@t2000/sdk 5.1.0 → 5.3.0

package/dist/index.d.cts

@@ -1,29 +1,106 @@
 import { EventEmitter } from 'eventemitter3';
 import { SuiGrpcClient } from '@mysten/sui/grpc';
 import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
-import { W as TxMetadata, p as SafeguardConfig, T as T2000Error, az as T2000Options, U as TransactionSigner, P as PayOptions, l as PayResult, aA as SwapResult, aB as SwapQuoteResult, y as SupportedAsset, t as SendResult, B as BalanceResponse, R as TransactionRecord, f as DepositInfo, aC as PaymentRequest, a2 as ZkLoginProof, aD as SuiCoreClient, aE as SendableAsset, k as OverlayFeeConfig, aF as SponsoredCoinMergeCache, z as SwapRouteResult } from './types-C01EGu76.cjs';
-export { aG as CETUS_USDC_SUI_POOL, C as CLOCK_ID, a as COIN_REGISTRY, b as ClassifyBalanceChange, c as ClassifyResult, d as CoinMeta, aH as CoinPage, aI as DEFAULT_GRPC_URL, D as DEFAULT_NETWORK, e as DEFAULT_SAFEGUARD_CONFIG, E as ETH_TYPE, g as ExtractedTransfer, aJ as GASLESS_MIN_STABLE_AMOUNT, aK as GASLESS_STABLE_TYPES, G as GAS_RESERVE_MIN, I as IKA_TYPE, K as KNOWN_TARGETS, h as KeypairSigner, L as LABEL_PATTERNS, i as LOFI_TYPE, M as MANIFEST_TYPE, j as MIST_PER_SUI, N as NAVX_TYPE, aL as OPERATION_ASSETS, O as OVERLAY_FEE_RATE, aM as Operation, aN as SENDABLE_ASSETS, S as STABLE_ASSETS, m as SUI_DECIMALS, n as SUI_TYPE, o as SUPPORTED_ASSETS, q as SafeguardError, r as SafeguardErrorDetails, s as SafeguardRule, aO as SelectAndSplitResult, aP as SerializedCetusRoute, aQ as SerializedCetusRoutePath, aR as SerializedRouterDataV3, u as SimulationResult, v as StableAsset, w as SuiHolding, x as SuiRpcTxBlock, A as T2000ErrorCode, F as T2000ErrorData, H as T2000_OVERLAY_FEE_WALLET, J as TOKEN_MAP, Q as TransactionLeg, V as TxDirection, X as USDC_DECIMALS, Y as USDC_TYPE, Z as USDE_TYPE, _ as USDSUI_TYPE, $ as USDT_TYPE, a0 as WAL_TYPE, a1 as WBTC_TYPE, a3 as ZkLoginSigner, aS as addSwapToTx, aT as assertAllowedAsset, a4 as buildSwapTx, a5 as classifyAction, a6 as classifyLabel, a7 as classifyTransaction, aU as deserializeCetusRoute, a8 as executeTx, a9 as extractAllUserLegs, aa as extractTransferDetails, ab as extractTxCommands, ac as extractTxSender, ad as fallbackLabel, aV as fetchAllCoins, ae as findSwapRoute, af as formatAssetAmount, ag as formatSui, ah as formatUsd, aW as getCoinMeta, ai as getDecimals, aj as getDecimalsForCoinType, aX as getSuiClient, aY as getSuiGrpcClient, aZ as isAllowedAsset, a_ as isCetusRouteFresh, a$ as isInRegistry, ak as mapMoveAbortCode, al as mapWalletError, am as mistToSui, b0 as normalizeAsset, b1 as normalizeCoinType, an as parseSuiRpcTx, ao as payWithMpp, b2 as queryHistory, b3 as queryTransaction, ap as rawToStable, aq as rawToUsdc, ar as refineLendingLabel, as as resolveSymbol, at as resolveTokenType, b4 as selectAndSplitCoin, b5 as selectSuiCoin, b6 as serializeCetusRoute, b7 as simulateTransaction, au as stableToRaw, av as suiToMist, b8 as throwIfSimulationFailed, aw as truncateAddress, ax as usdcToRaw, ay as validateAddress, b9 as verifyCetusRouteCoinMatch } from './types-C01EGu76.cjs';
+import { T as T2000Error, at as T2000Options, F as TransactionSigner, P as PayOptions, k as PayResult, au as SwapResult, av as SwapQuoteResult, t as SupportedAsset, o as SendResult, B as BalanceResponse, A as TransactionRecord, e as DepositInfo, aw as PaymentRequest, Z as ZkLoginProof, ax as SuiCoreClient, ay as SendableAsset, j as OverlayFeeConfig, az as SponsoredCoinMergeCache, u as SwapRouteResult } from './simulate-BTIIpnXc.cjs';
+export { aA as CETUS_USDC_SUI_POOL, C as CLOCK_ID, a as COIN_REGISTRY, b as ClassifyBalanceChange, c as ClassifyResult, d as CoinMeta, aB as CoinPage, aC as DEFAULT_GRPC_URL, D as DEFAULT_NETWORK, E as ETH_TYPE, f as ExtractedTransfer, aD as GASLESS_MIN_STABLE_AMOUNT, aE as GASLESS_STABLE_TYPES, G as GAS_RESERVE_MIN, I as IKA_TYPE, K as KNOWN_TARGETS, g as KeypairSigner, L as LABEL_PATTERNS, h as LOFI_TYPE, M as MANIFEST_TYPE, i as MIST_PER_SUI, N as NAVX_TYPE, aF as OPERATION_ASSETS, O as OVERLAY_FEE_RATE, aG as Operation, aH as SENDABLE_ASSETS, S as STABLE_ASSETS, l as SUI_DECIMALS, m as SUI_TYPE, n as SUPPORTED_ASSETS, aI as SelectAndSplitResult, aJ as SerializedCetusRoute, aK as SerializedCetusRoutePath, aL as SerializedRouterDataV3, p as SimulationResult, q as StableAsset, r as SuiHolding, s as SuiRpcTxBlock, v as T2000ErrorCode, w as T2000ErrorData, x as T2000_OVERLAY_FEE_WALLET, y as TOKEN_MAP, z as TransactionLeg, H as TxDirection, U as USDC_DECIMALS, J as USDC_TYPE, Q as USDE_TYPE, R as USDSUI_TYPE, V as USDT_TYPE, W as WAL_TYPE, X as WBTC_TYPE, Y as ZkLoginSigner, aM as addSwapToTx, aN as assertAllowedAsset, _ as buildSwapTx, $ as classifyAction, a0 as classifyLabel, a1 as classifyTransaction, aO as deserializeCetusRoute, a2 as executeTx, a3 as extractAllUserLegs, a4 as extractTransferDetails, a5 as extractTxCommands, a6 as extractTxSender, a7 as fallbackLabel, aP as fetchAllCoins, a8 as findSwapRoute, a9 as formatAssetAmount, aa as formatSui, ab as formatUsd, aQ as getCoinMeta, ac as getDecimals, ad as getDecimalsForCoinType, aR as getSuiClient, aS as getSuiGrpcClient, aT as isAllowedAsset, aU as isCetusRouteFresh, aV as isInRegistry, ae as mapMoveAbortCode, af as mapWalletError, ag as mistToSui, aW as normalizeAsset, aX as normalizeCoinType, ah as parseSuiRpcTx, ai as payWithMpp, aY as queryHistory, aZ as queryTransaction, aj as rawToStable, ak as rawToUsdc, al as refineLendingLabel, am as resolveSymbol, an as resolveTokenType, a_ as selectAndSplitCoin, a$ as selectSuiCoin, b0 as serializeCetusRoute, b1 as simulateTransaction, ao as stableToRaw, ap as suiToMist, b2 as throwIfSimulationFailed, aq as truncateAddress, ar as usdcToRaw, as as validateAddress, b3 as verifyCetusRouteCoinMatch } from './simulate-BTIIpnXc.cjs';
 import { Transaction, TransactionObjectArgument } from '@mysten/sui/transactions';
 import { SuinsClient } from '@mysten/suins';
 import '@mysten/sui/client';
 import '@cetusprotocol/aggregator-sdk';
 import '@mysten/sui/jsonRpc';
 
-declare class SafeguardEnforcer {
-    private config;
-    private readonly configPath;
-    constructor(configDir?: string);
-    load(): void;
-    assertNotLocked(): void;
-    check(metadata: TxMetadata): void;
-    recordUsage(amount: number): void;
-    lock(): void;
-    unlock(): void;
-    set(key: string, value: unknown): void;
-    getConfig(): SafeguardConfig;
-    isConfigured(): boolean;
-    private resetDailyIfNewDay;
-    private save;
+interface LimitsConfig {
+    /** Caps any single outbound write (send | swap | pay) by USD value. */
+    perTxUsd?: number;
+    /** Caps CUMULATIVE outbound spend (all writes) per UTC day, by USD value. */
+    dailyUsd?: number;
+}
+interface DailySpend {
+    /** UTC date `YYYY-MM-DD` the running total applies to. */
+    date: string;
+    /** USD spent so far on `date`. */
+    usd: number;
+}
+interface LimitsFile {
+    limits?: LimitsConfig;
+    dailySpend?: DailySpend;
+}
+declare function readLimitsFile(configDir?: string): LimitsFile;
+/**
+ * Write the limits + dailySpend keys, PRESERVING any other keys already on
+ * disk (a config file may carry unrelated data). Mode 0600.
+ */
+declare function writeLimitsFile(file: LimitsFile, configDir?: string): string;
+declare function getLimits(configDir?: string): LimitsConfig | undefined;
+declare function hasLimits(configDir?: string): boolean;
+/** Merge-set limits (only provided fields change). Returns the written path. */
+declare function setLimits(limits: LimitsConfig, configDir?: string): string;
+/** Remove all limits (keeps the dailySpend ledger). Returns the written path. */
+declare function clearLimits(configDir?: string): string;
+/** Cumulative USD spent so far today (0 when the ledger is from a prior day). */
+declare function dailySpentToday(configDir?: string): number;
+/** Add `usd` to today's running total (resets on UTC date rollover). */
+declare function recordDailySpend(usd: number, configDir?: string): void;
+
+type LimitKind = 'perTxUsd' | 'dailyUsd';
+type LimitOperation = 'send' | 'swap' | 'pay';
+declare class LimitExceededError extends Error {
+    readonly code = "LIMIT_EXCEEDED";
+    readonly operation: LimitOperation;
+    readonly limitKind: LimitKind;
+    readonly limit: number;
+    readonly attempted: number;
+    constructor(params: {
+        operation: LimitOperation;
+        limitKind: LimitKind;
+        limit: number;
+        attempted: number;
+    });
+    toJSON(): unknown;
+}
+
+/**
+ * Best-effort USD value for an asset+amount pair, for the limit gate. Stables
+ * are 1:1; SUI (and anything else) returns `null` — "unknown, don't gate".
+ * The limits are USD-denominated; SUI-USD gating would need a price lookup and
+ * is intentionally out of scope (matches the prior CLI behavior).
+ */
+declare function approxUsdValue(asset: string, amount: number): number | null;
+/**
+ * Pure gate — no I/O. Returns silently when allowed; throws
+ * `LimitExceededError` when blocked.
+ */
+declare function assertLimitConfig(input: {
+    limits: LimitsConfig | undefined;
+    spentTodayUsd: number;
+    operation: LimitOperation;
+    amountUsd: number;
+    force?: boolean;
+}): void;
+interface LimitAssertInput {
+    operation: LimitOperation;
+    /** This write's USD value. Pass 0 / non-positive to skip (e.g. SUI sends). */
+    amountUsd: number;
+    /** When true, skip the gate. */
+    force?: boolean;
+}
+/**
+ * The spending-limit enforcer — reads/writes `~/.t2000/config.json` (or a
+ * `configDir` override for tests). Constructed once by the T2000 agent and
+ * called around every outbound write; also drives the CLI `t2 limit` commands.
+ */
+declare class LimitEnforcer {
+    private readonly configDir?;
+    constructor(configDir?: string | undefined);
+    /** Throws `LimitExceededError` when the write exceeds an opted-in cap. */
+    assert(input: LimitAssertInput): void;
+    /** Add a settled write's USD value to today's cumulative total. */
+    record(amountUsd: number): void;
+    getLimits(): LimitsConfig | undefined;
+    hasLimits(): boolean;
+    setLimits(limits: LimitsConfig): void;
+    clearLimits(): void;
+    dailySpentToday(): number;
 }
 
 interface T2000Events {
@@ -57,7 +134,9 @@ declare class T2000 extends EventEmitter<T2000Events> {
     private readonly _keypair?;
     private readonly client;
     private readonly _address;
-    readonly enforcer: SafeguardEnforcer;
+    /** Unified spending-limit gate (per-tx + cumulative daily, USD). Shared by
+     *  CLI + MCP + programmatic writes — one gate, no bypass (R-0 Finding 1). */
+    readonly limits: LimitEnforcer;
     private constructor();
     private constructor();
     static create(options?: T2000Options): Promise<T2000>;
@@ -87,6 +166,7 @@ declare class T2000 extends EventEmitter<T2000Events> {
         amount: number;
         byAmountIn?: boolean;
         slippage?: number;
+        force?: boolean;
     }): Promise<SwapResult>;
     /**
      * [SPEC_AGENTIC_STACK P1 / SDK F2 — 2026-05-25]
@@ -128,6 +208,7 @@ declare class T2000 extends EventEmitter<T2000Events> {
         to: string;
         amount: number;
         asset: SupportedAsset;
+        force?: boolean;
     }): Promise<SendResult>;
     /**
      * Resolve a recipient string into a canonical 0x address:
@@ -888,4 +969,4 @@ declare function fullHandle(label: string): string;
  */
 declare function displayHandle(label: string): string;
 
-export { AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ComposeTxOptions, type ComposeTxResult, DepositInfo, InvalidAddressError, type LabelValidationResult, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SafeguardConfig, SafeguardEnforcer, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, TxMetadata, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, addSendToTx, buildAddLeafTx, buildRevokeLeafTx, buildSendTx, composeTx, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getSponsoredSwapProviders, getSwapQuote, keypairFromPrivateKey, loadKey, looksLikeSuiNs, normalizeAddressInput, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, validateLabel, walletExists };
+export { AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ComposeTxOptions, type ComposeTxResult, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, addSendToTx, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, buildSendTx, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, loadKey, looksLikeSuiNs, normalizeAddressInput, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, walletExists, writeLimitsFile };

package/dist/index.d.ts

@@ -1,29 +1,106 @@
 import { EventEmitter } from 'eventemitter3';
 import { SuiGrpcClient } from '@mysten/sui/grpc';
 import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
-import { W as TxMetadata, p as SafeguardConfig, T as T2000Error, az as T2000Options, U as TransactionSigner, P as PayOptions, l as PayResult, aA as SwapResult, aB as SwapQuoteResult, y as SupportedAsset, t as SendResult, B as BalanceResponse, R as TransactionRecord, f as DepositInfo, aC as PaymentRequest, a2 as ZkLoginProof, aD as SuiCoreClient, aE as SendableAsset, k as OverlayFeeConfig, aF as SponsoredCoinMergeCache, z as SwapRouteResult } from './types-C01EGu76.js';
-export { aG as CETUS_USDC_SUI_POOL, C as CLOCK_ID, a as COIN_REGISTRY, b as ClassifyBalanceChange, c as ClassifyResult, d as CoinMeta, aH as CoinPage, aI as DEFAULT_GRPC_URL, D as DEFAULT_NETWORK, e as DEFAULT_SAFEGUARD_CONFIG, E as ETH_TYPE, g as ExtractedTransfer, aJ as GASLESS_MIN_STABLE_AMOUNT, aK as GASLESS_STABLE_TYPES, G as GAS_RESERVE_MIN, I as IKA_TYPE, K as KNOWN_TARGETS, h as KeypairSigner, L as LABEL_PATTERNS, i as LOFI_TYPE, M as MANIFEST_TYPE, j as MIST_PER_SUI, N as NAVX_TYPE, aL as OPERATION_ASSETS, O as OVERLAY_FEE_RATE, aM as Operation, aN as SENDABLE_ASSETS, S as STABLE_ASSETS, m as SUI_DECIMALS, n as SUI_TYPE, o as SUPPORTED_ASSETS, q as SafeguardError, r as SafeguardErrorDetails, s as SafeguardRule, aO as SelectAndSplitResult, aP as SerializedCetusRoute, aQ as SerializedCetusRoutePath, aR as SerializedRouterDataV3, u as SimulationResult, v as StableAsset, w as SuiHolding, x as SuiRpcTxBlock, A as T2000ErrorCode, F as T2000ErrorData, H as T2000_OVERLAY_FEE_WALLET, J as TOKEN_MAP, Q as TransactionLeg, V as TxDirection, X as USDC_DECIMALS, Y as USDC_TYPE, Z as USDE_TYPE, _ as USDSUI_TYPE, $ as USDT_TYPE, a0 as WAL_TYPE, a1 as WBTC_TYPE, a3 as ZkLoginSigner, aS as addSwapToTx, aT as assertAllowedAsset, a4 as buildSwapTx, a5 as classifyAction, a6 as classifyLabel, a7 as classifyTransaction, aU as deserializeCetusRoute, a8 as executeTx, a9 as extractAllUserLegs, aa as extractTransferDetails, ab as extractTxCommands, ac as extractTxSender, ad as fallbackLabel, aV as fetchAllCoins, ae as findSwapRoute, af as formatAssetAmount, ag as formatSui, ah as formatUsd, aW as getCoinMeta, ai as getDecimals, aj as getDecimalsForCoinType, aX as getSuiClient, aY as getSuiGrpcClient, aZ as isAllowedAsset, a_ as isCetusRouteFresh, a$ as isInRegistry, ak as mapMoveAbortCode, al as mapWalletError, am as mistToSui, b0 as normalizeAsset, b1 as normalizeCoinType, an as parseSuiRpcTx, ao as payWithMpp, b2 as queryHistory, b3 as queryTransaction, ap as rawToStable, aq as rawToUsdc, ar as refineLendingLabel, as as resolveSymbol, at as resolveTokenType, b4 as selectAndSplitCoin, b5 as selectSuiCoin, b6 as serializeCetusRoute, b7 as simulateTransaction, au as stableToRaw, av as suiToMist, b8 as throwIfSimulationFailed, aw as truncateAddress, ax as usdcToRaw, ay as validateAddress, b9 as verifyCetusRouteCoinMatch } from './types-C01EGu76.js';
+import { T as T2000Error, at as T2000Options, F as TransactionSigner, P as PayOptions, k as PayResult, au as SwapResult, av as SwapQuoteResult, t as SupportedAsset, o as SendResult, B as BalanceResponse, A as TransactionRecord, e as DepositInfo, aw as PaymentRequest, Z as ZkLoginProof, ax as SuiCoreClient, ay as SendableAsset, j as OverlayFeeConfig, az as SponsoredCoinMergeCache, u as SwapRouteResult } from './simulate-BTIIpnXc.js';
+export { aA as CETUS_USDC_SUI_POOL, C as CLOCK_ID, a as COIN_REGISTRY, b as ClassifyBalanceChange, c as ClassifyResult, d as CoinMeta, aB as CoinPage, aC as DEFAULT_GRPC_URL, D as DEFAULT_NETWORK, E as ETH_TYPE, f as ExtractedTransfer, aD as GASLESS_MIN_STABLE_AMOUNT, aE as GASLESS_STABLE_TYPES, G as GAS_RESERVE_MIN, I as IKA_TYPE, K as KNOWN_TARGETS, g as KeypairSigner, L as LABEL_PATTERNS, h as LOFI_TYPE, M as MANIFEST_TYPE, i as MIST_PER_SUI, N as NAVX_TYPE, aF as OPERATION_ASSETS, O as OVERLAY_FEE_RATE, aG as Operation, aH as SENDABLE_ASSETS, S as STABLE_ASSETS, l as SUI_DECIMALS, m as SUI_TYPE, n as SUPPORTED_ASSETS, aI as SelectAndSplitResult, aJ as SerializedCetusRoute, aK as SerializedCetusRoutePath, aL as SerializedRouterDataV3, p as SimulationResult, q as StableAsset, r as SuiHolding, s as SuiRpcTxBlock, v as T2000ErrorCode, w as T2000ErrorData, x as T2000_OVERLAY_FEE_WALLET, y as TOKEN_MAP, z as TransactionLeg, H as TxDirection, U as USDC_DECIMALS, J as USDC_TYPE, Q as USDE_TYPE, R as USDSUI_TYPE, V as USDT_TYPE, W as WAL_TYPE, X as WBTC_TYPE, Y as ZkLoginSigner, aM as addSwapToTx, aN as assertAllowedAsset, _ as buildSwapTx, $ as classifyAction, a0 as classifyLabel, a1 as classifyTransaction, aO as deserializeCetusRoute, a2 as executeTx, a3 as extractAllUserLegs, a4 as extractTransferDetails, a5 as extractTxCommands, a6 as extractTxSender, a7 as fallbackLabel, aP as fetchAllCoins, a8 as findSwapRoute, a9 as formatAssetAmount, aa as formatSui, ab as formatUsd, aQ as getCoinMeta, ac as getDecimals, ad as getDecimalsForCoinType, aR as getSuiClient, aS as getSuiGrpcClient, aT as isAllowedAsset, aU as isCetusRouteFresh, aV as isInRegistry, ae as mapMoveAbortCode, af as mapWalletError, ag as mistToSui, aW as normalizeAsset, aX as normalizeCoinType, ah as parseSuiRpcTx, ai as payWithMpp, aY as queryHistory, aZ as queryTransaction, aj as rawToStable, ak as rawToUsdc, al as refineLendingLabel, am as resolveSymbol, an as resolveTokenType, a_ as selectAndSplitCoin, a$ as selectSuiCoin, b0 as serializeCetusRoute, b1 as simulateTransaction, ao as stableToRaw, ap as suiToMist, b2 as throwIfSimulationFailed, aq as truncateAddress, ar as usdcToRaw, as as validateAddress, b3 as verifyCetusRouteCoinMatch } from './simulate-BTIIpnXc.js';
 import { Transaction, TransactionObjectArgument } from '@mysten/sui/transactions';
 import { SuinsClient } from '@mysten/suins';
 import '@mysten/sui/client';
 import '@cetusprotocol/aggregator-sdk';
 import '@mysten/sui/jsonRpc';
 
-declare class SafeguardEnforcer {
-    private config;
-    private readonly configPath;
-    constructor(configDir?: string);
-    load(): void;
-    assertNotLocked(): void;
-    check(metadata: TxMetadata): void;
-    recordUsage(amount: number): void;
-    lock(): void;
-    unlock(): void;
-    set(key: string, value: unknown): void;
-    getConfig(): SafeguardConfig;
-    isConfigured(): boolean;
-    private resetDailyIfNewDay;
-    private save;
+interface LimitsConfig {
+    /** Caps any single outbound write (send | swap | pay) by USD value. */
+    perTxUsd?: number;
+    /** Caps CUMULATIVE outbound spend (all writes) per UTC day, by USD value. */
+    dailyUsd?: number;
+}
+interface DailySpend {
+    /** UTC date `YYYY-MM-DD` the running total applies to. */
+    date: string;
+    /** USD spent so far on `date`. */
+    usd: number;
+}
+interface LimitsFile {
+    limits?: LimitsConfig;
+    dailySpend?: DailySpend;
+}
+declare function readLimitsFile(configDir?: string): LimitsFile;
+/**
+ * Write the limits + dailySpend keys, PRESERVING any other keys already on
+ * disk (a config file may carry unrelated data). Mode 0600.
+ */
+declare function writeLimitsFile(file: LimitsFile, configDir?: string): string;
+declare function getLimits(configDir?: string): LimitsConfig | undefined;
+declare function hasLimits(configDir?: string): boolean;
+/** Merge-set limits (only provided fields change). Returns the written path. */
+declare function setLimits(limits: LimitsConfig, configDir?: string): string;
+/** Remove all limits (keeps the dailySpend ledger). Returns the written path. */
+declare function clearLimits(configDir?: string): string;
+/** Cumulative USD spent so far today (0 when the ledger is from a prior day). */
+declare function dailySpentToday(configDir?: string): number;
+/** Add `usd` to today's running total (resets on UTC date rollover). */
+declare function recordDailySpend(usd: number, configDir?: string): void;
+
+type LimitKind = 'perTxUsd' | 'dailyUsd';
+type LimitOperation = 'send' | 'swap' | 'pay';
+declare class LimitExceededError extends Error {
+    readonly code = "LIMIT_EXCEEDED";
+    readonly operation: LimitOperation;
+    readonly limitKind: LimitKind;
+    readonly limit: number;
+    readonly attempted: number;
+    constructor(params: {
+        operation: LimitOperation;
+        limitKind: LimitKind;
+        limit: number;
+        attempted: number;
+    });
+    toJSON(): unknown;
+}
+
+/**
+ * Best-effort USD value for an asset+amount pair, for the limit gate. Stables
+ * are 1:1; SUI (and anything else) returns `null` — "unknown, don't gate".
+ * The limits are USD-denominated; SUI-USD gating would need a price lookup and
+ * is intentionally out of scope (matches the prior CLI behavior).
+ */
+declare function approxUsdValue(asset: string, amount: number): number | null;
+/**
+ * Pure gate — no I/O. Returns silently when allowed; throws
+ * `LimitExceededError` when blocked.
+ */
+declare function assertLimitConfig(input: {
+    limits: LimitsConfig | undefined;
+    spentTodayUsd: number;
+    operation: LimitOperation;
+    amountUsd: number;
+    force?: boolean;
+}): void;
+interface LimitAssertInput {
+    operation: LimitOperation;
+    /** This write's USD value. Pass 0 / non-positive to skip (e.g. SUI sends). */
+    amountUsd: number;
+    /** When true, skip the gate. */
+    force?: boolean;
+}
+/**
+ * The spending-limit enforcer — reads/writes `~/.t2000/config.json` (or a
+ * `configDir` override for tests). Constructed once by the T2000 agent and
+ * called around every outbound write; also drives the CLI `t2 limit` commands.
+ */
+declare class LimitEnforcer {
+    private readonly configDir?;
+    constructor(configDir?: string | undefined);
+    /** Throws `LimitExceededError` when the write exceeds an opted-in cap. */
+    assert(input: LimitAssertInput): void;
+    /** Add a settled write's USD value to today's cumulative total. */
+    record(amountUsd: number): void;
+    getLimits(): LimitsConfig | undefined;
+    hasLimits(): boolean;
+    setLimits(limits: LimitsConfig): void;
+    clearLimits(): void;
+    dailySpentToday(): number;
 }
 
 interface T2000Events {
@@ -57,7 +134,9 @@ declare class T2000 extends EventEmitter<T2000Events> {
     private readonly _keypair?;
     private readonly client;
     private readonly _address;
-    readonly enforcer: SafeguardEnforcer;
+    /** Unified spending-limit gate (per-tx + cumulative daily, USD). Shared by
+     *  CLI + MCP + programmatic writes — one gate, no bypass (R-0 Finding 1). */
+    readonly limits: LimitEnforcer;
     private constructor();
     private constructor();
     static create(options?: T2000Options): Promise<T2000>;
@@ -87,6 +166,7 @@ declare class T2000 extends EventEmitter<T2000Events> {
         amount: number;
         byAmountIn?: boolean;
         slippage?: number;
+        force?: boolean;
     }): Promise<SwapResult>;
     /**
      * [SPEC_AGENTIC_STACK P1 / SDK F2 — 2026-05-25]
@@ -128,6 +208,7 @@ declare class T2000 extends EventEmitter<T2000Events> {
         to: string;
         amount: number;
         asset: SupportedAsset;
+        force?: boolean;
     }): Promise<SendResult>;
     /**
      * Resolve a recipient string into a canonical 0x address:
@@ -888,4 +969,4 @@ declare function fullHandle(label: string): string;
  */
 declare function displayHandle(label: string): string;
 
-export { AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ComposeTxOptions, type ComposeTxResult, DepositInfo, InvalidAddressError, type LabelValidationResult, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SafeguardConfig, SafeguardEnforcer, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, TxMetadata, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, addSendToTx, buildAddLeafTx, buildRevokeLeafTx, buildSendTx, composeTx, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getSponsoredSwapProviders, getSwapQuote, keypairFromPrivateKey, loadKey, looksLikeSuiNs, normalizeAddressInput, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, validateLabel, walletExists };
+export { AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, type AppenderContext, BalanceResponse, type BuildAddLeafParams, type BuildRevokeLeafParams, type ComposeTxOptions, type ComposeTxResult, type DailySpend, DepositInfo, InvalidAddressError, type LabelValidationResult, type LimitAssertInput, LimitEnforcer, LimitExceededError, type LimitKind, type LimitOperation, type LimitsConfig, type LimitsFile, type NormalizedAddress, OverlayFeeConfig, PayOptions, PayResult, PaymentRequest, SPONSORED_PYTH_DEPENDENT_PROVIDERS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SendResult, type SendTransferInput, SendableAsset, type StepPreview, SuinsNotRegisteredError, SuinsRpcError, SupportedAsset, type SwapExecuteInput, SwapQuoteResult, SwapResult, SwapRouteResult, T2000, T2000Error, T2000Options, TransactionRecord, TransactionSigner, WRITE_APPENDER_REGISTRY, type WriteStep, type WriteToolName, ZkLoginProof, addSendToTx, approxUsdValue, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, buildSendTx, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, displayHandle, exportPrivateKey, fullHandle, generateKeypair, getAddress, getLimits, getSponsoredSwapProviders, getSwapQuote, hasLimits, keypairFromPrivateKey, loadKey, looksLikeSuiNs, normalizeAddressInput, readLimitsFile, recordDailySpend, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, saveBech32, saveKey, setLimits, validateLabel, walletExists, writeLimitsFile };