@agenticvault/agentic-vault 0.1.0

package/dist/cli/commands/encode.js

@@ -0,0 +1,77 @@
+import { encodeFunctionData } from 'viem';
+import { ACTION_CATALOG, listActions } from '../../protocols/index.js';
+import { parseOutputFormat, toJson, toHuman } from '../formatters.js';
+export async function runEncode(argv) {
+    const format = parseOutputFormat(argv);
+    const actionKey = argv[0];
+    if (!actionKey || actionKey.startsWith('--')) {
+        throw new Error(`Usage: agentic-vault encode <protocol:action> [--param value ...]\n\nAvailable actions:\n  ${listActions().join('\n  ')}`);
+    }
+    const entry = ACTION_CATALOG[actionKey];
+    if (!entry) {
+        throw new Error(`Unknown action: ${actionKey}\n\nAvailable actions:\n  ${listActions().join('\n  ')}`);
+    }
+    // Parse named parameters from argv
+    const params = {};
+    for (let i = 1; i < argv.length; i++) {
+        const flag = argv[i];
+        if (flag.startsWith('--')) {
+            const name = flag.slice(2);
+            const value = argv[++i];
+            if (value === undefined) {
+                throw new Error(`Missing value for --${name}`);
+            }
+            params[name] = value;
+        }
+    }
+    // Validate required params
+    const missing = entry.paramNames.filter((name) => !(name in params));
+    if (missing.length > 0) {
+        throw new Error(`Missing required parameters: ${missing.map((n) => `--${n}`).join(', ')}\n\n` +
+            `Usage: agentic-vault encode ${actionKey} ${entry.paramNames.map((n) => `--${n} <${n}>`).join(' ')}`);
+    }
+    // Build args in the correct order, coercing types
+    const isTupleAction = entry.abi[0].inputs.length === 1 &&
+        entry.abi[0].inputs[0].type === 'tuple';
+    let args;
+    if (isTupleAction) {
+        // Tuple-based actions (e.g., uniswap_v3:exactInputSingle) — wrap in struct
+        const struct = {};
+        for (let j = 0; j < entry.paramNames.length; j++) {
+            struct[entry.paramNames[j]] = coerceValue(params[entry.paramNames[j]], entry.paramTypes[j]);
+        }
+        args = [struct];
+    }
+    else {
+        // Flat actions (e.g., erc20:approve) — positional args
+        args = entry.paramNames.map((name, j) => coerceValue(params[name], entry.paramTypes[j]));
+    }
+    // Cast to loose Abi type for dynamic encoding
+    const calldata = encodeFunctionData({
+        abi: entry.abi,
+        functionName: entry.action,
+        args,
+    });
+    if (format === 'json') {
+        process.stdout.write(toJson({ action: actionKey, calldata }) + '\n');
+    }
+    else if (format === 'human') {
+        process.stdout.write(toHuman({ action: actionKey, selector: entry.selector, calldata }, 'Encoded Calldata') + '\n');
+    }
+    else {
+        process.stdout.write(calldata + '\n');
+    }
+}
+function coerceValue(value, solidityType) {
+    if (solidityType === 'address') {
+        return value;
+    }
+    if (solidityType.startsWith('uint') || solidityType.startsWith('int')) {
+        return BigInt(value);
+    }
+    if (solidityType === 'bool') {
+        return value === 'true';
+    }
+    return value;
+}
+//# sourceMappingURL=encode.js.map

package/dist/cli/commands/encode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encode.js","sourceRoot":"","sources":["../../../src/cli/commands/encode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAY,MAAM,MAAM,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAE1B,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,8FAA8F,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC3H,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,6BAA6B,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7E,+BAA+B,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACrG,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QACpD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;IAE1C,IAAI,IAAe,CAAC;IAEpB,IAAI,aAAa,EAAE,CAAC;QAClB,2EAA2E;QAC3E,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,uDAAuD;QACvD,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CACtC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QAClC,GAAG,EAAE,KAAK,CAAC,GAAqB;QAChC,YAAY,EAAE,KAAK,CAAC,MAAM;QAC1B,IAAI;KACL,CAAC,CAAC;IAEH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC;IACtH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,YAAoB;IACtD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAsB,CAAC;IAChC,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,KAAK,KAAK,MAAM,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/commands/get-address.d.ts

@@ -0,0 +1,3 @@
+import { type WorkflowContext } from '../../protocols/index.js';
+import { type OutputFormat } from '../formatters.js';
+export declare function runGetAddress(ctx: WorkflowContext, format?: OutputFormat): Promise<void>;

package/dist/cli/commands/get-address.js

@@ -0,0 +1,26 @@
+import { getAddressWorkflow } from '../../protocols/index.js';
+import { toJson, toHuman } from '../formatters.js';
+export async function runGetAddress(ctx, format = 'json') {
+    const result = await getAddressWorkflow(ctx);
+    switch (result.status) {
+        case 'approved':
+            if (format === 'json') {
+                process.stdout.write(toJson({ address: result.data }) + '\n');
+            }
+            else if (format === 'human') {
+                process.stdout.write(toHuman({ address: result.data }, 'Wallet Address') + '\n');
+            }
+            else {
+                process.stdout.write(result.data + '\n');
+            }
+            break;
+        case 'error':
+            process.stderr.write(result.reason + '\n');
+            process.exitCode = 1;
+            break;
+        default:
+            process.stderr.write('Unexpected result\n');
+            process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=get-address.js.map

package/dist/cli/commands/get-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-address.js","sourceRoot":"","sources":["../../../src/cli/commands/get-address.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAwB,MAAM,0BAA0B,CAAC;AACpF,OAAO,EAAqB,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,SAAuB,MAAM;IACrF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAE7C,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,UAAU;YACb,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAChE,CAAC;iBAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM;QACR,KAAK,OAAO;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;YAC3C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,MAAM;QACR;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC5C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/cli/commands/health.d.ts

@@ -0,0 +1,3 @@
+import { type WorkflowContext } from '../../protocols/index.js';
+import { type OutputFormat } from '../formatters.js';
+export declare function runHealth(ctx: WorkflowContext, format?: OutputFormat): Promise<void>;

package/dist/cli/commands/health.js

@@ -0,0 +1,26 @@
+import { healthCheckWorkflow } from '../../protocols/index.js';
+import { toJson, toHuman } from '../formatters.js';
+export async function runHealth(ctx, format = 'json') {
+    const result = await healthCheckWorkflow(ctx);
+    switch (result.status) {
+        case 'approved':
+            if (format === 'json') {
+                process.stdout.write(toJson({ status: 'healthy' }) + '\n');
+            }
+            else if (format === 'human') {
+                process.stdout.write(toHuman({ status: 'healthy' }, 'Health Check') + '\n');
+            }
+            else {
+                process.stdout.write('healthy\n');
+            }
+            break;
+        case 'error':
+            process.stderr.write(toJson({ status: 'unhealthy', error: result.reason }) + '\n');
+            process.exitCode = 1;
+            break;
+        default:
+            process.stderr.write(toJson({ status: 'unhealthy', error: 'Unexpected result' }) + '\n');
+            process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=health.js.map

package/dist/cli/commands/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/cli/commands/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAwB,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAqB,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAoB,EAAE,SAAuB,MAAM;IACjF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAE9C,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,UAAU;YACb,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7D,CAAC;iBAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACpC,CAAC;YACD,MAAM;QACR,KAAK,OAAO;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,MAAM;QACR;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACzF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/cli/commands/mcp.d.ts

@@ -0,0 +1,6 @@
+import { type CliGlobalArgs } from '../context.js';
+/**
+ * Runs the MCP stdio server.
+ * Accepts an additional --unsafe-raw-sign flag specific to MCP mode.
+ */
+export declare function runMcp(args: CliGlobalArgs, argv: string[]): Promise<void>;

package/dist/cli/commands/mcp.js

@@ -0,0 +1,40 @@
+import { createSigningProvider, EvmSignerAdapter, AuditLogger, } from '../../index.js';
+import { PolicyEngine, erc20Evaluator, uniswapV3Evaluator, aaveV3Evaluator, loadPolicyConfigFromFile, } from '../../protocols/index.js';
+import { startStdioServer } from '../../agentic/index.js';
+/**
+ * Runs the MCP stdio server.
+ * Accepts an additional --unsafe-raw-sign flag specific to MCP mode.
+ */
+export async function runMcp(args, argv) {
+    let unsafeRawSign = false;
+    for (const arg of argv) {
+        if (arg === '--unsafe-raw-sign')
+            unsafeRawSign = true;
+    }
+    const provider = createSigningProvider({
+        provider: 'aws-kms',
+        keyId: args.keyId,
+        region: args.region,
+    });
+    const signer = new EvmSignerAdapter(provider, {
+        expectedAddress: args.expectedAddress,
+    });
+    const policyConfig = args.policyConfig
+        ? loadPolicyConfigFromFile(args.policyConfig)
+        : DEFAULT_MCP_POLICY;
+    const policyEngine = new PolicyEngine(policyConfig, [erc20Evaluator, uniswapV3Evaluator, aaveV3Evaluator]);
+    await startStdioServer({
+        signer,
+        policyEngine,
+        auditLogger: new AuditLogger(),
+        unsafeRawSign,
+    });
+}
+const DEFAULT_MCP_POLICY = {
+    allowedChainIds: [],
+    allowedContracts: [],
+    allowedSelectors: [],
+    maxAmountWei: 0n,
+    maxDeadlineSeconds: 0,
+};
+//# sourceMappingURL=mcp.js.map

package/dist/cli/commands/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../src/cli/commands/mcp.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,GAEZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,YAAY,EAEZ,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAmB,EAAE,IAAc;IAC9D,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,mBAAmB;YAAE,aAAa,GAAG,IAAI,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACrC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,MAAM,GAAkB,IAAI,gBAAgB,CAAC,QAAQ,EAAE;QAC3D,eAAe,EAAE,IAAI,CAAC,eAA4C;KACnE,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY;QACpC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC;QAC7C,CAAC,CAAC,kBAAkB,CAAC;IACvB,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC,CAAC;IAE3G,MAAM,gBAAgB,CAAC;QACrB,MAAM;QACN,YAAY;QACZ,WAAW,EAAE,IAAI,WAAW,EAAE;QAC9B,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED,MAAM,kBAAkB,GAAmB;IACzC,eAAe,EAAE,EAAE;IACnB,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,EAAE;IACpB,YAAY,EAAE,EAAE;IAChB,kBAAkB,EAAE,CAAC;CACtB,CAAC"}

package/dist/cli/commands/sign-permit.d.ts

@@ -0,0 +1,2 @@
+import { type WorkflowContext } from '../../protocols/index.js';
+export declare function runSignPermit(ctx: WorkflowContext, argv: string[]): Promise<void>;

package/dist/cli/commands/sign-permit.js

@@ -0,0 +1,110 @@
+import { readFileSync } from 'node:fs';
+import { signPermit } from '../../protocols/index.js';
+import { parseOutputFormat, toJson, toHuman } from '../formatters.js';
+export async function runSignPermit(ctx, argv) {
+    let chainId = 0;
+    let token = '';
+    let spender = '';
+    let value = '';
+    let deadline = 0;
+    let payloadPath = '';
+    let filePath = '';
+    const format = parseOutputFormat(argv);
+    for (let i = 0; i < argv.length; i++) {
+        switch (argv[i]) {
+            case '--chain-id':
+                chainId = Number(argv[++i]);
+                break;
+            case '--token':
+                token = argv[++i];
+                break;
+            case '--spender':
+                spender = argv[++i];
+                break;
+            case '--value':
+                value = argv[++i];
+                break;
+            case '--deadline':
+                deadline = Number(argv[++i]);
+                break;
+            case '--payload':
+                payloadPath = argv[++i];
+                break;
+            case '--file':
+                filePath = argv[++i];
+                break;
+        }
+    }
+    // --file mode: extract all fields from a single JSON file
+    if (filePath) {
+        const raw = JSON.parse(readFileSync(filePath, 'utf-8'));
+        // Auto-extract fields with numeric coercion
+        chainId = chainId || Number(raw.chainId ?? raw.domain?.chainId ?? 0);
+        token = token || String(raw.token ?? raw.domain?.verifyingContract ?? '');
+        spender = spender || String(raw.spender ?? raw.message?.spender ?? '');
+        value = value || String(raw.value ?? raw.message?.value ?? '');
+        deadline = deadline || Number(raw.deadline ?? raw.message?.deadline ?? 0);
+        if (!chainId || !token || !spender || !value || !deadline) {
+            throw new Error('Permit file missing required fields. Expected: chainId, token/domain.verifyingContract, spender/message.spender, value/message.value, deadline/message.deadline');
+        }
+        if (!raw.domain || !raw.types || !raw.message) {
+            throw new Error('Permit file must contain domain, types, and message fields');
+        }
+        const result = await signPermit(ctx, {
+            chainId,
+            token,
+            spender,
+            value,
+            deadline,
+            domain: raw.domain,
+            types: raw.types,
+            message: raw.message,
+        });
+        writeResult(result, format);
+        return;
+    }
+    // Legacy mode: explicit flags + --payload
+    if (!chainId || !token || !spender || !value || !deadline || !payloadPath) {
+        throw new Error('Usage: agentic-vault sign-permit --file <permit.json>\n' +
+            '   or: agentic-vault sign-permit --chain-id <id> --token <addr> --spender <addr> --value <wei> --deadline <ts> --payload <json-path>');
+    }
+    const payload = JSON.parse(readFileSync(payloadPath, 'utf-8'));
+    const result = await signPermit(ctx, {
+        chainId,
+        token,
+        spender,
+        value,
+        deadline,
+        domain: payload.domain,
+        types: payload.types,
+        message: payload.message,
+    });
+    writeResult(result, format);
+}
+function writeResult(result, format) {
+    switch (result.status) {
+        case 'approved':
+            if (format === 'json') {
+                process.stdout.write(toJson({ status: 'approved', signature: result.data }) + '\n');
+            }
+            else if (format === 'human') {
+                process.stdout.write(toHuman({ status: 'approved', signature: result.data ?? '' }, 'Permit Signature') + '\n');
+            }
+            else {
+                process.stdout.write((result.data ?? '') + '\n');
+            }
+            break;
+        case 'denied':
+            process.stderr.write((result.reason ?? 'Denied') + '\n');
+            process.exitCode = 1;
+            break;
+        case 'error':
+            process.stderr.write((result.reason ?? 'Error') + '\n');
+            process.exitCode = 1;
+            break;
+        default:
+            process.stderr.write('Unexpected result\n');
+            process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=sign-permit.js.map

package/dist/cli/commands/sign-permit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-permit.js","sourceRoot":"","sources":["../../../src/cli/commands/sign-permit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAwB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,IAAc;IACtE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,YAAY;gBAAE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM;YACtD,KAAK,SAAS;gBAAE,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM;YACzC,KAAK,WAAW;gBAAE,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM;YAC7C,KAAK,SAAS;gBAAE,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM;YACzC,KAAK,YAAY;gBAAE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM;YACvD,KAAK,WAAW;gBAAE,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM;YACjD,KAAK,QAAQ;gBAAE,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM;QAC7C,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACxD,4CAA4C;QAC5C,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;QACrE,KAAK,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QACvE,KAAK,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC/D,QAAQ,GAAG,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;QAE1E,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,iKAAiK,CAClK,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE;YACnC,OAAO;YACP,KAAK;YACL,OAAO;YACP,KAAK;YACL,QAAQ;YACR,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC;QAEH,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,0CAA0C;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,yDAAyD;YACzD,sIAAsI,CACvI,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE;QACnC,OAAO;QACP,KAAK;QACL,OAAO;QACP,KAAK;QACL,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IAEH,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAClB,MAA6F,EAC7F,MAAgC;IAEhC,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,UAAU;YACb,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACtF,CAAC;iBAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC;YACjH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACnD,CAAC;YACD,MAAM;QACR,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;YACzD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,OAAO;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;YACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,MAAM;QACR;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC5C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/cli/commands/sign.d.ts

@@ -0,0 +1,2 @@
+import { type WorkflowContext } from '../../protocols/index.js';
+export declare function runSign(ctx: WorkflowContext, argv: string[]): Promise<void>;

package/dist/cli/commands/sign.js

@@ -0,0 +1,82 @@
+import { signDefiCall, ProtocolDispatcher, createDefaultRegistry } from '../../protocols/index.js';
+import { parseOutputFormat, toJson, toHuman, resolveStdinFlag, isTTY, confirmAction } from '../formatters.js';
+export async function runSign(ctx, argv) {
+    let chainId = 0;
+    let to = '';
+    let data = '';
+    let value;
+    let skipConfirm = false;
+    const format = parseOutputFormat(argv);
+    for (let i = 0; i < argv.length; i++) {
+        switch (argv[i]) {
+            case '--chain-id':
+                chainId = Number(argv[++i]);
+                break;
+            case '--to':
+                to = argv[++i];
+                break;
+            case '--data':
+                data = argv[++i];
+                break;
+            case '--value':
+                value = argv[++i];
+                break;
+            case '--yes':
+                skipConfirm = true;
+                break;
+        }
+    }
+    if (!chainId || !to || !data) {
+        throw new Error('Usage: agentic-vault sign --chain-id <id> --to <address> --data <hex|-> [--value <wei>] [--yes]');
+    }
+    data = await resolveStdinFlag(data);
+    // TTY confirmation: show decoded intent before signing
+    if (isTTY() && !skipConfirm) {
+        const dispatcher = new ProtocolDispatcher(createDefaultRegistry());
+        const intent = dispatcher.dispatch(chainId, to.toLowerCase(), data);
+        process.stderr.write(`\nTransaction preview:\n`);
+        process.stderr.write(`  Protocol: ${intent.protocol}\n`);
+        if (intent.protocol !== 'unknown') {
+            process.stderr.write(`  Action:   ${intent.action}\n`);
+        }
+        process.stderr.write(`  Chain:    ${chainId}\n`);
+        process.stderr.write(`  To:       ${to}\n`);
+        if (intent.protocol !== 'unknown') {
+            for (const [k, v] of Object.entries(intent.args)) {
+                process.stderr.write(`  ${k}: ${typeof v === 'bigint' ? v.toString() : v}\n`);
+            }
+        }
+        const confirmed = await confirmAction('\nSign this transaction?');
+        if (!confirmed) {
+            process.stderr.write('Aborted.\n');
+            process.exitCode = 1;
+            return;
+        }
+    }
+    const result = await signDefiCall(ctx, 'sign', { chainId, to, data, value });
+    switch (result.status) {
+        case 'approved':
+            if (format === 'json') {
+                process.stdout.write(toJson({ status: 'approved', signedTransaction: result.data, ...result.details }) + '\n');
+            }
+            else if (format === 'human') {
+                process.stdout.write(toHuman({ status: 'approved', signedTransaction: result.data, ...result.details }, 'Sign Result') + '\n');
+            }
+            else {
+                process.stdout.write(result.data + '\n');
+            }
+            break;
+        case 'denied':
+            process.stderr.write(result.reason + '\n');
+            process.exitCode = 1;
+            break;
+        case 'error':
+            process.stderr.write(result.reason + '\n');
+            process.exitCode = 1;
+            break;
+        default:
+            process.stderr.write('Unexpected result\n');
+            process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=sign.js.map

package/dist/cli/commands/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../src/cli/commands/sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAwB,MAAM,0BAA0B,CAAC;AACzH,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE9G,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAoB,EAAE,IAAc;IAChE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAyB,CAAC;IAC9B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,YAAY;gBAAE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM;YACtD,KAAK,MAAM;gBAAE,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM;YACnC,KAAK,QAAQ;gBAAE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM;YACvC,KAAK,SAAS;gBAAE,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM;YACzC,KAAK,OAAO;gBAAE,WAAW,GAAG,IAAI,CAAC;gBAAC,MAAM;QAC1C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEpC,uDAAuD;IACvD,IAAI,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,EAAmB,EAAE,IAAqB,CAAC,CAAC;QACtG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,0BAA0B,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACnC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7E,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,UAAU;YACb,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACjH,CAAC;iBAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC;YACjI,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM;QACR,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;YAC3C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,OAAO;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;YAC3C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,MAAM;QACR;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC5C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/cli/context.d.ts

@@ -0,0 +1,10 @@
+import { type WorkflowContext } from '../protocols/index.js';
+export interface CliGlobalArgs {
+    keyId: string;
+    region: string;
+    expectedAddress?: string;
+    policyConfig?: string;
+}
+export declare function parseGlobalArgs(argv: string[]): CliGlobalArgs;
+export declare function buildWorkflowContext(args: CliGlobalArgs): WorkflowContext;
+export declare function buildDryRunContext(args?: Partial<CliGlobalArgs>): WorkflowContext;

package/dist/cli/context.js

@@ -0,0 +1,84 @@
+import { createSigningProvider, EvmSignerAdapter, AuditLogger, } from '../index.js';
+import { PolicyEngine, erc20Evaluator, uniswapV3Evaluator, aaveV3Evaluator, ProtocolDispatcher, createDefaultRegistry, loadPolicyConfigFromFile, } from '../protocols/index.js';
+const DEFAULT_POLICY = {
+    allowedChainIds: [],
+    allowedContracts: [],
+    allowedSelectors: [],
+    maxAmountWei: 0n,
+    maxDeadlineSeconds: 0,
+};
+export function parseGlobalArgs(argv) {
+    let keyId = '';
+    let region = '';
+    let expectedAddress;
+    let policyConfig;
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        switch (arg) {
+            case '--key-id':
+                keyId = argv[++i];
+                break;
+            case '--region':
+                region = argv[++i];
+                break;
+            case '--expected-address':
+                expectedAddress = argv[++i];
+                break;
+            case '--policy-config':
+                policyConfig = argv[++i];
+                break;
+            default:
+                break;
+        }
+    }
+    if (!keyId)
+        keyId = process.env.VAULT_KEY_ID ?? '';
+    if (!region)
+        region = process.env.VAULT_REGION ?? '';
+    if (!keyId)
+        throw new Error('--key-id or VAULT_KEY_ID environment variable is required');
+    if (!region)
+        throw new Error('--region or VAULT_REGION environment variable is required');
+    return { keyId, region, expectedAddress, policyConfig };
+}
+function createDispatcher() {
+    return new ProtocolDispatcher(createDefaultRegistry());
+}
+export function buildWorkflowContext(args) {
+    const provider = createSigningProvider({
+        provider: 'aws-kms',
+        keyId: args.keyId,
+        region: args.region,
+    });
+    const signer = new EvmSignerAdapter(provider, {
+        expectedAddress: args.expectedAddress,
+    });
+    const policyConfig = args.policyConfig
+        ? loadPolicyConfigFromFile(args.policyConfig)
+        : DEFAULT_POLICY;
+    const policyEngine = new PolicyEngine(policyConfig, [erc20Evaluator, uniswapV3Evaluator, aaveV3Evaluator]);
+    return {
+        signer,
+        policyEngine,
+        auditSink: new AuditLogger(),
+        dispatcher: createDispatcher(),
+        caller: 'cli',
+        service: 'agentic-vault-cli',
+    };
+}
+export function buildDryRunContext(args) {
+    const policyConfig = args?.policyConfig
+        ? loadPolicyConfigFromFile(args.policyConfig)
+        : DEFAULT_POLICY;
+    const policyEngine = new PolicyEngine(policyConfig, [erc20Evaluator, uniswapV3Evaluator, aaveV3Evaluator]);
+    return {
+        signer: undefined,
+        policyEngine,
+        auditSink: new AuditLogger(),
+        dispatcher: createDispatcher(),
+        caller: 'cli',
+        service: 'agentic-vault-cli',
+        dryRun: true,
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/cli/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/cli/context.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,GAEZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EAEZ,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,GAEzB,MAAM,uBAAuB,CAAC;AAS/B,MAAM,cAAc,GAAmB;IACrC,eAAe,EAAE,EAAE;IACnB,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,EAAE;IACpB,YAAY,EAAE,EAAE;IAChB,kBAAkB,EAAE,CAAC;CACtB,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,eAAmC,CAAC;IACxC,IAAI,YAAgC,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,UAAU;gBACb,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClB,MAAM;YACR,KAAK,UAAU;gBACb,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnB,MAAM;YACR,KAAK,oBAAoB;gBACvB,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,iBAAiB;gBACpB,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzB,MAAM;YACR;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK;QAAE,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAErD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAE1F,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAmB;IACtD,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACrC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,MAAM,GAAkB,IAAI,gBAAgB,CAAC,QAAQ,EAAE;QAC3D,eAAe,EAAE,IAAI,CAAC,eAA4C;KACnE,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY;QACpC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC;QAC7C,CAAC,CAAC,cAAc,CAAC;IACnB,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC,CAAC;IAE3G,OAAO;QACL,MAAM;QACN,YAAY;QACZ,SAAS,EAAE,IAAI,WAAW,EAAE;QAC5B,UAAU,EAAE,gBAAgB,EAAE;QAC9B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,mBAAmB;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAA6B;IAC9D,MAAM,YAAY,GAAG,IAAI,EAAE,YAAY;QACrC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC;QAC7C,CAAC,CAAC,cAAc,CAAC;IACnB,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC,CAAC;IAE3G,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,YAAY;QACZ,SAAS,EAAE,IAAI,WAAW,EAAE;QAC5B,UAAU,EAAE,gBAAgB,EAAE;QAC9B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC"}

package/dist/cli/formatters.d.ts

@@ -0,0 +1,18 @@
+export type OutputFormat = 'json' | 'human' | 'raw';
+/**
+ * Parse --output flag from argv.
+ * Returns 'json' as default when not specified.
+ */
+export declare function parseOutputFormat(argv: string[]): OutputFormat;
+/** BigInt-safe JSON stringify */
+export declare function toJson(data: unknown, pretty?: boolean): string;
+/** Read a single line from stdin (for --data - support) */
+export declare function readStdin(): Promise<string>;
+/** Resolve a flag value, reading from stdin if value is '-' */
+export declare function resolveStdinFlag(value: string): Promise<string>;
+/** Check if running in interactive TTY mode (both stdin and stdout) */
+export declare function isTTY(): boolean;
+/** Prompt user for yes/no confirmation in TTY mode */
+export declare function confirmAction(message: string): Promise<boolean>;
+/** Format key-value record as aligned table */
+export declare function toHuman(data: Record<string, unknown>, title?: string): string;

package/dist/cli/formatters.js

@@ -0,0 +1,74 @@
+import { createInterface } from 'node:readline';
+/**
+ * Parse --output flag from argv.
+ * Returns 'json' as default when not specified.
+ */
+export function parseOutputFormat(argv) {
+    for (let i = 0; i < argv.length; i++) {
+        if (argv[i] === '--output') {
+            const fmt = argv[i + 1];
+            if (!fmt || fmt.startsWith('--')) {
+                throw new Error('Missing value for --output. Use json, human, or raw');
+            }
+            if (fmt === 'json' || fmt === 'human' || fmt === 'raw')
+                return fmt;
+            throw new Error(`Invalid output format: ${fmt}. Use json, human, or raw`);
+        }
+    }
+    return 'json';
+}
+const bigintReplacer = (_k, v) => typeof v === 'bigint' ? v.toString() : v;
+/** BigInt-safe JSON stringify */
+export function toJson(data, pretty = true) {
+    return JSON.stringify(data, bigintReplacer, pretty ? 2 : 0);
+}
+/** Read a single line from stdin (for --data - support) */
+export async function readStdin() {
+    return new Promise((resolve, reject) => {
+        const rl = createInterface({ input: process.stdin });
+        let line = '';
+        rl.on('line', (l) => { line = l.trim(); rl.close(); });
+        rl.on('close', () => resolve(line));
+        rl.on('error', reject);
+    });
+}
+/** Resolve a flag value, reading from stdin if value is '-' */
+export async function resolveStdinFlag(value) {
+    if (value === '-')
+        return readStdin();
+    return value;
+}
+/** Check if running in interactive TTY mode (both stdin and stdout) */
+export function isTTY() {
+    return Boolean(process.stdin.isTTY && process.stdout.isTTY);
+}
+/** Prompt user for yes/no confirmation in TTY mode */
+export async function confirmAction(message) {
+    return new Promise((resolve) => {
+        const rl = createInterface({ input: process.stdin, output: process.stderr });
+        rl.question(`${message} [y/N] `, (answer) => {
+            rl.close();
+            resolve(answer.trim().toLowerCase() === 'y');
+        });
+    });
+}
+/** Format key-value record as aligned table */
+export function toHuman(data, title) {
+    const lines = [];
+    if (title)
+        lines.push(`--- ${title} ---`);
+    const keys = Object.keys(data);
+    if (keys.length === 0)
+        return lines.join('\n');
+    const maxKeyLen = Math.max(...keys.map((k) => k.length));
+    for (const [key, value] of Object.entries(data)) {
+        const v = typeof value === 'bigint'
+            ? value.toString()
+            : typeof value === 'object' && value !== null
+                ? toJson(value, false)
+                : String(value);
+        lines.push(`${key.padEnd(maxKeyLen)}  ${v}`);
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=formatters.js.map

package/dist/cli/formatters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatters.js","sourceRoot":"","sources":["../../src/cli/formatters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK;gBAAE,OAAO,GAAG,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,2BAA2B,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,EAAU,EAAE,CAAU,EAAE,EAAE,CAChD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3C,iCAAiC;AACjC,MAAM,UAAU,MAAM,CAAC,IAAa,EAAE,MAAM,GAAG,IAAI;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa;IAClD,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,SAAS,EAAE,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,KAAK;IACnB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,EAAE,CAAC,QAAQ,CAAC,GAAG,OAAO,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YAC1C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,OAAO,CAAC,IAA6B,EAAE,KAAc;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,GACL,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;YAClB,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAC3C,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC;gBACtB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};