safehands-pharos 1.4.0 → 1.5.0

package/dist/lib/wallet/index.js

@@ -1,129 +1,129 @@
-// ─── WalletStore ────────────────────────────────────────────────────────
-// Abstraction for storing managed testnet agent wallets.
-// Private keys are AES-256-GCM encrypted before storage.
-// Legacy XOR-obfuscated keys (starting with "0x") are transparently migrated
-// on first read. NOT mainnet-grade KMS — testnet only.
-// ────────────────────────────────────────────────────────────────────────
-import { readFileSync, writeFileSync, renameSync, existsSync } from "fs";
-import { randomBytes, createCipheriv, createDecipheriv, createHash } from "node:crypto";
-// ─── In-Memory Store (tests + default) ─────────────────────────────────
-class InMemoryWalletStore {
-    store = new Map();
-    async get(agentId) {
-        return this.store.get(agentId) ?? null;
-    }
-    async set(agentId, wallet) {
-        this.store.set(agentId, wallet);
-    }
-    async has(agentId) {
-        return this.store.has(agentId);
-    }
-}
-// ─── File Store (local dev) ─────────────────────────────────────────────
-class FileWalletStore {
-    path;
-    data = {};
-    constructor(path) {
-        this.path = path;
-        if (existsSync(path)) {
-            try {
-                this.data = JSON.parse(readFileSync(path, "utf-8"));
-            }
-            catch {
-                this.data = {};
-            }
-        }
-    }
-    async get(agentId) {
-        return this.data[agentId] ?? null;
-    }
-    async set(agentId, wallet) {
-        this.data[agentId] = wallet;
-        // Atomic write: write to .tmp then rename to avoid corruption on crash
-        const tmpPath = `${this.path}.tmp`;
-        writeFileSync(tmpPath, JSON.stringify(this.data, null, 2), "utf-8");
-        renameSync(tmpPath, this.path);
-    }
-    async has(agentId) {
-        return agentId in this.data;
-    }
-}
-// ─── AES-256-GCM Encryption ────────────────────────────────────────────
-function deriveKey(encryptionKey) {
-    return createHash("sha256").update(encryptionKey).digest();
-}
-/**
- * Encrypts a private key with AES-256-GCM.
- * Output format: <iv(12B)><tag(16B)><ciphertext> as hex string (no 0x prefix).
- */
-export function encryptKey(privateKey, encryptionKey) {
-    const key = deriveKey(encryptionKey);
-    const iv = randomBytes(12);
-    const cipher = createCipheriv("aes-256-gcm", key, iv);
-    const plain = Buffer.from(privateKey.replace(/^0x/, ""), "hex");
-    const encrypted = Buffer.concat([cipher.update(plain), cipher.final()]);
-    const tag = cipher.getAuthTag();
-    return Buffer.concat([iv, tag, encrypted]).toString("hex");
-}
-/**
- * Decrypts a private key. Handles both:
- * - New AES-256-GCM format (pure hex, no 0x prefix)
- * - Legacy XOR format (starts with "0x") — transparently supported for migration
- */
-export function decryptKey(encrypted, encryptionKey) {
-    if (encrypted.startsWith("0x")) {
-        // Legacy XOR path — symmetric, same operation
-        return _xorObfuscate(encrypted, encryptionKey);
-    }
-    const key = deriveKey(encryptionKey);
-    const data = Buffer.from(encrypted, "hex");
-    const iv = data.subarray(0, 12);
-    const tag = data.subarray(12, 28);
-    const ciphertext = data.subarray(28);
-    const decipher = createDecipheriv("aes-256-gcm", key, iv);
-    decipher.setAuthTag(tag);
-    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
-    return "0x" + decrypted.toString("hex");
-}
-// ─── Legacy XOR helpers (kept for migration read path only) ────────────
-function _xorObfuscate(privateKey, encryptionKey) {
-    const keyBytes = Buffer.from(encryptionKey.padEnd(32, "0").slice(0, 32));
-    const pkBytes = Buffer.from(privateKey.replace("0x", ""), "hex");
-    const result = Buffer.alloc(pkBytes.length);
-    for (let i = 0; i < pkBytes.length; i++) {
-        result[i] = pkBytes[i] ^ keyBytes[i % keyBytes.length];
-    }
-    return "0x" + result.toString("hex");
-}
-/** @deprecated Use encryptKey / decryptKey. Kept for callers that haven't migrated yet. */
-export function obfuscateKey(privateKey, encryptionKey) {
-    return _xorObfuscate(privateKey, encryptionKey);
-}
-/** @deprecated Use decryptKey. */
-export function deobfuscateKey(obfuscated, encryptionKey) {
-    return _xorObfuscate(obfuscated, encryptionKey);
-}
-// ─── Encryption key resolution ─────────────────────────────────────────
-// Random per-process fallback key — never hardcoded, never reused across restarts
-const IN_MEMORY_FALLBACK_KEY = randomBytes(32).toString("hex");
-/**
- * Returns the effective encryption key.
- * - Persistent store: WALLET_ENCRYPTION_KEY must be set (wallets won't survive restarts otherwise).
- * - In-memory store: falls back to a random per-process key.
- */
-export function getEffectiveEncryptionKey() {
-    return process.env.WALLET_ENCRYPTION_KEY || IN_MEMORY_FALLBACK_KEY;
-}
-// ─── Factory ────────────────────────────────────────────────────────────
-function createWalletStore() {
-    const storePath = process.env.WALLET_STORE_PATH;
-    if (storePath) {
-        return new FileWalletStore(storePath);
-    }
-    return new InMemoryWalletStore();
-}
-export function usesPersistentWalletStore() {
-    return Boolean(process.env.WALLET_STORE_PATH);
-}
-export const walletStore = createWalletStore();
+// ─── WalletStore ────────────────────────────────────────────────────────
+// Abstraction for storing managed testnet agent wallets.
+// Private keys are AES-256-GCM encrypted before storage.
+// Legacy XOR-obfuscated keys (starting with "0x") are transparently migrated
+// on first read. NOT mainnet-grade KMS — testnet only.
+// ────────────────────────────────────────────────────────────────────────
+import { readFileSync, writeFileSync, renameSync, existsSync } from "fs";
+import { randomBytes, createCipheriv, createDecipheriv, createHash } from "node:crypto";
+// ─── In-Memory Store (tests + default) ─────────────────────────────────
+class InMemoryWalletStore {
+    store = new Map();
+    async get(agentId) {
+        return this.store.get(agentId) ?? null;
+    }
+    async set(agentId, wallet) {
+        this.store.set(agentId, wallet);
+    }
+    async has(agentId) {
+        return this.store.has(agentId);
+    }
+}
+// ─── File Store (local dev) ─────────────────────────────────────────────
+class FileWalletStore {
+    path;
+    data = {};
+    constructor(path) {
+        this.path = path;
+        if (existsSync(path)) {
+            try {
+                this.data = JSON.parse(readFileSync(path, "utf-8"));
+            }
+            catch {
+                this.data = {};
+            }
+        }
+    }
+    async get(agentId) {
+        return this.data[agentId] ?? null;
+    }
+    async set(agentId, wallet) {
+        this.data[agentId] = wallet;
+        // Atomic write: write to .tmp then rename to avoid corruption on crash
+        const tmpPath = `${this.path}.tmp`;
+        writeFileSync(tmpPath, JSON.stringify(this.data, null, 2), "utf-8");
+        renameSync(tmpPath, this.path);
+    }
+    async has(agentId) {
+        return agentId in this.data;
+    }
+}
+// ─── AES-256-GCM Encryption ────────────────────────────────────────────
+function deriveKey(encryptionKey) {
+    return createHash("sha256").update(encryptionKey).digest();
+}
+/**
+ * Encrypts a private key with AES-256-GCM.
+ * Output format: <iv(12B)><tag(16B)><ciphertext> as hex string (no 0x prefix).
+ */
+export function encryptKey(privateKey, encryptionKey) {
+    const key = deriveKey(encryptionKey);
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", key, iv);
+    const plain = Buffer.from(privateKey.replace(/^0x/, ""), "hex");
+    const encrypted = Buffer.concat([cipher.update(plain), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return Buffer.concat([iv, tag, encrypted]).toString("hex");
+}
+/**
+ * Decrypts a private key. Handles both:
+ * - New AES-256-GCM format (pure hex, no 0x prefix)
+ * - Legacy XOR format (starts with "0x") — transparently supported for migration
+ */
+export function decryptKey(encrypted, encryptionKey) {
+    if (encrypted.startsWith("0x")) {
+        // Legacy XOR path — symmetric, same operation
+        return _xorObfuscate(encrypted, encryptionKey);
+    }
+    const key = deriveKey(encryptionKey);
+    const data = Buffer.from(encrypted, "hex");
+    const iv = data.subarray(0, 12);
+    const tag = data.subarray(12, 28);
+    const ciphertext = data.subarray(28);
+    const decipher = createDecipheriv("aes-256-gcm", key, iv);
+    decipher.setAuthTag(tag);
+    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return "0x" + decrypted.toString("hex");
+}
+// ─── Legacy XOR helpers (kept for migration read path only) ────────────
+function _xorObfuscate(privateKey, encryptionKey) {
+    const keyBytes = Buffer.from(encryptionKey.padEnd(32, "0").slice(0, 32));
+    const pkBytes = Buffer.from(privateKey.replace("0x", ""), "hex");
+    const result = Buffer.alloc(pkBytes.length);
+    for (let i = 0; i < pkBytes.length; i++) {
+        result[i] = pkBytes[i] ^ keyBytes[i % keyBytes.length];
+    }
+    return "0x" + result.toString("hex");
+}
+/** @deprecated Use encryptKey / decryptKey. Kept for callers that haven't migrated yet. */
+export function obfuscateKey(privateKey, encryptionKey) {
+    return _xorObfuscate(privateKey, encryptionKey);
+}
+/** @deprecated Use decryptKey. */
+export function deobfuscateKey(obfuscated, encryptionKey) {
+    return _xorObfuscate(obfuscated, encryptionKey);
+}
+// ─── Encryption key resolution ─────────────────────────────────────────
+// Random per-process fallback key — never hardcoded, never reused across restarts
+const IN_MEMORY_FALLBACK_KEY = randomBytes(32).toString("hex");
+/**
+ * Returns the effective encryption key.
+ * - Persistent store: WALLET_ENCRYPTION_KEY must be set (wallets won't survive restarts otherwise).
+ * - In-memory store: falls back to a random per-process key.
+ */
+export function getEffectiveEncryptionKey() {
+    return process.env.WALLET_ENCRYPTION_KEY || IN_MEMORY_FALLBACK_KEY;
+}
+// ─── Factory ────────────────────────────────────────────────────────────
+function createWalletStore() {
+    const storePath = process.env.WALLET_STORE_PATH;
+    if (storePath) {
+        return new FileWalletStore(storePath);
+    }
+    return new InMemoryWalletStore();
+}
+export function usesPersistentWalletStore() {
+    return Boolean(process.env.WALLET_STORE_PATH);
+}
+export const walletStore = createWalletStore();
 //# sourceMappingURL=index.js.map

package/dist/scripts/checkDeploy.d.ts

@@ -1,2 +1,2 @@
-export {};
+export {};
 //# sourceMappingURL=checkDeploy.d.ts.map

package/dist/scripts/checkDeploy.js

@@ -1,25 +1,25 @@
-// Quick script to fetch the receipt for the deploy tx
-import { publicClient } from "../lib/pharosClient.js";
-import { readFileSync, writeFileSync } from "fs";
-import { resolve } from "path";
-const TX_HASH = "0x7f2106b5bc8c5eddcd2ea7782669ccb0b4a107da4943cffd5d49357ab5820d2e";
-async function main() {
-    console.log("Fetching receipt for deploy tx...");
-    console.log(`TX: ${TX_HASH}`);
-    const receipt = await publicClient.getTransactionReceipt({ hash: TX_HASH });
-    console.log(`Status:   ${receipt.status}`);
-    console.log(`Contract: ${receipt.contractAddress}`);
-    console.log(`Block:    ${receipt.blockNumber}`);
-    console.log(`Gas Used: ${receipt.gasUsed}`);
-    if (receipt.contractAddress) {
-        // Update .env
-        const envPath = resolve(process.cwd(), ".env");
-        let envContent = readFileSync(envPath, "utf-8");
-        envContent = envContent.replace(/\nRISK_REGISTRY_ADDRESS=.*/, "");
-        envContent = envContent.trimEnd() + `\n\n# Risk Registry\nRISK_REGISTRY_ADDRESS=${receipt.contractAddress}\n`;
-        writeFileSync(envPath, envContent);
-        console.log(`\n✅ .env updated with RISK_REGISTRY_ADDRESS=${receipt.contractAddress}`);
-    }
-}
-main().catch(console.error);
+// Quick script to fetch the receipt for the deploy tx
+import { publicClient } from "../lib/pharosClient.js";
+import { readFileSync, writeFileSync } from "fs";
+import { resolve } from "path";
+const TX_HASH = "0x7f2106b5bc8c5eddcd2ea7782669ccb0b4a107da4943cffd5d49357ab5820d2e";
+async function main() {
+    console.log("Fetching receipt for deploy tx...");
+    console.log(`TX: ${TX_HASH}`);
+    const receipt = await publicClient.getTransactionReceipt({ hash: TX_HASH });
+    console.log(`Status:   ${receipt.status}`);
+    console.log(`Contract: ${receipt.contractAddress}`);
+    console.log(`Block:    ${receipt.blockNumber}`);
+    console.log(`Gas Used: ${receipt.gasUsed}`);
+    if (receipt.contractAddress) {
+        // Update .env
+        const envPath = resolve(process.cwd(), ".env");
+        let envContent = readFileSync(envPath, "utf-8");
+        envContent = envContent.replace(/\nRISK_REGISTRY_ADDRESS=.*/, "");
+        envContent = envContent.trimEnd() + `\n\n# Risk Registry\nRISK_REGISTRY_ADDRESS=${receipt.contractAddress}\n`;
+        writeFileSync(envPath, envContent);
+        console.log(`\n✅ .env updated with RISK_REGISTRY_ADDRESS=${receipt.contractAddress}`);
+    }
+}
+main().catch(console.error);
 //# sourceMappingURL=checkDeploy.js.map

package/dist/scripts/deployRegistry.d.ts

@@ -1,2 +1,2 @@
-export {};
+export {};
 //# sourceMappingURL=deployRegistry.d.ts.map

package/dist/scripts/deployRegistry.js

@@ -1,101 +1,101 @@
-// ─── Compile & Deploy RiskRegistry ─────────────────────────────────────
-// Compiles the Solidity contract with solc and deploys to Pharos Atlantic.
-// ────────────────────────────────────────────────────────────────────────
-import { readFileSync, writeFileSync } from "fs";
-import { resolve } from "path";
-import solc from "solc";
-import { createPharosWalletClient, publicClient } from "../lib/pharosClient.js";
-// ─── Load .env ─────────────────────────────────────────────────────────
-function loadEnv() {
-    const envPath = resolve(process.cwd(), ".env");
-    const envFile = readFileSync(envPath, "utf-8");
-    const vars = {};
-    for (const line of envFile.split("\n")) {
-        const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith("#"))
-            continue;
-        const eqIdx = trimmed.indexOf("=");
-        if (eqIdx === -1)
-            continue;
-        vars[trimmed.slice(0, eqIdx).trim()] = trimmed.slice(eqIdx + 1).trim();
-    }
-    return vars;
-}
-const env = loadEnv();
-const PRIVATE_KEY = env.PRIVATE_KEY;
-if (!PRIVATE_KEY) {
-    console.error("❌ PRIVATE_KEY not found in .env");
-    process.exit(1);
-}
-// ─── Compile ───────────────────────────────────────────────────────────
-console.log("📝 Compiling RiskRegistry.sol...");
-const contractPath = resolve(process.cwd(), "contracts", "RiskRegistry.sol");
-const source = readFileSync(contractPath, "utf-8");
-const input = JSON.stringify({
-    language: "Solidity",
-    sources: {
-        "RiskRegistry.sol": { content: source },
-    },
-    settings: {
-        outputSelection: {
-            "*": {
-                "*": ["abi", "evm.bytecode.object"],
-            },
-        },
-        optimizer: { enabled: true, runs: 200 },
-    },
-});
-const output = JSON.parse(solc.compile(input));
-if (output.errors) {
-    const errors = output.errors.filter((e) => e.severity === "error");
-    if (errors.length > 0) {
-        console.error("❌ Compilation errors:");
-        errors.forEach((e) => console.error(e.formattedMessage));
-        process.exit(1);
-    }
-}
-const contract = output.contracts["RiskRegistry.sol"]["RiskRegistry"];
-const abi = contract.abi;
-const bytecode = `0x${contract.evm.bytecode.object}`;
-console.log("✅ Compiled successfully");
-console.log(`   ABI: ${abi.length} functions/events`);
-console.log(`   Bytecode: ${bytecode.length} chars`);
-// Save ABI for reference
-const artifactPath = resolve(process.cwd(), "contracts", "RiskRegistry.json");
-writeFileSync(artifactPath, JSON.stringify({ abi, bytecode }, null, 2));
-console.log(`   Artifact saved: contracts/RiskRegistry.json`);
-// ─── Deploy ────────────────────────────────────────────────────────────
-console.log("\n🚀 Deploying to Pharos Atlantic Testnet...");
-const wallet = createPharosWalletClient(PRIVATE_KEY);
-const account = wallet.account;
-console.log(`   Deployer: ${account.address}`);
-const balance = await publicClient.getBalance({ address: account.address });
-console.log(`   Balance:  ${Number(balance) / 1e18} PHRS`);
-// Deploy using viem
-const hash = await wallet.deployContract({
-    abi,
-    bytecode,
-    args: [],
-});
-console.log(`   TX Hash:  ${hash}`);
-console.log("   Waiting for confirmation...");
-const receipt = await publicClient.waitForTransactionReceipt({ hash });
-if (receipt.status !== "success") {
-    console.error("❌ Deployment failed!");
-    process.exit(1);
-}
-const contractAddress = receipt.contractAddress;
-console.log(`\n✅ RiskRegistry deployed successfully!`);
-console.log(`   Contract: ${contractAddress}`);
-console.log(`   Block:    ${receipt.blockNumber}`);
-console.log(`   Gas Used: ${receipt.gasUsed}`);
-console.log(`   Explorer: https://atlantic.pharosscan.xyz/tx/${hash}`);
-// ─── Update .env ───────────────────────────────────────────────────────
-const envPath = resolve(process.cwd(), ".env");
-let envContent = readFileSync(envPath, "utf-8");
-// Remove old entry if exists
-envContent = envContent.replace(/\nRISK_REGISTRY_ADDRESS=.*/, "");
-envContent = envContent.trimEnd() + `\n\n# Risk Registry\nRISK_REGISTRY_ADDRESS=${contractAddress}\n`;
-writeFileSync(envPath, envContent);
-console.log(`\n📝 Updated .env with RISK_REGISTRY_ADDRESS=${contractAddress}`);
+// ─── Compile & Deploy RiskRegistry ─────────────────────────────────────
+// Compiles the Solidity contract with solc and deploys to Pharos Atlantic.
+// ────────────────────────────────────────────────────────────────────────
+import { readFileSync, writeFileSync } from "fs";
+import { resolve } from "path";
+import solc from "solc";
+import { createPharosWalletClient, publicClient } from "../lib/pharosClient.js";
+// ─── Load .env ─────────────────────────────────────────────────────────
+function loadEnv() {
+    const envPath = resolve(process.cwd(), ".env");
+    const envFile = readFileSync(envPath, "utf-8");
+    const vars = {};
+    for (const line of envFile.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const eqIdx = trimmed.indexOf("=");
+        if (eqIdx === -1)
+            continue;
+        vars[trimmed.slice(0, eqIdx).trim()] = trimmed.slice(eqIdx + 1).trim();
+    }
+    return vars;
+}
+const env = loadEnv();
+const PRIVATE_KEY = env.PRIVATE_KEY;
+if (!PRIVATE_KEY) {
+    console.error("❌ PRIVATE_KEY not found in .env");
+    process.exit(1);
+}
+// ─── Compile ───────────────────────────────────────────────────────────
+console.log("📝 Compiling RiskRegistry.sol...");
+const contractPath = resolve(process.cwd(), "contracts", "RiskRegistry.sol");
+const source = readFileSync(contractPath, "utf-8");
+const input = JSON.stringify({
+    language: "Solidity",
+    sources: {
+        "RiskRegistry.sol": { content: source },
+    },
+    settings: {
+        outputSelection: {
+            "*": {
+                "*": ["abi", "evm.bytecode.object"],
+            },
+        },
+        optimizer: { enabled: true, runs: 200 },
+    },
+});
+const output = JSON.parse(solc.compile(input));
+if (output.errors) {
+    const errors = output.errors.filter((e) => e.severity === "error");
+    if (errors.length > 0) {
+        console.error("❌ Compilation errors:");
+        errors.forEach((e) => console.error(e.formattedMessage));
+        process.exit(1);
+    }
+}
+const contract = output.contracts["RiskRegistry.sol"]["RiskRegistry"];
+const abi = contract.abi;
+const bytecode = `0x${contract.evm.bytecode.object}`;
+console.log("✅ Compiled successfully");
+console.log(`   ABI: ${abi.length} functions/events`);
+console.log(`   Bytecode: ${bytecode.length} chars`);
+// Save ABI for reference
+const artifactPath = resolve(process.cwd(), "contracts", "RiskRegistry.json");
+writeFileSync(artifactPath, JSON.stringify({ abi, bytecode }, null, 2));
+console.log(`   Artifact saved: contracts/RiskRegistry.json`);
+// ─── Deploy ────────────────────────────────────────────────────────────
+console.log("\n🚀 Deploying to Pharos Atlantic Testnet...");
+const wallet = createPharosWalletClient(PRIVATE_KEY);
+const account = wallet.account;
+console.log(`   Deployer: ${account.address}`);
+const balance = await publicClient.getBalance({ address: account.address });
+console.log(`   Balance:  ${Number(balance) / 1e18} PHRS`);
+// Deploy using viem
+const hash = await wallet.deployContract({
+    abi,
+    bytecode,
+    args: [],
+});
+console.log(`   TX Hash:  ${hash}`);
+console.log("   Waiting for confirmation...");
+const receipt = await publicClient.waitForTransactionReceipt({ hash });
+if (receipt.status !== "success") {
+    console.error("❌ Deployment failed!");
+    process.exit(1);
+}
+const contractAddress = receipt.contractAddress;
+console.log(`\n✅ RiskRegistry deployed successfully!`);
+console.log(`   Contract: ${contractAddress}`);
+console.log(`   Block:    ${receipt.blockNumber}`);
+console.log(`   Gas Used: ${receipt.gasUsed}`);
+console.log(`   Explorer: https://atlantic.pharosscan.xyz/tx/${hash}`);
+// ─── Update .env ───────────────────────────────────────────────────────
+const envPath = resolve(process.cwd(), ".env");
+let envContent = readFileSync(envPath, "utf-8");
+// Remove old entry if exists
+envContent = envContent.replace(/\nRISK_REGISTRY_ADDRESS=.*/, "");
+envContent = envContent.trimEnd() + `\n\n# Risk Registry\nRISK_REGISTRY_ADDRESS=${contractAddress}\n`;
+writeFileSync(envPath, envContent);
+console.log(`\n📝 Updated .env with RISK_REGISTRY_ADDRESS=${contractAddress}`);
 //# sourceMappingURL=deployRegistry.js.map

package/dist/scripts/testRegistry.d.ts

@@ -1,2 +1,2 @@
-export {};
+export {};
 //# sourceMappingURL=testRegistry.d.ts.map

package/dist/scripts/testRegistry.js

@@ -1,44 +1,44 @@
-// ─── Quick test: RiskRegistry publish + query ──────────────────────────
-import { readFileSync } from "fs";
-import { resolve } from "path";
-import { handleAssessRisk } from "../tools/assessRisk.js";
-import { handleQueryRiskRegistry } from "../tools/queryRiskRegistry.js";
-function loadEnv() {
-    const envPath = resolve(process.cwd(), ".env");
-    const envFile = readFileSync(envPath, "utf-8");
-    const vars = {};
-    for (const line of envFile.split("\n")) {
-        const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith("#"))
-            continue;
-        const eqIdx = trimmed.indexOf("=");
-        if (eqIdx === -1)
-            continue;
-        vars[trimmed.slice(0, eqIdx).trim()] = trimmed.slice(eqIdx + 1).trim();
-    }
-    return vars;
-}
-const env = loadEnv();
-async function main() {
-    console.log("🧪 Testing RiskRegistry: assess + publish + query\n");
-    // 1. assess_risk WITH privateKey → auto-publishes
-    console.log("1️⃣  assess_risk with auto-publish...");
-    const assessment = await handleAssessRisk({
-        action: "swap",
-        tokenIn: "PHRS",
-        tokenOut: "USDC",
-        amount: "1",
-        walletAddress: env.WALLET_ADDRESS,
-        privateKey: env.PRIVATE_KEY,
-    });
-    console.log(JSON.stringify(assessment, null, 2));
-    // 2. query_risk_registry
-    console.log("\n2️⃣  query_risk_registry...");
-    const query = await handleQueryRiskRegistry({
-        walletAddress: env.WALLET_ADDRESS,
-    });
-    console.log(JSON.stringify(query, null, 2));
-    console.log("\n✅ RiskRegistry end-to-end test complete!");
-}
-main().catch(console.error);
+// ─── Quick test: RiskRegistry publish + query ──────────────────────────
+import { readFileSync } from "fs";
+import { resolve } from "path";
+import { handleAssessRisk } from "../tools/assessRisk.js";
+import { handleQueryRiskRegistry } from "../tools/queryRiskRegistry.js";
+function loadEnv() {
+    const envPath = resolve(process.cwd(), ".env");
+    const envFile = readFileSync(envPath, "utf-8");
+    const vars = {};
+    for (const line of envFile.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const eqIdx = trimmed.indexOf("=");
+        if (eqIdx === -1)
+            continue;
+        vars[trimmed.slice(0, eqIdx).trim()] = trimmed.slice(eqIdx + 1).trim();
+    }
+    return vars;
+}
+const env = loadEnv();
+async function main() {
+    console.log("🧪 Testing RiskRegistry: assess + publish + query\n");
+    // 1. assess_risk WITH privateKey → auto-publishes
+    console.log("1️⃣  assess_risk with auto-publish...");
+    const assessment = await handleAssessRisk({
+        action: "swap",
+        tokenIn: "PHRS",
+        tokenOut: "USDC",
+        amount: "1",
+        walletAddress: env.WALLET_ADDRESS,
+        privateKey: env.PRIVATE_KEY,
+    });
+    console.log(JSON.stringify(assessment, null, 2));
+    // 2. query_risk_registry
+    console.log("\n2️⃣  query_risk_registry...");
+    const query = await handleQueryRiskRegistry({
+        walletAddress: env.WALLET_ADDRESS,
+    });
+    console.log(JSON.stringify(query, null, 2));
+    console.log("\n✅ RiskRegistry end-to-end test complete!");
+}
+main().catch(console.error);
 //# sourceMappingURL=testRegistry.js.map