safehands-pharos 1.2.0 → 1.2.3

package/dist/tools/safehandsSafeExecute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safehandsSafeExecute.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAO/F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAKrC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAenF,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAmD/G"}

package/dist/tools/safehandsSafeExecute.js

@@ -0,0 +1,76 @@
+// ─── Tool: safehands_safe_execute ──────────────────────────────────────
+// Guarded execution wrapper so AI agents cannot bypass preflight checks.
+// ───────────────────────────────────────────────────────────────────────
+import { z } from "zod";
+import { fail, ok, requireWriteToolsEnabled } from "../lib/toolResponse.js";
+import { handleSafeHandsPreflightCheck } from "./safehandsPreflightCheck.js";
+import { handleSendPayment } from "./sendPayment.js";
+import { handleApproveToken } from "./approveToken.js";
+import { handleExecuteSwap } from "./executeSwap.js";
+import { handleX402PayAndFetch } from "./x402PayAndFetch.js";
+export const safehandsSafeExecuteSchema = z.object({
+    path: z.enum(["safe_execute_send_payment", "safe_execute_approve_token", "safe_execute_swap", "safe_x402_pay_and_fetch"]),
+    execute: z.boolean().optional().default(false).describe("Must be true to execute. false returns dry-run guarded report only."),
+    confirmExecution: z.boolean().optional().default(false).describe("Additional explicit runtime confirmation."),
+    action: z.record(z.any()).describe("Underlying tool input object"),
+});
+function toPreflight(path, action) {
+    if (path === "safe_execute_send_payment") {
+        return { actionType: "send_payment", amount: String(action.amount || ""), amountUnit: "PHRS", recipient: String(action.toAddress || ""), recipientVerified: false, requiresSigner: true, signerAvailable: true };
+    }
+    if (path === "safe_execute_approve_token") {
+        return { actionType: "approve_token", approvalAmount: String(action.amount || ""), approvalToken: String(action.token || ""), approvalUnlimited: action.amount === "max", requiresSigner: true, signerAvailable: true };
+    }
+    if (path === "safe_execute_swap") {
+        return { actionType: "execute_swap", amount: String(action.amountIn || ""), tokenIn: String(action.tokenIn || ""), tokenOut: String(action.tokenOut || ""), requiresSigner: true, signerAvailable: true };
+    }
+    return { actionType: "x402_pay_and_fetch", url: String(action.url || ""), paymentAmountUsdc: String(action.maxPaymentUsdc || "0.001"), requiresSigner: true, signerAvailable: true };
+}
+export async function handleSafeHandsSafeExecute(raw) {
+    const input = safehandsSafeExecuteSchema.parse(raw);
+    const writeGuard = requireWriteToolsEnabled("safehands_safe_execute");
+    if (writeGuard)
+        return writeGuard;
+    const preflight = await handleSafeHandsPreflightCheck(toPreflight(input.path, input.action));
+    if (!preflight.success)
+        return preflight;
+    const report = preflight.data;
+    if (report.decision === "BLOCK") {
+        return ok({
+            executed: false,
+            blocked: true,
+            safetyReport: report,
+            executionResult: null,
+            source: "safehands_safe_execute",
+        });
+    }
+    if (report.decision !== "ALLOW") {
+        return fail(report.decision === "REQUIRE_CONFIRMATION" ? "CONFIRMATION_REQUIRED" : "POLICY_BLOCKED", `SafeHands did not execute because policy decision is ${report.decision}.`, false, "safehands_safe_execute");
+    }
+    if (!input.execute || !input.confirmExecution) {
+        return ok({
+            executed: false,
+            dryRun: true,
+            reason: "Set execute=true and confirmExecution=true to execute this allowed testnet action.",
+            safetyReport: report,
+            executionResult: null,
+            source: "safehands_safe_execute",
+        });
+    }
+    let executionResult;
+    if (input.path === "safe_execute_send_payment")
+        executionResult = await handleSendPayment(input.action);
+    else if (input.path === "safe_execute_approve_token")
+        executionResult = await handleApproveToken(input.action);
+    else if (input.path === "safe_execute_swap")
+        executionResult = await handleExecuteSwap(input.action);
+    else
+        executionResult = await handleX402PayAndFetch(input.action);
+    return ok({
+        executed: true,
+        safetyReport: report,
+        executionResult,
+        source: "safehands_safe_execute",
+    });
+}
+//# sourceMappingURL=safehandsSafeExecute.js.map

package/dist/tools/safehandsSafeExecute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safehandsSafeExecute.js","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yEAAyE;AACzE,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,wBAAwB,EAAqB,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;IACzH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAC9H,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC7G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACnE,CAAC,CAAC;AAIH,SAAS,WAAW,CAAC,IAAY,EAAE,MAA+B;IAChE,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAe,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACrO,CAAC;IACD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC1C,OAAO,EAAE,UAAU,EAAE,eAAwB,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACnO,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACrN,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,oBAA6B,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAChM,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAA8B;IAC7E,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,wBAAwB,CAAC,wBAAwB,CAAC,CAAC;IACtE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAW,CAAC;IAErC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,IAAI,CACT,MAAM,CAAC,QAAQ,KAAK,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB,EACvF,wDAAwD,MAAM,CAAC,QAAQ,GAAG,EAC1E,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,oFAAoF;YAC5F,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,eAAwB,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;SAC1G,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B;QAAE,eAAe,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;SACjH,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;;QACvG,eAAe,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;IAExE,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,MAAM;QACpB,eAAe;QACf,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/safehandsWalletHealth.d.ts

@@ -0,0 +1,15 @@
+import { z } from "zod";
+import { type ToolResponse } from "../lib/toolResponse.js";
+export declare const safehandsWalletHealthSchema: z.ZodObject<{
+    agentId: z.ZodOptional<z.ZodString>;
+    walletAddress: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    agentId?: string | undefined;
+    walletAddress?: string | undefined;
+}, {
+    agentId?: string | undefined;
+    walletAddress?: string | undefined;
+}>;
+export type SafeHandsWalletHealthInput = z.input<typeof safehandsWalletHealthSchema>;
+export declare function handleSafeHandsWalletHealth(raw: SafeHandsWalletHealthInput): Promise<ToolResponse<unknown>>;
+//# sourceMappingURL=safehandsWalletHealth.d.ts.map

package/dist/tools/safehandsWalletHealth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safehandsWalletHealth.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsWalletHealth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAmC,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI5F,eAAO,MAAM,2BAA2B;;;;;;;;;EAGtC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAErF,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CA4FjH"}

package/dist/tools/safehandsWalletHealth.js

@@ -0,0 +1,104 @@
+// ─── Tool: safehands_wallet_health ─────────────────────────────────────
+// Checks whether an AI agent wallet is ready for guarded testnet actions.
+// ───────────────────────────────────────────────────────────────────────
+import { z } from "zod";
+import { formatEther, formatUnits } from "viem";
+import { publicClient } from "../lib/pharosClient.js";
+import { ERC20_ABI, USDC_ADDRESS, CHAIN_ID, PHAROS_ENVIRONMENT, IS_MAINNET, MAX_X402_PAYMENT_USDC } from "../lib/constants.js";
+import { ok, classifyExternalError } from "../lib/toolResponse.js";
+import { getSigner, isSignerFailure } from "../lib/signer/index.js";
+import { walletStore } from "../lib/wallet/index.js";
+export const safehandsWalletHealthSchema = z.object({
+    agentId: z.string().optional().describe("Managed testnet wallet agentId"),
+    walletAddress: z.string().optional().describe("Explicit wallet address for read-only health checks"),
+});
+export async function handleSafeHandsWalletHealth(raw) {
+    const input = safehandsWalletHealthSchema.parse(raw);
+    const managedWallet = input.agentId ? await walletStore.get(input.agentId) : null;
+    const signer = await getSigner(input.agentId);
+    const signerAvailable = !isSignerFailure(signer);
+    const address = signerAvailable ? signer.address : (input.walletAddress || managedWallet?.address);
+    const base = {
+        environment: PHAROS_ENVIRONMENT,
+        chainId: CHAIN_ID,
+        isMainnet: IS_MAINNET,
+        walletMode: process.env.WALLET_MODE || "none",
+        writeToolsEnabled: process.env.WRITE_TOOLS_ENABLED === "true",
+        signerAvailable,
+        signerMode: signerAvailable ? signer.mode : null,
+        signerError: signerAvailable ? null : signer.error,
+        managedWalletExists: Boolean(managedWallet),
+        address: address || null,
+    };
+    if (!address) {
+        return ok({
+            ...base,
+            status: "NOT_READY",
+            readiness: {
+                canReadBalances: false,
+                canPayGas: false,
+                canPayX402: false,
+                canExecuteWrites: false,
+            },
+            requiredActions: ["Create a managed testnet wallet or provide WALLET_MODE=env with a testnet PRIVATE_KEY."],
+            source: "safehands_wallet_health",
+        });
+    }
+    try {
+        const [phrsRaw, usdcRaw] = await Promise.all([
+            publicClient.getBalance({ address: address }),
+            publicClient.readContract({
+                address: USDC_ADDRESS,
+                abi: ERC20_ABI,
+                functionName: "balanceOf",
+                args: [address],
+            }),
+        ]);
+        const phrs = formatEther(phrsRaw);
+        const usdc = formatUnits(usdcRaw, 6);
+        const canPayGas = parseFloat(phrs) > 0.001;
+        const canPayX402 = parseFloat(usdc) >= Number(MAX_X402_PAYMENT_USDC);
+        const canExecuteWrites = signerAvailable && canPayGas && process.env.WRITE_TOOLS_ENABLED === "true";
+        return ok({
+            ...base,
+            status: canExecuteWrites ? "READY" : signerAvailable ? "DEGRADED" : "NOT_READY",
+            balances: {
+                PHRS: { value: phrs, unit: "PHRS", decimals: 18 },
+                USDC: { value: usdc, unit: "USDC", decimals: 6, tokenAddress: USDC_ADDRESS },
+            },
+            readiness: {
+                canReadBalances: true,
+                canPayGas,
+                canPayX402,
+                canExecuteWrites,
+            },
+            dailySpendStatus: {
+                implemented: false,
+                note: "Daily spend accounting is config-ready but not persisted in this MVP.",
+            },
+            requiredActions: [
+                ...(canPayGas ? [] : ["Fund wallet with testnet PHRS for gas."]),
+                ...(canPayX402 ? [] : [`Fund wallet with at least ${MAX_X402_PAYMENT_USDC} testnet USDC for x402 payments.`]),
+                ...(process.env.WRITE_TOOLS_ENABLED === "true" ? [] : ["Set WRITE_TOOLS_ENABLED=true only when intentionally executing trusted testnet actions."]),
+            ],
+            source: "safehands_wallet_health",
+        });
+    }
+    catch (err) {
+        const rpc = classifyExternalError("pharos_rpc", err);
+        return ok({
+            ...base,
+            status: "DEGRADED",
+            readiness: {
+                canReadBalances: false,
+                canPayGas: "unknown",
+                canPayX402: "unknown",
+                canExecuteWrites: false,
+            },
+            rpcError: rpc.error,
+            requiredActions: ["Retry RPC balance checks later or configure PHAROS_RPC_URL."],
+            source: "safehands_wallet_health",
+        });
+    }
+}
+//# sourceMappingURL=safehandsWalletHealth.js.map

package/dist/tools/safehandsWalletHealth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safehandsWalletHealth.js","sourceRoot":"","sources":["../../src/tools/safehandsWalletHealth.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC/H,OAAO,EAAQ,EAAE,EAAE,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACzE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;CACrG,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,GAA+B;IAC/E,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,aAAa,EAAE,OAAO,CAAC,CAAC;IAEnG,MAAM,IAAI,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM;QAC7C,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM;QAC7D,eAAe;QACf,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAChD,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QAClD,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAAC;QAC3C,OAAO,EAAE,OAAO,IAAI,IAAI;KACzB,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;YACR,GAAG,IAAI;YACP,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE;gBACT,eAAe,EAAE,KAAK;gBACtB,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,KAAK;gBACjB,gBAAgB,EAAE,KAAK;aACxB;YACD,eAAe,EAAE,CAAC,wFAAwF,CAAC;YAC3G,MAAM,EAAE,yBAAyB;SAClC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,OAAwB,EAAE,CAAC;YAC9D,YAAY,CAAC,YAAY,CAAC;gBACxB,OAAO,EAAE,YAAY;gBACrB,GAAG,EAAE,SAAS;gBACd,YAAY,EAAE,WAAW;gBACzB,IAAI,EAAE,CAAC,OAAwB,CAAC;aACjC,CAAoB;SACtB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACrE,MAAM,gBAAgB,GAAG,eAAe,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,CAAC;QAEpG,OAAO,EAAE,CAAC;YACR,GAAG,IAAI;YACP,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;YAC/E,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACjD,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE;aAC7E;YACD,SAAS,EAAE;gBACT,eAAe,EAAE,IAAI;gBACrB,SAAS;gBACT,UAAU;gBACV,gBAAgB;aACjB;YACD,gBAAgB,EAAE;gBAChB,WAAW,EAAE,KAAK;gBAClB,IAAI,EAAE,uEAAuE;aAC9E;YACD,eAAe,EAAE;gBACf,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC;gBAChE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,6BAA6B,qBAAqB,kCAAkC,CAAC,CAAC;gBAC7G,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,yFAAyF,CAAC,CAAC;aACnJ;YACD,MAAM,EAAE,yBAAyB;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,qBAAqB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,EAAE,CAAC;YACR,GAAG,IAAI;YACP,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE;gBACT,eAAe,EAAE,KAAK;gBACtB,SAAS,EAAE,SAAS;gBACpB,UAAU,EAAE,SAAS;gBACrB,gBAAgB,EAAE,KAAK;aACxB;YACD,QAAQ,EAAE,GAAG,CAAC,KAAK;YACnB,eAAe,EAAE,CAAC,6DAA6D,CAAC;YAChF,MAAM,EAAE,yBAAyB;SAClC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/tools/safehandsX402Preflight.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+import { type ToolResponse } from "../lib/toolResponse.js";
+export declare const safehandsX402PreflightSchema: z.ZodObject<{
+    url: z.ZodString;
+    method: z.ZodDefault<z.ZodOptional<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>>>;
+    paymentAmountUsdc: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    paymentTokenAddress: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    agentId: z.ZodOptional<z.ZodString>;
+    probeEndpoint: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    paymentAmountUsdc: string;
+    paymentTokenAddress: string;
+    method: "GET" | "POST" | "PUT" | "DELETE";
+    probeEndpoint: boolean;
+    agentId?: string | undefined;
+}, {
+    url: string;
+    paymentAmountUsdc?: string | undefined;
+    paymentTokenAddress?: string | undefined;
+    method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
+    agentId?: string | undefined;
+    probeEndpoint?: boolean | undefined;
+}>;
+export type SafeHandsX402PreflightInput = z.input<typeof safehandsX402PreflightSchema>;
+export declare function handleSafeHandsX402Preflight(raw: SafeHandsX402PreflightInput): Promise<ToolResponse<unknown>>;
+//# sourceMappingURL=safehandsX402Preflight.d.ts.map

package/dist/tools/safehandsX402Preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safehandsX402Preflight.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsX402Preflight.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAMrE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;EAOvC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEvF,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAqDnH"}

package/dist/tools/safehandsX402Preflight.js

@@ -0,0 +1,66 @@
+// ─── Tool: safehands_x402_preflight ────────────────────────────────────
+// Checks whether an x402 paid resource is safe before payment signing.
+// ───────────────────────────────────────────────────────────────────────
+import { z } from "zod";
+import { ok, fail } from "../lib/toolResponse.js";
+import { assertSafeFetchUrl, fetchWithTimeoutAndRetry } from "../lib/http.js";
+import { CHAIN_ID, PHAROS_ENVIRONMENT, MAX_X402_PAYMENT_USDC, X402_PAYMENT_TOKEN_ADDRESS } from "../lib/constants.js";
+import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
+import { getSigner, isSignerFailure } from "../lib/signer/index.js";
+export const safehandsX402PreflightSchema = z.object({
+    url: z.string(),
+    method: z.enum(["GET", "POST", "PUT", "DELETE"]).optional().default("GET"),
+    paymentAmountUsdc: z.string().optional().default("0.001"),
+    paymentTokenAddress: z.string().optional().default(X402_PAYMENT_TOKEN_ADDRESS),
+    agentId: z.string().optional(),
+    probeEndpoint: z.boolean().optional().default(false),
+});
+export async function handleSafeHandsX402Preflight(raw) {
+    const input = safehandsX402PreflightSchema.parse(raw);
+    try {
+        await assertSafeFetchUrl(input.url);
+    }
+    catch (err) {
+        return fail("SSRF_BLOCKED", err instanceof Error ? err.message.replace(/^SSRF_BLOCKED:\s*/, "") : String(err), false, "safehands_x402_preflight");
+    }
+    let detectedStatus = null;
+    let paymentRequired = "unknown";
+    if (input.probeEndpoint) {
+        try {
+            const res = await fetchWithTimeoutAndRetry(input.url, { method: input.method, timeoutMs: 7_500, retries: 0 });
+            detectedStatus = res.status;
+            paymentRequired = res.status === 402;
+        }
+        catch {
+            paymentRequired = "unknown";
+        }
+    }
+    const signer = await getSigner(input.agentId, { purpose: "x402" });
+    const signerAvailable = !isSignerFailure(signer);
+    const policy = evaluateActionPolicy({
+        actionType: "x402_pay_and_fetch",
+        url: input.url,
+        paymentAmountUsdc: input.paymentAmountUsdc,
+        paymentTokenAddress: input.paymentTokenAddress,
+        signerAvailable,
+        requiresSigner: paymentRequired === true,
+        chainId: CHAIN_ID,
+        environment: PHAROS_ENVIRONMENT,
+        isMainnet: false,
+    });
+    return ok({
+        ...policy,
+        url: input.url,
+        method: input.method,
+        paymentAmountUsdc: input.paymentAmountUsdc,
+        maxPaymentUsdc: MAX_X402_PAYMENT_USDC,
+        paymentTokenAddress: input.paymentTokenAddress,
+        signerAvailable,
+        signerMode: signerAvailable ? signer.mode : null,
+        signerError: signerAvailable ? null : signer.error,
+        probe: { enabled: input.probeEndpoint, status: detectedStatus, paymentRequired },
+        testnetPayment: true,
+        source: "safehands_x402_preflight",
+    });
+}
+//# sourceMappingURL=safehandsX402Preflight.js.map

package/dist/tools/safehandsX402Preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safehandsX402Preflight.js","sourceRoot":"","sources":["../../src/tools/safehandsX402Preflight.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,uEAAuE;AACvE,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAqB,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACtH,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEpE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACzD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrD,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,GAAgC;IACjF,MAAM,KAAK,GAAG,4BAA4B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CACT,cAAc,EACd,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EACjF,KAAK,EACL,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,eAAe,GAAwB,SAAS,CAAC;IACrD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9G,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC;YAC5B,eAAe,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,eAAe,GAAG,SAAS,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,UAAU,EAAE,oBAAoB;QAChC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,eAAe;QACf,cAAc,EAAE,eAAe,KAAK,IAAI;QACxC,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;QACR,GAAG,MAAM;QACT,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,cAAc,EAAE,qBAAqB;QACrC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,eAAe;QACf,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAChD,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QAClD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE;QAChF,cAAc,EAAE,IAAI;QACpB,MAAM,EAAE,0BAA0B;KACnC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/sendPayment.d.ts

@@ -3,13 +3,16 @@ export declare const sendPaymentSchema: z.ZodObject<{
     toAddress: z.ZodString;
     amount: z.ZodString;
     memo: z.ZodOptional<z.ZodString>;
+    agentId: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     amount: string;
     toAddress: string;
+    agentId?: string | undefined;
     memo?: string | undefined;
 }, {
     amount: string;
     toAddress: string;
+    agentId?: string | undefined;
     memo?: string | undefined;
 }>;
 export type SendPaymentInput = z.input<typeof sendPaymentSchema>;
@@ -20,62 +23,37 @@ export declare const sendPaymentTool: {
         toAddress: z.ZodString;
         amount: z.ZodString;
         memo: z.ZodOptional<z.ZodString>;
+        agentId: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         amount: string;
         toAddress: string;
+        agentId?: string | undefined;
         memo?: string | undefined;
     }, {
         amount: string;
         toAddress: string;
+        agentId?: string | undefined;
         memo?: string | undefined;
     }>;
 };
-export declare function handleSendPayment(raw: SendPaymentInput): Promise<{
-    success: boolean;
-    validation: {
-        addressValid: boolean;
-        balanceSufficient: boolean;
-        warnings: string[];
-    };
-    error: string;
-    riskAssessment?: undefined;
-    txHash?: undefined;
-    explorerUrl?: undefined;
-    amountSent?: undefined;
-    gasUsed?: undefined;
-} | {
-    success: boolean;
-    validation: {
-        addressValid: boolean;
-        balanceSufficient: boolean;
-        warnings: string[];
-    };
-    riskAssessment: {
-        riskScore: number;
-        wasBlocked: boolean;
-        blockReason: string;
-    };
-    error: string;
-    txHash?: undefined;
-    explorerUrl?: undefined;
-    amountSent?: undefined;
-    gasUsed?: undefined;
-} | {
-    success: boolean;
+export declare function handleSendPayment(raw: SendPaymentInput): Promise<import("../lib/toolResponse.js").ToolFailure | import("../lib/toolResponse.js").ToolSuccess<{
+    txSuccess: boolean;
     txHash: `0x${string}`;
     explorerUrl: string;
     amountSent: string;
+    signerMode: import("../lib/signer/index.js").SignerMode;
+    walletAddress: `0x${string}`;
     gasUsed: string;
     validation: {
         addressValid: boolean;
         balanceSufficient: boolean;
         warnings: string[];
     };
+    policy: import("../lib/policy/actionPolicyEngine.js").ActionPolicyResult;
     riskAssessment: {
         riskScore: number;
         wasBlocked: boolean;
-        blockReason?: undefined;
     };
-    error?: undefined;
-}>;
+    source: string;
+}>>;
 //# sourceMappingURL=sendPayment.d.ts.map

package/dist/tools/sendPayment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sendPayment.d.ts","sourceRoot":"","sources":["../../src/tools/sendPayment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAI5B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEjE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;CAI3B,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4F5D"}
+{"version":3,"file":"sendPayment.d.ts","sourceRoot":"","sources":["../../src/tools/sendPayment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAK5B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEjE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;CAI3B,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB;;;;;;;;;;;;;;;;;;;IAkG5D"}

package/dist/tools/sendPayment.js

@@ -1,13 +1,17 @@
 // ─── Tool: send_payment ────────────────────────────────────────────────
 import { z } from "zod";
-import { publicClient, createPharosWalletClient, getExplorerUrl } from "../lib/pharosClient.js";
+import { publicClient, createPharosWalletClientFromAccount, getExplorerUrl } from "../lib/pharosClient.js";
 import { isAddress, parseEther, formatEther } from "viem";
 import { assessRisk } from "../lib/riskEngine.js";
-import { MAX_BALANCE_USAGE_PCT, RISK_BLOCK_THRESHOLD } from "../lib/constants.js";
+import { fail, ok, requireWriteToolsEnabled, classifyExternalError } from "../lib/toolResponse.js";
+import { MAX_BALANCE_USAGE_PCT, RISK_BLOCK_THRESHOLD, MAX_TX_AMOUNT_PHRS, CHAIN_ID, PHAROS_ENVIRONMENT } from "../lib/constants.js";
+import { getSigner, isSignerFailure } from "../lib/signer/index.js";
+import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
 export const sendPaymentSchema = z.object({
     toAddress: z.string(),
     amount: z.string(),
     memo: z.string().optional(),
+    agentId: z.string().optional().describe("Managed testnet wallet agentId when WALLET_MODE=managed-testnet"),
 });
 export const sendPaymentTool = {
     name: "send_payment",
@@ -15,89 +19,91 @@ export const sendPaymentTool = {
     inputSchema: sendPaymentSchema,
 };
 export async function handleSendPayment(raw) {
-    const privateKey = process.env.PRIVATE_KEY;
-    const walletAddress = process.env.WALLET_ADDRESS;
-    if (!privateKey || !walletAddress)
-        throw new Error("Missing PRIVATE_KEY or WALLET_ADDRESS in environment variables.");
+    const writeGuard = requireWriteToolsEnabled("send_payment");
+    if (writeGuard)
+        return writeGuard;
     const input = sendPaymentSchema.parse(raw);
+    const signer = await getSigner(input.agentId);
+    if (isSignerFailure(signer)) {
+        return fail(signer.error.code, signer.error.message, false, "send_payment");
+    }
+    const walletAddress = signer.address;
+    const policy = evaluateActionPolicy({
+        actionType: "send_payment",
+        amount: input.amount,
+        amountUnit: "PHRS",
+        recipient: input.toAddress,
+        recipientVerified: false,
+        chainId: CHAIN_ID,
+        environment: PHAROS_ENVIRONMENT,
+        isMainnet: false,
+        signerAvailable: true,
+        requiresSigner: true,
+    });
+    if (policy.decision === "BLOCK") {
+        return fail("POLICY_BLOCKED", policy.reasons.join(" ") || "Payment blocked by SafeHands policy.", false, "send_payment");
+    }
+    if (Number(input.amount) > Number(MAX_TX_AMOUNT_PHRS)) {
+        return fail("TX_LIMIT_EXCEEDED", `Payment amount exceeds configured testnet limit (${MAX_TX_AMOUNT_PHRS} PHRS).`, false, "send_payment");
+    }
     const warnings = [];
     const validation = { addressValid: false, balanceSufficient: false, warnings };
-    // Address validation
     if (!isAddress(input.toAddress)) {
-        return { success: false, validation: { ...validation, addressValid: false }, error: "Invalid recipient address" };
+        return fail("INVALID_WALLET_ADDRESS", "Invalid recipient address", false, "send_payment");
     }
     validation.addressValid = true;
     if (input.toAddress === "0x0000000000000000000000000000000000000000") {
-        return { success: false, validation, error: "Cannot send to zero address" };
+        return fail("ZERO_ADDRESS_BLOCKED", "Cannot send to zero address", false, "send_payment");
     }
     if (input.toAddress.toLowerCase() === walletAddress.toLowerCase()) {
         warnings.push("Sending to own address");
     }
-    // Balance check
     const amountWei = parseEther(input.amount);
     const balance = await publicClient.getBalance({ address: walletAddress });
     const gasEstimate = parseEther("0.01");
     if (balance < amountWei + gasEstimate) {
-        return {
-            success: false,
-            validation: { ...validation, balanceSufficient: false, warnings: [...warnings, "Insufficient balance"] },
-            error: `Insufficient balance: have ${formatEther(balance)} PHRS, need ${input.amount} + gas`,
-        };
+        return fail("INSUFFICIENT_TESTNET_BALANCE", `Insufficient balance: have ${formatEther(balance)} PHRS, need ${input.amount} + gas`, false, "send_payment");
     }
     validation.balanceSufficient = true;
     const usagePct = Number((amountWei * 100n) / balance);
     if (usagePct > MAX_BALANCE_USAGE_PCT) {
         warnings.push(`Using ${usagePct}% of wallet balance — high exposure`);
     }
-    // Risk assessment
-    let riskScore = 0;
-    if (true) {
-        const risk = await assessRisk({
-            action: "transfer",
-            amount: input.amount,
-            toAddress: input.toAddress,
-            walletAddress: walletAddress,
-        });
-        riskScore = risk.riskScore;
-        if (riskScore > RISK_BLOCK_THRESHOLD) {
-            return {
-                success: false,
-                validation: {
-                    addressValid: true,
-                    balanceSufficient: true,
-                    warnings,
-                },
-                riskAssessment: {
-                    riskScore,
-                    wasBlocked: true,
-                    blockReason: risk.suggestion,
-                },
-                error: `Payment blocked — risk score ${riskScore}/100: ${risk.suggestion}`,
-            };
-        }
+    const risk = await assessRisk({
+        action: "transfer",
+        amount: input.amount,
+        toAddress: input.toAddress,
+        walletAddress,
+    });
+    if (risk.riskScore > RISK_BLOCK_THRESHOLD) {
+        return fail("POLICY_BLOCKED", `Payment blocked — risk score ${risk.riskScore}/100: ${risk.suggestion}`, false, "send_payment");
     }
     try {
-        const wallet = createPharosWalletClient(privateKey);
+        const wallet = createPharosWalletClientFromAccount(signer.account);
         const txHash = await wallet.sendTransaction({
             to: input.toAddress,
             value: amountWei,
         });
         const receipt = await publicClient.waitForTransactionReceipt({ hash: txHash });
-        return {
-            success: receipt.status === "success",
+        return ok({
+            txSuccess: receipt.status === "success",
             txHash,
             explorerUrl: getExplorerUrl(txHash),
             amountSent: input.amount,
+            signerMode: signer.mode,
+            walletAddress,
             gasUsed: receipt.gasUsed.toString(),
             validation,
+            policy,
             riskAssessment: {
-                riskScore,
+                riskScore: risk.riskScore,
                 wasBlocked: false,
             },
-        };
+            source: "send_payment",
+        });
     }
     catch (err) {
-        return { success: false, validation, error: `Payment failed: ${err.message}` };
+        return classifyExternalError("pharos_rpc", err);
     }
 }
 //# sourceMappingURL=sendPayment.js.map

package/dist/tools/sendPayment.js.map

@@ -1 +1 @@
-{"version":3,"file":"sendPayment.js","sourceRoot":"","sources":["../../src/tools/sendPayment.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAElF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,wHAAwH;IACrI,WAAW,EAAE,iBAAiB;CAC/B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAqB;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC3C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACjD,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACtH,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAE/E,qBAAqB;IACrB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IACpH,CAAC;IACD,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC;IAE/B,IAAI,KAAK,CAAC,SAAS,KAAK,4CAA4C,EAAE,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC1C,CAAC;IAED,gBAAgB;IAChB,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,aAA8B,EAAE,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,OAAO,GAAG,SAAS,GAAG,WAAW,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,sBAAsB,CAAC,EAAE;YACxG,KAAK,EAAE,8BAA8B,WAAW,CAAC,OAAO,CAAC,eAAe,KAAK,CAAC,MAAM,QAAQ;SAC7F,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IACtD,IAAI,QAAQ,GAAG,qBAAqB,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,SAAS,QAAQ,qCAAqC,CAAC,CAAC;IACxE,CAAC;IAED,kBAAkB;IAClB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;YAC5B,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,aAAa;SAC7B,CAAC,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAE3B,IAAI,SAAS,GAAG,oBAAoB,EAAE,CAAC;YACrC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE;oBACV,YAAY,EAAE,IAAI;oBAClB,iBAAiB,EAAE,IAAI;oBACvB,QAAQ;iBACT;gBACD,cAAc,EAAE;oBACd,SAAS;oBACT,UAAU,EAAE,IAAI;oBAChB,WAAW,EAAE,IAAI,CAAC,UAAU;iBAC7B;gBACD,KAAK,EAAE,gCAAgC,SAAS,SAAS,IAAI,CAAC,UAAU,EAAE;aAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,wBAAwB,CAAC,UAA2B,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;YAC1C,EAAE,EAAE,KAAK,CAAC,SAA0B;YACpC,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/E,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS;YACrC,MAAM;YACN,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC;YACnC,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;YACnC,UAAU;YACV,cAAc,EAAE;gBACd,SAAS;gBACT,UAAU,EAAE,KAAK;aAClB;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAoB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5F,CAAC;AACH,CAAC"}
+{"version":3,"file":"sendPayment.js","sourceRoot":"","sources":["../../src/tools/sendPayment.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,mCAAmC,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC3G,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACpI,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;CAC3G,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,wHAAwH;IACrI,WAAW,EAAE,iBAAiB;CAC/B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAqB;IAC3D,MAAM,UAAU,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAC5D,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;IAErC,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,iBAAiB,EAAE,KAAK;QACxB,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,KAAK;QAChB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,sCAAsC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC3H,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,mBAAmB,EAAE,oDAAoD,kBAAkB,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC3I,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAE/E,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,wBAAwB,EAAE,2BAA2B,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5F,CAAC;IACD,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC;IAE/B,IAAI,KAAK,CAAC,SAAS,KAAK,4CAA4C,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC,sBAAsB,EAAE,6BAA6B,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,OAAO,GAAG,SAAS,GAAG,WAAW,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,8BAA8B,EAAE,8BAA8B,WAAW,CAAC,OAAO,CAAC,eAAe,KAAK,CAAC,MAAM,QAAQ,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5J,CAAC;IACD,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IACtD,IAAI,QAAQ,GAAG,qBAAqB,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,SAAS,QAAQ,qCAAqC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;QAC5B,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa;KACd,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,SAAS,GAAG,oBAAoB,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,gBAAgB,EAAE,gCAAgC,IAAI,CAAC,SAAS,SAAS,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IACjI,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mCAAmC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;YAC1C,EAAE,EAAE,KAAK,CAAC,SAA0B;YACpC,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/E,OAAO,EAAE,CAAC;YACR,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS;YACvC,MAAM;YACN,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC;YACnC,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,aAAa;YACb,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;YACnC,UAAU;YACV,MAAM;YACN,cAAc,EAAE;gBACd,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,KAAK;aAClB;YACD,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,qBAAqB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/tools/simulateTransaction.d.ts

@@ -8,15 +8,15 @@ export declare const simulateTransactionSchema: z.ZodObject<{
     walletAddress: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     amount: string;
-    action: "transfer" | "swap";
     walletAddress: string;
+    action: "transfer" | "swap";
     tokenIn?: string | undefined;
     tokenOut?: string | undefined;
     toAddress?: string | undefined;
 }, {
     amount: string;
-    action: "transfer" | "swap";
     walletAddress: string;
+    action: "transfer" | "swap";
     tokenIn?: string | undefined;
     tokenOut?: string | undefined;
     toAddress?: string | undefined;
@@ -34,15 +34,15 @@ export declare const simulateTransactionTool: {
         walletAddress: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         amount: string;
-        action: "transfer" | "swap";
         walletAddress: string;
+        action: "transfer" | "swap";
         tokenIn?: string | undefined;
         tokenOut?: string | undefined;
         toAddress?: string | undefined;
     }, {
         amount: string;
-        action: "transfer" | "swap";
         walletAddress: string;
+        action: "transfer" | "swap";
         tokenIn?: string | undefined;
         tokenOut?: string | undefined;
         toAddress?: string | undefined;