@agenticvault/agentic-vault 0.1.0

package/dist/protocols/decoders/uniswap-v3.js

@@ -0,0 +1,57 @@
+import { decodeFunctionData } from 'viem';
+import { uniswapV3SwapRouterAbi } from '../catalog.js';
+// exactInputSingle((address,address,uint24,address,uint256,uint256,uint160))
+const EXACT_INPUT_SINGLE_SELECTOR = '0x04e45aaf';
+export const uniswapV3Decoder = {
+    protocol: 'uniswap_v3',
+    supportedSelectors: [EXACT_INPUT_SINGLE_SELECTOR],
+    decode(chainId, to, data) {
+        try {
+            const { functionName, args } = decodeFunctionData({
+                abi: uniswapV3SwapRouterAbi,
+                data,
+            });
+            const selector = data.slice(0, 10).toLowerCase();
+            switch (functionName) {
+                case 'exactInputSingle': {
+                    const params = args[0];
+                    return {
+                        protocol: 'uniswap_v3',
+                        action: 'exactInputSingle',
+                        chainId,
+                        to,
+                        selector,
+                        args: {
+                            tokenIn: params.tokenIn,
+                            tokenOut: params.tokenOut,
+                            fee: Number(params.fee),
+                            recipient: params.recipient,
+                            amountIn: params.amountIn,
+                            amountOutMinimum: params.amountOutMinimum,
+                            sqrtPriceLimitX96: params.sqrtPriceLimitX96,
+                        },
+                    };
+                }
+                default:
+                    return {
+                        protocol: 'unknown',
+                        chainId,
+                        to,
+                        selector,
+                        rawData: data,
+                        reason: `Unsupported Uniswap V3 function: ${functionName}`,
+                    };
+            }
+        }
+        catch {
+            return {
+                protocol: 'unknown',
+                chainId,
+                to,
+                rawData: data,
+                reason: 'Failed to decode Uniswap V3 calldata',
+            };
+        }
+    },
+};
+//# sourceMappingURL=uniswap-v3.js.map

package/dist/protocols/decoders/uniswap-v3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uniswap-v3.js","sourceRoot":"","sources":["../../../src/protocols/decoders/uniswap-v3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA0B,MAAM,MAAM,CAAC;AAElE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,6EAA6E;AAC7E,MAAM,2BAA2B,GAAG,YAAY,CAAC;AAEjD,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,QAAQ,EAAE,YAAY;IACtB,kBAAkB,EAAE,CAAC,2BAAkC,CAAC;IAExD,MAAM,CAAC,OAAe,EAAE,EAAW,EAAE,IAAS;QAC5C,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC;gBAChD,GAAG,EAAE,sBAAsB;gBAC3B,IAAI;aACL,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAS,CAAC;YAExD,QAAQ,YAAY,EAAE,CAAC;gBACrB,KAAK,kBAAkB,CAAC,CAAC,CAAC;oBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACvB,OAAO;wBACL,QAAQ,EAAE,YAAY;wBACtB,MAAM,EAAE,kBAAkB;wBAC1B,OAAO;wBACP,EAAE;wBACF,QAAQ;wBACR,IAAI,EAAE;4BACJ,OAAO,EAAE,MAAM,CAAC,OAAkB;4BAClC,QAAQ,EAAE,MAAM,CAAC,QAAmB;4BACpC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;4BACvB,SAAS,EAAE,MAAM,CAAC,SAAoB;4BACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;4BACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;yBAC5C;qBACF,CAAC;gBACJ,CAAC;gBACD;oBACE,OAAO;wBACL,QAAQ,EAAE,SAAS;wBACnB,OAAO;wBACP,EAAE;wBACF,QAAQ;wBACR,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,oCAAoC,YAAY,EAAE;qBAC3D,CAAC;YACN,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,OAAO;gBACP,EAAE;gBACF,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,sCAAsC;aAC/C,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/protocols/dispatcher.d.ts

@@ -0,0 +1,8 @@
+import type { Address, Hex } from 'viem';
+import type { DecodedIntent } from './types.js';
+import { type RegistryConfig } from './registry.js';
+export declare class ProtocolDispatcher {
+    private readonly registry;
+    constructor(config: RegistryConfig);
+    dispatch(chainId: number, to: Address, data: Hex): DecodedIntent;
+}

package/dist/protocols/dispatcher.js

@@ -0,0 +1,32 @@
+import { ProtocolRegistry } from './registry.js';
+export class ProtocolDispatcher {
+    registry;
+    constructor(config) {
+        this.registry = new ProtocolRegistry(config);
+    }
+    dispatch(chainId, to, data) {
+        if (data.length < 10) {
+            return {
+                protocol: 'unknown',
+                chainId,
+                to,
+                rawData: data,
+                reason: 'Calldata too short (no 4-byte selector)',
+            };
+        }
+        const selector = data.slice(0, 10).toLowerCase();
+        const decoder = this.registry.resolve(chainId, to, selector);
+        if (!decoder) {
+            return {
+                protocol: 'unknown',
+                chainId,
+                to,
+                selector,
+                rawData: data,
+                reason: `No registered decoder for contract ${to} on chain ${chainId}`,
+            };
+        }
+        return decoder.decode(chainId, to, data);
+    }
+}
+//# sourceMappingURL=dispatcher.js.map

package/dist/protocols/dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../../src/protocols/dispatcher.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAuB,MAAM,eAAe,CAAC;AAEtE,MAAM,OAAO,kBAAkB;IACZ,QAAQ,CAAmB;IAE5C,YAAY,MAAsB;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ,CAAC,OAAe,EAAE,EAAW,EAAE,IAAS;QAC9C,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrB,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,OAAO;gBACP,EAAE;gBACF,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,yCAAyC;aAClD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAS,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,OAAO;gBACP,EAAE;gBACF,QAAQ;gBACR,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,sCAAsC,EAAE,aAAa,OAAO,EAAE;aACvE,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/protocols/index.d.ts

@@ -0,0 +1,16 @@
+export type { DecodedIntent, ProtocolDecoder, Erc20ApproveIntent, Erc20TransferIntent, UniswapV3ExactInputSingleIntent, AaveV3SupplyIntent, AaveV3BorrowIntent, AaveV3RepayIntent, AaveV3WithdrawIntent, UnknownIntent, } from './types.js';
+export type { ContractEntry, RegistryConfig } from './registry.js';
+export { ProtocolRegistry, createDefaultRegistry } from './registry.js';
+export { ProtocolDispatcher } from './dispatcher.js';
+export { erc20Decoder } from './decoders/erc20.js';
+export { uniswapV3Decoder } from './decoders/uniswap-v3.js';
+export { aaveV3Decoder } from './decoders/aave-v3.js';
+export { PolicyEngine } from './policy/engine.js';
+export { parsePolicyConfig, loadPolicyConfigFromFile } from './policy/loader.js';
+export type { PolicyConfig, PolicyRequest, PolicyEvaluation, PolicyConfigV2, PolicyRequestV2, ProtocolPolicyConfig, ProtocolPolicyEvaluator, } from './policy/types.js';
+export { ACTION_CATALOG, listActions } from './catalog.js';
+export type { ProtocolAction } from './catalog.js';
+export { erc20Evaluator } from './policy/evaluators/erc20.js';
+export { uniswapV3Evaluator } from './policy/evaluators/uniswap-v3.js';
+export { aaveV3Evaluator } from './policy/evaluators/aave-v3.js';
+export { signDefiCall, signPermit, getAddress as getAddressWorkflow, healthCheck as healthCheckWorkflow, type WorkflowCaller, type AuditSink, type WorkflowSigner, type WorkflowPolicyEngine, type WorkflowDispatcher, type WorkflowDecodedIntent, type WorkflowContext, type WorkflowResult, type SignDefiCallInput, type SignPermitInput, } from './workflows/index.js';

package/dist/protocols/index.js

@@ -0,0 +1,19 @@
+// Classes
+export { ProtocolRegistry, createDefaultRegistry } from './registry.js';
+export { ProtocolDispatcher } from './dispatcher.js';
+// Decoders
+export { erc20Decoder } from './decoders/erc20.js';
+export { uniswapV3Decoder } from './decoders/uniswap-v3.js';
+export { aaveV3Decoder } from './decoders/aave-v3.js';
+// Policy V2
+export { PolicyEngine } from './policy/engine.js';
+export { parsePolicyConfig, loadPolicyConfigFromFile } from './policy/loader.js';
+// Action Catalog
+export { ACTION_CATALOG, listActions } from './catalog.js';
+// Evaluators
+export { erc20Evaluator } from './policy/evaluators/erc20.js';
+export { uniswapV3Evaluator } from './policy/evaluators/uniswap-v3.js';
+export { aaveV3Evaluator } from './policy/evaluators/aave-v3.js';
+// Workflows
+export { signDefiCall, signPermit, getAddress as getAddressWorkflow, healthCheck as healthCheckWorkflow, } from './workflows/index.js';
+//# sourceMappingURL=index.js.map

package/dist/protocols/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/protocols/index.ts"],"names":[],"mappings":"AAeA,UAAU;AACV,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,WAAW;AACX,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,YAAY;AACZ,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAWjF,iBAAiB;AACjB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3D,aAAa;AACb,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,YAAY;AACZ,OAAO,EACL,YAAY,EACZ,UAAU,EACV,UAAU,IAAI,kBAAkB,EAChC,WAAW,IAAI,mBAAmB,GAWnC,MAAM,sBAAsB,CAAC"}

package/dist/protocols/policy/engine.d.ts

@@ -0,0 +1,11 @@
+import { type PolicyConfigV2, type PolicyRequestV2, type PolicyEvaluation, type ProtocolPolicyEvaluator } from './types.js';
+export declare class PolicyEngine {
+    private readonly config;
+    private readonly evaluators;
+    private readonly allowedChainIds;
+    private readonly allowedContracts;
+    private readonly allowedSelectors;
+    constructor(config: PolicyConfigV2, evaluators?: ProtocolPolicyEvaluator[]);
+    evaluate(request: PolicyRequestV2): PolicyEvaluation;
+    private evaluateBase;
+}

package/dist/protocols/policy/engine.js

@@ -0,0 +1,67 @@
+export class PolicyEngine {
+    config;
+    evaluators;
+    allowedChainIds;
+    allowedContracts;
+    allowedSelectors;
+    constructor(config, evaluators) {
+        this.config = config;
+        this.evaluators = new Map((evaluators ?? []).map((e) => [e.protocol, e]));
+        this.allowedChainIds = new Set(config.allowedChainIds);
+        this.allowedContracts = new Set(config.allowedContracts.map((c) => c.toLowerCase()));
+        this.allowedSelectors = new Set(config.allowedSelectors.map((s) => s.toLowerCase()));
+    }
+    evaluate(request) {
+        const violations = [];
+        // -- V1 base checks (unchanged) --
+        violations.push(...this.evaluateBase(request));
+        // -- V2 intent-aware checks (fail-closed) --
+        if (request.intent && request.intent.protocol !== 'unknown') {
+            const evaluator = this.evaluators.get(request.intent.protocol);
+            const protocolConfig = this.config.protocolPolicies?.[request.intent.protocol];
+            if (!evaluator || !protocolConfig) {
+                violations.push(`No policy evaluator/config registered for protocol '${request.intent.protocol}'`);
+            }
+            else {
+                violations.push(...evaluator.evaluate(request.intent, protocolConfig));
+            }
+        }
+        return { allowed: violations.length === 0, violations };
+    }
+    evaluateBase(request) {
+        const violations = [];
+        // Check chainId whitelist
+        if (!this.allowedChainIds.has(request.chainId)) {
+            violations.push(`chainId ${request.chainId} not in allowed list [${this.config.allowedChainIds.join(', ')}]`);
+        }
+        // Check contract whitelist (case-insensitive, pre-normalized)
+        if (!this.allowedContracts.has(request.to.toLowerCase())) {
+            violations.push(`contract ${request.to} not in allowed list`);
+        }
+        // Check selector whitelist (if selector provided, pre-normalized)
+        if (request.selector !== undefined) {
+            if (!this.allowedSelectors.has(request.selector.toLowerCase())) {
+                violations.push(`selector ${request.selector} not in allowed list`);
+            }
+        }
+        // Check amount limit
+        if (request.amountWei !== undefined) {
+            if (request.amountWei > this.config.maxAmountWei) {
+                violations.push(`amount ${request.amountWei} exceeds max ${this.config.maxAmountWei}`);
+            }
+        }
+        // Check deadline range
+        if (request.deadline !== undefined) {
+            const nowSeconds = Math.floor(Date.now() / 1000);
+            const maxDeadline = nowSeconds + this.config.maxDeadlineSeconds;
+            if (request.deadline < nowSeconds) {
+                violations.push(`deadline ${request.deadline} is in the past (now: ${nowSeconds})`);
+            }
+            else if (request.deadline > maxDeadline) {
+                violations.push(`deadline ${request.deadline} exceeds max allowed (${maxDeadline})`);
+            }
+        }
+        return violations;
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/protocols/policy/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/protocols/policy/engine.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,YAAY;IACN,MAAM,CAAiB;IACvB,UAAU,CAAuC;IACjD,eAAe,CAAc;IAC7B,gBAAgB,CAAc;IAC9B,gBAAgB,CAAc;IAE/C,YAAY,MAAsB,EAAE,UAAsC;QACxE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CACvB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAC/C,CAAC;QACF,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,QAAQ,CAAC,OAAwB;QAC/B,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,mCAAmC;QACnC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAE/C,6CAA6C;QAC7C,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE/E,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClC,UAAU,CAAC,IAAI,CACb,uDAAuD,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,CAClF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IAC1D,CAAC;IAEO,YAAY,CAAC,OAAsB;QACzC,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,0BAA0B;QAC1B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,UAAU,CAAC,IAAI,CACb,WAAW,OAAO,CAAC,OAAO,yBAAyB,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7F,CAAC;QACJ,CAAC;QAED,8DAA8D;QAC9D,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACzD,UAAU,CAAC,IAAI,CACb,YAAY,OAAO,CAAC,EAAE,sBAAsB,CAC7C,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC/D,UAAU,CAAC,IAAI,CACb,YAAY,OAAO,CAAC,QAAQ,sBAAsB,CACnD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACjD,UAAU,CAAC,IAAI,CACb,UAAU,OAAO,CAAC,SAAS,gBAAgB,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YACjD,MAAM,WAAW,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAEhE,IAAI,OAAO,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;gBAClC,UAAU,CAAC,IAAI,CACb,YAAY,OAAO,CAAC,QAAQ,yBAAyB,UAAU,GAAG,CACnE,CAAC;YACJ,CAAC;iBAAM,IAAI,OAAO,CAAC,QAAQ,GAAG,WAAW,EAAE,CAAC;gBAC1C,UAAU,CAAC,IAAI,CACb,YAAY,OAAO,CAAC,QAAQ,yBAAyB,WAAW,GAAG,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/protocols/policy/evaluators/aave-v3.d.ts

@@ -0,0 +1,2 @@
+import type { ProtocolPolicyEvaluator } from '../types.js';
+export declare const aaveV3Evaluator: ProtocolPolicyEvaluator;

package/dist/protocols/policy/evaluators/aave-v3.js

@@ -0,0 +1,118 @@
+export const aaveV3Evaluator = {
+    protocol: 'aave_v3',
+    evaluate(intent, config) {
+        if (intent.protocol !== 'aave_v3') {
+            return [`aave_v3 evaluator received non-aave_v3 intent: ${intent.protocol}`];
+        }
+        const violations = [];
+        const { action } = intent;
+        switch (action) {
+            case 'supply': {
+                // Token allowlist: check asset (the reserve token, not intent.to which is the Pool)
+                if (config.tokenAllowlist && config.tokenAllowlist.length > 0) {
+                    const normalizedAsset = intent.args.asset.toLowerCase();
+                    const allowed = config.tokenAllowlist.some((t) => t.toLowerCase() === normalizedAsset);
+                    if (!allowed) {
+                        violations.push(`asset ${intent.args.asset} not in tokenAllowlist`);
+                    }
+                }
+                // Recipient allowlist: check onBehalfOf
+                if (config.recipientAllowlist && config.recipientAllowlist.length > 0) {
+                    const normalizedRecipient = intent.args.onBehalfOf.toLowerCase();
+                    const allowed = config.recipientAllowlist.some((r) => r.toLowerCase() === normalizedRecipient);
+                    if (!allowed) {
+                        violations.push(`onBehalfOf ${intent.args.onBehalfOf} not in recipientAllowlist`);
+                    }
+                }
+                // maxAmountWei
+                if (config.maxAmountWei !== undefined && intent.args.amount > config.maxAmountWei) {
+                    violations.push(`amount ${intent.args.amount} exceeds maxAmountWei ${config.maxAmountWei}`);
+                }
+                break;
+            }
+            case 'borrow': {
+                // Token allowlist
+                if (config.tokenAllowlist && config.tokenAllowlist.length > 0) {
+                    const normalizedAsset = intent.args.asset.toLowerCase();
+                    const allowed = config.tokenAllowlist.some((t) => t.toLowerCase() === normalizedAsset);
+                    if (!allowed) {
+                        violations.push(`asset ${intent.args.asset} not in tokenAllowlist`);
+                    }
+                }
+                // Recipient allowlist: check onBehalfOf
+                if (config.recipientAllowlist && config.recipientAllowlist.length > 0) {
+                    const normalizedRecipient = intent.args.onBehalfOf.toLowerCase();
+                    const allowed = config.recipientAllowlist.some((r) => r.toLowerCase() === normalizedRecipient);
+                    if (!allowed) {
+                        violations.push(`onBehalfOf ${intent.args.onBehalfOf} not in recipientAllowlist`);
+                    }
+                }
+                // maxInterestRateMode
+                if (config.maxInterestRateMode !== undefined &&
+                    Number(intent.args.interestRateMode) > config.maxInterestRateMode) {
+                    violations.push(`interestRateMode ${intent.args.interestRateMode} exceeds maxInterestRateMode ${config.maxInterestRateMode}`);
+                }
+                // maxAmountWei
+                if (config.maxAmountWei !== undefined && intent.args.amount > config.maxAmountWei) {
+                    violations.push(`amount ${intent.args.amount} exceeds maxAmountWei ${config.maxAmountWei}`);
+                }
+                break;
+            }
+            case 'repay': {
+                // Token allowlist
+                if (config.tokenAllowlist && config.tokenAllowlist.length > 0) {
+                    const normalizedAsset = intent.args.asset.toLowerCase();
+                    const allowed = config.tokenAllowlist.some((t) => t.toLowerCase() === normalizedAsset);
+                    if (!allowed) {
+                        violations.push(`asset ${intent.args.asset} not in tokenAllowlist`);
+                    }
+                }
+                // Recipient allowlist: check onBehalfOf
+                if (config.recipientAllowlist && config.recipientAllowlist.length > 0) {
+                    const normalizedRecipient = intent.args.onBehalfOf.toLowerCase();
+                    const allowed = config.recipientAllowlist.some((r) => r.toLowerCase() === normalizedRecipient);
+                    if (!allowed) {
+                        violations.push(`onBehalfOf ${intent.args.onBehalfOf} not in recipientAllowlist`);
+                    }
+                }
+                // maxInterestRateMode
+                if (config.maxInterestRateMode !== undefined &&
+                    Number(intent.args.interestRateMode) > config.maxInterestRateMode) {
+                    violations.push(`interestRateMode ${intent.args.interestRateMode} exceeds maxInterestRateMode ${config.maxInterestRateMode}`);
+                }
+                // maxAmountWei
+                if (config.maxAmountWei !== undefined && intent.args.amount > config.maxAmountWei) {
+                    violations.push(`amount ${intent.args.amount} exceeds maxAmountWei ${config.maxAmountWei}`);
+                }
+                break;
+            }
+            case 'withdraw': {
+                // Token allowlist
+                if (config.tokenAllowlist && config.tokenAllowlist.length > 0) {
+                    const normalizedAsset = intent.args.asset.toLowerCase();
+                    const allowed = config.tokenAllowlist.some((t) => t.toLowerCase() === normalizedAsset);
+                    if (!allowed) {
+                        violations.push(`asset ${intent.args.asset} not in tokenAllowlist`);
+                    }
+                }
+                // Recipient allowlist: check to
+                if (config.recipientAllowlist && config.recipientAllowlist.length > 0) {
+                    const normalizedTo = intent.args.to.toLowerCase();
+                    const allowed = config.recipientAllowlist.some((r) => r.toLowerCase() === normalizedTo);
+                    if (!allowed) {
+                        violations.push(`to ${intent.args.to} not in recipientAllowlist`);
+                    }
+                }
+                // maxAmountWei
+                if (config.maxAmountWei !== undefined && intent.args.amount > config.maxAmountWei) {
+                    violations.push(`amount ${intent.args.amount} exceeds maxAmountWei ${config.maxAmountWei}`);
+                }
+                break;
+            }
+            default:
+                violations.push(`Unknown aave_v3 action '${action}'; policy cannot evaluate`);
+        }
+        return violations;
+    },
+};
+//# sourceMappingURL=aave-v3.js.map

package/dist/protocols/policy/evaluators/aave-v3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aave-v3.js","sourceRoot":"","sources":["../../../../src/protocols/policy/evaluators/aave-v3.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,eAAe,GAA4B;IACtD,QAAQ,EAAE,SAAS;IAEnB,QAAQ,CAAC,MAAqB,EAAE,MAA4B;QAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,kDAAkD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAE1B,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,oFAAoF;gBACpF,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;oBACxD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAC3C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,wBAAwB,CAAC,CAAC;oBACtE,CAAC;gBACH,CAAC;gBAED,wCAAwC;gBACxC,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;oBACjE,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAC/C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,UAAU,4BAA4B,CAAC,CAAC;oBACpF,CAAC;gBACH,CAAC;gBAED,eAAe;gBACf,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;oBAClF,UAAU,CAAC,IAAI,CACb,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,yBAAyB,MAAM,CAAC,YAAY,EAAE,CAC3E,CAAC;gBACJ,CAAC;gBAED,MAAM;YACR,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,kBAAkB;gBAClB,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;oBACxD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAC3C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,wBAAwB,CAAC,CAAC;oBACtE,CAAC;gBACH,CAAC;gBAED,wCAAwC;gBACxC,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;oBACjE,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAC/C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,UAAU,4BAA4B,CAAC,CAAC;oBACpF,CAAC;gBACH,CAAC;gBAED,sBAAsB;gBACtB,IACE,MAAM,CAAC,mBAAmB,KAAK,SAAS;oBACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,mBAAmB,EACjE,CAAC;oBACD,UAAU,CAAC,IAAI,CACb,oBAAoB,MAAM,CAAC,IAAI,CAAC,gBAAgB,gCAAgC,MAAM,CAAC,mBAAmB,EAAE,CAC7G,CAAC;gBACJ,CAAC;gBAED,eAAe;gBACf,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;oBAClF,UAAU,CAAC,IAAI,CACb,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,yBAAyB,MAAM,CAAC,YAAY,EAAE,CAC3E,CAAC;gBACJ,CAAC;gBAED,MAAM;YACR,CAAC;YAED,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,kBAAkB;gBAClB,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;oBACxD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAC3C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,wBAAwB,CAAC,CAAC;oBACtE,CAAC;gBACH,CAAC;gBAED,wCAAwC;gBACxC,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;oBACjE,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAC/C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,UAAU,4BAA4B,CAAC,CAAC;oBACpF,CAAC;gBACH,CAAC;gBAED,sBAAsB;gBACtB,IACE,MAAM,CAAC,mBAAmB,KAAK,SAAS;oBACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,mBAAmB,EACjE,CAAC;oBACD,UAAU,CAAC,IAAI,CACb,oBAAoB,MAAM,CAAC,IAAI,CAAC,gBAAgB,gCAAgC,MAAM,CAAC,mBAAmB,EAAE,CAC7G,CAAC;gBACJ,CAAC;gBAED,eAAe;gBACf,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;oBAClF,UAAU,CAAC,IAAI,CACb,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,yBAAyB,MAAM,CAAC,YAAY,EAAE,CAC3E,CAAC;gBACJ,CAAC;gBAED,MAAM;YACR,CAAC;YAED,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,kBAAkB;gBAClB,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;oBACxD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAC3C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,wBAAwB,CAAC,CAAC;oBACtE,CAAC;gBACH,CAAC;gBAED,gCAAgC;gBAChC,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;oBAClD,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,YAAY,CACxC,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;gBAED,eAAe;gBACf,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;oBAClF,UAAU,CAAC,IAAI,CACb,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,yBAAyB,MAAM,CAAC,YAAY,EAAE,CAC3E,CAAC;gBACJ,CAAC;gBAED,MAAM;YACR,CAAC;YAED;gBACE,UAAU,CAAC,IAAI,CACb,2BAA2B,MAAgB,2BAA2B,CACvE,CAAC;QACN,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC"}

package/dist/protocols/policy/evaluators/erc20.d.ts

@@ -0,0 +1,2 @@
+import type { ProtocolPolicyEvaluator } from '../types.js';
+export declare const erc20Evaluator: ProtocolPolicyEvaluator;

package/dist/protocols/policy/evaluators/erc20.js

@@ -0,0 +1,55 @@
+export const erc20Evaluator = {
+    protocol: 'erc20',
+    evaluate(intent, config) {
+        if (intent.protocol !== 'erc20') {
+            return [`erc20 evaluator received non-erc20 intent: ${intent.protocol}`];
+        }
+        const violations = [];
+        // Check token (contract address) allowlist
+        if (config.tokenAllowlist && config.tokenAllowlist.length > 0) {
+            const normalizedToken = intent.to.toLowerCase();
+            const allowed = config.tokenAllowlist.some((t) => t.toLowerCase() === normalizedToken);
+            if (!allowed) {
+                violations.push(`token ${intent.to} not in tokenAllowlist`);
+            }
+        }
+        switch (intent.action) {
+            case 'approve': {
+                // Check spender allowlist
+                if (config.recipientAllowlist && config.recipientAllowlist.length > 0) {
+                    const normalizedSpender = intent.args.spender.toLowerCase();
+                    const allowed = config.recipientAllowlist.some((r) => r.toLowerCase() === normalizedSpender);
+                    if (!allowed) {
+                        violations.push(`spender ${intent.args.spender} not in recipientAllowlist`);
+                    }
+                }
+                // Check allowance cap
+                if (config.maxAllowanceWei !== undefined) {
+                    if (intent.args.amount > config.maxAllowanceWei) {
+                        violations.push(`approve amount ${intent.args.amount} exceeds maxAllowanceWei ${config.maxAllowanceWei}`);
+                    }
+                }
+                break;
+            }
+            case 'transfer': {
+                // Check recipient allowlist
+                if (config.recipientAllowlist && config.recipientAllowlist.length > 0) {
+                    const normalizedRecipient = intent.args.to.toLowerCase();
+                    const allowed = config.recipientAllowlist.some((r) => r.toLowerCase() === normalizedRecipient);
+                    if (!allowed) {
+                        violations.push(`recipient ${intent.args.to} not in recipientAllowlist`);
+                    }
+                }
+                // Check transfer amount cap
+                if (config.maxAllowanceWei !== undefined) {
+                    if (intent.args.amount > config.maxAllowanceWei) {
+                        violations.push(`transfer amount ${intent.args.amount} exceeds maxAllowanceWei ${config.maxAllowanceWei}`);
+                    }
+                }
+                break;
+            }
+        }
+        return violations;
+    },
+};
+//# sourceMappingURL=erc20.js.map

package/dist/protocols/policy/evaluators/erc20.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erc20.js","sourceRoot":"","sources":["../../../../src/protocols/policy/evaluators/erc20.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,cAAc,GAA4B;IACrD,QAAQ,EAAE,OAAO;IAEjB,QAAQ,CAAC,MAAqB,EAAE,MAA4B;QAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO,CAAC,8CAA8C,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,2CAA2C;QAC3C,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAC3C,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,UAAU,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,0BAA0B;gBAC1B,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAC7C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,OAAO,4BAA4B,CAAC,CAAC;oBAC9E,CAAC;gBACH,CAAC;gBAED,sBAAsB;gBACtB,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;oBACzC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;wBAChD,UAAU,CAAC,IAAI,CACb,kBAAkB,MAAM,CAAC,IAAI,CAAC,MAAM,4BAA4B,MAAM,CAAC,eAAe,EAAE,CACzF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,4BAA4B;gBAC5B,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;oBACzD,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAC/C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,CAAC;oBAC3E,CAAC;gBACH,CAAC;gBAED,4BAA4B;gBAC5B,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;oBACzC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;wBAChD,UAAU,CAAC,IAAI,CACb,mBAAmB,MAAM,CAAC,IAAI,CAAC,MAAM,4BAA4B,MAAM,CAAC,eAAe,EAAE,CAC1F,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC"}

package/dist/protocols/policy/evaluators/uniswap-v3.d.ts

@@ -0,0 +1,2 @@
+import type { ProtocolPolicyEvaluator } from '../types.js';
+export declare const uniswapV3Evaluator: ProtocolPolicyEvaluator;

package/dist/protocols/policy/evaluators/uniswap-v3.js

@@ -0,0 +1,46 @@
+export const uniswapV3Evaluator = {
+    protocol: 'uniswap_v3',
+    evaluate(intent, config) {
+        if (intent.protocol !== 'uniswap_v3') {
+            return [`uniswap_v3 evaluator received non-uniswap_v3 intent: ${intent.protocol}`];
+        }
+        const violations = [];
+        const { action } = intent;
+        switch (action) {
+            case 'exactInputSingle': {
+                // Check token allowlist (both tokenIn and tokenOut)
+                if (config.tokenAllowlist && config.tokenAllowlist.length > 0) {
+                    const normalizedIn = intent.args.tokenIn.toLowerCase();
+                    const normalizedOut = intent.args.tokenOut.toLowerCase();
+                    const allowedSet = new Set(config.tokenAllowlist.map((t) => t.toLowerCase()));
+                    if (!allowedSet.has(normalizedIn)) {
+                        violations.push(`tokenIn ${intent.args.tokenIn} not in tokenAllowlist`);
+                    }
+                    if (!allowedSet.has(normalizedOut)) {
+                        violations.push(`tokenOut ${intent.args.tokenOut} not in tokenAllowlist`);
+                    }
+                }
+                // Check recipient allowlist
+                if (config.recipientAllowlist && config.recipientAllowlist.length > 0) {
+                    const normalizedRecipient = intent.args.recipient.toLowerCase();
+                    const allowed = config.recipientAllowlist.some((r) => r.toLowerCase() === normalizedRecipient);
+                    if (!allowed) {
+                        violations.push(`recipient ${intent.args.recipient} not in recipientAllowlist`);
+                    }
+                }
+                // Check slippage protection: reject amountOutMinimum === 0 (infinite slippage)
+                // True slippage % validation requires a price oracle (deferred).
+                if (config.maxSlippageBps !== undefined) {
+                    if (intent.args.amountOutMinimum === 0n) {
+                        violations.push('amountOutMinimum is 0 (no slippage protection); maxSlippageBps policy requires non-zero minimum output');
+                    }
+                }
+                break;
+            }
+            default:
+                violations.push(`Unknown uniswap_v3 action '${action}'; policy cannot evaluate`);
+        }
+        return violations;
+    },
+};
+//# sourceMappingURL=uniswap-v3.js.map

package/dist/protocols/policy/evaluators/uniswap-v3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uniswap-v3.js","sourceRoot":"","sources":["../../../../src/protocols/policy/evaluators/uniswap-v3.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,kBAAkB,GAA4B;IACzD,QAAQ,EAAE,YAAY;IAEtB,QAAQ,CAAC,MAAqB,EAAE,MAA4B;QAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,wDAAwD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAE1B,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,oDAAoD;gBACpD,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBACvD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;oBACzD,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAClD,CAAC;oBAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;wBAClC,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,OAAO,wBAAwB,CAAC,CAAC;oBAC1E,CAAC;oBACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;wBACnC,UAAU,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,QAAQ,wBAAwB,CAAC,CAAC;oBAC5E,CAAC;gBACH,CAAC;gBAED,4BAA4B;gBAC5B,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;oBAChE,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAC/C,CAAC;oBACF,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,UAAU,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,SAAS,4BAA4B,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC;gBAED,+EAA+E;gBAC/E,iEAAiE;gBACjE,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACxC,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,EAAE,EAAE,CAAC;wBACxC,UAAU,CAAC,IAAI,CACb,wGAAwG,CACzG,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,MAAM;YACR,CAAC;YACD;gBACE,UAAU,CAAC,IAAI,CACb,8BAA8B,MAAgB,2BAA2B,CAC1E,CAAC;QACN,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC"}

package/dist/protocols/policy/loader.d.ts

@@ -0,0 +1,11 @@
+import type { PolicyConfigV2 } from './types.js';
+/**
+ * Parse a raw JSON object into a PolicyConfigV2.
+ * Pure function — no I/O. Validates with Zod, normalizes addresses and selectors to lowercase.
+ */
+export declare function parsePolicyConfig(raw: Record<string, unknown>): PolicyConfigV2;
+/**
+ * Load and parse a policy configuration from a JSON file.
+ * Convenience wrapper around parsePolicyConfig for Node.js file I/O.
+ */
+export declare function loadPolicyConfigFromFile(path: string): PolicyConfigV2;

package/dist/protocols/policy/loader.js

@@ -0,0 +1,70 @@
+import { readFileSync } from 'node:fs';
+import { z } from 'zod';
+// ─── Zod schema for runtime validation ───
+const zodHexString = z.string().refine((v) => /^0x[0-9a-fA-F]*$/.test(v), { message: 'Must be a 0x-prefixed hex string' });
+const zodBigIntString = z.union([z.string(), z.number().safe()]).transform((v, ctx) => {
+    try {
+        return BigInt(v);
+    }
+    catch {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'Must be a BigInt-compatible value',
+        });
+        return z.NEVER;
+    }
+});
+const protocolPolicyConfigSchema = z.object({
+    tokenAllowlist: z.array(zodHexString).optional(),
+    recipientAllowlist: z.array(zodHexString).optional(),
+    maxSlippageBps: z.number().int().nonnegative().optional(),
+    maxInterestRateMode: z.number().int().nonnegative().optional(),
+    maxAllowanceWei: zodBigIntString.optional(),
+    maxAmountWei: zodBigIntString.optional(),
+}).passthrough();
+const policyConfigV2Schema = z.object({
+    allowedChainIds: z.array(z.number().int()).default([]),
+    allowedContracts: z.array(zodHexString).default([]),
+    allowedSelectors: z.array(zodHexString).default([]),
+    maxAmountWei: zodBigIntString.default(0n),
+    maxDeadlineSeconds: z.number().int().nonnegative().default(0),
+    protocolPolicies: z.record(z.string(), protocolPolicyConfigSchema).optional(),
+}).passthrough();
+/**
+ * Parse a raw JSON object into a PolicyConfigV2.
+ * Pure function — no I/O. Validates with Zod, normalizes addresses and selectors to lowercase.
+ */
+export function parsePolicyConfig(raw) {
+    const result = policyConfigV2Schema.safeParse(raw);
+    if (!result.success) {
+        const messages = result.error.issues
+            .map((i) => `${i.path.join('.')}: ${i.message}`)
+            .join('; ');
+        throw new Error(`Invalid policy configuration: ${messages}`);
+    }
+    const parsed = result.data;
+    return {
+        ...parsed,
+        allowedContracts: parsed.allowedContracts.map((c) => c.toLowerCase()),
+        allowedSelectors: parsed.allowedSelectors.map((s) => s.toLowerCase()),
+        protocolPolicies: parsed.protocolPolicies
+            ? Object.fromEntries(Object.entries(parsed.protocolPolicies).map(([protocol, config]) => [
+                protocol,
+                {
+                    ...config,
+                    tokenAllowlist: config.tokenAllowlist?.map((t) => t.toLowerCase()),
+                    recipientAllowlist: config.recipientAllowlist?.map((r) => r.toLowerCase()),
+                },
+            ]))
+            : undefined,
+    };
+}
+/**
+ * Load and parse a policy configuration from a JSON file.
+ * Convenience wrapper around parsePolicyConfig for Node.js file I/O.
+ */
+export function loadPolicyConfigFromFile(path) {
+    const raw = JSON.parse(readFileSync(path, 'utf-8'));
+    return parsePolicyConfig(raw);
+}
+//# sourceMappingURL=loader.js.map

package/dist/protocols/policy/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/protocols/policy/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,4CAA4C;AAE5C,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EACjC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAChD,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACxE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACT,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IAChD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IACpD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACzD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC9D,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,eAAe,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,QAAQ,EAAE;CAC9E,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAA4B;IAC5D,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAE3B,OAAO;QACL,GAAG,MAAM;QACT,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAC3C,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CACZ;QACpB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAC3C,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CACZ;QACpB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACvC,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;gBAClE,QAAQ;gBACR;oBACE,GAAG,MAAM;oBACT,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,GAAG,CACxC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CACA;oBAChC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,GAAG,CAChD,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CACA;iBACjC;aACF,CAAC,CACH;YACH,CAAC,CAAC,SAAS;KACI,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC"}

package/dist/protocols/policy/types.d.ts

@@ -0,0 +1,38 @@
+import type { Address } from 'viem';
+import type { DecodedIntent } from '../types.js';
+export interface PolicyConfig {
+    allowedChainIds: number[];
+    allowedContracts: `0x${string}`[];
+    allowedSelectors: `0x${string}`[];
+    maxAmountWei: bigint;
+    maxDeadlineSeconds: number;
+}
+export interface PolicyRequest {
+    chainId: number;
+    to: `0x${string}`;
+    selector?: `0x${string}`;
+    amountWei?: bigint;
+    deadline?: number;
+}
+export interface PolicyEvaluation {
+    allowed: boolean;
+    violations: string[];
+}
+export interface PolicyRequestV2 extends PolicyRequest {
+    intent?: DecodedIntent;
+}
+export interface ProtocolPolicyConfig {
+    tokenAllowlist?: Address[];
+    recipientAllowlist?: Address[];
+    maxSlippageBps?: number;
+    maxInterestRateMode?: number;
+    maxAllowanceWei?: bigint;
+    maxAmountWei?: bigint;
+}
+export interface PolicyConfigV2 extends PolicyConfig {
+    protocolPolicies?: Record<string, ProtocolPolicyConfig>;
+}
+export interface ProtocolPolicyEvaluator {
+    readonly protocol: string;
+    evaluate(intent: DecodedIntent, config: ProtocolPolicyConfig): string[];
+}

package/dist/protocols/policy/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map