zk-credits 0.2.0 → 0.2.2

package/dist/zk-credits.js

@@ -34651,7 +34651,7 @@ var require_lib = __commonJS({
       };
     }
     // @__NO_SIDE_EFFECTS__
-    function join6(separator = "") {
+    function join7(separator = "") {
       astr("join", separator);
       return {
         encode: (from) => {
@@ -34867,15 +34867,15 @@ var require_lib = __commonJS({
       convertRadix2,
       radix,
       radix2,
-      join: join6,
+      join: join7,
       padding
     };
-    exports.base16 = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(4), /* @__PURE__ */ alphabet("0123456789ABCDEF"), /* @__PURE__ */ join6(""));
-    exports.base32 = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"), /* @__PURE__ */ padding(5), /* @__PURE__ */ join6(""));
-    exports.base32nopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"), /* @__PURE__ */ join6(""));
-    exports.base32hex = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("0123456789ABCDEFGHIJKLMNOPQRSTUV"), /* @__PURE__ */ padding(5), /* @__PURE__ */ join6(""));
-    exports.base32hexnopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("0123456789ABCDEFGHIJKLMNOPQRSTUV"), /* @__PURE__ */ join6(""));
-    exports.base32crockford = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("0123456789ABCDEFGHJKMNPQRSTVWXYZ"), /* @__PURE__ */ join6(""), /* @__PURE__ */ normalize((s) => s.toUpperCase().replace(/O/g, "0").replace(/[IL]/g, "1")));
+    exports.base16 = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(4), /* @__PURE__ */ alphabet("0123456789ABCDEF"), /* @__PURE__ */ join7(""));
+    exports.base32 = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"), /* @__PURE__ */ padding(5), /* @__PURE__ */ join7(""));
+    exports.base32nopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"), /* @__PURE__ */ join7(""));
+    exports.base32hex = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("0123456789ABCDEFGHIJKLMNOPQRSTUV"), /* @__PURE__ */ padding(5), /* @__PURE__ */ join7(""));
+    exports.base32hexnopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("0123456789ABCDEFGHIJKLMNOPQRSTUV"), /* @__PURE__ */ join7(""));
+    exports.base32crockford = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(5), /* @__PURE__ */ alphabet("0123456789ABCDEFGHJKMNPQRSTVWXYZ"), /* @__PURE__ */ join7(""), /* @__PURE__ */ normalize((s) => s.toUpperCase().replace(/O/g, "0").replace(/[IL]/g, "1")));
     var hasBase64Builtin = /* @__PURE__ */ (() => typeof Uint8Array.from([]).toBase64 === "function" && typeof Uint8Array.fromBase64 === "function")();
     var decodeBase64Builtin = (s, isUrl) => {
       astr("base64", s);
@@ -34893,8 +34893,8 @@ var require_lib = __commonJS({
       decode(s) {
         return decodeBase64Builtin(s, false);
       }
-    } : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ padding(6), /* @__PURE__ */ join6(""));
-    exports.base64nopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ join6(""));
+    } : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ padding(6), /* @__PURE__ */ join7(""));
+    exports.base64nopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"), /* @__PURE__ */ join7(""));
     exports.base64url = hasBase64Builtin ? {
       encode(b) {
         abytes(b);
@@ -34903,9 +34903,9 @@ var require_lib = __commonJS({
       decode(s) {
         return decodeBase64Builtin(s, true);
       }
-    } : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"), /* @__PURE__ */ padding(6), /* @__PURE__ */ join6(""));
-    exports.base64urlnopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"), /* @__PURE__ */ join6(""));
-    var genBase58 = /* @__NO_SIDE_EFFECTS__ */ (abc) => /* @__PURE__ */ chain(/* @__PURE__ */ radix(58), /* @__PURE__ */ alphabet(abc), /* @__PURE__ */ join6(""));
+    } : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"), /* @__PURE__ */ padding(6), /* @__PURE__ */ join7(""));
+    exports.base64urlnopad = /* @__PURE__ */ chain(/* @__PURE__ */ radix2(6), /* @__PURE__ */ alphabet("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"), /* @__PURE__ */ join7(""));
+    var genBase58 = /* @__NO_SIDE_EFFECTS__ */ (abc) => /* @__PURE__ */ chain(/* @__PURE__ */ radix(58), /* @__PURE__ */ alphabet(abc), /* @__PURE__ */ join7(""));
     exports.base58 = /* @__PURE__ */ genBase58("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz");
     exports.base58flickr = /* @__PURE__ */ genBase58("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ");
     exports.base58xrp = /* @__PURE__ */ genBase58("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz");
@@ -34937,7 +34937,7 @@ var require_lib = __commonJS({
     var createBase58check = (sha256) => /* @__PURE__ */ chain(checksum(4, (data) => sha256(sha256(data))), exports.base58);
     exports.createBase58check = createBase58check;
     exports.base58check = exports.createBase58check;
-    var BECH_ALPHABET = /* @__PURE__ */ chain(/* @__PURE__ */ alphabet("qpzry9x8gf2tvdw0s3jn54khce6mua7l"), /* @__PURE__ */ join6(""));
+    var BECH_ALPHABET = /* @__PURE__ */ chain(/* @__PURE__ */ alphabet("qpzry9x8gf2tvdw0s3jn54khce6mua7l"), /* @__PURE__ */ join7(""));
     var POLYMOD_GENERATORS = [996825010, 642813549, 513874426, 1027748829, 705979059];
     function bech32Polymod(pre) {
       const b = pre >> 25;
@@ -35046,7 +35046,7 @@ var require_lib = __commonJS({
         return Uint8Array.fromHex(s);
       }
     };
-    exports.hex = hasHexBuiltin ? hexBuiltin : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(4), /* @__PURE__ */ alphabet("0123456789abcdef"), /* @__PURE__ */ join6(""), /* @__PURE__ */ normalize((s) => {
+    exports.hex = hasHexBuiltin ? hexBuiltin : /* @__PURE__ */ chain(/* @__PURE__ */ radix2(4), /* @__PURE__ */ alphabet("0123456789abcdef"), /* @__PURE__ */ join7(""), /* @__PURE__ */ normalize((s) => {
       if (typeof s !== "string" || s.length % 2 !== 0)
         throw new TypeError(`hex.decode: expected string, got ${typeof s} with length ${s.length}`);
       return s.toLowerCase();
@@ -38760,20 +38760,20 @@ var require_TempoAddress = __commonJS({
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.InvalidPrefixError = void 0;
-    exports.resolve = resolve2;
+    exports.resolve = resolve3;
     exports.format = format;
     exports.parse = parse;
     exports.validate = validate;
     var core_Address = require_Address();
     var Errors = require_Errors();
     var Hex = require_Hex();
-    function resolve2(address2) {
+    function resolve3(address2) {
       if (address2.startsWith("tempo"))
         return parse(address2).address;
       return address2;
     }
     function format(address2) {
-      const resolved = resolve2(address2);
+      const resolved = resolve3(address2);
       return `tempox${resolved.toLowerCase()}`;
     }
     function parse(tempoAddress) {
@@ -40096,7 +40096,7 @@ var require_KeyAuthorization = __commonJS({
       assertAccountBinding(authorization.type, authorization.account);
       const auth = authorization;
       if (auth.witness !== void 0)
-        assertWitness2(auth.witness);
+        assertWitness(auth.witness);
       if (auth.signature)
         assertSignature(auth.signature);
       const resolved = {
@@ -40139,7 +40139,7 @@ var require_KeyAuthorization = __commonJS({
       const signature = SignatureEnvelope.fromRpc(authorization.signature);
       assertSignature(signature);
       if (witness !== void 0)
-        assertWitness2(witness);
+        assertWitness(witness);
       const scopes = allowedCalls ? allowedCalls.flatMap((callScope) => {
         if (!callScope.selectorRules || callScope.selectorRules.length === 0)
           return [{ address: callScope.target }];
@@ -40209,7 +40209,7 @@ var require_KeyAuthorization = __commonJS({
       }) : void 0;
       const witness = isAbsent(rawWitness) ? void 0 : rawWitness;
       if (witness !== void 0)
-        assertWitness2(witness);
+        assertWitness(witness);
       const isAdmin = (() => {
         if (isAbsent(rawIsAdmin))
           return void 0;
@@ -40258,7 +40258,7 @@ var require_KeyAuthorization = __commonJS({
       const { address: address2, scopes, chainId, expiry, limits, type, signature, witness, isAdmin, account } = authorization;
       assertSignature(signature);
       if (witness !== void 0)
-        assertWitness2(witness);
+        assertWitness(witness);
       const allowedCalls = (() => {
         if (!scopes)
           return void 0;
@@ -40300,7 +40300,7 @@ var require_KeyAuthorization = __commonJS({
       assertAccountBinding(authorization.type, authorization.account);
       const { address: address2, chainId, scopes, expiry, limits, witness, isAdmin, account } = authorization;
       if (witness !== void 0)
-        assertWitness2(witness);
+        assertWitness(witness);
       const signature = (() => {
         if (!authorization.signature)
           return void 0;
@@ -40403,7 +40403,7 @@ var require_KeyAuthorization = __commonJS({
       if (type === "multisig" && account == null)
         throw new MissingAccountError();
     }
-    function assertWitness2(witness) {
+    function assertWitness(witness) {
       if (Hex.size(witness) !== 32)
         throw new InvalidWitnessSizeError(witness);
     }
@@ -42868,13 +42868,13 @@ var require_virtualMasterPool = __commonJS({
   "node_modules/ox/_cjs/tempo/internal/virtualMasterPool.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.resolve = resolve2;
+    exports.resolve = resolve3;
     exports.resolveNode = resolveNode;
     exports.resolveBrowser = resolveBrowser;
     var Errors = require_Errors();
     var cachedPool;
     var isNode = typeof globalThis.process !== "undefined" && typeof globalThis.process.versions?.node === "string";
-    async function resolve2() {
+    async function resolve3() {
       if (cachedPool)
         return cachedPool;
       cachedPool = isNode ? await resolveNode() : await resolveBrowser();
@@ -43152,7 +43152,7 @@ var require_VirtualMaster = __commonJS({
     }
     function mineSaltWithWorkerPool(value) {
       const startedAt = Date.now();
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve3, reject) => {
         let settled = false;
         let attempts = 0;
         let completedWorkers = 0;
@@ -43182,7 +43182,7 @@ var require_VirtualMaster = __commonJS({
           settled = true;
           value.signal?.removeEventListener("abort", onAbort);
           terminateAll();
-          resolve2(result);
+          resolve3(result);
         };
         const fail = (error) => {
           if (settled)
@@ -46248,13 +46248,13 @@ var require_withResolvers = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.withResolvers = withResolvers;
     function withResolvers() {
-      let resolve2 = () => void 0;
+      let resolve3 = () => void 0;
       let reject = () => void 0;
       const promise = new Promise((resolve_, reject_) => {
-        resolve2 = resolve_;
+        resolve3 = resolve_;
         reject = reject_;
       });
-      return { promise, resolve: resolve2, reject };
+      return { promise, resolve: resolve3, reject };
     }
   }
 });
@@ -46278,8 +46278,8 @@ var require_createBatchScheduler = __commonJS({
           if (sort && Array.isArray(data))
             data.sort(sort);
           for (let i = 0; i < scheduler.length; i++) {
-            const { resolve: resolve2 } = scheduler[i];
-            resolve2?.([data[i], data]);
+            const { resolve: resolve3 } = scheduler[i];
+            resolve3?.([data[i], data]);
           }
         }).catch((err) => {
           for (let i = 0; i < scheduler.length; i++) {
@@ -46295,16 +46295,16 @@ var require_createBatchScheduler = __commonJS({
       return {
         flush,
         async schedule(args) {
-          const { promise, resolve: resolve2, reject } = (0, withResolvers_js_1.withResolvers)();
+          const { promise, resolve: resolve3, reject } = (0, withResolvers_js_1.withResolvers)();
           const split = shouldSplitBatch?.([...getBatchedArgs(), args]);
           if (split)
             exec();
           const hasActiveScheduler = getScheduler().length > 0;
           if (hasActiveScheduler) {
-            setScheduler({ args, resolve: resolve2, reject });
+            setScheduler({ args, resolve: resolve3, reject });
             return promise;
           }
-          setScheduler({ args, resolve: resolve2, reject });
+          setScheduler({ args, resolve: resolve3, reject });
           setTimeout(exec, wait);
           return promise;
         }
@@ -47400,11 +47400,11 @@ var require_observe = __commonJS({
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.cleanupCache = exports.listenersCache = void 0;
-    exports.observe = observe;
+    exports.observe = observe2;
     exports.listenersCache = /* @__PURE__ */ new Map();
     exports.cleanupCache = /* @__PURE__ */ new Map();
     var callbackCount = 0;
-    function observe(observerId, callbacks, fn) {
+    function observe2(observerId, callbacks, fn) {
       const callbackId = ++callbackCount;
       const getListeners = () => exports.listenersCache.get(observerId) || [];
       const unsubscribe = () => {
@@ -47463,7 +47463,7 @@ var require_wait = __commonJS({
     exports.wait = wait;
     var utils_js_1 = require_utils5();
     async function wait(time, { signal } = {}) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve3, reject) => {
         if (signal?.aborted) {
           reject((0, utils_js_1.getAbortError)(signal));
           return;
@@ -47471,7 +47471,7 @@ var require_wait = __commonJS({
         const cleanup = () => signal?.removeEventListener("abort", onAbort);
         const timeout = setTimeout(() => {
           cleanup();
-          resolve2();
+          resolve3();
         }, time);
         const onAbort = () => {
           clearTimeout(timeout);
@@ -49127,7 +49127,7 @@ var require_withRetry = __commonJS({
     var utils_js_1 = require_utils5();
     var wait_js_1 = require_wait();
     function withRetry(fn, { delay: delay_ = 100, retryCount = 2, shouldRetry = () => true, signal } = {}) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve3, reject) => {
         const attemptRetry = async ({ count = 0 } = {}) => {
           if (signal?.aborted) {
             reject((0, utils_js_1.getAbortError)(signal));
@@ -49147,7 +49147,7 @@ var require_withRetry = __commonJS({
           };
           try {
             const data = await fn();
-            resolve2(data);
+            resolve3(data);
           } catch (err) {
             if (signal?.aborted) {
               reject((0, utils_js_1.getAbortError)(signal));
@@ -49327,13 +49327,13 @@ var require_waitForTransactionReceipt = __commonJS({
       let retrying = false;
       let _unobserve;
       let _unwatch;
-      const { promise, resolve: resolve2, reject } = (0, withResolvers_js_1.withResolvers)();
+      const { promise, resolve: resolve3, reject } = (0, withResolvers_js_1.withResolvers)();
       const timer = timeout ? setTimeout(() => {
         _unwatch?.();
         _unobserve?.();
         reject(new transaction_js_1.WaitForTransactionReceiptTimeoutError({ hash }));
       }, timeout) : void 0;
-      _unobserve = (0, observe_js_1.observe)(observerId, { onReplaced, resolve: resolve2, reject }, async (emit) => {
+      _unobserve = (0, observe_js_1.observe)(observerId, { onReplaced, resolve: resolve3, reject }, async (emit) => {
         receipt = await (0, getAction_js_1.getAction)(client, getTransactionReceipt_js_1.getTransactionReceipt, "getTransactionReceipt")({ hash }).catch(() => void 0);
         if (receipt && confirmations <= 1) {
           clearTimeout(timer);
@@ -60344,7 +60344,7 @@ var require_withTimeout = __commonJS({
     exports.withTimeout = withTimeout;
     var utils_js_1 = require_utils5();
     function withTimeout(fn, { errorInstance = new Error("timed out"), timeout, signal }) {
-      return new Promise((resolve2, reject) => {
+      return new Promise((resolve3, reject) => {
         ;
         (async () => {
           let timeoutId;
@@ -60359,7 +60359,7 @@ var require_withTimeout = __commonJS({
                 }
               }, timeout);
             }
-            resolve2(await fn({ signal: controller?.signal || null }));
+            resolve3(await fn({ signal: controller?.signal || null }));
           } catch (err) {
             if (controller?.signal.aborted && (0, utils_js_1.isAbortError)(err)) {
               reject(errorInstance);
@@ -63943,7 +63943,7 @@ var require_stream = __commonJS({
       };
       duplex._final = function(callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open2() {
+          ws.once("open", function open3() {
             duplex._final(callback);
           });
           return;
@@ -63964,7 +63964,7 @@ var require_stream = __commonJS({
       };
       duplex._write = function(chunk, encoding, callback) {
         if (ws.readyState === ws.CONNECTING) {
-          ws.once("open", function open2() {
+          ws.once("open", function open3() {
             duplex._write(chunk, encoding, callback);
           });
           return;
@@ -64527,10 +64527,10 @@ var require_webSocket = __commonJS({
           socket.addEventListener("error", onError);
           socket.addEventListener("open", onOpen);
           if (socket.readyState === WebSocket2.CONNECTING) {
-            await new Promise((resolve2, reject) => {
+            await new Promise((resolve3, reject) => {
               if (!socket)
                 return;
-              socket.onopen = resolve2;
+              socket.onopen = resolve3;
               socket.onerror = reject;
             });
           }
@@ -73671,7 +73671,7 @@ var require_sendCalls = __commonJS({
               results.push({ reason, status: "rejected" });
             }
             if (experimental_fallbackDelay > 0)
-              await new Promise((resolve2) => setTimeout(resolve2, experimental_fallbackDelay));
+              await new Promise((resolve3) => setTimeout(resolve3, experimental_fallbackDelay));
           }
           if (results.every((r) => r.status === "rejected"))
             throw results[0].reason;
@@ -73793,9 +73793,9 @@ var require_waitForCallsStatus = __commonJS({
     async function waitForCallsStatus(client, parameters) {
       const { id, pollingInterval = client.pollingInterval, status = ({ statusCode }) => statusCode === 200 || statusCode >= 300, retryCount = 4, retryDelay = ({ count }) => ~~(1 << count) * 200, timeout = 6e4, throwOnFailure = false } = parameters;
       const observerId = (0, stringify_js_1.stringify)(["waitForCallsStatus", client.uid, id]);
-      const { promise, resolve: resolve2, reject } = (0, withResolvers_js_1.withResolvers)();
+      const { promise, resolve: resolve3, reject } = (0, withResolvers_js_1.withResolvers)();
       let timer;
-      const unobserve = (0, observe_js_1.observe)(observerId, { resolve: resolve2, reject }, (emit) => {
+      const unobserve = (0, observe_js_1.observe)(observerId, { resolve: resolve3, reject }, (emit) => {
         const unpoll = (0, poll_js_1.poll)(async () => {
           const done = (fn) => {
             clearTimeout(timer);
@@ -74281,13 +74281,13 @@ var require_utils11 = __commonJS({
         }
         if (!Object.hasOwn(globalThis, "Image"))
           return false;
-        return new Promise((resolve2) => {
+        return new Promise((resolve3) => {
           const img = new Image();
           img.onload = () => {
-            resolve2(true);
+            resolve3(true);
           };
           img.onerror = () => {
-            resolve2(false);
+            resolve3(false);
           };
           img.src = uri;
         });
@@ -78763,7 +78763,7 @@ var require_webSocket2 = __commonJS({
           },
           async subscribe({ params, onData, onError }) {
             const rpcClient = await (0, webSocket_js_1.getWebSocketRpcClient)(url_, wsRpcClientOpts);
-            const { result: subscriptionId } = await new Promise((resolve2, reject) => rpcClient.request({
+            const { result: subscriptionId } = await new Promise((resolve3, reject) => rpcClient.request({
               body: {
                 method: "eth_subscribe",
                 params
@@ -78780,7 +78780,7 @@ var require_webSocket2 = __commonJS({
                   return;
                 }
                 if (typeof response.id === "number") {
-                  resolve2(response);
+                  resolve3(response);
                   return;
                 }
                 if (response.method !== "eth_subscription")
@@ -78791,12 +78791,12 @@ var require_webSocket2 = __commonJS({
             return {
               subscriptionId,
               async unsubscribe() {
-                return new Promise((resolve2) => rpcClient.request({
+                return new Promise((resolve3) => rpcClient.request({
                   body: {
                     method: "eth_unsubscribe",
                     params: [subscriptionId]
                   },
-                  onResponse: resolve2
+                  onResponse: resolve3
                 }));
               }
             };
@@ -80654,8 +80654,9 @@ var require_cjs2 = __commonJS({
 
 // dist/cli.js
 import { homedir } from "node:os";
-import { readFile as readFile5 } from "node:fs/promises";
-import { join as join5 } from "node:path";
+import { readFile as readFile6 } from "node:fs/promises";
+import { join as join6 } from "node:path";
+import { createInterface } from "node:readline/promises";
 
 // dist/codex-launcher.js
 import { spawn } from "node:child_process";
@@ -80767,7 +80768,7 @@ async function isCodexProfileInstalled(codexHome) {
 var spawnCommand = (command, args, options) => spawn(command, args, options);
 async function launchCodexProcess(args, spawnImpl = spawnCommand) {
   const child = spawnImpl("codex", ["--profile", CODEX_PROFILE_NAME, ...args], { stdio: "inherit" });
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     child.once("error", (error) => {
       if (error.code === "ENOENT") {
         reject(new Error("Codex CLI was not found; install it before running zk-credits codex"));
@@ -80775,7 +80776,7 @@ async function launchCodexProcess(args, spawnImpl = spawnCommand) {
       }
       reject(error);
     });
-    child.once("exit", (code) => resolve2(code ?? 1));
+    child.once("exit", (code) => resolve3(code ?? 1));
   });
 }
 
@@ -80817,7 +80818,7 @@ function assertManagedProviderArguments(args) {
   }
 }
 function waitForCline(child) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     child.once("error", (error) => {
       if (error.code === "ENOENT") {
         reject(new Error("Cline CLI was not found; install it with npm install --global cline"));
@@ -80825,7 +80826,7 @@ function waitForCline(child) {
       }
       reject(error);
     });
-    child.once("exit", (code) => resolve2(code ?? 1));
+    child.once("exit", (code) => resolve3(code ?? 1));
   });
 }
 async function launchClineProcess(options, spawnImpl = spawnCommand2) {
@@ -80891,7 +80892,7 @@ function field(value, label) {
     throw new Error(`Invalid ${label}`);
   return parsed.toString();
 }
-function assertWitness(witness) {
+function validateBaseCreditWitness(witness) {
   if (typeof witness.root !== "string" || witness.pathElements.length !== TREE_DEPTH || witness.pathIndices.length !== TREE_DEPTH || !witness.pathElements.every((value) => /^\d+$/u.test(value)) || !witness.pathIndices.every((value) => value === 0 || value === 1)) {
     throw new Error("Base membership witness is malformed");
   }
@@ -80923,6 +80924,73 @@ function requestBodyBytes(body) {
     return new Uint8Array();
   throw new Error("The Base x402 sidecar requires the exact request-body bytes");
 }
+function createBasePaymentFactory(options) {
+  const secret = secretFromBase64Url(options.credential.secret);
+  return async ({ method, url, body, requirements }) => {
+    if (requirements.extra.deploymentDomain !== options.credential.deploymentDomain) {
+      throw new Error("Credential deployment domain does not match the gateway challenge");
+    }
+    const slotLedger = options.slotLedger;
+    if (!slotLedger)
+      throw new Error("A durable slot ledger is required for the Base pilot");
+    const selectedSlot = slotLedger.allocateProvisional();
+    try {
+      const nonce = randomNonce();
+      const responseKeys = await responseKey();
+      const requestSignal = await deriveRequestSignal({
+        method,
+        url,
+        body: requestBodyBytes(body),
+        requirements,
+        nonce,
+        responseKey: responseKeys.publicKey
+      });
+      const witness = validateBaseCreditWitness(await options.witnessProvider.witnessForCredential(options.credential));
+      const expiry = witness.expiry ?? options.credential.expiry;
+      if (!Number.isSafeInteger(expiry) || expiry <= 0)
+        throw new Error("Invalid Base credential expiry");
+      const slotBlinding = await computeSlotBlinding(secret, selectedSlot, options.credential.deploymentDomain);
+      const nullifier = await computeNullifier(slotBlinding);
+      const share = await computeShare(secret, requestSignal.field, slotBlinding);
+      const timestamp = String(requirements.extra.issuedAt);
+      const expectedPublicSignals = [
+        witness.root,
+        timestamp,
+        options.credential.deploymentDomain,
+        requestSignal.field,
+        nullifier,
+        share
+      ];
+      const proof = await options.prove({
+        secret: secretToField(secret),
+        tier_id: String(options.credential.tierId),
+        expiry: String(expiry),
+        slot: String(selectedSlot),
+        merkle_path_elements: witness.pathElements,
+        merkle_path_indices: witness.pathIndices.map(String),
+        root_in: witness.root,
+        timestamp_in: timestamp,
+        domain_in: options.credential.deploymentDomain,
+        request_signal_in: requestSignal.field
+      }, { requirements, credential: options.credential, expectedPublicSignals });
+      if (!Array.isArray(proof.publicSignals) || proof.publicSignals.length !== expectedPublicSignals.length || !proof.publicSignals.every((value, index) => value === expectedPublicSignals[index])) {
+        throw new Error("Proof public signals do not match the canonical statement");
+      }
+      await slotLedger.commit(selectedSlot);
+      const payment = buildPaymentPayload({
+        requirements,
+        proof: proof.proof,
+        publicSignals: [...proof.publicSignals],
+        nonce,
+        responseKey: responseKeys.publicKey
+      });
+      return { payment, responsePrivateKey: responseKeys.privateKey };
+    } catch (error) {
+      slotLedger.release(selectedSlot);
+      throw error;
+    }
+  };
+}
 function decryptReplay(envelopeValue, privateKey, paymentResponse) {
   try {
     const envelope = JSON.parse(envelopeValue);
@@ -80941,7 +81009,7 @@ function decryptReplay(envelopeValue, privateKey, paymentResponse) {
   }
 }
 function createBasePrepaidClient(options) {
-  const secret = secretFromBase64Url(options.credential.secret);
+  const createPayment = createBasePaymentFactory(options);
   const fetcher = options.fetch ?? fetch;
   const replayKeys = /* @__PURE__ */ new Map();
   const pendingPayments = /* @__PURE__ */ new Map();
@@ -81088,9 +81156,6 @@ function createBasePrepaidClient(options) {
     fetch: fetchWithReplay,
     ...options.lifecycle ? { lifecycle: options.lifecycle } : {},
     createPayload: async ({ method, url, body, requirements }) => {
-      if (requirements.extra.deploymentDomain !== options.credential.deploymentDomain) {
-        throw new Error("Credential deployment domain does not match the gateway challenge");
-      }
       prunePending();
       const key = requestKey(method, url, body, requirements);
       const cached = pendingPayments.get(key);
@@ -81102,70 +81167,15 @@ function createBasePrepaidClient(options) {
       if (inFlight)
         return inFlight;
       const paymentPromise = (async () => {
-        const slotLedger = options.slotLedger;
-        if (!slotLedger)
-          throw new Error("A durable slot ledger is required for the Base pilot");
-        const selectedSlot = slotLedger.allocateProvisional();
-        try {
-          const nonce = randomNonce();
-          const responseKeys = await responseKey();
-          const requestSignal = await deriveRequestSignal({
-            method,
-            url,
-            body: requestBodyBytes(body),
-            requirements,
-            nonce,
-            responseKey: responseKeys.publicKey
-          });
-          const witness = assertWitness(await options.witnessProvider.witnessForCredential(options.credential));
-          const expiry = witness.expiry ?? options.credential.expiry;
-          if (!Number.isSafeInteger(expiry) || expiry <= 0)
-            throw new Error("Invalid Base credential expiry");
-          const slotBlinding = await computeSlotBlinding(secret, selectedSlot, options.credential.deploymentDomain);
-          const nullifier = await computeNullifier(slotBlinding);
-          const share = await computeShare(secret, requestSignal.field, slotBlinding);
-          const timestamp = String(requirements.extra.issuedAt);
-          const expectedPublicSignals = [
-            witness.root,
-            timestamp,
-            options.credential.deploymentDomain,
-            requestSignal.field,
-            nullifier,
-            share
-          ];
-          const proof = await options.prove({
-            secret: secretToField(secret),
-            tier_id: String(options.credential.tierId),
-            expiry: String(expiry),
-            slot: String(selectedSlot),
-            merkle_path_elements: witness.pathElements,
-            merkle_path_indices: witness.pathIndices.map(String),
-            root_in: witness.root,
-            timestamp_in: timestamp,
-            domain_in: options.credential.deploymentDomain,
-            request_signal_in: requestSignal.field
-          }, { requirements, credential: options.credential, expectedPublicSignals });
-          if (!Array.isArray(proof.publicSignals) || proof.publicSignals.length !== expectedPublicSignals.length || !proof.publicSignals.every((value, index) => value === expectedPublicSignals[index])) {
-            throw new Error("Proof public signals do not match the canonical statement");
-          }
-          await slotLedger.commit(selectedSlot);
-          const payment = buildPaymentPayload({
-            requirements,
-            proof: proof.proof,
-            publicSignals: [...proof.publicSignals],
-            nonce,
-            responseKey: responseKeys.publicKey
-          });
-          const expiresAt = Date.now() + REPLAY_TTL_MS;
-          replayKeys.set(nonce, { privateKey: responseKeys.privateKey, expiresAt });
-          pendingPayments.set(key, { payment, expiresAt });
-          pendingByNonce.set(nonce, key);
-          prunePending();
-          return payment;
-        } catch (error) {
-          slotLedger.release(selectedSlot);
-          throw error;
-        }
+        const prepared = await createPayment({ method, url, body, requirements });
+        const payment = prepared.payment;
+        const nonce = payment.payload.nonce;
+        const expiresAt = Date.now() + REPLAY_TTL_MS;
+        replayKeys.set(nonce, { privateKey: prepared.responsePrivateKey, expiresAt });
+        pendingPayments.set(key, { payment, expiresAt });
+        pendingByNonce.set(nonce, key);
+        prunePending();
+        return payment;
       })();
       paymentPromises.set(key, paymentPromise);
       try {
@@ -81673,8 +81683,8 @@ function proverProcessFactory(proverPath) {
       execArgv: [],
       stdio: ["ignore", "pipe", "pipe", "ipc"]
     });
-    const result = new Promise((resolve2, reject) => {
-      child.once("message", (message) => resolve2(message));
+    const result = new Promise((resolve3, reject) => {
+      child.once("message", (message) => resolve3(message));
       child.once("error", (error) => reject(error));
       child.once("exit", (code, signal) => {
         if (code !== 0 && signal === null)
@@ -81688,11 +81698,11 @@ function proverProcessFactory(proverPath) {
       terminate: async () => {
         if (child.exitCode === null && child.signalCode === null)
           child.kill("SIGKILL");
-        await new Promise((resolve2) => {
+        await new Promise((resolve3) => {
           if (child.exitCode !== null || child.signalCode !== null)
-            resolve2();
+            resolve3();
           else
-            child.once("exit", () => resolve2());
+            child.once("exit", () => resolve3());
         });
       }
     };
@@ -82001,8 +82011,9 @@ async function runCliCommand(args, dependencies) {
       const model = setupModel(args);
       if (!await dependencies.isCredentialConfigured())
         throw new Error("Set ZK_CREDITS_CREDENTIAL_PATH before running zk-credits setup");
-      await dependencies.configureCodex(model);
+      await dependencies.validateSetupPrerequisites();
       await dependencies.ensureSidecar();
+      await dependencies.configureCodex(model);
       dependencies.write("ZK Credits is ready for Codex.");
       dependencies.write("Run: zk-credits codex");
       return 0;
@@ -82062,6 +82073,39 @@ async function readLoopbackToken(tokenPath) {
 }
 
 // dist/node-sidecar-lifecycle.js
+var CHILD_ENVIRONMENT_KEYS = [
+  "HOME",
+  "PATH",
+  "TMP",
+  "TEMP",
+  "TMPDIR",
+  "LANG",
+  "LC_ALL",
+  "TZ",
+  "SystemRoot",
+  "WINDIR",
+  "COMSPEC",
+  "PATHEXT",
+  "ZK_CREDITS_CREDENTIAL_PATH",
+  "ZK_CREDITS_ARTIFACT_DIR",
+  "ZK_CREDITS_WITNESS_PATH",
+  "ZK_CREDITS_GATEWAY_URL",
+  "BASE_RPC_URL",
+  "BASE_PRIVATE_CREDIT_BOND_ADDRESS",
+  "BASE_DEPLOYMENT_BLOCK",
+  "BASE_CONFIRMATIONS"
+];
+function sidecarEnvironment(stateDirectory2, port) {
+  const environment = {};
+  for (const key of CHILD_ENVIRONMENT_KEYS) {
+    const value = process.env[key];
+    if (value !== void 0)
+      environment[key] = value;
+  }
+  environment.ZK_CREDITS_HOME = stateDirectory2;
+  environment.ZK_CREDITS_SIDECAR_PORT = port;
+  return environment;
+}
 async function startDetachedProcess(specification) {
   await mkdir6(dirname5(specification.logPath), { recursive: true, mode: 448 });
   const log = await open(specification.logPath, "a", 384);
@@ -82070,12 +82114,16 @@ async function startDetachedProcess(specification) {
     const child = spawn3(specification.executable, specification.args, {
       detached: true,
       env: specification.env,
-      stdio: ["ignore", log.fd, log.fd]
+      stdio: [specification.stdin === void 0 ? "ignore" : "pipe", log.fd, log.fd]
     });
-    await new Promise((resolve2, reject) => {
-      child.once("spawn", resolve2);
+    await new Promise((resolve3, reject) => {
+      child.once("spawn", resolve3);
       child.once("error", reject);
     });
+    if (specification.stdin !== void 0 && child.stdin) {
+      child.stdin.on("error", () => void 0);
+      child.stdin.end(specification.stdin);
+    }
     child.unref();
   } finally {
     await log.close();
@@ -82084,7 +82132,7 @@ async function startDetachedProcess(specification) {
 var defaultRuntime = {
   fetchHealth: async (url) => fetch(url, { signal: AbortSignal.timeout(500) }),
   startDetachedProcess,
-  wait: async (milliseconds) => new Promise((resolve2) => setTimeout(resolve2, milliseconds))
+  wait: async (milliseconds) => new Promise((resolve3) => setTimeout(resolve3, milliseconds))
 };
 function createNodeSidecarLifecycle(options, runtime = defaultRuntime) {
   const url = new URL(options.loopbackBaseUrl);
@@ -82105,15 +82153,15 @@ function createNodeSidecarLifecycle(options, runtime = defaultRuntime) {
       }
     },
     async startDetached() {
+      if (!options.readCredentialPassword)
+        throw new Error("Credential password prompt is unavailable");
+      const password = await options.readCredentialPassword();
       await runtime.startDetachedProcess({
         executable: process.execPath,
-        args: [options.cliEntryPath, "serve", "--port", url.port],
-        env: {
-          ...process.env,
-          ZK_CREDITS_HOME: options.stateDirectory,
-          ZK_CREDITS_SIDECAR_PORT: url.port
-        },
-        logPath: options.logPath
+        args: [options.cliEntryPath, "serve", "--port", url.port, "--credential-password-stdin"],
+        env: sidecarEnvironment(options.stateDirectory, url.port),
+        logPath: options.logPath,
+        stdin: password
       });
     },
     readToken: () => readLoopbackToken(options.tokenPath),
@@ -82128,6 +82176,305 @@ async function activateSidecarServer(activation) {
   return address2;
 }
 
+// dist/setup-config.js
+import { randomUUID } from "node:crypto";
+import { chmod as chmod5, lstat, mkdir as mkdir7, open as open2, readFile as readFile5, readdir, realpath as realpath2, rename as rename4, rm } from "node:fs/promises";
+import { dirname as dirname6, join as join5, resolve as resolve2 } from "node:path";
+var WITNESS_FILENAMES = /* @__PURE__ */ new Set([
+  "base-tree.json",
+  "base-sepolia-tree.json",
+  "base-tree-artifact.json",
+  "public-tree.json",
+  "base-witness.json",
+  "zk-credits-witness.json",
+  "witness.json",
+  "tree.json"
+]);
+function isRecord2(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function absolutePath(value, label) {
+  if (typeof value !== "string" || value.trim().length === 0) {
+    throw new Error("Setup configuration " + label + " is required");
+  }
+  return resolve2(value);
+}
+function optionalUnsignedString(value, label) {
+  if (value === void 0)
+    return void 0;
+  if (typeof value !== "string" || !/^\d+$/u.test(value)) {
+    throw new Error("Local setup config " + label + " must be a non-negative integer");
+  }
+  return value;
+}
+function parseSetupConfig(value) {
+  if (!isRecord2(value) || value.version !== 1 || !isRecord2(value.witness)) {
+    throw new Error("Local setup config is malformed; remove ~/.zk-credits/config.json and run setup again.");
+  }
+  const artifactDirectory = absolutePath(value.artifactDirectory, "artifactDirectory");
+  const witnessValue = value.witness;
+  let witness;
+  if (witnessValue.kind === "file") {
+    witness = { kind: "file", path: absolutePath(witnessValue.path, "witness.path") };
+  } else if (witnessValue.kind === "base-events") {
+    if (typeof witnessValue.rpcUrl !== "string" || !/^https?:\/\//u.test(witnessValue.rpcUrl)) {
+      throw new Error("Local setup config has an invalid Base RPC URL");
+    }
+    if (typeof witnessValue.contractAddress !== "string" || !/^0x[0-9a-fA-F]{40}$/u.test(witnessValue.contractAddress)) {
+      throw new Error("Local setup config has an invalid Base bond contract address");
+    }
+    const deploymentBlock = optionalUnsignedString(witnessValue.deploymentBlock, "deploymentBlock");
+    const confirmations = optionalUnsignedString(witnessValue.confirmations, "confirmations");
+    witness = {
+      kind: "base-events",
+      rpcUrl: witnessValue.rpcUrl,
+      contractAddress: witnessValue.contractAddress,
+      ...deploymentBlock === void 0 ? {} : { deploymentBlock },
+      ...confirmations === void 0 ? {} : { confirmations }
+    };
+  } else {
+    throw new Error("Local setup config has an unknown witness source");
+  }
+  return { version: 1, artifactDirectory, witness };
+}
+function optionalEnvironmentInteger(environment, name) {
+  const value = environment[name]?.trim();
+  if (!value)
+    return void 0;
+  if (!/^\d+$/u.test(value))
+    throw new Error(name + " must be a non-negative integer");
+  return value;
+}
+async function candidateDirectories(homeDirectory, stateDirectory2) {
+  const roots = [
+    join5(stateDirectory2, "artifacts", "base-sepolia"),
+    join5(homeDirectory, ".zk-credits", "artifacts", "base-sepolia"),
+    join5(homeDirectory, "Downloads")
+  ];
+  const candidates = [...roots];
+  for (const root of roots) {
+    let entries;
+    try {
+      entries = await readdir(root, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      if (entry.isDirectory())
+        candidates.push(join5(root, entry.name));
+    }
+  }
+  return [...new Set(candidates.map((path) => resolve2(path)))];
+}
+async function chooseOne(kind, candidates, chooseCandidate) {
+  if (candidates.length === 1)
+    return candidates[0];
+  if (!chooseCandidate) {
+    const variable = kind === "proving bundle" ? "ZK_CREDITS_ARTIFACT_DIR" : "ZK_CREDITS_WITNESS_PATH";
+    throw new Error("Found more than one valid " + kind + "; set " + variable + " to choose one.");
+  }
+  const selected = await chooseCandidate(kind, candidates);
+  if (!candidates.includes(resolve2(selected))) {
+    throw new Error("The selected " + kind + " is not one of the validated local candidates");
+  }
+  return resolve2(selected);
+}
+async function resolveArtifactDirectory(options, saved) {
+  const explicit = options.environment.ZK_CREDITS_ARTIFACT_DIR?.trim();
+  const candidates = explicit ? [resolve2(options.workingDirectory ?? process.cwd(), explicit)] : [
+    ...saved ? [saved.artifactDirectory] : [],
+    ...await candidateDirectories(options.homeDirectory, options.stateDirectory)
+  ];
+  const valid = /* @__PURE__ */ new Map();
+  let explicitError;
+  for (const candidate of candidates) {
+    try {
+      const bundle = await resolvePinnedArtifactBundle({
+        artifactDirectory: candidate,
+        manifest: options.manifest
+      });
+      let identity = resolve2(bundle.directory);
+      try {
+        identity = await realpath2(bundle.directory);
+      } catch {
+      }
+      valid.set(identity, bundle.directory);
+    } catch (error) {
+      if (explicit)
+        explicitError = error;
+    }
+  }
+  if (explicit && valid.size === 0) {
+    const reason = explicitError instanceof Error ? " " + explicitError.message : "";
+    throw new Error("The configured proving bundle at " + explicit + " failed its pinned checks." + reason);
+  }
+  if (valid.size === 0) {
+    throw new Error("Could not find a valid pinned proving bundle. Extract the bundle from your pilot contact into ~/.zk-credits/artifacts/base-sepolia or ~/Downloads, or set ZK_CREDITS_ARTIFACT_DIR.");
+  }
+  const selected = await chooseOne("proving bundle", [...valid.values()], options.chooseCandidate);
+  return resolve2(selected);
+}
+function eventSourceFromEnvironment(environment) {
+  const rpcUrl = environment.BASE_RPC_URL?.trim();
+  const contractAddress = environment.BASE_PRIVATE_CREDIT_BOND_ADDRESS?.trim();
+  if (!rpcUrl || !contractAddress)
+    return void 0;
+  const deploymentBlock = optionalEnvironmentInteger(environment, "BASE_DEPLOYMENT_BLOCK");
+  const confirmations = optionalEnvironmentInteger(environment, "BASE_CONFIRMATIONS");
+  return {
+    kind: "base-events",
+    rpcUrl,
+    contractAddress,
+    ...deploymentBlock === void 0 ? {} : { deploymentBlock },
+    ...confirmations === void 0 ? {} : { confirmations }
+  };
+}
+function witnessCandidates(homeDirectory, stateDirectory2) {
+  const roots = [
+    join5(stateDirectory2, "witnesses"),
+    join5(stateDirectory2, "witness"),
+    join5(homeDirectory, ".zk-credits", "witnesses"),
+    join5(homeDirectory, "Downloads")
+  ];
+  return [...new Set(roots.flatMap((root) => [...WITNESS_FILENAMES].map((name) => resolve2(root, name))))];
+}
+async function resolveWitnessSource(options, saved) {
+  const environment = options.environment;
+  const explicitPath = environment.ZK_CREDITS_WITNESS_PATH?.trim();
+  if (explicitPath) {
+    const source = {
+      kind: "file",
+      path: resolve2(options.workingDirectory ?? process.cwd(), explicitPath)
+    };
+    try {
+      await options.validateWitness(source);
+      return source;
+    } catch (error) {
+      const reason = error instanceof Error ? " " + error.message : "";
+      throw new Error("The configured Base witness at " + explicitPath + " failed validation." + reason);
+    }
+  }
+  const environmentSource = eventSourceFromEnvironment(environment);
+  if (environmentSource) {
+    try {
+      await options.validateWitness(environmentSource);
+      return environmentSource;
+    } catch (error) {
+      const reason = error instanceof Error ? " " + error.message : "";
+      throw new Error("Base event witness sync failed." + reason);
+    }
+  }
+  if (saved?.witness.kind === "base-events") {
+    try {
+      await options.validateWitness(saved.witness);
+      return saved.witness;
+    } catch (error) {
+      const reason = error instanceof Error ? " " + error.message : "";
+      throw new Error("Saved Base event witness source failed validation." + reason);
+    }
+  }
+  if (saved?.witness.kind === "file") {
+    try {
+      await options.validateWitness(saved.witness);
+      return saved.witness;
+    } catch {
+    }
+  }
+  const valid = [];
+  for (const path of witnessCandidates(options.homeDirectory, options.stateDirectory)) {
+    try {
+      const info = await lstat(path);
+      if (!info.isFile())
+        continue;
+      const source = { kind: "file", path };
+      await options.validateWitness(source);
+      valid.push(path);
+    } catch {
+    }
+  }
+  if (valid.length > 0) {
+    return { kind: "file", path: await chooseOne("witness file", valid, options.chooseCandidate) };
+  }
+  throw new Error("Could not find a public Base witness for this credential. Put base-tree.json or witness.json in ~/.zk-credits/witnesses or ~/Downloads, set ZK_CREDITS_WITNESS_PATH, or configure BASE_RPC_URL and BASE_PRIVATE_CREDIT_BOND_ADDRESS.");
+}
+async function resolveSetupInputs(options) {
+  const saved = await readSetupConfig(options.configPath);
+  const artifactDirectory = await resolveArtifactDirectory(options, saved);
+  const witness = await resolveWitnessSource(options, saved);
+  return { version: 1, artifactDirectory, witness };
+}
+async function readSetupConfig(path) {
+  let raw;
+  try {
+    const info = await lstat(path);
+    if (!info.isFile())
+      throw new Error("Local setup config must be a regular file");
+    raw = await readFile5(path, "utf8");
+  } catch (error) {
+    if (error && typeof error === "object" && "code" in error && error.code === "ENOENT")
+      return void 0;
+    throw error;
+  }
+  try {
+    return parseSetupConfig(JSON.parse(raw));
+  } catch (error) {
+    if (error instanceof SyntaxError) {
+      throw new Error("Local setup config is not valid JSON; remove ~/.zk-credits/config.json and run setup again.");
+    }
+    throw error;
+  }
+}
+async function writeSetupConfig(path, config) {
+  const normalized = parseSetupConfig(config);
+  const directory = dirname6(resolve2(path));
+  await mkdir7(directory, { recursive: true, mode: 448 });
+  const destination = resolve2(path);
+  try {
+    const existing = await lstat(destination);
+    if (existing.isSymbolicLink())
+      throw new Error("Local setup config cannot be a symbolic link");
+  } catch (error) {
+    if (!(error && typeof error === "object" && "code" in error && error.code === "ENOENT"))
+      throw error;
+  }
+  const temporary = join5(directory, ".config-" + randomUUID() + ".tmp");
+  try {
+    const file = await open2(temporary, "wx", 384);
+    try {
+      await file.writeFile(JSON.stringify(normalized, null, 2) + "\n", "utf8");
+      await file.sync();
+    } finally {
+      await file.close();
+    }
+    await rename4(temporary, destination);
+    await chmod5(destination, 384);
+  } finally {
+    await rm(temporary, { force: true });
+  }
+}
+function applySetupConfig(environment, config) {
+  if (!environment.ZK_CREDITS_ARTIFACT_DIR?.trim()) {
+    environment.ZK_CREDITS_ARTIFACT_DIR = config.artifactDirectory;
+  }
+  if (config.witness.kind === "file") {
+    if (!environment.ZK_CREDITS_WITNESS_PATH?.trim()) {
+      environment.ZK_CREDITS_WITNESS_PATH = config.witness.path;
+    }
+    return;
+  }
+  if (!environment.BASE_RPC_URL?.trim())
+    environment.BASE_RPC_URL = config.witness.rpcUrl;
+  if (!environment.BASE_PRIVATE_CREDIT_BOND_ADDRESS?.trim()) {
+    environment.BASE_PRIVATE_CREDIT_BOND_ADDRESS = config.witness.contractAddress;
+  }
+  if (!environment.BASE_DEPLOYMENT_BLOCK?.trim() && config.witness.deploymentBlock !== void 0) {
+    environment.BASE_DEPLOYMENT_BLOCK = config.witness.deploymentBlock;
+  }
+  if (!environment.BASE_CONFIRMATIONS?.trim() && config.witness.confirmations !== void 0) {
+    environment.BASE_CONFIRMATIONS = config.witness.confirmations;
+  }
+}
+
 // dist/sidecar-lifecycle.js
 async function ensureSidecarReady(dependencies, options = {}) {
   if (await dependencies.isHealthy())
@@ -82145,6 +82492,331 @@ async function ensureSidecarReady(dependencies, options = {}) {
 
 // dist/sidecar.js
 import { createServer } from "node:http";
+
+// dist/responses-bridge.js
+import { randomUUID as randomUUID2 } from "node:crypto";
+function isRecord3(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function hasOnlyKeys(value, allowed) {
+  return Object.keys(value).every((key) => allowed.includes(key));
+}
+function textContent(value) {
+  if (typeof value === "string")
+    return value;
+  if (!Array.isArray(value))
+    return void 0;
+  const parts = [];
+  for (const part of value) {
+    if (!isRecord3(part) || !hasOnlyKeys(part, ["type", "text"]) || part.type !== "input_text" && part.type !== "output_text" || typeof part.text !== "string")
+      return void 0;
+    parts.push({ type: "text", text: part.text });
+  }
+  return parts.length === 1 ? parts[0].text : parts;
+}
+function responseInputMessages(input) {
+  if (typeof input === "string")
+    return [{ role: "user", content: input }];
+  if (!Array.isArray(input))
+    return void 0;
+  const messages = [];
+  for (const item of input) {
+    if (!isRecord3(item) || typeof item.type !== "string")
+      return void 0;
+    if (item.type === "message") {
+      if (!hasOnlyKeys(item, ["type", "id", "role", "content"]) || item.id !== void 0 && typeof item.id !== "string" || !["system", "developer", "user", "assistant"].includes(String(item.role)))
+        return void 0;
+      const content = textContent(item.content);
+      if (content === void 0)
+        return void 0;
+      messages.push({ role: item.role, content });
+      continue;
+    }
+    if (item.type === "function_call") {
+      if (!hasOnlyKeys(item, ["type", "id", "status", "call_id", "name", "arguments"]) || typeof item.call_id !== "string" || typeof item.name !== "string" || typeof item.arguments !== "string" || item.id !== void 0 && typeof item.id !== "string" || item.status !== void 0 && typeof item.status !== "string")
+        return void 0;
+      messages.push({
+        role: "assistant",
+        content: null,
+        tool_calls: [{ id: item.call_id, type: "function", function: { name: item.name, arguments: item.arguments } }]
+      });
+      continue;
+    }
+    if (item.type === "function_call_output") {
+      if (!hasOnlyKeys(item, ["type", "id", "status", "call_id", "output"]) || typeof item.call_id !== "string" || typeof item.output !== "string" || item.id !== void 0 && typeof item.id !== "string" || item.status !== void 0 && typeof item.status !== "string")
+        return void 0;
+      messages.push({ role: "tool", tool_call_id: item.call_id, content: item.output });
+      continue;
+    }
+    return void 0;
+  }
+  return messages;
+}
+function responseTools(value) {
+  if (!Array.isArray(value))
+    return void 0;
+  const tools = [];
+  for (const tool of value) {
+    if (!isRecord3(tool) || typeof tool.type !== "string")
+      return void 0;
+    if (tool.type === "function") {
+      if (!hasOnlyKeys(tool, ["type", "name", "description", "parameters", "strict"]) || typeof tool.name !== "string" || tool.name.length === 0 || tool.description !== void 0 && typeof tool.description !== "string" || tool.parameters !== void 0 && !isRecord3(tool.parameters) || tool.strict !== void 0 && typeof tool.strict !== "boolean")
+        return void 0;
+      const definition = { name: tool.name };
+      if (tool.description !== void 0)
+        definition.description = tool.description;
+      if (tool.parameters !== void 0)
+        definition.parameters = tool.parameters;
+      if (tool.strict !== void 0)
+        definition.strict = tool.strict;
+      tools.push({ type: "function", function: definition });
+      continue;
+    }
+    if (tool.type === "web_search") {
+      if (!hasOnlyKeys(tool, ["type", "external_web_access"]) || tool.external_web_access !== void 0 && typeof tool.external_web_access !== "boolean")
+        return void 0;
+      continue;
+    }
+    if (tool.type === "namespace") {
+      if (!hasOnlyKeys(tool, ["type", "name", "description", "tools"]) || typeof tool.name !== "string" || tool.description !== void 0 && typeof tool.description !== "string" || !Array.isArray(tool.tools) || tool.tools.some((nested) => !isRecord3(nested) || nested.type !== "function" || typeof nested.name !== "string"))
+        return void 0;
+      continue;
+    }
+    return void 0;
+  }
+  return tools;
+}
+function translatedToolChoice(value) {
+  if (value === "none" || value === "auto" || value === "required")
+    return value;
+  if (!isRecord3(value) || value.type !== "function" || !hasOnlyKeys(value, ["type", "name"]) || typeof value.name !== "string")
+    return void 0;
+  return { type: "function", function: { name: value.name } };
+}
+function translateResponsesRequest(body) {
+  if (!isRecord3(body))
+    return { ok: false, error: "invalid_request_body" };
+  const allowed = [
+    "model",
+    "instructions",
+    "input",
+    "stream",
+    "tools",
+    "tool_choice",
+    "max_output_tokens",
+    "parallel_tool_calls",
+    "store",
+    "client_metadata",
+    "prompt_cache_key",
+    "include",
+    "reasoning",
+    "temperature",
+    "top_p",
+    "stop",
+    "seed",
+    "presence_penalty",
+    "frequency_penalty",
+    "logit_bias"
+  ];
+  if (!hasOnlyKeys(body, allowed))
+    return { ok: false, error: "unsupported_request_field" };
+  if (typeof body.model !== "string" || body.model.length === 0)
+    return { ok: false, error: "model_required" };
+  if (body.stream !== true)
+    return { ok: false, error: "streaming_required" };
+  if (body.store !== void 0 && body.store !== false)
+    return { ok: false, error: "stored_responses_unsupported" };
+  if (body.instructions !== void 0 && typeof body.instructions !== "string")
+    return { ok: false, error: "invalid_instructions" };
+  if (body.prompt_cache_key !== void 0 && typeof body.prompt_cache_key !== "string")
+    return { ok: false, error: "invalid_prompt_cache_key" };
+  if (body.client_metadata !== void 0 && (!isRecord3(body.client_metadata) || Object.values(body.client_metadata).some((value) => typeof value !== "string"))) {
+    return { ok: false, error: "invalid_client_metadata" };
+  }
+  if (body.include !== void 0 && (!Array.isArray(body.include) || body.include.some((value) => value !== "reasoning.encrypted_content"))) {
+    return { ok: false, error: "unsupported_include" };
+  }
+  if (body.reasoning !== void 0 && (!isRecord3(body.reasoning) || !hasOnlyKeys(body.reasoning, ["summary"]) || body.reasoning.summary !== void 0 && !["auto", "concise", "detailed"].includes(String(body.reasoning.summary)))) {
+    return { ok: false, error: "unsupported_reasoning_controls" };
+  }
+  if (body.parallel_tool_calls !== void 0 && typeof body.parallel_tool_calls !== "boolean") {
+    return { ok: false, error: "invalid_parallel_tool_calls" };
+  }
+  const messages = [];
+  if (body.instructions !== void 0)
+    messages.push({ role: "developer", content: body.instructions });
+  const inputMessages = responseInputMessages(body.input);
+  if (!inputMessages)
+    return { ok: false, error: "unsupported_input_item" };
+  messages.push(...inputMessages);
+  const chatRequest = { model: body.model, messages };
+  if (body.tools !== void 0) {
+    const tools = responseTools(body.tools);
+    if (!tools)
+      return { ok: false, error: "unsupported_tool" };
+    if (tools.length)
+      chatRequest.tools = tools;
+  }
+  if (body.tool_choice !== void 0) {
+    const toolChoice = translatedToolChoice(body.tool_choice);
+    if (toolChoice === void 0)
+      return { ok: false, error: "invalid_tool_choice" };
+    chatRequest.tool_choice = toolChoice;
+  }
+  if (body.max_output_tokens !== void 0) {
+    if (!Number.isInteger(body.max_output_tokens) || body.max_output_tokens <= 0) {
+      return { ok: false, error: "invalid_max_output_tokens" };
+    }
+    chatRequest.max_completion_tokens = body.max_output_tokens;
+  }
+  if (body.parallel_tool_calls !== void 0)
+    chatRequest.parallel_tool_calls = body.parallel_tool_calls;
+  for (const key of ["temperature", "top_p", "stop", "seed", "presence_penalty", "frequency_penalty", "logit_bias"]) {
+    if (body[key] !== void 0)
+      chatRequest[key] = body[key];
+  }
+  return { ok: true, chatRequest, responseModel: body.model };
+}
+function usageFor(chat) {
+  if (!isRecord3(chat.usage))
+    return null;
+  const promptTokens = chat.usage.prompt_tokens;
+  const completionTokens = chat.usage.completion_tokens;
+  const totalTokens = chat.usage.total_tokens;
+  if (![promptTokens, completionTokens, totalTokens].every((value) => Number.isInteger(value) && value >= 0))
+    return null;
+  return {
+    input_tokens: promptTokens,
+    output_tokens: completionTokens,
+    total_tokens: totalTokens
+  };
+}
+function responsesEventStream(chatValue, model) {
+  if (!isRecord3(chatValue) || !Array.isArray(chatValue.choices) || !isRecord3(chatValue.choices[0])) {
+    throw new Error("Gateway returned an invalid chat completion");
+  }
+  const choice = chatValue.choices[0];
+  if (!isRecord3(choice.message))
+    throw new Error("Gateway returned an invalid chat message");
+  const message = choice.message;
+  const responseSuffix = randomUUID2().replaceAll("-", "");
+  const responseId = `resp_${responseSuffix}`;
+  const events = [];
+  let sequence = 0;
+  const add = (event, data) => {
+    events.push({ event, data: { ...data, sequence_number: sequence++ } });
+  };
+  const createdAt = Number.isInteger(chatValue.created) ? chatValue.created : Math.floor(Date.now() / 1e3);
+  const usage = usageFor(chatValue);
+  const base = {
+    id: responseId,
+    object: "response",
+    created_at: createdAt,
+    status: "in_progress",
+    completed_at: null,
+    error: null,
+    incomplete_details: null,
+    model,
+    output: [],
+    parallel_tool_calls: true,
+    metadata: {},
+    usage: null
+  };
+  add("response.created", { type: "response.created", response: base });
+  add("response.in_progress", { type: "response.in_progress", response: base });
+  const output = [];
+  const text = message.content;
+  const refusal = message.refusal;
+  if (text !== null && text !== void 0 && typeof text !== "string") {
+    throw new Error("Gateway returned an unsupported chat content value");
+  }
+  if (refusal !== void 0 && typeof refusal !== "string")
+    throw new Error("Gateway returned an invalid refusal value");
+  if (typeof text === "string" || typeof refusal === "string") {
+    const itemId = `msg_${randomUUID2().replaceAll("-", "")}`;
+    const isRefusal = typeof refusal === "string";
+    const part = isRefusal ? { type: "refusal", refusal } : { type: "output_text", text: text ?? "", annotations: [] };
+    const item = { id: itemId, type: "message", status: "completed", role: "assistant", content: [part] };
+    add("response.output_item.added", {
+      type: "response.output_item.added",
+      output_index: output.length,
+      item: { id: itemId, type: "message", status: "in_progress", role: "assistant", content: [] }
+    });
+    add("response.content_part.added", {
+      type: "response.content_part.added",
+      output_index: output.length,
+      content_index: 0,
+      part: isRefusal ? { type: "refusal", refusal: "" } : { type: "output_text", text: "", annotations: [] }
+    });
+    if (isRefusal) {
+      add("response.refusal.delta", { type: "response.refusal.delta", item_id: itemId, output_index: output.length, content_index: 0, delta: refusal });
+      add("response.refusal.done", { type: "response.refusal.done", item_id: itemId, output_index: output.length, content_index: 0, refusal });
+    } else {
+      add("response.output_text.delta", { type: "response.output_text.delta", item_id: itemId, output_index: output.length, content_index: 0, delta: text });
+      add("response.output_text.done", { type: "response.output_text.done", item_id: itemId, output_index: output.length, content_index: 0, text });
+    }
+    add("response.content_part.done", { type: "response.content_part.done", output_index: output.length, content_index: 0, part });
+    add("response.output_item.done", { type: "response.output_item.done", output_index: output.length, item });
+    output.push(item);
+  }
+  if (message.tool_calls !== void 0) {
+    if (!Array.isArray(message.tool_calls))
+      throw new Error("Gateway returned invalid tool calls");
+    for (const callValue of message.tool_calls) {
+      if (!isRecord3(callValue) || callValue.type !== "function" || !isRecord3(callValue.function) || typeof callValue.function.name !== "string" || typeof callValue.function.arguments !== "string") {
+        throw new Error("Gateway returned an invalid function call");
+      }
+      const callId = typeof callValue.id === "string" ? callValue.id : `call_${randomUUID2().replaceAll("-", "")}`;
+      const itemId = `fc_${randomUUID2().replaceAll("-", "")}`;
+      const item = {
+        id: itemId,
+        type: "function_call",
+        status: "completed",
+        call_id: callId,
+        name: callValue.function.name,
+        arguments: callValue.function.arguments
+      };
+      add("response.output_item.added", {
+        type: "response.output_item.added",
+        output_index: output.length,
+        item: { ...item, status: "in_progress", arguments: "" }
+      });
+      add("response.function_call_arguments.delta", {
+        type: "response.function_call_arguments.delta",
+        item_id: itemId,
+        output_index: output.length,
+        delta: callValue.function.arguments
+      });
+      add("response.function_call_arguments.done", {
+        type: "response.function_call_arguments.done",
+        item_id: itemId,
+        output_index: output.length,
+        arguments: callValue.function.arguments
+      });
+      add("response.output_item.done", { type: "response.output_item.done", output_index: output.length, item });
+      output.push(item);
+    }
+  }
+  const incomplete = choice.finish_reason === "length";
+  const final = {
+    ...base,
+    status: incomplete ? "incomplete" : "completed",
+    completed_at: Math.floor(Date.now() / 1e3),
+    incomplete_details: incomplete ? { reason: "max_output_tokens" } : null,
+    output,
+    ...usage ? { usage } : {}
+  };
+  add(incomplete ? "response.incomplete" : "response.completed", {
+    type: incomplete ? "response.incomplete" : "response.completed",
+    response: final
+  });
+  return events.map(({ event, data }) => `event: ${event}
+data: ${JSON.stringify(data)}
+
+`).join("");
+}
+
+// dist/sidecar.js
 import { PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER as PAYMENT_RESPONSE_HEADER2 } from "@zk-credits/x402-zk-prepaid";
 var MAX_REQUEST_BYTES = 2e6;
 var PAYMENT_HEADERS = [PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER2, "cache-control"];
@@ -82181,12 +82853,12 @@ async function readJsonBody(req) {
     throw new Error("OpenAI request body must be valid JSON");
   }
 }
-function isRecord2(value) {
+function isRecord4(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 var STREAM_KEYS = ["stream", "stream_options", "streamOptions", "stream-options"];
 function completionRejection(body) {
-  if (!isRecord2(body))
+  if (!isRecord4(body))
     return "invalid_request_body";
   if (STREAM_KEYS.some((key) => Object.prototype.hasOwnProperty.call(body, key)))
     return "streaming_not_supported";
@@ -82220,6 +82892,31 @@ async function relayGatewayResponse(res, upstream) {
     reader.releaseLock();
   }
 }
+async function relayResponsesGatewayResponse(res, upstream, responseModel) {
+  if (upstream.status < 200 || upstream.status >= 300) {
+    await relayGatewayResponse(res, upstream);
+    return;
+  }
+  const upstreamText = await upstream.text();
+  let completion;
+  try {
+    completion = JSON.parse(upstreamText);
+  } catch {
+    throw new Error("Gateway returned an invalid chat completion");
+  }
+  const eventStream = responsesEventStream(completion, responseModel);
+  const headers = {
+    "Content-Type": "text/event-stream; charset=utf-8",
+    "Cache-Control": "no-cache"
+  };
+  for (const name of PAYMENT_HEADERS) {
+    const value = upstream.headers.get(name);
+    if (value)
+      headers[name] = value;
+  }
+  res.writeHead(upstream.status, headers);
+  res.end(eventStream);
+}
 function createSidecarServer(options) {
   const gatewayBaseUrl = options.gatewayBaseUrl.replace(/\/$/u, "");
   let server = null;
@@ -82255,7 +82952,7 @@ function createSidecarServer(options) {
       sendJson(res, 200, options.metrics());
       return;
     }
-    if (req.method !== "POST" || pathname !== "/v1/chat/completions") {
+    if (req.method !== "POST" || pathname !== "/v1/chat/completions" && pathname !== "/v1/responses") {
       sendJson(res, 404, { error: "unsupported_openai_path" });
       return;
     }
@@ -82265,17 +82962,33 @@ function createSidecarServer(options) {
     }
     try {
       const body = await readJsonBody(req);
-      const rejection = completionRejection(body.parsed);
-      if (rejection) {
-        sendJson(res, 400, { error: rejection });
-        return;
+      const isResponses = pathname === "/v1/responses";
+      let outboundBody = body.raw;
+      let responseModel = "";
+      if (isResponses) {
+        const translation = translateResponsesRequest(body.parsed);
+        if (!translation.ok) {
+          sendJson(res, 400, { error: translation.error });
+          return;
+        }
+        outboundBody = JSON.stringify(translation.chatRequest);
+        responseModel = translation.responseModel;
+      } else {
+        const rejection = completionRejection(body.parsed);
+        if (rejection) {
+          sendJson(res, 400, { error: rejection });
+          return;
+        }
       }
-      const upstream = await options.prepaidClient.fetch(`${gatewayBaseUrl}${pathname}`, {
+      const upstream = await options.prepaidClient.fetch(`${gatewayBaseUrl}/v1/chat/completions`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: body.raw
+        body: outboundBody
       });
-      await relayGatewayResponse(res, upstream);
+      if (isResponses)
+        await relayResponsesGatewayResponse(res, upstream, responseModel);
+      else
+        await relayGatewayResponse(res, upstream);
     } catch (error) {
       if (!res.headersSent) {
         sendJson(res, 502, {
@@ -82295,11 +83008,11 @@ function createSidecarServer(options) {
         const request = handler(req, res).finally(() => inFlight.delete(request));
         inFlight.add(request);
       });
-      await new Promise((resolve2, reject) => {
+      await new Promise((resolve3, reject) => {
         server.once("error", reject);
         server.listen(port, "127.0.0.1", () => {
           server.off("error", reject);
-          resolve2();
+          resolve3();
         });
       });
       const address2 = server.address();
@@ -82310,21 +83023,171 @@ function createSidecarServer(options) {
         return;
       const activeServer = server;
       server = null;
-      await new Promise((resolve2, reject) => activeServer.close((error) => {
+      await new Promise((resolve3, reject) => activeServer.close((error) => {
         if (error)
           reject(error);
         else
-          resolve2();
+          resolve3();
       }));
       await Promise.all(inFlight);
     }
   };
 }
 
+// dist/base-registered-trial.js
+import { x402Client } from "@x402/core/client";
+import { BASE_SEPOLIA_NETWORK, decodeHeader as decodeHeader2, encodeHeader, lifecycleFailure, lifecycleStage, PAYMENT_REQUIRED_HEADER as PAYMENT_REQUIRED_HEADER2, PAYMENT_RESPONSE_HEADER as PAYMENT_RESPONSE_HEADER3, PAYMENT_SIGNATURE_HEADER as PAYMENT_SIGNATURE_HEADER2, registerZkPrepaidClient, ZK_PREPAID_SCHEME } from "@zk-credits/x402-zk-prepaid";
+function observe(options, event) {
+  try {
+    options.lifecycle?.(event);
+  } catch {
+  }
+}
+function withFailure(options, result, startingCommittedSlots, failurePhase, failure) {
+  result.failurePhase = failurePhase;
+  if (failure)
+    observe(options, lifecycleFailure(failure));
+  result.committedSlotDelta = (options.slotLedger?.snapshot().committed ?? startingCommittedSlots) - startingCommittedSlots;
+  return result;
+}
+function requestHeaders(headers) {
+  return new Headers(headers);
+}
+async function runBaseRegisteredTrialExchange(options) {
+  const ledger = options.slotLedger;
+  if (!ledger)
+    throw new Error("A durable slot ledger is required for the Base pilot");
+  const startingCommittedSlots = ledger.snapshot().committed;
+  const result = {
+    challengeStatus: null,
+    challengeReceived: false,
+    proofPrepared: false,
+    paymentSignatureSent: false,
+    paymentStatus: null,
+    paymentResponseConfirmed: false,
+    responseStatus: null,
+    responseSucceeded: false,
+    committedSlotDelta: 0
+  };
+  let target;
+  try {
+    target = new URL(options.url);
+  } catch {
+    return withFailure(options, result, startingCommittedSlots, "challenge_request_mismatch");
+  }
+  if (target.protocol !== "https:" || target.username !== "" || target.password !== "" || target.search !== "" || target.hash !== "" || target.pathname !== "/v1/chat/completions") {
+    return withFailure(options, result, startingCommittedSlots, "challenge_request_mismatch");
+  }
+  const fetcher = options.fetch ?? fetch;
+  const requestInit = {
+    method: "POST",
+    body: options.body,
+    headers: requestHeaders(options.headers),
+    redirect: "error"
+  };
+  let challengeResponse;
+  try {
+    challengeResponse = await fetcher(target, requestInit);
+  } catch {
+    return withFailure(options, result, startingCommittedSlots, "challenge_transport", "transport_failed");
+  }
+  result.challengeStatus = challengeResponse.status;
+  if (challengeResponse.status !== 402) {
+    return withFailure(options, result, startingCommittedSlots, "challenge_status", "payment_rejected");
+  }
+  const encodedRequired = challengeResponse.headers.get(PAYMENT_REQUIRED_HEADER2);
+  if (!encodedRequired) {
+    return withFailure(options, result, startingCommittedSlots, "challenge_header", "challenge_unsupported");
+  }
+  let required;
+  try {
+    required = decodeHeader2(encodedRequired);
+  } catch {
+    return withFailure(options, result, startingCommittedSlots, "challenge_invalid", "challenge_unreadable");
+  }
+  if (required.x402Version !== 2 || !Array.isArray(required.accepts) || !required.accepts.some((accepted) => accepted.scheme === ZK_PREPAID_SCHEME && accepted.network === BASE_SEPOLIA_NETWORK)) {
+    return withFailure(options, result, startingCommittedSlots, "challenge_unsupported", "challenge_unsupported");
+  }
+  const challengeUrl = required.resource?.url;
+  if (challengeUrl && challengeUrl !== target.toString()) {
+    return withFailure(options, result, startingCommittedSlots, "challenge_request_mismatch", "challenge_unsupported");
+  }
+  result.challengeReceived = true;
+  observe(options, lifecycleStage("challenge_received"));
+  const createPayment = createBasePaymentFactory(options);
+  const directAdapter = registerZkPrepaidClient(new x402Client((_version, accepts) => {
+    const selected = accepts.find((accepted) => accepted.scheme === ZK_PREPAID_SCHEME && accepted.network === BASE_SEPOLIA_NETWORK);
+    if (!selected)
+      throw new Error("zk_prepaid_challenge_missing");
+    return selected;
+  }).setSpendControls(false), async ({ requirements }) => {
+    const prepared = await createPayment({
+      url: target.toString(),
+      method: "POST",
+      body: options.body,
+      requirements
+    });
+    return prepared.payment;
+  });
+  let payment;
+  try {
+    payment = await directAdapter.createPaymentPayload(required);
+    result.proofPrepared = true;
+    observe(options, lifecycleStage("payment_prepared"));
+  } catch {
+    return withFailure(options, result, startingCommittedSlots, "proof_generation", "payment_preparation_failed");
+  }
+  const headers = requestHeaders(options.headers);
+  headers.set(PAYMENT_SIGNATURE_HEADER2, encodeHeader(payment));
+  result.paymentSignatureSent = true;
+  let paidResponse;
+  try {
+    paidResponse = await fetcher(target, { ...requestInit, headers });
+  } catch {
+    return withFailure(options, result, startingCommittedSlots, "payment_transport", "transport_failed");
+  }
+  result.paymentStatus = paidResponse.status;
+  result.responseStatus = paidResponse.status;
+  if (paidResponse.status === 402) {
+    return withFailure(options, result, startingCommittedSlots, "payment_rejected", "payment_rejected");
+  }
+  const encodedPaymentResponse = paidResponse.headers.get(PAYMENT_RESPONSE_HEADER3);
+  if (!encodedPaymentResponse) {
+    return withFailure(options, result, startingCommittedSlots, "payment_response_missing", "settlement_failed");
+  }
+  try {
+    const settlement = decodeHeader2(encodedPaymentResponse);
+    if (settlement.success !== true || settlement.network !== BASE_SEPOLIA_NETWORK || settlement.transaction !== "") {
+      return withFailure(options, result, startingCommittedSlots, "payment_response_invalid", "settlement_failed");
+    }
+  } catch {
+    return withFailure(options, result, startingCommittedSlots, "payment_response_invalid", "settlement_failed");
+  }
+  result.paymentResponseConfirmed = true;
+  observe(options, lifecycleStage("settlement_confirmed"));
+  if (!paidResponse.ok) {
+    return withFailure(options, result, startingCommittedSlots, "response_not_ok", "payment_rejected");
+  }
+  result.responseSucceeded = true;
+  observe(options, lifecycleStage("exchange_succeeded"));
+  result.committedSlotDelta = ledger.snapshot().committed - startingCommittedSlots;
+  return result;
+}
+
 // dist/cli.js
+import { BASE_SEPOLIA_NETWORK as BASE_SEPOLIA_NETWORK2 } from "@zk-credits/x402-zk-prepaid";
+var DEFAULT_GATEWAY_URL = "https://zk-credits-gateway.onrender.com";
 var DEFAULT_PORT = 3210;
 function stateDirectory() {
-  return process.env.ZK_CREDITS_HOME || join5(homedir(), ".zk-credits");
+  return process.env.ZK_CREDITS_HOME || join6(homedir(), ".zk-credits");
+}
+function setupConfigPath(directory = stateDirectory()) {
+  return join6(directory, "config.json");
+}
+async function applySavedSetupConfig(environment, directory = stateDirectory()) {
+  const config = await readSetupConfig(setupConfigPath(directory));
+  if (config)
+    applySetupConfig(environment, config);
 }
 function loopbackBaseUrl() {
   const port = Number(process.env.ZK_CREDITS_SIDECAR_PORT || DEFAULT_PORT);
@@ -82343,6 +83206,55 @@ function readPort(args) {
   }
   return parsed;
 }
+async function chooseSetupCandidate(kind, candidates) {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    const variable = kind === "proving bundle" ? "ZK_CREDITS_ARTIFACT_DIR" : "ZK_CREDITS_WITNESS_PATH";
+    throw new Error("Found more than one valid local " + kind + ". Rerun in an interactive terminal or set " + variable + " explicitly.");
+  }
+  const input = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    console.log("Found multiple valid " + kind + "s:");
+    candidates.forEach((candidate, index2) => console.log("  " + (index2 + 1) + ") " + candidate));
+    const answer = await input.question("Select a number: ");
+    const index = Number(answer);
+    if (!Number.isInteger(index) || index < 1 || index > candidates.length) {
+      throw new Error("Choose one of the listed local candidates");
+    }
+    return candidates[index - 1];
+  } finally {
+    input.close();
+  }
+}
+async function witnessProviderForSource(source, cachePath) {
+  if (source.kind === "file") {
+    let value;
+    try {
+      value = JSON.parse(await readFile6(source.path, "utf8"));
+    } catch {
+      throw new Error("The Base witness file could not be read as JSON");
+    }
+    return createFileWitnessProvider(value);
+  }
+  return createBaseEventWitnessProvider({
+    rpcUrl: source.rpcUrl,
+    contractAddress: source.contractAddress,
+    deploymentBlock: source.deploymentBlock === void 0 ? void 0 : BigInt(source.deploymentBlock),
+    confirmations: source.confirmations === void 0 ? void 0 : BigInt(source.confirmations),
+    cachePath
+  });
+}
+async function readCredentialPasswordFromStdin() {
+  const chunks = [];
+  let byteLength = 0;
+  for await (const chunk of process.stdin) {
+    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    byteLength += bytes.length;
+    if (byteLength > 4096)
+      throw new Error("Credential password input is too long");
+    chunks.push(bytes);
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
 async function readHiddenValue(prompt) {
   if (!process.stdin.isTTY || !process.stdin.setRawMode) {
     throw new Error("credential backup requires an interactive terminal");
@@ -82350,16 +83262,17 @@ async function readHiddenValue(prompt) {
   process.stdout.write(prompt);
   process.stdin.setRawMode(true);
   process.stdin.resume();
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     let value = "";
     const done = (error) => {
       process.stdin.off("data", onData);
       process.stdin.setRawMode(false);
+      process.stdin.pause();
       process.stdout.write("\n");
       if (error)
         reject(error);
       else
-        resolve2(value.trim());
+        resolve3(value.trim());
     };
     const onData = (chunk) => {
       for (const byte of chunk) {
@@ -82382,7 +83295,7 @@ async function readHiddenValue(prompt) {
   });
 }
 async function readEncryptedCredential(path, password) {
-  const parsed = JSON.parse(await readFile5(path, "utf8"));
+  const parsed = JSON.parse(await readFile6(path, "utf8"));
   if (parsed.format !== "zk-credits-credential" || parsed.version !== 1 && parsed.version !== 2) {
     throw new Error("Credential file is not a supported zk-credits export");
   }
@@ -82395,50 +83308,304 @@ function printHelp() {
   zk-credits codex [codex arguments...]
   zk-credits status
   zk-credits serve [--port <port>]
+  zk-credits trial-registered-adapter
   eval "$(zk-credits env)"
 
 "zk-credits cline" and the Codex companion configure and launch coding agents
-against the x402 zk-prepaid loopback sidecar. The pilot serves non-streaming
-POST /v1/chat/completions only.
-Set ZK_CREDITS_CREDENTIAL_PATH, ZK_CREDITS_CREDENTIAL_PASSWORD, and
-ZK_CREDITS_ARTIFACT_DIR for a headless process. The encrypted export is
-decrypted only in local memory.`);
+against the x402 zk-prepaid loopback sidecar. The gateway spend path is
+non-streaming POST /v1/chat/completions; Codex Responses requests pass through
+the sidecar's bounded local compatibility bridge.
+"zk-credits trial-registered-adapter" runs one confirmed, billable internal
+trial request through the directly registered official x402 client adapter.
+Set ZK_CREDITS_CREDENTIAL_PATH before setup. The wizard searches Downloads and
+~/.zk-credits for the pinned bundle and local Base witness, validates both,
+then saves their paths locally. Alternatively, set ZK_CREDITS_ARTIFACT_DIR and
+ZK_CREDITS_WITNESS_PATH explicitly. Setup prompts for the credential password
+without echo; the encrypted export is decrypted only in local memory.`);
 }
-async function serve(args) {
-  const port = readPort(args);
-  const statePaths = sidecarStatePaths(stateDirectory());
-  const localToken = createLoopbackToken();
+async function loadBaseClientRuntime(passwordInput) {
   const credentialPath = process.env.ZK_CREDITS_CREDENTIAL_PATH;
   if (!credentialPath)
     throw new Error("Set ZK_CREDITS_CREDENTIAL_PATH to the encrypted browser export");
-  const password = process.env.ZK_CREDITS_CREDENTIAL_PASSWORD ?? await readHiddenValue("Credential backup password: ");
+  const password = passwordInput ?? await readHiddenValue("Credential backup password: ");
   const credential = await readEncryptedCredential(credentialPath, password);
   const witnessPath = process.env.ZK_CREDITS_WITNESS_PATH;
   const artifactDirectory = process.env.ZK_CREDITS_ARTIFACT_DIR;
   if (!artifactDirectory) {
     throw new Error("Set ZK_CREDITS_ARTIFACT_DIR to the directory holding the installed pinned proving bundle");
   }
-  const witness = witnessPath ? createFileWitnessProvider(JSON.parse(await readFile5(witnessPath, "utf8"))) : process.env.BASE_RPC_URL && process.env.BASE_PRIVATE_CREDIT_BOND_ADDRESS ? createBaseEventWitnessProvider({
+  const witnessProvider = witnessPath ? createFileWitnessProvider(JSON.parse(await readFile6(witnessPath, "utf8"))) : process.env.BASE_RPC_URL && process.env.BASE_PRIVATE_CREDIT_BOND_ADDRESS ? createBaseEventWitnessProvider({
     rpcUrl: process.env.BASE_RPC_URL,
     contractAddress: process.env.BASE_PRIVATE_CREDIT_BOND_ADDRESS,
     deploymentBlock: process.env.BASE_DEPLOYMENT_BLOCK && /^\d+$/u.test(process.env.BASE_DEPLOYMENT_BLOCK) ? BigInt(process.env.BASE_DEPLOYMENT_BLOCK) : void 0,
     confirmations: process.env.BASE_CONFIRMATIONS && /^\d+$/u.test(process.env.BASE_CONFIRMATIONS) ? BigInt(process.env.BASE_CONFIRMATIONS) : void 0,
-    cachePath: join5(stateDirectory(), "base-event-sync.json")
+    cachePath: join6(stateDirectory(), "base-event-sync.json")
   }) : (() => {
     throw new Error("Set ZK_CREDITS_WITNESS_PATH or configure BASE_RPC_URL and BASE_PRIVATE_CREDIT_BOND_ADDRESS");
   })();
   const proofMetrics = createBaseProofMetrics();
   const exchangeMetrics = createZkPrepaidLifecycleMetrics();
-  const slotLedger = await BaseSlotLedger.open({ path: join5(stateDirectory(), "base-slots.json") });
+  const slotLedger = await BaseSlotLedger.open({ path: join6(stateDirectory(), "base-slots.json") });
   const prove = await createPinnedBaseProofGenerator({ artifactDirectory, metrics: proofMetrics });
+  validateBaseCreditWitness(await witnessProvider.witnessForCredential(credential));
+  return { credential, witnessProvider, slotLedger, proofMetrics, exchangeMetrics, prove };
+}
+var GATEWAY_COUNTER_NAMES = [
+  "challenge_issued",
+  "proof_valid",
+  "proof_invalid",
+  "reservation_new",
+  "reservation_existing",
+  "claim_committed",
+  "claim_cancelled",
+  "claim_replayed",
+  "claim_conflict",
+  "dispatch_ok",
+  "dispatch_error",
+  "dispatch_timeout",
+  "cap_exhausted_utc_day",
+  "cap_exhausted_rolling_30d",
+  "paused_rejected",
+  "request_rejected"
+];
+var GATEWAY_CLAIM_COUNT_NAMES = ["reserved", "ready", "committed", "cancelled"];
+var GATEWAY_READINESS_CHECK_NAMES = /* @__PURE__ */ new Set(["launchControl", "database", "baseRoot", "baseRpc", "verifierAssets", "provider"]);
+function isRecord5(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function safeCount(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
+}
+function gatewayOrigin() {
+  const origin = new URL(process.env.ZK_CREDITS_GATEWAY_URL || DEFAULT_GATEWAY_URL);
+  if (origin.protocol !== "https:" || origin.username || origin.password || origin.search || origin.hash || origin.pathname !== "/") {
+    throw new Error("The internal trial requires a plain HTTPS gateway origin");
+  }
+  return origin;
+}
+async function readGatewayJson(url, headers) {
+  try {
+    const response = await fetch(url, { headers, signal: AbortSignal.timeout(1e4) });
+    let body;
+    try {
+      body = await response.json();
+    } catch {
+      body = void 0;
+    }
+    return { status: response.status, body };
+  } catch {
+    return { status: null };
+  }
+}
+async function gatewayReadiness(origin) {
+  const response = await readGatewayJson(new URL("/ready", origin), { accept: "application/json" });
+  const report = isRecord5(response.body) ? response.body : void 0;
+  const checks = Array.isArray(report?.checks) ? report.checks : [];
+  const failedChecks = checks.flatMap((check) => isRecord5(check) && check.ok === true ? [] : [isRecord5(check) && typeof check.name === "string" && GATEWAY_READINESS_CHECK_NAMES.has(check.name) ? check.name : "unknown"]);
+  const hasLaunchCheck = checks.some((check) => isRecord5(check) && check.name === "launchControl" && check.ok === true);
+  return {
+    status: response.status,
+    passed: response.status === 200 && report?.ready === true && failedChecks.length === 0 && hasLaunchCheck,
+    failedChecks
+  };
+}
+async function gatewayTrialSnapshot(origin, token) {
+  const response = await readGatewayJson(new URL("/v1/admin/status", origin), {
+    accept: "application/json",
+    authorization: `Bearer ${token}`
+  });
+  const body = isRecord5(response.body) ? response.body : void 0;
+  const launch = isRecord5(body?.launchControl) ? body.launchControl : void 0;
+  const base = isRecord5(body?.base) ? body.base : void 0;
+  const spend = isRecord5(body?.spend) ? body.spend : void 0;
+  const rawMetrics = isRecord5(body?.metrics) ? body.metrics : void 0;
+  const rawClaims = isRecord5(body?.claims) ? body.claims : void 0;
+  const metrics = {};
+  const claims = {};
+  let countersValid = Boolean(rawMetrics && rawClaims);
+  for (const name of GATEWAY_COUNTER_NAMES) {
+    const count = safeCount(rawMetrics?.[name]);
+    if (count === void 0)
+      countersValid = false;
+    else
+      metrics[name] = count;
+  }
+  for (const name of GATEWAY_CLAIM_COUNT_NAMES) {
+    const count = safeCount(rawClaims?.[name]);
+    if (count !== void 0)
+      claims[name] = count;
+    else
+      countersValid = false;
+  }
+  const headroom = (value) => typeof value === "string" && /^\d+$/u.test(value) && BigInt(value) > 0n;
+  const currentRoot = typeof base?.currentRoot === "string" && base.currentRoot.length > 0 ? base.currentRoot : void 0;
+  const knownRoot = currentRoot !== void 0;
+  const lag = typeof base?.lagBlocks === "string" && /^\d+$/u.test(base.lagBlocks) ? BigInt(base.lagBlocks) : void 0;
+  const snapshot = countersValid && currentRoot ? { metrics, claims, currentRoot } : void 0;
+  return {
+    status: response.status,
+    ...snapshot ? { snapshot } : {},
+    gatePassed: response.status === 200 && body?.network === BASE_SEPOLIA_NETWORK2 && launch?.state === "enabled" && knownRoot && safeCount(base?.knownRootCount) !== void 0 && (safeCount(base?.knownRootCount) ?? 0) > 0 && lag !== void 0 && lag <= 300n && headroom(spend?.dailyHeadroomMicroUsd) && headroom(spend?.rollingHeadroomMicroUsd) && countersValid
+  };
+}
+async function confirmDirectTrial() {
+  if (!process.stdin.isTTY || !process.stdout.isTTY)
+    throw new Error("the internal trial requires a local interactive terminal");
+  const input = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    const answer = await input.question("Confirm local recovery completed, this slot ledger was not copied to another client, one credit remains, and you approve one billable internal exchange. Type RUN ONE INTERNAL EXCHANGE: ");
+    return answer.trim() === "RUN ONE INTERNAL EXCHANGE";
+  } finally {
+    input.close();
+  }
+}
+function gatewayCounterDelta(before, after) {
+  return {
+    metrics: Object.fromEntries(GATEWAY_COUNTER_NAMES.map((name) => [name, after.metrics[name] - before.metrics[name]])),
+    claims: Object.fromEntries(GATEWAY_CLAIM_COUNT_NAMES.map((name) => [name, after.claims[name] - before.claims[name]]))
+  };
+}
+async function trialRegisteredAdapter() {
+  if (!await confirmDirectTrial()) {
+    console.log(JSON.stringify({ path: "registered-adapter", status: "not_run" }));
+    return;
+  }
+  try {
+    const runtime = await loadBaseClientRuntime();
+    if (runtime.credential.tierId !== 0 || runtime.credential.deploymentDomain !== "84532" || runtime.credential.expiry <= Math.floor(Date.now() / 1e3)) {
+      console.log(JSON.stringify({ path: "registered-adapter", status: "stopped", failurePhase: "credential_gate" }));
+      return;
+    }
+    const startingSlots = runtime.slotLedger.snapshot();
+    if (startingSlots.committed >= startingSlots.capacity) {
+      console.log(JSON.stringify({
+        path: "registered-adapter",
+        status: "stopped",
+        failurePhase: "local_credit_gate",
+        localCredits: { capacity: startingSlots.capacity, committed: startingSlots.committed, available: 0 }
+      }));
+      return;
+    }
+    const gateway = gatewayOrigin();
+    const adminToken = process.env.BILLING_INTERNAL_TOKEN || await readHiddenValue("Gateway admin token: ");
+    if (!adminToken.trim()) {
+      console.log(JSON.stringify({ path: "registered-adapter", status: "stopped", failurePhase: "admin_auth" }));
+      return;
+    }
+    const lifecycle = createNodeSidecarLifecycle({
+      loopbackBaseUrl: loopbackBaseUrl(),
+      stateDirectory: stateDirectory(),
+      tokenPath: sidecarStatePaths(stateDirectory()).tokenPath,
+      logPath: sidecarStatePaths(stateDirectory()).logPath,
+      cliEntryPath: process.argv[1] ?? ""
+    });
+    const codexHome = resolveCodexHome(process.env, homedir());
+    const [sidecarRunning, codexProfileInstalled] = await Promise.all([
+      lifecycle.isHealthy(),
+      isCodexProfileInstalled(codexHome)
+    ]);
+    const launcherStatus = { codexProfileInstalled, sidecarRunning };
+    if (sidecarRunning) {
+      console.log(JSON.stringify({ path: "registered-adapter", status: "stopped", failurePhase: "sidecar_running", launcherStatus }));
+      return;
+    }
+    const witness = await runtime.witnessProvider.witnessForCredential(runtime.credential);
+    const readiness = await gatewayReadiness(gateway);
+    if (!readiness.passed) {
+      console.log(JSON.stringify({ path: "registered-adapter", status: "stopped", failurePhase: "readiness", launcherStatus, readiness }));
+      return;
+    }
+    const adminBefore = await gatewayTrialSnapshot(gateway, adminToken);
+    if (!adminBefore.gatePassed || !adminBefore.snapshot) {
+      console.log(JSON.stringify({ path: "registered-adapter", status: "stopped", failurePhase: "admin_status", launcherStatus, readiness, adminStatus: adminBefore.status }));
+      return;
+    }
+    if (witness.root !== adminBefore.snapshot.currentRoot) {
+      console.log(JSON.stringify({ path: "registered-adapter", status: "stopped", failurePhase: "root_mismatch", launcherStatus, readiness, adminStatus: adminBefore.status }));
+      return;
+    }
+    const baselineSlots = runtime.slotLedger.snapshot();
+    const baselineProof = runtime.proofMetrics.snapshot();
+    const baselineLifecycle = runtime.exchangeMetrics.snapshot();
+    const requestUrl = new URL("/v1/chat/completions", gateway).toString();
+    const requestBody = JSON.stringify({
+      model: "deepseek/deepseek-v4-flash",
+      messages: [{ role: "user", content: "Reply with exactly: internal trial complete." }],
+      stream: false
+    });
+    const exchange = await runBaseRegisteredTrialExchange({
+      url: requestUrl,
+      body: requestBody,
+      headers: { "content-type": "application/json" },
+      credential: runtime.credential,
+      witnessProvider: runtime.witnessProvider,
+      prove: runtime.prove,
+      slotLedger: runtime.slotLedger,
+      lifecycle: runtime.exchangeMetrics.observe
+    });
+    const adminAfter = await gatewayTrialSnapshot(gateway, adminToken);
+    const proofAfter = runtime.proofMetrics.snapshot();
+    const lifecycleAfter = runtime.exchangeMetrics.snapshot();
+    const slotAfter = runtime.slotLedger.snapshot();
+    const localDeltas = {
+      proofAttempts: proofAfter.attempts - baselineProof.attempts,
+      proofSuccesses: proofAfter.successes - baselineProof.successes,
+      proofFailures: proofAfter.failures - baselineProof.failures,
+      challengesReceived: lifecycleAfter.challengesReceived - baselineLifecycle.challengesReceived,
+      paymentsPrepared: lifecycleAfter.paymentsPrepared - baselineLifecycle.paymentsPrepared,
+      settlementsConfirmed: lifecycleAfter.settlementsConfirmed - baselineLifecycle.settlementsConfirmed,
+      exchangeSuccesses: lifecycleAfter.exchangeSuccesses - baselineLifecycle.exchangeSuccesses,
+      exchangeFailures: lifecycleAfter.failures - baselineLifecycle.failures,
+      committedSlots: slotAfter.committed - baselineSlots.committed
+    };
+    const counterDelta = adminAfter.snapshot ? gatewayCounterDelta(adminBefore.snapshot, adminAfter.snapshot) : void 0;
+    const expectedGatewayCounters = ["challenge_issued", "proof_valid", "reservation_new", "claim_committed", "dispatch_ok"];
+    const gatewayCountersMatch = Boolean(counterDelta) && expectedGatewayCounters.every((name) => counterDelta.metrics[name] === 1) && Object.entries(counterDelta?.metrics ?? {}).every(([name, value]) => expectedGatewayCounters.includes(name) || value === 0) && counterDelta?.claims.committed === 1 && Object.entries(counterDelta?.claims ?? {}).every(([name, value]) => name === "committed" || value === 0);
+    const failurePhase = exchange.failurePhase ?? (!exchange.responseSucceeded ? "response_not_ok" : void 0) ?? (adminAfter.status !== 200 || !adminAfter.snapshot ? "postflight_admin_status" : void 0) ?? (!gatewayCountersMatch ? "gateway_counter_delta" : void 0);
+    console.log(JSON.stringify({
+      path: "registered-adapter",
+      readiness: { status: readiness.status, passed: readiness.passed, failedChecks: readiness.failedChecks },
+      launcherStatus,
+      adminStatus: { before: adminBefore.status, after: adminAfter.status },
+      localCredits: {
+        capacity: baselineSlots.capacity,
+        committedBefore: baselineSlots.committed,
+        committedAfter: slotAfter.committed,
+        availableBefore: baselineSlots.capacity - baselineSlots.committed,
+        availableAfter: slotAfter.capacity - slotAfter.committed
+      },
+      exchange: {
+        challengeStatus: exchange.challengeStatus,
+        challengeReceived: exchange.challengeReceived,
+        proofPrepared: exchange.proofPrepared,
+        paymentSignatureSent: exchange.paymentSignatureSent,
+        paymentStatus: exchange.paymentStatus,
+        paymentResponseConfirmed: exchange.paymentResponseConfirmed,
+        responseStatus: exchange.responseStatus,
+        responseSucceeded: exchange.responseSucceeded,
+        committedSlotDelta: exchange.committedSlotDelta
+      },
+      localCounterDelta: localDeltas,
+      gatewayCounterDelta: counterDelta ?? null,
+      failurePhase
+    }));
+  } catch {
+    console.log(JSON.stringify({ path: "registered-adapter", status: "stopped", failurePhase: "local_setup" }));
+  }
+}
+async function serve(args, passwordInput) {
+  const port = readPort(args);
+  const statePaths = sidecarStatePaths(stateDirectory());
+  const localToken = createLoopbackToken();
+  const { credential, witnessProvider, proofMetrics, exchangeMetrics, slotLedger, prove } = await loadBaseClientRuntime(passwordInput);
   const prepaid = createBasePrepaidClient({
     credential,
-    witnessProvider: witness,
+    witnessProvider,
     prove,
     slotLedger,
     lifecycle: exchangeMetrics.observe
   });
-  const gatewayBaseUrl = process.env.ZK_CREDITS_GATEWAY_URL || "http://127.0.0.1:3001";
+  const gatewayBaseUrl = process.env.ZK_CREDITS_GATEWAY_URL || DEFAULT_GATEWAY_URL;
   const sidecar = createSidecarServer({
     localToken,
     gatewayBaseUrl,
@@ -82474,22 +83641,39 @@ async function main() {
     printHelp();
     return;
   }
+  const sidecarHome = stateDirectory();
+  if (args[0] !== "setup" && args[0] !== "status" && args[0] !== "env") {
+    await applySavedSetupConfig(process.env, sidecarHome);
+  }
   if (args[0] === "serve") {
-    await serve(args.slice(1));
+    const passwordFromStdin = args.includes("--credential-password-stdin") ? await readCredentialPasswordFromStdin() : void 0;
+    await serve(args.slice(1).filter((argument) => argument !== "--credential-password-stdin"), passwordFromStdin);
+    return;
+  }
+  if (args[0] === "trial-registered-adapter") {
+    await trialRegisteredAdapter();
     return;
   }
-  const sidecarHome = stateDirectory();
   const statePaths = sidecarStatePaths(sidecarHome);
   const codexHome = resolveCodexHome(process.env, homedir());
   const cliEntryPath = process.argv[1];
   if (!cliEntryPath)
     throw new Error("Unable to resolve the zk-credits executable path");
+  let setupCredentialPassword;
   const lifecycle = createNodeSidecarLifecycle({
     loopbackBaseUrl: loopbackBaseUrl(),
     stateDirectory: sidecarHome,
     tokenPath: statePaths.tokenPath,
     logPath: statePaths.logPath,
-    cliEntryPath
+    cliEntryPath,
+    readCredentialPassword: async () => {
+      if (setupCredentialPassword !== void 0) {
+        const password = setupCredentialPassword;
+        setupCredentialPassword = void 0;
+        return password;
+      }
+      return readHiddenValue("Credential backup password: ");
+    }
   });
   const exitCode = await runCliCommand(args, {
     loopbackBaseUrl: loopbackBaseUrl(),
@@ -82500,12 +83684,48 @@ async function main() {
       if (!path)
         return false;
       try {
-        await readFile5(path);
+        await readFile6(path);
         return true;
       } catch {
         return false;
       }
     },
+    validateSetupPrerequisites: async () => {
+      const credentialPath = process.env.ZK_CREDITS_CREDENTIAL_PATH;
+      if (!credentialPath?.trim())
+        throw new Error("Set ZK_CREDITS_CREDENTIAL_PATH to the encrypted browser export");
+      const password = await readHiddenValue("Credential backup password: ");
+      const credential = await readEncryptedCredential(credentialPath, password);
+      const manifest = await loadCircuitManifest();
+      const config = await resolveSetupInputs({
+        environment: process.env,
+        homeDirectory: homedir(),
+        stateDirectory: sidecarHome,
+        configPath: setupConfigPath(sidecarHome),
+        manifest,
+        validateWitness: async (source) => {
+          const provider = await witnessProviderForSource(source, join6(stateDirectory(), "base-event-sync.json"));
+          validateBaseCreditWitness(await provider.witnessForCredential(credential));
+        },
+        chooseCandidate: chooseSetupCandidate
+      });
+      const artifactDirectory = config.artifactDirectory;
+      try {
+        await createPinnedBaseProofGenerator({
+          artifactDirectory,
+          metrics: createBaseProofMetrics()
+        });
+      } catch (error) {
+        if (error instanceof Error)
+          throw new Error(`Pinned proving bundle check failed: ${error.message}`);
+        throw new Error("Pinned proving bundle check failed. Reinstall the bundle from your pilot invite.");
+      }
+      await writeSetupConfig(setupConfigPath(sidecarHome), config);
+      applySetupConfig(process.env, config);
+      setupCredentialPassword = password;
+      console.log("Pinned proving bundle and witness validated for this activated credential.");
+      console.log("Local setup paths saved to " + setupConfigPath(sidecarHome));
+    },
     configureCodex: async (model) => {
       await writeCodexProfile({ codexHome, loopbackBaseUrl: loopbackBaseUrl(), model });
     },