@t2000/engine 0.46.11 → 0.46.12

package/dist/index.d.ts

@@ -228,6 +228,14 @@ interface GuardConfig {
      * upstream guard (e.g. an off-process verifier).
      */
     addressSource?: boolean;
+    /**
+     * Companion to `addressSource`: blocks send_transfer that defaults to
+     * USDC when the user's recent messages clearly named a non-USDC token
+     * (SUI, USDT, WAL, etc.). Without this, the LLM would call
+     * `send_transfer({ amount, to })` for a "send my SUI" request and the
+     * tool would silently ship USDC. Default on.
+     */
+    assetIntent?: boolean;
 }
 declare const DEFAULT_GUARD_CONFIG: GuardConfig;
 declare class BalanceTracker {
@@ -1862,11 +1870,13 @@ declare const withdrawTool: Tool<{
 declare const sendTransferTool: Tool<{
     to: string;
     amount: number;
+    asset?: string | undefined;
     memo?: string | undefined;
 }, {
     success: boolean;
     tx: string;
     amount: number;
+    asset: "USDC" | "USDT" | "SUI" | "USDe" | "USDsui" | "WAL" | "ETH" | "NAVX" | "GOLD";
     to: string;
     contactName: string | undefined;
     gasCost: number;

package/dist/index.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { resolveSymbol, getDecimalsForCoinType, assertAllowedAsset, getSwapQuote, extractTransferDetails, classifyTransaction } from '@t2000/sdk';
+import { ALL_NAVI_ASSETS, resolveSymbol, getDecimalsForCoinType, assertAllowedAsset, SUPPORTED_ASSETS, getSwapQuote, extractTransferDetails, classifyTransaction } from '@t2000/sdk';
 import { readdirSync, readFileSync } from 'fs';
 import { join } from 'path';
 import yaml from 'js-yaml';
@@ -1447,12 +1447,14 @@ var withdrawTool = buildTool({
     };
   }
 });
+var ASSET_LIST = ALL_NAVI_ASSETS.map((a) => String(a)).join(", ");
 var sendTransferTool = buildTool({
   name: "send_transfer",
-  description: "Send USDC to another Sui address or contact name. Validates the address, checks balance, and executes the on-chain transfer. Returns tx hash, gas cost, and updated balance.",
+  description: `Send ANY supported token (${ASSET_LIST}) to another Sui address or contact name. Validates the address, checks balance, and executes the on-chain transfer. MUST set the \`asset\` field to the token symbol you want to send (case-insensitive). If \`asset\` is omitted, USDC is assumed \u2014 only do this when the user explicitly asks for USDC. When the user asks to send a token by name (SUI, USDT, etc.) or to send the proceeds of a just-completed swap, you MUST pass \`asset\` matching that token. Returns tx hash, gas cost, and updated balance.`,
   inputSchema: z.object({
     to: z.string().min(1),
     amount: z.number().positive(),
+    asset: z.string().optional(),
     memo: z.string().optional()
   }),
   jsonSchema: {
@@ -1464,7 +1466,11 @@ var sendTransferTool = buildTool({
       },
       amount: {
         type: "number",
-        description: "Amount in USD to send"
+        description: "Amount of the asset to send (denominated in the asset\u2019s own units, NOT USD). For USDC this is the USDC count; for SUI this is the SUI count."
+      },
+      asset: {
+        type: "string",
+        description: `Token symbol to send. One of: ${ASSET_LIST}. Defaults to USDC if omitted. REQUIRED whenever the user names a non-USDC token or you are forwarding the proceeds of a swap.`
       },
       memo: {
         type: "string",
@@ -1487,16 +1493,27 @@ var sendTransferTool = buildTool({
     if (input.amount <= 0) {
       return { valid: false, error: "Amount must be positive." };
     }
+    if (input.asset !== void 0) {
+      const normalized = String(input.asset).toUpperCase();
+      if (!(normalized in SUPPORTED_ASSETS)) {
+        return {
+          valid: false,
+          error: `Unsupported asset "${input.asset}". send_transfer accepts: ${ASSET_LIST}.`
+        };
+      }
+    }
     return { valid: true };
   },
   async call(input, context) {
     const agent = requireAgent(context);
-    const result = await agent.send({ to: input.to, amount: input.amount });
+    const asset = input.asset ? String(input.asset).toUpperCase() : "USDC";
+    const result = await agent.send({ to: input.to, amount: input.amount, asset });
     return {
       data: {
         success: result.success,
         tx: result.tx,
         amount: result.amount,
+        asset,
         to: result.to,
         contactName: result.contactName,
         gasCost: result.gasCost,
@@ -1504,7 +1521,7 @@ var sendTransferTool = buildTool({
         balance: result.balance,
         memo: input.memo ?? null
       },
-      displayText: `Sent $${result.amount.toFixed(2)} to ${result.contactName ?? result.to.slice(0, 10)}\u2026 (tx: ${result.tx.slice(0, 8)}\u2026)`
+      displayText: `Sent ${result.amount} ${asset} to ${result.contactName ?? `${result.to.slice(0, 10)}\u2026`} (tx: ${result.tx.slice(0, 8)}\u2026)`
     };
   }
 });
@@ -3610,7 +3627,8 @@ var DEFAULT_GUARD_CONFIG = {
   costWarning: true,
   retryProtection: true,
   inputValidation: true,
-  addressSource: true
+  addressSource: true,
+  assetIntent: true
 };
 var BalanceTracker = class {
   lastBalanceAt = 0;
@@ -3793,6 +3811,37 @@ var SUI_ADDRESS_REGEX = /^0x[a-fA-F0-9]{64}$/;
 function normalizeAddress(addr) {
   return addr.trim().toLowerCase();
 }
+var NON_USDC_TOKEN_WORDS = [
+  // Patterns are anchored with \b on both sides. Case-insensitive.
+  { symbol: "SUI", pattern: /\bSUI\b/i },
+  { symbol: "USDT", pattern: /\bUSDT\b/i },
+  { symbol: "USDe", pattern: /\bUSDe\b/i },
+  { symbol: "USDsui", pattern: /\bUSDsui\b/i },
+  { symbol: "WAL", pattern: /\bWAL\b/i },
+  { symbol: "ETH", pattern: /\bETH\b/i },
+  { symbol: "NAVX", pattern: /\bNAVX\b/i },
+  { symbol: "GOLD", pattern: /\bGOLD\b/i }
+];
+function guardAssetIntent(tool, call, userText) {
+  if (tool.name !== "send_transfer") {
+    return { verdict: "pass", gate: "asset_intent", tier: "safety" };
+  }
+  const input = call.input;
+  const assetWasSet = !(input.asset === void 0 || input.asset === null || input.asset === "");
+  if (assetWasSet) {
+    return { verdict: "pass", gate: "asset_intent", tier: "safety" };
+  }
+  const mentioned = NON_USDC_TOKEN_WORDS.find((t) => t.pattern.test(userText));
+  if (!mentioned) {
+    return { verdict: "pass", gate: "asset_intent", tier: "safety" };
+  }
+  return {
+    verdict: "block",
+    gate: "asset_intent",
+    tier: "safety",
+    message: `Asset mismatch: the user's recent messages mention "${mentioned.symbol}" but send_transfer was called without an \`asset\` field (defaults to USDC). If the user asked you to send ${mentioned.symbol}, re-issue send_transfer with \`asset: "${mentioned.symbol}"\`. If the user really meant USDC, set \`asset: "USDC"\` explicitly to confirm intent. Never default to USDC when the user named a different token.`
+  };
+}
 function guardAddressSource(tool, call, userText, contacts, walletAddress) {
   if (tool.name !== "send_transfer") {
     return { verdict: "pass", gate: "address_source", tier: "safety" };
@@ -3903,6 +3952,9 @@ function runGuards(tool, call, state, config, conversationContext, onGuardFired,
       )
     );
   }
+  if (config.assetIntent !== false) {
+    results.push(guardAssetIntent(tool, call, conversationContext.recentUserText));
+  }
   if (config.irreversibility !== false) {
     results.push(guardIrreversibility(tool, call, conversationContext.fullText));
   }