@t2000/sdk 5.1.0 → 5.3.0

package/dist/index.js

@@ -1759,170 +1759,198 @@ async function normalizeAddressInput(value, ctx = {}) {
 
 // src/t2000.ts
 init_errors();
+var DEFAULT_CONFIG_DIR = join(homedir(), ".t2000");
+function resolveConfigPath(configDir) {
+  return join(configDir ?? DEFAULT_CONFIG_DIR, "config.json");
+}
+function todayUtc() {
+  return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+}
+function readLimitsFile(configDir) {
+  const path = resolveConfigPath(configDir);
+  try {
+    return sanitize(JSON.parse(readFileSync(path, "utf-8")));
+  } catch {
+    return {};
+  }
+}
+function writeLimitsFile(file, configDir) {
+  const path = resolveConfigPath(configDir);
+  let existing = {};
+  try {
+    existing = JSON.parse(readFileSync(path, "utf-8"));
+  } catch {
+    existing = {};
+  }
+  for (const dead of ["maxPerTx", "maxDailySend", "dailyUsed", "dailyResetDate", "locked"]) {
+    delete existing[dead];
+  }
+  const merged = { ...existing };
+  if (file.limits && (file.limits.perTxUsd !== void 0 || file.limits.dailyUsd !== void 0)) {
+    merged.limits = file.limits;
+  } else {
+    delete merged.limits;
+  }
+  if (file.dailySpend) merged.dailySpend = file.dailySpend;
+  else delete merged.dailySpend;
+  const dir = dirname(path);
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  writeFileSync(path, JSON.stringify(merged, null, 2) + "\n", { mode: 384 });
+  return path;
+}
+function getLimits(configDir) {
+  return readLimitsFile(configDir).limits;
+}
+function hasLimits(configDir) {
+  const l = readLimitsFile(configDir).limits;
+  return !!l && (l.perTxUsd !== void 0 || l.dailyUsd !== void 0);
+}
+function setLimits(limits, configDir) {
+  const file = readLimitsFile(configDir);
+  const merged = { ...file.limits };
+  if (limits.perTxUsd !== void 0) merged.perTxUsd = limits.perTxUsd;
+  if (limits.dailyUsd !== void 0) merged.dailyUsd = limits.dailyUsd;
+  return writeLimitsFile({ ...file, limits: merged }, configDir);
+}
+function clearLimits(configDir) {
+  const file = readLimitsFile(configDir);
+  return writeLimitsFile({ ...file, limits: void 0 }, configDir);
+}
+function dailySpentToday(configDir) {
+  const { dailySpend } = readLimitsFile(configDir);
+  if (!dailySpend || dailySpend.date !== todayUtc()) return 0;
+  return dailySpend.usd;
+}
+function recordDailySpend(usd, configDir) {
+  if (!Number.isFinite(usd) || usd <= 0) return;
+  const file = readLimitsFile(configDir);
+  const today = todayUtc();
+  const prior = file.dailySpend && file.dailySpend.date === today ? file.dailySpend.usd : 0;
+  writeLimitsFile({ ...file, dailySpend: { date: today, usd: prior + usd } }, configDir);
+}
+function sanitize(raw) {
+  if (typeof raw !== "object" || raw === null) return {};
+  const r = raw;
+  const out = {};
+  if (typeof r.limits === "object" && r.limits !== null) {
+    const l = r.limits;
+    const limits = {};
+    if (typeof l.perTxUsd === "number" && l.perTxUsd > 0) limits.perTxUsd = l.perTxUsd;
+    if (typeof l.dailyUsd === "number" && l.dailyUsd > 0) limits.dailyUsd = l.dailyUsd;
+    else if (typeof l.dailySendUsd === "number" && l.dailySendUsd > 0) limits.dailyUsd = l.dailySendUsd;
+    if (limits.perTxUsd !== void 0 || limits.dailyUsd !== void 0) out.limits = limits;
+  }
+  if (typeof r.dailySpend === "object" && r.dailySpend !== null) {
+    const d = r.dailySpend;
+    if (typeof d.date === "string" && typeof d.usd === "number" && d.usd >= 0) {
+      out.dailySpend = { date: d.date, usd: d.usd };
+    }
+  }
+  return out;
+}
 
-// src/safeguards/types.ts
-var DEFAULT_SAFEGUARD_CONFIG = {
-  locked: false,
-  maxPerTx: 0,
-  maxDailySend: 0,
-  dailyUsed: 0,
-  dailyResetDate: ""
-};
-
-// src/safeguards/errors.ts
-init_errors();
-var SafeguardError = class extends T2000Error {
-  rule;
-  details;
-  constructor(rule, details, message) {
-    const msg = message ?? buildMessage(rule, details);
-    super("SAFEGUARD_BLOCKED", msg, { rule, ...details });
-    this.name = "SafeguardError";
-    this.rule = rule;
-    this.details = details;
+// src/limits/errors.ts
+var LimitExceededError = class extends Error {
+  code = "LIMIT_EXCEEDED";
+  operation;
+  limitKind;
+  limit;
+  attempted;
+  constructor(params) {
+    const label = params.limitKind === "perTxUsd" ? "per-transaction limit" : "daily spend limit";
+    super(
+      `Exceeds ${label} ($${params.limit}). Attempted $${params.attempted.toFixed(2)}. Use --force / force:true to override.`
+    );
+    this.name = "LimitExceededError";
+    this.operation = params.operation;
+    this.limitKind = params.limitKind;
+    this.limit = params.limit;
+    this.attempted = params.attempted;
   }
   toJSON() {
     return {
-      error: "SAFEGUARD_BLOCKED",
+      error: this.code,
       message: this.message,
-      retryable: this.retryable,
-      data: { rule: this.rule, ...this.details }
+      operation: this.operation,
+      limitKind: this.limitKind,
+      limit: this.limit,
+      attempted: this.attempted
     };
   }
 };
-function buildMessage(rule, details) {
-  switch (rule) {
-    case "locked":
-      return "Agent is locked. All operations are frozen.";
-    case "maxPerTx":
-      return `Amount $${(details.attempted ?? 0).toFixed(2)} exceeds per-transaction limit ($${(details.limit ?? 0).toFixed(2)})`;
-    case "maxDailySend":
-      return `Daily send limit reached ($${(details.current ?? 0).toFixed(2)}/$${(details.limit ?? 0).toFixed(2)} used today)`;
+
+// src/limits/enforce.ts
+function approxUsdValue(asset, amount) {
+  const symbol = asset.toUpperCase();
+  if (symbol === "USDC" || symbol === "USDSUI") return amount;
+  return null;
+}
+function assertLimitConfig(input) {
+  if (input.force) return;
+  if (!Number.isFinite(input.amountUsd) || input.amountUsd <= 0) return;
+  const { limits } = input;
+  if (!limits) return;
+  if (limits.perTxUsd !== void 0 && input.amountUsd > limits.perTxUsd) {
+    throw new LimitExceededError({
+      operation: input.operation,
+      limitKind: "perTxUsd",
+      limit: limits.perTxUsd,
+      attempted: input.amountUsd
+    });
+  }
+  if (limits.dailyUsd !== void 0 && input.spentTodayUsd + input.amountUsd > limits.dailyUsd) {
+    throw new LimitExceededError({
+      operation: input.operation,
+      limitKind: "dailyUsd",
+      // The cap is total/day; report the cap (attempted is THIS write's USD).
+      limit: limits.dailyUsd,
+      attempted: input.spentTodayUsd + input.amountUsd
+    });
   }
 }
-
-// src/safeguards/enforcer.ts
-var SafeguardEnforcer = class {
-  config;
-  configPath;
+var LimitEnforcer = class {
   constructor(configDir) {
-    this.config = { ...DEFAULT_SAFEGUARD_CONFIG };
-    this.configPath = configDir ? join(configDir, "config.json") : null;
+    this.configDir = configDir;
+  }
+  /** Throws `LimitExceededError` when the write exceeds an opted-in cap. */
+  assert(input) {
+    assertLimitConfig({
+      limits: getLimits(this.configDir),
+      spentTodayUsd: dailySpentToday(this.configDir),
+      operation: input.operation,
+      amountUsd: input.amountUsd,
+      force: input.force
+    });
   }
-  load() {
-    if (!this.configPath) return;
-    try {
-      const raw = JSON.parse(readFileSync(this.configPath, "utf-8"));
-      this.config = {
-        ...DEFAULT_SAFEGUARD_CONFIG,
-        locked: raw.locked ?? false,
-        maxPerTx: raw.maxPerTx ?? 0,
-        maxDailySend: raw.maxDailySend ?? 0,
-        dailyUsed: raw.dailyUsed ?? 0,
-        dailyResetDate: raw.dailyResetDate ?? ""
-      };
-    } catch {
-      this.config = { ...DEFAULT_SAFEGUARD_CONFIG };
-    }
+  /** Add a settled write's USD value to today's cumulative total. */
+  record(amountUsd) {
+    recordDailySpend(amountUsd, this.configDir);
   }
-  assertNotLocked() {
-    this.load();
-    if (this.config.locked) {
-      throw new SafeguardError("locked", {});
-    }
+  getLimits() {
+    return getLimits(this.configDir);
   }
-  check(metadata) {
-    this.load();
-    if (this.config.locked) {
-      throw new SafeguardError("locked", {});
-    }
-    const amount = metadata.amount ?? 0;
-    if (this.config.maxPerTx > 0 && amount > this.config.maxPerTx) {
-      throw new SafeguardError("maxPerTx", {
-        attempted: amount,
-        limit: this.config.maxPerTx
-      });
-    }
-    this.resetDailyIfNewDay();
-    if (this.config.maxDailySend > 0 && this.config.dailyUsed + amount > this.config.maxDailySend) {
-      throw new SafeguardError("maxDailySend", {
-        attempted: amount,
-        limit: this.config.maxDailySend,
-        current: this.config.dailyUsed
-      });
-    }
+  hasLimits() {
+    return hasLimits(this.configDir);
   }
-  recordUsage(amount) {
-    this.resetDailyIfNewDay();
-    this.config.dailyUsed += amount;
-    this.save();
-  }
-  lock() {
-    this.config.locked = true;
-    this.save();
-  }
-  unlock() {
-    this.config.locked = false;
-    this.save();
-  }
-  set(key, value) {
-    if (key === "locked" && typeof value === "boolean") {
-      this.config.locked = value;
-    } else if (key === "maxPerTx" && typeof value === "number") {
-      this.config.maxPerTx = value;
-    } else if (key === "maxDailySend" && typeof value === "number") {
-      this.config.maxDailySend = value;
-    }
-    this.save();
-  }
-  getConfig() {
-    this.load();
-    this.resetDailyIfNewDay();
-    return { ...this.config };
-  }
-  isConfigured() {
-    return this.config.maxPerTx > 0 || this.config.maxDailySend > 0;
-  }
-  resetDailyIfNewDay() {
-    const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-    if (this.config.dailyResetDate !== today) {
-      this.config.dailyUsed = 0;
-      this.config.dailyResetDate = today;
-      this.save();
-    }
+  setLimits(limits) {
+    setLimits(limits, this.configDir);
   }
-  save() {
-    if (!this.configPath) return;
-    try {
-      let existing = {};
-      try {
-        existing = JSON.parse(readFileSync(this.configPath, "utf-8"));
-      } catch {
-      }
-      const merged = {
-        ...existing,
-        locked: this.config.locked,
-        maxPerTx: this.config.maxPerTx,
-        maxDailySend: this.config.maxDailySend,
-        dailyUsed: this.config.dailyUsed,
-        dailyResetDate: this.config.dailyResetDate
-      };
-      const dir = this.configPath.replace(/[/\\][^/\\]+$/, "");
-      if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-      }
-      writeFileSync(this.configPath, JSON.stringify(merged, null, 2) + "\n");
-    } catch {
-    }
+  clearLimits() {
+    clearLimits(this.configDir);
+  }
+  dailySpentToday() {
+    return dailySpentToday(this.configDir);
   }
 };
-var DEFAULT_CONFIG_DIR = join(homedir(), ".t2000");
+var DEFAULT_CONFIG_DIR2 = join(homedir(), ".t2000");
 var T2000 = class _T2000 extends EventEmitter {
   _signer;
   _keypair;
   client;
   _address;
-  enforcer;
+  /** Unified spending-limit gate (per-tx + cumulative daily, USD). Shared by
+   *  CLI + MCP + programmatic writes — one gate, no bypass (R-0 Finding 1). */
+  limits;
   constructor(keypairOrSigner, client, configDir, isSignerMode) {
     super();
     if (isSignerMode) {
@@ -1936,8 +1964,7 @@ var T2000 = class _T2000 extends EventEmitter {
       this._address = getAddress(kp);
     }
     this.client = client;
-    this.enforcer = new SafeguardEnforcer(configDir);
-    this.enforcer.load();
+    this.limits = new LimitEnforcer(configDir);
   }
   static async create(options = {}) {
     const { keyPath, rpcUrl } = options;
@@ -1950,7 +1977,7 @@ var T2000 = class _T2000 extends EventEmitter {
       );
     }
     const keypair = await loadKey(void 0, keyPath);
-    return new _T2000(keypair, client, DEFAULT_CONFIG_DIR);
+    return new _T2000(keypair, client, DEFAULT_CONFIG_DIR2);
   }
   static fromPrivateKey(privateKey, options = {}) {
     const keypair = keypairFromPrivateKey(privateKey);
@@ -1961,7 +1988,7 @@ var T2000 = class _T2000 extends EventEmitter {
     const keypair = generateKeypair();
     await saveKey(keypair, void 0, options.keyPath);
     const client = getSuiClient();
-    const agent = new _T2000(keypair, client, DEFAULT_CONFIG_DIR);
+    const agent = new _T2000(keypair, client, DEFAULT_CONFIG_DIR2);
     const address = agent.address();
     return { agent, address };
   }
@@ -1983,11 +2010,10 @@ var T2000 = class _T2000 extends EventEmitter {
   }
   // -- MPP Payments --
   async pay(options) {
-    this.enforcer.assertNotLocked();
-    this.enforcer.check({ operation: "pay", amount: options.maxPrice ?? 1 });
+    this.limits.assert({ operation: "pay", amountUsd: options.maxPrice ?? 0, force: options.force });
     const result = await payWithMpp({ signer: this._signer, client: this.client, options });
     if (result.paid) {
-      this.enforcer.recordUsage(result.cost ?? options.maxPrice ?? 1);
+      this.limits.record(result.cost ?? options.maxPrice ?? 0);
     }
     return result;
   }
@@ -2001,7 +2027,11 @@ var T2000 = class _T2000 extends EventEmitter {
   // and the S.323 build-tracker entry.
   // -- Swap --
   async swap(params) {
-    this.enforcer.assertNotLocked();
+    this.limits.assert({
+      operation: "swap",
+      amountUsd: approxUsdValue(params.from, params.amount) ?? 0,
+      force: params.force
+    });
     const { findSwapRoute: findSwapRoute2, buildSwapTx: buildSwapTx2, resolveTokenType: resolveTokenType2 } = await Promise.resolve().then(() => (init_cetus_swap(), cetus_swap_exports));
     const fromType = resolveTokenType2(params.from);
     const toType = resolveTokenType2(params.to);
@@ -2093,6 +2123,7 @@ var T2000 = class _T2000 extends EventEmitter {
     const fromName = resolveSymbol(fromType);
     const toName = resolveSymbol(toType);
     const routeDesc = route.routerData.paths?.map((p) => p.provider).filter(Boolean).slice(0, 3).join(" + ") ?? "Cetus Aggregator";
+    this.limits.record(approxUsdValue(params.from, params.amount) ?? 0);
     return {
       success: true,
       tx: gasResult.digest,
@@ -2149,7 +2180,6 @@ var T2000 = class _T2000 extends EventEmitter {
    * the "build via gRPC, execute via JSON-RPC" hybrid).
    */
   async send(params) {
-    this.enforcer.assertNotLocked();
     const asset = params.asset;
     if (!asset) {
       throw new T2000Error(
@@ -2159,6 +2189,11 @@ var T2000 = class _T2000 extends EventEmitter {
     }
     assertAllowedAsset("send", asset);
     const sendableAsset = asset;
+    this.limits.assert({
+      operation: "send",
+      amountUsd: approxUsdValue(sendableAsset, params.amount) ?? 0,
+      force: params.force
+    });
     const resolved = await this.resolveRecipient(params.to);
     const sendAmount = params.amount;
     const sendTo = resolved.address;
@@ -2170,7 +2205,7 @@ var T2000 = class _T2000 extends EventEmitter {
       () => buildSendTx({ client: this.client, address: this._address, to: sendTo, amount: sendAmount, asset: sendableAsset }),
       { buildClient }
     );
-    this.enforcer.recordUsage(sendAmount);
+    this.limits.record(approxUsdValue(sendableAsset, sendAmount) ?? 0);
     const balance = await this.balance();
     this.emitBalanceChange(sendableAsset, sendAmount, "send", gasResult.digest);
     return {
@@ -2722,6 +2757,6 @@ function displayHandle(label) {
   return `${label}@${parentDisplay}`;
 }
 
-export { AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, CETUS_USDC_SUI_POOL, CLOCK_ID, COIN_REGISTRY, DEFAULT_GRPC_URL, DEFAULT_NETWORK, DEFAULT_SAFEGUARD_CONFIG, ETH_TYPE, GASLESS_MIN_STABLE_AMOUNT, GASLESS_STABLE_TYPES, GAS_RESERVE_MIN, IKA_TYPE, InvalidAddressError, KNOWN_TARGETS, KeypairSigner, LABEL_PATTERNS, LOFI_TYPE, MANIFEST_TYPE, MIST_PER_SUI, NAVX_TYPE, OPERATION_ASSETS, OVERLAY_FEE_RATE, SENDABLE_ASSETS, SPONSORED_PYTH_DEPENDENT_PROVIDERS, STABLE_ASSETS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SUI_DECIMALS, SUI_TYPE, SUPPORTED_ASSETS, SafeguardEnforcer, SafeguardError, SuinsNotRegisteredError, SuinsRpcError, T2000, T2000Error, T2000_OVERLAY_FEE_WALLET, TOKEN_MAP, USDC_DECIMALS, USDC_TYPE, USDE_TYPE, USDSUI_TYPE, USDT_TYPE, WAL_TYPE, WBTC_TYPE, WRITE_APPENDER_REGISTRY, ZkLoginSigner, addSendToTx, addSwapToTx, assertAllowedAsset, buildAddLeafTx, buildRevokeLeafTx, buildSendTx, buildSwapTx, classifyAction, classifyLabel, classifyTransaction, composeTx, deriveAllowedAddressesFromPtb, deserializeCetusRoute, displayHandle, executeTx, exportPrivateKey, extractAllUserLegs, extractTransferDetails, extractTxCommands, extractTxSender, fallbackLabel, fetchAllCoins, findSwapRoute, formatAssetAmount, formatSui, formatUsd, fullHandle, generateKeypair, getAddress, getCoinMeta, getDecimals, getDecimalsForCoinType, getSponsoredSwapProviders, getSuiClient, getSuiGrpcClient, getSwapQuote, isAllowedAsset, isCetusRouteFresh, isInRegistry, keypairFromPrivateKey, loadKey, looksLikeSuiNs, mapMoveAbortCode, mapWalletError, mistToSui, normalizeAddressInput, normalizeAsset, normalizeCoinType, parseSuiRpcTx, payWithMpp, queryHistory, queryTransaction, rawToStable, rawToUsdc, refineLendingLabel, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, resolveSymbol, resolveTokenType, saveBech32, saveKey, selectAndSplitCoin, selectSuiCoin, serializeCetusRoute, simulateTransaction, stableToRaw, suiToMist, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, validateLabel, verifyCetusRouteCoinMatch, walletExists };
+export { AUDRIC_PARENT_NAME, AUDRIC_PARENT_NFT_ID, CETUS_USDC_SUI_POOL, CLOCK_ID, COIN_REGISTRY, DEFAULT_GRPC_URL, DEFAULT_NETWORK, ETH_TYPE, GASLESS_MIN_STABLE_AMOUNT, GASLESS_STABLE_TYPES, GAS_RESERVE_MIN, IKA_TYPE, InvalidAddressError, KNOWN_TARGETS, KeypairSigner, LABEL_PATTERNS, LOFI_TYPE, LimitEnforcer, LimitExceededError, MANIFEST_TYPE, MIST_PER_SUI, NAVX_TYPE, OPERATION_ASSETS, OVERLAY_FEE_RATE, SENDABLE_ASSETS, SPONSORED_PYTH_DEPENDENT_PROVIDERS, STABLE_ASSETS, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SUI_DECIMALS, SUI_TYPE, SUPPORTED_ASSETS, SuinsNotRegisteredError, SuinsRpcError, T2000, T2000Error, T2000_OVERLAY_FEE_WALLET, TOKEN_MAP, USDC_DECIMALS, USDC_TYPE, USDE_TYPE, USDSUI_TYPE, USDT_TYPE, WAL_TYPE, WBTC_TYPE, WRITE_APPENDER_REGISTRY, ZkLoginSigner, addSendToTx, addSwapToTx, approxUsdValue, assertAllowedAsset, assertLimitConfig, buildAddLeafTx, buildRevokeLeafTx, buildSendTx, buildSwapTx, classifyAction, classifyLabel, classifyTransaction, clearLimits, composeTx, dailySpentToday, deriveAllowedAddressesFromPtb, deserializeCetusRoute, displayHandle, executeTx, exportPrivateKey, extractAllUserLegs, extractTransferDetails, extractTxCommands, extractTxSender, fallbackLabel, fetchAllCoins, findSwapRoute, formatAssetAmount, formatSui, formatUsd, fullHandle, generateKeypair, getAddress, getCoinMeta, getDecimals, getDecimalsForCoinType, getLimits, getSponsoredSwapProviders, getSuiClient, getSuiGrpcClient, getSwapQuote, hasLimits, isAllowedAsset, isCetusRouteFresh, isInRegistry, keypairFromPrivateKey, loadKey, looksLikeSuiNs, mapMoveAbortCode, mapWalletError, mistToSui, normalizeAddressInput, normalizeAsset, normalizeCoinType, parseSuiRpcTx, payWithMpp, queryHistory, queryTransaction, rawToStable, rawToUsdc, readLimitsFile, recordDailySpend, refineLendingLabel, resolveAddressToSuinsViaRpc, resolveSuinsViaRpc, resolveSymbol, resolveTokenType, saveBech32, saveKey, selectAndSplitCoin, selectSuiCoin, serializeCetusRoute, setLimits, simulateTransaction, stableToRaw, suiToMist, throwIfSimulationFailed, truncateAddress, usdcToRaw, validateAddress, validateLabel, verifyCetusRouteCoinMatch, walletExists, writeLimitsFile };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map