@exagent/agent 0.3.4 → 0.3.6

package/dist/{chunk-WTECTX2Z.js → chunk-ZRAOPQQW.js}

@@ -4,7 +4,8 @@ import { chmodSync, existsSync, readFileSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import { resolve } from "path";
 import { z } from "zod";
-var providerEnum = z.enum(["openai", "anthropic", "google", "deepseek", "mistral", "groq", "together", "ollama"]);
+import { LLM_PROVIDER_IDS, providerRequiresApiKey } from "@exagent/sdk";
+var providerEnum = z.enum(LLM_PROVIDER_IDS);
 var runtimeSchema = z.object({
   agentId: z.string(),
   apiUrl: z.string().url(),
@@ -246,7 +247,8 @@ async function loadConfig(path = "agent-config.json", options = {}) {
   if (process.env.EXAGENT_WALLET_PRIVATE_KEY) {
     config.wallet = { privateKey: process.env.EXAGENT_WALLET_PRIVATE_KEY };
   }
-  if ((!config.apiToken || !llm.apiKey || !config.wallet) && parsed.secrets?.secureStorePath) {
+  const llmNeedsApiKey = providerRequiresApiKey(String(llm.provider || ""));
+  if ((!config.apiToken || llmNeedsApiKey && !llm.apiKey || !config.wallet) && parsed.secrets?.secureStorePath) {
     const password = process.env.EXAGENT_SECRET_PASSWORD || await options.getSecretPassword?.();
     if (!password) {
       throw new Error("Encrypted secret store found, but no password was provided.");
@@ -256,7 +258,7 @@ async function loadConfig(path = "agent-config.json", options = {}) {
     if (!config.wallet && secrets.walletPrivateKey) config.wallet = { privateKey: secrets.walletPrivateKey };
     if (!llm.apiKey && secrets.llmApiKey) llm.apiKey = secrets.llmApiKey;
   }
-  if ((!config.apiToken || !llm.apiKey || !config.wallet) && parsed.secrets?.bootstrapToken && !parsed.secrets?.secureStorePath) {
+  if ((!config.apiToken || llmNeedsApiKey && !llm.apiKey || !config.wallet) && parsed.secrets?.bootstrapToken && !parsed.secrets?.secureStorePath) {
     throw new Error(`Config ${path} still requires first-time secure setup. Run 'exagent setup --config ${path}' or start the agent interactively.`);
   }
   config.llm = llm;
@@ -1459,6 +1461,7 @@ var BaseLLMAdapter = class {
 };
 
 // src/llm/openai.ts
+import { getDefaultModel, shouldUseOpenAIResponses } from "@exagent/sdk";
 var OpenAIAdapter = class extends BaseLLMAdapter {
   endpoint;
   constructor(config) {
@@ -1466,6 +1469,10 @@ var OpenAIAdapter = class extends BaseLLMAdapter {
     this.endpoint = config.endpoint || "https://api.openai.com/v1";
   }
   async chatImpl(messages) {
+    const model = this.config.model || getDefaultModel("openai");
+    if (shouldUseOpenAIResponses(model)) {
+      return this.chatResponses(model, messages);
+    }
     const res = await this.fetchWithTimeout(`${this.endpoint}/chat/completions`, {
       method: "POST",
       headers: {
@@ -1473,7 +1480,7 @@ var OpenAIAdapter = class extends BaseLLMAdapter {
         Authorization: `Bearer ${this.config.apiKey}`
       },
       body: JSON.stringify({
-        model: this.config.model || "gpt-4o",
+        model,
         messages: messages.map((m) => ({ role: m.role, content: m.content })),
         temperature: this.getTemperature(),
         max_tokens: this.getMaxTokens()
@@ -1489,15 +1496,42 @@ var OpenAIAdapter = class extends BaseLLMAdapter {
       tokens: data.usage ? { input: data.usage.prompt_tokens, output: data.usage.completion_tokens } : void 0
     };
   }
+  async chatResponses(model, messages) {
+    const res = await this.fetchWithTimeout(`${this.endpoint}/responses`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${this.config.apiKey}`
+      },
+      body: JSON.stringify({
+        model,
+        input: messages.map((m) => ({
+          role: m.role === "system" ? "developer" : m.role,
+          content: m.content
+        })),
+        max_output_tokens: this.getMaxTokens()
+      })
+    });
+    if (!res.ok) {
+      const body = await res.text();
+      throw new Error(`OpenAI API error ${res.status}: ${body}`);
+    }
+    const data = await res.json();
+    return {
+      content: data.output_text || data.output?.flatMap((item) => item.content?.map((content) => content.text || "") || []).join("") || "",
+      tokens: data.usage ? { input: data.usage.input_tokens || 0, output: data.usage.output_tokens || 0 } : void 0
+    };
+  }
   getMetadata() {
     return {
       provider: "openai",
-      model: this.config.model || "gpt-4o"
+      model: this.config.model || getDefaultModel("openai")
     };
   }
 };
 
 // src/llm/anthropic.ts
+import { getDefaultModel as getDefaultModel2 } from "@exagent/sdk";
 var AnthropicAdapter = class extends BaseLLMAdapter {
   endpoint;
   constructor(config) {
@@ -1508,7 +1542,7 @@ var AnthropicAdapter = class extends BaseLLMAdapter {
     const systemMessage = messages.find((m) => m.role === "system");
     const nonSystemMessages = messages.filter((m) => m.role !== "system");
     const body = {
-      model: this.config.model || "claude-sonnet-4-20250514",
+      model: this.config.model || getDefaultModel2("anthropic"),
       messages: nonSystemMessages.map((m) => ({ role: m.role, content: m.content })),
       max_tokens: this.getMaxTokens(),
       temperature: this.getTemperature()
@@ -1539,18 +1573,19 @@ var AnthropicAdapter = class extends BaseLLMAdapter {
   getMetadata() {
     return {
       provider: "anthropic",
-      model: this.config.model || "claude-sonnet-4-20250514"
+      model: this.config.model || getDefaultModel2("anthropic")
     };
   }
 };
 
 // src/llm/google.ts
+import { getDefaultModel as getDefaultModel3 } from "@exagent/sdk";
 var GoogleAdapter = class extends BaseLLMAdapter {
   constructor(config) {
     super(config);
   }
   async chatImpl(messages) {
-    const model = this.config.model || "gemini-2.5-flash";
+    const model = this.config.model || getDefaultModel3("google");
     const url = `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${this.config.apiKey}`;
     const systemMessage = messages.find((m) => m.role === "system");
     const nonSystemMessages = messages.filter((m) => m.role !== "system");
@@ -1586,12 +1621,13 @@ var GoogleAdapter = class extends BaseLLMAdapter {
   getMetadata() {
     return {
       provider: "google",
-      model: this.config.model || "gemini-2.5-flash"
+      model: this.config.model || getDefaultModel3("google")
     };
   }
 };
 
 // src/llm/deepseek.ts
+import { getDefaultModel as getDefaultModel4 } from "@exagent/sdk";
 var DeepSeekAdapter = class extends BaseLLMAdapter {
   constructor(config) {
     super(config);
@@ -1604,7 +1640,7 @@ var DeepSeekAdapter = class extends BaseLLMAdapter {
         Authorization: `Bearer ${this.config.apiKey}`
       },
       body: JSON.stringify({
-        model: this.config.model || "deepseek-chat",
+        model: this.config.model || getDefaultModel4("deepseek"),
         messages: messages.map((m) => ({ role: m.role, content: m.content })),
         temperature: this.getTemperature(),
         max_tokens: this.getMaxTokens()
@@ -1623,12 +1659,13 @@ var DeepSeekAdapter = class extends BaseLLMAdapter {
   getMetadata() {
     return {
       provider: "deepseek",
-      model: this.config.model || "deepseek-chat"
+      model: this.config.model || getDefaultModel4("deepseek")
     };
   }
 };
 
 // src/llm/mistral.ts
+import { getDefaultModel as getDefaultModel5 } from "@exagent/sdk";
 var MistralAdapter = class extends BaseLLMAdapter {
   constructor(config) {
     super(config);
@@ -1641,7 +1678,7 @@ var MistralAdapter = class extends BaseLLMAdapter {
         Authorization: `Bearer ${this.config.apiKey}`
       },
       body: JSON.stringify({
-        model: this.config.model || "mistral-large-latest",
+        model: this.config.model || getDefaultModel5("mistral"),
         messages: messages.map((m) => ({ role: m.role, content: m.content })),
         temperature: this.getTemperature(),
         max_tokens: this.getMaxTokens()
@@ -1660,12 +1697,13 @@ var MistralAdapter = class extends BaseLLMAdapter {
   getMetadata() {
     return {
       provider: "mistral",
-      model: this.config.model || "mistral-large-latest"
+      model: this.config.model || getDefaultModel5("mistral")
     };
   }
 };
 
 // src/llm/groq.ts
+import { getDefaultModel as getDefaultModel6 } from "@exagent/sdk";
 var GroqAdapter = class extends BaseLLMAdapter {
   constructor(config) {
     super(config);
@@ -1678,7 +1716,7 @@ var GroqAdapter = class extends BaseLLMAdapter {
         Authorization: `Bearer ${this.config.apiKey}`
       },
       body: JSON.stringify({
-        model: this.config.model || "llama-3.3-70b-versatile",
+        model: this.config.model || getDefaultModel6("groq"),
         messages: messages.map((m) => ({ role: m.role, content: m.content })),
         temperature: this.getTemperature(),
         max_tokens: this.getMaxTokens()
@@ -1697,12 +1735,13 @@ var GroqAdapter = class extends BaseLLMAdapter {
   getMetadata() {
     return {
       provider: "groq",
-      model: this.config.model || "llama-3.3-70b-versatile"
+      model: this.config.model || getDefaultModel6("groq")
     };
   }
 };
 
 // src/llm/together.ts
+import { getDefaultModel as getDefaultModel7 } from "@exagent/sdk";
 var TogetherAdapter = class extends BaseLLMAdapter {
   constructor(config) {
     super(config);
@@ -1715,7 +1754,7 @@ var TogetherAdapter = class extends BaseLLMAdapter {
         Authorization: `Bearer ${this.config.apiKey}`
       },
       body: JSON.stringify({
-        model: this.config.model || "meta-llama/Llama-3.3-70B-Instruct-Turbo",
+        model: this.config.model || getDefaultModel7("together"),
         messages: messages.map((m) => ({ role: m.role, content: m.content })),
         temperature: this.getTemperature(),
         max_tokens: this.getMaxTokens()
@@ -1734,12 +1773,13 @@ var TogetherAdapter = class extends BaseLLMAdapter {
   getMetadata() {
     return {
       provider: "together",
-      model: this.config.model || "meta-llama/Llama-3.3-70B-Instruct-Turbo"
+      model: this.config.model || getDefaultModel7("together")
     };
   }
 };
 
 // src/llm/ollama.ts
+import { getDefaultModel as getDefaultModel8 } from "@exagent/sdk";
 var OllamaAdapter = class extends BaseLLMAdapter {
   endpoint;
   constructor(config) {
@@ -1751,7 +1791,7 @@ var OllamaAdapter = class extends BaseLLMAdapter {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
-        model: this.config.model || "llama3.3",
+        model: this.config.model || getDefaultModel8("ollama"),
         messages: messages.map((m) => ({ role: m.role, content: m.content })),
         stream: false,
         options: {
@@ -1773,7 +1813,7 @@ var OllamaAdapter = class extends BaseLLMAdapter {
   getMetadata() {
     return {
       provider: "ollama",
-      model: this.config.model || "llama3.3"
+      model: this.config.model || getDefaultModel8("ollama")
     };
   }
 };
@@ -1820,24 +1860,7 @@ Rules:
 - Cut losses quickly if momentum reverses
 - Consider volume as confirmation of momentum
 
-Return a JSON array of trade signals.`,
-    code: `
-const prices = context.market.getPrices();
-const positions = context.position.openPositions;
-
-const messages = [
-  { role: 'system', content: 'You are a momentum trading agent. Analyze market data and return trade signals as a JSON array. Each signal: { symbol, side: "buy"|"sell", confidence: 0-1, reasoning }. Return [] if no opportunities.' },
-  { role: 'user', content: 'Current prices: ' + JSON.stringify(prices) + '\\nOpen positions: ' + JSON.stringify(positions.map(p => p.token)) + '\\nAnalyze for momentum opportunities.' }
-];
-
-const response = await context.llm.chat(messages);
-try {
-  const signals = JSON.parse(response.content);
-  return Array.isArray(signals) ? signals : [];
-} catch {
-  return [];
-}
-`
+Return a JSON array of trade signals.`
   },
   {
     id: "value",
@@ -1855,24 +1878,7 @@ Rules:
 - Avoid chasing pumps
 - Diversify across sectors
 
-Return a JSON array of trade signals.`,
-    code: `
-const prices = context.market.getPrices();
-const positions = context.position.openPositions;
-
-const messages = [
-  { role: 'system', content: 'You are a value investing agent. Identify undervalued tokens. Return trade signals as JSON array: { symbol, side: "buy"|"sell", confidence: 0-1, reasoning }. Return [] if nothing is compelling.' },
-  { role: 'user', content: 'Current prices: ' + JSON.stringify(prices) + '\\nPositions: ' + JSON.stringify(positions.map(p => ({ token: p.token, entry: p.costBasisPerUnit }))) + '\\nLook for value opportunities.' }
-];
-
-const response = await context.llm.chat(messages);
-try {
-  const signals = JSON.parse(response.content);
-  return Array.isArray(signals) ? signals : [];
-} catch {
-  return [];
-}
-`
+Return a JSON array of trade signals.`
   },
   {
     id: "arbitrage",
@@ -1889,23 +1895,7 @@ Rules:
 - Only trade when net profit > 0.5% after all costs
 - Monitor cross-chain opportunities (CEX vs DEX spreads)
 
-Return a JSON array of trade signals.`,
-    code: `
-const prices = context.market.getPrices();
-
-const messages = [
-  { role: 'system', content: 'You are an arbitrage agent. Find price discrepancies. Return trade signals as JSON array: { symbol, side: "buy"|"sell", venue, confidence: 0-1, reasoning }. Return [] if no arb opportunities.' },
-  { role: 'user', content: 'Market prices: ' + JSON.stringify(prices) + '\\nScan for cross-venue arbitrage opportunities.' }
-];
-
-const response = await context.llm.chat(messages);
-try {
-  const signals = JSON.parse(response.content);
-  return Array.isArray(signals) ? signals : [];
-} catch {
-  return [];
-}
-`
+Return a JSON array of trade signals.`
   },
   {
     id: "hold",
@@ -1914,8 +1904,7 @@ try {
     category: "custom",
     venues: [],
     riskLevel: "conservative",
-    systemPrompt: "",
-    code: `return [];`
+    systemPrompt: ""
   }
 ];
 function getTemplate(id) {
@@ -1926,8 +1915,8 @@ function listTemplates() {
 }
 
 // src/strategy/loader.ts
-import { existsSync as existsSync3 } from "fs";
-import { resolve as resolve2 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { extname, resolve as resolve2 } from "path";
 import { z as z2 } from "zod";
 
 // src/scrub-secrets.ts
@@ -1957,29 +1946,36 @@ function scrubSecrets(text) {
 }
 
 // src/strategy/loader.ts
+var MAX_PROMPT_SIGNALS = 10;
+var SUPPORTED_FILE_EXPORTS = /* @__PURE__ */ new Set(["name", "description", "category", "venues", "systemPrompt", "template"]);
 var promptSignalSchema = z2.object({
-  symbol: z2.string().min(1),
+  symbol: z2.string().min(1).max(80),
   side: z2.enum(["buy", "sell", "long", "short"]),
   confidence: z2.number().min(0).max(1).optional(),
-  reasoning: z2.string().optional(),
-  venue: z2.string().optional(),
-  chain: z2.string().optional(),
+  reasoning: z2.string().max(1e3).optional(),
+  venue: z2.string().min(1).max(80).optional(),
+  chain: z2.string().min(1).max(80).optional(),
   size: z2.number().positive().optional(),
   price: z2.number().positive().optional(),
-  fee: z2.number().min(0).optional(),
-  venueFillId: z2.string().optional(),
-  venueTimestamp: z2.string().optional(),
-  leverage: z2.number().positive().optional(),
-  orderType: z2.string().optional()
-});
-var promptSignalArraySchema = z2.array(promptSignalSchema);
+  leverage: z2.number().positive().max(100).optional(),
+  orderType: z2.enum(["market", "limit", "yes", "no"]).optional()
+}).strict();
+var promptSignalArraySchema = z2.array(promptSignalSchema).max(MAX_PROMPT_SIGNALS);
+var strategyMetadataSchema = z2.object({
+  name: z2.string().min(1).max(120).optional(),
+  description: z2.string().max(1e3).optional(),
+  category: z2.string().max(80).optional(),
+  venues: z2.array(z2.string().min(1).max(80)).max(20).optional(),
+  systemPrompt: z2.string().min(1).max(12e3).optional(),
+  template: z2.string().min(1).max(80).optional()
+}).strict();
 async function loadStrategy(config) {
+  if (config.code?.trim()) {
+    throw new Error("Raw JavaScript strategy code is disabled. Use a template or prompt-backed strategy instead.");
+  }
   if (config.file) {
     return loadFromFile(config.file);
   }
-  if (config.code) {
-    return loadFromCode(config.code);
-  }
   if (config.prompt) {
     return loadFromPrompt(config.prompt);
   }
@@ -1988,7 +1984,14 @@ async function loadStrategy(config) {
     if (!template) {
       throw new Error(`Unknown strategy template: ${config.template}. Available: momentum, value, arbitrage, hold`);
     }
-    return loadFromCode(template.code);
+    if (!template.systemPrompt.trim()) {
+      return holdStrategy;
+    }
+    return loadFromPrompt({
+      name: template.name,
+      systemPrompt: template.systemPrompt,
+      venues: template.venues
+    });
   }
   return holdStrategy;
 }
@@ -1998,41 +2001,34 @@ async function loadFromFile(filePath) {
     throw new Error(`Strategy file not found: ${resolved}`);
   }
   try {
-    const mod = await import(resolved);
-    const fn = mod.default || mod.strategy;
-    if (typeof fn !== "function") {
-      if (typeof mod.code === "string" && mod.code.trim()) {
-        return loadFromCode(mod.code);
+    const source = readFileSync3(resolved, "utf8");
+    const metadata = extname(resolved) === ".json" ? strategyMetadataSchema.parse(JSON.parse(source)) : parseStrategyMetadataModule(source, resolved);
+    if (metadata.systemPrompt?.trim()) {
+      return loadFromPrompt({
+        name: metadata.name,
+        systemPrompt: metadata.systemPrompt,
+        venues: metadata.venues
+      });
+    }
+    if (metadata.template?.trim()) {
+      const template = getTemplate(metadata.template);
+      if (!template) {
+        throw new Error(`Unknown strategy template: ${metadata.template}. Available: momentum, value, arbitrage, hold`);
       }
-      if (typeof mod.systemPrompt === "string" && mod.systemPrompt.trim()) {
-        const venues = Array.isArray(mod.venues) ? mod.venues.filter((venue) => typeof venue === "string") : void 0;
-        const name = typeof mod.name === "string" ? mod.name : void 0;
-        return loadFromPrompt({
-          name,
-          systemPrompt: mod.systemPrompt,
-          venues
-        });
+      if (!template.systemPrompt.trim()) {
+        return holdStrategy;
       }
-      if (typeof mod.template === "string" && mod.template.trim()) {
-        const template = getTemplate(mod.template);
-        if (!template) {
-          throw new Error(`Unknown strategy template: ${mod.template}. Available: momentum, value, arbitrage, hold`);
-        }
-        return loadFromCode(template.code);
-      }
-      throw new Error(`Strategy file must export a default function, 'strategy' function, 'code' string, 'systemPrompt' string, or 'template' string`);
+      return loadFromPrompt({
+        name: template.name,
+        systemPrompt: template.systemPrompt,
+        venues: metadata.venues?.length ? metadata.venues : template.venues
+      });
     }
-    return fn;
+    throw new Error("Strategy file must define a systemPrompt or template. Executable strategy files are disabled.");
   } catch (err) {
     throw new Error(`Failed to load strategy from ${resolved}: ${err.message}`);
   }
 }
-async function loadFromCode(code) {
-  const AsyncFunction = Object.getPrototypeOf(async function() {
-  }).constructor;
-  const fn = new AsyncFunction("context", code);
-  return fn;
-}
 function loadFromPrompt(config) {
   return async (context) => {
     const prices = context.market.getPrices();
@@ -2043,30 +2039,40 @@ function loadFromPrompt(config) {
       venue: position.venue,
       chain: position.chain
     }));
+    const allowedVenues = config.venues?.filter(Boolean) ?? [];
     const response = await context.llm.chat([
       { role: "system", content: config.systemPrompt },
       {
         role: "user",
         content: [
           `Strategy: ${config.name || "Prompt Strategy"}`,
-          `Allowed venues: ${(config.venues || []).join(", ") || "any"}`,
+          `Allowed venues: ${allowedVenues.join(", ") || "none configured"}`,
           `Current prices: ${JSON.stringify(prices)}`,
           `Open positions: ${JSON.stringify(positions)}`,
           `Risk config: ${JSON.stringify(context.config)}`,
-          "Return ONLY a JSON array of trade signals."
+          "Return ONLY a JSON array of trade intents. Do not include executable code. Do not invent fill IDs."
         ].join("\n")
       }
     ]);
     const scrubbedContent = scrubSecrets(response.content);
-    const match = scrubbedContent.match(/\[[\s\S]*\]/);
-    if (!match) {
+    const jsonPayload = extractJsonArray(scrubbedContent);
+    if (!jsonPayload) {
       context.log("Prompt strategy returned a non-JSON response; no signals emitted.");
       return [];
     }
     try {
-      const parsed = promptSignalArraySchema.parse(JSON.parse(match[0]));
+      const parsed = promptSignalArraySchema.parse(JSON.parse(jsonPayload));
       const signals = [];
       for (const signal of parsed) {
+        const venue = signal.venue || allowedVenues[0];
+        if (!venue) {
+          context.log(`Prompt strategy skipped ${signal.symbol}: no allowed venue configured.`);
+          continue;
+        }
+        if (allowedVenues.length > 0 && !allowedVenues.includes(venue)) {
+          context.log(`Prompt strategy skipped ${signal.symbol}: venue ${venue} is not allowed.`);
+          continue;
+        }
         const price = signal.price ?? prices[signal.symbol.toUpperCase()];
         if (!price || price <= 0) {
           context.log(`Prompt strategy skipped ${signal.symbol}: no usable price in response or market cache.`);
@@ -2077,13 +2083,13 @@ function loadFromPrompt(config) {
           side: signal.side,
           confidence: signal.confidence ?? 0.5,
           reasoning: signal.reasoning,
-          venue: signal.venue || config.venues?.[0] || "manual",
+          venue,
           chain: signal.chain,
-          size: signal.size ?? 1,
+          size: signal.size ?? 0,
           price,
-          fee: signal.fee ?? 0,
-          venueFillId: signal.venueFillId ?? "",
-          venueTimestamp: signal.venueTimestamp ?? (/* @__PURE__ */ new Date()).toISOString(),
+          fee: 0,
+          venueFillId: "",
+          venueTimestamp: "",
           leverage: signal.leverage,
           orderType: signal.orderType
         });
@@ -2095,6 +2101,54 @@ function loadFromPrompt(config) {
     }
   };
 }
+function extractJsonArray(content) {
+  const trimmed = content.trim();
+  if (trimmed.startsWith("[") && trimmed.endsWith("]")) {
+    return trimmed;
+  }
+  const start = trimmed.indexOf("[");
+  const end = trimmed.lastIndexOf("]");
+  if (start === -1 || end === -1 || end <= start) {
+    return null;
+  }
+  return trimmed.slice(start, end + 1);
+}
+function parseStrategyMetadataModule(source, filePath) {
+  const values = {};
+  let statement = "";
+  for (const rawLine of source.replace(/\r\n/g, "\n").split("\n")) {
+    const line = rawLine.trim();
+    if (!line || line.startsWith("//")) {
+      continue;
+    }
+    statement = statement ? `${statement}
+${rawLine}` : rawLine;
+    if (!line.endsWith(";")) {
+      continue;
+    }
+    const match = statement.match(/^\s*export\s+const\s+([A-Za-z_$][\w$]*)\s*=\s*([\s\S]*);\s*$/);
+    if (!match) {
+      throw new Error(`Unsupported statement in ${filePath}. Strategy files may only export JSON constants.`);
+    }
+    const [, name, rawValue] = match;
+    if (name === "code") {
+      throw new Error("Raw JavaScript strategy code is disabled. Replace code with systemPrompt.");
+    }
+    if (!SUPPORTED_FILE_EXPORTS.has(name)) {
+      throw new Error(`Unsupported strategy export "${name}".`);
+    }
+    try {
+      values[name] = JSON.parse(rawValue.trim());
+    } catch {
+      throw new Error(`Strategy export "${name}" must be a JSON literal.`);
+    }
+    statement = "";
+  }
+  if (statement.trim()) {
+    throw new Error(`Unterminated export in ${filePath}.`);
+  }
+  return strategyMetadataSchema.parse(values);
+}
 var holdStrategy = async (_context) => {
   return [];
 };
@@ -3660,7 +3714,9 @@ function decodePredictionInstrument(instrument) {
 
 // src/prediction/client.ts
 import { ClobClient } from "@polymarket/clob-client";
-import { Wallet } from "ethers";
+import { createWalletClient, http } from "viem";
+import { privateKeyToAccount } from "viem/accounts";
+import { polygon as polygon2 } from "viem/chains";
 var PolymarketClient = class {
   config;
   clobClient = null;
@@ -3671,8 +3727,13 @@ var PolymarketClient = class {
   CACHE_TTL_MS = 6e4;
   constructor(privateKey, config) {
     this.config = { ...DEFAULT_PREDICTION_CONFIG, ...config };
-    this.signer = new Wallet(privateKey);
-    this.walletAddress = this.signer.address;
+    const account = privateKeyToAccount(privateKey);
+    this.signer = createWalletClient({
+      account,
+      chain: polygon2,
+      transport: http()
+    });
+    this.walletAddress = account.address;
   }
   // ── INITIALIZATION ─────────────────────────────────────────
   async initialize() {
@@ -4078,18 +4139,18 @@ var PolymarketOrderManager = class {
 // src/spot/client.ts
 import {
   createPublicClient,
-  createWalletClient,
-  http,
+  createWalletClient as createWalletClient2,
+  http as http2,
   maxUint256
 } from "viem";
-import { privateKeyToAccount } from "viem/accounts";
+import { privateKeyToAccount as privateKeyToAccount2 } from "viem/accounts";
 var SpotDEXClient = class {
   account;
   clients = /* @__PURE__ */ new Map();
   decimalsCache = /* @__PURE__ */ new Map();
   symbolCache = /* @__PURE__ */ new Map();
   constructor(privateKey) {
-    this.account = privateKeyToAccount(privateKey);
+    this.account = privateKeyToAccount2(privateKey);
   }
   get address() {
     return this.account.address;
@@ -4103,12 +4164,12 @@ var SpotDEXClient = class {
     }
     const publicClient = createPublicClient({
       chain: chainConfig.viemChain,
-      transport: http(chainConfig.rpcUrl)
+      transport: http2(chainConfig.rpcUrl)
     });
-    const walletClient = createWalletClient({
+    const walletClient = createWalletClient2({
       account: this.account,
       chain: chainConfig.viemChain,
-      transport: http(chainConfig.rpcUrl)
+      transport: http2(chainConfig.rpcUrl)
     });
     const entry = { publicClient, walletClient, chainConfig };
     this.clients.set(chainName, entry);
@@ -4868,12 +4929,12 @@ var BridgeManager = class {
 };
 
 // src/runtime.ts
-import { createWalletClient as createWalletClient2, http as http2, formatUnits } from "viem";
-import { privateKeyToAccount as privateKeyToAccount2 } from "viem/accounts";
+import { createWalletClient as createWalletClient3, http as http3, formatUnits } from "viem";
+import { privateKeyToAccount as privateKeyToAccount3 } from "viem/accounts";
 import { arbitrum as arbitrum2 } from "viem/chains";
 import { createRequire } from "module";
 var _require = createRequire(import.meta.url);
-var SDK_VERSION = "0.3.0";
+var SDK_VERSION = "0.3.5";
 try {
   SDK_VERSION = _require("../package.json").version;
 } catch {
@@ -5180,7 +5241,7 @@ var AgentRuntime = class _AgentRuntime {
       description ? `Strategy description: ${description}` : "Strategy description: follow the owner-configured strategy exactly and do not improvise outside it.",
       `Allowed venues: ${venues}.`,
       "Stay inside the owner-configured scope. If the setup is unclear or the trade does not fit, return no trades.",
-      "Return ONLY a JSON array of trade signals."
+      "Return ONLY a JSON array of trade intents."
     ].filter((line) => Boolean(line)).join("\n");
   }
   extractStrategyConfigFromAgentConfig(cfg) {
@@ -5193,7 +5254,7 @@ var AgentRuntime = class _AgentRuntime {
       return { file: rawStrategy.file, venues };
     }
     if (typeof rawStrategy.code === "string" && rawStrategy.code.trim()) {
-      return { code: rawStrategy.code, venues };
+      throw new Error("Raw JavaScript strategy code is disabled. Use a prompt-backed strategy or template instead.");
     }
     if (typeof rawStrategy.systemPrompt === "string" && rawStrategy.systemPrompt.trim()) {
       return {
@@ -5245,16 +5306,16 @@ var AgentRuntime = class _AgentRuntime {
       log.warn("runtime", "No wallet configured \u2014 live trading disabled");
       return;
     }
-    const walletAccount = privateKeyToAccount2(privateKey);
+    const walletAccount = privateKeyToAccount3(privateKey);
     this.walletAddress = walletAccount.address;
     const hlConfig = this.config.venues?.hyperliquid_perp;
     if (hlConfig?.enabled) {
       try {
         const account = walletAccount;
-        const walletClient = createWalletClient2({
+        const walletClient = createWalletClient3({
           account,
           chain: arbitrum2,
-          transport: http2()
+          transport: http3()
         });
         const perpConfig = {
           enabled: true,