@pushchain/core 6.0.27-alpha.2 → 6.0.27-alpha.4

package/src/lib/agentic/management/prepare.js

@@ -12,72 +12,97 @@ const universal_1 = require("../codec/universal");
 const deployments_1 = require("../deployments");
 const capabilities_1 = require("../capabilities");
 const errors_1 = require("../errors");
+const destination_1 = require("./destination");
 const prc20_metadata_1 = require("../contracts/prc20-metadata");
 /** Resolve wallet-dependent wire inputs without signing or mutating authority. */
 async function prepareWalletRules(runtime, gen, owner, wallet, inputs, snap) {
-    const rules = await Promise.all(inputs.map((rule) => (0, public_rule_1.isPublicRule)(rule) ? (0, public_rule_1.normalizePublicRule)(rule, wallet, runtime) : rule));
+    const rules = await Promise.all(inputs.map(async (rule, ruleIndex) => {
+        try {
+            return (0, public_rule_1.isPublicRule)(rule)
+                ? await (0, public_rule_1.normalizePublicRule)(rule, wallet, runtime)
+                : rule;
+        }
+        catch (error) {
+            throw (0, errors_1.ruleErrorContext)(error, ruleIndex, rule?.chainNamespace);
+        }
+    }));
     if (rules.length)
         await (0, deployments_1.verifyPolicyVersion)(runtime.reader, gen);
     const svm = new Map();
     const universal = new Map();
-    for (const rule of rules) {
-        if (rule && (0, rules_1.isSolanaRule)(rule)) {
-            (0, capabilities_1.requireCapability)(gen.capabilities, capabilities_1.AgenticCapability.UNIVERSAL_SVM_RULES);
-            svm.set(rule, await (0, svm_public_1.preparePublicSvmRule)(runtime, snap, wallet, rule));
-            continue;
-        }
-        if (!(0, rules_1.isUniversalRule)(rule))
-            continue;
-        if (rule.chainNamespace.startsWith('solana:'))
-            (0, capabilities_1.requireCapability)(gen.capabilities, capabilities_1.AgenticCapability.UNIVERSAL_SVM_RULES);
-        (0, universal_1.validateUniversalRuleShape)(rule, runtime.nowSeconds());
-        (0, capabilities_1.requireCapability)(gen.capabilities, rule.chainNamespace.startsWith('solana:')
-            ? capabilities_1.AgenticCapability.UNIVERSAL_SVM_RULES
-            : capabilities_1.AgenticCapability.UNIVERSAL_EVM_RULES);
-        const chain = rule.chainNamespace;
-        if (chain_1.CHAIN_INFO[chain]?.vm !== enums_1.VM.EVM)
-            throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INVALID_RULE, `unsupported EVM rule chain ${chain}`);
-        const { cea } = await runtime.resolveCEA(wallet, chain);
-        const assets = rule.assets.length
-            ? rule.assets.map((a) => ({
-                token: typeof a.token === 'string' && (0, viem_1.getAddress)(a.token) === viem_1.zeroAddress
-                    ? undefined
-                    : a.token,
-                maxPerCall: a.maxPerCall,
-                maxTotal: (0, defaults_1.withDefault)(a.maxTotal, defaults_1.AGENTIC_DEFAULTS.universal.assetMaxTotal),
-            }))
-            : [{ token: undefined, maxPerCall: BigInt(0), maxTotal: BigInt(0) }];
-        const resolved = [];
-        for (const asset of assets) {
-            const token = asset.token === undefined
-                ? await (0, prc20_metadata_1.readGasPrc20)(snap, chain)
-                : runtime.resolvePrc20(asset.token, chain);
-            if (token === viem_1.zeroAddress)
-                throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INVALID_RULE, `no gas PRC20 registered for ${chain}`);
-            const namespace = await snap.read(token, prc20_metadata_1.PRC20_SOURCE_ABI, 'SOURCE_CHAIN_NAMESPACE');
-            if (namespace !== chain)
-                throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.ASSET_CHAIN_MISMATCH, `PRC20 ${token} belongs to ${namespace}, not ${chain}`);
-            if (asset.token !== undefined) {
-                const expected = typeof asset.token === 'string'
-                    ? (0, viem_1.getAddress)(asset.token)
-                    : (0, viem_1.getAddress)(asset.token.address);
-                if (expected === viem_1.zeroAddress) {
-                    if ((await (0, prc20_metadata_1.readGasPrc20)(snap, chain)) !== (0, viem_1.getAddress)(token))
-                        throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INVALID_RULE, 'resolved token is not the registered native gas token');
-                }
+    for (const [ruleIndex, rule] of rules.entries()) {
+        try {
+            if (rule && (0, rules_1.isSolanaRule)(rule)) {
+                (0, capabilities_1.requireCapability)(gen.capabilities, capabilities_1.AgenticCapability.UNIVERSAL_SVM_RULES);
+                svm.set(rule, await (0, svm_public_1.preparePublicSvmRule)(runtime, snap, wallet, rule));
+                continue;
+            }
+            if (!(0, rules_1.isUniversalRule)(rule))
+                continue;
+            if (rule.chainNamespace.startsWith('solana:'))
+                (0, capabilities_1.requireCapability)(gen.capabilities, capabilities_1.AgenticCapability.UNIVERSAL_SVM_RULES);
+            (0, universal_1.validateUniversalRuleShape)(rule, runtime.nowSeconds());
+            (0, capabilities_1.requireCapability)(gen.capabilities, rule.chainNamespace.startsWith('solana:')
+                ? capabilities_1.AgenticCapability.UNIVERSAL_SVM_RULES
+                : capabilities_1.AgenticCapability.UNIVERSAL_EVM_RULES);
+            const chain = rule.chainNamespace;
+            if (chain_1.CHAIN_INFO[chain]?.vm !== enums_1.VM.EVM)
+                throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INVALID_RULE, `unsupported EVM rule chain ${chain}`);
+            const cea = await (0, destination_1.resolveRuleDestination)(runtime, wallet, chain);
+            const assets = rule.assets.length
+                ? rule.assets.map((a) => ({
+                    token: typeof a.token === 'string' && (0, viem_1.getAddress)(a.token) === viem_1.zeroAddress
+                        ? undefined
+                        : a.token,
+                    maxPerCall: a.maxPerCall,
+                    maxTotal: (0, defaults_1.withDefault)(a.maxTotal, defaults_1.AGENTIC_DEFAULTS.universal.assetMaxTotal),
+                }))
+                : [{ token: undefined, maxPerCall: BigInt(0), maxTotal: BigInt(0) }];
+            const resolved = [];
+            for (const [assetIndex, asset] of assets.entries()) {
+                let token;
+                if (asset.token === undefined)
+                    token = await (0, prc20_metadata_1.readGasPrc20)(snap, chain);
                 else {
-                    const source = await (0, prc20_metadata_1.readOriginToken)(snap, token, chain);
-                    if (source !== expected)
-                        throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INVALID_RULE, `PRC20 ${token} represents ${source}, not requested token ${expected}`);
+                    try {
+                        token = runtime.resolvePrc20(asset.token, chain);
+                    }
+                    catch (cause) {
+                        throw (0, errors_1.tokenRouteUnavailable)(cause, typeof asset.token === 'string'
+                            ? asset.token
+                            : asset.token.address, chain, assetIndex);
+                    }
+                }
+                if (token === viem_1.zeroAddress)
+                    throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INVALID_RULE, `no gas PRC20 registered for ${chain}`);
+                const namespace = await snap.read(token, prc20_metadata_1.PRC20_SOURCE_ABI, 'SOURCE_CHAIN_NAMESPACE');
+                if (namespace !== chain)
+                    throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.ASSET_CHAIN_MISMATCH, `PRC20 ${token} belongs to ${namespace}, not ${chain}`);
+                if (asset.token !== undefined) {
+                    const expected = typeof asset.token === 'string'
+                        ? (0, viem_1.getAddress)(asset.token)
+                        : (0, viem_1.getAddress)(asset.token.address);
+                    if (expected === viem_1.zeroAddress) {
+                        if ((await (0, prc20_metadata_1.readGasPrc20)(snap, chain)) !== (0, viem_1.getAddress)(token))
+                            throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INVALID_RULE, 'resolved token is not the registered native gas token');
+                    }
+                    else {
+                        const source = await (0, prc20_metadata_1.readOriginToken)(snap, token, chain);
+                        if (source !== expected)
+                            throw new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INVALID_RULE, `PRC20 ${token} represents ${source}, not requested token ${expected}`);
+                    }
                 }
+                resolved.push({
+                    token: (0, viem_1.getAddress)(token),
+                    maxPerCall: asset.maxPerCall,
+                    maxTotal: asset.maxTotal,
+                });
             }
-            resolved.push({
-                token: (0, viem_1.getAddress)(token),
-                maxPerCall: asset.maxPerCall,
-                maxTotal: asset.maxTotal,
-            });
+            universal.set(rule, { expectedCEA: (0, viem_1.getAddress)(cea), assets: resolved });
+        }
+        catch (error) {
+            throw (0, errors_1.ruleErrorContext)(error, ruleIndex, rule?.chainNamespace);
         }
-        universal.set(rule, { expectedCEA: (0, viem_1.getAddress)(cea), assets: resolved });
     }
     return (0, rules_1.prepareRules)(rules, {
         owner,

package/src/lib/agentic/management/svm-public.js

@@ -36,6 +36,7 @@ const svm_accounts_1 = require("../codec/svm-accounts");
 const svm_idl_1 = require("../codec/svm-idl");
 const svm_terms_1 = require("../codec/svm-terms");
 const svm_terms_2 = require("../codec/svm-terms");
+const errors_1 = require("../errors");
 function svmMetadata(runtime) {
     return (runtime.svmMetadata ??
         (0, svm_metadata_1.createSvmMetadataProvider)({
@@ -62,7 +63,7 @@ async function preparePublicSvmRule(runtime, snap, wallet, rule) {
     const caps = [];
     const tokenAccounts = new Map(), mints = new Set();
     const sources = [];
-    for (const asset of requested) {
+    for (const [assetIndex, asset] of requested.entries()) {
         const source = typeof asset.token === 'string' ? asset.token : asset.token?.address;
         if (typeof source !== 'string')
             throw (0, svm_terms_1.svmInvalid)('asset token requires an address');
@@ -77,9 +78,17 @@ async function preparePublicSvmRule(runtime, snap, wallet, rule) {
         const sourceToken = typeof asset.token === 'string' && key
             ? new web3_js_1.PublicKey((0, viem_1.hexToBytes)(key)).toBase58()
             : asset.token;
-        const token = native
-            ? await (0, prc20_metadata_1.readGasPrc20)(snap, chain)
-            : runtime.resolvePrc20(sourceToken, chain);
+        let token;
+        if (native)
+            token = await (0, prc20_metadata_1.readGasPrc20)(snap, chain);
+        else {
+            try {
+                token = runtime.resolvePrc20(sourceToken, chain);
+            }
+            catch (cause) {
+                throw (0, errors_1.tokenRouteUnavailable)(cause, source, chain, assetIndex);
+            }
+        }
         if (caps.some((c) => c.token === (0, viem_1.getAddress)(token)))
             throw (0, svm_terms_1.svmInvalid)('duplicate SVM asset');
         caps.push({

package/src/lib/agentic/presets/catalog.d.ts

@@ -25,6 +25,8 @@ export interface PresetCallDefinition extends RuleCall {
 /** Internal catalog: reviewed addresses and explicit calls only; never fetched at runtime. */
 export interface PresetChainDefinition {
     chainNamespace: ForeignChainNamespace;
+    /** Used with the bundled permission policy only when assets is omitted. */
+    defaultTokens?: readonly Address[];
     allowedCalls: readonly PresetCallDefinition[];
     /** Static single-hop routers; incomplete pairs return zero-input-cap review calls. */
     swapRouters?: readonly {

package/src/lib/agentic/presets/catalog.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.PRESET_CATALOG = void 0;
 const viem_1 = require("viem");
 const aave_reserves_1 = require("./aave-reserves");
+const default_tokens_1 = require("./default-tokens");
 /** Mainnet and testnet templates from the October 15 Notion export and protocol sources.
  * Read-only deployment/code evidence and exclusions: plan/agw/research/preset-catalog-2026-10-15/.
  * Mainnet entries are templates only; no mainnet deployment or execution guarantee.
@@ -153,6 +154,7 @@ exports.PRESET_CATALOG = [
             ],
         ].map(([chain, router, app]) => ({
             chainNamespace: chain,
+            defaultTokens: default_tokens_1.DEX_DEFAULT_TOKENS[chain],
             allowedCalls: [],
             swapRouters: [{ address: address(router), app }],
             approvals: [{ spender: address(router), app }],
@@ -169,6 +171,7 @@ exports.PRESET_CATALOG = [
                 ['eip155:56', '0x6807dc923806fE8Fd134338EABCA509979a7e0cB'],
             ].map(([chainNamespace, pool]) => ({
                 chainNamespace,
+                defaultTokens: default_tokens_1.LENDING_DEFAULT_TOKENS[chainNamespace],
                 allowedCalls: [
                     ...aave(address(pool), chainNamespace),
                     ...mainnetMarkets(chainNamespace).allowedCalls,
@@ -184,6 +187,7 @@ exports.PRESET_CATALOG = [
             })),
             {
                 chainNamespace: 'eip155:11155111',
+                defaultTokens: default_tokens_1.LENDING_DEFAULT_TOKENS['eip155:11155111'],
                 allowedCalls: aave(sepoliaPool, 'eip155:11155111'),
                 approvals: [
                     {
@@ -195,6 +199,7 @@ exports.PRESET_CATALOG = [
             },
             {
                 chainNamespace: 'eip155:421614',
+                defaultTokens: default_tokens_1.LENDING_DEFAULT_TOKENS['eip155:421614'],
                 allowedCalls: aave(arbitrumPool, 'eip155:421614'),
                 approvals: [
                     {
@@ -206,6 +211,7 @@ exports.PRESET_CATALOG = [
             },
             {
                 chainNamespace: 'eip155:84532',
+                defaultTokens: default_tokens_1.LENDING_DEFAULT_TOKENS['eip155:84532'],
                 allowedCalls: [
                     ...aave(basePool, 'eip155:84532'),
                     ...market(moonUSDBC, 'Moonwell mUSDbC', address('0x4616975f7E6045FD9737e95bC527e9e14c727BD2')),
@@ -238,6 +244,7 @@ exports.PRESET_CATALOG = [
             },
             {
                 chainNamespace: 'eip155:97',
+                defaultTokens: default_tokens_1.LENDING_DEFAULT_TOKENS['eip155:97'],
                 allowedCalls: [
                     ...market(venusUSDT, 'Venus vUSDT', address('0xA11c8D9DC9b66E209Ef60F0C8D969D3CD988782c')),
                     ...market(venusUSDC, 'Venus vUSDC', address('0x16227D60f7a0e586C66B005219dfc887D13C9531')),
@@ -270,6 +277,7 @@ exports.PRESET_CATALOG = [
         chains: [
             {
                 chainNamespace: 'eip155:1',
+                defaultTokens: default_tokens_1.STAKING_DEFAULT_TOKENS['eip155:1'],
                 allowedCalls: [
                     {
                         target: stETH,
@@ -333,6 +341,7 @@ exports.PRESET_CATALOG = [
             },
             {
                 chainNamespace: 'eip155:11155111',
+                defaultTokens: default_tokens_1.STAKING_DEFAULT_TOKENS['eip155:11155111'],
                 allowedCalls: [
                     {
                         target: eigen,

package/src/lib/agentic/presets/default-policy.d.ts

@@ -0,0 +1,9 @@
+import type { Address } from 'viem';
+import type { RuleAsset } from '../agentic.types';
+/** Preset-only permission policy. Ordinary rule authoring retains zero defaults.
+ * Amounts are token quantities, not USD valuations or destination lifetime caps.
+ * Metadata verified read-only on October 18; evidence is retained under plan/agw/.
+ */
+export declare const PRESET_VALIDITY_SECONDS: number;
+export declare const PRESET_GAS_BUDGETS: Readonly<Record<string, bigint>>;
+export declare function defaultPresetAsset(chain: string, token: Address): RuleAsset;

package/src/lib/agentic/presets/default-policy.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PRESET_GAS_BUDGETS = exports.PRESET_VALIDITY_SECONDS = void 0;
+exports.defaultPresetAsset = defaultPresetAsset;
+const viem_1 = require("viem");
+const errors_1 = require("../errors");
+/** Preset-only permission policy. Ordinary rule authoring retains zero defaults.
+ * Amounts are token quantities, not USD valuations or destination lifetime caps.
+ * Metadata verified read-only on October 18; evidence is retained under plan/agw/.
+ */
+exports.PRESET_VALIDITY_SECONDS = 7 * 24 * 60 * 60;
+// Explicit profiles keep future chains from inheriting an unreviewed budget.
+// 20 PC is a ceiling, not the amount charged: execution obtains a fresh quote.
+// This budget has testnet protocol-flow coverage; mainnet remains template-only.
+exports.PRESET_GAS_BUDGETS = Object.fromEntries([
+    'eip155:1',
+    'eip155:8453',
+    'eip155:42161',
+    'eip155:56',
+    'eip155:11155111',
+    'eip155:84532',
+    'eip155:421614',
+    'eip155:97',
+].map((chain) => [chain, (0, viem_1.parseUnits)('20', 18)]));
+const stable6 = { decimals: 6, perCall: '10', total: '100' };
+const stable18 = { ...stable6, decimals: 18 };
+const eth = { decimals: 18, perCall: '0.001', total: '0.01' };
+const bnb = { decimals: 18, perCall: '0.01', total: '0.1' };
+const link = { decimals: 18, perCall: '1', total: '10' };
+// Match by chain AND address. Never infer decimals or limits from a symbol,
+// caller metadata, or the position of a token in an arbitrary selection.
+const TOKEN_BUDGETS = {
+    'eip155:1': [
+        ['0x0000000000000000000000000000000000000000', eth],
+        ['0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2', eth],
+        ['0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48', stable6],
+        ['0xae7ab96520DE3A18E5e111B5EaAb095312D7fE84', eth],
+        ['0x7f39C581F595B53c5cb19bD0b3f8dA6c935E2Ca0', eth],
+    ],
+    'eip155:8453': [
+        ['0x4200000000000000000000000000000000000006', eth],
+        ['0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913', stable6],
+    ],
+    'eip155:42161': [
+        ['0x82aF49447D8a07e3bd95BD0d56f35241523fBab1', eth],
+        ['0xaf88d065e77c8cC2239327C5EDb3A432268e5831', stable6],
+    ],
+    'eip155:56': [
+        ['0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c', bnb],
+        ['0x55d398326f99059fF775485246999027B3197955', stable18],
+    ],
+    'eip155:11155111': [
+        ['0xfff9976782d46cc05630d1f6ebab18b2324d6b14', eth],
+        ['0x1c7D4B196Cb0C7B01d743Fbc6116a902379C7238', stable6],
+        ['0xf8Fb3713D459D7C1018BD0A49D19b4C44290EBE5', link],
+        ['0x7b79995e5f793A07Bc00c21412e50Ecae098E7f9', eth],
+    ],
+    'eip155:84532': [
+        ['0x4200000000000000000000000000000000000006', eth],
+        ['0x036CbD53842c5426634e7929541eC2318f3dCF7e', stable6],
+        ['0x810D46F9a9027E28F9B01F75E2bdde839dA61115', link],
+        ['0x4616975f7E6045FD9737e95bC527e9e14c727BD2', stable6],
+        ['0x663A6F02d547dFd639BF689FED298712f2FB69Fb', eth],
+    ],
+    'eip155:421614': [
+        ['0x980B62Da83eFf3D4576C647993b0c1D7faf17c73', eth],
+        ['0x75faf114eafb1BDbe2F0316DF893fd58CE46AA4d', stable6],
+    ],
+    'eip155:97': [
+        ['0xae13d989daC2f0dEbFf460aC112a837C89BAa7cd', bnb],
+        ['0xA11c8D9DC9b66E209Ef60F0C8D969D3CD988782c', stable6],
+        ['0x16227D60f7a0e586C66B005219dfc887D13C9531', stable6],
+    ],
+};
+function defaultPresetAsset(chain, token) {
+    const budget = TOKEN_BUDGETS[chain]?.find(([address]) => (0, viem_1.getAddress)(address) === (0, viem_1.getAddress)(token))?.[1];
+    if (!budget)
+        throw (0, errors_1.capabilityUnavailable)('presetPolicy', `No reviewed default spending policy for ${chain}:${token}`);
+    return {
+        token,
+        maxPerCall: (0, viem_1.parseUnits)(budget.perCall, budget.decimals),
+        maxTotal: (0, viem_1.parseUnits)(budget.total, budget.decimals),
+    };
+}
+//# sourceMappingURL=default-policy.js.map

package/src/lib/agentic/presets/default-tokens.d.ts

@@ -0,0 +1,4 @@
+import { type Address } from 'viem';
+export declare const DEX_DEFAULT_TOKENS: Readonly<Record<string, readonly Address[]>>;
+export declare const LENDING_DEFAULT_TOKENS: Readonly<Record<string, readonly Address[]>>;
+export declare const STAKING_DEFAULT_TOKENS: Readonly<Record<string, readonly Address[]>>;

package/src/lib/agentic/presets/default-tokens.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STAKING_DEFAULT_TOKENS = exports.LENDING_DEFAULT_TOKENS = exports.DEX_DEFAULT_TOKENS = void 0;
+const viem_1 = require("viem");
+/** Curated subsets of the reviewed catalog. Addresses are destination tokens,
+ * not a promise that a Push PRC20 route or protocol liquidity is available.
+ * Keep these sets within the policy's 32-call/32-pin limits after expansion.
+ * Testnet DEX pairs and lending/staking assets match the live preset fixtures.
+ * Mainnet addresses share the catalog's October 15 read-only source baseline.
+ * Spending caps are intentionally separate from token selection.
+ */
+const addresses = (...values) => values.map((value) => (0, viem_1.getAddress)(value.toLowerCase()));
+exports.DEX_DEFAULT_TOKENS = {
+    'eip155:1': addresses('0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2', '0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48'),
+    'eip155:8453': addresses('0x4200000000000000000000000000000000000006', '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'),
+    'eip155:42161': addresses('0x82aF49447D8a07e3bd95BD0d56f35241523fBab1', '0xaf88d065e77c8cC2239327C5EDb3A432268e5831'),
+    'eip155:56': addresses('0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c', '0x55d398326f99059fF775485246999027B3197955'),
+    'eip155:11155111': addresses('0xfff9976782d46cc05630d1f6ebab18b2324d6b14', '0x1c7D4B196Cb0C7B01d743Fbc6116a902379C7238'),
+    'eip155:84532': addresses('0x4200000000000000000000000000000000000006', '0x036CbD53842c5426634e7929541eC2318f3dCF7e'),
+    'eip155:421614': addresses('0x980B62Da83eFf3D4576C647993b0c1D7faf17c73', '0x75faf114eafb1BDbe2F0316DF893fd58CE46AA4d'),
+    'eip155:97': addresses('0xae13d989daC2f0dEbFf460aC112a837C89BAa7cd', '0xA11c8D9DC9b66E209Ef60F0C8D969D3CD988782c'),
+};
+exports.LENDING_DEFAULT_TOKENS = {
+    'eip155:1': exports.DEX_DEFAULT_TOKENS['eip155:1'],
+    // One shared reserve/market token keeps Aave + Moonwell/Venus within 32 pins.
+    'eip155:8453': addresses('0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913'),
+    'eip155:42161': exports.DEX_DEFAULT_TOKENS['eip155:42161'],
+    'eip155:56': addresses('0x55d398326f99059fF775485246999027B3197955'),
+    // Protocol testnet reserves differ from Circle USDC and DEX wrapped ETH.
+    'eip155:11155111': addresses('0xf8Fb3713D459D7C1018BD0A49D19b4C44290EBE5'),
+    'eip155:84532': addresses('0x810D46F9a9027E28F9B01F75E2bdde839dA61115', '0x4616975f7E6045FD9737e95bC527e9e14c727BD2', '0x663A6F02d547dFd639BF689FED298712f2FB69Fb'),
+    'eip155:421614': addresses('0x75faf114eafb1BDbe2F0316DF893fd58CE46AA4d'),
+    'eip155:97': addresses('0xA11c8D9DC9b66E209Ef60F0C8D969D3CD988782c', '0x16227D60f7a0e586C66B005219dfc887D13C9531'),
+};
+exports.STAKING_DEFAULT_TOKENS = {
+    'eip155:1': addresses(viem_1.zeroAddress, '0xae7ab96520DE3A18E5e111B5EaAb095312D7fE84', '0x7f39C581F595B53c5cb19bD0b3f8dA6c935E2Ca0'),
+    'eip155:11155111': addresses('0x7b79995e5f793A07Bc00c21412e50Ecae098E7f9'),
+};
+//# sourceMappingURL=default-tokens.js.map

package/src/lib/agentic/presets/index.js

@@ -7,6 +7,9 @@ const errors_1 = require("../errors");
 const selectors_1 = require("../codec/selectors");
 const catalog_1 = require("./catalog");
 const operation_limits_1 = require("./operation-limits");
+const enums_1 = require("../../constants/enums");
+const routes_1 = require("./routes");
+const default_policy_1 = require("./default-policy");
 const MAX_UINT256 = (BigInt(1) << BigInt(256)) - BigInt(1);
 const invalid = (message) => new errors_1.AgenticError(errors_1.AGENTIC_ERROR_CODE.INVALID_RULE, message);
 function cap(value, name) {
@@ -51,6 +54,7 @@ function buildPresetApi(catalog) {
         ...p,
         chains: p.chains.map((c) => ({
             ...c,
+            ...(c.defaultTokens ? { defaultTokens: [...c.defaultTokens] } : {}),
             allowedCalls: c.allowedCalls.map((call) => ({
                 ...copyCall(call),
                 ...(call.budget
@@ -93,15 +97,22 @@ function buildPresetApi(catalog) {
                 throw invalid(`unknown preset ${String(preset)}`);
             if (!options || typeof options !== 'object' || Array.isArray(options))
                 throw invalid('preset options must be an object');
+            const now = Math.floor(Date.now() / 1000);
+            const network = options.network ?? enums_1.PUSH_NETWORK.TESTNET_DONUT;
+            if (!Object.values(enums_1.PUSH_NETWORK).includes(network))
+                throw invalid('unknown preset Push network');
+            if ('funding' in options)
+                throw invalid('The preset funding option is no longer supported. Remove it; preset assets and limits are always preserved.');
             if (options.agent !== undefined &&
                 (!(0, viem_1.isAddress)(options.agent, { strict: false }) ||
                     (0, viem_1.getAddress)(options.agent) === viem_1.zeroAddress))
                 throw invalid('preset agent must be a nonzero Push address');
             if (options.validUntil !== undefined &&
                 (!Number.isSafeInteger(options.validUntil) ||
-                    options.validUntil <= Math.floor(Date.now() / 1000) ||
+                    options.validUntil <= now ||
                     options.validUntil >= 2 ** 48))
                 throw invalid('preset validUntil must be a future uint48 timestamp');
+            const validUntil = options.validUntil ?? now + default_policy_1.PRESET_VALIDITY_SECONDS;
             if (options.maxGasPerCall !== undefined)
                 cap(options.maxGasPerCall, 'maxGasPerCall');
             if (options.assets !== undefined && !Array.isArray(options.assets))
@@ -114,6 +125,12 @@ function buildPresetApi(catalog) {
             if (!chains.length && options.assets?.length)
                 throw (0, errors_1.capabilityUnavailable)('presetCatalog', `preset ${preset} has no approved app entries`);
             const assets = new Map();
+            // An explicit array (including []) replaces the defaults for all selected
+            // chains. Never add permissions on chains the caller left unconfigured.
+            if (options.assets === undefined)
+                for (const chain of chains)
+                    if (chain.defaultTokens)
+                        assets.set(chain.chainNamespace, chain.defaultTokens.map((token) => (0, default_policy_1.defaultPresetAsset)(chain.chainNamespace, token)));
             for (const asset of options.assets ?? []) {
                 if (!asset || typeof asset !== 'object')
                     throw invalid('preset asset must be an object');
@@ -143,6 +160,11 @@ function buildPresetApi(catalog) {
             }
             const readiness = [];
             const rules = chains.map((chain) => {
+                const maxGasPerCall = options.maxGasPerCall ??
+                    chain.maxGasPerCall ??
+                    (chain.defaultTokens
+                        ? default_policy_1.PRESET_GAS_BUDGETS[chain.chainNamespace]
+                        : undefined);
                 const selectedAssets = assets.get(chain.chainNamespace) ?? [];
                 const limits = (0, operation_limits_1.applyOperationLimits)(chain.allowedCalls.map((c) => ({
                     ...copyCall(c),
@@ -258,8 +280,9 @@ function buildPresetApi(catalog) {
                 }
                 if (!calls.length || calls.length > 32)
                     throw (0, errors_1.capabilityUnavailable)('presetCalls', 'preset must contain 1..32 allowed calls including approvals');
-                if (calls.reduce((n, c) => n + (c.pins?.length ?? 0), 0) > 32)
-                    throw (0, errors_1.capabilityUnavailable)('presetPins', 'preset expansion exceeds 32 pins; reduce the token list or split rules across wallets');
+                const conditionCount = calls.reduce((n, c) => n + (c.pins?.length ?? 0), 0);
+                if (conditionCount > 32)
+                    throw (0, errors_1.ruleConstraintLimit)(conditionCount, calls.length, chain.chainNamespace);
                 const pairs = new Map();
                 for (const call of calls) {
                     if (!/^[A-Za-z_$][\w$]*\(.*\)$/.test(call.selector))
@@ -282,13 +305,7 @@ function buildPresetApi(catalog) {
                         code: 'AGENT_REQUIRED',
                         message: 'Choose the agent Push address.',
                     });
-                if (!options.validUntil)
-                    issues.push({
-                        code: 'EXPIRY_REQUIRED',
-                        message: 'Choose an expiry.',
-                    });
-                if ((options.maxGasPerCall ?? chain.maxGasPerCall ?? BigInt(0)) ===
-                    BigInt(0))
+                if ((maxGasPerCall ?? BigInt(0)) === BigInt(0))
                     issues.push({
                         code: 'GAS_BUDGET_REQUIRED',
                         message: 'Set a positive PC gas budget per outbound.',
@@ -308,14 +325,26 @@ function buildPresetApi(catalog) {
                         code: 'NO_ENABLED_OPERATION',
                         message: 'No asset operation has a positive per-call limit.',
                     });
+                const configurationReady = issues.length === 0;
+                const routes = (0, routes_1.presetRoutes)(chain.chainNamespace, selectedAssets, network);
+                issues.push(...routes.issues);
+                const bridgeAssets = selectedAssets;
                 readiness.push({
                     chainNamespace: chain.chainNamespace,
                     ready: issues.length === 0,
+                    configurationReady,
+                    selectedAssets: selectedAssets.map((a) => ({
+                        ...a,
+                        token: typeof a.token === 'string' ? a.token : { ...a.token },
+                    })),
+                    bridgeAssets: routes.bridgeAssets,
                     issues,
                     disabledCalls: limits.disabledCalls,
                     excludedCalls: limits.excludedCalls,
-                    knownTokens: limits.knownTokens,
-                    zeroBridgeLimits: selectedAssets
+                    knownTokens: [
+                        ...new Set([...limits.knownTokens, ...(chain.defaultTokens ?? [])]),
+                    ],
+                    zeroBridgeLimits: bridgeAssets
                         .filter((a) => a.maxPerCall === BigInt(0) || a.maxTotal === BigInt(0))
                         .map(operation_limits_1.assetAddress),
                 });
@@ -325,16 +354,12 @@ function buildPresetApi(catalog) {
                     ...(options.agent !== undefined
                         ? { agent: (0, viem_1.getAddress)(options.agent) }
                         : {}),
-                    ...(options.validUntil !== undefined
-                        ? { validUntil: options.validUntil }
-                        : {}),
-                    ...(options.assets !== undefined
-                        ? { assets: assets.get(chain.chainNamespace) ?? [] }
+                    validUntil,
+                    ...(options.assets !== undefined || chain.defaultTokens
+                        ? { assets: bridgeAssets }
                         : {}),
-                    ...((options.maxGasPerCall ?? chain.maxGasPerCall) !== undefined
-                        ? {
-                            maxGasPerCall: cap(options.maxGasPerCall ?? chain.maxGasPerCall, 'maxGasPerCall'),
-                        }
+                    ...(maxGasPerCall !== undefined
+                        ? { maxGasPerCall: cap(maxGasPerCall, 'maxGasPerCall') }
                         : {}),
                 };
             });
@@ -347,7 +372,7 @@ function buildPresetApi(catalog) {
             };
         },
     };
-    // The overload narrows templates only when both required fields were supplied and validated.
+    // Expiry is generated; the overload narrows templates when the agent is supplied.
     return Object.freeze(api);
 }
 exports.agenticPresets = buildPresetApi(catalog_1.PRESET_CATALOG);

package/src/lib/agentic/presets/routes.d.ts

@@ -0,0 +1,9 @@
+import { PUSH_NETWORK } from '../../constants/enums';
+import type { RuleAsset } from '../agentic.types';
+import type { PresetChainReadiness, PresetConfigurationIssue } from './types';
+/** Offline registry checks only. Grant preparation still verifies source metadata
+ * and wiring against chain state before any signature or transaction. */
+export declare function presetRoutes(chain: string, assets: RuleAsset[], network: PUSH_NETWORK): {
+    bridgeAssets: PresetChainReadiness['bridgeAssets'];
+    issues: PresetConfigurationIssue[];
+};

package/src/lib/agentic/presets/routes.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.presetRoutes = presetRoutes;
+const viem_1 = require("viem");
+const enums_1 = require("../../constants/enums");
+const helpers_1 = require("../../orchestrator/internals/helpers");
+const prc20_address_1 = require("../../universal/prc20-address");
+const deployments_1 = require("../deployments");
+const operation_limits_1 = require("./operation-limits");
+/** Offline registry checks only. Grant preparation still verifies source metadata
+ * and wiring against chain state before any signature or transaction. */
+function presetRoutes(chain, assets, network) {
+    const issues = [];
+    network =
+        network === enums_1.PUSH_NETWORK.TESTNET ? enums_1.PUSH_NETWORK.TESTNET_DONUT : network;
+    if (!(0, deployments_1.generationsFor)(network).some((g) => g.advertised))
+        issues.push({
+            code: 'AGW_NETWORK_UNAVAILABLE',
+            message: `No verified AGW deployment is registered for ${network}.`,
+        });
+    const supported = helpers_1.SUPPORTED_GATEWAY_CHAINS.includes(chain);
+    if (!supported)
+        issues.push({
+            code: 'DESTINATION_UNAVAILABLE',
+            message: `The SDK has no supported gateway route to ${chain}; this is a catalog template.`,
+        });
+    const bridgeAssets = assets.map((asset) => {
+        const token = (0, operation_limits_1.assetAddress)(asset);
+        try {
+            if (!supported)
+                throw new Error(`No supported gateway route to ${chain}`);
+            const prc20 = (0, prc20_address_1.getPRC20Address)({ chain, address: token }, { network });
+            return {
+                token,
+                prc20: (0, viem_1.getAddress)(prc20.address),
+                status: 'registered',
+            };
+        }
+        catch {
+            issues.push({
+                code: 'BRIDGE_ASSET_UNAVAILABLE',
+                token,
+                message: `No SDK PRC20 mapping for ${chain}:${token} on ${network}. Choose a supported asset. This exact token needs a verified Push PRC20 route before it can be used.`,
+            });
+            return { token, status: 'unavailable' };
+        }
+    });
+    return { bridgeAssets, issues };
+}
+//# sourceMappingURL=routes.js.map