clodds 1.2.9 → 1.4.0

package/dist/skills/bundled/pairing/SKILL.md

@@ -0,0 +1,275 @@
+---
+name: pairing
+description: "User pairing, authentication, and trust management"
+emoji: "🔗"
+---
+
+# Pairing - Complete API Reference
+
+Pair new users to Clodds, manage trust levels, and control access across channels.
+
+---
+
+## Chat Commands
+
+### Pairing (New Users)
+
+```
+/pair                                       Request pairing (generates code)
+/pair-code ABC123                           Enter pairing code
+/unpair                                     Remove your pairing
+```
+
+### Admin Commands
+
+```
+/pairing list                               List pending requests
+/pairing approve <code>                     Approve pairing request
+/pairing reject <code>                      Reject pairing request
+/pairing users                              List paired users
+/pairing remove <user>                      Remove user pairing
+```
+
+### Trust Management
+
+```
+/trust <user> owner                         Grant owner trust
+/trust <user> paired                        Standard trust
+/trust list                                 List trust levels
+```
+
+---
+
+## TypeScript API Reference
+
+### Create Pairing Service
+
+```typescript
+import { createPairingService } from 'clodds/pairing';
+
+const pairing = createPairingService({
+  // Code settings
+  codeLength: 8,
+  codeExpiryMinutes: 60,
+  maxPendingPerChannel: 3,
+
+  // Auto-approve settings
+  autoApproveLocal: true,      // Auto-approve localhost
+  autoApproveTailscale: true,  // Auto-approve Tailscale IPs
+  autoApproveOwners: true,     // Owners auto-approve their requests
+
+  // Storage
+  storage: 'sqlite',
+  dbPath: './pairing.db',
+});
+```
+
+### Create Pairing Request
+
+```typescript
+// User requests pairing
+const request = await pairing.createPairingRequest({
+  channelId: 'telegram-123',
+  userId: 'telegram-user-456',
+  username: 'johndoe',
+  displayName: 'John Doe',
+});
+
+console.log(`Pairing code: ${request.code}`);
+console.log(`Expires: ${request.expiresAt}`);
+console.log(`Share this code with an admin to get approved`);
+```
+
+### Validate Code
+
+```typescript
+// Check if code is valid
+const valid = await pairing.validateCode({
+  code: 'ABC123XY',
+});
+
+if (valid) {
+  console.log(`Valid code for user: ${valid.username}`);
+  console.log(`Channel: ${valid.channelId}`);
+}
+```
+
+### Approve Request
+
+```typescript
+// Admin approves pairing
+await pairing.approveRequest({
+  code: 'ABC123XY',
+  approvedBy: 'admin-user-id',
+  trustLevel: 'paired',
+});
+```
+
+### Reject Request
+
+```typescript
+// Admin rejects pairing
+await pairing.rejectRequest({
+  code: 'ABC123XY',
+  rejectedBy: 'admin-user-id',
+  reason: 'Unknown user',
+});
+```
+
+### Check Pairing Status
+
+```typescript
+// Check if user is paired
+const isPaired = await pairing.isPaired({
+  channelId: 'telegram-123',
+  userId: 'telegram-user-456',
+});
+
+if (isPaired) {
+  console.log('User is paired and can use Clodds');
+}
+```
+
+### Get Trust Level
+
+```typescript
+const trust = await pairing.getTrustLevel({
+  channelId: 'telegram-123',
+  userId: 'telegram-user-456',
+});
+
+console.log(`Trust level: ${trust}`);
+// 'owner' | 'paired' | 'stranger'
+
+// Check specific permission
+if (trust === 'owner') {
+  console.log('Full admin access');
+} else if (trust === 'paired') {
+  console.log('Standard trading access');
+} else {
+  console.log('No access - must pair first');
+}
+```
+
+### List Pending Requests
+
+```typescript
+const pending = await pairing.listPendingRequests({
+  channelId: 'telegram-123',  // Optional: filter by channel
+});
+
+for (const req of pending) {
+  console.log(`Code: ${req.code}`);
+  console.log(`User: ${req.username} (${req.displayName})`);
+  console.log(`Requested: ${req.createdAt}`);
+  console.log(`Expires: ${req.expiresAt}`);
+}
+```
+
+### List Paired Users
+
+```typescript
+const users = await pairing.listPairedUsers({
+  channelId: 'telegram-123',  // Optional: filter by channel
+});
+
+for (const user of users) {
+  console.log(`${user.username}: ${user.trustLevel}`);
+  console.log(`  Paired: ${user.pairedAt}`);
+  console.log(`  Approved by: ${user.approvedBy}`);
+}
+```
+
+### Check Owner Status
+
+```typescript
+const isOwner = await pairing.isOwner({
+  channelId: 'telegram-123',
+  userId: 'telegram-user-456',
+});
+
+if (isOwner) {
+  console.log('User has owner privileges');
+}
+```
+
+### Remove Pairing
+
+```typescript
+// Remove user's pairing
+await pairing.removePairing({
+  channelId: 'telegram-123',
+  userId: 'telegram-user-456',
+});
+```
+
+---
+
+## Trust Levels
+
+| Level | Access |
+|-------|--------|
+| **owner** | Full admin: approve users, manage settings, trading |
+| **paired** | Standard: trading, portfolio, queries |
+| **stranger** | None: must pair first |
+
+---
+
+## Pairing Code Format
+
+- **Length**: 8 characters
+- **Characters**: Uppercase letters + numbers
+- **Excludes**: 0, O, 1, I, L (avoid confusion)
+- **Example**: `ABC234XY`
+
+---
+
+## Auto-Approve Rules
+
+| Condition | Behavior |
+|-----------|----------|
+| Localhost | Auto-approve with owner trust |
+| Tailscale IP | Auto-approve with owner trust |
+| Owner request | Auto-approve their other channels |
+
+---
+
+## Security Features
+
+| Feature | Description |
+|---------|-------------|
+| **Code expiry** | Codes expire after 1 hour |
+| **Rate limiting** | Max 3 pending per channel |
+| **Unambiguous codes** | No confusable characters |
+| **Audit trail** | Who approved/rejected when |
+
+---
+
+## CLI Admin Commands
+
+```bash
+# List pending pairing requests
+clodds pairing list telegram
+
+# Approve a request
+clodds pairing approve ABC234XY
+
+# List paired users
+clodds pairing users telegram
+
+# Add user directly (bypass code)
+clodds pairing add telegram user-123
+
+# Remove user
+clodds pairing remove telegram user-123
+```
+
+---
+
+## Best Practices
+
+1. **Share codes securely** — Don't post in public channels
+2. **Set expiry appropriately** — Shorter for sensitive systems
+3. **Review pending regularly** — Don't let requests pile up
+4. **Use owner sparingly** — Most users only need 'paired'
+5. **Audit periodically** — Review who has access

package/dist/skills/bundled/pancakeswap/SKILL.md

@@ -0,0 +1,93 @@
+---
+name: pancakeswap
+description: "PancakeSwap — Multi-chain DEX (BNB Chain, ETH, ARB, Base)"
+emoji: "🥞"
+commands:
+  - /cake
+gates:
+  envs:
+    - EVM_PRIVATE_KEY
+---
+
+# PancakeSwap
+
+Multi-chain AMM DEX with V3 concentrated liquidity. Swap tokens on BNB Chain, Ethereum, Arbitrum, and Base.
+
+## Quick Start
+
+```bash
+# Set credentials
+export EVM_PRIVATE_KEY="0x..."
+
+# Get a quote
+/cake quote BNB USDT 1 --chain bsc
+
+# Execute swap
+/cake swap BNB USDT 1 --chain bsc
+
+# Check price
+/cake price CAKE USDT --chain bsc
+```
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `/cake swap <from> <to> <amount> [--chain bsc]` | Execute swap |
+| `/cake quote <from> <to> <amount> [--chain bsc]` | Get quote without executing |
+| `/cake price <tokenA> <tokenB> [--chain bsc]` | Get relative price |
+| `/cake balance <token> [--chain bsc]` | Check token balance |
+| `/cake help` | Show commands |
+
+## Chain Flag
+
+Use `--chain` to select network (default: bsc):
+
+| Flag | Network |
+|------|---------|
+| `--chain bsc` | BNB Smart Chain (default) |
+| `--chain eth` | Ethereum |
+| `--chain arb` | Arbitrum |
+| `--chain base` | Base |
+
+## Examples
+
+```bash
+# Swap 1 BNB to USDT on BSC
+/cake swap BNB USDT 1
+
+# Swap 100 USDC to CAKE on Ethereum
+/cake swap USDC CAKE 100 --chain eth
+
+# Get quote for WETH to USDC on Arbitrum
+/cake quote WETH USDC 0.5 --chain arb
+
+# Check CAKE balance on BSC
+/cake balance CAKE
+```
+
+## Common Tokens
+
+| Token | BSC | ETH | ARB | Base |
+|-------|-----|-----|-----|------|
+| CAKE | Yes | Yes | Yes | Yes |
+| USDC | Yes | Yes | Yes | Yes |
+| USDT | Yes | Yes | Yes | - |
+| WBNB | Yes | - | - | - |
+| WETH | - | Yes | Yes | Yes |
+
+## Configuration
+
+```bash
+# Required
+export EVM_PRIVATE_KEY="0x..."
+
+# Optional: custom RPC URLs
+export BSC_RPC_URL="https://..."
+export ETH_RPC_URL="https://..."
+```
+
+## Resources
+
+- [PancakeSwap App](https://pancakeswap.finance)
+- [PancakeSwap Docs](https://docs.pancakeswap.finance)

package/dist/skills/bundled/pancakeswap/index.d.ts

@@ -11,9 +11,6 @@ export declare const skill: {
         description: string;
         usage: string;
     }[];
-    requires: {
-        env: string[];
-    };
     handler(args: string): Promise<string>;
 };
 export default skill;

package/dist/skills/bundled/pancakeswap/index.js

@@ -189,7 +189,6 @@ exports.skill = {
             usage: '/cake <command>',
         },
     ],
-    requires: { env: ['EVM_PRIVATE_KEY'] },
     async handler(args) {
         const parts = args.trim().split(/\s+/);
         const cmd = parts[0]?.toLowerCase();

package/dist/skills/bundled/pancakeswap/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/skills/bundled/pancakeswap/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGH,2CAA2C;AAC3C,+CAAiD;AACjD,wDAAkD;AAElD,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,YAAY,CAAC,CAAS,EAAE,QAAQ,GAAG,CAAC;IAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IAC1D,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAiC;QAC7C,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,MAAM;KACb,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,mCAAmC,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;IAE5E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAErC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,sFAAsF,CAAC;IAChG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,KAAK;YACL,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,EAAE;YACf,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,uBAAuB,KAAK,KAAK;gBACjC,EAAE;gBACF,YAAY,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE;gBAC1C,aAAa,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;gBACtD,OAAO,MAAM,CAAC,MAAM,EAAE;gBACtB,QAAQ,MAAM,CAAC,OAAO,EAAE;aACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QAED,OAAO,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,gBAAgB,OAAO,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAc;IACvC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAErC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,wFAAwF,CAAC;IAClG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;YAC/B,KAAK;YACL,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,EAAE;YACf,MAAM;SACP,CAAC,CAAC;QAEH,OAAO;YACL,wBAAwB,KAAK,KAAK;YAClC,EAAE;YACF,UAAU,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE;YACxC,WAAW,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;YAC7E,eAAe,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,kBAAkB;YAChF,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;YAC5C,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;SACzD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,iBAAiB,OAAO,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAc;IACvC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAEnC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,oFAAoF,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAE5D,OAAO;YACL,KAAK,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,KAAK;YAChE,EAAE;YACF,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE;YACnF,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE;SAC5F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,wBAAwB,OAAO,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IAE1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,yEAAyE,CAAC;IACnF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAEtD,OAAO,KAAK,KAAK,CAAC,WAAW,EAAE,aAAa,KAAK,QAAQ,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,yBAAyB,OAAO,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEnE,QAAA,KAAK,GAAG;IACnB,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,yDAAyD;IACtE,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,sBAAsB;YACnC,KAAK,EAAE,iBAAiB;SACzB;KACF;IACD,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE;IAEtC,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,MAAM;oBACT,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpC,KAAK,OAAO,CAAC;gBACb,KAAK,GAAG;oBACN,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,KAAK,OAAO,CAAC;gBACb,KAAK,GAAG;oBACN,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,KAAK,SAAS,CAAC;gBACf,KAAK,KAAK,CAAC;gBACX,KAAK,GAAG;oBACN,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAEvC,KAAK,MAAM,CAAC;gBACZ,KAAK,EAAE,CAAC;gBACR,KAAK,SAAS,CAAC;gBACf;oBACE,OAAO,IAAA,oBAAU,EAAC;wBAChB,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE,IAAI;wBACX,WAAW,EAAE,+EAA+E;wBAC5F,QAAQ,EAAE;4BACR;gCACE,KAAK,EAAE,UAAU;gCACjB,QAAQ,EAAE;oCACR,EAAE,GAAG,EAAE,+CAA+C,EAAE,WAAW,EAAE,sBAAsB,EAAE;oCAC7F,EAAE,GAAG,EAAE,gDAAgD,EAAE,WAAW,EAAE,+BAA+B,EAAE;oCACvG,EAAE,GAAG,EAAE,6CAA6C,EAAE,WAAW,EAAE,mCAAmC,EAAE;oCACxG,EAAE,GAAG,EAAE,qCAAqC,EAAE,WAAW,EAAE,qBAAqB,EAAE;iCACnF;6BACF;yBACF;wBACD,QAAQ,EAAE;4BACR,uBAAuB;4BACvB,uCAAuC;4BACvC,mCAAmC;4BACnC,gCAAgC;yBACjC;wBACD,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;4BAClF,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,yBAAyB,EAAE;4BAC/D,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,8BAA8B,EAAE;yBACrE;wBACD,OAAO,EAAE;4BACP,EAAE,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE;4BACzD,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,sBAAsB,EAAE;4BACvD,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE;4BACnD,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE;yBACvD;wBACD,KAAK,EAAE;4BACL,uCAAuC;4BACvC,4CAA4C;yBAC7C;qBACF,CAAC,CAAC;YACP,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kBAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;YAC5D,OAAO,IAAA,0BAAc,EAAC,aAAa,EAAE,GAAG,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;CACF,CAAC;AAEF,kBAAe,aAAK,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/skills/bundled/pancakeswap/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGH,2CAA2C;AAC3C,+CAAiD;AACjD,wDAAkD;AAElD,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,YAAY,CAAC,CAAS,EAAE,QAAQ,GAAG,CAAC;IAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IAC1D,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAiC;QAC7C,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,MAAM;KACb,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,mCAAmC,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;IAE5E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,KAAK,UAAU,UAAU,CAAC,IAAc;IACtC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAErC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,sFAAsF,CAAC;IAChG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,KAAK;YACL,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,EAAE;YACf,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,uBAAuB,KAAK,KAAK;gBACjC,EAAE;gBACF,YAAY,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE;gBAC1C,aAAa,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;gBACtD,OAAO,MAAM,CAAC,MAAM,EAAE;gBACtB,QAAQ,MAAM,CAAC,OAAO,EAAE;aACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QAED,OAAO,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,gBAAgB,OAAO,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAc;IACvC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAErC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,wFAAwF,CAAC;IAClG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;YAC/B,KAAK;YACL,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,EAAE;YACf,MAAM;SACP,CAAC,CAAC;QAEH,OAAO;YACL,wBAAwB,KAAK,KAAK;YAClC,EAAE;YACF,UAAU,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE;YACxC,WAAW,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;YAC7E,eAAe,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,kBAAkB;YAChF,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;YAC5C,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;SACzD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,iBAAiB,OAAO,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAc;IACvC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAEnC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,oFAAoF,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAE5D,OAAO;YACL,KAAK,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,KAAK;YAChE,EAAE;YACF,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE;YACnF,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE;SAC5F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,wBAAwB,OAAO,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IAE1B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,yEAAyE,CAAC;IACnF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAEtD,OAAO,KAAK,KAAK,CAAC,WAAW,EAAE,aAAa,KAAK,QAAQ,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,yBAAyB,OAAO,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEnE,QAAA,KAAK,GAAG;IACnB,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,yDAAyD;IACtE,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,sBAAsB;YACnC,KAAK,EAAE,iBAAiB;SACzB;KACF;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,MAAM;oBACT,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpC,KAAK,OAAO,CAAC;gBACb,KAAK,GAAG;oBACN,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,KAAK,OAAO,CAAC;gBACb,KAAK,GAAG;oBACN,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,KAAK,SAAS,CAAC;gBACf,KAAK,KAAK,CAAC;gBACX,KAAK,GAAG;oBACN,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAEvC,KAAK,MAAM,CAAC;gBACZ,KAAK,EAAE,CAAC;gBACR,KAAK,SAAS,CAAC;gBACf;oBACE,OAAO,IAAA,oBAAU,EAAC;wBAChB,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE,IAAI;wBACX,WAAW,EAAE,+EAA+E;wBAC5F,QAAQ,EAAE;4BACR;gCACE,KAAK,EAAE,UAAU;gCACjB,QAAQ,EAAE;oCACR,EAAE,GAAG,EAAE,+CAA+C,EAAE,WAAW,EAAE,sBAAsB,EAAE;oCAC7F,EAAE,GAAG,EAAE,gDAAgD,EAAE,WAAW,EAAE,+BAA+B,EAAE;oCACvG,EAAE,GAAG,EAAE,6CAA6C,EAAE,WAAW,EAAE,mCAAmC,EAAE;oCACxG,EAAE,GAAG,EAAE,qCAAqC,EAAE,WAAW,EAAE,qBAAqB,EAAE;iCACnF;6BACF;yBACF;wBACD,QAAQ,EAAE;4BACR,uBAAuB;4BACvB,uCAAuC;4BACvC,mCAAmC;4BACnC,gCAAgC;yBACjC;wBACD,OAAO,EAAE;4BACP,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;4BAClF,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,yBAAyB,EAAE;4BAC/D,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,8BAA8B,EAAE;yBACrE;wBACD,OAAO,EAAE;4BACP,EAAE,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE;4BACzD,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,sBAAsB,EAAE;4BACvD,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE;4BACnD,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE;yBACvD;wBACD,KAAK,EAAE;4BACL,uCAAuC;4BACvC,4CAA4C;yBAC7C;qBACF,CAAC,CAAC;YACP,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kBAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;YAC5D,OAAO,IAAA,0BAAc,EAAC,aAAa,EAAE,GAAG,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;CACF,CAAC;AAEF,kBAAe,aAAK,CAAC"}

package/dist/skills/bundled/percolator/SKILL.md

@@ -0,0 +1,22 @@
+---
+name: percolator
+description: "On-chain Solana perpetual futures"
+command: percolator
+emoji: "⚡"
+---
+
+# Percolator
+
+On-chain Solana perpetual futures with leverage via Percolator protocol.
+
+## Commands
+
+```
+/percolator status               Show market state (price, OI, funding, spread)
+/percolator positions            View your open positions
+/percolator long <size>          Open long position (size in USD)
+/percolator short <size>         Open short position (size in USD)
+/percolator deposit <amount>     Deposit USDC collateral
+/percolator withdraw <amount>    Withdraw USDC collateral
+/percolator help                 Show help
+```

package/dist/skills/bundled/permissions/SKILL.md

@@ -0,0 +1,269 @@
+---
+name: permissions
+description: "Command approvals, tool policies, and exec security"
+emoji: "🛡️"
+---
+
+# Permissions - Complete API Reference
+
+Manage command execution approvals, tool access policies, and security controls.
+
+---
+
+## Chat Commands
+
+### View Permissions
+
+```
+/permissions                                View current permissions
+/permissions list                           List all rules
+/permissions pending                        View pending approvals
+/permissions history                        View approval history
+```
+
+### Approve/Reject
+
+```
+/approve                                    Approve pending command
+/approve <id>                               Approve specific request
+/reject                                     Reject pending command
+/reject <id> "reason"                       Reject with reason
+```
+
+### Allow/Block Rules
+
+```
+/permissions allow "npm install"            Allow pattern
+/permissions allow "git *"                  Allow with wildcard
+/permissions block "rm -rf"                 Block dangerous command
+/permissions remove <rule-id>               Remove rule
+```
+
+### Security Mode
+
+```
+/permissions mode                           Check current mode
+/permissions mode allowlist                 Only allowed commands
+/permissions mode blocklist                 Block specific commands
+/permissions mode full                      Allow all (dangerous)
+```
+
+---
+
+## TypeScript API Reference
+
+### Create Permissions Manager
+
+```typescript
+import { createPermissionsManager } from 'clodds/permissions';
+
+const perms = createPermissionsManager({
+  // Security mode
+  mode: 'allowlist',  // 'deny' | 'allowlist' | 'blocklist' | 'full'
+
+  // Default rules
+  defaultAllow: [
+    'ls *',
+    'cat *',
+    'git status',
+    'git diff',
+    'npm run *',
+  ],
+
+  defaultBlock: [
+    'rm -rf *',
+    'sudo *',
+    'chmod 777 *',
+  ],
+
+  // Approval settings
+  requireApproval: true,
+  approvalTimeoutMs: 60000,
+
+  // Storage
+  storage: 'sqlite',
+  dbPath: './permissions.db',
+});
+```
+
+### Check Permission
+
+```typescript
+// Check if command is allowed
+const result = await perms.check({
+  command: 'npm install lodash',
+  userId: 'user-123',
+  context: 'Installing dependency',
+});
+
+if (result.allowed) {
+  console.log('Command allowed');
+} else if (result.needsApproval) {
+  console.log(`Waiting for approval: ${result.requestId}`);
+} else {
+  console.log(`Blocked: ${result.reason}`);
+}
+```
+
+### Request Approval
+
+```typescript
+// Request approval for command
+const request = await perms.requestApproval({
+  command: 'docker build -t myapp .',
+  userId: 'user-123',
+  reason: 'Building application container',
+});
+
+console.log(`Request ID: ${request.id}`);
+console.log(`Status: ${request.status}`);
+
+// Wait for approval
+const approved = await perms.waitForApproval(request.id, {
+  timeoutMs: 60000,
+});
+
+if (approved) {
+  console.log('Approved! Executing...');
+}
+```
+
+### Approve/Reject
+
+```typescript
+// Approve request
+await perms.approve({
+  requestId: 'req-123',
+  approvedBy: 'admin-user',
+  note: 'Looks safe',
+});
+
+// Reject request
+await perms.reject({
+  requestId: 'req-123',
+  rejectedBy: 'admin-user',
+  reason: 'Command too broad',
+});
+```
+
+### List Pending
+
+```typescript
+// Get pending approvals
+const pending = await perms.listPending();
+
+for (const req of pending) {
+  console.log(`[${req.id}] ${req.command}`);
+  console.log(`  User: ${req.userId}`);
+  console.log(`  Reason: ${req.reason}`);
+  console.log(`  Requested: ${req.createdAt}`);
+}
+```
+
+### Add Rules
+
+```typescript
+// Add allow rule
+await perms.addRule({
+  type: 'allow',
+  pattern: 'npm run *',
+  description: 'Allow npm scripts',
+  createdBy: 'admin',
+});
+
+// Add block rule
+await perms.addRule({
+  type: 'block',
+  pattern: 'rm -rf /',
+  description: 'Prevent root deletion',
+  createdBy: 'admin',
+});
+
+// List rules
+const rules = await perms.listRules();
+
+for (const rule of rules) {
+  console.log(`${rule.type}: ${rule.pattern}`);
+}
+
+// Remove rule
+await perms.removeRule('rule-id');
+```
+
+### Tool Policies
+
+```typescript
+// Set tool policy for agent
+await perms.setToolPolicy({
+  agentId: 'trading',
+  allow: ['execute', 'portfolio', 'markets'],
+  deny: ['browser', 'docker', 'exec'],
+});
+
+// Check tool access
+const canUse = perms.isToolAllowed('trading', 'execute');
+
+// Get agent's allowed tools
+const tools = perms.getAllowedTools('trading');
+```
+
+---
+
+## Security Modes
+
+| Mode | Behavior |
+|------|----------|
+| **deny** | Block all exec commands |
+| **allowlist** | Only explicitly allowed commands |
+| **blocklist** | Block specific patterns, allow rest |
+| **full** | Allow all (dangerous!) |
+
+---
+
+## Pattern Syntax
+
+| Pattern | Matches |
+|---------|---------|
+| `npm install` | Exact command |
+| `npm *` | npm with any args |
+| `git status` | Exact command |
+| `* --version` | Any command with --version |
+
+---
+
+## Built-in Safety Rules
+
+Always blocked regardless of mode:
+- `rm -rf /`
+- `sudo rm -rf`
+- `chmod 777 /`
+- `:(){ :|:& };:` (fork bomb)
+- Commands with shell injection patterns
+
+---
+
+## CLI Commands
+
+```bash
+# List permission rules
+clodds permissions list
+
+# Add allow pattern
+clodds permissions allow "npm run *"
+
+# View pending approvals
+clodds permissions pending
+
+# Approve request
+clodds permissions approve req-123
+```
+
+---
+
+## Best Practices
+
+1. **Use allowlist mode** — Most secure, explicit permissions
+2. **Review pending regularly** — Don't let requests pile up
+3. **Specific patterns** — `npm install lodash` over `npm *`
+4. **Audit history** — Review what was approved
+5. **Tool policies** — Restrict agent tool access