@ironwallet/mcp-server 1.0.2 → 1.0.3

package/README.md

@@ -63,7 +63,7 @@ The mnemonic never appears in tool inputs/outputs, logs meant for the agent, or
 | **Balances** | Native coins and tokens |
 | **Transfers** | Fee estimate and send through IronWallet’s transfer relay |
 | **Swaps** | Quotes and execution through IronWallet |
-| **Policy** | Optional per-wallet limits (`readOnly`, `maxPerTx`, transfer recipient allow-list). Applies to `send_transfer` and `execute_swap`. |
+| **Policy** | Optional per-wallet limits (`readOnly`, `maxPerTxUsd`, transfer recipient allow-list) set via `set_wallet_policy`. Applies to `send_transfer` and `execute_swap`. |
 
 ---
 
@@ -73,8 +73,10 @@ The mnemonic never appears in tool inputs/outputs, logs meant for the agent, or
 | Tool | Purpose | Moves funds? |
 |------|---------|:------------:|
 | `list_wallets` | Names, addresses, and `policy` | no |
+| `accept_mcp_consent` | Record chat acceptance of the MCP disclaimer | no |
 | `create_wallets` | New wallets; returns a browser `backup_url` | no |
 | `open_wallet_manager` | Local browser UI to import / create / back up | no |
+| `set_wallet_policy` | Replace per-wallet limits (`readOnly`, `maxPerTxUsd`, allow-list) | no |
 | `get_deposit_qr` | PNG QR (try chat; else local `qr_url`) | no |
 | `get_balance` | Native or token balance | no |
 | `estimate_transfer` | Fee estimate, no broadcast | no |
@@ -125,7 +127,7 @@ Swaps are a separate flow from transfers.
 **Operational notes**
 
 - Quotes expire. Prefer `execute_swap` (fresh quote). If execute times out, **poll status** before retrying — do not blindly re-run execute.
-- Wallet policy: `readOnly` blocks sends and swaps. `maxPerTx` applies to the transfer amount or the corrected swap sell amount. A transfer recipient allow-list also blocks swaps (the swap router is not a whitelisted destination).
+- Wallet policy: `readOnly` blocks sends and swaps. `maxPerTxUsd` values the transfer amount (or the corrected swap sell amount) in USD at operation time via IronWallet backend rates; when no rate is available the operation is rejected (fail closed). The recipient allow-list applies to `send_transfer`. `set_wallet_policy` replaces the whole policy — read `list_wallets.policy` first.
 
 ---
 
@@ -142,6 +144,8 @@ The user-facing backup is the **recovery phrase** in the wallet manager, not tho
 | `IW_RELAY_API_KEY` | generated UUID | Override `x-api-key` |
 | `IW_DEVICE_ID` | generated UUID | Override `X-Device-Id` (stable per keystore directory) |
 | `IW_KEYSTORE_DIR` | `~/.ironwallet-mcp` | Keystore directory |
+| `IW_RATES_API_URL` | baked profile | Rates backend for `maxPerTxUsd` valuation. Unset in the profile → USD limits reject (fail closed) |
+| `IW_STATIC_RESOURCES_URL` | baked profile | Static asset catalogs (token → rates id) |
 | `IW_HTTP_TIMEOUT_MS` | `15000` | General HTTP timeout (1s–120s) |
 | `IW_HTTP_FORWARD_TIMEOUT_MS` | `60000` | Longer timeout for broadcast-style calls. A client timeout does not always mean the operation failed — check status |
 | `IW_HTTP_RETRIES` | `2` | Retries for safe/idempotent calls; broadcasts are not auto-retried |
@@ -155,7 +159,7 @@ The user-facing backup is the **recovery phrase** in the wallet manager, not tho
 ## Security
 
 - Seeds are encrypted at rest. They never appear in tool results, agent chat, or backend requests.
-- The agent **can move funds without asking again**. Optional wallet policy (`readOnly`, `maxPerTx`, transfer recipient allow-list) is off by default and applies to both `send_transfer` and `execute_swap`.
+- The agent **can move funds without asking again**. Optional wallet policy (`readOnly`, `maxPerTxUsd`, transfer recipient allow-list — set via `set_wallet_policy`) is off by default and applies to both `send_transfer` and `execute_swap`.
 - Anyone with the keystore **and** the wrapping secret controls the funds. A leaked seed cannot be revoked.
 - Timeout is not always failure: poll status before retrying a send or swap.
 - Desktop / stdio only. A phone or remote agent would need a design where signing stays on a trusted device.

package/dist/api/rates.d.ts

@@ -0,0 +1,62 @@
+/**
+ * USD rates for policy limits (`maxPerTxUsd`).
+ *
+ * Same backend the mobile app uses:
+ *   GET {ratesApiUrl}/api/v1/rate/rates?Ids=<externalId,...>&Currencies=usd
+ * `Ids` are catalog `externalId`s (CoinGecko-style: "ethereum", "tether"), not
+ * symbols or contracts. Native coins map statically; tokens are resolved via the
+ * public static asset catalog
+ *   GET {staticResourcesUrl}/assets/main/blockchains/<net>/assets.mainnet.json
+ * matched by contract address (symbol as fallback).
+ *
+ * Callers must fail closed: `undefined` means "no rate", never "skip the check".
+ */
+import type { NetworkId } from "../networks.js";
+/** Verified against the mobile app's asset catalogs (init_assets_data). */
+export declare const NATIVE_EXTERNAL_ID: Record<NetworkId, string>;
+export interface CatalogAsset {
+    symbol?: string;
+    address?: string;
+    externalId?: string;
+}
+export interface AssetCatalogDocument {
+    assets?: CatalogAsset[];
+}
+/** Hex (EVM) contracts compare case-insensitively; base58 chains compare exactly. */
+export declare function sameTokenAddress(a: string, b: string): boolean;
+/** Find a token's externalId in a static catalog document. Pure, for tests. */
+export declare function findExternalIdInCatalog(doc: AssetCatalogDocument, query: {
+    symbol?: string;
+    tokenAddress?: string;
+}): string | undefined;
+/** Response shape of GET /api/v1/rate/rates (keys are externalIds). */
+export type RatesResponse = Record<string, Record<string, {
+    value?: number;
+    dailyChange?: number;
+    isExpired?: boolean;
+}> | null>;
+/** Extract a positive USD rate from the backend response. Pure, for tests. */
+export declare function parseUsdRate(response: RatesResponse, externalId: string): {
+    value: number;
+    isExpired: boolean;
+} | undefined;
+/** Test hook. */
+export declare function clearRatesCaches(): void;
+/**
+ * Resolve the rates id for an asset. Native coins come from the static map;
+ * tokens are looked up in the network's asset catalog by contract address.
+ */
+export declare function resolveExternalId(asset: {
+    network: NetworkId;
+    symbol?: string;
+    tokenAddress?: string;
+}, correlationId?: string): Promise<string | undefined>;
+/**
+ * USD price for one asset unit, or `undefined` when the asset or its rate is
+ * unknown / the backend is unreachable. Cached for ~60s per externalId.
+ */
+export declare function getUsdRate(asset: {
+    network: NetworkId;
+    symbol?: string;
+    tokenAddress?: string;
+}, correlationId?: string): Promise<number | undefined>;

package/dist/api/rates.js

@@ -0,0 +1,198 @@
+/**
+ * USD rates for policy limits (`maxPerTxUsd`).
+ *
+ * Same backend the mobile app uses:
+ *   GET {ratesApiUrl}/api/v1/rate/rates?Ids=<externalId,...>&Currencies=usd
+ * `Ids` are catalog `externalId`s (CoinGecko-style: "ethereum", "tether"), not
+ * symbols or contracts. Native coins map statically; tokens are resolved via the
+ * public static asset catalog
+ *   GET {staticResourcesUrl}/assets/main/blockchains/<net>/assets.mainnet.json
+ * matched by contract address (symbol as fallback).
+ *
+ * Callers must fail closed: `undefined` means "no rate", never "skip the check".
+ */
+import { getConfig } from "../config.js";
+import { logInfo, logWarn } from "../log.js";
+import { httpJson } from "./http.js";
+/** Verified against the mobile app's asset catalogs (init_assets_data). */
+export const NATIVE_EXTERNAL_ID = {
+    ethereum: "ethereum",
+    bsc: "binancecoin",
+    polygon: "polygon-ecosystem-token",
+    base: "ethereum",
+    arbitrum: "ethereum",
+    optimism: "ethereum",
+    avalanche: "avalanche-2",
+    tron: "tron",
+    bitcoin: "bitcoin",
+    litecoin: "litecoin",
+    doge: "dogecoin",
+    solana: "solana",
+    ton: "the-open-network",
+    xrp: "ripple",
+};
+/** Networks with a token catalog on static resources (litecoin/doge are native-only). */
+const CATALOG_NETWORKS = [
+    "ethereum",
+    "bsc",
+    "polygon",
+    "base",
+    "arbitrum",
+    "optimism",
+    "avalanche",
+    "tron",
+    "bitcoin",
+    "solana",
+    "ton",
+    "xrp",
+];
+/** Hex (EVM) contracts compare case-insensitively; base58 chains compare exactly. */
+export function sameTokenAddress(a, b) {
+    const ta = a.trim();
+    const tb = b.trim();
+    if (ta === tb)
+        return true;
+    if (ta.startsWith("0x") && tb.startsWith("0x")) {
+        return ta.toLowerCase() === tb.toLowerCase();
+    }
+    return false;
+}
+/** Find a token's externalId in a static catalog document. Pure, for tests. */
+export function findExternalIdInCatalog(doc, query) {
+    const assets = doc.assets ?? [];
+    if (query.tokenAddress) {
+        const byAddress = assets.find((a) => a.address && sameTokenAddress(a.address, query.tokenAddress));
+        if (byAddress?.externalId)
+            return byAddress.externalId;
+    }
+    if (query.symbol) {
+        const want = query.symbol.trim().toLowerCase();
+        const bySymbol = assets.find((a) => !a.address && a.symbol?.trim().toLowerCase() === want);
+        if (bySymbol?.externalId)
+            return bySymbol.externalId;
+    }
+    return undefined;
+}
+/** Extract a positive USD rate from the backend response. Pure, for tests. */
+export function parseUsdRate(response, externalId) {
+    const perCurrency = response[externalId];
+    if (!perCurrency)
+        return undefined;
+    const usdKey = Object.keys(perCurrency).find((k) => k.toLowerCase() === "usd");
+    if (!usdKey)
+        return undefined;
+    const rate = perCurrency[usdKey];
+    if (!rate || typeof rate.value !== "number" || !(rate.value > 0))
+        return undefined;
+    return { value: rate.value, isExpired: rate.isExpired === true };
+}
+const CATALOG_TTL_MS = 6 * 60 * 60 * 1000;
+const RATE_TTL_MS = 60 * 1000;
+/**
+ * Keep the policy check snappy: a send/swap should not hang for minutes when
+ * the rates backend is down — it will be rejected (fail closed) anyway.
+ */
+const FETCH_OPTS = { timeoutMs: 10000, retries: 1 };
+const catalogCache = new Map();
+const rateCache = new Map();
+/** Test hook. */
+export function clearRatesCaches() {
+    catalogCache.clear();
+    rateCache.clear();
+}
+async function fetchCatalog(network, correlationId) {
+    const cached = catalogCache.get(network);
+    if (cached && Date.now() - cached.at < CATALOG_TTL_MS)
+        return cached.doc;
+    const cfg = getConfig();
+    if (!cfg.staticResourcesUrl) {
+        logWarn("rates.catalog.no_url", { correlationId, network });
+        return undefined;
+    }
+    const url = `${cfg.staticResourcesUrl}/assets/main/blockchains/${network}/assets.mainnet.json`;
+    try {
+        const doc = await httpJson(url, { method: "GET" }, { correlationId, label: "rates.catalog", ...FETCH_OPTS });
+        catalogCache.set(network, { at: Date.now(), doc });
+        logInfo("rates.catalog.ok", {
+            correlationId,
+            network,
+            assets: doc.assets?.length ?? 0,
+        });
+        return doc;
+    }
+    catch (e) {
+        logWarn("rates.catalog.fail", {
+            correlationId,
+            network,
+            error: e instanceof Error ? e.message : String(e),
+        });
+        return undefined;
+    }
+}
+/**
+ * Resolve the rates id for an asset. Native coins come from the static map;
+ * tokens are looked up in the network's asset catalog by contract address.
+ */
+export async function resolveExternalId(asset, correlationId) {
+    if (!asset.tokenAddress)
+        return NATIVE_EXTERNAL_ID[asset.network];
+    if (!CATALOG_NETWORKS.includes(asset.network))
+        return undefined;
+    const doc = await fetchCatalog(asset.network, correlationId);
+    if (!doc)
+        return undefined;
+    return findExternalIdInCatalog(doc, {
+        symbol: asset.symbol,
+        tokenAddress: asset.tokenAddress,
+    });
+}
+/**
+ * USD price for one asset unit, or `undefined` when the asset or its rate is
+ * unknown / the backend is unreachable. Cached for ~60s per externalId.
+ */
+export async function getUsdRate(asset, correlationId) {
+    const externalId = await resolveExternalId(asset, correlationId);
+    if (!externalId) {
+        logWarn("rates.usd.no_external_id", {
+            correlationId,
+            network: asset.network,
+            symbol: asset.symbol,
+            tokenAddress: asset.tokenAddress,
+        });
+        return undefined;
+    }
+    const cached = rateCache.get(externalId);
+    if (cached && Date.now() - cached.at < RATE_TTL_MS)
+        return cached.value;
+    const cfg = getConfig();
+    if (!cfg.ratesApiUrl) {
+        logWarn("rates.usd.no_url", { correlationId, externalId });
+        return undefined;
+    }
+    const url = `${cfg.ratesApiUrl}/api/v1/rate/rates` +
+        `?Ids=${encodeURIComponent(externalId)}&Currencies=usd`;
+    let response;
+    try {
+        response = await httpJson(url, { method: "GET" }, { correlationId, label: "rates.usd", ...FETCH_OPTS });
+    }
+    catch (e) {
+        logWarn("rates.usd.fetch_fail", {
+            correlationId,
+            externalId,
+            error: e instanceof Error ? e.message : String(e),
+        });
+        return undefined;
+    }
+    const rate = parseUsdRate(response ?? {}, externalId);
+    if (!rate) {
+        logWarn("rates.usd.missing", { correlationId, externalId });
+        return undefined;
+    }
+    if (rate.isExpired) {
+        logWarn("rates.usd.expired", { correlationId, externalId, value: rate.value });
+    }
+    rateCache.set(externalId, { at: Date.now(), value: rate.value });
+    logInfo("rates.usd.ok", { correlationId, externalId, value: rate.value });
+    return rate.value;
+}
+//# sourceMappingURL=rates.js.map

package/dist/api/rates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rates.js","sourceRoot":"","sources":["../../src/api/rates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAA8B;IAC3D,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,aAAa;IAClB,OAAO,EAAE,yBAAyB;IAClC,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,kBAAkB;IACvB,GAAG,EAAE,QAAQ;CACd,CAAC;AAEF,yFAAyF;AACzF,MAAM,gBAAgB,GAAyB;IAC7C,UAAU;IACV,KAAK;IACL,SAAS;IACT,MAAM;IACN,UAAU;IACV,UAAU;IACV,WAAW;IACX,MAAM;IACN,SAAS;IACT,QAAQ;IACR,KAAK;IACL,KAAK;CACN,CAAC;AAYF,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,CAAS,EAAE,CAAS;IACnD,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACpB,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CACrC,GAAyB,EACzB,KAAiD;IAEjD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,YAAa,CAAC,CACrE,CAAC;QACF,IAAI,SAAS,EAAE,UAAU;YAAE,OAAO,SAAS,CAAC,UAAU,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,CAC7D,CAAC;QACF,IAAI,QAAQ,EAAE,UAAU;YAAE,OAAO,QAAQ,CAAC,UAAU,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAQD,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAC1B,QAAuB,EACvB,UAAkB;IAElB,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACnF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9B;;;GAGG;AACH,MAAM,UAAU,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAW,CAAC;AAE7D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAwD,CAAC;AACrF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyC,CAAC;AAEnE,iBAAiB;AACjB,MAAM,UAAU,gBAAgB;IAC9B,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAkB,EAClB,aAAsB;IAEtB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,cAAc;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IACzE,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC5B,OAAO,CAAC,sBAAsB,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,kBAAkB,4BAA4B,OAAO,sBAAsB,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,EAAE,aAAa,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,UAAU,EAAE,CACzD,CAAC;QACF,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,kBAAkB,EAAE;YAC1B,aAAa;YACb,OAAO;YACP,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,oBAAoB,EAAE;YAC5B,aAAa;YACb,OAAO;YACP,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAqE,EACrE,aAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,uBAAuB,CAAC,GAAG,EAAE;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAqE,EACrE,aAAsB;IAEtB,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,0BAA0B,EAAE;YAClC,aAAa;YACb,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,WAAW;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAExE,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,kBAAkB,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GACP,GAAG,GAAG,CAAC,WAAW,oBAAoB;QACtC,QAAQ,kBAAkB,CAAC,UAAU,CAAC,iBAAiB,CAAC;IAC1D,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CACvB,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE,CACrD,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,sBAAsB,EAAE;YAC9B,aAAa;YACb,UAAU;YACV,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,mBAAmB,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,CAAC,mBAAmB,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,cAAc,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC"}

package/dist/config.d.ts

@@ -38,6 +38,10 @@ export interface Config {
     relayUrl: string;
     /** Swap API host (`/swp/exchange/*`, `/swp/refs/*`). */
     swapProxyUrl: string;
+    /** Rates API host (`/api/v1/rate/rates`). Used only for USD policy limits. */
+    ratesApiUrl: string;
+    /** Static resources base with asset catalogs (`/assets/main/blockchains/...`). */
+    staticResourcesUrl: string;
     /** Optional relay API key (x-api-key). Empty string means header is omitted. */
     relayApiKey: string;
     /** App version string sent as x-iwt-cli / X-App-Version. */

package/dist/config.js

@@ -150,6 +150,10 @@ export function getConfig() {
         authUrl: envOr("IW_AUTH_URL", profile.authUrl),
         relayUrl: envOr("IW_RELAY_URL", profile.relayUrl),
         swapProxyUrl: envOr("IW_SWAP_PROXY_URL", profile.swapProxyUrl),
+        // Hosts live only in the baked configurations profile (no fallbacks in
+        // code). Empty string means USD policy limits fail closed.
+        ratesApiUrl: envOr("IW_RATES_API_URL", profile.ratesApiUrl ?? ""),
+        staticResourcesUrl: envOr("IW_STATIC_RESOURCES_URL", profile.staticResourcesUrl ?? ""),
         relayApiKey: resolveRelayApiKey(),
         appVersion: envOr("IW_APP_VERSION", `ironwallet-mcp/${packageVersion()}`),
         deviceId,

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAkB,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,uFAAuF;AACvF,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAClB,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvC,IAAI,EACJ,cAAc,CACf,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9E,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAGD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAgB,CAAC,GAAG,YAAY,EAAE,MAAM,CAAC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAgB,CAAC,GAAG,YAAY,CAAC,CAAC;AAEhE,MAAM,UAAU,OAAO,CAAC,OAAkB;IACxC,OAAO,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAgB,YAAY,CAAC,MAAM,CACpE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,MAAM,CACxC,CAAC;AAEF,MAAM,UAAU,OAAO,CAAC,OAAkB;IACxC,OAAO,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAkB;IAC7C,OAAQ,YAAqC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,aAAa,GAA8B;IAC/C,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,OAAkB;IAC7C,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAwDD,SAAS,KAAK,CAAC,GAAW,EAAE,QAAgB;IAC1C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,QAAiB;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjD,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,UAAU,EAAE,KAAK;QACjB,aAAa,EAAE,cAAc,EAAE;QAC/B,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,IAAI,EAAE;QACZ,EAAE,EAAE,MAAM,EAAE;QACZ,SAAS,EAAE,OAAO,EAAE;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC;QACrD,IAAI,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,CAAC,CAAC;YAAE,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,CAAC,CAAC;YAAE,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO,YAAY,QAAQ,aAAa,QAAQ,WAAW,MAAM,GAAG,CAAC;AACvE,CAAC;AAED,sFAAsF;AACtF,SAAS,MAAM,CAAC,GAAW,EAAE,QAAgB,EAAE,GAAW,EAAE,GAAW;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CACxB,WAAmC;IAEnC,MAAM,IAAI,GAA2B,EAAE,GAAG,WAAW,EAAE,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,MAAM,UAAU,SAAS;IACvB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,yBAAyB,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC;IAC1B,MAAM,GAAG;QACP,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC;QAC9C,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC;QACjD,YAAY,EAAE,KAAK,CAAC,mBAAmB,EAAE,OAAO,CAAC,YAAY,CAAC;QAC9D,WAAW,EAAE,kBAAkB,EAAE;QACjC,UAAU,EAAE,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,cAAc,EAAE,EAAE,CAAC;QACzE,QAAQ;QACR,iBAAiB,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QACrD,YAAY,EAAE,KAAK,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,CAAC;QAC9D,UAAU,EAAE,KAAK,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC;QACxD,WAAW,EAAE,kBAAkB,EAAE;QACjC,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC;QACjD,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC;QACpD,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC;QACzD,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC;QAC3D,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC;QACpD,YAAY,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC;QAC1D,SAAS,EAAE,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC;QACjD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;QAChE,6EAA6E;QAC7E,yEAAyE;QACzE,oBAAoB,EAAE,MAAM,CAAC,4BAA4B,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;QAC/E,WAAW,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC;KACzC,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ;QAAE,OAAO;IAClC,MAAM,IAAI,KAAK,CACb,MAAM,KAAK,MAAM;QACf,CAAC,CAAC,yDAAyD;QAC3D,CAAC,CAAC,0DAA0D,CAC/D,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,OAAO,GAA2B;QACtC,WAAW,EAAE,GAAG,CAAC,UAAU;QAC3B,eAAe,EAAE,GAAG,CAAC,UAAU;QAC/B,aAAa,EAAE,GAAG,CAAC,QAAQ;QAC3B,sBAAsB,EAAE,GAAG,CAAC,iBAAiB;QAC7C,mEAAmE;QACnE,iBAAiB,EAAE,GAAG,CAAC,YAAY;QACnC,8EAA8E;QAC9E,eAAe,EAAE,GAAG,CAAC,UAAU;QAC/B,kBAAkB,EAAE,IAAI;KACzB,CAAC;IACF,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;IAC5D,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAkB,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,uFAAuF;AACvF,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAClB,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACvC,IAAI,EACJ,cAAc,CACf,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9E,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAGD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAgB,CAAC,GAAG,YAAY,EAAE,MAAM,CAAC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAgB,CAAC,GAAG,YAAY,CAAC,CAAC;AAEhE,MAAM,UAAU,OAAO,CAAC,OAAkB;IACxC,OAAO,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAgB,YAAY,CAAC,MAAM,CACpE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,MAAM,CACxC,CAAC;AAEF,MAAM,UAAU,OAAO,CAAC,OAAkB;IACxC,OAAO,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAkB;IAC7C,OAAQ,YAAqC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,aAAa,GAA8B;IAC/C,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,OAAkB;IAC7C,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AA4DD,SAAS,KAAK,CAAC,GAAW,EAAE,QAAgB;IAC1C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,QAAiB;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjD,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,UAAU,EAAE,KAAK;QACjB,aAAa,EAAE,cAAc,EAAE;QAC/B,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,IAAI,EAAE;QACZ,EAAE,EAAE,MAAM,EAAE;QACZ,SAAS,EAAE,OAAO,EAAE;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC;QACrD,IAAI,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,CAAC,CAAC;YAAE,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,CAAC,CAAC;YAAE,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO,YAAY,QAAQ,aAAa,QAAQ,WAAW,MAAM,GAAG,CAAC;AACvE,CAAC;AAED,sFAAsF;AACtF,SAAS,MAAM,CAAC,GAAW,EAAE,QAAgB,EAAE,GAAW,EAAE,GAAW;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CACxB,WAAmC;IAEnC,MAAM,IAAI,GAA2B,EAAE,GAAG,WAAW,EAAE,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,MAAM,UAAU,SAAS;IACvB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,yBAAyB,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC;IAC1B,MAAM,GAAG;QACP,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC;QAC9C,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC;QACjD,YAAY,EAAE,KAAK,CAAC,mBAAmB,EAAE,OAAO,CAAC,YAAY,CAAC;QAC9D,uEAAuE;QACvE,2DAA2D;QAC3D,WAAW,EAAE,KAAK,CAAC,kBAAkB,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QACjE,kBAAkB,EAAE,KAAK,CAAC,yBAAyB,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;QACtF,WAAW,EAAE,kBAAkB,EAAE;QACjC,UAAU,EAAE,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,cAAc,EAAE,EAAE,CAAC;QACzE,QAAQ;QACR,iBAAiB,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QACrD,YAAY,EAAE,KAAK,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,CAAC;QAC9D,UAAU,EAAE,KAAK,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC;QACxD,WAAW,EAAE,kBAAkB,EAAE;QACjC,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC;QACjD,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC;QACpD,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC;QACzD,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC;QAC3D,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC;QACpD,YAAY,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC;QAC1D,SAAS,EAAE,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC;QACjD,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;QAChE,6EAA6E;QAC7E,yEAAyE;QACzE,oBAAoB,EAAE,MAAM,CAAC,4BAA4B,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;QAC/E,WAAW,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC;KACzC,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ;QAAE,OAAO;IAClC,MAAM,IAAI,KAAK,CACb,MAAM,KAAK,MAAM;QACf,CAAC,CAAC,yDAAyD;QAC3D,CAAC,CAAC,0DAA0D,CAC/D,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,OAAO,GAA2B;QACtC,WAAW,EAAE,GAAG,CAAC,UAAU;QAC3B,eAAe,EAAE,GAAG,CAAC,UAAU;QAC/B,aAAa,EAAE,GAAG,CAAC,QAAQ;QAC3B,sBAAsB,EAAE,GAAG,CAAC,iBAAiB;QAC7C,mEAAmE;QACnE,iBAAiB,EAAE,GAAG,CAAC,YAAY;QACnC,8EAA8E;QAC9E,eAAe,EAAE,GAAG,CAAC,UAAU;QAC/B,kBAAkB,EAAE,IAAI;KACzB,CAAC;IACF,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;IAC5D,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/consent/copy.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Canonical MCP consent copy (English). Chat, create_wallets, and the local
+ * manager must show this text. Bump CONSENT_VERSION when the wording changes.
+ */
+export declare const CONSENT_VERSION = "v1";
+export declare const CONSENT_TITLE = "Before connecting an AI agent to your wallet";
+export declare const CONSENT_LEAD = "Connecting MCP lets the AI agent view balances, transfer assets, and swap on behalf of this wallet.";
+export declare const CONSENT_BULLETS: readonly ["By default the agent can send funds and swap without extra confirmation on each operation.", "Use a dedicated wallet with a small balance, not your main or savings wallet.", "The recovery phrase stays encrypted on this device. Loss or compromise means permanent loss of access to the funds.", "IronWallet is not responsible for the AI agent's actions, misconfiguration, or loss of funds from using this feature.", "You can ask the agent to set limits in chat (read-only, a per-transaction USD limit, a transfer recipient allow-list)."];
+export declare const CONSENT_CHECKBOX = "I understand the risks and want to continue";
+export declare const CONSENT_CHAT_INSTRUCTION = "Show this text in full in chat. Do not shorten it. After the user explicitly confirms, call accept_mcp_consent with accepted=true, or open the wallet manager so they can accept there.";
+export declare function consentDocument(): {
+    version: string;
+    title: string;
+    lead: string;
+    bullets: readonly string[];
+    checkbox: string;
+    instruction: string;
+};

package/dist/consent/copy.js

@@ -0,0 +1,27 @@
+/**
+ * Canonical MCP consent copy (English). Chat, create_wallets, and the local
+ * manager must show this text. Bump CONSENT_VERSION when the wording changes.
+ */
+export const CONSENT_VERSION = "v1";
+export const CONSENT_TITLE = "Before connecting an AI agent to your wallet";
+export const CONSENT_LEAD = "Connecting MCP lets the AI agent view balances, transfer assets, and swap on behalf of this wallet.";
+export const CONSENT_BULLETS = [
+    "By default the agent can send funds and swap without extra confirmation on each operation.",
+    "Use a dedicated wallet with a small balance, not your main or savings wallet.",
+    "The recovery phrase stays encrypted on this device. Loss or compromise means permanent loss of access to the funds.",
+    "IronWallet is not responsible for the AI agent's actions, misconfiguration, or loss of funds from using this feature.",
+    "You can ask the agent to set limits in chat (read-only, a per-transaction USD limit, a transfer recipient allow-list).",
+];
+export const CONSENT_CHECKBOX = "I understand the risks and want to continue";
+export const CONSENT_CHAT_INSTRUCTION = "Show this text in full in chat. Do not shorten it. After the user explicitly confirms, call accept_mcp_consent with accepted=true, or open the wallet manager so they can accept there.";
+export function consentDocument() {
+    return {
+        version: CONSENT_VERSION,
+        title: CONSENT_TITLE,
+        lead: CONSENT_LEAD,
+        bullets: CONSENT_BULLETS,
+        checkbox: CONSENT_CHECKBOX,
+        instruction: CONSENT_CHAT_INSTRUCTION,
+    };
+}
+//# sourceMappingURL=copy.js.map

package/dist/consent/copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copy.js","sourceRoot":"","sources":["../../src/consent/copy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC,MAAM,CAAC,MAAM,aAAa,GAAG,8CAA8C,CAAC;AAE5E,MAAM,CAAC,MAAM,YAAY,GACvB,qGAAqG,CAAC;AAExG,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,4FAA4F;IAC5F,+EAA+E;IAC/E,qHAAqH;IACrH,uHAAuH;IACvH,wHAAwH;CAChH,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AAE9E,MAAM,CAAC,MAAM,wBAAwB,GACnC,yLAAyL,CAAC;AAE5L,MAAM,UAAU,eAAe;IAQ7B,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,eAAe;QACxB,QAAQ,EAAE,gBAAgB;QAC1B,WAAW,EAAE,wBAAwB;KACtC,CAAC;AACJ,CAAC"}

package/dist/consent/store.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Durable MCP consent next to the keystore. Written by accept_mcp_consent (chat)
+ * or the local manager. create / import stay blocked until the current version
+ * is accepted.
+ */
+import { consentDocument } from "./copy.js";
+export declare const CONSENT_FILE = "mcp-consent.json";
+export type ConsentChannel = "chat" | "manager";
+export interface ConsentRecord {
+    version: string;
+    acceptedAt: string;
+    channel: ConsentChannel;
+}
+export declare function consentFilePath(dir?: string): string;
+export declare function readConsent(dir?: string): ConsentRecord | undefined;
+export declare function hasCurrentConsent(dir?: string): boolean;
+export declare function recordConsent(channel: ConsentChannel, dir?: string): ConsentRecord;
+/** Payload for agents when create/import is blocked. */
+export declare function consentRequiredPayload(): {
+    needs_consent: true;
+    accept: "accept_mcp_consent";
+    consent: ReturnType<typeof consentDocument>;
+};

package/dist/consent/store.js

@@ -0,0 +1,63 @@
+/**
+ * Durable MCP consent next to the keystore. Written by accept_mcp_consent (chat)
+ * or the local manager. create / import stay blocked until the current version
+ * is accepted.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { resolveKeystoreDir } from "../local-secrets.js";
+import { restrictPrivateFile } from "../restrict-private-file.js";
+import { CONSENT_VERSION, consentDocument } from "./copy.js";
+export const CONSENT_FILE = "mcp-consent.json";
+export function consentFilePath(dir = resolveKeystoreDir()) {
+    return join(dir, CONSENT_FILE);
+}
+export function readConsent(dir) {
+    const path = consentFilePath(dir);
+    if (!existsSync(path))
+        return undefined;
+    try {
+        const raw = JSON.parse(readFileSync(path, "utf8"));
+        if (typeof raw.version !== "string" || !raw.version.trim())
+            return undefined;
+        if (typeof raw.acceptedAt !== "string" || !raw.acceptedAt.trim())
+            return undefined;
+        if (raw.channel !== "chat" && raw.channel !== "manager")
+            return undefined;
+        return {
+            version: raw.version.trim(),
+            acceptedAt: raw.acceptedAt,
+            channel: raw.channel,
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+export function hasCurrentConsent(dir) {
+    const record = readConsent(dir);
+    return record?.version === CONSENT_VERSION;
+}
+export function recordConsent(channel, dir) {
+    const root = dir ?? resolveKeystoreDir();
+    if (!existsSync(root))
+        mkdirSync(root, { recursive: true });
+    const record = {
+        version: CONSENT_VERSION,
+        acceptedAt: new Date().toISOString(),
+        channel,
+    };
+    const path = consentFilePath(root);
+    writeFileSync(path, `${JSON.stringify(record, null, 2)}\n`, { mode: 0o600 });
+    restrictPrivateFile(path);
+    return record;
+}
+/** Payload for agents when create/import is blocked. */
+export function consentRequiredPayload() {
+    return {
+        needs_consent: true,
+        accept: "accept_mcp_consent",
+        consent: consentDocument(),
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/consent/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/consent/store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE7D,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAU/C,MAAM,UAAU,eAAe,CAAC,MAAc,kBAAkB,EAAE;IAChE,OAAO,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA2B,CAAC;QAC7E,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC;QAC7E,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC;QACnF,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1E,OAAO;YACL,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;YAC3B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,MAAM,EAAE,OAAO,KAAK,eAAe,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAuB,EAAE,GAAY;IACjE,MAAM,IAAI,GAAG,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,eAAe;QACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,OAAO;KACR,CAAC;IACF,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,sBAAsB;IAKpC,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,MAAM,EAAE,oBAAoB;QAC5B,OAAO,EAAE,eAAe,EAAE;KAC3B,CAAC;AACJ,CAAC"}

package/dist/generated/env-config.js

@@ -18,6 +18,8 @@ export const BAKED_ENV = {
     "solanaRpcUrl": "https://api.mainnet-beta.solana.com",
     "tonApiUrl": "https://toncenter.com/api/v2",
     "xrpRpcUrl": "https://xrplcluster.com",
-    "bitcoinTestnet": false
+    "bitcoinTestnet": false,
+    "ratesApiUrl": "https://rates.iwio.app",
+    "staticResourcesUrl": "https://resources.iwio.app/Ironwallet"
 };
 //# sourceMappingURL=env-config.js.map

package/dist/generated/env-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-config.js","sourceRoot":"","sources":["../../src/generated/env-config.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,SAAS,GAAoB;IACxC,SAAS,EAAE,uBAAuB;IAClC,UAAU,EAAE,0BAA0B;IACtC,cAAc,EAAE,kBAAkB;IAClC,YAAY,EAAE;QACZ,UAAU,EAAE,qCAAqC;QACjD,KAAK,EAAE,gCAAgC;QACvC,SAAS,EAAE,wCAAwC;QACnD,MAAM,EAAE,iCAAiC;QACzC,UAAU,EAAE,yCAAyC;QACrD,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,8CAA8C;KAC5D;IACD,YAAY,EAAE,yBAAyB;IACvC,eAAe,EAAE,8BAA8B;IAC/C,gBAAgB,EAAE,+BAA+B;IACjD,YAAY,EAAE,0CAA0C;IACxD,cAAc,EAAE,qCAAqC;IACrD,WAAW,EAAE,8BAA8B;IAC3C,WAAW,EAAE,yBAAyB;IACtC,gBAAgB,EAAE,KAAK;CACf,CAAC"}
+{"version":3,"file":"env-config.js","sourceRoot":"","sources":["../../src/generated/env-config.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,SAAS,GAAoB;IACxC,SAAS,EAAE,uBAAuB;IAClC,UAAU,EAAE,0BAA0B;IACtC,cAAc,EAAE,kBAAkB;IAClC,YAAY,EAAE;QACZ,UAAU,EAAE,qCAAqC;QACjD,KAAK,EAAE,gCAAgC;QACvC,SAAS,EAAE,wCAAwC;QACnD,MAAM,EAAE,iCAAiC;QACzC,UAAU,EAAE,yCAAyC;QACrD,UAAU,EAAE,qCAAqC;QACjD,WAAW,EAAE,8CAA8C;KAC5D;IACD,YAAY,EAAE,yBAAyB;IACvC,eAAe,EAAE,8BAA8B;IAC/C,gBAAgB,EAAE,+BAA+B;IACjD,YAAY,EAAE,0CAA0C;IACxD,cAAc,EAAE,qCAAqC;IACrD,WAAW,EAAE,8BAA8B;IAC3C,WAAW,EAAE,yBAAyB;IACtC,gBAAgB,EAAE,KAAK;IACvB,aAAa,EAAE,wBAAwB;IACvC,oBAAoB,EAAE,uCAAuC;CACrD,CAAC"}

package/dist/generated/env-profile.d.ts

@@ -3,6 +3,10 @@ export interface BakedEnvProfile {
     authUrl: string;
     relayUrl: string;
     swapProxyUrl: string;
+    /** Rates API host (`/api/v1/rate/*`). Optional until configurations ships it. */
+    ratesApiUrl?: string;
+    /** Static resources base for asset catalogs (`/assets/main/blockchains/...`). */
+    staticResourcesUrl?: string;
     evmRpcUrls: Record<string, string>;
     tronApiUrl: string;
     bitcoinApiUrl: string;

package/dist/keystore/types.d.ts

@@ -4,11 +4,16 @@ export interface WalletPolicy {
     enabled: boolean;
     /** If true, send_transfer and execute_swap are rejected. */
     readOnly?: boolean;
-    /** Max amount per send_transfer or execute_swap (decimal string, asset units). */
-    maxPerTx?: string;
+    /**
+     * Max USD value per send_transfer or execute_swap (decimal string, e.g. "50").
+     * Converted at the moment of the operation via the rates backend; if the rate
+     * is unavailable the operation is rejected (fail closed).
+     */
+    maxPerTxUsd?: string;
     /**
      * Allowed transfer destinations. Empty/undefined = no whitelist.
-     * When set, execute_swap is rejected (swap routers are not on this list).
+     * Applies to send_transfer only; execute_swap is exempt because the bought
+     * asset is always paid out to the wallet's own keystore address.
      */
     allowedRecipients?: string[];
 }

package/dist/policy.d.ts

@@ -1,24 +1,54 @@
 /**
  * Optional per-wallet spending policy. Disabled by default (sends autonomously).
  * When `policy.enabled` is set, both `send_transfer` and `execute_swap` check it
- * before signing.
+ * before signing. `maxPerTxUsd` converts the amount via the rates backend at the
+ * moment of the operation and fails closed when no rate is available.
  */
 import type { WalletEntry, WalletPolicy } from "./keystore/types.js";
 import type { NetworkId } from "./config.js";
 export interface PolicyCheck {
     kind: "transfer" | "swap";
     network: NetworkId;
-    /** Decimal string in asset units. Required to enforce `maxPerTx`. */
-    amount?: string;
     /** Transfer destination. Ignored for swaps. */
     toAddress?: string;
 }
+export interface UsdLimitCheck {
+    kind: "transfer" | "swap";
+    network: NetworkId;
+    /** Decimal string in asset units (final amount that will be signed). */
+    amount: string;
+    /** Asset symbol, used for catalog fallback matching and messages. */
+    symbol?: string;
+    /** Token contract. Omit for the native coin. */
+    tokenAddress?: string;
+    correlationId?: string;
+}
 /**
  * Compare two non-negative decimal strings without floating point.
  * Returns < 0 if a < b, 0 if equal, > 0 if a > b.
  */
 export declare function compareDecimalAmount(a: string, b: string): number;
+/** Render a float (e.g. a JSON rate) as a plain decimal string, no exponent. */
+export declare function numberToDecimalString(n: number): string;
+/** Multiply two non-negative decimal strings exactly (BigInt, no float). */
+export declare function multiplyDecimalAmounts(a: string, b: string): string;
 /** Always-present policy for `list_wallets` (`enabled: false` when unset). */
 export declare function listWalletPolicy(policy: WalletPolicy | undefined): WalletPolicy;
 /** Throws with a clear message if the operation violates the wallet policy. */
 export declare function enforcePolicy(entry: WalletEntry, check: PolicyCheck): void;
+/** Pure part of the USD check: amount × rate vs limit. Throws on violation. */
+export declare function assertUsdWithinLimit(opts: {
+    wallet: string;
+    kind: "transfer" | "swap";
+    amount: string;
+    rate: number;
+    maxPerTxUsd: string;
+    assetLabel: string;
+}): {
+    usdValue: string;
+};
+/**
+ * Enforce `maxPerTxUsd` right before signing. Fail closed: if the limit is set
+ * and the USD rate cannot be resolved, the operation is rejected.
+ */
+export declare function enforceUsdLimit(entry: WalletEntry, check: UsdLimitCheck): Promise<void>;