@senpi/runtime 3.0.24 → 3.0.26

package/dist/approvals/approval-store.d.ts

@@ -0,0 +1,35 @@
+/** Minimal logger contract so the store does not depend on a concrete logger. */
+interface LoggerLike {
+    warn(...args: unknown[]): void;
+}
+/** File name inside the plugin state dir (volume-backed in prod). */
+export declare const TOOL_APPROVALS_STATE_FILE = "tool-approvals.json";
+/**
+ * Persistent per-tool "always allow" decisions for the MCP tool approval gate.
+ *
+ * OpenClaw does not persist `allow-always` for plugin approvals (unlike the exec
+ * tool's allowlist file) — the decision arrives once via the `onResolution`
+ * callback and is otherwise one-shot. This store is that missing persistence:
+ * a JSON file in the plugin state dir, so decisions survive gateway restarts,
+ * redeploys, and plugin auto-updates.
+ *
+ * To make a tool prompt again, delete its entry from `tool-approvals.json`
+ * (or the whole file) in the state dir.
+ *
+ * Load is synchronous (once, at plugin register()); writes are synchronous
+ * atomic temp → rename, and only happen on an explicit user decision.
+ */
+export declare class ToolApprovalStore {
+    private readonly logger?;
+    private readonly filePath;
+    private readonly allowAlways;
+    constructor(stateDir: string, logger?: LoggerLike | undefined);
+    private load;
+    isAllowedAlways(tool: string): boolean;
+    get size(): number;
+    /** Record a user's allow-always decision and persist it immediately. */
+    rememberAllowAlways(tool: string): void;
+    private persist;
+}
+export {};
+//# sourceMappingURL=approval-store.d.ts.map

package/dist/approvals/approval-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-store.d.ts","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAGA,iFAAiF;AACjF,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,qEAAqE;AACrE,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAU/D;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAL1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;gBAGjE,QAAQ,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,UAAU,YAAA;IAMtC,OAAO,CAAC,IAAI;IAiCZ,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAItC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,wEAAwE;IACxE,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQvC,OAAO,CAAC,OAAO;CAehB"}

package/dist/approvals/approval-store.js

@@ -0,0 +1,87 @@
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+/** File name inside the plugin state dir (volume-backed in prod). */
+export const TOOL_APPROVALS_STATE_FILE = "tool-approvals.json";
+/**
+ * Persistent per-tool "always allow" decisions for the MCP tool approval gate.
+ *
+ * OpenClaw does not persist `allow-always` for plugin approvals (unlike the exec
+ * tool's allowlist file) — the decision arrives once via the `onResolution`
+ * callback and is otherwise one-shot. This store is that missing persistence:
+ * a JSON file in the plugin state dir, so decisions survive gateway restarts,
+ * redeploys, and plugin auto-updates.
+ *
+ * To make a tool prompt again, delete its entry from `tool-approvals.json`
+ * (or the whole file) in the state dir.
+ *
+ * Load is synchronous (once, at plugin register()); writes are synchronous
+ * atomic temp → rename, and only happen on an explicit user decision.
+ */
+export class ToolApprovalStore {
+    logger;
+    filePath;
+    allowAlways = new Map();
+    constructor(stateDir, logger) {
+        this.logger = logger;
+        this.filePath = join(stateDir, TOOL_APPROVALS_STATE_FILE);
+        this.load();
+    }
+    load() {
+        let raw;
+        try {
+            raw = readFileSync(this.filePath, "utf8");
+        }
+        catch (err) {
+            const isNotFound = err instanceof Error && "code" in err && err.code === "ENOENT";
+            if (!isNotFound) {
+                this.logger?.warn(`[senpi-tool-approvals] failed to read state file, starting empty | path=${this.filePath} err=${err instanceof Error ? err.message : String(err)}`);
+            }
+            return;
+        }
+        try {
+            const parsed = JSON.parse(raw);
+            const entries = parsed?.allowAlways;
+            if (entries && typeof entries === "object" && !Array.isArray(entries)) {
+                for (const [tool, entry] of Object.entries(entries)) {
+                    if (typeof tool === "string" && tool.length > 0) {
+                        this.allowAlways.set(tool, {
+                            decidedAt: typeof entry?.decidedAt === "string" ? entry.decidedAt : "",
+                        });
+                    }
+                }
+            }
+        }
+        catch (err) {
+            this.logger?.warn(`[senpi-tool-approvals] corrupt state file, starting empty (all gated tools will prompt again) | path=${this.filePath} err=${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    isAllowedAlways(tool) {
+        return this.allowAlways.has(tool);
+    }
+    get size() {
+        return this.allowAlways.size;
+    }
+    /** Record a user's allow-always decision and persist it immediately. */
+    rememberAllowAlways(tool) {
+        if (!tool || this.allowAlways.has(tool)) {
+            return;
+        }
+        this.allowAlways.set(tool, { decidedAt: new Date().toISOString() });
+        this.persist();
+    }
+    persist() {
+        try {
+            mkdirSync(dirname(this.filePath), { recursive: true });
+            const shape = {
+                allowAlways: Object.fromEntries(this.allowAlways),
+            };
+            const tmpPath = `${this.filePath}.tmp`;
+            writeFileSync(tmpPath, JSON.stringify(shape, null, 2), "utf8");
+            renameSync(tmpPath, this.filePath);
+        }
+        catch (err) {
+            this.logger?.warn(`[senpi-tool-approvals] failed to persist state (decision kept in memory only) | path=${this.filePath} err=${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+}
+//# sourceMappingURL=approval-store.js.map

package/dist/approvals/approval-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-store.js","sourceRoot":"","sources":["../../src/approvals/approval-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C,qEAAqE;AACrE,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAU/D;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,iBAAiB;IAMT;IALF,QAAQ,CAAS;IACjB,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnE,YACE,QAAgB,EACC,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QAEpC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,IAAI;QACV,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GACd,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC;YAC5F,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,2EAA2E,IAAI,CAAC,QAAQ,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnJ,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;YACpC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE;4BACzB,SAAS,EAAE,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;yBACvE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wGAAwG,IAAI,CAAC,QAAQ,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,eAAe,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,wEAAwE;IACxE,mBAAmB,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,GAA2B;gBACpC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;aAClD,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,MAAM,CAAC;YACvC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/D,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wFAAwF,IAAI,CAAC,QAAQ,QAAQ,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChK,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/approvals/manifest.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Tool-approvals manifest — the single, codebase-controlled source of truth
+ * for which senpi MCP tools the approval gate treats as trades (gated in the
+ * default mode) and for the gate's defaults (mode, prompt timeout).
+ *
+ * The manifest is a checked-in JSON file (`tool-approvals-manifest.json`,
+ * copied into `dist/` at build time) shipped *with the runtime*, so changing
+ * the gated tool set or the fleet default is one reviewable diff — no env
+ * vars, no scattered constants. Mirrors the skills-manager manifest pattern
+ * (`src/skills-manager/manifest.ts`).
+ *
+ * Runtime overrides still win over the manifest default for the mode:
+ * env `SENPI_TOOL_APPROVALS` > plugin config `toolApprovals` > manifest
+ * `defaults.mode` (see `resolveToolApprovalsMode` in tool-approval-gate.ts).
+ */
+export type ToolApprovalsMode = "off" | "trades" | "all";
+/** Parsed + validated manifest shape. */
+export interface ToolApprovalsManifest {
+    schemaVersion: number;
+    defaults: {
+        mode: ToolApprovalsMode;
+        /** Prompt timeout; gateway clamps plugin approvals to max 600_000 ms. */
+        timeoutMs: number;
+    };
+    /** Bare senpi MCP tool names (no `senpi__` prefix) gated in `trades` mode. */
+    tradeTools: string[];
+}
+/**
+ * Hardcoded fallback used only when the checked-in JSON cannot be read or
+ * parsed (corrupt file, missing from dist). Keeps the plugin from crashing at
+ * import time; logged loudly by {@link loadToolApprovalsManifest}. Kept in
+ * sync with `tool-approvals-manifest.json` (a test asserts this).
+ */
+export declare const FALLBACK_TOOL_APPROVALS_MANIFEST: ToolApprovalsManifest;
+/**
+ * Load + validate the manifest from disk, cached after first read. Resolves
+ * the JSON path relative to this module so it works both from `src/` (vitest)
+ * and `dist/` (the build copies the JSON next to the compiled module).
+ *
+ * On any read/parse/validation failure, logs a warning and returns
+ * {@link FALLBACK_TOOL_APPROVALS_MANIFEST} — the gate must not fail to start
+ * because of a packaging mistake.
+ */
+export declare function loadToolApprovalsManifest(): ToolApprovalsManifest;
+/** Reset the manifest cache. Test-only. */
+export declare function resetToolApprovalsManifestCacheForTests(): void;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/approvals/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/approvals/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEzD,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE;QACR,IAAI,EAAE,iBAAiB,CAAC;QACxB,yEAAyE;QACzE,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,8EAA8E;IAC9E,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAWD;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,EAAE,qBA2B9C,CAAC;AAIF;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,IAAI,qBAAqB,CAcjE;AAED,2CAA2C;AAC3C,wBAAgB,uCAAuC,IAAI,IAAI,CAE9D"}

package/dist/approvals/manifest.js

@@ -0,0 +1,91 @@
+/**
+ * Tool-approvals manifest — the single, codebase-controlled source of truth
+ * for which senpi MCP tools the approval gate treats as trades (gated in the
+ * default mode) and for the gate's defaults (mode, prompt timeout).
+ *
+ * The manifest is a checked-in JSON file (`tool-approvals-manifest.json`,
+ * copied into `dist/` at build time) shipped *with the runtime*, so changing
+ * the gated tool set or the fleet default is one reviewable diff — no env
+ * vars, no scattered constants. Mirrors the skills-manager manifest pattern
+ * (`src/skills-manager/manifest.ts`).
+ *
+ * Runtime overrides still win over the manifest default for the mode:
+ * env `SENPI_TOOL_APPROVALS` > plugin config `toolApprovals` > manifest
+ * `defaults.mode` (see `resolveToolApprovalsMode` in tool-approval-gate.ts).
+ */
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { z } from "zod";
+import { createLogger } from "../utils/logger.js";
+const manifestSchema = z.object({
+    schemaVersion: z.number(),
+    defaults: z.object({
+        mode: z.union([z.literal("off"), z.literal("trades"), z.literal("all")]),
+        timeoutMs: z.number().int().positive().max(600_000),
+    }),
+    tradeTools: z.array(z.string().min(1)).min(1),
+});
+/**
+ * Hardcoded fallback used only when the checked-in JSON cannot be read or
+ * parsed (corrupt file, missing from dist). Keeps the plugin from crashing at
+ * import time; logged loudly by {@link loadToolApprovalsManifest}. Kept in
+ * sync with `tool-approvals-manifest.json` (a test asserts this).
+ */
+export const FALLBACK_TOOL_APPROVALS_MANIFEST = {
+    schemaVersion: 1,
+    defaults: { mode: "trades", timeoutMs: 180_000 },
+    tradeTools: [
+        "create_position",
+        "close_position",
+        "edit_position",
+        "cancel_order",
+        "strategy_create",
+        "strategy_create_custom_strategy",
+        "strategy_close",
+        "strategy_close_positions",
+        "strategy_update",
+        "strategy_pause",
+        "strategy_top_up",
+        "strategy_withdraw_funds",
+        "strategy_bridge_funds_from_hyperliquid_to_evm",
+        "transfer_spot_to_perps",
+        // Not currently exposed by the senpi MCP server, but senpi-web's permission
+        // registry lists it — gating a tool that does not exist is a no-op, and it
+        // must not slip through unapproved if it ever ships.
+        "send_usdc",
+        "ratchet_stop_add",
+        "ratchet_stop_edit",
+        "ratchet_stop_delete",
+        "user_claim_referral_rewards",
+    ],
+};
+let cached = null;
+/**
+ * Load + validate the manifest from disk, cached after first read. Resolves
+ * the JSON path relative to this module so it works both from `src/` (vitest)
+ * and `dist/` (the build copies the JSON next to the compiled module).
+ *
+ * On any read/parse/validation failure, logs a warning and returns
+ * {@link FALLBACK_TOOL_APPROVALS_MANIFEST} — the gate must not fail to start
+ * because of a packaging mistake.
+ */
+export function loadToolApprovalsManifest() {
+    if (cached)
+        return cached;
+    try {
+        const jsonPath = fileURLToPath(new URL("./tool-approvals-manifest.json", import.meta.url));
+        const parsed = JSON.parse(readFileSync(jsonPath, "utf8"));
+        cached = manifestSchema.parse(parsed);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        createLogger("[senpi-tool-approvals][manifest]").warn(`failed to load tool-approvals-manifest.json, using built-in fallback: ${message}`);
+        cached = FALLBACK_TOOL_APPROVALS_MANIFEST;
+    }
+    return cached;
+}
+/** Reset the manifest cache. Test-only. */
+export function resetToolApprovalsManifestCacheForTests() {
+    cached = null;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/approvals/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/approvals/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAgBlD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;KACpD,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9C,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAA0B;IACrE,aAAa,EAAE,CAAC;IAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE;IAChD,UAAU,EAAE;QACV,iBAAiB;QACjB,gBAAgB;QAChB,eAAe;QACf,cAAc;QACd,iBAAiB;QACjB,iCAAiC;QACjC,gBAAgB;QAChB,0BAA0B;QAC1B,iBAAiB;QACjB,gBAAgB;QAChB,iBAAiB;QACjB,yBAAyB;QACzB,+CAA+C;QAC/C,wBAAwB;QACxB,4EAA4E;QAC5E,2EAA2E;QAC3E,qDAAqD;QACrD,WAAW;QACX,kBAAkB;QAClB,mBAAmB;QACnB,qBAAqB;QACrB,6BAA6B;KAC9B;CACF,CAAC;AAEF,IAAI,MAAM,GAAiC,IAAI,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB;IACvC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,YAAY,CAAC,kCAAkC,CAAC,CAAC,IAAI,CACnD,yEAAyE,OAAO,EAAE,CACnF,CAAC;QACF,MAAM,GAAG,gCAAgC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,uCAAuC;IACrD,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}

package/dist/approvals/tool-approval-gate.d.ts

@@ -0,0 +1,93 @@
+import { ToolApprovalStore } from "./approval-store.js";
+import { type ToolApprovalsManifest, type ToolApprovalsMode } from "./manifest.js";
+/**
+ * Tool approval gate: requires an interactive user approval before
+ * state-changing senpi MCP tools execute.
+ *
+ * OpenClaw v2026.5.x has no declarative "ask" policy for MCP tools (only the
+ * exec tool has `tools.exec.ask`); the supported mechanism is a plugin
+ * `before_tool_call` hook returning `requireApproval`, which the gateway
+ * drives via `plugin.approval.request` / `plugin.approval.resolve`
+ * (decisions: allow-once / allow-always / deny; timeout → deny). Approval
+ * prompts are broadcast to gateway clients holding the `operator.approvals`
+ * scope — the senpi agent-bridge connection — and surface in senpi-web.
+ *
+ * The gated tool set and the defaults (mode, prompt timeout) come from the
+ * checked-in manifest (`tool-approvals-manifest.json`, see manifest.ts) — the
+ * reviewed, fleet-wide control surface. Mode precedence: env
+ * {@link TOOL_APPROVALS_ENV_VAR} > plugin config `toolApprovals` > manifest
+ * `defaults.mode`.
+ *
+ * `allow-always` decisions are persisted per tool via {@link ToolApprovalStore}
+ * (OpenClaw treats them as one-shot for plugin approvals).
+ *
+ * Design doc: docs/mcp-tool-approvals-design.md
+ */
+interface LoggerLike {
+    info(...args: unknown[]): void;
+    warn(...args: unknown[]): void;
+}
+/** Minimal shape of the OpenClaw plugin API surface the gate needs. */
+export interface ToolApprovalGatePluginApi {
+    on(hookName: string, handler: (...args: unknown[]) => unknown, opts?: {
+        priority?: number;
+    }): void;
+}
+export type { ToolApprovalsMode };
+/** Env var that overrides the `toolApprovals` plugin config and the manifest default. */
+export declare const TOOL_APPROVALS_ENV_VAR = "SENPI_TOOL_APPROVALS";
+/**
+ * Match a tool-registry name against the senpi MCP server and return the bare
+ * tool name. Covers the embedded-MCP shape (`senpi__create_position`), the
+ * CLI-runner backend shape (`mcp__senpi__create_position`), and openclaw's
+ * server-name dedupe suffix (`senpi-2__…`).
+ */
+export declare function matchSenpiTool(toolName: unknown): string | null;
+export declare function isToolApprovalsMode(value: unknown): value is ToolApprovalsMode;
+/**
+ * Resolve the gate mode: env {@link TOOL_APPROVALS_ENV_VAR} > plugin config
+ * `toolApprovals` > manifest `defaults.mode`. Unrecognized values warn and
+ * fall through to the manifest default rather than silently disabling the gate.
+ */
+export declare function resolveToolApprovalsMode(params: {
+    pluginConfig?: Record<string, unknown>;
+    env?: NodeJS.ProcessEnv;
+    logger?: LoggerLike;
+    manifest?: ToolApprovalsManifest;
+}): ToolApprovalsMode;
+/**
+ * Human sentence for a senpi trade tool call, mirroring senpi-web's own
+ * per-tool phrasing (its `getDescription` registry).
+ *
+ * Why the plugin builds this rather than leaving it to the UI: senpi-web keys
+ * that registry by the **bare** tool name and feeds it the call `args`, but for
+ * plugin approvals openclaw sends the prefixed registry name
+ * (`senpi__create_position`) and has **no `args` field at all` in
+ * `PluginApprovalRequestParamsSchema` (additionalProperties: false). So the UI
+ * takes its fallback branch and renders `description` verbatim, with no args
+ * block — meaning this string is the *only* place the user sees what they are
+ * approving. It must therefore carry the numbers, not just the intent.
+ */
+export declare function describeSenpiToolCall(tool: string, params: unknown): string | undefined;
+/**
+ * Prompt body: the human sentence when we know the tool, plus the compact raw
+ * args so the exact numbers are always visible (senpi-web renders no args block
+ * for plugin approvals — see {@link describeSenpiToolCall}). Capped to the
+ * gateway's description limit, which rejects (not truncates) anything longer.
+ */
+export declare function buildApprovalDescription(tool: string, params: unknown): string;
+export interface RegisterToolApprovalGateOptions {
+    api: ToolApprovalGatePluginApi;
+    mode: ToolApprovalsMode;
+    /** Base plugin state dir; the store file lives directly under it. */
+    stateDir: string;
+    logger?: LoggerLike;
+    /** Injectable for tests; defaults to the checked-in manifest. */
+    manifest?: ToolApprovalsManifest;
+}
+/**
+ * Register the `before_tool_call` approval gate. No-op in `off` mode.
+ * Returns the store (for tests/introspection) when registered.
+ */
+export declare function registerToolApprovalGate(options: RegisterToolApprovalGateOptions): ToolApprovalStore | undefined;
+//# sourceMappingURL=tool-approval-gate.d.ts.map

package/dist/approvals/tool-approval-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-approval-gate.d.ts","sourceRoot":"","sources":["../../src/approvals/tool-approval-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,UAAU,UAAU;IAClB,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAChC;AAED,uEAAuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,EAAE,CACA,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,EACxC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,IAAI,CAAC;CACT;AAED,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,yFAAyF;AACzF,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAO7D;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM/D;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC,GAAG,iBAAiB,CAqBpB;AAYD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CA2DvF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAY9E;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,yBAAyB,CAAC;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,iBAAiB,GAAG,SAAS,CAqD/B"}

package/dist/approvals/tool-approval-gate.js

@@ -0,0 +1,205 @@
+import { ToolApprovalStore } from "./approval-store.js";
+import { loadToolApprovalsManifest, } from "./manifest.js";
+/** Env var that overrides the `toolApprovals` plugin config and the manifest default. */
+export const TOOL_APPROVALS_ENV_VAR = "SENPI_TOOL_APPROVALS";
+// Gateway schema hard limits (plugin.approval.request rejects, not truncates,
+// beyond these — openclaw PLUGIN_APPROVAL_TITLE_MAX_LENGTH / _DESCRIPTION_).
+const TITLE_MAX_LENGTH = 80;
+const DESCRIPTION_MAX_LENGTH = 256;
+/**
+ * Match a tool-registry name against the senpi MCP server and return the bare
+ * tool name. Covers the embedded-MCP shape (`senpi__create_position`), the
+ * CLI-runner backend shape (`mcp__senpi__create_position`), and openclaw's
+ * server-name dedupe suffix (`senpi-2__…`).
+ */
+export function matchSenpiTool(toolName) {
+    if (typeof toolName !== "string") {
+        return null;
+    }
+    const match = /^(?:mcp__)?senpi(?:-\d+)?__(.+)$/.exec(toolName);
+    return match ? match[1] : null;
+}
+export function isToolApprovalsMode(value) {
+    return value === "off" || value === "trades" || value === "all";
+}
+/**
+ * Resolve the gate mode: env {@link TOOL_APPROVALS_ENV_VAR} > plugin config
+ * `toolApprovals` > manifest `defaults.mode`. Unrecognized values warn and
+ * fall through to the manifest default rather than silently disabling the gate.
+ */
+export function resolveToolApprovalsMode(params) {
+    const manifestDefault = (params.manifest ?? loadToolApprovalsManifest()).defaults.mode;
+    const candidates = [
+        { source: `env ${TOOL_APPROVALS_ENV_VAR}`, value: params.env?.[TOOL_APPROVALS_ENV_VAR] },
+        { source: 'plugin config "toolApprovals"', value: params.pluginConfig?.toolApprovals },
+    ];
+    for (const candidate of candidates) {
+        if (candidate.value === undefined || candidate.value === null || candidate.value === "") {
+            continue;
+        }
+        const normalized = typeof candidate.value === "string" ? candidate.value.trim().toLowerCase() : candidate.value;
+        if (isToolApprovalsMode(normalized)) {
+            return normalized;
+        }
+        params.logger?.warn(`[senpi-tool-approvals] unrecognized ${candidate.source} value ${JSON.stringify(candidate.value)}; using manifest default "${manifestDefault}" (expected off|trades|all)`);
+        return manifestDefault;
+    }
+    return manifestDefault;
+}
+function truncate(value, maxLength) {
+    return value.length <= maxLength ? value : `${value.slice(0, maxLength - 1)}…`;
+}
+function str(value) {
+    if (typeof value === "string" && value.trim())
+        return value.trim();
+    if (typeof value === "number" && Number.isFinite(value))
+        return String(value);
+    return undefined;
+}
+/**
+ * Human sentence for a senpi trade tool call, mirroring senpi-web's own
+ * per-tool phrasing (its `getDescription` registry).
+ *
+ * Why the plugin builds this rather than leaving it to the UI: senpi-web keys
+ * that registry by the **bare** tool name and feeds it the call `args`, but for
+ * plugin approvals openclaw sends the prefixed registry name
+ * (`senpi__create_position`) and has **no `args` field at all` in
+ * `PluginApprovalRequestParamsSchema` (additionalProperties: false). So the UI
+ * takes its fallback branch and renders `description` verbatim, with no args
+ * block — meaning this string is the *only* place the user sees what they are
+ * approving. It must therefore carry the numbers, not just the intent.
+ */
+export function describeSenpiToolCall(tool, params) {
+    const p = (params ?? {});
+    const asset = str(p.asset) ?? str(p.coin) ?? str(p.symbol);
+    const strategyId = str(p.strategyId) ?? str(p.strategy_id);
+    const amount = str(p.amount) ?? str(p.usdAmount) ?? str(p.margin);
+    const leverage = str(p.leverage);
+    const direction = str(p.direction) ?? str(p.side);
+    const parts = [];
+    switch (tool) {
+        case "create_position": {
+            parts.push(`Open a ${direction ?? ""} position on ${asset ?? "?"}`.replace(/\s+/g, " "));
+            if (amount)
+                parts.push(`margin $${amount}`);
+            if (leverage)
+                parts.push(`${leverage}x`);
+            break;
+        }
+        case "close_position":
+            parts.push(`Close position ${str(p.positionId) ?? asset ?? ""}`.trim());
+            break;
+        case "edit_position":
+            parts.push(`Edit position ${str(p.positionId) ?? asset ?? ""}`.trim());
+            break;
+        case "cancel_order":
+            parts.push(`Cancel order ${str(p.orderId) ?? ""}`.trim());
+            break;
+        case "strategy_create":
+        case "strategy_create_custom_strategy":
+            parts.push(`Create strategy ${str(p.name) ?? asset ?? ""}`.trim());
+            break;
+        case "strategy_close":
+        case "strategy_close_positions":
+            parts.push(`Close strategy ${strategyId ?? ""}`.trim());
+            break;
+        case "strategy_update":
+            parts.push(`Update strategy ${strategyId ?? ""}`.trim());
+            break;
+        case "strategy_pause":
+            parts.push(`Pause strategy ${strategyId ?? ""}`.trim());
+            break;
+        case "strategy_top_up":
+            parts.push(`Add ${amount ? `$${amount} ` : ""}funds to strategy ${strategyId ?? ""}`.trim());
+            break;
+        case "strategy_withdraw_funds":
+            parts.push(`Withdraw ${amount ? `$${amount} ` : ""}from strategy ${strategyId ?? ""}`.trim());
+            break;
+        case "strategy_bridge_funds_from_hyperliquid_to_evm":
+            parts.push(`Bridge ${amount ? `$${amount} ` : ""}from Hyperliquid to EVM`.trim());
+            break;
+        case "transfer_spot_to_perps":
+            parts.push(`Transfer ${amount ? `$${amount} ` : ""}from spot to perps`.trim());
+            break;
+        case "send_usdc":
+            parts.push(`Send ${amount ? `$${amount} ` : ""}USDC to ${str(p.to) ?? "?"}`.trim());
+            break;
+        default:
+            return undefined;
+    }
+    return parts.filter(Boolean).join(" · ");
+}
+/**
+ * Prompt body: the human sentence when we know the tool, plus the compact raw
+ * args so the exact numbers are always visible (senpi-web renders no args block
+ * for plugin approvals — see {@link describeSenpiToolCall}). Capped to the
+ * gateway's description limit, which rejects (not truncates) anything longer.
+ */
+export function buildApprovalDescription(tool, params) {
+    let args = "";
+    try {
+        args = params === undefined ? "" : JSON.stringify(params);
+    }
+    catch {
+        args = "[unserializable params]";
+    }
+    const hasArgs = Boolean(args) && args !== "{}";
+    const sentence = describeSenpiToolCall(tool, params);
+    const head = sentence ?? tool;
+    const base = hasArgs ? `${head} — ${args}` : head;
+    return truncate(base, DESCRIPTION_MAX_LENGTH);
+}
+/**
+ * Register the `before_tool_call` approval gate. No-op in `off` mode.
+ * Returns the store (for tests/introspection) when registered.
+ */
+export function registerToolApprovalGate(options) {
+    const { api, mode, stateDir, logger } = options;
+    if (mode === "off") {
+        logger?.info("[senpi-tool-approvals] disabled (mode=off)");
+        return undefined;
+    }
+    const manifest = options.manifest ?? loadToolApprovalsManifest();
+    const tradeTools = new Set(manifest.tradeTools);
+    const timeoutMs = manifest.defaults.timeoutMs;
+    const store = new ToolApprovalStore(stateDir, logger);
+    logger?.info(`[senpi-tool-approvals] enabled | mode=${mode} tradeTools=${tradeTools.size} allowAlways=${store.size} timeoutMs=${timeoutMs}`);
+    api.on("before_tool_call", (event) => {
+        try {
+            const ev = event;
+            const tool = matchSenpiTool(ev?.toolName);
+            if (!tool) {
+                return undefined;
+            }
+            const isTrade = tradeTools.has(tool);
+            if (mode === "trades" && !isTrade) {
+                return undefined;
+            }
+            if (store.isAllowedAlways(tool)) {
+                return undefined;
+            }
+            return {
+                requireApproval: {
+                    title: truncate(`Senpi trade approval: ${tool}`, TITLE_MAX_LENGTH),
+                    description: buildApprovalDescription(tool, ev?.params),
+                    severity: isTrade ? "critical" : "warning",
+                    timeoutMs,
+                    timeoutBehavior: "deny",
+                    onResolution: (decision) => {
+                        if (decision === "allow-always") {
+                            store.rememberAllowAlways(tool);
+                            logger?.info(`[senpi-tool-approvals] allow-always persisted | tool=${tool}`);
+                        }
+                    },
+                },
+            };
+        }
+        catch (err) {
+            // Never break the tool pipeline on a gate bug — fail open and log.
+            logger?.warn(`[senpi-tool-approvals] gate handler failed; tool proceeds ungated | err=${err instanceof Error ? err.message : String(err)}`);
+            return undefined;
+        }
+    });
+    return store;
+}
+//# sourceMappingURL=tool-approval-gate.js.map

package/dist/approvals/tool-approval-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-approval-gate.js","sourceRoot":"","sources":["../../src/approvals/tool-approval-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,yBAAyB,GAG1B,MAAM,eAAe,CAAC;AA0CvB,yFAAyF;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAKxC;IACC,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,yBAAyB,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IACvF,MAAM,UAAU,GAA8C;QAC5D,EAAE,MAAM,EAAE,OAAO,sBAAsB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE;QACxF,EAAE,MAAM,EAAE,+BAA+B,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE;KACvF,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;YACxF,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GACd,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;QAC/F,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,IAAI,CACjB,uCAAuC,SAAS,CAAC,MAAM,UAAU,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,6BAA6B,eAAe,6BAA6B,CAC1K,CAAC;QACF,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,SAAiB;IAChD,OAAO,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC;AACjF,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAe;IACjE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,UAAU,SAAS,IAAI,EAAE,gBAAgB,KAAK,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACzF,IAAI,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;YAC5C,IAAI,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;YACzC,MAAM;QACR,CAAC;QACD,KAAK,gBAAgB;YACnB,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,MAAM;QACR,KAAK,eAAe;YAClB,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,MAAM;QACR,KAAK,cAAc;YACjB,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM;QACR,KAAK,iBAAiB,CAAC;QACvB,KAAK,iCAAiC;YACpC,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM;QACR,KAAK,gBAAgB,CAAC;QACtB,KAAK,0BAA0B;YAC7B,KAAK,CAAC,IAAI,CAAC,kBAAkB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM;QACR,KAAK,gBAAgB;YACnB,KAAK,CAAC,IAAI,CAAC,kBAAkB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,qBAAqB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7F,MAAM;QACR,KAAK,yBAAyB;YAC5B,KAAK,CAAC,IAAI,CACR,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAClF,CAAC;YACF,MAAM;QACR,KAAK,+CAA+C;YAClD,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,MAAM;QACR,KAAK,wBAAwB;YAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,MAAM;QACR,KAAK,WAAW;YACd,KAAK,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACpF,MAAM;QACR;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,MAAe;IACpE,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,yBAAyB,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC;IAC/C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,OAAO,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAChD,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAwC;IAExC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAChD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,EAAE,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,yBAAyB,EAAE,CAAC;IACjE,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,EAAE,IAAI,CACV,yCAAyC,IAAI,eAAe,UAAU,CAAC,IAAI,gBAAgB,KAAK,CAAC,IAAI,cAAc,SAAS,EAAE,CAC/H,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,KAAc,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,KAA6D,CAAC;YACzE,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,eAAe,EAAE;oBACf,KAAK,EAAE,QAAQ,CAAC,yBAAyB,IAAI,EAAE,EAAE,gBAAgB,CAAC;oBAClE,WAAW,EAAE,wBAAwB,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC;oBACvD,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAE,UAAoB,CAAC,CAAC,CAAE,SAAmB;oBAChE,SAAS;oBACT,eAAe,EAAE,MAAe;oBAChC,YAAY,EAAE,CAAC,QAAiB,EAAE,EAAE;wBAClC,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;4BAChC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;4BAChC,MAAM,EAAE,IAAI,CAAC,wDAAwD,IAAI,EAAE,CAAC,CAAC;wBAC/E,CAAC;oBACH,CAAC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,MAAM,EAAE,IAAI,CACV,2EAA2E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9H,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/approvals/tool-approvals-manifest.json

@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "defaults": {
+    "mode": "trades",
+    "timeoutMs": 180000
+  },
+  "tradeTools": [
+    "create_position",
+    "close_position",
+    "edit_position",
+    "cancel_order",
+    "strategy_create",
+    "strategy_create_custom_strategy",
+    "strategy_close",
+    "strategy_close_positions",
+    "strategy_update",
+    "strategy_pause",
+    "strategy_top_up",
+    "strategy_withdraw_funds",
+    "strategy_bridge_funds_from_hyperliquid_to_evm",
+    "transfer_spot_to_perps",
+    "send_usdc",
+    "ratchet_stop_add",
+    "ratchet_stop_edit",
+    "ratchet_stop_delete",
+    "user_claim_referral_rewards"
+  ]
+}

package/dist/dsl/notifications/formatter.js

@@ -21,7 +21,7 @@ export function formatDslTierAdvanced(e) {
     return {
         pushTitle: "🔒 Profit locked",
         pushBody: `DSL locked ${fmtUsdPnl(lockedUsd)} on ${asset}`,
-        inApp: `🔒 ${asset} ${direction} — DSL locked in ${fmtUsdPnl(lockedUsd)} (${fmtRoe(lockedPct)})<br>` +
+        inApp: `🔒 ${asset} ${direction} — DSL locked in ${fmtUsdPnl(lockedUsd)} (${fmtRoe(lockedPct)}) ` +
             `Stop raised to ${fmtUsdPrice(e.newFloorPrice, asset)} · now ${fmtUsdPnl(currentPnl)} (${fmtRoe(curRoe)}) · peak ${fmtRoe(hw)} · still running, trailing for more`,
     };
 }
@@ -34,7 +34,7 @@ export function formatDslSlUpdated(e) {
     return {
         pushTitle: "📈 Stop raised",
         pushBody: `${asset} stop → ${fmtUsdPrice(e.newSLPrice, asset)}`,
-        inApp: `${asset} — DSL stop raised to ${fmtUsdPrice(e.newSLPrice, asset)}<br>Locking in more of your gain.`,
+        inApp: `${asset} — DSL stop raised to ${fmtUsdPrice(e.newSLPrice, asset)} Locking in more of your gain.`,
     };
 }
 export function formatDslDeleted(e) {