@t2000/sdk 0.10.3 → 0.11.0

package/dist/index.d.cts

@@ -5,7 +5,7 @@ import { T as T2000Options, S as SendResult, B as BalanceResponse, a as Transact
 export { A as AdapterCapability, l as AdapterPositions, m as AdapterTxResult, n as AssetRates, C as CetusAdapter, o as GasReserve, p as HealthInfo, N as NaviAdapter, q as PositionEntry, r as ProtocolDescriptor, s as ProtocolRegistry, t as RebalanceStep, u as SentinelVerdict, v as SuilendAdapter, w as SwapQuote, x as allDescriptors, y as cetusDescriptor, z as getSentinelInfo, I as listSentinels, J as naviDescriptor, K as requestAttack, O as sentinelAttack, Q as sentinelDescriptor, U as settleAttack, V as submitPrompt, X as suilendDescriptor } from './index-UOQejD-B.cjs';
 import { Transaction, TransactionObjectArgument } from '@mysten/sui/transactions';
 
-type T2000ErrorCode = 'INSUFFICIENT_BALANCE' | 'INSUFFICIENT_GAS' | 'INVALID_ADDRESS' | 'INVALID_AMOUNT' | 'WALLET_NOT_FOUND' | 'WALLET_LOCKED' | 'WALLET_EXISTS' | 'SPONSOR_FAILED' | 'SPONSOR_RATE_LIMITED' | 'GAS_STATION_UNAVAILABLE' | 'GAS_FEE_EXCEEDED' | 'SIMULATION_FAILED' | 'TRANSACTION_FAILED' | 'ASSET_NOT_SUPPORTED' | 'SWAP_FAILED' | 'SLIPPAGE_EXCEEDED' | 'HEALTH_FACTOR_TOO_LOW' | 'WITHDRAW_WOULD_LIQUIDATE' | 'NO_COLLATERAL' | 'PROTOCOL_PAUSED' | 'PROTOCOL_UNAVAILABLE' | 'RPC_ERROR' | 'RPC_UNREACHABLE' | 'SPONSOR_UNAVAILABLE' | 'AUTO_TOPUP_FAILED' | 'PRICE_EXCEEDS_LIMIT' | 'UNSUPPORTED_NETWORK' | 'PAYMENT_EXPIRED' | 'DUPLICATE_PAYMENT' | 'FACILITATOR_REJECTION' | 'FACILITATOR_TIMEOUT' | 'SENTINEL_API_ERROR' | 'SENTINEL_NOT_FOUND' | 'SENTINEL_TX_FAILED' | 'SENTINEL_TEE_ERROR' | 'UNKNOWN';
+type T2000ErrorCode = 'INSUFFICIENT_BALANCE' | 'INSUFFICIENT_GAS' | 'INVALID_ADDRESS' | 'INVALID_AMOUNT' | 'WALLET_NOT_FOUND' | 'WALLET_LOCKED' | 'WALLET_EXISTS' | 'SPONSOR_FAILED' | 'SPONSOR_RATE_LIMITED' | 'GAS_STATION_UNAVAILABLE' | 'GAS_FEE_EXCEEDED' | 'SIMULATION_FAILED' | 'TRANSACTION_FAILED' | 'ASSET_NOT_SUPPORTED' | 'SWAP_FAILED' | 'SLIPPAGE_EXCEEDED' | 'HEALTH_FACTOR_TOO_LOW' | 'WITHDRAW_WOULD_LIQUIDATE' | 'NO_COLLATERAL' | 'PROTOCOL_PAUSED' | 'PROTOCOL_UNAVAILABLE' | 'RPC_ERROR' | 'RPC_UNREACHABLE' | 'SPONSOR_UNAVAILABLE' | 'AUTO_TOPUP_FAILED' | 'PRICE_EXCEEDS_LIMIT' | 'UNSUPPORTED_NETWORK' | 'PAYMENT_EXPIRED' | 'DUPLICATE_PAYMENT' | 'FACILITATOR_REJECTION' | 'FACILITATOR_TIMEOUT' | 'SENTINEL_API_ERROR' | 'SENTINEL_NOT_FOUND' | 'SENTINEL_TX_FAILED' | 'SENTINEL_TEE_ERROR' | 'SAFEGUARD_BLOCKED' | 'UNKNOWN';
 interface T2000ErrorData {
     reason?: string;
     [key: string]: unknown;
@@ -25,6 +25,37 @@ declare class T2000Error extends Error {
 declare function mapWalletError(error: unknown): T2000Error;
 declare function mapMoveAbortCode(code: number): string;
 
+interface SafeguardConfig {
+    locked: boolean;
+    maxPerTx: number;
+    maxDailySend: number;
+    dailyUsed: number;
+    dailyResetDate: string;
+}
+interface TxMetadata {
+    operation: 'send' | 'save' | 'withdraw' | 'borrow' | 'repay' | 'exchange' | 'rebalance' | 'pay' | 'sentinel';
+    amount?: number;
+}
+declare const OUTBOUND_OPS: Set<"save" | "borrow" | "withdraw" | "repay" | "sentinel" | "send" | "exchange" | "rebalance" | "pay">;
+declare const DEFAULT_SAFEGUARD_CONFIG: SafeguardConfig;
+
+declare class SafeguardEnforcer {
+    private config;
+    private readonly configPath;
+    constructor(configDir?: string);
+    load(): void;
+    assertNotLocked(): void;
+    check(metadata: TxMetadata): void;
+    recordUsage(amount: number): void;
+    lock(): void;
+    unlock(): void;
+    set(key: string, value: unknown): void;
+    getConfig(): SafeguardConfig;
+    isConfigured(): boolean;
+    private resetDailyIfNewDay;
+    private save;
+}
+
 interface T2000Events {
     balanceChange: (event: {
         asset: string;
@@ -65,6 +96,7 @@ declare class T2000 extends EventEmitter<T2000Events> {
     private readonly client;
     private readonly _address;
     private readonly registry;
+    readonly enforcer: SafeguardEnforcer;
     private constructor();
     private static createDefaultRegistry;
     static create(options?: T2000Options): Promise<T2000>;
@@ -278,6 +310,29 @@ declare function getPoolPrice(client: SuiJsonRpcClient): Promise<number>;
 
 declare function getRates(client: SuiJsonRpcClient): Promise<RatesResult>;
 
+type SafeguardRule = 'locked' | 'maxPerTx' | 'maxDailySend';
+interface SafeguardErrorDetails {
+    attempted?: number;
+    limit?: number;
+    current?: number;
+}
+declare class SafeguardError extends T2000Error {
+    readonly rule: SafeguardRule;
+    readonly details: SafeguardErrorDetails;
+    constructor(rule: SafeguardRule, details: SafeguardErrorDetails, message?: string);
+    toJSON(): {
+        error: "SAFEGUARD_BLOCKED";
+        message: string;
+        retryable: boolean;
+        data: {
+            attempted?: number;
+            limit?: number;
+            current?: number;
+            rule: SafeguardRule;
+        };
+    };
+}
+
 interface GasExecutionResult {
     digest: string;
     effects: unknown;
@@ -291,7 +346,10 @@ interface GasExecutionResult {
  * 3. Gas Station sponsored (fallback)
  * 4. Fail with INSUFFICIENT_GAS
  */
-declare function executeWithGas(client: SuiJsonRpcClient, keypair: Ed25519Keypair, buildTx: () => Transaction | Promise<Transaction>): Promise<GasExecutionResult>;
+declare function executeWithGas(client: SuiJsonRpcClient, keypair: Ed25519Keypair, buildTx: () => Transaction | Promise<Transaction>, options?: {
+    metadata?: TxMetadata;
+    enforcer?: SafeguardEnforcer;
+}): Promise<GasExecutionResult>;
 
 interface AutoTopUpResult {
     success: boolean;
@@ -317,4 +375,4 @@ interface GasStatusResponse {
 }
 declare function getGasStatus(address?: string): Promise<GasStatusResponse>;
 
-export { type AutoTopUpResult, BPS_DENOMINATOR, BalanceResponse, BorrowResult, CLOCK_ID, DEFAULT_NETWORK, DepositInfo, EarningsResult, type FeeOperation, FundStatusResult, type GasExecutionResult, GasMethod, type GasRequestType, type GasSponsorResponse, type GasStatusResponse, HealthFactorResult, LendingAdapter, LendingRates, MIST_PER_SUI, MaxBorrowResult, MaxWithdrawResult, PositionsResult, type ProtocolFeeInfo, RatesResult, RebalanceResult, RepayResult, SENTINEL, SUI_DECIMALS, SUPPORTED_ASSETS, SaveResult, SendResult, SentinelAgent, SentinelAttackResult, type SimulationResult, type SupportedAsset, SwapAdapter, SwapResult, T2000, T2000Error, type T2000ErrorCode, type T2000ErrorData, T2000Options, TransactionRecord, USDC_DECIMALS, WithdrawResult, addCollectFeeToTx, calculateFee, executeAutoTopUp, executeWithGas, exportPrivateKey, formatSui, formatUsd, generateKeypair, getAddress, getDecimals, getGasStatus, getPoolPrice, getRates, keypairFromPrivateKey, loadKey, mapMoveAbortCode, mapWalletError, mistToSui, rawToStable, rawToUsdc, saveKey, shouldAutoTopUp, simulateTransaction, solveHashcash, stableToRaw, suiToMist, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, walletExists };
+export { type AutoTopUpResult, BPS_DENOMINATOR, BalanceResponse, BorrowResult, CLOCK_ID, DEFAULT_NETWORK, DEFAULT_SAFEGUARD_CONFIG, DepositInfo, EarningsResult, type FeeOperation, FundStatusResult, type GasExecutionResult, GasMethod, type GasRequestType, type GasSponsorResponse, type GasStatusResponse, HealthFactorResult, LendingAdapter, LendingRates, MIST_PER_SUI, MaxBorrowResult, MaxWithdrawResult, OUTBOUND_OPS, PositionsResult, type ProtocolFeeInfo, RatesResult, RebalanceResult, RepayResult, SENTINEL, SUI_DECIMALS, SUPPORTED_ASSETS, type SafeguardConfig, SafeguardEnforcer, SafeguardError, type SafeguardErrorDetails, type SafeguardRule, SaveResult, SendResult, SentinelAgent, SentinelAttackResult, type SimulationResult, type SupportedAsset, SwapAdapter, SwapResult, T2000, T2000Error, type T2000ErrorCode, type T2000ErrorData, T2000Options, TransactionRecord, type TxMetadata, USDC_DECIMALS, WithdrawResult, addCollectFeeToTx, calculateFee, executeAutoTopUp, executeWithGas, exportPrivateKey, formatSui, formatUsd, generateKeypair, getAddress, getDecimals, getGasStatus, getPoolPrice, getRates, keypairFromPrivateKey, loadKey, mapMoveAbortCode, mapWalletError, mistToSui, rawToStable, rawToUsdc, saveKey, shouldAutoTopUp, simulateTransaction, solveHashcash, stableToRaw, suiToMist, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, walletExists };

package/dist/index.d.ts

@@ -5,7 +5,7 @@ import { T as T2000Options, S as SendResult, B as BalanceResponse, a as Transact
 export { A as AdapterCapability, l as AdapterPositions, m as AdapterTxResult, n as AssetRates, C as CetusAdapter, o as GasReserve, p as HealthInfo, N as NaviAdapter, q as PositionEntry, r as ProtocolDescriptor, s as ProtocolRegistry, t as RebalanceStep, u as SentinelVerdict, v as SuilendAdapter, w as SwapQuote, x as allDescriptors, y as cetusDescriptor, z as getSentinelInfo, I as listSentinels, J as naviDescriptor, K as requestAttack, O as sentinelAttack, Q as sentinelDescriptor, U as settleAttack, V as submitPrompt, X as suilendDescriptor } from './index-UOQejD-B.js';
 import { Transaction, TransactionObjectArgument } from '@mysten/sui/transactions';
 
-type T2000ErrorCode = 'INSUFFICIENT_BALANCE' | 'INSUFFICIENT_GAS' | 'INVALID_ADDRESS' | 'INVALID_AMOUNT' | 'WALLET_NOT_FOUND' | 'WALLET_LOCKED' | 'WALLET_EXISTS' | 'SPONSOR_FAILED' | 'SPONSOR_RATE_LIMITED' | 'GAS_STATION_UNAVAILABLE' | 'GAS_FEE_EXCEEDED' | 'SIMULATION_FAILED' | 'TRANSACTION_FAILED' | 'ASSET_NOT_SUPPORTED' | 'SWAP_FAILED' | 'SLIPPAGE_EXCEEDED' | 'HEALTH_FACTOR_TOO_LOW' | 'WITHDRAW_WOULD_LIQUIDATE' | 'NO_COLLATERAL' | 'PROTOCOL_PAUSED' | 'PROTOCOL_UNAVAILABLE' | 'RPC_ERROR' | 'RPC_UNREACHABLE' | 'SPONSOR_UNAVAILABLE' | 'AUTO_TOPUP_FAILED' | 'PRICE_EXCEEDS_LIMIT' | 'UNSUPPORTED_NETWORK' | 'PAYMENT_EXPIRED' | 'DUPLICATE_PAYMENT' | 'FACILITATOR_REJECTION' | 'FACILITATOR_TIMEOUT' | 'SENTINEL_API_ERROR' | 'SENTINEL_NOT_FOUND' | 'SENTINEL_TX_FAILED' | 'SENTINEL_TEE_ERROR' | 'UNKNOWN';
+type T2000ErrorCode = 'INSUFFICIENT_BALANCE' | 'INSUFFICIENT_GAS' | 'INVALID_ADDRESS' | 'INVALID_AMOUNT' | 'WALLET_NOT_FOUND' | 'WALLET_LOCKED' | 'WALLET_EXISTS' | 'SPONSOR_FAILED' | 'SPONSOR_RATE_LIMITED' | 'GAS_STATION_UNAVAILABLE' | 'GAS_FEE_EXCEEDED' | 'SIMULATION_FAILED' | 'TRANSACTION_FAILED' | 'ASSET_NOT_SUPPORTED' | 'SWAP_FAILED' | 'SLIPPAGE_EXCEEDED' | 'HEALTH_FACTOR_TOO_LOW' | 'WITHDRAW_WOULD_LIQUIDATE' | 'NO_COLLATERAL' | 'PROTOCOL_PAUSED' | 'PROTOCOL_UNAVAILABLE' | 'RPC_ERROR' | 'RPC_UNREACHABLE' | 'SPONSOR_UNAVAILABLE' | 'AUTO_TOPUP_FAILED' | 'PRICE_EXCEEDS_LIMIT' | 'UNSUPPORTED_NETWORK' | 'PAYMENT_EXPIRED' | 'DUPLICATE_PAYMENT' | 'FACILITATOR_REJECTION' | 'FACILITATOR_TIMEOUT' | 'SENTINEL_API_ERROR' | 'SENTINEL_NOT_FOUND' | 'SENTINEL_TX_FAILED' | 'SENTINEL_TEE_ERROR' | 'SAFEGUARD_BLOCKED' | 'UNKNOWN';
 interface T2000ErrorData {
     reason?: string;
     [key: string]: unknown;
@@ -25,6 +25,37 @@ declare class T2000Error extends Error {
 declare function mapWalletError(error: unknown): T2000Error;
 declare function mapMoveAbortCode(code: number): string;
 
+interface SafeguardConfig {
+    locked: boolean;
+    maxPerTx: number;
+    maxDailySend: number;
+    dailyUsed: number;
+    dailyResetDate: string;
+}
+interface TxMetadata {
+    operation: 'send' | 'save' | 'withdraw' | 'borrow' | 'repay' | 'exchange' | 'rebalance' | 'pay' | 'sentinel';
+    amount?: number;
+}
+declare const OUTBOUND_OPS: Set<"save" | "borrow" | "withdraw" | "repay" | "sentinel" | "send" | "exchange" | "rebalance" | "pay">;
+declare const DEFAULT_SAFEGUARD_CONFIG: SafeguardConfig;
+
+declare class SafeguardEnforcer {
+    private config;
+    private readonly configPath;
+    constructor(configDir?: string);
+    load(): void;
+    assertNotLocked(): void;
+    check(metadata: TxMetadata): void;
+    recordUsage(amount: number): void;
+    lock(): void;
+    unlock(): void;
+    set(key: string, value: unknown): void;
+    getConfig(): SafeguardConfig;
+    isConfigured(): boolean;
+    private resetDailyIfNewDay;
+    private save;
+}
+
 interface T2000Events {
     balanceChange: (event: {
         asset: string;
@@ -65,6 +96,7 @@ declare class T2000 extends EventEmitter<T2000Events> {
     private readonly client;
     private readonly _address;
     private readonly registry;
+    readonly enforcer: SafeguardEnforcer;
     private constructor();
     private static createDefaultRegistry;
     static create(options?: T2000Options): Promise<T2000>;
@@ -278,6 +310,29 @@ declare function getPoolPrice(client: SuiJsonRpcClient): Promise<number>;
 
 declare function getRates(client: SuiJsonRpcClient): Promise<RatesResult>;
 
+type SafeguardRule = 'locked' | 'maxPerTx' | 'maxDailySend';
+interface SafeguardErrorDetails {
+    attempted?: number;
+    limit?: number;
+    current?: number;
+}
+declare class SafeguardError extends T2000Error {
+    readonly rule: SafeguardRule;
+    readonly details: SafeguardErrorDetails;
+    constructor(rule: SafeguardRule, details: SafeguardErrorDetails, message?: string);
+    toJSON(): {
+        error: "SAFEGUARD_BLOCKED";
+        message: string;
+        retryable: boolean;
+        data: {
+            attempted?: number;
+            limit?: number;
+            current?: number;
+            rule: SafeguardRule;
+        };
+    };
+}
+
 interface GasExecutionResult {
     digest: string;
     effects: unknown;
@@ -291,7 +346,10 @@ interface GasExecutionResult {
  * 3. Gas Station sponsored (fallback)
  * 4. Fail with INSUFFICIENT_GAS
  */
-declare function executeWithGas(client: SuiJsonRpcClient, keypair: Ed25519Keypair, buildTx: () => Transaction | Promise<Transaction>): Promise<GasExecutionResult>;
+declare function executeWithGas(client: SuiJsonRpcClient, keypair: Ed25519Keypair, buildTx: () => Transaction | Promise<Transaction>, options?: {
+    metadata?: TxMetadata;
+    enforcer?: SafeguardEnforcer;
+}): Promise<GasExecutionResult>;
 
 interface AutoTopUpResult {
     success: boolean;
@@ -317,4 +375,4 @@ interface GasStatusResponse {
 }
 declare function getGasStatus(address?: string): Promise<GasStatusResponse>;
 
-export { type AutoTopUpResult, BPS_DENOMINATOR, BalanceResponse, BorrowResult, CLOCK_ID, DEFAULT_NETWORK, DepositInfo, EarningsResult, type FeeOperation, FundStatusResult, type GasExecutionResult, GasMethod, type GasRequestType, type GasSponsorResponse, type GasStatusResponse, HealthFactorResult, LendingAdapter, LendingRates, MIST_PER_SUI, MaxBorrowResult, MaxWithdrawResult, PositionsResult, type ProtocolFeeInfo, RatesResult, RebalanceResult, RepayResult, SENTINEL, SUI_DECIMALS, SUPPORTED_ASSETS, SaveResult, SendResult, SentinelAgent, SentinelAttackResult, type SimulationResult, type SupportedAsset, SwapAdapter, SwapResult, T2000, T2000Error, type T2000ErrorCode, type T2000ErrorData, T2000Options, TransactionRecord, USDC_DECIMALS, WithdrawResult, addCollectFeeToTx, calculateFee, executeAutoTopUp, executeWithGas, exportPrivateKey, formatSui, formatUsd, generateKeypair, getAddress, getDecimals, getGasStatus, getPoolPrice, getRates, keypairFromPrivateKey, loadKey, mapMoveAbortCode, mapWalletError, mistToSui, rawToStable, rawToUsdc, saveKey, shouldAutoTopUp, simulateTransaction, solveHashcash, stableToRaw, suiToMist, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, walletExists };
+export { type AutoTopUpResult, BPS_DENOMINATOR, BalanceResponse, BorrowResult, CLOCK_ID, DEFAULT_NETWORK, DEFAULT_SAFEGUARD_CONFIG, DepositInfo, EarningsResult, type FeeOperation, FundStatusResult, type GasExecutionResult, GasMethod, type GasRequestType, type GasSponsorResponse, type GasStatusResponse, HealthFactorResult, LendingAdapter, LendingRates, MIST_PER_SUI, MaxBorrowResult, MaxWithdrawResult, OUTBOUND_OPS, PositionsResult, type ProtocolFeeInfo, RatesResult, RebalanceResult, RepayResult, SENTINEL, SUI_DECIMALS, SUPPORTED_ASSETS, type SafeguardConfig, SafeguardEnforcer, SafeguardError, type SafeguardErrorDetails, type SafeguardRule, SaveResult, SendResult, SentinelAgent, SentinelAttackResult, type SimulationResult, type SupportedAsset, SwapAdapter, SwapResult, T2000, T2000Error, type T2000ErrorCode, type T2000ErrorData, T2000Options, TransactionRecord, type TxMetadata, USDC_DECIMALS, WithdrawResult, addCollectFeeToTx, calculateFee, executeAutoTopUp, executeWithGas, exportPrivateKey, formatSui, formatUsd, generateKeypair, getAddress, getDecimals, getGasStatus, getPoolPrice, getRates, keypairFromPrivateKey, loadKey, mapMoveAbortCode, mapWalletError, mistToSui, rawToStable, rawToUsdc, saveKey, shouldAutoTopUp, simulateTransaction, solveHashcash, stableToRaw, suiToMist, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, walletExists };

package/dist/index.js

@@ -6,10 +6,11 @@ import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
 import { decodeSuiPrivateKey } from '@mysten/sui/cryptography';
 import { createHash, randomBytes, createCipheriv, createDecipheriv, scryptSync } from 'crypto';
 import { access, mkdir, writeFile, readFile } from 'fs/promises';
-import { dirname, resolve } from 'path';
+import { join, dirname, resolve } from 'path';
 import { homedir } from 'os';
 import { bcs } from '@mysten/sui/bcs';
 import { AggregatorClient, Env } from '@cetusprotocol/aggregator-sdk';
+import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';
 
 // src/t2000.ts
 
@@ -2494,7 +2495,10 @@ async function trySponsored(client, keypair, tx) {
     gasCostSui: gasCost
   };
 }
-async function executeWithGas(client, keypair, buildTx) {
+async function executeWithGas(client, keypair, buildTx, options) {
+  if (options?.enforcer && options?.metadata) {
+    options.enforcer.check(options.metadata);
+  }
   const errors = [];
   try {
     const tx = await buildTx();
@@ -2531,18 +2535,177 @@ async function executeWithGas(client, keypair, buildTx) {
   );
 }
 
-// src/t2000.ts
+// src/safeguards/types.ts
+var OUTBOUND_OPS = /* @__PURE__ */ new Set([
+  "send",
+  "pay",
+  "sentinel"
+]);
+var DEFAULT_SAFEGUARD_CONFIG = {
+  locked: false,
+  maxPerTx: 0,
+  maxDailySend: 0,
+  dailyUsed: 0,
+  dailyResetDate: ""
+};
+
+// src/safeguards/errors.ts
+var SafeguardError = class extends T2000Error {
+  rule;
+  details;
+  constructor(rule, details, message) {
+    const msg = message ?? buildMessage(rule, details);
+    super("SAFEGUARD_BLOCKED", msg, { rule, ...details });
+    this.name = "SafeguardError";
+    this.rule = rule;
+    this.details = details;
+  }
+  toJSON() {
+    return {
+      error: "SAFEGUARD_BLOCKED",
+      message: this.message,
+      retryable: this.retryable,
+      data: { rule: this.rule, ...this.details }
+    };
+  }
+};
+function buildMessage(rule, details) {
+  switch (rule) {
+    case "locked":
+      return "Agent is locked. All operations are frozen.";
+    case "maxPerTx":
+      return `Amount $${(details.attempted ?? 0).toFixed(2)} exceeds per-transaction limit ($${(details.limit ?? 0).toFixed(2)})`;
+    case "maxDailySend":
+      return `Daily send limit reached ($${(details.current ?? 0).toFixed(2)}/$${(details.limit ?? 0).toFixed(2)} used today)`;
+  }
+}
+
+// src/safeguards/enforcer.ts
+var SafeguardEnforcer = class {
+  config;
+  configPath;
+  constructor(configDir) {
+    this.config = { ...DEFAULT_SAFEGUARD_CONFIG };
+    this.configPath = configDir ? join(configDir, "config.json") : null;
+  }
+  load() {
+    if (!this.configPath) return;
+    try {
+      const raw = JSON.parse(readFileSync(this.configPath, "utf-8"));
+      this.config = {
+        ...DEFAULT_SAFEGUARD_CONFIG,
+        locked: raw.locked ?? false,
+        maxPerTx: raw.maxPerTx ?? 0,
+        maxDailySend: raw.maxDailySend ?? 0,
+        dailyUsed: raw.dailyUsed ?? 0,
+        dailyResetDate: raw.dailyResetDate ?? ""
+      };
+    } catch {
+      this.config = { ...DEFAULT_SAFEGUARD_CONFIG };
+    }
+  }
+  assertNotLocked() {
+    if (this.config.locked) {
+      throw new SafeguardError("locked", {});
+    }
+  }
+  check(metadata) {
+    this.assertNotLocked();
+    if (!OUTBOUND_OPS.has(metadata.operation)) return;
+    const amount = metadata.amount ?? 0;
+    if (this.config.maxPerTx > 0 && amount > this.config.maxPerTx) {
+      throw new SafeguardError("maxPerTx", {
+        attempted: amount,
+        limit: this.config.maxPerTx
+      });
+    }
+    this.resetDailyIfNewDay();
+    if (this.config.maxDailySend > 0 && this.config.dailyUsed + amount > this.config.maxDailySend) {
+      throw new SafeguardError("maxDailySend", {
+        attempted: amount,
+        limit: this.config.maxDailySend,
+        current: this.config.dailyUsed
+      });
+    }
+  }
+  recordUsage(amount) {
+    this.resetDailyIfNewDay();
+    this.config.dailyUsed += amount;
+    this.save();
+  }
+  lock() {
+    this.config.locked = true;
+    this.save();
+  }
+  unlock() {
+    this.config.locked = false;
+    this.save();
+  }
+  set(key, value) {
+    if (key === "locked" && typeof value === "boolean") {
+      this.config.locked = value;
+    } else if (key === "maxPerTx" && typeof value === "number") {
+      this.config.maxPerTx = value;
+    } else if (key === "maxDailySend" && typeof value === "number") {
+      this.config.maxDailySend = value;
+    }
+    this.save();
+  }
+  getConfig() {
+    this.resetDailyIfNewDay();
+    return { ...this.config };
+  }
+  isConfigured() {
+    return this.config.maxPerTx > 0 || this.config.maxDailySend > 0;
+  }
+  resetDailyIfNewDay() {
+    const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+    if (this.config.dailyResetDate !== today) {
+      this.config.dailyUsed = 0;
+      this.config.dailyResetDate = today;
+      this.save();
+    }
+  }
+  save() {
+    if (!this.configPath) return;
+    try {
+      let existing = {};
+      try {
+        existing = JSON.parse(readFileSync(this.configPath, "utf-8"));
+      } catch {
+      }
+      const merged = {
+        ...existing,
+        locked: this.config.locked,
+        maxPerTx: this.config.maxPerTx,
+        maxDailySend: this.config.maxDailySend,
+        dailyUsed: this.config.dailyUsed,
+        dailyResetDate: this.config.dailyResetDate
+      };
+      const dir = this.configPath.replace(/[/\\][^/\\]+$/, "");
+      if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+      }
+      writeFileSync(this.configPath, JSON.stringify(merged, null, 2) + "\n");
+    } catch {
+    }
+  }
+};
+var DEFAULT_CONFIG_DIR = join(homedir(), ".t2000");
 var T2000 = class _T2000 extends EventEmitter {
   keypair;
   client;
   _address;
   registry;
-  constructor(keypair, client, registry) {
+  enforcer;
+  constructor(keypair, client, registry, configDir) {
     super();
     this.keypair = keypair;
     this.client = client;
     this._address = getAddress(keypair);
     this.registry = registry ?? _T2000.createDefaultRegistry(client);
+    this.enforcer = new SafeguardEnforcer(configDir);
+    this.enforcer.load();
   }
   static createDefaultRegistry(client) {
     const registry = new ProtocolRegistry();
@@ -2566,7 +2729,7 @@ var T2000 = class _T2000 extends EventEmitter {
       if (secret) {
         await saveKey(keypair2, secret, keyPath);
       }
-      return new _T2000(keypair2, client);
+      return new _T2000(keypair2, client, void 0, DEFAULT_CONFIG_DIR);
     }
     const exists = await walletExists(keyPath);
     if (!exists) {
@@ -2579,7 +2742,7 @@ var T2000 = class _T2000 extends EventEmitter {
       throw new T2000Error("WALLET_LOCKED", "PIN required to unlock wallet");
     }
     const keypair = await loadKey(secret, keyPath);
-    return new _T2000(keypair, client);
+    return new _T2000(keypair, client, void 0, DEFAULT_CONFIG_DIR);
   }
   static fromPrivateKey(privateKey, options = {}) {
     const keypair = keypairFromPrivateKey(privateKey);
@@ -2591,7 +2754,7 @@ var T2000 = class _T2000 extends EventEmitter {
     const keypair = generateKeypair();
     await saveKey(keypair, secret, options.keyPath);
     const client = getSuiClient();
-    const agent = new _T2000(keypair, client);
+    const agent = new _T2000(keypair, client, void 0, DEFAULT_CONFIG_DIR);
     const address = agent.address();
     let sponsored = false;
     if (options.sponsored !== false) {
@@ -2617,6 +2780,7 @@ var T2000 = class _T2000 extends EventEmitter {
     return this._address;
   }
   async send(params) {
+    this.enforcer.assertNotLocked();
     const asset = params.asset ?? "USDC";
     if (!(asset in SUPPORTED_ASSETS)) {
       throw new T2000Error("ASSET_NOT_SUPPORTED", `Asset ${asset} is not supported`);
@@ -2626,8 +2790,10 @@ var T2000 = class _T2000 extends EventEmitter {
     const gasResult = await executeWithGas(
       this.client,
       this.keypair,
-      () => buildSendTx({ client: this.client, address: this._address, to: sendTo, amount: sendAmount, asset })
+      () => buildSendTx({ client: this.client, address: this._address, to: sendTo, amount: sendAmount, asset }),
+      { metadata: { operation: "send", amount: sendAmount }, enforcer: this.enforcer }
     );
+    this.enforcer.recordUsage(sendAmount);
     const balance = await this.balance();
     this.emitBalanceChange(asset, sendAmount, "send", gasResult.digest);
     return {
@@ -2683,6 +2849,7 @@ var T2000 = class _T2000 extends EventEmitter {
   }
   // -- Savings --
   async save(params) {
+    this.enforcer.assertNotLocked();
     const asset = "USDC";
     const bal = await queryBalance(this.client, this._address);
     const usdcBalance = bal.stables.USDC ?? 0;
@@ -2777,6 +2944,7 @@ var T2000 = class _T2000 extends EventEmitter {
     };
   }
   async withdraw(params) {
+    this.enforcer.assertNotLocked();
     if (params.amount === "all" && !params.protocol) {
       return this.withdrawAllProtocols();
     }
@@ -3014,6 +3182,7 @@ var T2000 = class _T2000 extends EventEmitter {
   }
   // -- Borrowing --
   async borrow(params) {
+    this.enforcer.assertNotLocked();
     const asset = "USDC";
     const adapter = await this.resolveLending(params.protocol, asset, "borrow");
     const maxResult = await adapter.maxBorrow(this._address, asset);
@@ -3046,6 +3215,7 @@ var T2000 = class _T2000 extends EventEmitter {
     };
   }
   async repay(params) {
+    this.enforcer.assertNotLocked();
     const allPositions = await this.registry.allPositions(this._address);
     const borrows = [];
     for (const pos of allPositions) {
@@ -3199,6 +3369,7 @@ var T2000 = class _T2000 extends EventEmitter {
   }
   // -- Exchange --
   async exchange(params) {
+    this.enforcer.assertNotLocked();
     const fromAsset = params.from;
     const toAsset = params.to;
     if (!(fromAsset in SUPPORTED_ASSETS) || !(toAsset in SUPPORTED_ASSETS)) {
@@ -3299,6 +3470,7 @@ var T2000 = class _T2000 extends EventEmitter {
     return this.registry.allRatesAcrossAssets();
   }
   async rebalance(opts = {}) {
+    this.enforcer.assertNotLocked();
     const dryRun = opts.dryRun ?? false;
     const minYieldDiff = opts.minYieldDiff ?? 0.5;
     const maxBreakEven = opts.maxBreakEven ?? 30;
@@ -3580,6 +3752,7 @@ var T2000 = class _T2000 extends EventEmitter {
     return getSentinelInfo(this.client, id);
   }
   async sentinelAttack(id, prompt, fee) {
+    this.enforcer.check({ operation: "sentinel", amount: fee ? Number(fee) / 1e9 : 0.1 });
     return attack(this.client, this.keypair, id, prompt, fee);
   }
   // -- Helpers --
@@ -3731,6 +3904,6 @@ var allDescriptors = [
   descriptor
 ];
 
-export { BPS_DENOMINATOR, CLOCK_ID, CetusAdapter, DEFAULT_NETWORK, MIST_PER_SUI, NaviAdapter, ProtocolRegistry, SENTINEL, SUI_DECIMALS, SUPPORTED_ASSETS, SuilendAdapter, T2000, T2000Error, USDC_DECIMALS, addCollectFeeToTx, allDescriptors, calculateFee, descriptor3 as cetusDescriptor, executeAutoTopUp, executeWithGas, exportPrivateKey, formatSui, formatUsd, generateKeypair, getAddress, getDecimals, getGasStatus, getPoolPrice, getRates, getSentinelInfo, keypairFromPrivateKey, listSentinels, loadKey, mapMoveAbortCode, mapWalletError, mistToSui, descriptor2 as naviDescriptor, rawToStable, rawToUsdc, requestAttack, saveKey, attack as sentinelAttack, descriptor as sentinelDescriptor, settleAttack, shouldAutoTopUp, simulateTransaction, solveHashcash, stableToRaw, submitPrompt, suiToMist, descriptor4 as suilendDescriptor, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, walletExists };
+export { BPS_DENOMINATOR, CLOCK_ID, CetusAdapter, DEFAULT_NETWORK, DEFAULT_SAFEGUARD_CONFIG, MIST_PER_SUI, NaviAdapter, OUTBOUND_OPS, ProtocolRegistry, SENTINEL, SUI_DECIMALS, SUPPORTED_ASSETS, SafeguardEnforcer, SafeguardError, SuilendAdapter, T2000, T2000Error, USDC_DECIMALS, addCollectFeeToTx, allDescriptors, calculateFee, descriptor3 as cetusDescriptor, executeAutoTopUp, executeWithGas, exportPrivateKey, formatSui, formatUsd, generateKeypair, getAddress, getDecimals, getGasStatus, getPoolPrice, getRates, getSentinelInfo, keypairFromPrivateKey, listSentinels, loadKey, mapMoveAbortCode, mapWalletError, mistToSui, descriptor2 as naviDescriptor, rawToStable, rawToUsdc, requestAttack, saveKey, attack as sentinelAttack, descriptor as sentinelDescriptor, settleAttack, shouldAutoTopUp, simulateTransaction, solveHashcash, stableToRaw, submitPrompt, suiToMist, descriptor4 as suilendDescriptor, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, walletExists };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map