@t2000/cli 5.5.1 → 5.6.0

package/dist/{dist-OPR66FUQ.js → dist-VXJH2WYL.js}

@@ -171,12 +171,12 @@ import {
   processEndpoint,
   processFlattenRoutes,
   restituteMsafeFastRouterSwapParams
-} from "./chunk-YKME3ZZ5.js";
-import "./chunk-V6MPPVOY.js";
+} from "./chunk-64M2IV26.js";
+import "./chunk-D6WAQS6U.js";
 import "./chunk-OCLKPYUU.js";
-import "./chunk-ZIKS3DOX.js";
-import "./chunk-FORXEDQJ.js";
-import "./chunk-HRGEZK3M.js";
+import "./chunk-ITIKLNK5.js";
+import "./chunk-MPXYF2CX.js";
+import "./chunk-I2DCISQP.js";
 import "./chunk-SVEVGZKZ.js";
 export {
   AFSUI,
@@ -351,4 +351,4 @@ export {
   processFlattenRoutes,
   restituteMsafeFastRouterSwapParams
 };
-//# sourceMappingURL=dist-OPR66FUQ.js.map
+//# sourceMappingURL=dist-VXJH2WYL.js.map

package/dist/{esm-EIRCX523.js → esm-RF62MWQV.js}

@@ -14,7 +14,7 @@ import {
   randomBytes,
   toBase64,
   toHex
-} from "./chunk-HRGEZK3M.js";
+} from "./chunk-I2DCISQP.js";
 import {
   __commonJS,
   __toESM
@@ -1081,4 +1081,4 @@ export {
   jwtToAddress2 as jwtToAddress,
   poseidonHash
 };
-//# sourceMappingURL=esm-EIRCX523.js.map
+//# sourceMappingURL=esm-RF62MWQV.js.map

package/dist/{grpc-IINTSDGR.js → grpc-UMZJXRGY.js}

@@ -5,9 +5,9 @@ import {
   SuiGrpcClient,
   isSuiGrpcClient,
   types_exports
-} from "./chunk-V6MPPVOY.js";
-import "./chunk-FORXEDQJ.js";
-import "./chunk-HRGEZK3M.js";
+} from "./chunk-D6WAQS6U.js";
+import "./chunk-MPXYF2CX.js";
+import "./chunk-I2DCISQP.js";
 import "./chunk-SVEVGZKZ.js";
 export {
   GrpcCoreClient,
@@ -16,4 +16,4 @@ export {
   SuiGrpcClient,
   isSuiGrpcClient
 };
-//# sourceMappingURL=grpc-IINTSDGR.js.map
+//# sourceMappingURL=grpc-UMZJXRGY.js.map

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from 'module'; import { fileURLToPat
 import {
   AggregatorClient,
   Env
-} from "./chunk-YKME3ZZ5.js";
+} from "./chunk-64M2IV26.js";
 import {
   BalanceChange,
   BaseClient,
@@ -16,12 +16,12 @@ import {
   parseTransactionEffectsBcs,
   transactionDataToGrpcTransaction,
   transactionToGrpcJson
-} from "./chunk-V6MPPVOY.js";
+} from "./chunk-D6WAQS6U.js";
 import "./chunk-OCLKPYUU.js";
 import {
   Transaction,
   coinWithBalance
-} from "./chunk-ZIKS3DOX.js";
+} from "./chunk-ITIKLNK5.js";
 import {
   ObjectError,
   SUI_TYPE_ARG,
@@ -32,7 +32,7 @@ import {
   fromBase64 as fromBase642,
   suiBcs,
   toBase64 as toBase642
-} from "./chunk-FORXEDQJ.js";
+} from "./chunk-MPXYF2CX.js";
 import {
   SIGNATURE_FLAG_TO_SCHEME,
   SIGNATURE_SCHEME_TO_FLAG,
@@ -83,7 +83,7 @@ import {
   split,
   toBase64,
   toHex
-} from "./chunk-HRGEZK3M.js";
+} from "./chunk-I2DCISQP.js";
 import {
   __commonJS,
   __require,
@@ -26692,6 +26692,38 @@ var init_errors = __esm({
     };
   }
 });
+function preflightFail(code, error) {
+  return { valid: false, code, error };
+}
+function checkPositiveAmount(amount, label = "Amount", max = PREFLIGHT_MAX_AMOUNT) {
+  if (typeof amount !== "number" || !Number.isFinite(amount)) {
+    return preflightFail("INVALID_AMOUNT", `${label} must be a finite number`);
+  }
+  if (amount <= 0) {
+    return preflightFail("INVALID_AMOUNT", `${label} must be greater than zero`);
+  }
+  if (amount > max) {
+    return preflightFail("INVALID_AMOUNT", `${label} ${amount} exceeds the sane maximum (${max})`);
+  }
+  return PREFLIGHT_OK;
+}
+function checkSuiAddress(address, label = "recipient") {
+  try {
+    if (typeof address === "string" && address.trim() !== "" && isValidSuiAddress(normalizeSuiAddress(address))) {
+      return PREFLIGHT_OK;
+    }
+  } catch {
+  }
+  return preflightFail("INVALID_ADDRESS", `Invalid ${label} address: ${address}`);
+}
+var PREFLIGHT_MAX_AMOUNT;
+var PREFLIGHT_OK;
+var init_preflight = __esm({
+  "src/preflight.ts"() {
+    PREFLIGHT_MAX_AMOUNT = 1e6;
+    PREFLIGHT_OK = { valid: true };
+  }
+});
 var token_registry_exports = {};
 __export(token_registry_exports, {
   COIN_REGISTRY: () => COIN_REGISTRY,
@@ -26965,10 +26997,28 @@ __export(cetus_swap_exports, {
   findSwapRoute: () => findSwapRoute,
   isCetusRouteFresh: () => isCetusRouteFresh,
   isPrecomputedRouteCompatibleWithProviders: () => isPrecomputedRouteCompatibleWithProviders,
+  preflightSwap: () => preflightSwap,
   resolveTokenType: () => resolveTokenType,
   serializeCetusRoute: () => serializeCetusRoute,
   verifyCetusRouteCoinMatch: () => verifyCetusRouteCoinMatch
 });
+function preflightSwap(input) {
+  if (typeof input.from !== "string" || input.from.trim() === "") {
+    return preflightFail("INVALID_ASSET", "A `from` token is required to swap");
+  }
+  if (typeof input.to !== "string" || input.to.trim() === "") {
+    return preflightFail("INVALID_ASSET", "A `to` token is required to swap");
+  }
+  const amountCheck = checkPositiveAmount(input.amount, "Amount", Number.POSITIVE_INFINITY);
+  if (!amountCheck.valid) return amountCheck;
+  const resolvedFrom = resolveTokenType(input.from);
+  const resolvedTo = resolveTokenType(input.to);
+  const sameToken = input.from.trim() === input.to.trim() || resolvedFrom !== null && resolvedFrom === resolvedTo;
+  if (sameToken) {
+    return preflightFail("INVALID_ASSET", `Cannot swap ${input.from} to itself`);
+  }
+  return PREFLIGHT_OK;
+}
 function serializeCetusRoute(route, context) {
   return {
     routerData: serializeRouterDataV3(route.routerData),
@@ -27221,6 +27271,7 @@ var clientCache;
 var init_cetus_swap = __esm({
   "src/protocols/cetus-swap.ts"() {
     init_token_registry();
+    init_preflight();
     init_token_registry();
     OVERLAY_FEE_RATE = 1e-3;
     clientCache = /* @__PURE__ */ new Map();
@@ -27567,8 +27618,33 @@ async function executeTx(client, signer, buildTx, options = {}) {
   return { digest: txn.digest, gasCostSui, effects };
 }
 init_errors();
+init_preflight();
+function preflightPay(input) {
+  if (typeof input.url !== "string" || input.url.trim() === "") {
+    return preflightFail("FACILITATOR_REJECTION", "A target URL is required to pay");
+  }
+  let parsed;
+  try {
+    parsed = new URL(input.url);
+  } catch {
+    return preflightFail("FACILITATOR_REJECTION", `Invalid URL: ${input.url}`);
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    return preflightFail(
+      "FACILITATOR_REJECTION",
+      `URL must be http(s): got ${parsed.protocol}//`
+    );
+  }
+  if (input.maxPrice !== void 0) {
+    const priceCheck = checkPositiveAmount(input.maxPrice, "maxPrice");
+    if (!priceCheck.valid) return priceCheck;
+  }
+  return PREFLIGHT_OK;
+}
 async function payWithMpp(args) {
   const { signer, client, options } = args;
+  const pf = preflightPay({ url: options.url, maxPrice: options.maxPrice });
+  if (!pf.valid) throw new T2000Error(pf.code, pf.error);
   const method = (options.method ?? "GET").toUpperCase();
   const canHaveBody = method !== "GET" && method !== "HEAD";
   const reqInit = {
@@ -27600,7 +27676,7 @@ async function pickSuiExactRequirements(response, network) {
 }
 async function payViaX402(args) {
   const { signer, client, options, reqInit, requirements } = args;
-  const { buildX402SignedPayment, X402_PAYMENT_HEADER, X402_PAYMENT_RESPONSE_HEADER } = await import("./x402-TTLPDM7N.js");
+  const { buildX402SignedPayment, X402_PAYMENT_HEADER, X402_PAYMENT_RESPONSE_HEADER } = await import("./x402-EMQGKUTK.js");
   const amountRaw = BigInt(requirements.maxAmountRequired);
   const migrationGasSui = await ensureAddressBalanceCovers({
     signer,
@@ -27660,7 +27736,7 @@ async function ensureAddressBalanceCovers(args) {
   const addressBalance = total - coinSum;
   if (addressBalance >= amountRaw) return 0;
   const shortfall = amountRaw - addressBalance;
-  const { Transaction: Transaction6 } = await import("./transactions-JPL6KL3D.js");
+  const { Transaction: Transaction6 } = await import("./transactions-FSCAFG5Z.js");
   const { selectAndSplitCoin: selectAndSplitCoin2 } = await Promise.resolve().then(() => (init_coinSelection(), coinSelection_exports));
   const grpcClient = await makeGrpcBuildClient(client);
   const migration = await executeTx(
@@ -27695,7 +27771,7 @@ async function finalize(response, opts) {
   return { status: response.status, body, paid: opts.paid };
 }
 async function makeGrpcBuildClient(client) {
-  const { SuiGrpcClient: SuiGrpcClient2 } = await import("./grpc-IINTSDGR.js");
+  const { SuiGrpcClient: SuiGrpcClient2 } = await import("./grpc-UMZJXRGY.js");
   const network = client.network === "testnet" ? "testnet" : "mainnet";
   const baseUrl = network === "testnet" ? "https://fullnode.testnet.sui.io" : "https://fullnode.mainnet.sui.io";
   return new SuiGrpcClient2({ baseUrl, network });
@@ -27723,7 +27799,7 @@ var ZkLoginSigner = class {
     return this.userAddress;
   }
   async signTransaction(txBytes) {
-    const { getZkLoginSignature } = await import("./esm-EIRCX523.js");
+    const { getZkLoginSignature } = await import("./esm-RF62MWQV.js");
     const ephSig = await this.ephemeralKeypair.signTransaction(txBytes);
     return {
       signature: getZkLoginSignature({
@@ -27734,7 +27810,7 @@ var ZkLoginSigner = class {
     };
   }
   async signPersonalMessage(messageBytes) {
-    const { getZkLoginSignature } = await import("./esm-EIRCX523.js");
+    const { getZkLoginSignature } = await import("./esm-RF62MWQV.js");
     const { signature: ephSig, bytes } = await this.ephemeralKeypair.signPersonalMessage(messageBytes);
     return {
       signature: getZkLoginSignature({
@@ -27763,6 +27839,25 @@ for (const [key, info] of Object.entries(SUPPORTED_ASSETS)) {
     ASSET_LOOKUP.set(info.displayName.toUpperCase(), key);
   }
 }
+init_preflight();
+function preflightSend(input) {
+  try {
+    assertAllowedAsset("send", input.asset);
+  } catch (e) {
+    return preflightFail("INVALID_ASSET", e.message);
+  }
+  const amountCheck = checkPositiveAmount(input.amount);
+  if (!amountCheck.valid) return amountCheck;
+  if ((input.asset === "USDC" || input.asset === "USDsui") && input.amount < GASLESS_MIN_STABLE_AMOUNT) {
+    return preflightFail(
+      "INVALID_AMOUNT",
+      `Minimum gasless transfer is ${GASLESS_MIN_STABLE_AMOUNT} ${input.asset}. Got ${input.amount}.`
+    );
+  }
+  const addressCheck = checkSuiAddress(input.to);
+  if (!addressCheck.valid) return addressCheck;
+  return PREFLIGHT_OK;
+}
 async function buildSendTx({
   client,
   address,
@@ -27770,17 +27865,11 @@ async function buildSendTx({
   amount,
   asset
 }) {
-  assertAllowedAsset("send", asset);
+  const pf = preflightSend({ to, amount, asset });
+  if (!pf.valid) throw new T2000Error(pf.code, pf.error);
   const recipient = validateAddress(to);
   const assetInfo = SUPPORTED_ASSETS[asset];
   if (!assetInfo) throw new T2000Error("ASSET_NOT_SUPPORTED", `Asset ${asset} is not supported`);
-  if (amount <= 0) throw new T2000Error("INVALID_AMOUNT", "Amount must be greater than zero");
-  if ((asset === "USDC" || asset === "USDsui") && amount < GASLESS_MIN_STABLE_AMOUNT) {
-    throw new T2000Error(
-      "INVALID_AMOUNT",
-      `Minimum gasless transfer is ${GASLESS_MIN_STABLE_AMOUNT} ${asset}. Got ${amount}.`
-    );
-  }
   const rawAmount = displayToRaw(amount, assetInfo.decimals);
   const tx = new Transaction();
   tx.setSender(address);
@@ -28463,7 +28552,9 @@ var T2000 = class _T2000 extends import_index2.default {
       amountUsd: approxUsdValue(params.from, params.amount) ?? 0,
       force: params.force
     });
-    const { findSwapRoute: findSwapRoute2, buildSwapTx: buildSwapTx2, resolveTokenType: resolveTokenType2 } = await Promise.resolve().then(() => (init_cetus_swap(), cetus_swap_exports));
+    const { findSwapRoute: findSwapRoute2, buildSwapTx: buildSwapTx2, resolveTokenType: resolveTokenType2, preflightSwap: preflightSwap2 } = await Promise.resolve().then(() => (init_cetus_swap(), cetus_swap_exports));
+    const pf = preflightSwap2({ from: params.from, to: params.to, amount: params.amount });
+    if (!pf.valid) throw new T2000Error(pf.code, pf.error);
     const fromType = resolveTokenType2(params.from);
     const toType = resolveTokenType2(params.to);
     if (!fromType) throw new T2000Error("ASSET_NOT_SUPPORTED", `Unknown token: ${params.from}. Provide the full coin type.`);
@@ -28797,6 +28888,7 @@ init_errors();
 init_swap_quote();
 init_cetus_swap();
 init_token_registry();
+init_preflight();
 
 // ../../node_modules/.pnpm/@inquirer+core@10.3.2_@types+node@20.19.37/node_modules/@inquirer/core/dist/esm/lib/key.js
 var isUpKey = (key, keybindings = []) => (
@@ -32390,7 +32482,7 @@ function registerMcpStart(parent) {
   parent.command("start", { isDefault: true }).description("Start MCP server (stdio transport \u2014 for AI client integration)").option("--key <path>", "Custom wallet path (default ~/.t2000/wallet.key)").action(async (opts) => {
     let mod2;
     try {
-      mod2 = await import("./dist-OMYCTHXH.js");
+      mod2 = await import("./dist-ULTRYNV7.js");
     } catch {
       console.error("MCP server not installed. Run:\n  npm install -g @t2000/mcp");
       process.exit(1);