  return checkpoint.goal.paymaster?.mode;
+}
 function resolveNextCommandDeps(deps) {
   return {
     provider: deps?.provider ?? defaultProvider,
@@ -10415,6 +10637,11 @@ function buildNextHelpText() {
     "    zk-agent wallet create --await-local",
     "    zk-agent next",
     "",
+    "  If the browser is remote, switch at the wallet step instead of waiting for a local callback:",
+    "    zk-agent relay inspect --relay-url <url>",
+    "    zk-agent wallet create --relay-url <url> --wait-relay --prompt-code",
+    "    zk-agent next",
+    "",
     "  Continue a stored workflow checkpoint:",
     "    zk-agent next --request-id <id>",
     "",
@@ -10470,7 +10697,16 @@ function createNextCommand(deps) {
         walletName: wallet2.walletName,
         nextAction: nextCommand2,
         chain: result.plan.chain,
-        intent: result.intent
+        intent: result.intent,
+        paymasterMode: extractCheckpointPaymasterMode(updatedCheckpoint)
+      });
+      const tokenDiscoverySummary2 = buildWalletTokenDiscoverySummary({
+        walletName: wallet2.walletName,
+        chain: result.plan.chain,
+        intent: result.intent,
+        nextAction: nextCommand2,
+        paymasterMode: extractCheckpointPaymasterMode(updatedCheckpoint),
+        recommendedCommands: recommendedCommands2
       });
       const workflowAgentProfile = await loadAgentIdentitySummary(wallet2.walletName);
       const agentFollowup2 = buildAgentFollowup(workflowAgentProfile, {
@@ -10506,6 +10742,7 @@ function createNextCommand(deps) {
           agentFollowup: agentFollowup2,
           result,
           checkpoint: updatedCheckpoint,
+          tokenDiscoverySummary: tokenDiscoverySummary2,
           recommendedCommands: recommendedCommands2
         }
       );
@@ -10515,6 +10752,7 @@ function createNextCommand(deps) {
     if (!config) {
       const recommendedCommands2 = {
         setup: buildSetupCommand(),
+        afterSetup: buildTopLevelNextRecommendedCommand2(),
         inspectDefaults: buildDefaultsRecommendedCommand()
       };
       printResult(
@@ -10523,6 +10761,7 @@ function createNextCommand(deps) {
           ...agentProfileLines(agentProfile),
           ...agentFollowupLines(defaultAgentFollowup),
           ["next", recommendedCommands2.setup],
+          ["after setup", recommendedCommands2.afterSetup],
           ["inspect defaults", recommendedCommands2.inspectDefaults]
         ]),
         {
@@ -10544,6 +10783,11 @@ function createNextCommand(deps) {
           buildWalletCreateRecommendedCommand(),
           paymasterMode
         ),
+        relayInspect: buildRelayInspectRecommendedCommand(),
+        createWalletRemote: buildWalletCreateRemoteRecommendedCommand(
+          "<url>",
+          paymasterMode
+        ),
         afterApproval: appendPaymasterMode2(buildTopLevelNextRecommendedCommand2(), paymasterMode),
         inspectDefaults: buildDefaultsRecommendedCommand()
       };
@@ -10555,6 +10799,8 @@ function createNextCommand(deps) {
           ...agentProfileLines(agentProfile),
           ...agentFollowupLines(defaultAgentFollowup),
           ["next", recommendedCommands2.createWallet],
+          ["relay inspect", recommendedCommands2.relayInspect],
+          ["remote fallback", recommendedCommands2.createWalletRemote],
           ["after approval", recommendedCommands2.afterApproval],
           ["inspect defaults", recommendedCommands2.inspectDefaults]
         ]),
@@ -10608,6 +10854,10 @@ function createNextCommand(deps) {
       walletStatus: buildWalletStatusRecommendedCommand(wallet.walletName),
       discoverAssets: buildAssetsRecommendedCommand(wallet.walletName),
       discoverOwnedTokens: buildOwnedTokensRecommendedCommand(wallet.walletName),
+      ...paymasterMode === "approval-based" ? {
+        discoverPaymasterTokens: buildPaymasterFeeTokensRecommendedCommand(wallet.chain),
+        inspectPaymasterToken: buildPaymasterFeeTokenResolveRecommendedCommand(wallet.chain)
+      } : {},
       discoverTokens: buildTokensRecommendedCommand(wallet.chain),
       inspectToken: buildResolveTokenRecommendedCommand(wallet.chain),
       workflowPay,
@@ -10615,6 +10865,13 @@ function createNextCommand(deps) {
       nextAction: nextCommand,
       inspectDefaults: buildDefaultsRecommendedCommand()
     };
+    const tokenDiscoverySummary = buildWalletTokenDiscoverySummary({
+      walletName: wallet.walletName,
+      chain: wallet.chain,
+      nextAction: nextCommand,
+      paymasterMode,
+      recommendedCommands
+    });
     printResult(
       topLevelNextLines("wallet", [
         ...walletNextLines(summary),
@@ -10623,7 +10880,9 @@ function createNextCommand(deps) {
         ...summary.recommendedCommand ? [] : [["next", workflowPay]],
         ["discover assets", recommendedCommands.discoverAssets],
         ["discover owned tokens", recommendedCommands.discoverOwnedTokens],
+        ...recommendedCommands.discoverPaymasterTokens ? [["discover paymaster tokens", recommendedCommands.discoverPaymasterTokens]] : [],
         ["discover tokens", recommendedCommands.discoverTokens],
+        ...recommendedCommands.inspectPaymasterToken ? [["inspect paymaster token", recommendedCommands.inspectPaymasterToken]] : [],
         ["inspect token", recommendedCommands.inspectToken],
         ["inspect defaults", recommendedCommands.inspectDefaults]
       ]),
@@ -10636,6 +10895,7 @@ function createNextCommand(deps) {
         inspection,
         summary,
         nextCommand,
+        tokenDiscoverySummary,
         recommendedCommands
       }
     );
@@ -10740,6 +11000,21 @@ function createAgentCommand() {
   agent.addHelpText(
     "after",
     [
+      "",
+      "  Agent identity path:",
+      "    zk-agent agent status",
+      '    zk-agent agent set --name "SED Operator" --wallet main',
+      "    zk-agent agent show",
+      "",
+      "  Portable local profile management:",
+      "    zk-agent agent export",
+      "    zk-agent agent import --payload @agent-profile.json --overwrite",
+      "",
+      "  Remove the saved local profile:",
+      "    zk-agent agent clear",
+      "",
+      "  This profile is optional. Wallet approval and workflow execution still work",
+      "  without a saved local agent profile.",
       "",
       "Examples:",
       "  zk-agent agent status",
@@ -10913,6 +11188,80 @@ function createAgentCommand() {
 
 // src/commands/defaults.ts
 import { Command as Command5 } from "commander";
+function inferPrimaryDiscoveryChain(defaults) {
+  return defaults.defaultSelections.paymaster.validatedDefault?.chain || defaults.defaultSelections.swap.validatedDefault?.chain || defaults.defaultSelections.bridge.validatedWithdraw?.fromChain || defaults.defaultSelections.bridge.validatedDeposit?.toChain || defaults.validated.feeTokenEraVm?.chain || defaults.builtinChains.find((chain) => chain.key === "zksync-sepolia")?.key || defaults.builtinChains[0]?.key || "zksync-sepolia";
+}
+function inferExampleTokenSymbol(defaults) {
+  return defaults.defaultSelections.swap.validatedDefault?.trackedTokenA.symbol || defaults.defaultSelections.paymaster.validatedApprovalBased?.feeTokenSymbol || defaults.validated.feeTokenEraVm?.symbol || defaults.registry.tokens.find((entry) => entry.symbol?.trim())?.symbol || "USDC";
+}
+function inferPaymasterFeeTokenSymbol(defaults) {
+  return defaults.defaultSelections.paymaster.validatedApprovalBased?.feeTokenSymbol || defaults.validated.feeTokenEraVm?.symbol || null;
+}
+function buildDefaultsRecommendedCommands(defaults) {
+  const primaryChain = inferPrimaryDiscoveryChain(defaults);
+  const exampleSymbol = inferExampleTokenSymbol(defaults);
+  const paymasterFeeTokenSymbol = inferPaymasterFeeTokenSymbol(defaults) || exampleSymbol;
+  return {
+    inspectDefaults: buildDefaultsRecommendedCommand(),
+    discoverTokens: buildTokensRecommendedCommand(primaryChain),
+    inspectToken: buildResolveTokenRecommendedCommand(primaryChain, exampleSymbol),
+    discoverPaymasterTokens: buildPaymasterFeeTokensRecommendedCommand(primaryChain),
+    inspectPaymasterToken: buildPaymasterFeeTokenResolveRecommendedCommand(
+      primaryChain,
+      paymasterFeeTokenSymbol
+    )
+  };
+}
+function buildDefaultsSummary(input) {
+  const { defaults, localTokenRegistry, tokenRegistrySources, tokenDirectoryChains } = input;
+  const primaryChain = inferPrimaryDiscoveryChain(defaults);
+  const exampleTokenSymbol = inferExampleTokenSymbol(defaults);
+  const paymasterFeeTokenSymbol = inferPaymasterFeeTokenSymbol(defaults);
+  return {
+    primaryDiscoveryChain: primaryChain,
+    exampleTokenSymbol,
+    paymasterFeeTokenSymbol,
+    localTokenCount: localTokenRegistry.length,
+    tokenDirectoryChainCount: tokenDirectoryChains.length,
+    tokenRegistrySources: tokenRegistrySources.map((source) => ({
+      id: source.id,
+      enabled: source.enabled,
+      exists: source.exists
+    })),
+    resolvedDefaults: {
+      swap: defaults.defaultSelections.swap.validatedDefault ? {
+        entryId: defaults.defaultSelections.swap.validatedDefault.entryId,
+        chain: defaults.defaultSelections.swap.validatedDefault.chain,
+        protocol: defaults.defaultSelections.swap.validatedDefault.protocol,
+        status: defaults.defaultSelections.swap.validatedDefault.status
+      } : null,
+      bridgeDeposit: defaults.defaultSelections.bridge.validatedDeposit ? {
+        entryId: defaults.defaultSelections.bridge.validatedDeposit.entryId,
+        fromChain: defaults.defaultSelections.bridge.validatedDeposit.fromChain,
+        toChain: defaults.defaultSelections.bridge.validatedDeposit.toChain,
+        status: defaults.defaultSelections.bridge.validatedDeposit.status
+      } : null,
+      bridgeWithdraw: defaults.defaultSelections.bridge.validatedWithdraw ? {
+        entryId: defaults.defaultSelections.bridge.validatedWithdraw.entryId,
+        fromChain: defaults.defaultSelections.bridge.validatedWithdraw.fromChain,
+        toChain: defaults.defaultSelections.bridge.validatedWithdraw.toChain,
+        status: defaults.defaultSelections.bridge.validatedWithdraw.status,
+        requiresFinalize: defaults.defaultSelections.bridge.validatedWithdraw.requiresFinalize
+      } : null,
+      paymasterDefault: defaults.defaultSelections.paymaster.validatedDefault ? {
+        entryId: defaults.defaultSelections.paymaster.validatedDefault.entryId,
+        chain: defaults.defaultSelections.paymaster.validatedDefault.chain,
+        mode: defaults.defaultSelections.paymaster.validatedDefault.mode,
+        status: defaults.defaultSelections.paymaster.validatedDefault.status
+      } : null,
+      paymasterByMode: {
+        none: defaults.defaultSelections.paymaster.validatedNone?.entryId || null,
+        sponsored: defaults.defaultSelections.paymaster.validatedSponsored?.entryId || null,
+        approvalBased: defaults.defaultSelections.paymaster.validatedApprovalBased?.entryId || null
+      }
+    }
+  };
+}
 function formatTrackedTokenSummary(token) {
   if (!token.address) return null;
   const label = token.symbol || token.address;
@@ -11386,19 +11735,56 @@ function buildDefaultsLines(input) {
   return lines;
 }
 function createDefaultsCommand() {
-  return new Command5("defaults").description("Show the machine-readable registry of supported, validated, experimental, and manually configured defaults").action(async () => {
+  return new Command5("defaults").description("Show the machine-readable registry of supported, validated, experimental, and manually configured defaults").addHelpText(
+    "after",
+    [
+      "",
+      "Discovery defaults path:",
+      "  Use `defaults` as the machine-readable registry escape hatch for:",
+      "    - validated or fallback swap / bridge paths",
+      "    - tracked token roles and source order",
+      "    - paymaster defaults and supported modes",
+      "",
+      "  For wallet-scoped asset discovery, prefer:",
+      "    zk-agent assets --wallet main",
+      "",
+      "  For symbol-first token discovery, prefer:",
+      "    zk-agent tokens --chain zksync-sepolia",
+      "    zk-agent resolve-token --chain zksync-sepolia --symbol USDC"
+    ].join("\n")
+  ).action(async () => {
     const defaults = loadValidatedDefaults();
     const localTokenRegistry = listLocalTokenRegistryEntries();
     const tokenRegistrySources = describeDefaultTokenRegistrySources();
     const tokenDirectoryChains = await listTokenDirectoryIndexedChains();
+    const recommendedCommands = buildDefaultsRecommendedCommands(defaults);
+    const summary = buildDefaultsSummary({
+      defaults,
+      localTokenRegistry,
+      tokenRegistrySources,
+      tokenDirectoryChains
+    });
     const lines = buildDefaultsLines({
       defaults,
       localTokenRegistry,
       tokenRegistrySources,
       tokenDirectoryChains
     });
+    lines.push([
+      "next discovery chain",
+      summary.primaryDiscoveryChain
+    ]);
+    lines.push([
+      "example token",
+      summary.exampleTokenSymbol
+    ]);
+    if (summary.paymasterFeeTokenSymbol) {
+      lines.push(["paymaster fee token symbol", summary.paymasterFeeTokenSymbol]);
+    }
     printResult(lines, {
       ok: true,
+      summary,
+      recommendedCommands,
       defaults,
       localTokenRegistry,
       tokenRegistrySources,
@@ -11444,9 +11830,49 @@ async function resolveActiveChain(options, deps) {
     }
   );
 }
+function buildResolveTokenDiscoverySummary(result) {
+  return {
+    chain: result.chainKey,
+    chainId: result.chainId,
+    queryType: result.queryType,
+    query: result.queryType === "symbol" ? result.symbol || null : result.address || null,
+    roleFilter: result.role || null,
+    sourceFilter: result.source || null,
+    matchCount: result.matchCount,
+    ambiguous: result.ambiguous,
+    primarySymbol: result.primaryMatch?.symbol || null,
+    primaryAddress: result.primaryMatch?.address || null,
+    primaryDecimals: result.primaryMatch?.decimals ?? null,
+    primarySource: result.primaryMatch?.source || (result.primaryMatch ? "unknown" : null),
+    sourceCounts: summarizeDiscoveryEntrySources(result.matches),
+    roleMatchCounts: summarizeDiscoveryRoleMatches(result.matches),
+    currentDefaultEntryCount: countCurrentValidatedDefaultEntries(result.matches),
+    tokenRegistrySources: summarizeTokenRegistrySources(result.tokenRegistrySources)
+  };
+}
 function createResolveTokenCommand(deps) {
   const resolvedDeps = resolveResolveTokenCommandDeps(deps);
-  return new Command6("resolve-token").description("Resolve a token symbol or address against the configured local-first token registry").option("--wallet <name>", "Optional stored wallet name to infer the active chain").option("--chain <chain>", "Chain key or chain id override").option("--symbol <symbol>", "Token symbol to resolve on the active chain").option("--address <address>", "Token address to inspect on the active chain").option(
+  return new Command6("resolve-token").description("Resolve a token symbol or address against the configured local-first token registry").addHelpText(
+    "after",
+    [
+      "",
+      "Resolve-token path:",
+      "  Symbol-first resolution on one active chain:",
+      "    zk-agent resolve-token --chain zksync-sepolia --symbol USDC",
+      "",
+      "  Use the stored wallet to infer the active chain:",
+      "    zk-agent resolve-token --wallet main --symbol USDC",
+      "",
+      "  Use broader chain discovery before resolution when you still need the candidate set:",
+      "    zk-agent tokens --chain zksync-sepolia",
+      "",
+      "  Use the wallet asset entrypoint when the real question is balances/holdings:",
+      "    zk-agent assets --wallet main",
+      "",
+      "  Use the registry/default catalog when you need tracked roles or source order:",
+      "    zk-agent defaults"
+    ].join("\n")
+  ).option("--wallet <name>", "Optional stored wallet name to infer the active chain").option("--chain <chain>", "Chain key or chain id override").option("--symbol <symbol>", "Token symbol to resolve on the active chain").option("--address <address>", "Token address to inspect on the active chain").option(
     "--role <role>",
     `Optional defaults-registry role filter: ${REGISTRY_TOKEN_ROLES.join(", ")}`
   ).option(
@@ -11528,6 +11954,7 @@ function createResolveTokenCommand(deps) {
     lines.push(...workflowFollowupLines(recommendedCommands));
     printResult(lines, {
       ok: true,
+      discoverySummary: buildResolveTokenDiscoverySummary(result),
       recommendedCommands,
       ...result
     });
@@ -11647,9 +12074,71 @@ function ownedTokenSummaryLines2(summary) {
   }
   return lines;
 }
+function buildOwnedTokensDiscoverySummary(result) {
+  return {
+    mode: "owned-registry-erc20",
+    walletName: result.walletName,
+    chainScope: result.chainFilter.chainKey,
+    chainCount: 1,
+    entryCount: result.entryCount,
+    symbolFilter: result.symbol || null,
+    roleFilter: result.role || null,
+    sourceFilter: result.source || null,
+    primarySymbol: firstDiscoverySymbol(result.entries),
+    primarySource: firstDiscoverySource(result.entries),
+    sourceCounts: result.summary.sourceCounts,
+    roleMatchCounts: result.summary.registryRoleCounts,
+    currentDefaultEntryCount: countCurrentValidatedDefaultEntries(result.entries),
+    probeFailureCount: result.probeFailureCount,
+    bridgeMappingCounts: result.summary.bridgeMappingCounts,
+    tokenRegistrySources: summarizeTokenRegistrySources(result.tokenRegistrySources)
+  };
+}
+function buildTokenDiscoverySummary(result) {
+  return {
+    mode: "discoverable",
+    walletName: null,
+    chainScope: result.chainFilter?.chainKey || "all-built-in-chains",
+    chainCount: result.chainFilter ? 1 : listUniqueDiscoveryChains(result.entries).length,
+    entryCount: result.entryCount,
+    symbolFilter: result.symbol || null,
+    roleFilter: result.role || null,
+    sourceFilter: result.source || null,
+    primarySymbol: firstDiscoverySymbol(result.entries),
+    primarySource: firstDiscoverySource(result.entries),
+    sourceCounts: summarizeDiscoveryEntrySources(result.entries),
+    roleMatchCounts: summarizeDiscoveryRoleMatches(result.entries),
+    currentDefaultEntryCount: countCurrentValidatedDefaultEntries(result.entries),
+    probeFailureCount: null,
+    bridgeMappingCounts: null,
+    tokenRegistrySources: summarizeTokenRegistrySources(result.tokenRegistrySources)
+  };
+}
 function createTokensCommand(deps) {
   const resolvedDeps = resolveTokensCommandDeps(deps);
-  return new Command7("tokens").description("List discoverable tokens from the configured local-first token registry, or inspect the owned ERC-20 registry subset for one wallet").option("--wallet <name>", "Optional stored wallet name to infer the active chain").option("--chain <chain>", "Chain key or chain id override").option("--symbol <symbol>", "Optional exact symbol filter").option(
+  return new Command7("tokens").description("List discoverable tokens from the configured local-first token registry, or inspect the owned ERC-20 registry subset for one wallet").addHelpText(
+    "after",
+    [
+      "",
+      "Discovery token path:",
+      "  Start with the preferred wallet asset view when you need balances plus tracked ERC-20 holdings:",
+      "    zk-agent assets --wallet main",
+      "",
+      "  Use the narrower owned ERC-20 registry subset when you only want held tokens:",
+      "    zk-agent tokens --wallet main --owned",
+      "",
+      "  Use chain-scoped discovery before choosing a token address:",
+      "    zk-agent tokens --chain zksync-sepolia",
+      "    zk-agent tokens --chain zksync-sepolia --symbol USDC",
+      "    zk-agent tokens --chain zksync-sepolia --role paymaster-fee-token",
+      "",
+      "  For one direct token-resolution check:",
+      "    zk-agent resolve-token --chain zksync-sepolia --symbol USDC",
+      "",
+      "  For the full defaults/registry catalog:",
+      "    zk-agent defaults"
+    ].join("\n")
+  ).option("--wallet <name>", "Optional stored wallet name to infer the active chain").option("--chain <chain>", "Chain key or chain id override").option("--symbol <symbol>", "Optional exact symbol filter").option(
     "--role <role>",
     `Optional defaults-registry role filter: ${REGISTRY_TOKEN_ROLES.join(", ")}`
   ).option(
@@ -11758,6 +12247,7 @@ function createTokensCommand(deps) {
       lines2.push(...workflowFollowupLines(recommendedCommands2));
       printResult(lines2, {
         ok: true,
+        discoverySummary: buildOwnedTokensDiscoverySummary(result2),
         recommendedCommands: recommendedCommands2,
         ...result2
       });
@@ -11813,6 +12303,7 @@ function createTokensCommand(deps) {
     lines.push(...workflowFollowupLines(recommendedCommands));
     printResult(lines, {
       ok: true,
+      discoverySummary: buildTokenDiscoverySummary(result),
       recommendedCommands,
       ...result
     });
@@ -11975,6 +12466,8 @@ var RELAY_BODY_LIMIT_BYTES = 1024 * 1024;
 var RELAY_SERVICE = "zk-agent-relay";
 var RELAY_PROTOCOL = "zk-agent-session-relay";
 var RELAY_SCHEMA_VERSION = 1;
+var RELAY_STATE_BACKEND = "local-filesystem";
+var RELAY_DEPLOYMENT_SCOPE = "single-host";
 function relayDir() {
   const directory = path7.join(storageDir(), "relay");
   if (!fs7.existsSync(directory)) {
@@ -12010,11 +12503,15 @@ function sanitizeRelayRecord(record) {
 }
 function relayStatusResponse(baseUrl, record) {
   const sanitized = sanitizeRelayRecord(record);
+  const shareUrl = relayShareUrl(baseUrl, sanitized.request_id);
+  const statusUrl = relayStatusUrl(baseUrl, sanitized.request_id);
   return {
     request_id: sanitized.request_id,
     status: relayStatus(record),
     approval_ready: Boolean(record.encrypted_payload),
-    approval_url: `${baseUrl}/r/${sanitized.request_id}`,
+    share_url: shareUrl,
+    status_url: statusUrl,
+    approval_url: shareUrl,
     expires_at: sanitized.expires_at,
     request: sanitized.request,
     approval_submitted_at: sanitized.approval_submitted_at
@@ -12111,6 +12608,9 @@ function relayHealthResponse(bindBaseUrl, publicBaseUrl, connectorUiAvailable, p
     origin: normalizeRelayBaseUrl(bindBaseUrl),
     public_origin: normalizeRelayBaseUrl(publicBaseUrl),
     public_origin_source: publicOriginSource,
+    state_backend: RELAY_STATE_BACKEND,
+    deployment_scope: RELAY_DEPLOYMENT_SCOPE,
+    same_host_restart_persists: true,
     connector_ui_available: connectorUiAvailable,
     capabilities: relayCapabilities(connectorUiAvailable)
   };
@@ -12357,6 +12857,12 @@ function isRelayCapability(value) {
 function isRelayPublicOriginSource(value) {
   return value === "configured" || value === "bind-origin-default";
 }
+function isRelayStateBackend(value) {
+  return value === "local-filesystem";
+}
+function isRelayDeploymentScope(value) {
+  return value === "single-host";
+}
 function asRelayHealthResponse(value) {
   if (!isRecord3(value)) return null;
   if (value.ok !== true) return null;
@@ -12369,6 +12875,15 @@ function asRelayHealthResponse(value) {
   if (typeof value.public_origin_source !== "undefined" && !isRelayPublicOriginSource(value.public_origin_source)) {
     return null;
   }
+  if (typeof value.state_backend !== "undefined" && !isRelayStateBackend(value.state_backend)) {
+    return null;
+  }
+  if (typeof value.deployment_scope !== "undefined" && !isRelayDeploymentScope(value.deployment_scope)) {
+    return null;
+  }
+  if (typeof value.same_host_restart_persists !== "undefined" && typeof value.same_host_restart_persists !== "boolean") {
+    return null;
+  }
   if (typeof value.connector_ui_available !== "boolean") return null;
   if (!Array.isArray(value.capabilities) || !value.capabilities.every(isRelayCapability)) {
     return null;
@@ -12410,6 +12925,15 @@ function inferRelayPublicOriginSource(options) {
   }
   return normalizedOrigin === normalizedPublicOrigin ? "bind-origin-default" : "configured";
 }
+function inferRelayStateBackend(relayMode) {
+  return relayMode === "local-file" ? "local-filesystem" : null;
+}
+function inferRelayDeploymentScope(relayMode) {
+  return relayMode === "local-file" ? "single-host" : null;
+}
+function inferSameHostRestartPersists(relayMode) {
+  return relayMode === "local-file" ? true : null;
+}
 function relayHostedReadinessNotes(options) {
   const notes = [];
   if (!options.compatible) {
@@ -12430,6 +12954,17 @@ function relayHostedReadinessNotes(options) {
   }
   return notes;
 }
+function relayOperationalContractNotes(options) {
+  if (!options.compatible) {
+    return [];
+  }
+  if (options.stateBackend === "local-filesystem" && options.deploymentScope === "single-host" && options.sameHostRestartPersists === true) {
+    return [
+      "Relay state is stored on the relay host local filesystem. Restarts on the same host keep pending approval state, but multi-instance or load-balanced deployments do not share relay state."
+    ];
+  }
+  return [];
+}
 function relayOriginRelationshipNotes(options) {
   const notes = [];
   const relayUrlMatchesOrigin = relayUrlMatches(options.relayUrl, options.origin);
@@ -12446,6 +12981,20 @@ function relayOriginRelationshipNotes(options) {
   }
   return notes;
 }
+function buildRelayDeploymentSummary(options) {
+  return {
+    origin: options.origin,
+    publicOrigin: options.publicOrigin,
+    publicOriginSource: options.publicOriginSource,
+    shareLinkBaseUrl: options.shareLinkBaseUrl,
+    statusApiBaseUrl: options.statusApiBaseUrl,
+    publicOriginConfigured: options.publicOriginSource === "configured",
+    publicOriginLooksLocal: options.publicOriginLooksLocal,
+    connectorUiAvailable: options.connectorUiAvailable,
+    hostedShareRedirectReady: options.hostedShareRedirectReady,
+    singleHostFileState: options.stateBackend === "local-filesystem" && options.deploymentScope === "single-host" && options.sameHostRestartPersists === true
+  };
+}
 function buildRelayInspectPayload(relayUrl, rawHealth) {
   const health = asRelayHealthResponse(rawHealth);
   const fallbackPublicOrigin = isRecord3(rawHealth) && typeof rawHealth.public_origin === "string" ? rawHealth.public_origin : relayUrl;
@@ -12454,6 +13003,9 @@ function buildRelayInspectPayload(relayUrl, rawHealth) {
     origin: health?.origin || null,
     publicOrigin
   });
+  const stateBackend = health?.state_backend || inferRelayStateBackend(health?.relay_mode || null);
+  const deploymentScope = health?.deployment_scope || inferRelayDeploymentScope(health?.relay_mode || null);
+  const sameHostRestartPersists = typeof health?.same_host_restart_persists === "boolean" ? health.same_host_restart_persists : inferSameHostRestartPersists(health?.relay_mode || null);
   const compatible = Boolean(health && hasCoreRelayCapabilities(health.capabilities));
   const connectorUiAvailable = health?.connector_ui_available ?? null;
   const relayUrlMatchesOrigin = relayUrlMatches(relayUrl, health?.origin || null);
@@ -12461,6 +13013,19 @@ function buildRelayInspectPayload(relayUrl, rawHealth) {
   const publicOriginLooksLocal = relayPublicOriginLooksLocal(publicOrigin);
   const hostedShareRedirectReady = compatible && connectorUiAvailable === true && !publicOriginLooksLocal;
   const { shareLinkBaseUrl, statusApiBaseUrl } = buildAdvertisedRelayBases(publicOrigin);
+  const deploymentSummary = buildRelayDeploymentSummary({
+    origin: health?.origin || null,
+    publicOrigin,
+    publicOriginSource,
+    shareLinkBaseUrl,
+    statusApiBaseUrl,
+    publicOriginLooksLocal,
+    connectorUiAvailable,
+    hostedShareRedirectReady,
+    stateBackend,
+    deploymentScope,
+    sameHostRestartPersists
+  });
   const notes = [
     ...relayHostedReadinessNotes({
       compatible,
@@ -12468,6 +13033,12 @@ function buildRelayInspectPayload(relayUrl, rawHealth) {
       publicOriginSource,
       connectorUiAvailable
     }),
+    ...relayOperationalContractNotes({
+      compatible,
+      stateBackend,
+      deploymentScope,
+      sameHostRestartPersists
+    }),
     ...relayOriginRelationshipNotes({
       relayUrl,
       origin: health?.origin || null,
@@ -12486,6 +13057,9 @@ function buildRelayInspectPayload(relayUrl, rawHealth) {
     origin: health?.origin || null,
     publicOrigin,
     publicOriginSource,
+    stateBackend,
+    deploymentScope,
+    sameHostRestartPersists,
     shareLinkBaseUrl,
     statusApiBaseUrl,
     relayUrlMatchesOrigin,
@@ -12493,6 +13067,7 @@ function buildRelayInspectPayload(relayUrl, rawHealth) {
     publicOriginLooksLocal,
     connectorUiAvailable,
     hostedShareRedirectReady,
+    deploymentSummary,
     capabilities: health?.capabilities || [],
     recommendedCommands: compatible ? buildRelayServeRecommendedCommands(publicOrigin) : {},
     notes
@@ -12500,6 +13075,23 @@ function buildRelayInspectPayload(relayUrl, rawHealth) {
 }
 function createRelayCommand() {
   const relay = new Command8("relay").description("Run the local connector relay prototype server");
+  relay.addHelpText(
+    "after",
+    [
+      "",
+      "  Hosted remote-approval path:",
+      "    zk-agent relay serve --public-origin https://relay.example.com",
+      "    zk-agent relay inspect --relay-url <url>",
+      "    zk-agent wallet create --relay-url <url> --wait-relay --prompt-code",
+      "    zk-agent wallet reapprove --name main --relay-url <url> --wait-relay --prompt-code",
+      "",
+      "  Keep `wallet create|reapprove --await-local` as the default baseline when",
+      "  the browser and terminal are colocated.",
+      "",
+      "  Use `relay inspect` before sending operators to a hosted share link so",
+      "  the public origin, connector UI, and hosted-readiness contract are visible."
+    ].join("\n")
+  );
   relay.command("serve").description("Serve the local relay API and, when available, the built connector UI").option("--host <host>", "Host to bind", "127.0.0.1").option("--port <port>", "Port to bind (0 = choose a free port)", "4445").option(
     "--public-origin <url>",
     "Public base URL to advertise in share/status links when the relay is behind a tunnel or reverse proxy"
@@ -12521,6 +13113,19 @@ function createRelayCommand() {
     const hostedShareRedirectReady = connectorUiAvailable && !publicOriginLooksLocal;
     const { shareLinkBaseUrl, statusApiBaseUrl } = buildAdvertisedRelayBases(publicOrigin);
     const recommendedCommands = buildRelayServeRecommendedCommands(publicOrigin);
+    const deploymentSummary = buildRelayDeploymentSummary({
+      origin: server.origin,
+      publicOrigin,
+      publicOriginSource,
+      shareLinkBaseUrl,
+      statusApiBaseUrl,
+      publicOriginLooksLocal,
+      connectorUiAvailable,
+      hostedShareRedirectReady,
+      stateBackend: "local-filesystem",
+      deploymentScope: "single-host",
+      sameHostRestartPersists: true
+    });
     const notes = relayHostedReadinessNotes({
       compatible: true,
       publicOrigin,
@@ -12533,9 +13138,13 @@ function createRelayCommand() {
       origin: server.origin,
       publicOrigin,
       publicOriginSource,
+      stateBackend: "local-filesystem",
+      deploymentScope: "single-host",
+      sameHostRestartPersists: true,
       shareLinkBaseUrl,
       statusApiBaseUrl,
       publicOriginLooksLocal,
+      deploymentSummary,
       port: server.port,
       healthUrl: `${server.origin}/health`,
       publicHealthUrl: `${publicOrigin}/health`,
@@ -12562,6 +13171,12 @@ function createRelayCommand() {
         humanLine("public origin", publicOrigin);
       }
       humanLine("public origin source", publicOriginSource);
+      humanLine("state backend", payload.stateBackend);
+      humanLine("deployment scope", payload.deploymentScope);
+      humanLine(
+        "same-host restart persists",
+        payload.sameHostRestartPersists ? "yes" : "no"
+      );
       humanLine("share-link base", shareLinkBaseUrl);
       humanLine("status api base", statusApiBaseUrl);
       humanLine("health", `${server.origin}/health`);
@@ -12618,6 +13233,18 @@ function createRelayCommand() {
     if (payload.publicOriginSource) {
       humanLine("public origin source", payload.publicOriginSource);
     }
+    if (payload.stateBackend) {
+      humanLine("state backend", payload.stateBackend);
+    }
+    if (payload.deploymentScope) {
+      humanLine("deployment scope", payload.deploymentScope);
+    }
+    if (payload.sameHostRestartPersists !== null) {
+      humanLine(
+        "same-host restart persists",
+        payload.sameHostRestartPersists ? "yes" : "no"
+      );
+    }
     humanLine("share-link base", payload.shareLinkBaseUrl);
     humanLine("status api base", payload.statusApiBaseUrl);
     if (payload.relayUrlMatchesOrigin !== null) {
@@ -13260,6 +13887,39 @@ function relayOutputAliases(relay) {
     relayStatusApiBaseUrl: statusApiBaseUrl
   };
 }
+function determineRelayRecoveryMode(options) {
+  if (options.recommendedCommands.reissueRemoteApproval && options.nextAction === options.recommendedCommands.reissueRemoteApproval) {
+    return "reissue-remote-approval";
+  }
+  if (options.recommendedCommands.relayInspect && options.nextAction === options.recommendedCommands.relayInspect) {
+    return "inspect-relay";
+  }
+  if (options.recommendedCommands.approve && options.nextAction === options.recommendedCommands.approve) {
+    return "approve";
+  }
+  return "status-poll";
+}
+function buildRelayRecoverySummary(options) {
+  const aliases = relayOutputAliases(options.relay);
+  return {
+    requestId: options.requestId,
+    walletName: options.walletName || null,
+    relayUrl: options.relayUrl,
+    relayStatus: options.relayStatus ?? options.relay?.status ?? null,
+    approvalReady: typeof options.approvalReady === "boolean" ? options.approvalReady : options.relay && "approval_ready" in options.relay ? options.relay.approval_ready : null,
+    nextAction: options.nextAction,
+    shareLinkBaseUrl: aliases.relayShareLinkBaseUrl || null,
+    statusApiBaseUrl: aliases.relayStatusApiBaseUrl || null,
+    recoveryMode: determineRelayRecoveryMode({
+      nextAction: options.nextAction,
+      recommendedCommands: options.recommendedCommands
+    }),
+    includesStatusPoll: Boolean(options.recommendedCommands.status),
+    includesApprove: Boolean(options.recommendedCommands.approve),
+    includesRelayInspect: Boolean(options.recommendedCommands.relayInspect),
+    includesRemoteReissue: Boolean(options.recommendedCommands.reissueRemoteApproval)
+  };
+}
 function sanitizeWalletRequestRecord(request) {
   const { sessionSecretKey: _sessionSecretKey, ...rest } = request;
   return rest;
@@ -14527,6 +15187,197 @@ function buildPendingRequestRecommendedCommands(walletName, requestId, relayUrl,
 function buildPendingRequestNextAction(recommendedCommands) {
   return recommendedCommands.relayStatus ?? recommendedCommands.awaitLocal;
 }
+function buildRelayWaitGuidanceLines(options) {
+  return [
+    ["status", "Waiting for relay approval"],
+    ["request", options.requestId],
+    ["wallet", options.walletName],
+    ["share url", options.relay.share_url],
+    ["status url", options.relay.status_url],
+    ["approval url", options.relay.approval_url],
+    ["expires", options.expiresAt],
+    ["browser step", "Open the share url in a browser and complete connector approval."],
+    [
+      "terminal step",
+      options.codeEntry === "prompt" ? "After the relay is ready, enter the 6-digit approval code in this terminal." : "The CLI will finalize automatically with the provided 6-digit approval code once the relay is ready."
+    ],
+    ["fallback status", options.statusCommand],
+    ["fallback approve", options.approveCommand]
+  ];
+}
+function printRelayWaitGuidance(options) {
+  if (shouldJsonOutput()) return;
+  for (const [label, value] of buildRelayWaitGuidanceLines(options)) {
+    humanLine(label, value);
+  }
+}
+async function buildRelayStatusFollowUp(options) {
+  if (options.relay.status === "expired") {
+    return await buildRelayExpiredRecoveryCommands({
+      walletName: options.relay.request?.walletName,
+      relayUrl: options.relayUrl,
+      paymasterMode: options.relay.request?.requestedPaymasterMode,
+      accountKind: options.relay.request?.requestedAccountKind
+    });
+  }
+  if (options.relay.approval_ready) {
+    const approve = buildWalletRequestRelayApproveRecommendedCommand(
+      options.relay.request_id,
+      options.relayUrl
+    );
+    return {
+      nextAction: approve,
+      recommendedCommands: {
+        status: buildWalletRequestRelayStatusRecommendedCommand(
+          options.relay.request_id,
+          options.relayUrl
+        ),
+        approve
+      }
+    };
+  }
+  return {
+    nextAction: buildWalletRequestRelayStatusRecommendedCommand(
+      options.relay.request_id,
+      options.relayUrl
+    ),
+    recommendedCommands: {
+      status: buildWalletRequestRelayStatusRecommendedCommand(
+        options.relay.request_id,
+        options.relayUrl
+      )
+    }
+  };
+}
+async function buildRelayExpiredRecoveryCommands(options) {
+  const relayInspect = buildRelayInspectRecommendedCommand(options.relayUrl);
+  const walletName = options.walletName?.trim();
+  if (!walletName) {
+    return {
+      nextAction: relayInspect,
+      recommendedCommands: {
+        relayInspect
+      },
+      note: "Relay approval expired. Inspect the hosted relay, then reissue the wallet request again."
+    };
+  }
+  const existingWallet = await loadWalletSession(walletName);
+  const reissueRemoteApproval = existingWallet ? buildWalletReapproveRemoteRecommendedCommand(walletName, options.relayUrl) : buildWalletCreateRemoteRecommendedCommand(
+    options.relayUrl,
+    options.paymasterMode,
+    walletName,
+    options.accountKind
+  );
+  return {
+    nextAction: reissueRemoteApproval,
+    recommendedCommands: {
+      relayInspect,
+      reissueRemoteApproval
+    },
+    note: "Relay approval expired. Reissue the remote request. If the original request used scoped session flags, add those same policy flags again."
+  };
+}
+function buildRelayApprovalTimeoutError(options) {
+  const statusCommand = buildWalletRequestRelayStatusRecommendedCommand(
+    options.requestId,
+    options.relayUrl
+  );
+  const approveCommand = buildWalletRequestRelayApproveRecommendedCommand(
+    options.requestId,
+    options.relayUrl
+  );
+  return new AgentError(
+    "RELAY_APPROVAL_TIMEOUT",
+    `Timed out waiting for relay approval after ${Math.ceil(options.timeoutMs / 1e3)} seconds.`,
+    {
+      requestId: options.requestId,
+      relayUrl: options.relayUrl,
+      timeoutMs: options.timeoutMs,
+      intervalMs: options.intervalMs,
+      retryable: true,
+      statusCommand,
+      approveCommand,
+      relayRecoverySummary: buildRelayRecoverySummary({
+        requestId: options.requestId,
+        walletName: options.walletName,
+        relayUrl: options.relayUrl,
+        relayStatus: null,
+        approvalReady: null,
+        nextAction: statusCommand,
+        recommendedCommands: {
+          status: statusCommand,
+          approve: approveCommand
+        }
+      }),
+      suggestedAction: "Check the current relay status, then finalize the wallet approval once approval_ready=true."
+    }
+  );
+}
+async function buildRelayApprovalExpiredError(options) {
+  const recovery = await buildRelayExpiredRecoveryCommands({
+    walletName: options.walletName,
+    relayUrl: options.relayUrl,
+    paymasterMode: options.paymasterMode,
+    accountKind: options.accountKind
+  });
+  return new AgentError(
+    "RELAY_APPROVAL_EXPIRED",
+    `Relay approval expired before the encrypted payload was ready for request ${options.requestId}.`,
+    {
+      requestId: options.requestId,
+      relayUrl: options.relayUrl,
+      retryable: true,
+      note: recovery.note,
+      relayInspectCommand: recovery.recommendedCommands.relayInspect,
+      reissueRemoteApprovalCommand: recovery.recommendedCommands.reissueRemoteApproval,
+      relayRecoverySummary: buildRelayRecoverySummary({
+        requestId: options.requestId,
+        walletName: options.walletName,
+        relayUrl: options.relayUrl,
+        relayStatus: "expired",
+        approvalReady: false,
+        nextAction: recovery.nextAction,
+        recommendedCommands: recovery.recommendedCommands
+      }),
+      suggestedAction: "Inspect the hosted relay, then reissue the remote approval request."
+    }
+  );
+}
+function buildRelayApprovalNotReadyError(options) {
+  const statusCommand = buildWalletRequestRelayStatusRecommendedCommand(
+    options.requestId,
+    options.relayUrl
+  );
+  const approveCommand = buildWalletRequestRelayApproveRecommendedCommand(
+    options.requestId,
+    options.relayUrl
+  );
+  return new AgentError(
+    "RELAY_APPROVAL_NOT_READY",
+    `Relay approval is not ready yet for request ${options.requestId}.`,
+    {
+      requestId: options.requestId,
+      relayUrl: options.relayUrl,
+      status: options.status,
+      approvalReady: options.approvalReady,
+      retryable: true,
+      statusCommand,
+      approveCommand,
+      relayRecoverySummary: buildRelayRecoverySummary({
+        requestId: options.requestId,
+        relayUrl: options.relayUrl,
+        relayStatus: options.status,
+        approvalReady: options.approvalReady,
+        nextAction: statusCommand,
+        recommendedCommands: {
+          status: statusCommand,
+          approve: approveCommand
+        }
+      }),
+      suggestedAction: "Check the current relay status, then retry approval once approval_ready=true."
+    }
+  );
+}
 function buildRequestListEntryRecommendedCommands(walletName, requestId, paymasterMode) {
   return {
     show: buildWalletRequestShowRecommendedCommand(requestId),
@@ -14669,25 +15520,56 @@ async function fetchEncryptedRelayApprovalPayload(relayUrl, requestId, options)
       intervalMs: options.intervalMs ?? 2e3
     });
     if (!relay.approval_ready) {
-      throw new Error(`Relay approval expired before the encrypted payload was ready for request ${requestId}.`);
+      throw await buildRelayApprovalExpiredError({
+        requestId,
+        relayUrl
+      });
     }
   }
   const approval = await fetchRelayApproval(relayUrl, requestId);
   if (!approval.approval_ready || !approval.encrypted_payload) {
-    throw new Error(`Relay approval is not ready yet for request ${requestId}.`);
+    throw buildRelayApprovalNotReadyError({
+      requestId,
+      relayUrl,
+      status: approval.status,
+      approvalReady: approval.approval_ready
+    });
   }
   return approval.encrypted_payload;
 }
 async function finalizePublishedRelayWalletRequest(options) {
-  const encryptedPayload = await fetchEncryptedRelayApprovalPayload(
-    options.relayUrl,
-    options.walletRequest.requestId,
-    {
-      wait: true,
-      timeoutMs: options.timeoutMs,
-      intervalMs: options.intervalMs
+  let encryptedPayload;
+  try {
+    encryptedPayload = await fetchEncryptedRelayApprovalPayload(
+      options.relayUrl,
+      options.walletRequest.requestId,
+      {
+        wait: true,
+        timeoutMs: options.timeoutMs,
+        intervalMs: options.intervalMs
+      }
+    );
+  } catch (error) {
+    if (error instanceof Error && error.message.startsWith("Timed out waiting for relay approval after ")) {
+      throw buildRelayApprovalTimeoutError({
+        requestId: options.walletRequest.requestId,
+        walletName: options.walletRequest.walletName,
+        relayUrl: options.relayUrl,
+        timeoutMs: options.timeoutMs,
+        intervalMs: options.intervalMs
+      });
     }
-  );
+    if (error instanceof AgentError && error.code === "RELAY_APPROVAL_EXPIRED") {
+      throw await buildRelayApprovalExpiredError({
+        requestId: options.walletRequest.requestId,
+        walletName: options.walletRequest.walletName,
+        relayUrl: options.relayUrl,
+        paymasterMode: options.walletRequest.requestedPaymasterMode,
+        accountKind: options.walletRequest.requestedAccountKind
+      });
+    }
+    throw error;
+  }
   const code = options.code || (options.promptCode ? await readApprovalCodeFromStdin() : void 0);
   if (!code) {
     throw new Error("Missing relay approval code.");
@@ -15054,7 +15936,9 @@ async function printBuiltinSmartAccountProfiles() {
 }
 function createWalletCommand(deps) {
   const resolvedDeps = resolveWalletCommandDeps(deps);
-  const wallet = new Command9("wallet").description("Manage wallet sessions");
+  const wallet = new Command9("wallet").description(
+    "Create, inspect, and recover local-first wallet sessions"
+  );
   const request = new Command9("request").description("Inspect and finalize pending wallet requests");
   const signer = new Command9("signer").description(
     "Inspect and manage the stored local execution signer for a wallet"
@@ -15104,7 +15988,8 @@ function createWalletCommand(deps) {
       "  Hosted remote approval path:",
       "    zk-agent relay inspect --relay-url <url>",
       "    zk-agent wallet create --relay-url <url> --wait-relay --prompt-code",
-      "    zk-agent wallet reapprove --name main --relay-url <url> --wait-relay --prompt-code"
+      "    zk-agent wallet reapprove --name main --relay-url <url> --wait-relay --prompt-code",
+      "    zk-agent next"
     ].join("\n")
   );
   request.addHelpText(
@@ -15118,7 +16003,11 @@ function createWalletCommand(deps) {
       "  Remote relay completion:",
       "    zk-agent wallet request relay-publish --request-id <id> --relay-url <url>",
       "    zk-agent wallet request relay-status --request-id <id> --relay-url <url> --wait",
-      "    zk-agent wallet request approve --request-id <id> --relay-url <url> --code <code> --wait"
+      "    zk-agent wallet request approve --request-id <id> --relay-url <url> --code <code> --wait",
+      "",
+      "  If relay-status returns status = expired:",
+      "    zk-agent relay inspect --relay-url <url>",
+      "    zk-agent wallet create|reapprove --relay-url <url> --wait-relay --prompt-code"
     ].join("\n")
   );
   signer.addHelpText(
@@ -15217,6 +16106,23 @@ function createWalletCommand(deps) {
       }
       const relay = options.relayUrl ? await publishWalletRequestToRelay(request2, options.relayUrl) : void 0;
       if (relayWaitOptions) {
+        if (relay) {
+          printRelayWaitGuidance({
+            requestId: request2.requestId,
+            walletName: request2.walletName,
+            relay,
+            expiresAt: request2.expiresAt,
+            codeEntry: relayWaitOptions.promptCode ? "prompt" : "provided",
+            statusCommand: buildWalletRequestRelayStatusRecommendedCommand(
+              request2.requestId,
+              relayWaitOptions.relayUrl
+            ),
+            approveCommand: buildWalletRequestRelayApproveRecommendedCommand(
+              request2.requestId,
+              relayWaitOptions.relayUrl
+            )
+          });
+        }
         const { payload, walletRecord } = await finalizePublishedRelayWalletRequest({
           walletRequest: request2,
           ...relayWaitOptions
@@ -15248,6 +16154,20 @@ function createWalletCommand(deps) {
         options.relayUrl,
         request2.requestedPaymasterMode
       );
+      const nextAction = buildPendingRequestNextAction(recommendedCommands);
+      const relayRecoverySummary = relay && recommendedCommands.relayStatus && recommendedCommands.relayApprove ? buildRelayRecoverySummary({
+        requestId: request2.requestId,
+        walletName: request2.walletName,
+        relayUrl: options.relayUrl,
+        relayStatus: relay.status,
+        approvalReady: null,
+        nextAction,
+        recommendedCommands: {
+          status: recommendedCommands.relayStatus,
+          approve: recommendedCommands.relayApprove
+        },
+        relay
+      }) : void 0;
       printResult(
         [
           ["wallet", request2.walletName],
@@ -15290,6 +16210,7 @@ function createWalletCommand(deps) {
           approvalUrl: request2.approvalUrl,
           relay,
           ...relayOutputAliases(relay),
+          relayRecoverySummary,
           expiresAt: request2.expiresAt,
           chain: request2.chain,
           chainId: request2.chainId,
@@ -15297,7 +16218,7 @@ function createWalletCommand(deps) {
           paymasterMode: request2.requestedPaymasterMode,
           capabilities: request2.requestedCapabilities,
           sessionScope: request2.requestedSessionScope,
-          nextAction: buildPendingRequestNextAction(recommendedCommands),
+          nextAction,
           recommendedCommands
         }
       );
@@ -15365,6 +16286,23 @@ function createWalletCommand(deps) {
       }
       const relay = options.relayUrl ? await publishWalletRequestToRelay(request2, options.relayUrl) : void 0;
       if (relayWaitOptions) {
+        if (relay) {
+          printRelayWaitGuidance({
+            requestId: request2.requestId,
+            walletName: request2.walletName,
+            relay,
+            expiresAt: request2.expiresAt,
+            codeEntry: relayWaitOptions.promptCode ? "prompt" : "provided",
+            statusCommand: buildWalletRequestRelayStatusRecommendedCommand(
+              request2.requestId,
+              relayWaitOptions.relayUrl
+            ),
+            approveCommand: buildWalletRequestRelayApproveRecommendedCommand(
+              request2.requestId,
+              relayWaitOptions.relayUrl
+            )
+          });
+        }
         const { payload, walletRecord: approvedWallet } = await finalizePublishedRelayWalletRequest({
           walletRequest: request2,
           ...relayWaitOptions
@@ -15396,6 +16334,20 @@ function createWalletCommand(deps) {
         options.relayUrl,
         request2.requestedPaymasterMode
       );
+      const nextAction = buildPendingRequestNextAction(recommendedCommands);
+      const relayRecoverySummary = relay && recommendedCommands.relayStatus && recommendedCommands.relayApprove ? buildRelayRecoverySummary({
+        requestId: request2.requestId,
+        walletName: request2.walletName,
+        relayUrl: options.relayUrl,
+        relayStatus: relay.status,
+        approvalReady: null,
+        nextAction,
+        recommendedCommands: {
+          status: recommendedCommands.relayStatus,
+          approve: recommendedCommands.relayApprove
+        },
+        relay
+      }) : void 0;
       printResult(
         [
           ["wallet", request2.walletName],
@@ -15438,7 +16390,8 @@ function createWalletCommand(deps) {
           request: sanitizeWalletRequestRecord(request2),
           relay,
           ...relayOutputAliases(relay),
-          nextAction: buildPendingRequestNextAction(recommendedCommands),
+          relayRecoverySummary,
+          nextAction,
           recommendedCommands
         }
       );
@@ -15582,6 +16535,13 @@ function createWalletCommand(deps) {
       walletRecord.walletName,
       summary
     );
+    const tokenDiscoverySummary = buildWalletTokenDiscoverySummary({
+      walletName: walletRecord.walletName,
+      chain: summary.chain,
+      nextAction: summary.recommendedCommand,
+      paymasterMode: resolveEffectivePaymasterSelection(walletRecord)?.mode,
+      recommendedCommands
+    });
     printResult(
       [
         ...walletNextLines(summary),
@@ -15595,6 +16555,7 @@ function createWalletCommand(deps) {
         ok: true,
         inspection,
         summary,
+        tokenDiscoverySummary,
         recommendedCommands
       }
     );
@@ -15758,6 +16719,30 @@ function createWalletCommand(deps) {
   request.command("relay-publish").description("Publish a stored wallet request to a relay server and get a shareable approval URL").requiredOption("--request-id <id>", "Wallet request id").requiredOption("--relay-url <url>", "Relay server base URL").action(async (options) => {
     const walletRequest = await requireActiveWalletRequest(options.requestId);
     const relay = await publishWalletRequestToRelay(walletRequest, options.relayUrl);
+    const nextAction = buildWalletRequestRelayStatusRecommendedCommand(
+      relay.request_id,
+      options.relayUrl
+    );
+    const recommendedCommands = {
+      status: buildWalletRequestRelayStatusRecommendedCommand(
+        relay.request_id,
+        options.relayUrl
+      ),
+      approve: buildWalletRequestRelayApproveRecommendedCommand(
+        relay.request_id,
+        options.relayUrl
+      )
+    };
+    const relayRecoverySummary = buildRelayRecoverySummary({
+      requestId: relay.request_id,
+      walletName: walletRequest.walletName,
+      relayUrl: options.relayUrl,
+      relayStatus: relay.status,
+      approvalReady: null,
+      nextAction,
+      recommendedCommands,
+      relay
+    });
     printResult(
       [
         ["status", relay.status],
@@ -15766,58 +16751,82 @@ function createWalletCommand(deps) {
         ["status url", relay.status_url],
         ["share-link base", relay.share_url.replace(/\/[^/]+$/, "")],
         ["status api base", relay.status_url.replace(/\/[^/]+$/, "")],
-        ["next status", buildWalletRequestRelayStatusRecommendedCommand(relay.request_id, options.relayUrl)],
-        ["next approve", buildWalletRequestRelayApproveRecommendedCommand(relay.request_id, options.relayUrl)]
+        ["next status", recommendedCommands.status],
+        ["next approve", recommendedCommands.approve]
       ],
       {
         ok: true,
         walletRequestId: walletRequest.requestId,
         relay,
         ...relayOutputAliases(relay),
+        relayRecoverySummary,
         request: sanitizeWalletRequestRecord(walletRequest),
-        nextAction: buildWalletRequestRelayStatusRecommendedCommand(relay.request_id, options.relayUrl),
-        recommendedCommands: {
-          status: buildWalletRequestRelayStatusRecommendedCommand(relay.request_id, options.relayUrl),
-          approve: buildWalletRequestRelayApproveRecommendedCommand(relay.request_id, options.relayUrl)
-        }
+        nextAction,
+        recommendedCommands
       }
     );
   });
   request.command("relay-status").description("Inspect the relay status of a published wallet request, optionally waiting until approval is ready").requiredOption("--request-id <id>", "Wallet request id").requiredOption("--relay-url <url>", "Relay server base URL").option("--wait", "Poll until the encrypted relay approval is ready or the request expires").option("--timeout-seconds <seconds>", "How long to wait while polling relay status", "600").option("--interval-ms <milliseconds>", "How often to poll relay status while waiting", "2000").action(async (options) => {
-    const relay = options.wait ? await waitForRelayApprovalReady(options.relayUrl, options.requestId, {
-      timeoutMs: parsePositiveIntegerOption(options.timeoutSeconds, "--timeout-seconds", 600) * 1e3,
-      intervalMs: parsePositiveIntegerOption(options.intervalMs, "--interval-ms", 2e3)
-    }) : await fetchRelayStatus(options.relayUrl, options.requestId);
+    const timeoutMs = parsePositiveIntegerOption(options.timeoutSeconds, "--timeout-seconds", 600) * 1e3;
+    const intervalMs = parsePositiveIntegerOption(options.intervalMs, "--interval-ms", 2e3);
+    const walletRequest = await loadWalletRequest(options.requestId);
+    let relay;
+    try {
+      relay = options.wait ? await waitForRelayApprovalReady(options.relayUrl, options.requestId, {
+        timeoutMs,
+        intervalMs
+      }) : await fetchRelayStatus(options.relayUrl, options.requestId);
+    } catch (error) {
+      if (options.wait && error instanceof Error && error.message.startsWith("Timed out waiting for relay approval after ")) {
+        throw buildRelayApprovalTimeoutError({
+          requestId: options.requestId,
+          walletName: walletRequest?.walletName,
+          relayUrl: options.relayUrl,
+          timeoutMs,
+          intervalMs
+        });
+      }
+      throw error;
+    }
+    const followUp = await buildRelayStatusFollowUp({
+      relay,
+      relayUrl: options.relayUrl
+    });
+    const relayRecoverySummary = buildRelayRecoverySummary({
+      requestId: relay.request_id,
+      walletName: relay.request?.walletName || walletRequest?.walletName,
+      relayUrl: options.relayUrl,
+      relayStatus: relay.status,
+      approvalReady: relay.approval_ready,
+      nextAction: followUp.nextAction,
+      recommendedCommands: followUp.recommendedCommands,
+      relay
+    });
     printResult(
       [
         ["status", relay.status],
         ["request", relay.request_id],
         ["approval ready", relay.approval_ready ? "yes" : "no"],
-        ["share url", relay.approval_url],
-        ["share-link base", relay.approval_url.replace(/\/[^/]+$/, "")],
-        ["status api base", `${relay.approval_url.replace(/\/r\/[^/]+$/, "")}/api/requests`],
+        ["share url", relay.share_url],
+        ["status url", relay.status_url],
+        ["approval url", relay.approval_url],
+        ["share-link base", relay.share_url.replace(/\/[^/]+$/, "")],
+        ["status api base", relay.status_url.replace(/\/[^/]+$/, "")],
         ["expires", relay.expires_at],
-        ["next status", buildWalletRequestRelayStatusRecommendedCommand(relay.request_id, options.relayUrl)],
-        ...relay.approval_ready ? [[
-          "next approve",
-          buildWalletRequestRelayApproveRecommendedCommand(relay.request_id, options.relayUrl)
-        ]] : []
+        ...followUp.note ? [["note", followUp.note]] : [],
+        ...Object.entries(followUp.recommendedCommands).map(
+          ([label, command]) => [label, command]
+        )
       ],
       {
         ok: true,
         walletRequestId: relay.request_id,
         relay,
         ...relayOutputAliases(relay),
-        nextAction: relay.approval_ready ? buildWalletRequestRelayApproveRecommendedCommand(relay.request_id, options.relayUrl) : buildWalletRequestRelayStatusRecommendedCommand(relay.request_id, options.relayUrl),
-        recommendedCommands: {
-          status: buildWalletRequestRelayStatusRecommendedCommand(relay.request_id, options.relayUrl),
-          ...relay.approval_ready ? {
-            approve: buildWalletRequestRelayApproveRecommendedCommand(
-              relay.request_id,
-              options.relayUrl
-            )
-          } : {}
-        }
+        relayRecoverySummary,
+        nextAction: followUp.nextAction,
+        recommendedCommands: followUp.recommendedCommands,
+        ...followUp.note ? { note: followUp.note } : {}
       }
     );
   });
@@ -15830,6 +16839,24 @@ function createWalletCommand(deps) {
     if (options.wait && !options.relayUrl) {
       throw new Error("--wait is only supported together with --relay-url.");
     }
+    if (options.wait && options.relayUrl && !shouldJsonOutput()) {
+      const relayStatus2 = await fetchRelayStatus(options.relayUrl, walletRequest.requestId);
+      printRelayWaitGuidance({
+        requestId: walletRequest.requestId,
+        walletName: walletRequest.walletName,
+        relay: relayStatus2,
+        expiresAt: walletRequest.expiresAt,
+        codeEntry: "provided",
+        statusCommand: buildWalletRequestRelayStatusRecommendedCommand(
+          walletRequest.requestId,
+          options.relayUrl
+        ),
+        approveCommand: buildWalletRequestRelayApproveRecommendedCommand(
+          walletRequest.requestId,
+          options.relayUrl
+        )
+      });
+    }
     const payload = options.payload ? parseJsonInput(options.payload) : decryptApprovedPayloadForWalletRequest(
       walletRequest,
       options.encryptedPayload ? parseJsonInput(options.encryptedPayload) : await fetchEncryptedRelayApprovalPayload(options.relayUrl, walletRequest.requestId, {
@@ -18137,7 +19164,16 @@ async function printWorkflowRunCommandResult(execution) {
       walletName: execution.result.walletName,
       nextAction: execution.result.nextCommand,
       chain: execution.result.plan.chain,
-      intent: execution.result.intent
+      intent: execution.result.intent,
+      paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.goal)
+    });
+    const tokenDiscoverySummary2 = buildWorkflowTokenDiscoverySummary({
+      walletName: execution.result.walletName,
+      chain: execution.result.plan.chain,
+      intent: execution.result.intent,
+      nextAction: execution.result.nextCommand,
+      paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.goal),
+      recommendedCommands: recommendedCommands2
     });
     printResult(
       prependWorkflowRequestId(
@@ -18163,6 +19199,7 @@ async function printWorkflowRunCommandResult(execution) {
         ...workflowWalletApprovalRelayAliases(execution.walletApproval?.relay),
         walletApprovalRecommendedCommands: execution.walletApproval?.recommendedCommands,
         walletApproval: serializeWalletApproval(execution.walletApproval),
+        tokenDiscoverySummary: tokenDiscoverySummary2,
         recommendedCommands: recommendedCommands2
       }
     );
@@ -18178,7 +19215,16 @@ async function printWorkflowRunCommandResult(execution) {
     walletName: execution.status.walletName,
     nextAction: execution.status.recommendedCommand,
     chain: execution.status.plan.chain,
-    intent: execution.status.intent
+    intent: execution.status.intent,
+    paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.checkpoint?.goal)
+  });
+  const tokenDiscoverySummary = buildWorkflowTokenDiscoverySummary({
+    walletName: execution.status.walletName,
+    chain: execution.status.plan.chain,
+    intent: execution.status.intent,
+    nextAction: execution.status.recommendedCommand,
+    paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.checkpoint?.goal),
+    recommendedCommands
   });
   printResult(
     prependWorkflowRequestId(
@@ -18205,6 +19251,7 @@ async function printWorkflowRunCommandResult(execution) {
       ...workflowWalletApprovalRelayAliases(execution.walletApproval?.relay),
       walletApprovalRecommendedCommands: execution.walletApproval?.recommendedCommands,
       walletApproval: serializeWalletApproval(execution.walletApproval),
+      tokenDiscoverySummary,
       recommendedCommands
     }
   );
@@ -18450,6 +19497,7 @@ async function executeWorkflowAutoCommand(options, deps = resolveWorkflowCommand
     action: result ? result.stage : walletApproval?.stage ?? status.status,
     requestId: context.requestId,
     checkpointPersisted: Boolean(checkpoint),
+    goal: context.goal,
     checkpoint,
     status,
     result,
@@ -18468,7 +19516,16 @@ async function printWorkflowAutoCommandResult(execution) {
     walletName: execution.status.walletName,
     nextAction,
     chain: execution.status.plan.chain,
-    intent: execution.status.intent
+    intent: execution.status.intent,
+    paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.goal) ?? extractWorkflowGoalPaymasterMode(execution.checkpoint?.goal)
+  });
+  const tokenDiscoverySummary = buildWorkflowTokenDiscoverySummary({
+    walletName: execution.status.walletName,
+    chain: execution.status.plan.chain,
+    intent: execution.status.intent,
+    nextAction,
+    paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.goal) ?? extractWorkflowGoalPaymasterMode(execution.checkpoint?.goal),
+    recommendedCommands
   });
   const summaryLines = [
     ["source", execution.source],
@@ -18506,6 +19563,7 @@ async function printWorkflowAutoCommandResult(execution) {
       ...workflowWalletApprovalRelayAliases(execution.walletApproval?.relay),
       walletApprovalRecommendedCommands: execution.walletApproval?.recommendedCommands,
       walletApproval: serializeWalletApproval(execution.walletApproval),
+      tokenDiscoverySummary,
       recommendedCommands
     }
   );
@@ -18530,7 +19588,21 @@ function buildWorkflowCheckpointRecommendedCommands(checkpoint) {
     walletStatus: buildWalletStatusRecommendedCommand(checkpoint.walletName)
   };
 }
+function extractWorkflowGoalPaymasterMode(goal) {
+  if (!goal || !("paymaster" in goal)) {
+    return void 0;
+  }
+  return goal.paymaster?.mode;
+}
+function extractPaymasterModeFromCommand(command) {
+  if (!command) {
+    return void 0;
+  }
+  const match = command.match(/--paymaster-mode (none|sponsored|approval-based)\b/);
+  return match?.[1];
+}
 function buildWorkflowRuntimeRecommendedCommands(input) {
+  const paymasterMode = extractPaymasterModeFromCommand(input.nextAction) ?? input.paymasterMode;
   return {
     inspectDefaults: "zk-agent defaults",
     list: buildWorkflowListRecommendedCommand(),
@@ -18547,30 +19619,76 @@ function buildWorkflowRuntimeRecommendedCommands(input) {
     ...input.nextAction ? {
       nextAction: input.nextAction
     } : {},
-    ...input.chain && input.intent && workflowIntentSupportsTokenDiscovery2(input.intent) ? {
+    ...input.chain && input.intent && workflowIntentSupportsTokenDiscovery3(input.intent) ? {
       ...input.walletName ? {
         discoverAssets: `zk-agent assets --wallet ${input.walletName}`,
         discoverOwnedTokens: `zk-agent tokens --wallet ${input.walletName} --owned`
       } : {},
       discoverTokens: `zk-agent tokens --chain ${input.chain}`,
       inspectToken: `zk-agent resolve-token --chain ${input.chain} --symbol <symbol>`
+    } : {},
+    ...input.chain && paymasterMode === "approval-based" ? {
+      discoverPaymasterTokens: buildPaymasterFeeTokensRecommendedCommand(input.chain),
+      inspectPaymasterToken: buildPaymasterFeeTokenResolveRecommendedCommand(input.chain)
     } : {}
   };
 }
-function workflowIntentSupportsTokenDiscovery2(intent) {
+function workflowIntentSupportsTokenDiscovery3(intent) {
   return intent === "send-token" || intent === "swap" || intent === "bridge" || intent === "deposit" || intent === "withdraw";
 }
+function buildWorkflowTokenDiscoverySummary(input) {
+  if (!input.recommendedCommands) {
+    return void 0;
+  }
+  const hasTokenDiscovery = Boolean(input.recommendedCommands.discoverAssets) || Boolean(input.recommendedCommands.discoverOwnedTokens) || Boolean(input.recommendedCommands.discoverTokens) || Boolean(input.recommendedCommands.inspectToken) || Boolean(input.recommendedCommands.discoverPaymasterTokens) || Boolean(input.recommendedCommands.inspectPaymasterToken);
+  if (!hasTokenDiscovery) {
+    return void 0;
+  }
+  return {
+    walletName: input.walletName || null,
+    chain: input.chain || null,
+    intent: input.intent || null,
+    nextAction: input.nextAction || null,
+    paymasterMode: input.paymasterMode || null,
+    tokenizedIntent: input.intent ? workflowIntentSupportsTokenDiscovery3(input.intent) : false,
+    includesAssetDiscovery: Boolean(input.recommendedCommands.discoverAssets),
+    includesOwnedTokenDiscovery: Boolean(input.recommendedCommands.discoverOwnedTokens),
+    includesChainTokenDiscovery: Boolean(input.recommendedCommands.discoverTokens),
+    includesDirectTokenInspection: Boolean(input.recommendedCommands.inspectToken),
+    includesPaymasterTokenDiscovery: Boolean(
+      input.recommendedCommands.discoverPaymasterTokens
+    ),
+    includesPaymasterTokenInspection: Boolean(
+      input.recommendedCommands.inspectPaymasterToken
+    )
+  };
+}
+function buildWorkflowTokenInputErrorSummary(input) {
+  return {
+    chain: input.chain || null,
+    queryType: input.tokenAddress ? "address" : input.symbol ? "symbol" : null,
+    query: input.tokenAddress || input.symbol || null,
+    roleFilter: input.role || null,
+    includesChainTokenDiscovery: Boolean(input.recommendedCommands.discoverTokens),
+    includesDirectTokenInspection: Boolean(input.recommendedCommands.inspectToken),
+    workflowHelp: input.recommendedCommands.workflowHelp
+  };
+}
 function buildWorkflowPlanRecommendedCommands(plan) {
   return {
     inspectDefaults: "zk-agent defaults",
     next: plan.recommendedCommand,
     goal: plan.goalCommand,
     workflowHelp: "zk-agent workflow --help",
-    ...workflowIntentSupportsTokenDiscovery2(plan.intent) ? {
+    ...workflowIntentSupportsTokenDiscovery3(plan.intent) ? {
       discoverAssets: buildAssetsRecommendedCommand(plan.walletName),
       discoverOwnedTokens: buildOwnedTokensRecommendedCommand(plan.walletName),
       discoverTokens: buildTokensRecommendedCommand(plan.chain),
       inspectToken: buildResolveTokenRecommendedCommand(plan.chain)
+    } : {},
+    ...plan.paymasterMode === "approval-based" ? {
+      discoverPaymasterTokens: buildPaymasterFeeTokensRecommendedCommand(plan.chain),
+      inspectPaymasterToken: buildPaymasterFeeTokenResolveRecommendedCommand(plan.chain)
     } : {}
   };
 }
@@ -18606,6 +19724,13 @@ function buildWorkflowTokenErrorRecommendedCommands(error) {
 }
 function printWorkflowTokenInputError(error) {
   const recommendedCommands = buildWorkflowTokenErrorRecommendedCommands(error);
+  const tokenDiscoverySummary = buildWorkflowTokenInputErrorSummary({
+    chain: typeof error.details?.chain === "string" ? error.details.chain : void 0,
+    symbol: typeof error.details?.symbol === "string" ? error.details.symbol : void 0,
+    tokenAddress: typeof error.details?.tokenAddress === "string" ? error.details.tokenAddress : void 0,
+    role: typeof error.details?.role === "string" ? error.details.role : void 0,
+    recommendedCommands
+  });
   const lines = [["error", error.message], ["code", error.code]];
   if (typeof error.details?.suggestedAction === "string" && error.details.suggestedAction.length > 0) {
     lines.push(["suggested action", error.details.suggestedAction]);
@@ -18613,6 +19738,7 @@ function printWorkflowTokenInputError(error) {
   lines.push(...workflowFollowupLines(recommendedCommands));
   printResult(lines, {
     ...formatErrorPayload(error),
+    tokenDiscoverySummary,
     recommendedCommands
   });
   process.exitCode = 1;
@@ -18818,6 +19944,7 @@ async function executeWorkflowRunCommand(options, deps = resolveWorkflowCommandD
     if (inspection.walletApproval?.stage === "request-created" || inspection.result.status === "blocked") {
       return {
         requestId: inspection.requestId,
+        goal: context.goal,
         status: inspection.result,
         walletApproval: inspection.walletApproval,
         checkpoint: inspection.checkpoint
@@ -18855,6 +19982,7 @@ async function executeWorkflowRunCommand(options, deps = resolveWorkflowCommandD
   );
   return {
     requestId: context.requestId,
+    goal: context.goal,
     result,
     walletApproval
   };
@@ -18931,14 +20059,13 @@ function assertWorkflowResumeReady(result) {
 }
 function buildWorkflowHelpText() {
   return [
-    "",
-    "Default workflow path:",
-    "  Guided default:",
-    "    zk-agent workflow auto --wallet main --intent <intent> [goal flags] --create-checkpoint --execute-when-ready",
     "",
     "  Flagship native pay path:",
     "    zk-agent workflow pay --wallet main --to <address> --amount <amount>",
     "",
+    "  Broader multi-intent guided path:",
+    "    zk-agent workflow auto --wallet main --intent <intent> [goal flags] --create-checkpoint --execute-when-ready",
+    "",
     "  Checkpointed execution:",
     "    zk-agent workflow start --wallet main --intent <intent> [goal flags]",
     "    zk-agent workflow status --request-id <id>",
@@ -18948,13 +20075,24 @@ function buildWorkflowHelpText() {
     "  Funding-only step:",
     "    zk-agent workflow fund --wallet main --amount <amount> --execute",
     "",
+    "  Token/discovery recovery path:",
+    "    zk-agent assets --wallet main",
+    "    zk-agent tokens --wallet main --owned",
+    "    zk-agent tokens --chain zksync-sepolia",
+    "    zk-agent resolve-token --chain zksync-sepolia --symbol USDC",
+    "",
+    "  Approval-based paymaster fee-token recovery:",
+    "    zk-agent tokens --chain zksync-sepolia --role paymaster-fee-token",
+    "    zk-agent resolve-token --chain zksync-sepolia --symbol <symbol> --role paymaster-fee-token",
+    "    zk-agent defaults",
+    "",
     "  Lower-level one-shot escape hatch:",
     "    zk-agent workflow run --wallet main --intent <intent> [goal flags]"
   ].join("\n");
 }
 var WORKFLOW_HELP_COMMAND_ORDER = [
-  "auto",
   "pay",
+  "auto",
   "start",
   "status",
   "next",
@@ -18983,7 +20121,7 @@ function applyWorkflowHelpCommandOrder(workflow) {
 function createWorkflowCommand(deps) {
   const resolvedDeps = resolveWorkflowCommandDeps(deps);
   const workflow = new Command10("workflow").description(
-    "Build a higher-level CLI workflow for a stored wallet and a concrete action intent"
+    "Plan, persist, and execute higher-level wallet workflows"
   );
   workflow.addHelpText("after", buildWorkflowHelpText());
   workflow.command("plan").description("Plan the prerequisite and execution steps for one concrete wallet workflow").requiredOption(
@@ -18995,15 +20133,27 @@ function createWorkflowCommand(deps) {
   ).option("--to-chain <chain>", "Optional destination chain override for bridge workflows").option("--paymaster-mode <mode>", "none, sponsored, or approval-based").option("--paymaster-address <address>", "Explicit paymaster contract address override").option("--paymaster-token <address>", "ERC-20 token address for approval-based paymaster mode").action(
     async (options) => {
       const intent = parseWorkflowIntent(options.intent);
+      const paymasterInput = resolveWorkflowPaymasterInput(options);
       const { inspection, plan } = await loadWorkflowPlanState(
         options.wallet,
         intent,
         parseWorkflowSwapProtocol(options.protocol),
         options.toChain,
-        resolveWorkflowPaymasterInput(options),
+        paymasterInput,
         resolvedDeps
       );
-      const recommendedCommands = buildWorkflowPlanRecommendedCommands(plan);
+      const recommendedCommands = buildWorkflowPlanRecommendedCommands({
+        ...plan,
+        paymasterMode: paymasterInput?.mode
+      });
+      const tokenDiscoverySummary = buildWorkflowTokenDiscoverySummary({
+        walletName: plan.walletName,
+        chain: plan.chain,
+        intent: plan.intent,
+        paymasterMode: paymasterInput?.mode,
+        nextAction: plan.recommendedCommand,
+        recommendedCommands
+      });
       const agentProfile = await loadWorkflowAgentProfile(plan.walletName);
       const agentFollowup = buildAgentFollowup(agentProfile, {
         walletName: plan.walletName,
@@ -19021,6 +20171,7 @@ function createWorkflowCommand(deps) {
           agentFollowup,
           inspection,
           plan,
+          tokenDiscoverySummary,
           recommendedCommands
         }
       );
@@ -19221,7 +20372,16 @@ function createWorkflowCommand(deps) {
       walletName: inspection.result.walletName,
       nextAction: inspection.result.recommendedCommand,
       chain: inspection.result.plan.chain,
-      intent: inspection.result.intent
+      intent: inspection.result.intent,
+      paymasterMode: inspection.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(inspection.checkpoint?.goal)
+    });
+    const tokenDiscoverySummary = buildWorkflowTokenDiscoverySummary({
+      walletName: inspection.result.walletName,
+      chain: inspection.result.plan.chain,
+      intent: inspection.result.intent,
+      nextAction: inspection.result.recommendedCommand,
+      paymasterMode: inspection.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(inspection.checkpoint?.goal),
+      recommendedCommands
     });
     const agentProfile = await loadWorkflowAgentProfile(inspection.result.walletName);
     const agentFollowup = buildAgentFollowup(agentProfile, {
@@ -19253,6 +20413,7 @@ function createWorkflowCommand(deps) {
         ...workflowWalletApprovalRelayAliases(inspection.walletApproval?.relay),
         walletApprovalRecommendedCommands: inspection.walletApproval?.recommendedCommands,
         walletApproval: serializeWalletApproval(inspection.walletApproval),
+        tokenDiscoverySummary,
         recommendedCommands
       }
     );
@@ -19272,7 +20433,16 @@ function createWorkflowCommand(deps) {
       walletName: inspection.result.walletName,
       nextAction: nextCommand,
       chain: inspection.result.plan.chain,
-      intent: inspection.result.intent
+      intent: inspection.result.intent,
+      paymasterMode: inspection.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(inspection.checkpoint?.goal)
+    });
+    const tokenDiscoverySummary = buildWorkflowTokenDiscoverySummary({
+      walletName: inspection.result.walletName,
+      chain: inspection.result.plan.chain,
+      intent: inspection.result.intent,
+      nextAction: nextCommand,
+      paymasterMode: inspection.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(inspection.checkpoint?.goal),
+      recommendedCommands
     });
     const agentProfile = await loadWorkflowAgentProfile(inspection.result.walletName);
     const agentFollowup = buildAgentFollowup(agentProfile, {
@@ -19317,6 +20487,7 @@ function createWorkflowCommand(deps) {
         ...workflowWalletApprovalRelayAliases(inspection.walletApproval?.relay),
         walletApprovalRecommendedCommands: inspection.walletApproval?.recommendedCommands,
         walletApproval: serializeWalletApproval(inspection.walletApproval),
+        tokenDiscoverySummary,
         recommendedCommands
       }
     );
@@ -19337,7 +20508,16 @@ function createWorkflowCommand(deps) {
         walletName: inspection.result.walletName,
         nextAction: inspection.result.recommendedCommand,
         chain: inspection.result.plan.chain,
-        intent: inspection.result.intent
+        intent: inspection.result.intent,
+        paymasterMode: inspection.walletApproval.request.requestedPaymasterMode
+      });
+      const tokenDiscoverySummary2 = buildWorkflowTokenDiscoverySummary({
+        walletName: inspection.result.walletName,
+        chain: inspection.result.plan.chain,
+        intent: inspection.result.intent,
+        nextAction: inspection.result.recommendedCommand,
+        paymasterMode: inspection.walletApproval.request.requestedPaymasterMode,
+        recommendedCommands: recommendedCommands2
       });
       const agentProfile2 = await loadWorkflowAgentProfile(inspection.result.walletName);
       const agentFollowup2 = buildAgentFollowup(agentProfile2, {
@@ -19369,6 +20549,7 @@ function createWorkflowCommand(deps) {
           ...workflowWalletApprovalRelayAliases(inspection.walletApproval.relay),
           walletApprovalRecommendedCommands: inspection.walletApproval.recommendedCommands,
           walletApproval: serializeWalletApproval(inspection.walletApproval),
+          tokenDiscoverySummary: tokenDiscoverySummary2,
           recommendedCommands: recommendedCommands2
         }
       );
@@ -19388,7 +20569,16 @@ function createWorkflowCommand(deps) {
         walletName: execution.status.walletName,
         nextAction: execution.status.recommendedCommand,
         chain: execution.status.plan.chain,
-        intent: execution.status.intent
+        intent: execution.status.intent,
+        paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.checkpoint?.goal)
+      });
+      const tokenDiscoverySummary2 = buildWorkflowTokenDiscoverySummary({
+        walletName: execution.status.walletName,
+        chain: execution.status.plan.chain,
+        intent: execution.status.intent,
+        nextAction: execution.status.recommendedCommand,
+        paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.checkpoint?.goal),
+        recommendedCommands: recommendedCommands2
       });
       const agentProfile2 = await loadWorkflowAgentProfile(execution.status.walletName);
       const agentFollowup2 = buildAgentFollowup(agentProfile2, {
@@ -19420,6 +20610,7 @@ function createWorkflowCommand(deps) {
           ...workflowWalletApprovalRelayAliases(execution.walletApproval?.relay),
           walletApprovalRecommendedCommands: execution.walletApproval?.recommendedCommands,
           walletApproval: serializeWalletApproval(execution.walletApproval),
+          tokenDiscoverySummary: tokenDiscoverySummary2,
           recommendedCommands: recommendedCommands2
         }
       );
@@ -19430,7 +20621,16 @@ function createWorkflowCommand(deps) {
       walletName: execution.result.walletName,
       nextAction: execution.result.nextCommand,
       chain: execution.result.plan.chain,
-      intent: execution.result.intent
+      intent: execution.result.intent,
+      paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.goal)
+    });
+    const tokenDiscoverySummary = buildWorkflowTokenDiscoverySummary({
+      walletName: execution.result.walletName,
+      chain: execution.result.plan.chain,
+      intent: execution.result.intent,
+      nextAction: execution.result.nextCommand,
+      paymasterMode: execution.walletApproval?.request.requestedPaymasterMode ?? extractWorkflowGoalPaymasterMode(execution.goal),
+      recommendedCommands
     });
     const agentProfile = await loadWorkflowAgentProfile(execution.result.walletName);
     const agentFollowup = buildAgentFollowup(agentProfile, {
@@ -19462,6 +20662,7 @@ function createWorkflowCommand(deps) {
         ...workflowWalletApprovalRelayAliases(inspection.walletApproval?.relay),
         walletApprovalRecommendedCommands: inspection.walletApproval?.recommendedCommands,
         walletApproval: serializeWalletApproval(inspection.walletApproval),
+        tokenDiscoverySummary,
         recommendedCommands
       }
     );
@@ -19497,16 +20698,24 @@ function createWorkflowCommand(deps) {
 function buildDefaultOperatorPathHelpText() {
   return [
     "",
-    "Default local-first operator path:",
+    "Public entrypoints:",
+    "  Agent harness: npx skills add https://github.com/AgiWeb3/zk-agent-cli",
+    "  One-shot CLI:  npx zk-agent-cli --help",
+    "  Global CLI:    npm install -g zk-agent-cli",
+    "",
+    "Canonical terminal path:",
     "  zk-agent setup",
     "  zk-agent next",
     "  zk-agent wallet create --await-local",
     "  zk-agent next",
     `  ${buildWorkflowPayRecommendedCommand("main")}`,
     "",
+    "No custom .env is required for setup, next, or wallet create/reapprove request generation.",
+    "Add RPC env vars later, before live reads or broadcasts.",
+    "",
     "Use `zk-agent next --request-id <id>` to continue a stored workflow checkpoint.",
-    "Use `zk-agent relay inspect --relay-url <url>` and `zk-agent wallet --help` for the hosted remote-approval path.",
-    "Use `zk-agent wallet --help` for bootstrap/reapproval details and `zk-agent workflow --help` once the intent is known."
+    "Use `zk-agent relay inspect --relay-url <url>` plus `zk-agent wallet create|reapprove --relay-url <url> --wait-relay --prompt-code` when the browser is not colocated.",
+    "Use `zk-agent wallet --help` for wallet recovery details and `zk-agent workflow --help` when the intent is broader than the flagship native-send path."
   ].join("\n");
 }
 var ROOT_HELP_COMMAND_ORDER = [
@@ -19547,7 +20756,9 @@ function applyRootHelpCommandOrder(program) {
   program.commands = sortedCommands;
 }
 function createProgram() {
-  const program = new Command11().name("zk-agent").description("zkSync and ZK Stack CLI scaffold for agent workflows").showHelpAfterError().option("--json", "Force JSON output for agent harnesses", false).hook("preAction", (thisCommand) => {
+  const program = new Command11().name("zk-agent").description(
+    "Local-first zkSync Era CLI for wallet approval, workflow execution, and hosted relay recovery"
+  ).showHelpAfterError().option("--json", "Force JSON output for agent harnesses", false).hook("preAction", (thisCommand) => {
     if (thisCommand.optsWithGlobals().json) process.env.ZK_AGENT_OUTPUT = "json";
   });
   program.addCommand(createInitCommand());