@stelis/say-ur-intent 0.0.4 → 0.0.6

package/README.md

@@ -115,15 +115,13 @@ It also includes:
 
 ## Current Limits
 
-### Not Implemented Yet (Deliberately Sequenced)
+### Not Implemented
 
-The items in this section are deliberately sequenced roadmap steps, not product
-refusals. Server-side receipt verification against chain state is not
-implemented yet. The full analysis page is not implemented yet. Transaction
-material build, contract emit, digest-gated wallet handoff, and user-controlled
-signing are implemented for the account-bound DeepBook swap review, which
-resolves its protocol through a plan-factory registry so further swap adapters
-attach the same way. External proposal execution is not implemented.
+Server-side receipt verification against chain state is not implemented. The
+full analysis page is not implemented. External proposal execution is not
+implemented. Transaction material build, contract emit, digest-gated wallet
+handoff, and user-controlled signing are implemented for the account-bound
+DeepBook and FlowX swap review through a plan-factory registry.
 
 External proposal ingestion is implemented only for read-only local review
 sessions. It accepts structured proposal facts, rejects forbidden executable or
@@ -305,6 +303,21 @@ AI client answer behavior must be mirrored in runtime-facing instructions, resou
 - `AGENTS.md`: root repository development contract and non-negotiable product boundaries for coding agents working on this codebase.
 - `docs/AGENT_DEVELOPMENT_POLICY.md`: detailed binding development, review, documentation, source-of-truth, and completion policies for coding agents.
 
+## Contract Name Registry
+
+The PTB visualization on the review page can show a registered Move Registry
+(MVR) package name in place of a raw package address (for example
+`@deepbook/core`), with a toggle back to the raw address and a copyable Mermaid
+source that keeps raw addresses. The name is a package identity label only, not a
+safety, trust, route-quality, or signing-readiness signal.
+
+If you maintain a Sui DeFi protocol that has a registered MVR name and want its
+package to display that name in the review graph, open a pull request adding your
+mainnet package address and MVR name to
+[`src/core/action/contractNameRegistry.ts`](src/core/action/contractNameRegistry.ts).
+Only packages listed in this registry are relabeled; every other package keeps
+its raw address.
+
 ## For Maintainers
 
 This section is for people operating releases, running smoke checks, changing runtime storage, or debugging startup. Normal users and MCP client users can stop at the documentation map above.

package/dist/core/action/contractNameRegistry.js

@@ -0,0 +1,58 @@
+import { mainnetPackageIds } from "@mysten/deepbook-v3";
+export const CONTRACT_NAME_REGISTRY = [
+    {
+        address: mainnetPackageIds.DEEPBOOK_PACKAGE_ID,
+        name: "@deepbook/core",
+        source: "deepbook_v3_sdk_mainnet_package_id"
+    }
+];
+/**
+ * Normalize a Sui address or package id to `0x` + 64 lowercase hex, or return
+ * undefined when the input is not a well-formed Sui address. Short forms are
+ * left-padded with zeros so different-width forms of the same address compare
+ * equal.
+ */
+function normalizeContractAddress(value) {
+    const lower = value.trim().toLowerCase();
+    const body = lower.startsWith("0x") ? lower.slice(2) : lower;
+    if (body.length === 0 || body.length > 64 || !/^[0-9a-f]+$/.test(body)) {
+        return undefined;
+    }
+    return `0x${body.padStart(64, "0")}`;
+}
+const NAME_BY_ADDRESS = new Map(CONTRACT_NAME_REGISTRY.flatMap((entry) => {
+    const normalized = normalizeContractAddress(entry.address);
+    return normalized === undefined ? [] : [[normalized, entry.name]];
+}));
+/**
+ * Replace every registered package address in PTB Mermaid label text with its
+ * registered name. Only exact normalized-address matches are replaced; unknown
+ * addresses are left unchanged. Mermaid node ids are synthetic (`command0`,
+ * `input0`, ...) and the address only appears inside quoted label text.
+ *
+ * Registered names are Move Registry names like `@deepbook/core`. Mermaid v11
+ * reads a literal `@` as node/edge metadata syntax even inside a quoted label
+ * and crashes the renderer, so the inserted name's `@` is written as the Mermaid
+ * decimal entity `#64;`, which renders as `@` without a literal `@` in the
+ * source. The copyable Mermaid source keeps raw addresses (it is built from the
+ * unmodified text), so this only affects the named, rendered graph.
+ */
+export function applyContractNamesToMermaid(mermaidText) {
+    let text = mermaidText;
+    for (const [address, name] of NAME_BY_ADDRESS) {
+        if (text.includes(address)) {
+            text = text.split(address).join(mermaidSafeName(name));
+        }
+    }
+    return text;
+}
+/**
+ * Escape characters that break Mermaid label parsing. A literal `@` triggers
+ * Mermaid v11 node/edge metadata syntax (even inside quotes) and throws, so it
+ * is written as the `#64;` decimal entity, which renders as `@`. Other Move
+ * Registry name characters (letters, `/`, `-`, `_`, `.`, `:`) are valid in
+ * Mermaid label text.
+ */
+function mermaidSafeName(name) {
+    return name.replace(/@/g, "#64;");
+}

package/dist/core/action/ptbVisualizationProducer.js

@@ -1,5 +1,6 @@
 import { Transaction } from "@mysten/sui/transactions";
 import { rawTransactionToIR, transactionIRToMermaid } from "@zktx.io/ptb-model";
+import { applyContractNamesToMermaid } from "./contractNameRegistry.js";
 import { PTB_VISUALIZATION_CONTRACT_VERSION, PTB_VISUALIZATION_REQUIRED_UNSUPPORTED_USES, ptbVisualizationArtifactSchema } from "./signableAdapterContract.js";
 export const PTB_VISUALIZATION_RENDERER = {
     name: "transactionIRToMermaid",
@@ -44,7 +45,11 @@ export async function producePtbVisualizationArtifact(input) {
         },
         mermaid: {
             diagramType: "flowchart",
-            text: mermaidText
+            // text keeps raw package addresses (truth/audit and copyable source);
+            // namedText relabels registered packages with their Move Registry name for
+            // the default graph, with a review-page toggle back to raw addresses.
+            text: mermaidText,
+            namedText: applyContractNamesToMermaid(mermaidText)
         },
         diagnostics: [],
         unsupportedUse: [...PTB_VISUALIZATION_REQUIRED_UNSUPPORTED_USES],

package/dist/core/action/signableAdapterContract.js

@@ -975,7 +975,8 @@ export const ptbVisualizationArtifactSchema = z.object({
     }).strict(),
     mermaid: z.object({
         diagramType: z.literal("flowchart"),
-        text: displayTextWithoutExecutableMaterial(20_000, "mermaid.text")
+        text: displayTextWithoutExecutableMaterial(20_000, "mermaid.text"),
+        namedText: displayTextWithoutExecutableMaterial(20_000, "mermaid.namedText")
     }).strict(),
     diagnostics: z.array(z.object({
         severity: z.enum(["info", "warning", "error"]),

package/dist/review-app/review.js

@@ -40,4 +40,4 @@ ${e.themeCSS}`),e.fontFamily!==void 0&&(n+=`
 :root { --mermaid-alt-font-family: ${e.altFontFamily}}`),t instanceof Map){let r=e.htmlLabels??e.flowchart?.htmlLabels?[`> *`,`span`]:[`rect`,`polygon`,`ellipse`,`circle`,`path`];t.forEach(e=>{ja(e.styles)||r.forEach(t=>{n+=hs(e.id,t,e.styles)}),ja(e.textStyles)||(n+=hs(e.id,`tspan`,(e?.textStyles||[]).map(e=>e.replace(`color`,`fill`))))})}return n},`createCssStyles`),_s=d((e,t,n,r)=>oa(ta(`${r}{${T(t,gs(e,n),e.themeVariables)}}`),sa),`createUserStyles`),vs=d((e=``,t,n)=>{let r=e;return!n&&!t&&(r=r.replace(/marker-end="url\([\d+./:=?A-Za-z-]*?#/g,`marker-end="url(#`)),r=ge(r),r=r.replace(/<br>/g,`<br/>`),r},`cleanUpSvgCode`),ys=d((e=``,t)=>`<iframe style="width:${as};height:${t?.viewBox?.baseVal?.height?t.viewBox.baseVal.height+`px`:os};${ss}" src="data:text/html;charset=UTF-8;base64,${Zo(`<body style="${cs}">${e}</body>`)}" sandbox="${ls}">
   ${us}
 </iframe>`,`putIntoIFrame`),bs=d((e,t,n,r,i)=>{let a=e.append(`div`);a.attr(`id`,n),r&&a.attr(`style`,r);let o=a.append(`svg`).attr(`id`,t).attr(`width`,`100%`).attr(`xmlns`,ns);return i&&o.attr(`xmlns:xlink`,i),o.append(`g`),e},`appendDivSvgG`);function xs(e,t){return e.append(`iframe`).attr(`id`,t).attr(`style`,`width: 100%; height: 100%;`).attr(`sandbox`,``)}d(xs,`sandboxedIframe`);var Ss=d((e,t,n,r)=>{e.getElementById(t)?.remove(),e.getElementById(n)?.remove(),e.getElementById(r)?.remove()},`removeExistingElements`),Cs=d(async function(e,t,n){Lo();let r=ps(t);t=r.code;let i=fe();u.debug(i),t.length>(i?.maxTextSize??Qo)&&(t=$o);let a=`#`+e,o=`i`+e,s=`#`+o,c=`d`+e,l=`#`+c,p=d(()=>{let e=f(h?s:l).node();e&&`remove`in e&&e.remove()},`removeTempElements`),m=f(`body`),h=i.securityLevel===es,g=i.securityLevel===ts,_=i.fontFamily;n===void 0?(Ss(document,e,c,o),h?(m=f(xs(f(`body`),o).nodes()[0].contentDocument.body),m.node().style.margin=0):m=f(`body`),bs(m,e,c)):(n&&(n.innerHTML=``),h?(m=f(xs(f(n),o).nodes()[0].contentDocument.body),m.node().style.margin=0):m=f(n),bs(m,e,c,`font-family: ${_}`,rs));let v,y;try{v=await Ho.fromText(t,{title:r.title})}catch(e){if(i.suppressErrorRendering)throw p(),e;v=await Ho.fromText(`error`),y=e}let b=m.select(l).node(),x=v.type,C=b.firstChild,w=C.firstChild,ee=v.renderer.getClasses?.(t,v),te=_s(i,x,ee,a),re=document.createElement(`style`);re.innerHTML=te,C.insertBefore(re,w);try{await v.renderer.draw(t,e,Ve.version,v)}catch(n){throw i.suppressErrorRendering?p():mo.draw(t,e,Ve.version),n}let ie=m.select(`${l} svg`),ae=v.db.getAccTitle?.(),oe=v.db.getAccDescription?.();Es(x,ie,ae,oe),m.select(`[id="${e}"]`).selectAll(`foreignobject > *`).attr(`xmlns`,is);let T=m.select(l).node().innerHTML;if(u.debug(`config.arrowMarkerAbsolute`,i.arrowMarkerAbsolute),T=vs(T,h,ne(i.arrowMarkerAbsolute)),h){let e=m.select(l+` svg`).node();T=ys(T,e)}else g||(T=S.sanitize(T,{ADD_TAGS:ds,ADD_ATTR:fs,HTML_INTEGRATION_POINTS:{foreignobject:!0}}));if(Wo(),y)throw y;return p(),{diagramType:x,svg:T,bindFunctions:v.db.bindFunctions}},`render`);function ws(e={}){let t=se({},e);t?.fontFamily&&!t.themeVariables?.fontFamily&&(t.themeVariables||={},t.themeVariables.fontFamily=t.fontFamily),g(t),t?.theme&&t.theme in p?t.themeVariables=p[t.theme].getThemeVariables(t.themeVariables):t&&(t.themeVariables=p.default.getThemeVariables(t.themeVariables)),l((typeof t==`object`?y(t):ue()).logLevel),Lo()}d(ws,`initialize`);var Ts=d((e,t={})=>{let{code:n}=Xo(e);return Ho.fromText(n,t)},`getDiagramFromText`);function Es(e,t,n,r){Bo(t,e),Vo(t,n,r,t.attr(`id`))}d(Es,`addA11yInfo`);var Ds=Object.freeze({render:Cs,parse:ms,getDiagramFromText:Ts,initialize:ws,getConfig:fe,setConfig:v,getSiteConfig:ue,updateSiteConfig:x,reset:d(()=>{h()},`reset`),globalReset:d(()=>{h(ie)},`globalReset`),defaultConfig:ie});l(fe().logLevel),h(fe());var Os=d((e,t,n)=>{u.warn(e),me(e)?(n&&n(e.str,e.hash),t.push({...e,message:e.str,error:e})):(n&&n(e),e instanceof Error&&t.push({str:e.message,message:e.message,hash:e.name,error:e}))},`handleError`),ks=d(async function(e={querySelector:`.mermaid`}){try{await As(e)}catch(t){if(me(t)&&u.error(t.str),H.parseError&&H.parseError(t),!e.suppressErrors)throw u.error(`Use the suppressErrors option to suppress these errors`),t}},`run`),As=d(async function({postRenderCallback:e,querySelector:t,nodes:n}={querySelector:`.mermaid`}){let r=Ds.getConfig();u.debug(`${e?``:`No `}Callback function found`);let i;if(n)i=n;else if(t)i=document.querySelectorAll(t);else throw Error(`Nodes and querySelector are both undefined`);u.debug(`Found ${i.length} diagrams`),r?.startOnLoad!==void 0&&(u.debug(`Start On Load: `+r?.startOnLoad),Ds.updateSiteConfig({startOnLoad:r?.startOnLoad}));let a=new he.InitIDGenerator(r.deterministicIds,r.deterministicIDSeed),o,s=[];for(let t of Array.from(i)){if(u.info(`Rendering diagram: `+t.id),t.getAttribute(`data-processed`))continue;t.setAttribute(`data-processed`,`true`);let n=`mermaid-${a.next()}`;o=t.innerHTML,o=Ne(he.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,`<br/>`);let r=he.detectInit(o);r&&u.debug(`Detected early reinit: `,r);try{let{svg:r,bindFunctions:i}=await Bs(n,o,t);t.innerHTML=r,e&&await e(n),i&&i(t)}catch(e){Os(e,s,H.parseError)}}if(s.length>0)throw s[0]},`runThrowsErrors`),js=d(function(e){Ds.initialize(e)},`initialize`),Ms=d(async function(e,t,n){u.warn(`mermaid.init is deprecated. Please use run instead.`),e&&js(e);let r={postRenderCallback:n,querySelector:`.mermaid`};typeof t==`string`?r.querySelector=t:t&&(t instanceof HTMLElement?r.nodes=[t]:r.nodes=t),await ks(r)},`init`),Ns=d(async(e,{lazyLoad:t=!0}={})=>{Lo(),m(...e),t===!1&&await Ro()},`registerExternalDiagrams`),Ps=d(function(){if(H.startOnLoad){let{startOnLoad:e}=Ds.getConfig();e&&H.run().catch(e=>u.error(`Mermaid failed to initialize`,e))}},`contentLoaded`);typeof document<`u`&&window.addEventListener(`load`,Ps,!1);var Fs=d(function(e){H.parseError=e},`setParseErrorHandler`),Is=[],Ls=!1,Rs=d(async()=>{if(!Ls){for(Ls=!0;Is.length>0;){let e=Is.shift();if(e)try{await e()}catch(e){u.error(`Error executing queue`,e)}}Ls=!1}},`executeQueue`),zs=d(async(e,t)=>new Promise((n,r)=>{let i=d(()=>new Promise((i,a)=>{Ds.parse(e,t).then(e=>{i(e),n(e)},e=>{u.error(`Error parsing`,e),H.parseError?.(e),a(e),r(e)})}),`performCall`);Is.push(i),Rs().catch(r)}),`parse`),Bs=d((e,t,n)=>new Promise((r,i)=>{let a=d(()=>new Promise((a,o)=>{Ds.render(e,t,n).then(e=>{a(e),r(e)},e=>{u.error(`Error parsing`,e),H.parseError?.(e),o(e),i(e)})}),`performCall`);Is.push(a),Rs().catch(i)}),`render`),H={startOnLoad:!0,mermaidAPI:Ds,parse:zs,render:Bs,init:Ms,run:ks,registerExternalDiagrams:Ns,registerLayoutLoaders:yi,initialize:js,parseError:void 0,contentLoaded:Ps,setParseErrorHandler:Fs,detectType:ee,registerIconPacks:Me,getRegisteredDiagramsMetadata:d(()=>Object.keys(oe).map(e=>({id:e})),`getRegisteredDiagramsMetadata`)},Vs=H,Hs=document.querySelector(`#review-app`);if(!Hs)throw Error(`review app root missing`);var Us=Hs,U=Us.dataset.reviewSessionId??``,Ws=window.location.hash.startsWith(`#`)?window.location.hash.slice(1):``,W,Gs,Ks=``,G=!1;Vs.initialize({startOnLoad:!1,securityLevel:`strict`,theme:`default`,flowchart:{useMaxWidth:!0}});var qs=0,Js=r();Js.stores.$wallets.subscribe(()=>J()),Js.stores.$connection.subscribe(()=>J());var K=!1,Ys=!1,q,Xs=!1,Zs=o();Zs&&window.setTimeout(()=>{Zs=!1,J()},2e3),U&&Ws?Mc():J();var Qs;function $s(e){let t=e.reviewState?.humanReadableReview?.freshness.expiresAt;return t?Date.parse(t):void 0}function ec(e){if(Xs)return`session_expired`;if(e.executionResult||e.internalStatus===`success`||e.internalStatus===`failure`)return`done`;if(e.internalStatus===`signed_pending_result`)return`chain_wait`;if(e.signingInProgress||K)return`signing`;if(e.reviewState?.status===`ready_for_wallet_review`){let t=$s(e);return t!==void 0&&Date.now()>t?`expired_quote`:`ready`}return e.reviewState?`stopped`:e.activeAccount?`pre_review`:`no_identity`}function tc(e){return e===`done`||e===`chain_wait`?`result`:e===`ready`||e===`expired_quote`||e===`signing`?`sign`:`review`}var nc={no_identity:`No active wallet account for this review - see the details below.`,pre_review:`Start the review to check this transaction against live mainnet data.`,stopped:`The review stopped - see the reason below, then run it again.`,ready:`Ready to sign - check the summary, then sign in your wallet.`,expired_quote:`The price quote expired. Your funds are safe - refresh to get a current quote.`,signing:`Waiting for your wallet - approve or reject the request in the wallet popup.`,chain_wait:`Signed - waiting for the chain result.`,done:`This review session is finished - for another transaction, ask your AI client to prepare a new review.`,session_expired:`This review session has expired. Ask your AI client for a new review.`};function rc(e){let t=[{key:`review`,label:`Review`},{key:`sign`,label:`Sign`},{key:`result`,label:`Result`}],n=t.findIndex(t=>t.key===e),r=$(`div`,`wizard-steps`);return t.forEach((e,i)=>{let a=i<n?`done`:i===n?`current`:`upcoming`,o=$(`span`,a===`upcoming`?`wizard-step`:`wizard-step ${a}`,`${a===`done`?`✓`:a===`current`?`●`:`${i+1}.`} ${e.label}`);o.setAttribute(`aria-label`,`${e.label} step ${a}`),r.append(o),i<t.length-1&&r.append($(`span`,`wizard-sep`,`→`))}),r}function ic(e){return e.length>12?`${e.slice(0,6)}…${e.slice(-4)}`:e}function ac(){let e=$(`div`,`header-wallet`),t=W?.activeAccount;if(!t||Xs)return e;let n=Js.stores.$connection.get(),r=n.status===`connected`&&n.account.address===t.account,i=Zs||n.status===`connecting`,a=$(`span`,`wallet-chip`),o=$(`span`,`wallet-chip-dot`);r||o.classList.add(i?`wallet-chip-dot-settling`:`wallet-chip-dot-idle`),a.append(o);let s=t.walletName?`${t.walletName} · ${ic(t.account)}`:ic(t.account);return a.append($(`span`,void 0,s)),a.title=t.account,e.append(a),i&&!r&&e.append($(`span`,`status`,`Reconnecting signer…`)),e}function J(){Us.innerHTML=``;let e=$(`section`,`review-shell`),t=$(`div`,`page-header`);if(t.append($(`h1`,void 0,`Say Ur Intent`)),t.append($(`span`,`page-subtitle`,`Transaction review and signing`)),t.append(ac()),e.append(t),Ks){let t=$(`p`,`status error`,Ks);t.setAttribute(`role`,`status`),t.setAttribute(`aria-live`,`polite`),e.append(t)}if(!U||!Ws){e.append($(`p`,`error`,`Missing review session id or token. Open the review URL from your AI client again.`)),Us.append(e);return}if(!W){e.append(Q(`Reload review session`,()=>void Nc(),`secondary`)),Us.append(e);return}let n=ec(W);switch(e.append(rc(tc(n))),e.append($(`h3`,`stage-headline`,nc[n])),q&&e.append($(`p`,q.kind===`error`?`error sign-banner`:`status sign-banner`,q.text)),oc(n),e.append(lc(W)),n){case`session_expired`:break;case`done`:case`chain_wait`:W.executionResult&&e.append(_c(W.executionResult)),e.append(hc(W,n));break;case`signing`:{let t=X(`Signing in progress`);t.append($(`p`,void 0,`Your wallet shows exactly what will be signed. Nothing happens without your approval there.`)),t.append($(`p`,void 0,`If you do not see the wallet popup, open your wallet extension - or cancel below.`));let r=$(`div`,`actions`);r.append(Q(`Cancel signing`,()=>void gc(),`secondary`)),t.append(r),e.append(t),e.append(hc(W,n));break}case`ready`:W.reviewState&&(e.append(fc(W.reviewState)),e.append(Fc(W.reviewState))),e.append(hc(W,n));break;case`expired_quote`:{let t=X(`Quote expired`);t.append($(`p`,void 0,`Nothing was signed and no funds moved. Prices are only held for 30 seconds - refresh to continue.`));let r=$(`div`,`actions`),i=Q(`Refresh price quote`,()=>void Pc(),`primary`);i.disabled=G,r.append(i),t.append(r),e.append(t),e.append(hc(W,n));break}case`stopped`:e.append(sc(W)),e.append(hc(W,n));break;case`no_identity`:{let t=X(`No active wallet account`);t.append($(`p`,`error`,`This review has no active wallet account. The account was cleared after the review was created, so its checks cannot run.`)),t.append($(`p`,`boundary-note`,`Connect a wallet from your AI client (session.create_wallet_identity) and prepare the review again. Wallet connection is not done on this review page.`)),e.append(t);break}case`pre_review`:{let t=Uc(W);if(t?.reviewModel){let n=X(`External proposal review`);n.append(vc(t.reviewModel)),e.append(n)}let r=$(`div`,`actions`),i=Q(`Start review`,()=>void Pc(),`primary`);i.disabled=G,r.append(i),e.append(r),e.append(hc(W,n));break}}Us.append(e)}function oc(e){Qs&&=(clearInterval(Qs),void 0),e===`ready`&&(Qs=setInterval(()=>{let e=W?$s(W):void 0,t=document.querySelector(`.quote-countdown`);if(e===void 0||!t)return;let n=Math.max(0,Math.ceil((e-Date.now())/1e3));t.textContent=`Quote valid for ${n}s - if it expires, just refresh; your funds stay safe.`,n===0&&J()},1e3))}function sc(e){let t=X(`Why the review stopped`),n=e.reviewState,r=n?.blockedReason??n?.refreshReason??`unknown`,i={insufficient_balance:`The account does not hold enough assets for this swap - see the exact amounts below.`,zero_expected_output:`The amount is too small for this pool minimum order size - try a larger amount.`,quote_unavailable:`The pool could not quote this amount right now - it may be below the pool minimum, or the price source had a hiccup.`,quote_stale:`The price quote expired. Running again fetches a fresh quote - your funds are safe.`,object_resolution_failed:`Required on-chain objects could not be resolved while building the transaction. Running again usually resolves this.`},a=(n?.checks??[]).find(e=>e.status===`fail`),o=String(r),s=a&&/zero_expected_output/.test(a.message)?`zero_expected_output`:o;i[s]&&t.append($(`p`,void 0,i[s])),t.append(Z(`Reason`,o));let c=(n?.checks??[]).filter(e=>e.status===`fail`);for(let e of c)t.append($(`p`,`error`,`${e.label}: ${e.message}`));let l=$(`div`,`actions`),u=Q(`Run review again`,()=>void Pc(),`primary`);return u.disabled=G,l.append(u),t.append(l),t}function cc(e,t){let n=BigInt(e),r=10n**BigInt(t),i=n/r,a=(n%r).toString().padStart(t,`0`).replace(/0+$/,``);return a?`${i}.${a}`:i.toString()}function lc(e){let t=X(`Transaction`),n=Uc(e),r=e.reviewState?.humanReadableReview,i=r&&r.kind===`swap_human_readable_review`?r:void 0;if(!n)return t.append($(`p`,`error`,`No action plan is available for this review session.`)),t;let a=n.assetFlowPreview.outgoing[0],o=n.assetFlowPreview.expectedIncoming[0],s=i?.assetFlow.outgoing[0],c=i?.assetFlow.minimumIncoming[0];t.append(Z(`You send`,s?`${cc(s.rawAmount,s.decimals)} ${s.symbol}`:a?`${a.amount} ${a.symbol}`:`-`)),t.append(Z(`You receive`,c?`at least ${cc(c.rawAmount,c.decimals)} ${c.symbol} (guaranteed minimum)`:o?`${o.symbol} (amount confirmed after review)`:`-`));let l=i?.assetFlow.fees[0];if(l){let e=BigInt(l.rawAmount);t.append(Z(`Protocol fee`,e===0n?`Included in the rate (paid from the coin you send)`:`${cc(l.rawAmount,l.decimals)} ${l.symbol}`))}let u=i?.recipients.find(e=>e.role===`output_recipient`);t.append(Z(`Receiving account`,u?`${Tc(u.address)} (your connected account)`:e.activeAccount?`${Tc(e.activeAccount.account)} (your connected account)`:`your connected account`));let d=i?.targets[0];return t.append(Z(`Via`,d?`${d.protocol} ${d.poolKey}`:n.protocol)),t}function uc(e){let t=new Map,n=e.humanReadableReview;if(n&&n.kind===`swap_human_readable_review`)for(let e of[...n.assetFlow.outgoing,...n.assetFlow.expectedIncoming,...n.assetFlow.minimumIncoming,...n.assetFlow.fees])t.set(e.coinType,{symbol:e.symbol,decimals:e.decimals});return t}function dc(e,t){let n=typeof e.coinType==`string`?e.coinType:``,r=typeof e.amount==`string`?e.amount:`0`,i=t.get(n);if(!i)return Dc(e);let a=r.startsWith(`-`),o=BigInt(a?r.slice(1):r);return`${a?`-`:`+`}${cc(o.toString(),i.decimals)} ${i.symbol}`}function fc(e){let t=X(`Review result`),n=e.checks.filter(e=>e.status===`pass`).length;t.append($(`p`,`key-findings-line`,`All review checks passed (${n}/${e.checks.length}).`));let r=e.simulation?.balanceChanges??[];if(r.length>0){let n=uc(e);t.append($(`p`,`key-findings-line`,`Simulation verified balance changes: ${r.map(e=>dc(e,n)).join(`  |  `)}`))}return e.ptbVisualization&&t.append(xc(e.ptbVisualization)),t.append($(`p`,`quote-countdown`,`Quote valid for 30s - if it expires, just refresh; your funds stay safe.`)),t}function pc(e){let t=[],n=e.reviewState;t.push(`# Say Ur Intent - review audit record`),t.push(``),t.push(`- Review session: ${e.reviewSessionId}`),t.push(`- Status: ${e.pollingStatus}`),n&&(t.push(`- Updated at: ${n.updatedAt}`),t.push(`- Review account: ${n.account}`)),e.executionResult&&(t.push(``),t.push(`## Execution result`),t.push(`- Status: ${e.executionResult.status}`),e.executionResult.txDigest&&t.push(`- Transaction digest: ${e.executionResult.txDigest}`),e.executionResult.failureReason&&t.push(`- Failure reason: ${e.executionResult.failureReason}`),e.executionResult.recordedAt&&t.push(`- Recorded at: ${e.executionResult.recordedAt}`));let r=n?.humanReadableReview;if(r&&r.kind===`swap_human_readable_review`){t.push(``),t.push(`## Transaction`),t.push(`- Action: ${r.proposedAction.title}`);for(let[e,n]of[[`You send`,r.assetFlow.outgoing],[`Expected incoming`,r.assetFlow.expectedIncoming],[`Minimum incoming`,r.assetFlow.minimumIncoming],[`Fees`,r.assetFlow.fees]])for(let r of n)t.push(`- ${e}: ${cc(r.rawAmount,r.decimals)} ${r.symbol} (${r.rawAmount} raw, ${r.coinType})`);for(let e of r.recipients)t.push(`- Recipient (${e.role}): ${e.address}`);let e=r.targets[0];e&&t.push(`- Via: ${e.protocol} ${e.poolKey} (${e.direction})`),t.push(`- Freshness: ${r.freshness.status}, expires ${r.freshness.expiresAt}`);for(let e of r.evidenceUsed)t.push(`- Evidence used - ${e.label}: ${e.summary}`);for(let e of r.missingEvidence)t.push(`- Missing evidence - ${e.label}: ${e.reason}`);for(let e of r.requiredUserChoices)t.push(`- Required user choice - ${e.label}: ${e.reason}`);for(let e of r.unsupportedClaims)t.push(`- Unsupported claim - ${e.label}: ${e.reason}`)}let i=n?.adapterLifecycle;i&&(t.push(``),t.push(`## Adapter lifecycle`),t.push(`- Adapter: ${i.adapterId} / ${i.protocol} / ${i.actionKind}`),t.push(`- Stage catalog: ${i.stageCatalogId}`),t.push(`- Completed: ${i.completedStages.join(`, `)||`-`}`),t.push(`- Missing: ${i.missingStages.join(`, `)||`-`}`));let a=n?.simulation;if(a){t.push(``),t.push(`## Review-time simulation`),t.push(`- Provider: ${a.provider}`),t.push(`- Success: ${a.success?`yes`:`no`}`),a.gasCostSummary&&t.push(`- Gas (raw): computation ${a.gasCostSummary.computationCostRaw}, storage ${a.gasCostSummary.storageCostRaw}, rebate ${a.gasCostSummary.storageRebateRaw}`);let e=a.balanceChanges??[];if(e.length>0){t.push(`- Balance changes (${e.length}):`);for(let n of e)t.push(`  - ${Dc(n)}`)}let n=a.objectChanges??[];if(n.length>0){t.push(`- Object changes (${n.length}):`);for(let e of n)t.push(`  - ${Oc(e)}`)}(e.length>0||n.length>0)&&(t.push(``),t.push(`Raw records:`),t.push("```json"),t.push(JSON.stringify({balanceChanges:e,objectChanges:n},null,2)),t.push("```"))}if(n?.ptbVisualization&&(t.push(``),t.push(`## PTB visualization (Mermaid)`),t.push("```mermaid"),t.push(n.ptbVisualization.mermaid.text),t.push("```")),n){t.push(``),t.push(`## Checks`);for(let e of n.checks)t.push(`- [${e.status}] ${e.id}: ${e.message}`)}return t.push(``),t.push(`_Local pre-signing review evidence. Not transaction bytes, signing data, signing readiness, or execution safety._`),t.join(`
-`)}async function mc(e){if(!W)return;let t=pc(W);try{await navigator.clipboard.writeText(t);let n=e.textContent;e.textContent=`Copied!`,setTimeout(()=>{e.textContent=n},1500)}catch{window.prompt(`Copy the audit record:`,t)}}function hc(e,t){let n=$(`section`,`card raw-evidence-card`),r=$(`div`,`card-header`);r.append($(`h2`,void 0,`Raw evidence`));let i=Q(`Copy as Markdown`,()=>void mc(i),`secondary`);i.classList.add(`copy-audit`),r.append(i),n.append(r);let a=document.createElement(`details`);a.className=`final-evidence collapsible-records`;let o=document.createElement(`summary`);o.textContent=t===`done`||t===`chain_wait`?`Show audit record (final snapshot)`:`Show audit record`,a.append(o);let s=document.createElement(`div`);s.className=`raw-evidence-body`;let c=e.reviewState,l=(e,t)=>{let n=document.createElement(`details`);n.className=`collapsible-records`;let r=document.createElement(`summary`);return r.textContent=e,n.append(r,t),n};return s.append(Z(`Review session`,e.reviewSessionId)),c?(s.append(Z(`Updated at`,c.updatedAt)),c.adapterLifecycle&&s.append(l(`Adapter lifecycle`,yc(c.adapterLifecycle))),c.humanReadableReview&&s.append(l(`Human-readable review (raw units)`,bc(c.humanReadableReview,c.simulation!==void 0))),c.simulation&&s.append(l(`Review-time simulation`,Sc(c.simulation))),c.ptbVisualization&&s.append(l(`PTB visualization`,xc(c.ptbVisualization))),s.append(l(`All checks (${c.checks.length})`,Kc(``,c.checks)))):s.append($(`p`,void 0,`No review evidence recorded yet.`)),a.append(s),n.append(a),n}async function gc(){try{await Hc(`/api/review/${encodeURIComponent(U)}/handoff/cancel`,{method:`POST`,body:`{}`}),q={kind:`info`,text:`Signing cancelled. Nothing was signed.`}}catch(e){q={kind:`error`,text:t(e,`Could not cancel signing.`)}}K=!1,await Nc()}function _c(e){let t=X(`Execution result`);t.classList.add(e.status===`success`?`execution-success`:e.status===`failure`?`execution-failure`:`execution-pending`);let n=e.status===`success`?`Transaction executed successfully.`:e.status===`failure`?`Transaction did not execute.`:`Signed - waiting for the chain result.`;return t.append($(`p`,`execution-headline`,n)),e.txDigest&&t.append(Z(`Transaction digest`,e.txDigest)),e.failureReason&&t.append(Z(`Failure reason`,e.failureReason)),e.failureDetail&&t.append(Z(`Detail`,e.failureDetail)),e.recordedAt&&t.append(Z(`Recorded at`,e.recordedAt)),t.append($(`p`,`boundary-note`,`Recorded from your wallet's execution result for this review session. Verify the digest in a Sui explorer for chain-level confirmation.`)),t}function vc(e){let t=$(`div`,`proposal-review`);return t.append($(`h4`,void 0,`Proposal review`)),t.append(Z(`Proposal id`,e.proposalId)),t.append(Z(`Proposal source`,`${e.proposalSource.kind}: ${e.proposalSource.name}`)),e.proposalSource.reference&&t.append(Z(`Source reference`,e.proposalSource.reference)),t.append(Z(`Purpose`,e.proposedAction.purpose)),t.append(Z(`Network`,e.proposedAction.network)),e.proposedAction.recipient&&t.append(Z(`Recipient`,qc(e.proposedAction.recipient))),e.proposedAction.target&&t.append(Z(`Target`,Jc(e.proposedAction.target))),t.append(Wc(`Proposal outgoing`,e.assetFlow.outgoing)),t.append(Wc(`Proposal expected incoming`,e.assetFlow.expectedIncoming)),t.append(Wc(`Proposal fees`,e.assetFlow.fees)),t.append(Y(`Evidence used`,e.evidenceUsed.map(e=>`${e.label}: ${e.summary}`))),t.append(Y(`Missing evidence`,e.missingEvidence.map(e=>`${e.label}: ${e.reason}`))),t.append(Y(`Required user choices`,e.requiredUserChoices.map(e=>`${e.label}: ${e.reason}`))),t.append(Y(`Unsupported claims`,e.unsupportedClaims.map(e=>`${e.label}: ${e.reason}`))),t.append(Z(`Freshness`,`${e.freshness.status}: ${e.freshness.reason}`)),t.append(Z(`Non-signable reason`,e.nonSignableReason.message)),t.append(Y(`Blocked capabilities`,e.nonSignableReason.blockedCapabilities)),t}function yc(e){let t=$(`div`,`adapter-lifecycle`);return t.append($(`h4`,void 0,`Adapter lifecycle`)),t.append(Z(`Adapter`,`${e.adapterId} / ${e.protocol} / ${e.actionKind}`)),t.append(Z(`Stage catalog`,e.stageCatalogId)),t.append(Y(`Completed stages`,e.completedStages)),t.append(Y(`Missing stages`,e.missingStages)),t.append($(`p`,`boundary-note`,`Local pre-signing review progress only.`)),t}function bc(e,t){let n=$(`div`,`human-readable-review`);n.append($(`h4`,void 0,`Human-readable review`)),n.append(Z(`Review kind`,e.kind)),n.append(Z(`Action`,e.proposedAction.title)),n.append(Z(`Summary`,wc(e.proposedAction.summary))),n.append(Z(`Protocol`,e.proposedAction.protocol)),n.append(Z(`Freshness`,`${e.freshness.status}: ${e.freshness.reason}`)),n.append(Z(`Expires at`,e.freshness.expiresAt)),n.append(Ac(e)),n.append(Y(`Recipients`,e.recipients.map(e=>`${e.role}: ${e.address}`))),n.append(Y(`Evidence used`,e.evidenceUsed.map(e=>`${e.label}: ${e.summary}`)));let r=t?e.missingEvidence.filter(e=>!/simulation/i.test(e.id)&&!/simulation/i.test(e.label)):e.missingEvidence;n.append(Y(`Missing evidence`,r.map(e=>`${e.label}: ${e.reason}`))),n.append(Y(`Required user choices`,e.requiredUserChoices.map(e=>`${e.label}: ${e.reason}`))),n.append(Y(`Unsupported claims`,e.unsupportedClaims.map(e=>`${e.label}: ${e.reason}`)));let i=t?e.blockingChecks.filter(e=>!/simulation/i.test(e.id)):e.blockingChecks;return i.length>0&&n.append(Kc(`Human review blocking checks`,i)),n.append($(`p`,`boundary-note`,`Displayable pre-signing evidence only.`)),n}function xc(e){let t=$(`div`,`ptb-visualization`);if(t.append($(`h4`,void 0,`PTB visualization`)),t.append(Z(`Generated at`,e.generatedAt)),e.source.renderer){let n=e.source.renderer;t.append(Z(`Renderer`,`${n.name}${n.packageName?` (${n.packageName}${n.version?`@${n.version}`:``})`:``}`))}let n=document.createElement(`div`);n.className=`ptb-visualization-graph`,n.textContent=`Rendering PTB graph...`,t.append(n),qs+=1,Vs.render(`ptb-graph-${qs}`,e.mermaid.text).then(e=>{n.innerHTML=e.svg}).catch(e=>{n.textContent=`PTB graph rendering failed: ${e instanceof Error?e.message:String(e)}`,n.classList.add(`error`)});let r=document.createElement(`details`);r.className=`ptb-visualization-source`;let i=document.createElement(`summary`);i.textContent=`Mermaid source (${e.mermaid.text.length} chars)`;let a=Q(`Copy Mermaid`,()=>{navigator.clipboard.writeText(e.mermaid.text).then(()=>{a.textContent=`Copied!`,setTimeout(()=>{a.textContent=`Copy Mermaid`},1500)}).catch(()=>window.prompt(`Copy the Mermaid source:`,e.mermaid.text))},`secondary`);a.classList.add(`copy-mermaid`);let o=document.createElement(`pre`);return o.className=`ptb-visualization-text`,o.textContent=e.mermaid.text,r.append(i,a,o),t.append(r),e.diagnostics.length>0&&t.append(Y(`Renderer diagnostics`,e.diagnostics.map(e=>`${e.severity} ${e.code}: ${e.message}`))),t.append($(`p`,`boundary-note`,`Diagram of the locally stored transaction shape - visualization only.`)),t}function Sc(e){let t=$(`div`,`simulation-summary`);return t.append($(`h4`,void 0,`Review-time simulation`)),t.append(Z(`Provider`,e.provider)),t.append(Z(`Validation checks`,e.checksEnabled?`Enabled`:`Disabled`)),t.append(Z(`Simulation success`,e.success?`Yes`:`No`)),e.gasCostSummary&&t.append(Y(`Gas cost summary`,[`Computation cost raw: ${e.gasCostSummary.computationCostRaw}`,`Storage cost raw: ${e.gasCostSummary.storageCostRaw}`,`Storage rebate raw: ${e.gasCostSummary.storageRebateRaw}`,`Non-refundable storage fee raw: ${e.gasCostSummary.nonRefundableStorageFeeRaw}`])),e.error&&t.append(Z(`Simulation error`,e.error)),t.append(kc(`Balance changes`,e.balanceChanges,Dc)),t.append(kc(`Object changes`,e.objectChanges,Oc)),t.append($(`p`,`boundary-note`,`Redacted summary of private review-time simulation evidence.`)),t}var Cc=/\s*This MCP response contains no sign action, signing data, transaction bytes, or signing readiness\.?/g;function wc(e){return e.replace(Cc,``).trim()}function Tc(e){return e.length>14?`${e.slice(0,8)}…${e.slice(-6)}`:e}function Ec(e){return e.split(`<`).map(e=>e.split(`::`).map(e=>e.startsWith(`0x`)&&e.length>14?Tc(e):e).join(`::`)).join(`<`)}function Dc(e){let t=typeof e.address==`string`?Tc(e.address):`?`,n=typeof e.coinType==`string`?Ec(e.coinType):`?`,r=typeof e.amount==`string`?e.amount:`?`;return`${t}: ${r.startsWith(`-`)?r:`+${r}`} raw (${n})`}function Oc(e){return`${typeof e.idOperation==`string`?e.idOperation:`?`}: ${typeof e.objectType==`string`?Ec(e.objectType):`?`} (${typeof e.objectId==`string`?Tc(e.objectId):`?`})`}function kc(e,t,n){let r=document.createElement(`details`);r.className=`collapsible-records`;let i=document.createElement(`summary`);if(i.textContent=`${e} (${t?.length??0})`,r.append(i),!t||t.length===0)return r.append($(`p`,void 0,`None.`)),r;let a=document.createElement(`ul`);for(let e of t){let t=document.createElement(`li`);t.textContent=n(e),a.append(t)}r.append(a);let o=document.createElement(`details`),s=document.createElement(`summary`);s.textContent=`Raw records`;let c=document.createElement(`pre`);return c.className=`collapsible-records-raw`,c.textContent=JSON.stringify(t,null,2),o.append(s,c),r.append(o),r}function Ac(e){switch(e.kind){case`swap_human_readable_review`:return jc(e)}}function jc(e){let t=$(`div`,`human-readable-review-projection`);return t.append(Gc(`Outgoing`,e.assetFlow.outgoing)),t.append(Gc(`Expected incoming`,e.assetFlow.expectedIncoming)),t.append(Gc(`Minimum incoming`,e.assetFlow.minimumIncoming)),t.append(Gc(`Fees`,e.assetFlow.fees)),t.append(Y(`Targets`,e.targets.map(e=>`${e.kind}: ${e.symbol} via ${e.protocol} ${e.poolKey}`))),t}async function Mc(){G=!0,J();try{await Hc(`/api/review/${encodeURIComponent(U)}/opened`,{method:`POST`,body:`{}`}),await Nc()}catch(e){Ks=t(e,`The local review server did not accept this review session.`),G=!1,J()}}async function Nc(){G=!0,J();try{W=await Hc(`/api/review/${encodeURIComponent(U)}`,{method:`GET`}),Gs??=W.plans[0]?.id,Ks=``}catch(e){e instanceof n&&e.status===410&&(Xs=!0),Ks=t(e,`Could not load the review session.`)}finally{G=!1,J()}}async function Pc(){let e=W?.activeAccount?.account,r=W?Uc(W):void 0;if(!(!e||!r)){G=!0,J();try{let t=()=>Hc(`/api/review/${encodeURIComponent(U)}/state`,{method:`POST`,body:JSON.stringify({planId:r.id,account:e})}),i;try{i=await t()}catch(e){if(e instanceof n&&e.status===409&&W?.signingInProgress)await Hc(`/api/review/${encodeURIComponent(U)}/handoff/cancel`,{method:`POST`,body:`{}`}),i=await t();else throw e}W={...await Hc(`/api/review/${encodeURIComponent(U)}`,{method:`GET`}),reviewState:i.reviewState},Ks=``}catch(e){Ks=t(e,`Could not run account-bound review.`)}finally{G=!1,J()}}}function Fc(e){let t=X(`Wallet signing`);t.classList.add(`signing-section`),q&&t.append($(`p`,q.kind===`error`?`error`:`status`,q.text));let n=Js.stores.$connection.get(),r=Js.stores.$wallets.get();if(n.status===`connected`)if(Zs=!1,n.account.address!==e.account)t.append($(`p`,`error`,`Connected wallet account ${n.account.address} does not match the reviewed account ${e.account}. Switch the wallet account before signing.`));else{t.append($(`p`,void 0,`Signing hands the digest-verified transaction bytes to your wallet. Finish or cancel the request in your wallet popup.`));let n=Q(K?`Waiting for wallet`:`Sign in wallet`,()=>void Ic(e),`primary`);n.disabled=K,t.append(n)}else if(Zs||n.status===`connecting`)t.append($(`p`,`status`,`Reconnecting your wallet…`));else if(r.length===0)t.append($(`p`,`error`,`No compatible Sui wallet was detected in this browser.`));else{t.append($(`p`,`error`,`Your wallet signer is not connected, so this transaction cannot be signed yet.`));let e=Lc(r,W?.activeAccount?.walletId,W?.activeAccount?.walletName);if(e){t.append($(`p`,`boundary-note`,`Reconnect resumes the signer session for this review's wallet. Your wallet (or hardware device) asks you to approve the connection; nothing is signed until you press Sign.`));let n=W?.activeAccount?.walletName??`wallet`,r=Q(Ys?`Reconnecting…`:`Reconnect ${n} to sign`,()=>void Rc(e),`primary`);r.disabled=Ys,t.append(r)}else t.append($(`p`,`boundary-note`,`This review's wallet was not detected in this browser. Open the review where that wallet (or hardware device) is available, or connect it from your AI client (session.create_wallet_identity) and reopen this review.`))}return t.append($(`p`,`boundary-note`,`Signing happens in your wallet. This page never sees private keys; it hands over bytes whose recomputed digest equals the reviewed commitment.`)),t}async function Ic(e){if(K)return;K=!0,q={kind:`info`,text:`Approve the request in your wallet. After approval this page waits for the chain result and shows success or failure here.`},J();let n=!1;try{let r=await Hc(`/api/review/${encodeURIComponent(U)}/handoff`,{method:`POST`,body:JSON.stringify({planId:e.planId,account:e.account})}),i=Vc(r.transactionBytesBase64),o=a.from(i);if(await o.getDigest()!==r.transactionMaterialCommitment)throw Error(`Handoff bytes do not match the reviewed transaction commitment.`);n=!0;let c=await Bc(Js.signTransaction({transaction:o}),9e4,`The wallet did not respond to the signing request within 90 seconds.`),l=Vc(c.bytes),u=await a.from(l).getDigest();if(u!==r.transactionMaterialCommitment){await zc(e,{status:`failure`,failureReason:`wallet_provider_error`}),q={kind:`error`,text:`The wallet returned bytes whose digest does not match the reviewed commitment; nothing was submitted.`};return}await zc(e,{status:`signed_pending_result`,txDigest:u});let d;try{d=await s.core.executeTransaction({transaction:l,signatures:[c.signature],include:{effects:!0}})}catch(n){await zc(e,{status:`failure`,failureReason:`transaction_submit_failed`}),q={kind:`error`,text:t(n,`The signed transaction could not be submitted to the chain.`)};return}if(d.$kind!==`Transaction`||!d.Transaction){await zc(e,{status:`failure`,failureReason:`execution_result_unavailable`}),q={kind:`error`,text:`The chain did not return an executed transaction record.`};return}let f=d.Transaction.digest,p=d.Transaction.effects?.status;if(p&&!p.success){await zc(e,{status:`failure`,failureReason:`unknown_failure`}),q={kind:`error`,text:`The transaction executed on chain but failed - see the receipt below.`};return}await zc(e,{status:`success`,txDigest:f}),q={kind:`info`,text:`Transaction executed successfully - receipt recorded below.`}}catch(r){let i=r instanceof Error?r.message:String(r);if(n){let t=c(r)?`wallet_rejected`:`wallet_provider_error`;try{await zc(e,{status:`failure`,failureReason:t})}catch{}}q={kind:`error`,text:t(r,i)}}finally{K=!1,await Nc()}}function Lc(e,t,n){if(t){let n=e.find(e=>i(e)===t);if(n)return n}if(n)return e.find(e=>e.name===n)}async function Rc(e){if(!(Ys||K)){Ys=!0,q=void 0,J();try{await Js.connectWallet({wallet:e})}catch(e){q={kind:`error`,text:t(e,c(e)?`Wallet connection was cancelled.`:`The wallet could not be connected. Try again.`)}}finally{Ys=!1,J()}}}async function zc(e,t){await Hc(`/api/review/${encodeURIComponent(U)}/result`,{method:`POST`,body:JSON.stringify({planId:e.planId,...t})})}async function Bc(e,t,n){let r;try{return await Promise.race([e,new Promise((e,i)=>{r=setTimeout(()=>i(Error(n)),t)})])}finally{clearTimeout(r)}}function Vc(e){let t=atob(e),n=new Uint8Array(t.length);for(let e=0;e<t.length;e+=1)n[e]=t.charCodeAt(e);return n}async function Hc(t,r){let i=await fetch(t,{...r,headers:{"content-type":`application/json`,"x-say-ur-intent-token":Ws,...r.headers??{}}});if(!i.ok)throw new n(i.status,await e(i));return await i.json()}function Uc(e){return e.plans.find(e=>e.id===Gs)??e.plans[0]}function Wc(e,t){let n=$(`div`,`amount-list`);if(n.append($(`h4`,void 0,e)),t.length===0)return n.append($(`p`,void 0,`None.`)),n;let r=document.createElement(`ul`);for(let e of t){let t=document.createElement(`li`);t.textContent=`${e.amountDisplay} ${e.symbol??e.denomination??`unspecified asset`} (${e.amountKind})`,r.append(t)}return n.append(r),n}function Gc(e,t){let n=$(`div`,`amount-list`);if(n.append($(`h4`,void 0,e)),t.length===0)return n.append($(`p`,void 0,`None.`)),n;let r=document.createElement(`ul`);for(let e of t){let t=e.displayAmount?`${e.displayAmount} ${e.symbol}; `:``,n=document.createElement(`li`);n.textContent=`${e.role}: ${t}${e.rawAmount} raw ${e.symbol} (${e.coinType}, decimals ${e.decimals}; source ${e.rawAmountSource})`,r.append(n)}return n.append(r),n}function Y(e,t){let n=$(`div`,`fact-list`);if(n.append($(`h4`,void 0,e)),t.length===0)return n.append($(`p`,void 0,`None.`)),n;let r=document.createElement(`ul`);for(let e of t){let t=document.createElement(`li`);t.textContent=e,r.append(t)}return n.append(r),n}function Kc(e,t){let n=$(`div`,`checks`);if(e&&n.append($(`h4`,void 0,e)),t.length===0)return n.append($(`p`,void 0,`No checks recorded.`)),n;let r=document.createElement(`ul`);for(let e of t){let t=document.createElement(`li`);t.className=`check ${e.status}`,t.append($(`strong`,void 0,`${e.label}: ${e.status}`)),t.append($(`span`,void 0,` ${e.message}`)),t.append($(`small`,void 0,` Source: ${e.source}; id: ${e.id}`)),r.append(t)}return n.append(r),n}function X(e){let t=$(`section`,`card`);return t.append($(`h2`,void 0,e)),t}function Z(e,t){let n=$(`div`,`row`);return n.append($(`span`,`row-label`,e)),n.append($(`span`,`row-value`,t)),n}function qc(e){return[e.label,e.address].filter(Boolean).join(` / `)}function Jc(e){return typeof e==`string`?e:Object.entries(e).map(([e,t])=>`${e}: ${t}`).join(`; `)}function Q(e,t,n=`primary`){let r=document.createElement(`button`);return r.type=`button`,r.className=n,r.disabled=G,r.textContent=e,r.onclick=t,r}function $(e,t,n){let r=document.createElement(e);return t&&(r.className=t),n!==void 0&&(r.textContent=n),r}export{xi as a,gi as c,ua as i,He as l,Da as n,bi as o,pa as r,hi as s,ja as t,Ve as u};
+`)}async function mc(e){if(!W)return;let t=pc(W);try{await navigator.clipboard.writeText(t);let n=e.textContent;e.textContent=`Copied!`,setTimeout(()=>{e.textContent=n},1500)}catch{window.prompt(`Copy the audit record:`,t)}}function hc(e,t){let n=$(`section`,`card raw-evidence-card`),r=$(`div`,`card-header`);r.append($(`h2`,void 0,`Raw evidence`));let i=Q(`Copy as Markdown`,()=>void mc(i),`secondary`);i.classList.add(`copy-audit`),r.append(i),n.append(r);let a=document.createElement(`details`);a.className=`final-evidence collapsible-records`;let o=document.createElement(`summary`);o.textContent=t===`done`||t===`chain_wait`?`Show audit record (final snapshot)`:`Show audit record`,a.append(o);let s=document.createElement(`div`);s.className=`raw-evidence-body`;let c=e.reviewState,l=(e,t)=>{let n=document.createElement(`details`);n.className=`collapsible-records`;let r=document.createElement(`summary`);return r.textContent=e,n.append(r,t),n};return s.append(Z(`Review session`,e.reviewSessionId)),c?(s.append(Z(`Updated at`,c.updatedAt)),c.adapterLifecycle&&s.append(l(`Adapter lifecycle`,yc(c.adapterLifecycle))),c.humanReadableReview&&s.append(l(`Human-readable review (raw units)`,bc(c.humanReadableReview,c.simulation!==void 0))),c.simulation&&s.append(l(`Review-time simulation`,Sc(c.simulation))),c.ptbVisualization&&s.append(l(`PTB visualization`,xc(c.ptbVisualization))),s.append(l(`All checks (${c.checks.length})`,Kc(``,c.checks)))):s.append($(`p`,void 0,`No review evidence recorded yet.`)),a.append(s),n.append(a),n}async function gc(){try{await Hc(`/api/review/${encodeURIComponent(U)}/handoff/cancel`,{method:`POST`,body:`{}`}),q={kind:`info`,text:`Signing cancelled. Nothing was signed.`}}catch(e){q={kind:`error`,text:t(e,`Could not cancel signing.`)}}K=!1,await Nc()}function _c(e){let t=X(`Execution result`);t.classList.add(e.status===`success`?`execution-success`:e.status===`failure`?`execution-failure`:`execution-pending`);let n=e.status===`success`?`Transaction executed successfully.`:e.status===`failure`?`Transaction did not execute.`:`Signed - waiting for the chain result.`;return t.append($(`p`,`execution-headline`,n)),e.txDigest&&t.append(Z(`Transaction digest`,e.txDigest)),e.failureReason&&t.append(Z(`Failure reason`,e.failureReason)),e.failureDetail&&t.append(Z(`Detail`,e.failureDetail)),e.recordedAt&&t.append(Z(`Recorded at`,e.recordedAt)),t.append($(`p`,`boundary-note`,`Recorded from your wallet's execution result for this review session. Verify the digest in a Sui explorer for chain-level confirmation.`)),t}function vc(e){let t=$(`div`,`proposal-review`);return t.append($(`h4`,void 0,`Proposal review`)),t.append(Z(`Proposal id`,e.proposalId)),t.append(Z(`Proposal source`,`${e.proposalSource.kind}: ${e.proposalSource.name}`)),e.proposalSource.reference&&t.append(Z(`Source reference`,e.proposalSource.reference)),t.append(Z(`Purpose`,e.proposedAction.purpose)),t.append(Z(`Network`,e.proposedAction.network)),e.proposedAction.recipient&&t.append(Z(`Recipient`,qc(e.proposedAction.recipient))),e.proposedAction.target&&t.append(Z(`Target`,Jc(e.proposedAction.target))),t.append(Wc(`Proposal outgoing`,e.assetFlow.outgoing)),t.append(Wc(`Proposal expected incoming`,e.assetFlow.expectedIncoming)),t.append(Wc(`Proposal fees`,e.assetFlow.fees)),t.append(Y(`Evidence used`,e.evidenceUsed.map(e=>`${e.label}: ${e.summary}`))),t.append(Y(`Missing evidence`,e.missingEvidence.map(e=>`${e.label}: ${e.reason}`))),t.append(Y(`Required user choices`,e.requiredUserChoices.map(e=>`${e.label}: ${e.reason}`))),t.append(Y(`Unsupported claims`,e.unsupportedClaims.map(e=>`${e.label}: ${e.reason}`))),t.append(Z(`Freshness`,`${e.freshness.status}: ${e.freshness.reason}`)),t.append(Z(`Non-signable reason`,e.nonSignableReason.message)),t.append(Y(`Blocked capabilities`,e.nonSignableReason.blockedCapabilities)),t}function yc(e){let t=$(`div`,`adapter-lifecycle`);return t.append($(`h4`,void 0,`Adapter lifecycle`)),t.append(Z(`Adapter`,`${e.adapterId} / ${e.protocol} / ${e.actionKind}`)),t.append(Z(`Stage catalog`,e.stageCatalogId)),t.append(Y(`Completed stages`,e.completedStages)),t.append(Y(`Missing stages`,e.missingStages)),t.append($(`p`,`boundary-note`,`Local pre-signing review progress only.`)),t}function bc(e,t){let n=$(`div`,`human-readable-review`);n.append($(`h4`,void 0,`Human-readable review`)),n.append(Z(`Review kind`,e.kind)),n.append(Z(`Action`,e.proposedAction.title)),n.append(Z(`Summary`,wc(e.proposedAction.summary))),n.append(Z(`Protocol`,e.proposedAction.protocol)),n.append(Z(`Freshness`,`${e.freshness.status}: ${e.freshness.reason}`)),n.append(Z(`Expires at`,e.freshness.expiresAt)),n.append(Ac(e)),n.append(Y(`Recipients`,e.recipients.map(e=>`${e.role}: ${e.address}`))),n.append(Y(`Evidence used`,e.evidenceUsed.map(e=>`${e.label}: ${e.summary}`)));let r=t?e.missingEvidence.filter(e=>!/simulation/i.test(e.id)&&!/simulation/i.test(e.label)):e.missingEvidence;n.append(Y(`Missing evidence`,r.map(e=>`${e.label}: ${e.reason}`))),n.append(Y(`Required user choices`,e.requiredUserChoices.map(e=>`${e.label}: ${e.reason}`))),n.append(Y(`Unsupported claims`,e.unsupportedClaims.map(e=>`${e.label}: ${e.reason}`)));let i=t?e.blockingChecks.filter(e=>!/simulation/i.test(e.id)):e.blockingChecks;return i.length>0&&n.append(Kc(`Human review blocking checks`,i)),n.append($(`p`,`boundary-note`,`Displayable pre-signing evidence only.`)),n}function xc(e){let t=$(`div`,`ptb-visualization`);if(t.append($(`h4`,void 0,`PTB visualization`)),t.append(Z(`Generated at`,e.generatedAt)),e.source.renderer){let n=e.source.renderer;t.append(Z(`Renderer`,`${n.name}${n.packageName?` (${n.packageName}${n.version?`@${n.version}`:``})`:``}`))}let n=e.mermaid.text,r=e.mermaid.namedText,i=r!==n,a=i,o=document.createElement(`div`);o.className=`ptb-visualization-graph`,o.textContent=`Rendering PTB graph...`;let s=e=>{o.textContent=`Rendering PTB graph...`,o.classList.remove(`error`),qs+=1,Vs.render(`ptb-graph-${qs}`,e).then(e=>{o.innerHTML=e.svg}).catch(e=>{o.textContent=`PTB graph rendering failed: ${e instanceof Error?e.message:String(e)}`,o.classList.add(`error`)})};if(i){let e=Q(`Show addresses`,()=>{a=!a,e.textContent=a?`Show addresses`:`Show names`,s(a?r:n)},`secondary`);e.classList.add(`ptb-name-toggle`),t.append(e)}t.append(o),s(a?r:n);let c=document.createElement(`details`);c.className=`ptb-visualization-source`;let l=document.createElement(`summary`);l.textContent=`Mermaid source (${e.mermaid.text.length} chars)`;let u=Q(`Copy Mermaid`,()=>{navigator.clipboard.writeText(e.mermaid.text).then(()=>{u.textContent=`Copied!`,setTimeout(()=>{u.textContent=`Copy Mermaid`},1500)}).catch(()=>window.prompt(`Copy the Mermaid source:`,e.mermaid.text))},`secondary`);u.classList.add(`copy-mermaid`);let d=document.createElement(`pre`);return d.className=`ptb-visualization-text`,d.textContent=e.mermaid.text,c.append(l,u,d),t.append(c),e.diagnostics.length>0&&t.append(Y(`Renderer diagnostics`,e.diagnostics.map(e=>`${e.severity} ${e.code}: ${e.message}`))),t.append($(`p`,`boundary-note`,`Diagram of the locally stored transaction shape - visualization only.`)),t}function Sc(e){let t=$(`div`,`simulation-summary`);return t.append($(`h4`,void 0,`Review-time simulation`)),t.append(Z(`Provider`,e.provider)),t.append(Z(`Validation checks`,e.checksEnabled?`Enabled`:`Disabled`)),t.append(Z(`Simulation success`,e.success?`Yes`:`No`)),e.gasCostSummary&&t.append(Y(`Gas cost summary`,[`Computation cost raw: ${e.gasCostSummary.computationCostRaw}`,`Storage cost raw: ${e.gasCostSummary.storageCostRaw}`,`Storage rebate raw: ${e.gasCostSummary.storageRebateRaw}`,`Non-refundable storage fee raw: ${e.gasCostSummary.nonRefundableStorageFeeRaw}`])),e.error&&t.append(Z(`Simulation error`,e.error)),t.append(kc(`Balance changes`,e.balanceChanges,Dc)),t.append(kc(`Object changes`,e.objectChanges,Oc)),t.append($(`p`,`boundary-note`,`Redacted summary of private review-time simulation evidence.`)),t}var Cc=/\s*This MCP response contains no sign action, signing data, transaction bytes, or signing readiness\.?/g;function wc(e){return e.replace(Cc,``).trim()}function Tc(e){return e.length>14?`${e.slice(0,8)}…${e.slice(-6)}`:e}function Ec(e){return e.split(`<`).map(e=>e.split(`::`).map(e=>e.startsWith(`0x`)&&e.length>14?Tc(e):e).join(`::`)).join(`<`)}function Dc(e){let t=typeof e.address==`string`?Tc(e.address):`?`,n=typeof e.coinType==`string`?Ec(e.coinType):`?`,r=typeof e.amount==`string`?e.amount:`?`;return`${t}: ${r.startsWith(`-`)?r:`+${r}`} raw (${n})`}function Oc(e){return`${typeof e.idOperation==`string`?e.idOperation:`?`}: ${typeof e.objectType==`string`?Ec(e.objectType):`?`} (${typeof e.objectId==`string`?Tc(e.objectId):`?`})`}function kc(e,t,n){let r=document.createElement(`details`);r.className=`collapsible-records`;let i=document.createElement(`summary`);if(i.textContent=`${e} (${t?.length??0})`,r.append(i),!t||t.length===0)return r.append($(`p`,void 0,`None.`)),r;let a=document.createElement(`ul`);for(let e of t){let t=document.createElement(`li`);t.textContent=n(e),a.append(t)}r.append(a);let o=document.createElement(`details`),s=document.createElement(`summary`);s.textContent=`Raw records`;let c=document.createElement(`pre`);return c.className=`collapsible-records-raw`,c.textContent=JSON.stringify(t,null,2),o.append(s,c),r.append(o),r}function Ac(e){switch(e.kind){case`swap_human_readable_review`:return jc(e)}}function jc(e){let t=$(`div`,`human-readable-review-projection`);return t.append(Gc(`Outgoing`,e.assetFlow.outgoing)),t.append(Gc(`Expected incoming`,e.assetFlow.expectedIncoming)),t.append(Gc(`Minimum incoming`,e.assetFlow.minimumIncoming)),t.append(Gc(`Fees`,e.assetFlow.fees)),t.append(Y(`Targets`,e.targets.map(e=>`${e.kind}: ${e.symbol} via ${e.protocol} ${e.poolKey}`))),t}async function Mc(){G=!0,J();try{await Hc(`/api/review/${encodeURIComponent(U)}/opened`,{method:`POST`,body:`{}`}),await Nc()}catch(e){Ks=t(e,`The local review server did not accept this review session.`),G=!1,J()}}async function Nc(){G=!0,J();try{W=await Hc(`/api/review/${encodeURIComponent(U)}`,{method:`GET`}),Gs??=W.plans[0]?.id,Ks=``}catch(e){e instanceof n&&e.status===410&&(Xs=!0),Ks=t(e,`Could not load the review session.`)}finally{G=!1,J()}}async function Pc(){let e=W?.activeAccount?.account,r=W?Uc(W):void 0;if(!(!e||!r)){G=!0,J();try{let t=()=>Hc(`/api/review/${encodeURIComponent(U)}/state`,{method:`POST`,body:JSON.stringify({planId:r.id,account:e})}),i;try{i=await t()}catch(e){if(e instanceof n&&e.status===409&&W?.signingInProgress)await Hc(`/api/review/${encodeURIComponent(U)}/handoff/cancel`,{method:`POST`,body:`{}`}),i=await t();else throw e}W={...await Hc(`/api/review/${encodeURIComponent(U)}`,{method:`GET`}),reviewState:i.reviewState},Ks=``}catch(e){Ks=t(e,`Could not run account-bound review.`)}finally{G=!1,J()}}}function Fc(e){let t=X(`Wallet signing`);t.classList.add(`signing-section`),q&&t.append($(`p`,q.kind===`error`?`error`:`status`,q.text));let n=Js.stores.$connection.get(),r=Js.stores.$wallets.get();if(n.status===`connected`)if(Zs=!1,n.account.address!==e.account)t.append($(`p`,`error`,`Connected wallet account ${n.account.address} does not match the reviewed account ${e.account}. Switch the wallet account before signing.`));else{t.append($(`p`,void 0,`Signing hands the digest-verified transaction bytes to your wallet. Finish or cancel the request in your wallet popup.`));let n=Q(K?`Waiting for wallet`:`Sign in wallet`,()=>void Ic(e),`primary`);n.disabled=K,t.append(n)}else if(Zs||n.status===`connecting`)t.append($(`p`,`status`,`Reconnecting your wallet…`));else if(r.length===0)t.append($(`p`,`error`,`No compatible Sui wallet was detected in this browser.`));else{t.append($(`p`,`error`,`Your wallet signer is not connected, so this transaction cannot be signed yet.`));let e=Lc(r,W?.activeAccount?.walletId,W?.activeAccount?.walletName);if(e){t.append($(`p`,`boundary-note`,`Reconnect resumes the signer session for this review's wallet. Your wallet (or hardware device) asks you to approve the connection; nothing is signed until you press Sign.`));let n=W?.activeAccount?.walletName??`wallet`,r=Q(Ys?`Reconnecting…`:`Reconnect ${n} to sign`,()=>void Rc(e),`primary`);r.disabled=Ys,t.append(r)}else t.append($(`p`,`boundary-note`,`This review's wallet was not detected in this browser. Open the review where that wallet (or hardware device) is available, or connect it from your AI client (session.create_wallet_identity) and reopen this review.`))}return t.append($(`p`,`boundary-note`,`Signing happens in your wallet. This page never sees private keys; it hands over bytes whose recomputed digest equals the reviewed commitment.`)),t}async function Ic(e){if(K)return;K=!0,q={kind:`info`,text:`Approve the request in your wallet. After approval this page waits for the chain result and shows success or failure here.`},J();let n=!1;try{let r=await Hc(`/api/review/${encodeURIComponent(U)}/handoff`,{method:`POST`,body:JSON.stringify({planId:e.planId,account:e.account})}),i=Vc(r.transactionBytesBase64),o=a.from(i);if(await o.getDigest()!==r.transactionMaterialCommitment)throw Error(`Handoff bytes do not match the reviewed transaction commitment.`);n=!0;let c=await Bc(Js.signTransaction({transaction:o}),9e4,`The wallet did not respond to the signing request within 90 seconds.`),l=Vc(c.bytes),u=await a.from(l).getDigest();if(u!==r.transactionMaterialCommitment){await zc(e,{status:`failure`,failureReason:`wallet_provider_error`}),q={kind:`error`,text:`The wallet returned bytes whose digest does not match the reviewed commitment; nothing was submitted.`};return}await zc(e,{status:`signed_pending_result`,txDigest:u});let d;try{d=await s.core.executeTransaction({transaction:l,signatures:[c.signature],include:{effects:!0}})}catch(n){await zc(e,{status:`failure`,failureReason:`transaction_submit_failed`}),q={kind:`error`,text:t(n,`The signed transaction could not be submitted to the chain.`)};return}if(d.$kind!==`Transaction`||!d.Transaction){await zc(e,{status:`failure`,failureReason:`execution_result_unavailable`}),q={kind:`error`,text:`The chain did not return an executed transaction record.`};return}let f=d.Transaction.digest,p=d.Transaction.effects?.status;if(p&&!p.success){await zc(e,{status:`failure`,failureReason:`unknown_failure`}),q={kind:`error`,text:`The transaction executed on chain but failed - see the receipt below.`};return}await zc(e,{status:`success`,txDigest:f}),q={kind:`info`,text:`Transaction executed successfully - receipt recorded below.`}}catch(r){let i=r instanceof Error?r.message:String(r);if(n){let t=c(r)?`wallet_rejected`:`wallet_provider_error`;try{await zc(e,{status:`failure`,failureReason:t})}catch{}}q={kind:`error`,text:t(r,i)}}finally{K=!1,await Nc()}}function Lc(e,t,n){if(t){let n=e.find(e=>i(e)===t);if(n)return n}if(n)return e.find(e=>e.name===n)}async function Rc(e){if(!(Ys||K)){Ys=!0,q=void 0,J();try{await Js.connectWallet({wallet:e})}catch(e){q={kind:`error`,text:t(e,c(e)?`Wallet connection was cancelled.`:`The wallet could not be connected. Try again.`)}}finally{Ys=!1,J()}}}async function zc(e,t){await Hc(`/api/review/${encodeURIComponent(U)}/result`,{method:`POST`,body:JSON.stringify({planId:e.planId,...t})})}async function Bc(e,t,n){let r;try{return await Promise.race([e,new Promise((e,i)=>{r=setTimeout(()=>i(Error(n)),t)})])}finally{clearTimeout(r)}}function Vc(e){let t=atob(e),n=new Uint8Array(t.length);for(let e=0;e<t.length;e+=1)n[e]=t.charCodeAt(e);return n}async function Hc(t,r){let i=await fetch(t,{...r,headers:{"content-type":`application/json`,"x-say-ur-intent-token":Ws,...r.headers??{}}});if(!i.ok)throw new n(i.status,await e(i));return await i.json()}function Uc(e){return e.plans.find(e=>e.id===Gs)??e.plans[0]}function Wc(e,t){let n=$(`div`,`amount-list`);if(n.append($(`h4`,void 0,e)),t.length===0)return n.append($(`p`,void 0,`None.`)),n;let r=document.createElement(`ul`);for(let e of t){let t=document.createElement(`li`);t.textContent=`${e.amountDisplay} ${e.symbol??e.denomination??`unspecified asset`} (${e.amountKind})`,r.append(t)}return n.append(r),n}function Gc(e,t){let n=$(`div`,`amount-list`);if(n.append($(`h4`,void 0,e)),t.length===0)return n.append($(`p`,void 0,`None.`)),n;let r=document.createElement(`ul`);for(let e of t){let t=e.displayAmount?`${e.displayAmount} ${e.symbol}; `:``,n=document.createElement(`li`);n.textContent=`${e.role}: ${t}${e.rawAmount} raw ${e.symbol} (${e.coinType}, decimals ${e.decimals}; source ${e.rawAmountSource})`,r.append(n)}return n.append(r),n}function Y(e,t){let n=$(`div`,`fact-list`);if(n.append($(`h4`,void 0,e)),t.length===0)return n.append($(`p`,void 0,`None.`)),n;let r=document.createElement(`ul`);for(let e of t){let t=document.createElement(`li`);t.textContent=e,r.append(t)}return n.append(r),n}function Kc(e,t){let n=$(`div`,`checks`);if(e&&n.append($(`h4`,void 0,e)),t.length===0)return n.append($(`p`,void 0,`No checks recorded.`)),n;let r=document.createElement(`ul`);for(let e of t){let t=document.createElement(`li`);t.className=`check ${e.status}`,t.append($(`strong`,void 0,`${e.label}: ${e.status}`)),t.append($(`span`,void 0,` ${e.message}`)),t.append($(`small`,void 0,` Source: ${e.source}; id: ${e.id}`)),r.append(t)}return n.append(r),n}function X(e){let t=$(`section`,`card`);return t.append($(`h2`,void 0,e)),t}function Z(e,t){let n=$(`div`,`row`);return n.append($(`span`,`row-label`,e)),n.append($(`span`,`row-value`,t)),n}function qc(e){return[e.label,e.address].filter(Boolean).join(` / `)}function Jc(e){return typeof e==`string`?e:Object.entries(e).map(([e,t])=>`${e}: ${t}`).join(`; `)}function Q(e,t,n=`primary`){let r=document.createElement(`button`);return r.type=`button`,r.className=n,r.disabled=G,r.textContent=e,r.onclick=t,r}function $(e,t,n){let r=document.createElement(e);return t&&(r.className=t),n!==void 0&&(r.textContent=n),r}export{xi as a,gi as c,ua as i,He as l,Da as n,bi as o,pa as r,hi as s,ja as t,Ve as u};

package/docs/AGENT_BEHAVIOR.md

@@ -15,11 +15,11 @@ It is not the contributor rulebook and it is not enforcement. Development rules
 | External proposal review sessions | Non-signable review in the current release | `action.prepare_external_proposal_review` can create a review URL from a structured external payment or Sui action proposal. Treat the proposal as untrusted display and review context only. It does not build, verify, simulate, sign, or execute transaction material. |
 | Wallet signing | User-controlled on the local review page | MCP tools do not return signing readiness, signing data, or executable transaction bytes. Signing and execution happen only in the user's wallet from the local review page after the digest-gated handoff; results are recorded as execution receipts keyed by the review session. |
 | PTB visualization | Rendered with emitted wallet review contracts | `reviewState.ptbVisualization` can accompany an emitted wallet review contract as a Mermaid flowchart of the stored local transaction shape. Treat it as visualization evidence only, not transaction-building input, wallet authorization, signing data, signing readiness, payment execution readiness, or route recommendation. |
-| Transaction material build, wallet execution, fiat cash-out, and P&L | Partly implemented for DeepBook review; execution unsupported | Account-bound DeepBook swap review can build local unsigned transaction material that remains internal to the review server, internally bind a Sui transaction digest to that stored material, project human-readable review facts from material-bound quote policy and object ownership evidence, and summarize review-time simulation of the stored material. Wallet signature requests and execution remain unavailable; the byte handoff is gated on recomputed-digest equality with the reviewed contract. Fiat cash-out, P&L, tax, and cost-basis support are not part of the current release. |
+| Transaction material build, wallet execution, fiat cash-out, and P&L | Material build and review evidence implemented for DeepBook and FlowX swap review; MCP signing and execution out of scope; fiat cash-out and P&L out of scope | Account-bound DeepBook and FlowX swap review can build local unsigned transaction material that remains internal to the review server, internally bind a Sui transaction digest to that stored material, project human-readable review facts from material-bound quote policy and object ownership evidence, and summarize review-time simulation of the stored material. The MCP layer does not request wallet signatures, execute, or return transaction bytes; wallet signing and execution happen only in the user's wallet from the local review page after the digest-gated byte handoff, which is gated on recomputed-digest equality with the reviewed contract. Fiat cash-out, P&L, tax, and cost-basis are out of scope. |
 | Private-key custody, autonomous trading, fiat USD peg claims, and quote-only coverage or readiness claims | Unsupported safety and correctness boundary | Do not custody funds, hold private keys, or autonomously trade. Do not treat settlement assets as fiat USD, bank cash-out amounts, or peg guarantees. Do not turn quote-only conversion candidates into payment coverage, funding readiness, payment execution readiness, or signing readiness. |
 | Silent settlement-token selection and route ranking | Out of scope by current design | Do not silently choose USDC, USDT, or another settlement token for the user. Do not rank venues, choose routes, or make best-price recommendations. |
 | Other chains, autonomous trading, alerts, arbitrary Move calls, investment advice | Unsupported | Say the request is unsupported and redirect to available Sui mainnet read or review capabilities. |
-| Payment execution | Not yet available in the current release (sequenced later) | Intent evidence is separate from execution and does not build or execute payments. Do not describe payment execution as available until a reviewed implementation and response-local guidance exist. |
+| Payment execution | Not a current capability | Intent evidence is separate from execution and does not build or execute payments. Do not describe payment execution as available. |
 | Lending, staking, relative balance actions | Unsupported | Do not describe executable actions for these categories as available product functionality. |
 
 ## Meta Principles

package/docs/FRONTEND_POLICY.md

@@ -118,6 +118,11 @@ Review checks are generally details. Failed checks and warning checks that deter
 If the server returns a `PtbVisualizationArtifact`, the frontend may render only
 Mermaid flowchart text plus diagnostics. The panel must show the generated time,
 source, diagnostics, and unsupported-use boundary when those fields are present.
+The Mermaid graph may show a registered Move Registry package name in place of a
+registered package address, with a control to switch back to raw addresses and a
+copyable Mermaid source that keeps raw addresses; that name is a package identity
+label, not a safety, trust, route-quality, or signing-readiness signal, and any
+package that is not registered keeps its raw address.
 It must not store or render executable transaction material, wallet signature
 requests, private-key material, or arbitrary Move calls. A PTB graph is not a
 sign action, not a transaction-building action, not a wallet readiness signal,

package/docs/MCP_SETUP.md

@@ -434,9 +434,10 @@ rather than silently moving.
 - Here, `blocked` means required review evidence or user action is missing for
   that session (for example `wallet_review_contract_emit_missing`), not a
   release-wide signing stop.
-- The package is not yet published to npm: use a developer checkout (local
-  build) or packed tarball. `npx` client configs in this guide start working
-  after the first npm publish.
+- The package is published to npm as `@stelis/say-ur-intent`, so the `npx` and
+  global-install client configs in this guide work directly. A developer
+  checkout (local build) or packed tarball is an option for testing local
+  changes.
 
 ## Mainnet Read Smoke
 

package/docs/MCP_TOOLS.md

@@ -595,7 +595,7 @@ Use these `reviewModel` fields for the proposal review answer:
   proposal;
 - `evidenceUsed`: local schema and proposal facts used for the review;
 - `missingEvidence`: wallet, recipient, target, simulation, or adapter evidence
-  not yet verified;
+  not verified;
 - `requiredUserChoices`: choices that remain with the user;
 - `unsupportedClaims`: conclusions the review does not support;
 - `freshness`: timestamp status for the proposal;
@@ -654,7 +654,7 @@ is completed and not listed as missing, and `reviewState.simulation` is valid
 only after `review_time_simulation` is completed and not listed as missing.
 
 When `reviewState.humanReadableReview` is present, it is displayable review
-evidence projected from previously verified review artifacts. Its `kind`
+evidence projected from verified review artifacts. Its `kind`
 currently identifies the first swap review projection. Its `assetFlow` raw
 amounts, coin types, decimals, minimum output, and fee facts come from the
 material-bound quote policy evidence. Its target pool and direction come from

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stelis/say-ur-intent",
-  "version": "0.0.4",
+  "version": "0.0.6",
   "mcpName": "io.github.stelis-dev/say-ur-intent",
   "description": "Say Ur Intent is a local-first toolkit for helping AI applications and users inspect Sui DeFi actions before execution.",
   "license": "MIT",

package/protocols/deepbook-v3.md

@@ -15,10 +15,10 @@ Protocol concepts referenced by current runtime evidence include:
 
 DeepBook orderbook, raw-quantity quote, and display-amount quote reads use an internal SDK simulation sender placeholder. They do not require wallet connection because these market reads are not wallet-account reads.
 
-Not yet implemented:
+Signable swap review for the account-bound DeepBook swap route is part of current runtime support; `read.list_supported_protocols` and the concrete MCP tool responses are the authoritative status. Before a `ready_for_wallet_review` state allows user-controlled signing on the local review page, the review server validates the pinned registry, refreshes the live quote, resolves objects, and runs `client.core.simulateTransaction` review.
+
+Out of scope:
 
-- Signable swap review.
 - Limit or market order review.
-- Wallet signing or execution.
 
-No DeepBook transaction should be exposed as signable until registry validation, live quote refresh, object resolution, and `client.core.simulateTransaction` review are implemented.
+The MCP layer and review API do not sign, execute, or return transaction bytes. Wallet signing and execution happen only in the user's wallet from the local review page.