@t2000/cli 5.1.0 → 5.2.0

package/dist/{dist-3PYU4RZC.js → dist-KVEHGTYJ.js}

@@ -7141,7 +7141,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve3.call(this, root, ref);
+      let _sch = resolve2.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a = root.localRefs) === null || _a === void 0 ? void 0 : _a[ref];
         const { schemaId } = this.opts;
@@ -7168,7 +7168,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve3(root, ref) {
+    function resolve2(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -7732,7 +7732,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve3(baseURI, relativeURI, options) {
+    function resolve2(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const resolved = resolveComponent(parse5(baseURI, schemelessOptions), parse5(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
@@ -7959,7 +7959,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize: normalize2,
-      resolve: resolve3,
+      resolve: resolve2,
       resolveComponent,
       equal,
       serialize,
@@ -16240,8 +16240,8 @@ function promiseWithResolvers() {
   let resolver;
   let rejecter;
   return {
-    promise: new Promise((resolve3, reject) => {
-      resolver = resolve3;
+    promise: new Promise((resolve2, reject) => {
+      resolver = resolve2;
       rejecter = reject;
     }),
     resolve: resolver,
@@ -16378,17 +16378,17 @@ var init_dataloader = __esm({
           const cachedPromise = cacheMap.get(cacheKey);
           if (cachedPromise) {
             const cacheHits = batch.cacheHits || (batch.cacheHits = []);
-            return new Promise((resolve3) => {
+            return new Promise((resolve2) => {
               cacheHits.push(() => {
-                resolve3(cachedPromise);
+                resolve2(cachedPromise);
               });
             });
           }
         }
         batch.keys.push(key);
-        const promise = new Promise((resolve3, reject) => {
+        const promise = new Promise((resolve2, reject) => {
           batch.callbacks.push({
-            resolve: resolve3,
+            resolve: resolve2,
             reject
           });
         });
@@ -17956,12 +17956,12 @@ var init_queue = __esm({
     SerialQueue = class {
       #queue = [];
       async runTask(task) {
-        return new Promise((resolve3, reject) => {
+        return new Promise((resolve2, reject) => {
           this.#queue.push(() => {
             task().finally(() => {
               this.#queue.shift();
               if (this.#queue.length > 0) this.#queue[0]();
-            }).then(resolve3, reject);
+            }).then(resolve2, reject);
           });
           if (this.#queue.length === 1) this.#queue[0]();
         });
@@ -17974,18 +17974,18 @@ var init_queue = __esm({
         this.maxTasks = maxTasks;
       }
       runTask(task) {
-        return new Promise((resolve3, reject) => {
+        return new Promise((resolve2, reject) => {
           if (this.activeTasks < this.maxTasks) {
             this.activeTasks++;
             task().finally(() => {
               if (this.#queue.length > 0) this.#queue.shift()();
               else this.activeTasks--;
-            }).then(resolve3, reject);
+            }).then(resolve2, reject);
           } else this.#queue.push(() => {
             task().finally(() => {
               if (this.#queue.length > 0) this.#queue.shift()();
               else this.activeTasks--;
-            }).then(resolve3, reject);
+            }).then(resolve2, reject);
           });
         });
       }
@@ -18192,11 +18192,11 @@ var init_parallel = __esm({
         await this.#updateCache(() => this.#waitForLastDigest());
       }
       async executeTransaction(transaction, include, additionalSignatures = []) {
-        const { promise, resolve: resolve3, reject } = promiseWithResolvers();
+        const { promise, resolve: resolve2, reject } = promiseWithResolvers();
         const usedObjects = await this.#getUsedObjects(transaction);
         const execute = () => {
           this.#executeQueue.runTask(() => {
-            return this.#execute(transaction, usedObjects, include, additionalSignatures).then(resolve3, reject);
+            return this.#execute(transaction, usedObjects, include, additionalSignatures).then(resolve2, reject);
           });
         };
         const conflicts = /* @__PURE__ */ new Set();
@@ -20417,8 +20417,8 @@ var init_core = __esm({
           if (scheduleIndex < schedule.length) {
             const remaining = t0 + schedule[scheduleIndex] - Date.now();
             scheduleIndex++;
-            if (remaining > 0) await Promise.race([new Promise((resolve3) => setTimeout(resolve3, remaining)), abortPromise]);
-          } else await Promise.race([new Promise((resolve3) => setTimeout(resolve3, lastInterval)), abortPromise]);
+            if (remaining > 0) await Promise.race([new Promise((resolve2) => setTimeout(resolve2, remaining)), abortPromise]);
+          } else await Promise.race([new Promise((resolve2) => setTimeout(resolve2, lastInterval)), abortPromise]);
           abortSignal.throwIfAborted();
           try {
             return await this.getTransaction({
@@ -28067,8 +28067,8 @@ var init_deferred = __esm({
        */
       constructor(preventUnhandledRejectionWarning = true) {
         this._state = DeferredState.PENDING;
-        this._promise = new Promise((resolve3, reject) => {
-          this._resolve = resolve3;
+        this._promise = new Promise((resolve2, reject) => {
+          this._resolve = resolve2;
           this._reject = reject;
         });
         if (preventUnhandledRejectionWarning) {
@@ -28276,11 +28276,11 @@ var init_unary_call = __esm({
   "../../node_modules/.pnpm/@protobuf-ts+runtime-rpc@2.11.1/node_modules/@protobuf-ts/runtime-rpc/build/es2015/unary-call.js"() {
     __awaiter = function(thisArg, _arguments, P3, generator) {
       function adopt(value) {
-        return value instanceof P3 ? value : new P3(function(resolve3) {
-          resolve3(value);
+        return value instanceof P3 ? value : new P3(function(resolve2) {
+          resolve2(value);
         });
       }
-      return new (P3 || (P3 = Promise))(function(resolve3, reject) {
+      return new (P3 || (P3 = Promise))(function(resolve2, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -28296,7 +28296,7 @@ var init_unary_call = __esm({
           }
         }
         function step(result) {
-          result.done ? resolve3(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve2(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -28341,11 +28341,11 @@ var init_server_streaming_call = __esm({
   "../../node_modules/.pnpm/@protobuf-ts+runtime-rpc@2.11.1/node_modules/@protobuf-ts/runtime-rpc/build/es2015/server-streaming-call.js"() {
     __awaiter2 = function(thisArg, _arguments, P3, generator) {
       function adopt(value) {
-        return value instanceof P3 ? value : new P3(function(resolve3) {
-          resolve3(value);
+        return value instanceof P3 ? value : new P3(function(resolve2) {
+          resolve2(value);
         });
       }
-      return new (P3 || (P3 = Promise))(function(resolve3, reject) {
+      return new (P3 || (P3 = Promise))(function(resolve2, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -28361,7 +28361,7 @@ var init_server_streaming_call = __esm({
           }
         }
         function step(result) {
-          result.done ? resolve3(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve2(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -32936,11 +32936,11 @@ var init_grpc_web_format = __esm({
     init_goog_grpc_status_code();
     __awaiter3 = function(thisArg, _arguments, P3, generator) {
       function adopt(value) {
-        return value instanceof P3 ? value : new P3(function(resolve3) {
-          resolve3(value);
+        return value instanceof P3 ? value : new P3(function(resolve2) {
+          resolve2(value);
         });
       }
-      return new (P3 || (P3 = Promise))(function(resolve3, reject) {
+      return new (P3 || (P3 = Promise))(function(resolve2, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -32956,7 +32956,7 @@ var init_grpc_web_format = __esm({
           }
         }
         function step(result) {
-          result.done ? resolve3(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve2(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -45689,10 +45689,10 @@ var init_CanceledError = __esm({
     CanceledError_default = CanceledError;
   }
 });
-function settle(resolve3, reject, response) {
+function settle(resolve2, reject, response) {
   const validateStatus2 = response.config.validateStatus;
   if (!response.status || !validateStatus2 || validateStatus2(response.status)) {
-    resolve3(response);
+    resolve2(response);
   } else {
     reject(
       new AxiosError_default(
@@ -47885,7 +47885,7 @@ var init_http = __esm({
     http2Sessions = new Http2Sessions();
     isHttpAdapterSupported = typeof process !== "undefined" && utils_default.kindOf(process) === "process";
     wrapAsync = (asyncExecutor) => {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         let onDone;
         let isDone;
         const done = (value, isRejected) => {
@@ -47895,7 +47895,7 @@ var init_http = __esm({
         };
         const _resolve = (value) => {
           done(value);
-          resolve3(value);
+          resolve2(value);
         };
         const _reject = (reason) => {
           done(reason, true);
@@ -47942,7 +47942,7 @@ var init_http = __esm({
       }
     };
     http_default = isHttpAdapterSupported && function httpAdapter(config3) {
-      return wrapAsync(async function dispatchHttpRequest(resolve3, reject, onDone) {
+      return wrapAsync(async function dispatchHttpRequest(resolve2, reject, onDone) {
         const own2 = (key) => utils_default.hasOwnProp(config3, key) ? config3[key] : void 0;
         let data = own2("data");
         let lookup = own2("lookup");
@@ -48039,7 +48039,7 @@ var init_http = __esm({
           }
           let convertedData;
           if (method !== "GET") {
-            return settle(resolve3, reject, {
+            return settle(resolve2, reject, {
               status: 405,
               statusText: "method not allowed",
               headers: {},
@@ -48061,7 +48061,7 @@ var init_http = __esm({
           } else if (responseType === "stream") {
             convertedData = stream3.Readable.from(convertedData);
           }
-          return settle(resolve3, reject, {
+          return settle(resolve2, reject, {
             data: convertedData,
             status: 200,
             statusText: "OK",
@@ -48346,7 +48346,7 @@ var init_http = __esm({
               });
             }
             response.data = responseStream;
-            settle(resolve3, reject, response);
+            settle(resolve2, reject, response);
           } else {
             const responseBuffer = [];
             let totalResponseBytes = 0;
@@ -48396,7 +48396,7 @@ var init_http = __esm({
               } catch (err) {
                 return reject(AxiosError_default.from(err, null, config3, response.request, response));
               }
-              settle(resolve3, reject, response);
+              settle(resolve2, reject, response);
             });
           }
           abortEmitter.once("abort", (err) => {
@@ -48761,7 +48761,7 @@ var init_xhr = __esm({
     init_resolveConfig();
     isXHRAdapterSupported = typeof XMLHttpRequest !== "undefined";
     xhr_default = isXHRAdapterSupported && function(config3) {
-      return new Promise(function dispatchXhrRequest(resolve3, reject) {
+      return new Promise(function dispatchXhrRequest(resolve2, reject) {
         const _config = resolveConfig_default(config3);
         let requestData = _config.data;
         const requestHeaders = AxiosHeaders_default.from(_config.headers).normalize();
@@ -48796,7 +48796,7 @@ var init_xhr = __esm({
           };
           settle(
             function _resolve(value) {
-              resolve3(value);
+              resolve2(value);
               done();
             },
             function _reject(err) {
@@ -49237,8 +49237,8 @@ var init_fetch = __esm({
             config3
           );
           !isStreamResponse && unsubscribe && unsubscribe();
-          return await new Promise((resolve3, reject) => {
-            settle(resolve3, reject, {
+          return await new Promise((resolve2, reject) => {
+            settle(resolve2, reject, {
               data: responseData,
               headers: AxiosHeaders_default.from(response.headers),
               status: response.status,
@@ -49708,8 +49708,8 @@ var init_CancelToken = __esm({
           throw new TypeError("executor must be a function.");
         }
         let resolvePromise;
-        this.promise = new Promise(function promiseExecutor(resolve3) {
-          resolvePromise = resolve3;
+        this.promise = new Promise(function promiseExecutor(resolve2) {
+          resolvePromise = resolve2;
         });
         const token = this;
         this.promise.then((cancel) => {
@@ -49722,9 +49722,9 @@ var init_CancelToken = __esm({
         });
         this.promise.then = (onfulfilled) => {
           let _resolve;
-          const promise = new Promise((resolve3) => {
-            token.subscribe(resolve3);
-            _resolve = resolve3;
+          const promise = new Promise((resolve2) => {
+            token.subscribe(resolve2);
+            _resolve = resolve2;
           }).then(onfulfilled);
           promise.cancel = function reject() {
             token.unsubscribe(_resolve);
@@ -50596,7 +50596,7 @@ var init_hermes_client = __esm({
           return schema.parse(data);
         } catch (error2) {
           if (retries > 0 && !(error2 instanceof Error && error2.name === "AbortError")) {
-            await new Promise((resolve3) => setTimeout(resolve3, backoff));
+            await new Promise((resolve2) => setTimeout(resolve2, backoff));
             return this.httpRequest(url2, schema, options, retries - 1, backoff * 2);
           }
           throw error2;
@@ -72140,7 +72140,7 @@ var Protocol = class {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-        await new Promise((resolve3) => setTimeout(resolve3, pollInterval));
+        await new Promise((resolve2) => setTimeout(resolve2, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error2) {
@@ -72157,7 +72157,7 @@ var Protocol = class {
    */
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve2, reject) => {
       const earlyReject = (error2) => {
         reject(error2);
       };
@@ -72235,7 +72235,7 @@ var Protocol = class {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve3(parseResult.data);
+            resolve2(parseResult.data);
           }
         } catch (error2) {
           reject(error2);
@@ -72496,12 +72496,12 @@ var Protocol = class {
       }
     } catch {
     }
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve2, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve3, interval);
+      const timeoutId = setTimeout(resolve2, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -73573,7 +73573,7 @@ var McpServer = class {
     let task = createTaskResult.task;
     const pollInterval = task.pollInterval ?? 5e3;
     while (task.status !== "completed" && task.status !== "failed" && task.status !== "cancelled") {
-      await new Promise((resolve3) => setTimeout(resolve3, pollInterval));
+      await new Promise((resolve2) => setTimeout(resolve2, pollInterval));
       const updatedTask = await extra.taskStore.getTask(taskId);
       if (!updatedTask) {
         throw new McpError(ErrorCode.InternalError, `Task ${taskId} not found during polling`);
@@ -74215,12 +74215,12 @@ var StdioServerTransport = class {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve3) => {
+    return new Promise((resolve2) => {
       const json = serializeMessage(message);
       if (this._stdout.write(json)) {
-        resolve3();
+        resolve2();
       } else {
-        this._stdout.once("drain", resolve3);
+        this._stdout.once("drain", resolve2);
       }
     });
   }
@@ -80051,164 +80051,194 @@ async function resolveSuinsViaRpc(rawName, ctx = {}) {
   return body.result ?? null;
 }
 init_errors3();
-var DEFAULT_SAFEGUARD_CONFIG = {
-  locked: false,
-  maxPerTx: 0,
-  maxDailySend: 0,
-  dailyUsed: 0,
-  dailyResetDate: ""
-};
-init_errors3();
-var SafeguardError = class extends T2000Error {
-  rule;
-  details;
-  constructor(rule, details, message) {
-    const msg = message ?? buildMessage(rule, details);
-    super("SAFEGUARD_BLOCKED", msg, { rule, ...details });
-    this.name = "SafeguardError";
-    this.rule = rule;
-    this.details = details;
+var DEFAULT_CONFIG_DIR = join$1(homedir(), ".t2000");
+function resolveConfigPath(configDir) {
+  return join$1(configDir ?? DEFAULT_CONFIG_DIR, "config.json");
+}
+function todayUtc() {
+  return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+}
+function readLimitsFile(configDir) {
+  const path = resolveConfigPath(configDir);
+  try {
+    return sanitize(JSON.parse(readFileSync(path, "utf-8")));
+  } catch {
+    return {};
+  }
+}
+function writeLimitsFile(file, configDir) {
+  const path = resolveConfigPath(configDir);
+  let existing = {};
+  try {
+    existing = JSON.parse(readFileSync(path, "utf-8"));
+  } catch {
+    existing = {};
+  }
+  for (const dead of ["maxPerTx", "maxDailySend", "dailyUsed", "dailyResetDate", "locked"]) {
+    delete existing[dead];
+  }
+  const merged = { ...existing };
+  if (file.limits && (file.limits.perTxUsd !== void 0 || file.limits.dailyUsd !== void 0)) {
+    merged.limits = file.limits;
+  } else {
+    delete merged.limits;
+  }
+  if (file.dailySpend) merged.dailySpend = file.dailySpend;
+  else delete merged.dailySpend;
+  const dir = dirname(path);
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  writeFileSync(path, JSON.stringify(merged, null, 2) + "\n", { mode: 384 });
+  return path;
+}
+function getLimits(configDir) {
+  return readLimitsFile(configDir).limits;
+}
+function hasLimits(configDir) {
+  const l2 = readLimitsFile(configDir).limits;
+  return !!l2 && (l2.perTxUsd !== void 0 || l2.dailyUsd !== void 0);
+}
+function setLimits(limits, configDir) {
+  const file = readLimitsFile(configDir);
+  const merged = { ...file.limits };
+  if (limits.perTxUsd !== void 0) merged.perTxUsd = limits.perTxUsd;
+  if (limits.dailyUsd !== void 0) merged.dailyUsd = limits.dailyUsd;
+  return writeLimitsFile({ ...file, limits: merged }, configDir);
+}
+function clearLimits(configDir) {
+  const file = readLimitsFile(configDir);
+  return writeLimitsFile({ ...file, limits: void 0 }, configDir);
+}
+function dailySpentToday(configDir) {
+  const { dailySpend } = readLimitsFile(configDir);
+  if (!dailySpend || dailySpend.date !== todayUtc()) return 0;
+  return dailySpend.usd;
+}
+function recordDailySpend(usd, configDir) {
+  if (!Number.isFinite(usd) || usd <= 0) return;
+  const file = readLimitsFile(configDir);
+  const today = todayUtc();
+  const prior = file.dailySpend && file.dailySpend.date === today ? file.dailySpend.usd : 0;
+  writeLimitsFile({ ...file, dailySpend: { date: today, usd: prior + usd } }, configDir);
+}
+function sanitize(raw) {
+  if (typeof raw !== "object" || raw === null) return {};
+  const r = raw;
+  const out = {};
+  if (typeof r.limits === "object" && r.limits !== null) {
+    const l2 = r.limits;
+    const limits = {};
+    if (typeof l2.perTxUsd === "number" && l2.perTxUsd > 0) limits.perTxUsd = l2.perTxUsd;
+    if (typeof l2.dailyUsd === "number" && l2.dailyUsd > 0) limits.dailyUsd = l2.dailyUsd;
+    else if (typeof l2.dailySendUsd === "number" && l2.dailySendUsd > 0) limits.dailyUsd = l2.dailySendUsd;
+    if (limits.perTxUsd !== void 0 || limits.dailyUsd !== void 0) out.limits = limits;
+  }
+  if (typeof r.dailySpend === "object" && r.dailySpend !== null) {
+    const d = r.dailySpend;
+    if (typeof d.date === "string" && typeof d.usd === "number" && d.usd >= 0) {
+      out.dailySpend = { date: d.date, usd: d.usd };
+    }
+  }
+  return out;
+}
+var LimitExceededError = class extends Error {
+  code = "LIMIT_EXCEEDED";
+  operation;
+  limitKind;
+  limit;
+  attempted;
+  constructor(params) {
+    const label = params.limitKind === "perTxUsd" ? "per-transaction limit" : "daily spend limit";
+    super(
+      `Exceeds ${label} ($${params.limit}). Attempted $${params.attempted.toFixed(2)}. Use --force / force:true to override.`
+    );
+    this.name = "LimitExceededError";
+    this.operation = params.operation;
+    this.limitKind = params.limitKind;
+    this.limit = params.limit;
+    this.attempted = params.attempted;
   }
   toJSON() {
     return {
-      error: "SAFEGUARD_BLOCKED",
+      error: this.code,
       message: this.message,
-      retryable: this.retryable,
-      data: { rule: this.rule, ...this.details }
+      operation: this.operation,
+      limitKind: this.limitKind,
+      limit: this.limit,
+      attempted: this.attempted
     };
   }
 };
-function buildMessage(rule, details) {
-  switch (rule) {
-    case "locked":
-      return "Agent is locked. All operations are frozen.";
-    case "maxPerTx":
-      return `Amount $${(details.attempted ?? 0).toFixed(2)} exceeds per-transaction limit ($${(details.limit ?? 0).toFixed(2)})`;
-    case "maxDailySend":
-      return `Daily send limit reached ($${(details.current ?? 0).toFixed(2)}/$${(details.limit ?? 0).toFixed(2)} used today)`;
-  }
-}
-var SafeguardEnforcer = class {
-  config;
-  configPath;
-  constructor(configDir) {
-    this.config = { ...DEFAULT_SAFEGUARD_CONFIG };
-    this.configPath = configDir ? join$1(configDir, "config.json") : null;
-  }
-  load() {
-    if (!this.configPath) return;
-    try {
-      const raw = JSON.parse(readFileSync(this.configPath, "utf-8"));
-      this.config = {
-        ...DEFAULT_SAFEGUARD_CONFIG,
-        locked: raw.locked ?? false,
-        maxPerTx: raw.maxPerTx ?? 0,
-        maxDailySend: raw.maxDailySend ?? 0,
-        dailyUsed: raw.dailyUsed ?? 0,
-        dailyResetDate: raw.dailyResetDate ?? ""
-      };
-    } catch {
-      this.config = { ...DEFAULT_SAFEGUARD_CONFIG };
-    }
-  }
-  assertNotLocked() {
-    this.load();
-    if (this.config.locked) {
-      throw new SafeguardError("locked", {});
-    }
-  }
-  check(metadata) {
-    this.load();
-    if (this.config.locked) {
-      throw new SafeguardError("locked", {});
-    }
-    const amount = metadata.amount ?? 0;
-    if (this.config.maxPerTx > 0 && amount > this.config.maxPerTx) {
-      throw new SafeguardError("maxPerTx", {
-        attempted: amount,
-        limit: this.config.maxPerTx
-      });
-    }
-    this.resetDailyIfNewDay();
-    if (this.config.maxDailySend > 0 && this.config.dailyUsed + amount > this.config.maxDailySend) {
-      throw new SafeguardError("maxDailySend", {
-        attempted: amount,
-        limit: this.config.maxDailySend,
-        current: this.config.dailyUsed
-      });
-    }
+function approxUsdValue(asset, amount) {
+  const symbol = asset.toUpperCase();
+  if (symbol === "USDC" || symbol === "USDSUI") return amount;
+  return null;
+}
+function assertLimitConfig(input) {
+  if (input.force) return;
+  if (!Number.isFinite(input.amountUsd) || input.amountUsd <= 0) return;
+  const { limits } = input;
+  if (!limits) return;
+  if (limits.perTxUsd !== void 0 && input.amountUsd > limits.perTxUsd) {
+    throw new LimitExceededError({
+      operation: input.operation,
+      limitKind: "perTxUsd",
+      limit: limits.perTxUsd,
+      attempted: input.amountUsd
+    });
   }
-  recordUsage(amount) {
-    this.resetDailyIfNewDay();
-    this.config.dailyUsed += amount;
-    this.save();
+  if (limits.dailyUsd !== void 0 && input.spentTodayUsd + input.amountUsd > limits.dailyUsd) {
+    throw new LimitExceededError({
+      operation: input.operation,
+      limitKind: "dailyUsd",
+      // The cap is total/day; report the cap (attempted is THIS write's USD).
+      limit: limits.dailyUsd,
+      attempted: input.spentTodayUsd + input.amountUsd
+    });
   }
-  lock() {
-    this.config.locked = true;
-    this.save();
+}
+var LimitEnforcer = class {
+  constructor(configDir) {
+    this.configDir = configDir;
+  }
+  /** Throws `LimitExceededError` when the write exceeds an opted-in cap. */
+  assert(input) {
+    assertLimitConfig({
+      limits: getLimits(this.configDir),
+      spentTodayUsd: dailySpentToday(this.configDir),
+      operation: input.operation,
+      amountUsd: input.amountUsd,
+      force: input.force
+    });
   }
-  unlock() {
-    this.config.locked = false;
-    this.save();
+  /** Add a settled write's USD value to today's cumulative total. */
+  record(amountUsd) {
+    recordDailySpend(amountUsd, this.configDir);
   }
-  set(key, value) {
-    if (key === "locked" && typeof value === "boolean") {
-      this.config.locked = value;
-    } else if (key === "maxPerTx" && typeof value === "number") {
-      this.config.maxPerTx = value;
-    } else if (key === "maxDailySend" && typeof value === "number") {
-      this.config.maxDailySend = value;
-    }
-    this.save();
+  getLimits() {
+    return getLimits(this.configDir);
   }
-  getConfig() {
-    this.load();
-    this.resetDailyIfNewDay();
-    return { ...this.config };
+  hasLimits() {
+    return hasLimits(this.configDir);
   }
-  isConfigured() {
-    return this.config.maxPerTx > 0 || this.config.maxDailySend > 0;
+  setLimits(limits) {
+    setLimits(limits, this.configDir);
   }
-  resetDailyIfNewDay() {
-    const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-    if (this.config.dailyResetDate !== today) {
-      this.config.dailyUsed = 0;
-      this.config.dailyResetDate = today;
-      this.save();
-    }
+  clearLimits() {
+    clearLimits(this.configDir);
   }
-  save() {
-    if (!this.configPath) return;
-    try {
-      let existing = {};
-      try {
-        existing = JSON.parse(readFileSync(this.configPath, "utf-8"));
-      } catch {
-      }
-      const merged = {
-        ...existing,
-        locked: this.config.locked,
-        maxPerTx: this.config.maxPerTx,
-        maxDailySend: this.config.maxDailySend,
-        dailyUsed: this.config.dailyUsed,
-        dailyResetDate: this.config.dailyResetDate
-      };
-      const dir = this.configPath.replace(/[/\\][^/\\]+$/, "");
-      if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-      }
-      writeFileSync(this.configPath, JSON.stringify(merged, null, 2) + "\n");
-    } catch {
-    }
+  dailySpentToday() {
+    return dailySpentToday(this.configDir);
   }
 };
-var DEFAULT_CONFIG_DIR = join$1(homedir(), ".t2000");
+var DEFAULT_CONFIG_DIR2 = join$1(homedir(), ".t2000");
 var T2000 = class _T2000 extends import_index2.default {
   _signer;
   _keypair;
   client;
   _address;
-  enforcer;
+  /** Unified spending-limit gate (per-tx + cumulative daily, USD). Shared by
+   *  CLI + MCP + programmatic writes — one gate, no bypass (R-0 Finding 1). */
+  limits;
   constructor(keypairOrSigner, client, configDir, isSignerMode) {
     super();
     if (isSignerMode) {
@@ -80222,8 +80252,7 @@ var T2000 = class _T2000 extends import_index2.default {
       this._address = getAddress(kp);
     }
     this.client = client;
-    this.enforcer = new SafeguardEnforcer(configDir);
-    this.enforcer.load();
+    this.limits = new LimitEnforcer(configDir);
   }
   static async create(options = {}) {
     const { keyPath, rpcUrl } = options;
@@ -80236,7 +80265,7 @@ var T2000 = class _T2000 extends import_index2.default {
       );
     }
     const keypair = await loadKey(void 0, keyPath);
-    return new _T2000(keypair, client, DEFAULT_CONFIG_DIR);
+    return new _T2000(keypair, client, DEFAULT_CONFIG_DIR2);
   }
   static fromPrivateKey(privateKey, options = {}) {
     const keypair = keypairFromPrivateKey(privateKey);
@@ -80247,7 +80276,7 @@ var T2000 = class _T2000 extends import_index2.default {
     const keypair = generateKeypair();
     await saveKey(keypair, void 0, options.keyPath);
     const client = getSuiClient();
-    const agent = new _T2000(keypair, client, DEFAULT_CONFIG_DIR);
+    const agent = new _T2000(keypair, client, DEFAULT_CONFIG_DIR2);
     const address = agent.address();
     return { agent, address };
   }
@@ -80269,11 +80298,10 @@ var T2000 = class _T2000 extends import_index2.default {
   }
   // -- MPP Payments --
   async pay(options) {
-    this.enforcer.assertNotLocked();
-    this.enforcer.check({ operation: "pay", amount: options.maxPrice ?? 1 });
+    this.limits.assert({ operation: "pay", amountUsd: options.maxPrice ?? 0, force: options.force });
     const result = await payWithMpp({ signer: this._signer, client: this.client, options });
     if (result.paid) {
-      this.enforcer.recordUsage(result.cost ?? options.maxPrice ?? 1);
+      this.limits.record(result.cost ?? options.maxPrice ?? 0);
     }
     return result;
   }
@@ -80287,7 +80315,11 @@ var T2000 = class _T2000 extends import_index2.default {
   // and the S.323 build-tracker entry.
   // -- Swap --
   async swap(params) {
-    this.enforcer.assertNotLocked();
+    this.limits.assert({
+      operation: "swap",
+      amountUsd: approxUsdValue(params.from, params.amount) ?? 0,
+      force: params.force
+    });
     const { findSwapRoute: findSwapRoute2, buildSwapTx: buildSwapTx2, resolveTokenType: resolveTokenType2 } = await Promise.resolve().then(() => (init_cetus_swap(), cetus_swap_exports));
     const fromType = resolveTokenType2(params.from);
     const toType = resolveTokenType2(params.to);
@@ -80379,6 +80411,7 @@ var T2000 = class _T2000 extends import_index2.default {
     const fromName = resolveSymbol(fromType);
     const toName = resolveSymbol(toType);
     const routeDesc = route.routerData.paths?.map((p) => p.provider).filter(Boolean).slice(0, 3).join(" + ") ?? "Cetus Aggregator";
+    this.limits.record(approxUsdValue(params.from, params.amount) ?? 0);
     return {
       success: true,
       tx: gasResult.digest,
@@ -80435,7 +80468,6 @@ var T2000 = class _T2000 extends import_index2.default {
    * the "build via gRPC, execute via JSON-RPC" hybrid).
    */
   async send(params) {
-    this.enforcer.assertNotLocked();
     const asset = params.asset;
     if (!asset) {
       throw new T2000Error(
@@ -80445,6 +80477,11 @@ var T2000 = class _T2000 extends import_index2.default {
     }
     assertAllowedAsset("send", asset);
     const sendableAsset = asset;
+    this.limits.assert({
+      operation: "send",
+      amountUsd: approxUsdValue(sendableAsset, params.amount) ?? 0,
+      force: params.force
+    });
     const resolved = await this.resolveRecipient(params.to);
     const sendAmount = params.amount;
     const sendTo = resolved.address;
@@ -80456,7 +80493,7 @@ var T2000 = class _T2000 extends import_index2.default {
       () => buildSendTx({ client: this.client, address: this._address, to: sendTo, amount: sendAmount, asset: sendableAsset }),
       { buildClient }
     );
-    this.enforcer.recordUsage(sendAmount);
+    this.limits.record(approxUsdValue(sendableAsset, sendAmount) ?? 0);
     const balance = await this.balance();
     this.emitBalanceChange(sendableAsset, sendAmount, "send", gasResult.digest);
     return {
@@ -80617,12 +80654,18 @@ async function createAgent(keyPath) {
 }
 init_zod();
 function mapError(err) {
-  if (err instanceof SafeguardError) {
+  if (err instanceof LimitExceededError) {
     return {
-      code: "SAFEGUARD_BLOCKED",
+      code: err.code,
+      // 'LIMIT_EXCEEDED'
       message: err.message,
       retryable: false,
-      details: { rule: err.rule, ...err.details }
+      details: {
+        operation: err.operation,
+        limitKind: err.limitKind,
+        limit: err.limit,
+        attempted: err.attempted
+      }
     };
   }
   if (err instanceof T2000Error) {
@@ -80895,25 +80938,16 @@ ${text}`;
     }
   );
 }
-function defaultConfigPath() {
-  return resolve(homedir(), ".t2000", "config.json");
-}
-async function readLimits(configPath) {
-  const path = configPath ?? defaultConfigPath();
-  try {
-    const content = await readFile(path, "utf-8");
-    const raw = JSON.parse(content);
-    if (typeof raw !== "object" || raw === null) return { configured: false, configPath: path };
-    const limits = raw.limits;
-    if (typeof limits !== "object" || limits === null) return { configured: false, configPath: path };
-    const l2 = limits;
-    const perTxUsd = typeof l2.perTxUsd === "number" && l2.perTxUsd > 0 ? l2.perTxUsd : void 0;
-    const dailySendUsd = typeof l2.dailySendUsd === "number" && l2.dailySendUsd > 0 ? l2.dailySendUsd : void 0;
-    const configured = perTxUsd !== void 0 || dailySendUsd !== void 0;
-    return { configured, perTxUsd, dailySendUsd, configPath: path };
-  } catch {
-    return { configured: false, configPath: path };
-  }
+function readLimits(configDir) {
+  const limits = getLimits(configDir);
+  const perTxUsd = limits?.perTxUsd;
+  const dailyUsd = limits?.dailyUsd;
+  return {
+    configured: perTxUsd !== void 0 || dailyUsd !== void 0,
+    perTxUsd,
+    dailyUsd,
+    spentTodayUsd: dailySpentToday(configDir)
+  };
 }
 function registerLimitTool(server) {
   server.tool(
@@ -80926,7 +80960,7 @@ Use the returned values to inform the user about their own configured caps befor
     {},
     async () => {
       try {
-        const view = await readLimits();
+        const view = readLimits();
         return { content: [{ type: "text", text: JSON.stringify(view) }] };
       } catch (err) {
         return errorResult(err);
@@ -80972,7 +81006,7 @@ Through this wallet you can reach essentially any major external API, billed to
 CRITICAL: When the user asks to use any external or paid API, names a provider (e.g. "via fal.ai", "with ElevenLabs"), or requests a capability one of the services above provides, DO NOT say you cannot reach that service, that it isn't on an allowlist, or that there's no connector \u2014 and do NOT fall back to writing a script for the user to run. You CAN do it directly through this wallet. Use t2000_services to discover the endpoint and request shape, then t2000_pay to execute, then show the user the result (display image/audio URLs returned in the response).
 
 Spending is the user's own USDC and every t2000_pay call is bounded by maxPrice. For larger or multi-step spends, state the estimated cost first and proceed once the user is happy. Use t2000_balance to check funds. The v4 wallet is payments-only; savings / lending live on audric.ai.`;
-var PKG_VERSION = "5.1.0";
+var PKG_VERSION = "5.2.0";
 console.log = (...args) => console.error("[log]", ...args);
 console.warn = (...args) => console.error("[warn]", ...args);
 async function startMcpServer(opts) {
@@ -81038,4 +81072,4 @@ mime-types/index.js:
 @scure/bip39/index.js:
   (*! scure-bip39 - MIT License (c) 2022 Patricio Palladino, Paul Miller (paulmillr.com) *)
 */
-//# sourceMappingURL=dist-3PYU4RZC.js.map
+//# sourceMappingURL=dist-KVEHGTYJ.js.map