safehands-pharos 1.4.0 → 1.5.0

package/dist/tools/safehandsWalletHealth.js

@@ -1,104 +1,104 @@
-// ─── Tool: safehands_wallet_health ─────────────────────────────────────
-// Checks whether an AI agent wallet is ready for guarded testnet actions.
-// ───────────────────────────────────────────────────────────────────────
-import { z } from "zod";
-import { formatEther, formatUnits } from "viem";
-import { publicClient } from "../lib/pharosClient.js";
-import { ERC20_ABI, USDC_ADDRESS, CHAIN_ID, PHAROS_ENVIRONMENT, IS_MAINNET, MAX_X402_PAYMENT_USDC } from "../lib/constants.js";
-import { ok, classifyExternalError } from "../lib/toolResponse.js";
-import { getSigner, isSignerFailure } from "../lib/signer/index.js";
-import { walletStore } from "../lib/wallet/index.js";
-export const safehandsWalletHealthSchema = z.object({
-    agentId: z.string().optional().describe("Managed testnet wallet agentId"),
-    walletAddress: z.string().optional().describe("Explicit wallet address for read-only health checks"),
-});
-export async function handleSafeHandsWalletHealth(raw) {
-    const input = safehandsWalletHealthSchema.parse(raw);
-    const managedWallet = input.agentId ? await walletStore.get(input.agentId) : null;
-    const signer = await getSigner(input.agentId);
-    const signerAvailable = !isSignerFailure(signer);
-    const address = signerAvailable ? signer.address : (input.walletAddress || managedWallet?.address);
-    const base = {
-        environment: PHAROS_ENVIRONMENT,
-        chainId: CHAIN_ID,
-        isMainnet: IS_MAINNET,
-        walletMode: process.env.WALLET_MODE || "none",
-        writeToolsEnabled: process.env.WRITE_TOOLS_ENABLED === "true",
-        signerAvailable,
-        signerMode: signerAvailable ? signer.mode : null,
-        signerError: signerAvailable ? null : signer.error,
-        managedWalletExists: Boolean(managedWallet),
-        address: address || null,
-    };
-    if (!address) {
-        return ok({
-            ...base,
-            status: "NOT_READY",
-            readiness: {
-                canReadBalances: false,
-                canPayGas: false,
-                canPayX402: false,
-                canExecuteWrites: false,
-            },
-            requiredActions: ["Create a managed testnet wallet or provide WALLET_MODE=env with a testnet PRIVATE_KEY."],
-            source: "safehands_wallet_health",
-        });
-    }
-    try {
-        const [phrsRaw, usdcRaw] = await Promise.all([
-            publicClient.getBalance({ address: address }),
-            publicClient.readContract({
-                address: USDC_ADDRESS,
-                abi: ERC20_ABI,
-                functionName: "balanceOf",
-                args: [address],
-            }),
-        ]);
-        const phrs = formatEther(phrsRaw);
-        const usdc = formatUnits(usdcRaw, 6);
-        const canPayGas = parseFloat(phrs) > 0.001;
-        const canPayX402 = parseFloat(usdc) >= Number(MAX_X402_PAYMENT_USDC);
-        const canExecuteWrites = signerAvailable && canPayGas && process.env.WRITE_TOOLS_ENABLED === "true";
-        return ok({
-            ...base,
-            status: canExecuteWrites ? "READY" : signerAvailable ? "DEGRADED" : "NOT_READY",
-            balances: {
-                PHRS: { value: phrs, unit: "PHRS", decimals: 18 },
-                USDC: { value: usdc, unit: "USDC", decimals: 6, tokenAddress: USDC_ADDRESS },
-            },
-            readiness: {
-                canReadBalances: true,
-                canPayGas,
-                canPayX402,
-                canExecuteWrites,
-            },
-            dailySpendStatus: {
-                implemented: false,
-                note: "Daily spend accounting is config-ready but not persisted in this MVP.",
-            },
-            requiredActions: [
-                ...(canPayGas ? [] : ["Fund wallet with testnet PHRS for gas."]),
-                ...(canPayX402 ? [] : [`Fund wallet with at least ${MAX_X402_PAYMENT_USDC} testnet USDC for x402 payments.`]),
-                ...(process.env.WRITE_TOOLS_ENABLED === "true" ? [] : ["Set WRITE_TOOLS_ENABLED=true only when intentionally executing trusted testnet actions."]),
-            ],
-            source: "safehands_wallet_health",
-        });
-    }
-    catch (err) {
-        const rpc = classifyExternalError("pharos_rpc", err);
-        return ok({
-            ...base,
-            status: "DEGRADED",
-            readiness: {
-                canReadBalances: false,
-                canPayGas: "unknown",
-                canPayX402: "unknown",
-                canExecuteWrites: false,
-            },
-            rpcError: rpc.error,
-            requiredActions: ["Retry RPC balance checks later or configure PHAROS_RPC_URL."],
-            source: "safehands_wallet_health",
-        });
-    }
-}
+// ─── Tool: safehands_wallet_health ─────────────────────────────────────
+// Checks whether an AI agent wallet is ready for guarded testnet actions.
+// ───────────────────────────────────────────────────────────────────────
+import { z } from "zod";
+import { formatEther, formatUnits } from "viem";
+import { publicClient } from "../lib/pharosClient.js";
+import { ERC20_ABI, USDC_ADDRESS, CHAIN_ID, PHAROS_ENVIRONMENT, IS_MAINNET, MAX_X402_PAYMENT_USDC } from "../lib/constants.js";
+import { ok, classifyExternalError } from "../lib/toolResponse.js";
+import { getSigner, isSignerFailure } from "../lib/signer/index.js";
+import { walletStore } from "../lib/wallet/index.js";
+export const safehandsWalletHealthSchema = z.object({
+    agentId: z.string().optional().describe("Managed testnet wallet agentId"),
+    walletAddress: z.string().optional().describe("Explicit wallet address for read-only health checks"),
+});
+export async function handleSafeHandsWalletHealth(raw) {
+    const input = safehandsWalletHealthSchema.parse(raw);
+    const managedWallet = input.agentId ? await walletStore.get(input.agentId) : null;
+    const signer = await getSigner(input.agentId);
+    const signerAvailable = !isSignerFailure(signer);
+    const address = signerAvailable ? signer.address : (input.walletAddress || managedWallet?.address);
+    const base = {
+        environment: PHAROS_ENVIRONMENT,
+        chainId: CHAIN_ID,
+        isMainnet: IS_MAINNET,
+        walletMode: process.env.WALLET_MODE || "none",
+        writeToolsEnabled: process.env.WRITE_TOOLS_ENABLED === "true",
+        signerAvailable,
+        signerMode: signerAvailable ? signer.mode : null,
+        signerError: signerAvailable ? null : signer.error,
+        managedWalletExists: Boolean(managedWallet),
+        address: address || null,
+    };
+    if (!address) {
+        return ok({
+            ...base,
+            status: "NOT_READY",
+            readiness: {
+                canReadBalances: false,
+                canPayGas: false,
+                canPayX402: false,
+                canExecuteWrites: false,
+            },
+            requiredActions: ["Create a managed testnet wallet or provide WALLET_MODE=env with a testnet PRIVATE_KEY."],
+            source: "safehands_wallet_health",
+        });
+    }
+    try {
+        const [phrsRaw, usdcRaw] = await Promise.all([
+            publicClient.getBalance({ address: address }),
+            publicClient.readContract({
+                address: USDC_ADDRESS,
+                abi: ERC20_ABI,
+                functionName: "balanceOf",
+                args: [address],
+            }),
+        ]);
+        const phrs = formatEther(phrsRaw);
+        const usdc = formatUnits(usdcRaw, 6);
+        const canPayGas = parseFloat(phrs) > 0.001;
+        const canPayX402 = parseFloat(usdc) >= Number(MAX_X402_PAYMENT_USDC);
+        const canExecuteWrites = signerAvailable && canPayGas && process.env.WRITE_TOOLS_ENABLED === "true";
+        return ok({
+            ...base,
+            status: canExecuteWrites ? "READY" : signerAvailable ? "DEGRADED" : "NOT_READY",
+            balances: {
+                PHRS: { value: phrs, unit: "PHRS", decimals: 18 },
+                USDC: { value: usdc, unit: "USDC", decimals: 6, tokenAddress: USDC_ADDRESS },
+            },
+            readiness: {
+                canReadBalances: true,
+                canPayGas,
+                canPayX402,
+                canExecuteWrites,
+            },
+            dailySpendStatus: {
+                implemented: false,
+                note: "Daily spend accounting is config-ready but not persisted in this MVP.",
+            },
+            requiredActions: [
+                ...(canPayGas ? [] : ["Fund wallet with testnet PHRS for gas."]),
+                ...(canPayX402 ? [] : [`Fund wallet with at least ${MAX_X402_PAYMENT_USDC} testnet USDC for x402 payments.`]),
+                ...(process.env.WRITE_TOOLS_ENABLED === "true" ? [] : ["Set WRITE_TOOLS_ENABLED=true only when intentionally executing trusted testnet actions."]),
+            ],
+            source: "safehands_wallet_health",
+        });
+    }
+    catch (err) {
+        const rpc = classifyExternalError("pharos_rpc", err);
+        return ok({
+            ...base,
+            status: "DEGRADED",
+            readiness: {
+                canReadBalances: false,
+                canPayGas: "unknown",
+                canPayX402: "unknown",
+                canExecuteWrites: false,
+            },
+            rpcError: rpc.error,
+            requiredActions: ["Retry RPC balance checks later or configure PHAROS_RPC_URL."],
+            source: "safehands_wallet_health",
+        });
+    }
+}
 //# sourceMappingURL=safehandsWalletHealth.js.map

package/dist/tools/safehandsX402Preflight.d.ts

@@ -1,27 +1,27 @@
-import { z } from "zod";
-import { type ToolResponse } from "../lib/toolResponse.js";
-export declare const safehandsX402PreflightSchema: z.ZodObject<{
-    url: z.ZodString;
-    method: z.ZodDefault<z.ZodOptional<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>>>;
-    paymentAmountUsdc: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-    paymentTokenAddress: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-    agentId: z.ZodOptional<z.ZodString>;
-    probeEndpoint: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-}, "strip", z.ZodTypeAny, {
-    url: string;
-    paymentAmountUsdc: string;
-    paymentTokenAddress: string;
-    method: "GET" | "POST" | "PUT" | "DELETE";
-    probeEndpoint: boolean;
-    agentId?: string | undefined;
-}, {
-    url: string;
-    paymentAmountUsdc?: string | undefined;
-    paymentTokenAddress?: string | undefined;
-    method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
-    agentId?: string | undefined;
-    probeEndpoint?: boolean | undefined;
-}>;
-export type SafeHandsX402PreflightInput = z.input<typeof safehandsX402PreflightSchema>;
-export declare function handleSafeHandsX402Preflight(raw: SafeHandsX402PreflightInput): Promise<ToolResponse<unknown>>;
+import { z } from "zod";
+import { type ToolResponse } from "../lib/toolResponse.js";
+export declare const safehandsX402PreflightSchema: z.ZodObject<{
+    url: z.ZodString;
+    method: z.ZodDefault<z.ZodOptional<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>>>;
+    paymentAmountUsdc: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    paymentTokenAddress: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    agentId: z.ZodOptional<z.ZodString>;
+    probeEndpoint: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    paymentAmountUsdc: string;
+    paymentTokenAddress: string;
+    method: "GET" | "POST" | "PUT" | "DELETE";
+    probeEndpoint: boolean;
+    agentId?: string | undefined;
+}, {
+    url: string;
+    paymentAmountUsdc?: string | undefined;
+    paymentTokenAddress?: string | undefined;
+    method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
+    agentId?: string | undefined;
+    probeEndpoint?: boolean | undefined;
+}>;
+export type SafeHandsX402PreflightInput = z.input<typeof safehandsX402PreflightSchema>;
+export declare function handleSafeHandsX402Preflight(raw: SafeHandsX402PreflightInput): Promise<ToolResponse<unknown>>;
 //# sourceMappingURL=safehandsX402Preflight.d.ts.map

package/dist/tools/safehandsX402Preflight.js

@@ -1,66 +1,66 @@
-// ─── Tool: safehands_x402_preflight ────────────────────────────────────
-// Checks whether an x402 paid resource is safe before payment signing.
-// ───────────────────────────────────────────────────────────────────────
-import { z } from "zod";
-import { ok, fail } from "../lib/toolResponse.js";
-import { assertSafeFetchUrl, fetchWithTimeoutAndRetry } from "../lib/http.js";
-import { CHAIN_ID, PHAROS_ENVIRONMENT, MAX_X402_PAYMENT_USDC, X402_PAYMENT_TOKEN_ADDRESS } from "../lib/constants.js";
-import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
-import { getSigner, isSignerFailure } from "../lib/signer/index.js";
-export const safehandsX402PreflightSchema = z.object({
-    url: z.string(),
-    method: z.enum(["GET", "POST", "PUT", "DELETE"]).optional().default("GET"),
-    paymentAmountUsdc: z.string().optional().default("0.001"),
-    paymentTokenAddress: z.string().optional().default(X402_PAYMENT_TOKEN_ADDRESS),
-    agentId: z.string().optional(),
-    probeEndpoint: z.boolean().optional().default(false),
-});
-export async function handleSafeHandsX402Preflight(raw) {
-    const input = safehandsX402PreflightSchema.parse(raw);
-    try {
-        await assertSafeFetchUrl(input.url);
-    }
-    catch (err) {
-        return fail("SSRF_BLOCKED", err instanceof Error ? err.message.replace(/^SSRF_BLOCKED:\s*/, "") : String(err), false, "safehands_x402_preflight");
-    }
-    let detectedStatus = null;
-    let paymentRequired = "unknown";
-    if (input.probeEndpoint) {
-        try {
-            const res = await fetchWithTimeoutAndRetry(input.url, { method: input.method, timeoutMs: 7_500, retries: 0 });
-            detectedStatus = res.status;
-            paymentRequired = res.status === 402;
-        }
-        catch {
-            paymentRequired = "unknown";
-        }
-    }
-    const signer = await getSigner(input.agentId, { purpose: "x402" });
-    const signerAvailable = !isSignerFailure(signer);
-    const policy = evaluateActionPolicy({
-        actionType: "x402_pay_and_fetch",
-        url: input.url,
-        paymentAmountUsdc: input.paymentAmountUsdc,
-        paymentTokenAddress: input.paymentTokenAddress,
-        signerAvailable,
-        requiresSigner: paymentRequired === true,
-        chainId: CHAIN_ID,
-        environment: PHAROS_ENVIRONMENT,
-        isMainnet: false,
-    });
-    return ok({
-        ...policy,
-        url: input.url,
-        method: input.method,
-        paymentAmountUsdc: input.paymentAmountUsdc,
-        maxPaymentUsdc: MAX_X402_PAYMENT_USDC,
-        paymentTokenAddress: input.paymentTokenAddress,
-        signerAvailable,
-        signerMode: signerAvailable ? signer.mode : null,
-        signerError: signerAvailable ? null : signer.error,
-        probe: { enabled: input.probeEndpoint, status: detectedStatus, paymentRequired },
-        testnetPayment: true,
-        source: "safehands_x402_preflight",
-    });
-}
+// ─── Tool: safehands_x402_preflight ────────────────────────────────────
+// Checks whether an x402 paid resource is safe before payment signing.
+// ───────────────────────────────────────────────────────────────────────
+import { z } from "zod";
+import { ok, fail } from "../lib/toolResponse.js";
+import { assertSafeFetchUrl, fetchWithTimeoutAndRetry } from "../lib/http.js";
+import { CHAIN_ID, PHAROS_ENVIRONMENT, MAX_X402_PAYMENT_USDC, X402_PAYMENT_TOKEN_ADDRESS } from "../lib/constants.js";
+import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
+import { getSigner, isSignerFailure } from "../lib/signer/index.js";
+export const safehandsX402PreflightSchema = z.object({
+    url: z.string(),
+    method: z.enum(["GET", "POST", "PUT", "DELETE"]).optional().default("GET"),
+    paymentAmountUsdc: z.string().optional().default("0.001"),
+    paymentTokenAddress: z.string().optional().default(X402_PAYMENT_TOKEN_ADDRESS),
+    agentId: z.string().optional(),
+    probeEndpoint: z.boolean().optional().default(false),
+});
+export async function handleSafeHandsX402Preflight(raw) {
+    const input = safehandsX402PreflightSchema.parse(raw);
+    try {
+        await assertSafeFetchUrl(input.url);
+    }
+    catch (err) {
+        return fail("SSRF_BLOCKED", err instanceof Error ? err.message.replace(/^SSRF_BLOCKED:\s*/, "") : String(err), false, "safehands_x402_preflight");
+    }
+    let detectedStatus = null;
+    let paymentRequired = "unknown";
+    if (input.probeEndpoint) {
+        try {
+            const res = await fetchWithTimeoutAndRetry(input.url, { method: input.method, timeoutMs: 7_500, retries: 0 });
+            detectedStatus = res.status;
+            paymentRequired = res.status === 402;
+        }
+        catch {
+            paymentRequired = "unknown";
+        }
+    }
+    const signer = await getSigner(input.agentId, { purpose: "x402" });
+    const signerAvailable = !isSignerFailure(signer);
+    const policy = evaluateActionPolicy({
+        actionType: "x402_pay_and_fetch",
+        url: input.url,
+        paymentAmountUsdc: input.paymentAmountUsdc,
+        paymentTokenAddress: input.paymentTokenAddress,
+        signerAvailable,
+        requiresSigner: paymentRequired === true,
+        chainId: CHAIN_ID,
+        environment: PHAROS_ENVIRONMENT,
+        isMainnet: false,
+    });
+    return ok({
+        ...policy,
+        url: input.url,
+        method: input.method,
+        paymentAmountUsdc: input.paymentAmountUsdc,
+        maxPaymentUsdc: MAX_X402_PAYMENT_USDC,
+        paymentTokenAddress: input.paymentTokenAddress,
+        signerAvailable,
+        signerMode: signerAvailable ? signer.mode : null,
+        signerError: signerAvailable ? null : signer.error,
+        probe: { enabled: input.probeEndpoint, status: detectedStatus, paymentRequired },
+        testnetPayment: true,
+        source: "safehands_x402_preflight",
+    });
+}
 //# sourceMappingURL=safehandsX402Preflight.js.map

package/dist/tools/sendPayment.d.ts

@@ -1,58 +1,58 @@
-import { z } from "zod";
-export declare const sendPaymentSchema: z.ZodObject<{
-    toAddress: z.ZodString;
-    amount: z.ZodString;
-    memo: z.ZodOptional<z.ZodString>;
-    agentId: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    amount: string;
-    toAddress: string;
-    agentId?: string | undefined;
-    memo?: string | undefined;
-}, {
-    amount: string;
-    toAddress: string;
-    agentId?: string | undefined;
-    memo?: string | undefined;
-}>;
-export type SendPaymentInput = z.input<typeof sendPaymentSchema>;
-export declare const sendPaymentTool: {
-    name: string;
-    description: string;
-    inputSchema: z.ZodObject<{
-        toAddress: z.ZodString;
-        amount: z.ZodString;
-        memo: z.ZodOptional<z.ZodString>;
-        agentId: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        amount: string;
-        toAddress: string;
-        agentId?: string | undefined;
-        memo?: string | undefined;
-    }, {
-        amount: string;
-        toAddress: string;
-        agentId?: string | undefined;
-        memo?: string | undefined;
-    }>;
-};
-export declare function handleSendPayment(raw: SendPaymentInput): Promise<import("../lib/toolResponse.js").ToolFailure | import("../lib/toolResponse.js").ToolSuccess<{
-    txHash: `0x${string}`;
-    explorerUrl: string;
-    amountSent: string;
-    signerMode: import("../lib/signer/index.js").SignerMode;
-    walletAddress: `0x${string}`;
-    gasUsed: string;
-    validation: {
-        addressValid: boolean;
-        balanceSufficient: boolean;
-        warnings: string[];
-    };
-    policy: import("../lib/policy/actionPolicyEngine.js").ActionPolicyResult;
-    riskAssessment: {
-        riskScore: number;
-        wasBlocked: boolean;
-    };
-    source: string;
-}>>;
+import { z } from "zod";
+export declare const sendPaymentSchema: z.ZodObject<{
+    toAddress: z.ZodString;
+    amount: z.ZodString;
+    memo: z.ZodOptional<z.ZodString>;
+    agentId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    amount: string;
+    toAddress: string;
+    agentId?: string | undefined;
+    memo?: string | undefined;
+}, {
+    amount: string;
+    toAddress: string;
+    agentId?: string | undefined;
+    memo?: string | undefined;
+}>;
+export type SendPaymentInput = z.input<typeof sendPaymentSchema>;
+export declare const sendPaymentTool: {
+    name: string;
+    description: string;
+    inputSchema: z.ZodObject<{
+        toAddress: z.ZodString;
+        amount: z.ZodString;
+        memo: z.ZodOptional<z.ZodString>;
+        agentId: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        amount: string;
+        toAddress: string;
+        agentId?: string | undefined;
+        memo?: string | undefined;
+    }, {
+        amount: string;
+        toAddress: string;
+        agentId?: string | undefined;
+        memo?: string | undefined;
+    }>;
+};
+export declare function handleSendPayment(raw: SendPaymentInput): Promise<import("../lib/toolResponse.js").ToolFailure | import("../lib/toolResponse.js").ToolSuccess<{
+    txHash: `0x${string}`;
+    explorerUrl: string;
+    amountSent: string;
+    signerMode: import("../lib/signer/index.js").SignerMode;
+    walletAddress: `0x${string}`;
+    gasUsed: string;
+    validation: {
+        addressValid: boolean;
+        balanceSufficient: boolean;
+        warnings: string[];
+    };
+    policy: import("../lib/policy/actionPolicyEngine.js").ActionPolicyResult;
+    riskAssessment: {
+        riskScore: number;
+        wasBlocked: boolean;
+    };
+    source: string;
+}>>;
 //# sourceMappingURL=sendPayment.d.ts.map