@t2000/cli 5.1.0 → 5.3.0

package/dist/index.js

@@ -13676,7 +13676,7 @@ var require_lib2 = __commonJS({
       return matches;
     };
     exports.analyse = analyse;
-    var detectFile = (filepath, opts = {}) => new Promise((resolve3, reject) => {
+    var detectFile = (filepath, opts = {}) => new Promise((resolve2, reject) => {
       let fd;
       const fs = (0, node_1.default)();
       const handler = (err, buffer) => {
@@ -13686,7 +13686,7 @@ var require_lib2 = __commonJS({
         if (err) {
           reject(err);
         } else if (buffer) {
-          resolve3((0, exports.detect)(buffer));
+          resolve2((0, exports.detect)(buffer));
         } else {
           reject(new Error("No error and no buffer received"));
         }
@@ -21930,10 +21930,10 @@ var require_browser = __commonJS({
           text = canvas;
           canvas = void 0;
         }
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode.create(text, opts);
-            resolve3(renderFunc(data, canvas, opts));
+            resolve2(renderFunc(data, canvas, opts));
           } catch (e) {
             reject(e);
           }
@@ -22015,11 +22015,11 @@ var require_server = __commonJS({
     }
     function render(renderFunc, text, params) {
       if (!params.cb) {
-        return new Promise(function(resolve3, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode.create(text, params.opts);
             return renderFunc(data, params.opts, function(err, data2) {
-              return err ? reject(err) : resolve3(data2);
+              return err ? reject(err) : resolve2(data2);
             });
           } catch (e) {
             reject(e);
@@ -28159,164 +28159,194 @@ async function resolveSuinsViaRpc(rawName, ctx = {}) {
   return body.result ?? null;
 }
 init_errors();
-var DEFAULT_SAFEGUARD_CONFIG = {
-  locked: false,
-  maxPerTx: 0,
-  maxDailySend: 0,
-  dailyUsed: 0,
-  dailyResetDate: ""
-};
-init_errors();
-var SafeguardError = class extends T2000Error {
-  rule;
-  details;
-  constructor(rule, details, message) {
-    const msg = message ?? buildMessage(rule, details);
-    super("SAFEGUARD_BLOCKED", msg, { rule, ...details });
-    this.name = "SafeguardError";
-    this.rule = rule;
-    this.details = details;
+var DEFAULT_CONFIG_DIR = join2(homedir(), ".t2000");
+function resolveConfigPath(configDir) {
+  return join2(configDir ?? DEFAULT_CONFIG_DIR, "config.json");
+}
+function todayUtc() {
+  return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+}
+function readLimitsFile(configDir) {
+  const path2 = resolveConfigPath(configDir);
+  try {
+    return sanitize(JSON.parse(readFileSync(path2, "utf-8")));
+  } catch {
+    return {};
+  }
+}
+function writeLimitsFile(file, configDir) {
+  const path2 = resolveConfigPath(configDir);
+  let existing = {};
+  try {
+    existing = JSON.parse(readFileSync(path2, "utf-8"));
+  } catch {
+    existing = {};
+  }
+  for (const dead of ["maxPerTx", "maxDailySend", "dailyUsed", "dailyResetDate", "locked"]) {
+    delete existing[dead];
+  }
+  const merged = { ...existing };
+  if (file.limits && (file.limits.perTxUsd !== void 0 || file.limits.dailyUsd !== void 0)) {
+    merged.limits = file.limits;
+  } else {
+    delete merged.limits;
+  }
+  if (file.dailySpend) merged.dailySpend = file.dailySpend;
+  else delete merged.dailySpend;
+  const dir = dirname(path2);
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  writeFileSync(path2, JSON.stringify(merged, null, 2) + "\n", { mode: 384 });
+  return path2;
+}
+function getLimits(configDir) {
+  return readLimitsFile(configDir).limits;
+}
+function hasLimits(configDir) {
+  const l = readLimitsFile(configDir).limits;
+  return !!l && (l.perTxUsd !== void 0 || l.dailyUsd !== void 0);
+}
+function setLimits(limits, configDir) {
+  const file = readLimitsFile(configDir);
+  const merged = { ...file.limits };
+  if (limits.perTxUsd !== void 0) merged.perTxUsd = limits.perTxUsd;
+  if (limits.dailyUsd !== void 0) merged.dailyUsd = limits.dailyUsd;
+  return writeLimitsFile({ ...file, limits: merged }, configDir);
+}
+function clearLimits(configDir) {
+  const file = readLimitsFile(configDir);
+  return writeLimitsFile({ ...file, limits: void 0 }, configDir);
+}
+function dailySpentToday(configDir) {
+  const { dailySpend } = readLimitsFile(configDir);
+  if (!dailySpend || dailySpend.date !== todayUtc()) return 0;
+  return dailySpend.usd;
+}
+function recordDailySpend(usd, configDir) {
+  if (!Number.isFinite(usd) || usd <= 0) return;
+  const file = readLimitsFile(configDir);
+  const today = todayUtc();
+  const prior = file.dailySpend && file.dailySpend.date === today ? file.dailySpend.usd : 0;
+  writeLimitsFile({ ...file, dailySpend: { date: today, usd: prior + usd } }, configDir);
+}
+function sanitize(raw) {
+  if (typeof raw !== "object" || raw === null) return {};
+  const r = raw;
+  const out = {};
+  if (typeof r.limits === "object" && r.limits !== null) {
+    const l = r.limits;
+    const limits = {};
+    if (typeof l.perTxUsd === "number" && l.perTxUsd > 0) limits.perTxUsd = l.perTxUsd;
+    if (typeof l.dailyUsd === "number" && l.dailyUsd > 0) limits.dailyUsd = l.dailyUsd;
+    else if (typeof l.dailySendUsd === "number" && l.dailySendUsd > 0) limits.dailyUsd = l.dailySendUsd;
+    if (limits.perTxUsd !== void 0 || limits.dailyUsd !== void 0) out.limits = limits;
+  }
+  if (typeof r.dailySpend === "object" && r.dailySpend !== null) {
+    const d = r.dailySpend;
+    if (typeof d.date === "string" && typeof d.usd === "number" && d.usd >= 0) {
+      out.dailySpend = { date: d.date, usd: d.usd };
+    }
+  }
+  return out;
+}
+var LimitExceededError = class extends Error {
+  code = "LIMIT_EXCEEDED";
+  operation;
+  limitKind;
+  limit;
+  attempted;
+  constructor(params) {
+    const label = params.limitKind === "perTxUsd" ? "per-transaction limit" : "daily spend limit";
+    super(
+      `Exceeds ${label} ($${params.limit}). Attempted $${params.attempted.toFixed(2)}. Use --force / force:true to override.`
+    );
+    this.name = "LimitExceededError";
+    this.operation = params.operation;
+    this.limitKind = params.limitKind;
+    this.limit = params.limit;
+    this.attempted = params.attempted;
   }
   toJSON() {
     return {
-      error: "SAFEGUARD_BLOCKED",
+      error: this.code,
       message: this.message,
-      retryable: this.retryable,
-      data: { rule: this.rule, ...this.details }
+      operation: this.operation,
+      limitKind: this.limitKind,
+      limit: this.limit,
+      attempted: this.attempted
     };
   }
 };
-function buildMessage(rule, details) {
-  switch (rule) {
-    case "locked":
-      return "Agent is locked. All operations are frozen.";
-    case "maxPerTx":
-      return `Amount $${(details.attempted ?? 0).toFixed(2)} exceeds per-transaction limit ($${(details.limit ?? 0).toFixed(2)})`;
-    case "maxDailySend":
-      return `Daily send limit reached ($${(details.current ?? 0).toFixed(2)}/$${(details.limit ?? 0).toFixed(2)} used today)`;
-  }
-}
-var SafeguardEnforcer = class {
-  config;
-  configPath;
-  constructor(configDir) {
-    this.config = { ...DEFAULT_SAFEGUARD_CONFIG };
-    this.configPath = configDir ? join2(configDir, "config.json") : null;
-  }
-  load() {
-    if (!this.configPath) return;
-    try {
-      const raw = JSON.parse(readFileSync(this.configPath, "utf-8"));
-      this.config = {
-        ...DEFAULT_SAFEGUARD_CONFIG,
-        locked: raw.locked ?? false,
-        maxPerTx: raw.maxPerTx ?? 0,
-        maxDailySend: raw.maxDailySend ?? 0,
-        dailyUsed: raw.dailyUsed ?? 0,
-        dailyResetDate: raw.dailyResetDate ?? ""
-      };
-    } catch {
-      this.config = { ...DEFAULT_SAFEGUARD_CONFIG };
-    }
+function approxUsdValue(asset, amount) {
+  const symbol = asset.toUpperCase();
+  if (symbol === "USDC" || symbol === "USDSUI") return amount;
+  return null;
+}
+function assertLimitConfig(input) {
+  if (input.force) return;
+  if (!Number.isFinite(input.amountUsd) || input.amountUsd <= 0) return;
+  const { limits } = input;
+  if (!limits) return;
+  if (limits.perTxUsd !== void 0 && input.amountUsd > limits.perTxUsd) {
+    throw new LimitExceededError({
+      operation: input.operation,
+      limitKind: "perTxUsd",
+      limit: limits.perTxUsd,
+      attempted: input.amountUsd
+    });
   }
-  assertNotLocked() {
-    this.load();
-    if (this.config.locked) {
-      throw new SafeguardError("locked", {});
-    }
+  if (limits.dailyUsd !== void 0 && input.spentTodayUsd + input.amountUsd > limits.dailyUsd) {
+    throw new LimitExceededError({
+      operation: input.operation,
+      limitKind: "dailyUsd",
+      // The cap is total/day; report the cap (attempted is THIS write's USD).
+      limit: limits.dailyUsd,
+      attempted: input.spentTodayUsd + input.amountUsd
+    });
   }
-  check(metadata) {
-    this.load();
-    if (this.config.locked) {
-      throw new SafeguardError("locked", {});
-    }
-    const amount = metadata.amount ?? 0;
-    if (this.config.maxPerTx > 0 && amount > this.config.maxPerTx) {
-      throw new SafeguardError("maxPerTx", {
-        attempted: amount,
-        limit: this.config.maxPerTx
-      });
-    }
-    this.resetDailyIfNewDay();
-    if (this.config.maxDailySend > 0 && this.config.dailyUsed + amount > this.config.maxDailySend) {
-      throw new SafeguardError("maxDailySend", {
-        attempted: amount,
-        limit: this.config.maxDailySend,
-        current: this.config.dailyUsed
-      });
-    }
+}
+var LimitEnforcer = class {
+  constructor(configDir) {
+    this.configDir = configDir;
   }
-  recordUsage(amount) {
-    this.resetDailyIfNewDay();
-    this.config.dailyUsed += amount;
-    this.save();
+  /** Throws `LimitExceededError` when the write exceeds an opted-in cap. */
+  assert(input) {
+    assertLimitConfig({
+      limits: getLimits(this.configDir),
+      spentTodayUsd: dailySpentToday(this.configDir),
+      operation: input.operation,
+      amountUsd: input.amountUsd,
+      force: input.force
+    });
   }
-  lock() {
-    this.config.locked = true;
-    this.save();
+  /** Add a settled write's USD value to today's cumulative total. */
+  record(amountUsd) {
+    recordDailySpend(amountUsd, this.configDir);
   }
-  unlock() {
-    this.config.locked = false;
-    this.save();
+  getLimits() {
+    return getLimits(this.configDir);
   }
-  set(key, value) {
-    if (key === "locked" && typeof value === "boolean") {
-      this.config.locked = value;
-    } else if (key === "maxPerTx" && typeof value === "number") {
-      this.config.maxPerTx = value;
-    } else if (key === "maxDailySend" && typeof value === "number") {
-      this.config.maxDailySend = value;
-    }
-    this.save();
+  hasLimits() {
+    return hasLimits(this.configDir);
   }
-  getConfig() {
-    this.load();
-    this.resetDailyIfNewDay();
-    return { ...this.config };
+  setLimits(limits) {
+    setLimits(limits, this.configDir);
   }
-  isConfigured() {
-    return this.config.maxPerTx > 0 || this.config.maxDailySend > 0;
+  clearLimits() {
+    clearLimits(this.configDir);
   }
-  resetDailyIfNewDay() {
-    const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-    if (this.config.dailyResetDate !== today) {
-      this.config.dailyUsed = 0;
-      this.config.dailyResetDate = today;
-      this.save();
-    }
-  }
-  save() {
-    if (!this.configPath) return;
-    try {
-      let existing = {};
-      try {
-        existing = JSON.parse(readFileSync(this.configPath, "utf-8"));
-      } catch {
-      }
-      const merged = {
-        ...existing,
-        locked: this.config.locked,
-        maxPerTx: this.config.maxPerTx,
-        maxDailySend: this.config.maxDailySend,
-        dailyUsed: this.config.dailyUsed,
-        dailyResetDate: this.config.dailyResetDate
-      };
-      const dir = this.configPath.replace(/[/\\][^/\\]+$/, "");
-      if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-      }
-      writeFileSync(this.configPath, JSON.stringify(merged, null, 2) + "\n");
-    } catch {
-    }
+  dailySpentToday() {
+    return dailySpentToday(this.configDir);
   }
 };
-var DEFAULT_CONFIG_DIR = join2(homedir(), ".t2000");
+var DEFAULT_CONFIG_DIR2 = join2(homedir(), ".t2000");
 var T2000 = class _T2000 extends import_index2.default {
   _signer;
   _keypair;
   client;
   _address;
-  enforcer;
+  /** Unified spending-limit gate (per-tx + cumulative daily, USD). Shared by
+   *  CLI + MCP + programmatic writes — one gate, no bypass (R-0 Finding 1). */
+  limits;
   constructor(keypairOrSigner, client, configDir, isSignerMode) {
     super();
     if (isSignerMode) {
@@ -28330,8 +28360,7 @@ var T2000 = class _T2000 extends import_index2.default {
       this._address = getAddress(kp);
     }
     this.client = client;
-    this.enforcer = new SafeguardEnforcer(configDir);
-    this.enforcer.load();
+    this.limits = new LimitEnforcer(configDir);
   }
   static async create(options = {}) {
     const { keyPath, rpcUrl } = options;
@@ -28344,7 +28373,7 @@ var T2000 = class _T2000 extends import_index2.default {
       );
     }
     const keypair = await loadKey(void 0, keyPath);
-    return new _T2000(keypair, client, DEFAULT_CONFIG_DIR);
+    return new _T2000(keypair, client, DEFAULT_CONFIG_DIR2);
   }
   static fromPrivateKey(privateKey, options = {}) {
     const keypair = keypairFromPrivateKey(privateKey);
@@ -28355,7 +28384,7 @@ var T2000 = class _T2000 extends import_index2.default {
     const keypair = generateKeypair();
     await saveKey(keypair, void 0, options.keyPath);
     const client = getSuiClient();
-    const agent = new _T2000(keypair, client, DEFAULT_CONFIG_DIR);
+    const agent = new _T2000(keypair, client, DEFAULT_CONFIG_DIR2);
     const address = agent.address();
     return { agent, address };
   }
@@ -28377,11 +28406,10 @@ var T2000 = class _T2000 extends import_index2.default {
   }
   // -- MPP Payments --
   async pay(options) {
-    this.enforcer.assertNotLocked();
-    this.enforcer.check({ operation: "pay", amount: options.maxPrice ?? 1 });
+    this.limits.assert({ operation: "pay", amountUsd: options.maxPrice ?? 0, force: options.force });
     const result = await payWithMpp({ signer: this._signer, client: this.client, options });
     if (result.paid) {
-      this.enforcer.recordUsage(result.cost ?? options.maxPrice ?? 1);
+      this.limits.record(result.cost ?? options.maxPrice ?? 0);
     }
     return result;
   }
@@ -28395,7 +28423,11 @@ var T2000 = class _T2000 extends import_index2.default {
   // and the S.323 build-tracker entry.
   // -- Swap --
   async swap(params) {
-    this.enforcer.assertNotLocked();
+    this.limits.assert({
+      operation: "swap",
+      amountUsd: approxUsdValue(params.from, params.amount) ?? 0,
+      force: params.force
+    });
     const { findSwapRoute: findSwapRoute2, buildSwapTx: buildSwapTx2, resolveTokenType: resolveTokenType2 } = await Promise.resolve().then(() => (init_cetus_swap(), cetus_swap_exports));
     const fromType = resolveTokenType2(params.from);
     const toType = resolveTokenType2(params.to);
@@ -28487,6 +28519,7 @@ var T2000 = class _T2000 extends import_index2.default {
     const fromName = resolveSymbol(fromType);
     const toName = resolveSymbol(toType);
     const routeDesc = route.routerData.paths?.map((p) => p.provider).filter(Boolean).slice(0, 3).join(" + ") ?? "Cetus Aggregator";
+    this.limits.record(approxUsdValue(params.from, params.amount) ?? 0);
     return {
       success: true,
       tx: gasResult.digest,
@@ -28543,7 +28576,6 @@ var T2000 = class _T2000 extends import_index2.default {
    * the "build via gRPC, execute via JSON-RPC" hybrid).
    */
   async send(params) {
-    this.enforcer.assertNotLocked();
     const asset = params.asset;
     if (!asset) {
       throw new T2000Error(
@@ -28553,6 +28585,11 @@ var T2000 = class _T2000 extends import_index2.default {
     }
     assertAllowedAsset("send", asset);
     const sendableAsset = asset;
+    this.limits.assert({
+      operation: "send",
+      amountUsd: approxUsdValue(sendableAsset, params.amount) ?? 0,
+      force: params.force
+    });
     const resolved = await this.resolveRecipient(params.to);
     const sendAmount = params.amount;
     const sendTo = resolved.address;
@@ -28564,7 +28601,7 @@ var T2000 = class _T2000 extends import_index2.default {
       () => buildSendTx({ client: this.client, address: this._address, to: sendTo, amount: sendAmount, asset: sendableAsset }),
       { buildClient }
     );
-    this.enforcer.recordUsage(sendAmount);
+    this.limits.record(approxUsdValue(sendableAsset, sendAmount) ?? 0);
     const balance = await this.balance();
     this.emitBalanceChange(sendableAsset, sendAmount, "send", gasResult.digest);
     return {
@@ -29753,13 +29790,13 @@ var PromisePolyfill = class extends Promise {
   // Available starting from Node 22
   // https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise/withResolvers
   static withResolver() {
-    let resolve3;
+    let resolve2;
     let reject;
     const promise = new Promise((res, rej) => {
-      resolve3 = res;
+      resolve2 = res;
       reject = rej;
     });
-    return { promise, resolve: resolve3, reject };
+    return { promise, resolve: resolve2, reject };
   }
 };
 
@@ -29793,7 +29830,7 @@ function createPrompt(view) {
       output
     });
     const screen = new ScreenManager(rl);
-    const { promise, resolve: resolve3, reject } = PromisePolyfill.withResolver();
+    const { promise, resolve: resolve2, reject } = PromisePolyfill.withResolver();
     const cancel = () => reject(new CancelPromptError());
     if (signal) {
       const abort = () => reject(new AbortPromptError({ cause: signal.reason }));
@@ -29820,7 +29857,7 @@ function createPrompt(view) {
       cycle(() => {
         try {
           const nextView = view(config, (value) => {
-            setImmediate(() => resolve3(value));
+            setImmediate(() => resolve2(value));
           });
           if (nextView === void 0) {
             const callerFilename = callSites[1]?.getFileName();
@@ -31132,7 +31169,9 @@ async function askHidden(message) {
 }
 
 // src/commands/init.ts
-var NO_LIMITS_FOOTER = "No spending limits set. Run `t2 limit set --daily <usd>` to add them.";
+var DEFAULT_PER_TX_USD = 25;
+var DEFAULT_DAILY_USD = 100;
+var limitsFooter = (perTx, daily) => `Spending limits ON: $${perTx}/tx, $${daily}/day (cumulative). Change with \`t2 limit set\`, or override a single call with --force.`;
 function registerInit(program3) {
   program3.command("init").description("Create a new Agent Wallet (no PIN; plain Bech32 key file with 0o600 perms)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").option(
     "--import [secret]",
@@ -31159,8 +31198,16 @@ function registerInit(program3) {
         await saveKey(keypair, void 0, opts.key);
         address = getAddress(keypair);
       }
+      if (!hasLimits()) {
+        setLimits({ perTxUsd: DEFAULT_PER_TX_USD, dailyUsd: DEFAULT_DAILY_USD });
+      }
       if (isJsonMode()) {
-        printJson({ address, imported, configPath: opts.key ?? "~/.t2000/wallet.key" });
+        printJson({
+          address,
+          imported,
+          configPath: opts.key ?? "~/.t2000/wallet.key",
+          limits: { perTxUsd: DEFAULT_PER_TX_USD, dailyUsd: DEFAULT_DAILY_USD }
+        });
         return;
       }
       printBlank();
@@ -31168,7 +31215,7 @@ function registerInit(program3) {
       printKeyValue("Address", address);
       printKeyValue("Path", opts.key ?? "~/.t2000/wallet.key");
       printBlank();
-      printLine(`\u26A0  ${NO_LIMITS_FOOTER}`);
+      printLine(`\u26A0  ${limitsFooter(DEFAULT_PER_TX_USD, DEFAULT_DAILY_USD)}`);
       printBlank();
       try {
         await T2000.create({ keyPath: opts.key });
@@ -31387,127 +31434,6 @@ function registerHistory(program3) {
 
 // src/commands/send.ts
 var import_picocolors5 = __toESM(require_picocolors(), 1);
-
-// src/lib/config-store.ts
-import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2, access as access2 } from "fs/promises";
-import { dirname as dirname2, resolve as resolve2 } from "path";
-import { homedir as homedir2 } from "os";
-var DEFAULT_CONFIG_PATH = "~/.t2000/config.json";
-function expandPath2(p) {
-  if (p.startsWith("~")) return resolve2(homedir2(), p.slice(2));
-  return resolve2(p);
-}
-async function readConfig(configPath) {
-  const filePath = expandPath2(configPath ?? DEFAULT_CONFIG_PATH);
-  try {
-    const content = await readFile2(filePath, "utf-8");
-    const parsed = JSON.parse(content);
-    return sanitizeConfig(parsed);
-  } catch {
-    return {};
-  }
-}
-async function writeConfig(config, configPath) {
-  const filePath = expandPath2(configPath ?? DEFAULT_CONFIG_PATH);
-  await mkdir2(dirname2(filePath), { recursive: true });
-  const sanitized = sanitizeConfig(config);
-  await writeFile2(filePath, JSON.stringify(sanitized, null, 2), { mode: 384 });
-  return filePath;
-}
-function setLimits(config, limits) {
-  const merged = { ...config.limits };
-  if (limits.perTxUsd !== void 0) merged.perTxUsd = limits.perTxUsd;
-  if (limits.dailySendUsd !== void 0) merged.dailySendUsd = limits.dailySendUsd;
-  return { ...config, limits: merged };
-}
-function clearLimits(config) {
-  const { limits: _, ...rest } = config;
-  return rest;
-}
-function hasLimits(config) {
-  return config.limits !== void 0 && (config.limits.perTxUsd !== void 0 || config.limits.dailySendUsd !== void 0);
-}
-function sanitizeConfig(raw) {
-  if (typeof raw !== "object" || raw === null) return {};
-  const r = raw;
-  const out = {};
-  if (typeof r.limits === "object" && r.limits !== null) {
-    const l = r.limits;
-    const limits = {};
-    if (typeof l.perTxUsd === "number" && l.perTxUsd > 0) limits.perTxUsd = l.perTxUsd;
-    if (typeof l.dailySendUsd === "number" && l.dailySendUsd > 0) limits.dailySendUsd = l.dailySendUsd;
-    if (limits.perTxUsd !== void 0 || limits.dailySendUsd !== void 0) out.limits = limits;
-  }
-  return out;
-}
-
-// src/commands/limit/enforce.ts
-var LimitExceededError = class extends Error {
-  code = "LIMIT_EXCEEDED";
-  limit;
-  limitKind;
-  attempted;
-  operation;
-  constructor(params) {
-    const label = params.limitKind === "perTxUsd" ? "per-transaction limit" : "daily limit";
-    super(
-      `Exceeds ${label} ($${params.limit}). Attempted $${params.attempted.toFixed(2)}. Use --force to override.`
-    );
-    this.name = "LimitExceededError";
-    this.operation = params.operation;
-    this.limitKind = params.limitKind;
-    this.limit = params.limit;
-    this.attempted = params.attempted;
-  }
-  toJSON() {
-    return {
-      error: this.code,
-      message: this.message,
-      operation: this.operation,
-      limitKind: this.limitKind,
-      limit: this.limit,
-      attempted: this.attempted
-    };
-  }
-};
-function assertLimitConfig(input) {
-  if (input.force) return;
-  if (!Number.isFinite(input.amountUsd) || input.amountUsd <= 0) return;
-  const limits = input.config.limits;
-  if (!limits) return;
-  if (limits.perTxUsd !== void 0 && input.amountUsd > limits.perTxUsd) {
-    throw new LimitExceededError({
-      operation: input.operation,
-      limitKind: "perTxUsd",
-      limit: limits.perTxUsd,
-      attempted: input.amountUsd
-    });
-  }
-  if (input.operation === "send" && limits.dailySendUsd !== void 0 && input.amountUsd > limits.dailySendUsd) {
-    throw new LimitExceededError({
-      operation: input.operation,
-      limitKind: "dailySendUsd",
-      limit: limits.dailySendUsd,
-      attempted: input.amountUsd
-    });
-  }
-}
-async function assertWithinLimits(input) {
-  const config = await readConfig(input.configPath);
-  assertLimitConfig({
-    config,
-    operation: input.operation,
-    amountUsd: input.amountUsd,
-    force: input.force
-  });
-}
-function approxUsdValue(asset, amount) {
-  const symbol = asset.toUpperCase();
-  if (symbol === "USDC" || symbol === "USDSUI") return amount;
-  return null;
-}
-
-// src/commands/send.ts
 var ACCEPTED_ASSETS = ["USDC", "USDsui", "SUI"];
 var ACCEPTED_ASSETS_LIST = ACCEPTED_ASSETS.join(", ");
 function parseSendArgs(args) {
@@ -31563,10 +31489,6 @@ Examples:
   ).action(async (amount, args, opts) => {
     try {
       const { amount: parsedAmount, asset, recipient } = parseSendArgs([amount, ...args]);
-      const usdValue = approxUsdValue(asset, parsedAmount);
-      if (usdValue !== null) {
-        await assertWithinLimits({ operation: "send", amountUsd: usdValue, force: opts.force });
-      }
       const agent = await withAgent({ keyPath: opts.key });
       const result = await agent.send({
         to: recipient,
@@ -31574,7 +31496,8 @@ Examples:
         // The CLI parser already narrowed asset to USDC / USDsui / SUI;
         // the SDK accepts `SupportedAsset` and re-validates via
         // `assertAllowedAsset('send', …)` at runtime.
-        asset
+        asset,
+        force: opts.force
       });
       if (isJsonMode()) {
         printJson({
@@ -31629,16 +31552,6 @@ Examples:
     async (amountStr, from, to, opts) => {
       try {
         const parsed = parseSwapArgs(amountStr, from, to);
-        if (!opts.quote) {
-          const usdValue = approxUsdValue(parsed.from, parsed.amount);
-          if (usdValue !== null) {
-            await assertWithinLimits({
-              operation: "swap",
-              amountUsd: usdValue,
-              force: opts.force
-            });
-          }
-        }
         const agent = await withAgent({ keyPath: opts.key });
         if (opts.quote) {
           const quote = await agent.swapQuote({
@@ -31665,7 +31578,8 @@ Examples:
           from: parsed.from,
           to: parsed.to,
           amount: parsed.amount,
-          slippage
+          slippage,
+          force: opts.force
         });
         if (isJsonMode()) {
           printJson(result);
@@ -31718,7 +31632,6 @@ Examples:
       if (Number.isNaN(maxPrice) || maxPrice <= 0) {
         throw new Error(`Invalid --max-price: "${opts.maxPrice}". Must be a positive number.`);
       }
-      await assertWithinLimits({ operation: "pay", amountUsd: maxPrice, force: opts.force });
       const agent = await withAgent({ keyPath: opts.key });
       const startTime = Date.now();
       const method = opts.data && opts.method === "GET" ? "POST" : opts.method;
@@ -31731,7 +31644,8 @@ Examples:
         method,
         headers: opts.header,
         body: opts.data,
-        maxPrice
+        maxPrice,
+        force: opts.force
       });
       const elapsed = Date.now() - startTime;
       if (isJsonMode()) {
@@ -32071,9 +31985,8 @@ var import_picocolors10 = __toESM(require_picocolors(), 1);
 function registerLimitShow(parent) {
   parent.command("show").description("Show current spending limits").action(async (opts) => {
     try {
-      const config = await readConfig(opts.configPath);
-      const limits = config.limits ?? {};
-      const hasAny = limits.perTxUsd !== void 0 || limits.dailySendUsd !== void 0;
+      const limits = getLimits(opts.configDir) ?? {};
+      const hasAny = limits.perTxUsd !== void 0 || limits.dailyUsd !== void 0;
       if (isJsonMode()) {
         printJson({
           limits: hasAny ? limits : null,
@@ -32093,8 +32006,8 @@ function registerLimitShow(parent) {
       if (limits.perTxUsd !== void 0) {
         printKeyValue("Per-transaction", import_picocolors10.default.green(`$${limits.perTxUsd}`));
       }
-      if (limits.dailySendUsd !== void 0) {
-        printKeyValue("Daily send", import_picocolors10.default.green(`$${limits.dailySendUsd}`));
+      if (limits.dailyUsd !== void 0) {
+        printKeyValue("Daily (cumulative)", import_picocolors10.default.green(`$${limits.dailyUsd}`));
       }
       printBlank();
       printInfo("Use `--force` on `t2 send` / `t2 swap` / `t2 pay` to override per-call.");
@@ -32117,7 +32030,7 @@ function parseLimitSetArgs(opts) {
   }
   const limits = {};
   if (perTx !== void 0) limits.perTxUsd = perTx;
-  if (daily !== void 0) limits.dailySendUsd = daily;
+  if (daily !== void 0) limits.dailyUsd = daily;
   return limits;
 }
 function parseUsdFlag(flag, raw) {
@@ -32128,31 +32041,30 @@ function parseUsdFlag(flag, raw) {
   return value;
 }
 function registerLimitSet(parent) {
-  parent.command("set").description("Set spending limits (opt-in; either flag is optional)").option("--per-tx <usd>", "Max USD per single transaction (send | swap | pay)").option("--daily <usd>", "Max USD per send transaction (applies to `t2 send` only)").addHelpText(
+  parent.command("set").description("Set spending limits (opt-in; either flag is optional)").option("--per-tx <usd>", "Max USD per single transaction (send | swap | pay)").option("--daily <usd>", "Max CUMULATIVE USD spend per day across all writes").addHelpText(
     "after",
     `
 Examples:
   $ t2 limit set --per-tx 50         Cap every write at $50
-  $ t2 limit set --daily 100         Cap every send at $100
+  $ t2 limit set --daily 100         Cap total spend at $100/day (cumulative)
   $ t2 limit set --per-tx 50 --daily 100   Set both
 `
   ).action(async (opts) => {
     try {
       const limits = parseLimitSetArgs({ perTx: opts.perTx, daily: opts.daily });
-      const current = await readConfig(opts.configPath);
-      const next = setLimits(current, limits);
-      const filePath = await writeConfig(next, opts.configPath);
+      setLimits(limits, opts.configDir);
+      const next = getLimits(opts.configDir);
       if (isJsonMode()) {
-        printJson({ ok: true, configPath: filePath, limits: next.limits });
+        printJson({ ok: true, limits: next });
         return;
       }
       printBlank();
       printSuccess("Spending limits updated.");
-      if (next.limits?.perTxUsd !== void 0) {
-        printKeyValue("Per-transaction", import_picocolors11.default.green(`$${next.limits.perTxUsd}`));
+      if (next?.perTxUsd !== void 0) {
+        printKeyValue("Per-transaction", import_picocolors11.default.green(`$${next.perTxUsd}`));
       }
-      if (next.limits?.dailySendUsd !== void 0) {
-        printKeyValue("Daily send", import_picocolors11.default.green(`$${next.limits.dailySendUsd}`));
+      if (next?.dailyUsd !== void 0) {
+        printKeyValue("Daily (cumulative)", import_picocolors11.default.green(`$${next.dailyUsd}`));
       }
       printBlank();
       printInfo("Use `t2 limit show` to view; `t2 limit reset` to clear.");
@@ -32167,8 +32079,7 @@ Examples:
 function registerLimitReset(parent) {
   parent.command("reset").description("Clear all spending limits").action(async (opts) => {
     try {
-      const current = await readConfig(opts.configPath);
-      if (!hasLimits(current)) {
+      if (!hasLimits(opts.configDir)) {
         if (isJsonMode()) {
           printJson({ ok: true, cleared: false, reason: "no limits were set" });
           return;
@@ -32178,10 +32089,9 @@ function registerLimitReset(parent) {
         printBlank();
         return;
       }
-      const next = clearLimits(current);
-      const filePath = await writeConfig(next, opts.configPath);
+      clearLimits(opts.configDir);
       if (isJsonMode()) {
-        printJson({ ok: true, cleared: true, configPath: filePath });
+        printJson({ ok: true, cleared: true });
         return;
       }
       printBlank();
@@ -32216,7 +32126,7 @@ function registerMcpStart(parent) {
   parent.command("start", { isDefault: true }).description("Start MCP server (stdio transport \u2014 for AI client integration)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(async (opts) => {
     let mod2;
     try {
-      mod2 = await import("./dist-3PYU4RZC.js");
+      mod2 = await import("./dist-U65BYMC5.js");
     } catch {
       console.error("MCP server not installed. Run:\n  npm install -g @t2000/mcp");
       process.exit(1);
@@ -32226,9 +32136,9 @@ function registerMcpStart(parent) {
 }
 
 // src/commands/mcp/platforms.ts
-import { readFile as readFile3, writeFile as writeFile3, mkdir as mkdir3 } from "fs/promises";
-import { join as join3, dirname as dirname3 } from "path";
-import { homedir as homedir3 } from "os";
+import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
+import { join as join3, dirname as dirname2 } from "path";
+import { homedir as homedir2 } from "os";
 import { existsSync as existsSync2 } from "fs";
 var MCP_SERVER_ENTRY = {
   command: "t2000",
@@ -32236,7 +32146,7 @@ var MCP_SERVER_ENTRY = {
 };
 var MCP_SERVER_KEY = "t2000";
 function getPlatformConfigs() {
-  const home = homedir3();
+  const home = homedir2();
   return [
     {
       name: "Claude Desktop",
@@ -32257,18 +32167,18 @@ function getPlatformConfigs() {
 }
 async function readJsonFile(path2) {
   try {
-    const content = await readFile3(path2, "utf-8");
+    const content = await readFile2(path2, "utf-8");
     return JSON.parse(content);
   } catch {
     return {};
   }
 }
 async function writeJsonFile(path2, data) {
-  const dir = dirname3(path2);
+  const dir = dirname2(path2);
   if (!existsSync2(dir)) {
-    await mkdir3(dir, { recursive: true });
+    await mkdir2(dir, { recursive: true });
   }
-  await writeFile3(path2, JSON.stringify(data, null, 2) + "\n", "utf-8");
+  await writeFile2(path2, JSON.stringify(data, null, 2) + "\n", "utf-8");
 }
 function withMcpEntry(config) {
   return {
@@ -32393,7 +32303,7 @@ Subcommands:
 // src/commands/skills/lib.ts
 import { stat } from "fs/promises";
 import { join as join4 } from "path";
-import { homedir as homedir4 } from "os";
+import { homedir as homedir3 } from "os";
 var MANIFEST_URL = "https://t2000.ai/.well-known/agent-skills/index.json";
 var SKILL_PREFIXES = ["t2000-", "mpp-"];
 function isManagedSkillName(name) {
@@ -32401,7 +32311,7 @@ function isManagedSkillName(name) {
 }
 var SKILL_TARGETS = ["agents", "cursor", "claude-code"];
 function resolveTargetDir(target, useGlobal, cwd = process.cwd()) {
-  const root = useGlobal ? homedir4() : cwd;
+  const root = useGlobal ? homedir3() : cwd;
   switch (target) {
     case "agents":
       return join4(root, ".agents", "skills");
@@ -32489,7 +32399,7 @@ function registerSkillsList(parent) {
 }
 
 // src/commands/skills/install.ts
-import { writeFile as writeFile4, mkdir as mkdir4 } from "fs/promises";
+import { writeFile as writeFile3, mkdir as mkdir3 } from "fs/promises";
 import { join as join5 } from "path";
 function registerSkillsInstall(parent) {
   parent.command("install [slug]").description("Install all skills (or one named slug) into a local directory").option("--target <name>", "Target client layout: agents (default), cursor, claude-code", "agents").option("--global", "Install to ~/.<target>/ instead of <cwd>/.<target>/").action(async (slug, opts) => {
@@ -32505,15 +32415,15 @@ function registerSkillsInstall(parent) {
         );
       }
       const targetDir = resolveTargetDir(target, useGlobal);
-      await mkdir4(targetDir, { recursive: true });
+      await mkdir3(targetDir, { recursive: true });
       const installed = [];
       for (const s of toInstall) {
         const raw = await fetchSkill(s.url);
         const transformed = transformForTarget(raw, target, s.description);
         const relPath = filenameForTarget(s.name, target);
         const fullPath = join5(targetDir, relPath);
-        await mkdir4(join5(fullPath, ".."), { recursive: true });
-        await writeFile4(fullPath, transformed, "utf-8");
+        await mkdir3(join5(fullPath, ".."), { recursive: true });
+        await writeFile3(fullPath, transformed, "utf-8");
         installed.push({ name: s.name, path: fullPath });
       }
       if (isJsonMode()) {