safehands-pharos 1.4.0 → 2.6.0

package/dist/lib/ecosystemRegistry.js

@@ -0,0 +1,178 @@
+// ─── SafeHands Canonical Ecosystem Registry (types + validation) ────────
+// The single machine-readable source of truth for repo-bundled ecosystem
+// knowledge: canonical contracts, canonical tokens, price feeds, the SafeHands
+// on-chain contracts, provider endpoints, and known-but-unverified protocols.
+//
+// Truth-model rules enforced here (see docs/DECISION_CONTRACT.md §Evidence):
+//   • `safetyUse: "allow_eligible"` — the ONLY safetyUse that may contribute to
+//     an ALLOW — requires verificationStatus VERIFIED, at least one verified
+//     contract address, and at least one cited evidence source. Enforced by
+//     validateEcosystemRegistry(), not convention.
+//   • Name/alias matches are recognition only: an alias match without an
+//     address match must never relax risk.
+//   • `endpoint: null` is a first-class honest value meaning NOT_CONFIGURED —
+//     generators and consumers must never fill it in.
+//   • KNOWN_ECOSYSTEM (the name is real in the Pharos ecosystem) is deliberately
+//     distinct from verificationStatus VERIFIED (SafeHands holds evidence).
+//
+// Provider *awareness* entries (CCIP, LayerZero, Fordefi, …) stay in
+// src/lib/pharos/ecosystem.ts — they carry no bundled addresses/endpoints and
+// are not part of this registry. The Anvita hosted-skill asset JSONs are
+// GENERATED from this registry by scripts/sync-anvita-assets.ts.
+// ─────────────────────────────────────────────────────────────────────────
+import { ECOSYSTEM_REGISTRY_ITEMS } from "../data/ecosystemRegistry.data.js";
+/** The canonical registry (see src/data/ecosystemRegistry.data.ts). */
+export const ECOSYSTEM_REGISTRY = ECOSYSTEM_REGISTRY_ITEMS;
+const ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
+/**
+ * Validate the registry against the fail-closed truth-model rules. Returns a
+ * list of human-readable violations (empty = valid). Enforced by tests so a
+ * registry edit that weakens the rules fails CI.
+ */
+export function validateEcosystemRegistry(items = ECOSYSTEM_REGISTRY) {
+    const errors = [];
+    const seenIds = new Set();
+    for (const item of items) {
+        const at = `item "${item.id}"`;
+        if (seenIds.has(item.id))
+            errors.push(`${at}: duplicate id.`);
+        seenIds.add(item.id);
+        if (!item.name.trim())
+            errors.push(`${at}: empty name.`);
+        for (const c of item.contracts) {
+            if (!ADDRESS_RE.test(c.address))
+                errors.push(`${at}: invalid contract address "${c.address}".`);
+            if (!c.label.trim())
+                errors.push(`${at}: contract ${c.address} has an empty label.`);
+        }
+        const addrs = item.contracts.map((c) => c.address.toLowerCase());
+        if (new Set(addrs).size !== addrs.length)
+            errors.push(`${at}: duplicate contract addresses.`);
+        // VERIFIED requires citations — an uncited entry is a claim, not truth.
+        if (item.verificationStatus === "VERIFIED" && item.evidenceSources.length === 0) {
+            errors.push(`${at}: verificationStatus VERIFIED requires at least one evidence source.`);
+        }
+        // allow_eligible is the only safetyUse that can contribute to ALLOW — gate it hard.
+        if (item.safetyUse === "allow_eligible") {
+            if (item.verificationStatus !== "VERIFIED") {
+                errors.push(`${at}: allow_eligible requires verificationStatus VERIFIED (got ${item.verificationStatus}).`);
+            }
+            if (item.ecosystemStatus !== "VERIFIED") {
+                errors.push(`${at}: allow_eligible requires ecosystemStatus VERIFIED (got ${item.ecosystemStatus}).`);
+            }
+            if (item.contracts.length === 0) {
+                errors.push(`${at}: allow_eligible requires at least one contract address (name alone must never produce ALLOW).`);
+            }
+            if (item.contracts.some((c) => c.verificationStatus !== "VERIFIED")) {
+                errors.push(`${at}: allow_eligible requires every contract to be VERIFIED.`);
+            }
+            if (item.evidenceSources.length === 0) {
+                errors.push(`${at}: allow_eligible requires cited evidence sources.`);
+            }
+        }
+        for (const p of item.providers) {
+            if (p.endpoint === null && p.status !== "not_configured" && p.status !== "not_implemented") {
+                // price_feed/rpc-style providers whose "endpoint" is on-chain or env-only are
+                // allowed to be implemented without a URL, but must say so via configVia/note.
+                const onChainOrEnv = p.kind === "price_feed" || p.configVia !== null;
+                if (!onChainOrEnv) {
+                    errors.push(`${at}: provider kind=${p.kind} has no endpoint but claims status "${p.status}"; must be not_configured/not_implemented, or document configVia.`);
+                }
+            }
+            if (p.endpoint !== null && !p.endpoint.startsWith("https://")) {
+                errors.push(`${at}: provider kind=${p.kind} endpoint must be https (got "${p.endpoint}").`);
+            }
+        }
+        if (item.ecosystemStatus === "NOT_CONFIGURED") {
+            if (item.providers.length === 0 || item.providers.some((p) => p.endpoint !== null)) {
+                errors.push(`${at}: NOT_CONFIGURED requires providers with null endpoints only.`);
+            }
+            if (item.safetyUse === "allow_eligible") {
+                errors.push(`${at}: NOT_CONFIGURED can never be allow_eligible.`);
+            }
+        }
+        if (item.ecosystemStatus === "KNOWN_ECOSYSTEM" && item.safetyUse === "allow_eligible") {
+            errors.push(`${at}: KNOWN_ECOSYSTEM (name recognition) can never be allow_eligible: knowing a name is not holding proof.`);
+        }
+    }
+    return errors;
+}
+const ADDRESS_INDEX = (() => {
+    const m = new Map();
+    for (const item of ECOSYSTEM_REGISTRY) {
+        for (const contract of item.contracts) {
+            m.set(contract.address.toLowerCase(), { item, contract });
+        }
+    }
+    return m;
+})();
+/** Address-matched lookup — the only lookup that may feed allow_eligible handling. */
+export function lookupRegistryByAddress(address) {
+    if (!address)
+        return undefined;
+    return ADDRESS_INDEX.get(address.trim().toLowerCase());
+}
+const NO_TRUST = {
+    recognized: false,
+    verifiedCanonical: false,
+    itemId: null,
+    itemName: null,
+    contractLabel: null,
+    safetyUse: null,
+    verificationStatus: null,
+    registryChainId: null,
+    note: null,
+};
+/**
+ * Registry-driven trust evaluation for a single address on a given chain.
+ * This is the ONLY sanctioned way for risk logic to derive spender/counterparty
+ * trust: hardcoded "known address" maps outside the registry are forbidden
+ * (truth-model rule: do not upgrade anything to VERIFIED without evidence).
+ * An address registered for a different chainId gets NO recognition — testnet
+ * provenance never carries to mainnet.
+ */
+export function addressTrustEvidence(address, chainId) {
+    const hit = lookupRegistryByAddress(address);
+    if (!hit)
+        return NO_TRUST;
+    const base = {
+        itemId: hit.item.id,
+        itemName: hit.item.name,
+        contractLabel: hit.contract.label,
+        safetyUse: hit.item.safetyUse,
+        verificationStatus: hit.item.verificationStatus,
+        registryChainId: hit.item.chainId,
+    };
+    const chainMatches = hit.item.chainId === null || hit.item.chainId === chainId;
+    if (!chainMatches) {
+        return {
+            ...NO_TRUST,
+            ...base,
+            note: `Address matches registry entry "${hit.contract.label}" registered for chainId ${hit.item.chainId}, not the active chain ${chainId}; recognition does not carry across chains.`,
+        };
+    }
+    return {
+        ...base,
+        recognized: true,
+        verifiedCanonical: hit.item.safetyUse === "allow_eligible" &&
+            hit.item.verificationStatus === "VERIFIED" &&
+            hit.contract.verificationStatus === "VERIFIED",
+        note: hit.contract.note ?? null,
+    };
+}
+/**
+ * Name/alias lookup — recognition only. A name match carries NO address
+ * verification and must never relax a decision, regardless of the item's
+ * safetyUse (which applies to address-matched evidence only).
+ */
+export function lookupRegistryByName(name) {
+    const q = (name ?? "").trim().toLowerCase();
+    if (!q)
+        return undefined;
+    return ECOSYSTEM_REGISTRY.find((item) => item.name.toLowerCase() === q || item.aliases.some((a) => a.toLowerCase() === q));
+}
+/** Registry item by stable id. */
+export function getRegistryItem(id) {
+    return ECOSYSTEM_REGISTRY.find((item) => item.id === id);
+}
+//# sourceMappingURL=ecosystemRegistry.js.map

package/dist/lib/ecosystemRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecosystemRegistry.js","sourceRoot":"","sources":["../../src/lib/ecosystemRegistry.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yEAAyE;AACzE,+EAA+E;AAC/E,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,6EAA6E;AAC7E,4EAA4E;AAC5E,mDAAmD;AACnD,yEAAyE;AACzE,2CAA2C;AAC3C,8EAA8E;AAC9E,sDAAsD;AACtD,iFAAiF;AACjF,4EAA4E;AAC5E,EAAE;AACF,qEAAqE;AACrE,8EAA8E;AAC9E,yEAAyE;AACzE,iEAAiE;AACjE,4EAA4E;AAE5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAmG7E,uEAAuE;AACvE,MAAM,CAAC,MAAM,kBAAkB,GAA6B,wBAAwB,CAAC;AAErF,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAEzC;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAkC,kBAAkB;IAC5F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,SAAS,IAAI,CAAC,EAAE,GAAG,CAAC;QAE/B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAEzD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;YAChG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,OAAO,sBAAsB,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACjE,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;QAE9F,wEAAwE;QACxE,IAAI,IAAI,CAAC,kBAAkB,KAAK,UAAU,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,sEAAsE,CAAC,CAAC;QAC3F,CAAC;QAED,oFAAoF;QACpF,IAAI,IAAI,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,8DAA8D,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC;YAC9G,CAAC;YACD,IAAI,IAAI,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,2DAA2D,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,gGAAgG,CAAC,CAAC;YACrH,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,UAAU,CAAC,EAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,0DAA0D,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBAC3F,8EAA8E;gBAC9E,+EAA+E;gBAC/E,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC;gBACrE,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,IAAI,uCAAuC,CAAC,CAAC,MAAM,mEAAmE,CAAC,CAAC;gBAChK,CAAC;YACH,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,IAAI,iCAAiC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,KAAK,gBAAgB,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;gBACnF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,+DAA+D,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,KAAK,iBAAiB,IAAI,IAAI,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,wGAAwG,CAAC,CAAC;QAC7H,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD,MAAM,aAAa,GAAqC,CAAC,GAAG,EAAE;IAC5D,MAAM,CAAC,GAAG,IAAI,GAAG,EAA+B,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC,EAAE,CAAC;AAEL,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACzD,CAAC;AAoBD,MAAM,QAAQ,GAAyB;IACrC,UAAU,EAAE,KAAK;IACjB,iBAAiB,EAAE,KAAK;IACxB,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;IACnB,SAAS,EAAE,IAAI;IACf,kBAAkB,EAAE,IAAI;IACxB,eAAe,EAAE,IAAI;IACrB,IAAI,EAAE,IAAI;CACX,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,OAAe;IACnE,MAAM,GAAG,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,IAAI,GAAG;QACX,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;QACnB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;QACvB,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK;QACjC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS;QAC7B,kBAAkB,EAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB;QAC/C,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;KAClC,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC;IAC/E,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,GAAG,QAAQ;YACX,GAAG,IAAI;YACP,IAAI,EAAE,mCAAmC,GAAG,CAAC,QAAQ,CAAC,KAAK,4BAA4B,GAAG,CAAC,IAAI,CAAC,OAAO,0BAA0B,OAAO,6CAA6C;SACtL,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE,IAAI;QAChB,iBAAiB,EACf,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,gBAAgB;YACvC,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,UAAU;YAC1C,GAAG,CAAC,QAAQ,CAAC,kBAAkB,KAAK,UAAU;QAChD,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI;KAChC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,kBAAkB,CAAC,IAAI,CAC5B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC"}

package/dist/lib/envLoader.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=envLoader.d.ts.map

package/dist/lib/envLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envLoader.d.ts","sourceRoot":"","sources":["../../src/lib/envLoader.ts"],"names":[],"mappings":""}

package/dist/lib/envLoader.js

@@ -0,0 +1,65 @@
+// Synchronously load .env from cwd before any other module reads process.env.
+// Must be imported as the very first import in index.ts so that wallet store,
+// constants, and other modules that read env vars at module-init time see the values.
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
+import { join, resolve, dirname } from "path";
+import { randomBytes } from "crypto";
+// 1. Load .env
+try {
+    const text = readFileSync(join(process.cwd(), ".env"), "utf-8");
+    for (const line of text.split(/\r?\n/)) {
+        const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/);
+        if (m && m[1] && !process.env[m[1]]) {
+            // Strip surrounding quotes if present
+            process.env[m[1]] = m[2].replace(/^(['"])(.*)\1$/, "$2");
+        }
+    }
+}
+catch {
+    // No .env file — environment vars must be set externally (CI, shell, MCP host)
+}
+// 1b. Backward-compatible env aliases for the full hosted deployment template.
+// Keep old variable names working while letting .env.example use clearer SAFEHANDS_* names.
+const aliases = [
+    ["SAFEHANDS_ENABLE_MANAGED_WALLET", "MANAGED_WALLET_ENABLED"],
+    ["SAFEHANDS_WALLET_ENCRYPTION_KEY", "WALLET_ENCRYPTION_KEY"],
+    ["SAFEHANDS_REGISTRY_ADDRESS", "SAFEHANDS_RISK_REGISTRY_ADDRESS"],
+    ["PHAROS_PACIFIC_RPC_URL", "PHAROS_RPC_URL"],
+];
+for (const [from, to] of aliases) {
+    if (process.env[from] && !process.env[to])
+        process.env[to] = process.env[from];
+}
+// 2. Demo mode now uses mainnet-first default as well.
+if (process.argv.includes("--demo") && !process.env.SAFEHANDS_NETWORK) {
+    process.env.SAFEHANDS_NETWORK = "pacific-mainnet";
+}
+// 3. Auto-resolve wallet persistence ONLY when managed wallets are explicitly
+//    enabled (WALLET_MODE=managed-mainnet AND MANAGED_WALLET_ENABLED=true), so
+//    managed wallets survive restarts. Read-only / preflight / hosted modes must
+//    never create .agents/wallets.json or .agents/.key just by importing modules
+//    (no key material on disk until managed wallets are actually enabled).
+if ((process.env.WALLET_MODE || "none") === "managed-mainnet" && process.env.MANAGED_WALLET_ENABLED === "true") {
+    if (!process.env.WALLET_STORE_PATH) {
+        process.env.WALLET_STORE_PATH = "./.agents/wallets.json";
+    }
+    if (!process.env.WALLET_ENCRYPTION_KEY) {
+        const storePath = resolve(process.cwd(), process.env.WALLET_STORE_PATH);
+        const keyPath = join(dirname(storePath), ".key");
+        try {
+            if (existsSync(keyPath)) {
+                process.env.WALLET_ENCRYPTION_KEY = readFileSync(keyPath, "utf-8").trim();
+            }
+            else {
+                mkdirSync(dirname(keyPath), { recursive: true });
+                const key = randomBytes(32).toString("hex");
+                writeFileSync(keyPath, key, { mode: 0o600 });
+                process.env.WALLET_ENCRYPTION_KEY = key;
+            }
+        }
+        catch {
+            // File ops failed (read-only FS, permission error) — fall back to in-memory behavior
+        }
+    }
+}
+//# sourceMappingURL=envLoader.js.map

package/dist/lib/envLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envLoader.js","sourceRoot":"","sources":["../../src/lib/envLoader.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,sFAAsF;AACtF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,eAAe;AACf,IAAI,CAAC;IACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,+EAA+E;AACjF,CAAC;AAGD,+EAA+E;AAC/E,4FAA4F;AAC5F,MAAM,OAAO,GAA4B;IACvC,CAAC,iCAAiC,EAAE,wBAAwB,CAAC;IAC7D,CAAC,iCAAiC,EAAE,uBAAuB,CAAC;IAC5D,CAAC,4BAA4B,EAAE,iCAAiC,CAAC;IACjE,CAAC,wBAAwB,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AACF,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,uDAAuD;AACvD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;AACpD,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,iFAAiF;AACjF,iFAAiF;AACjF,2EAA2E;AAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM,EAAE,CAAC;IAC/G,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,wBAAwB,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC5C,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,GAAG,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;QACvF,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/goldsky.d.ts

@@ -0,0 +1,58 @@
+export interface GoldskyConfigStatus {
+    enabled: boolean;
+    configured: boolean;
+    endpointHost: string | null;
+    maxQueryLength: number;
+    timeoutMs: number;
+    allowedHosts: string[];
+    error?: string;
+}
+export interface IndexedAttestationRecord {
+    id?: string;
+    txHash?: string;
+    preparedTransactionHash?: string;
+    chainId?: string | number;
+    actionType?: string;
+    policyHash?: string;
+    metadataHash?: string;
+    agent?: string;
+    attester?: string;
+    blockNumber?: string | number;
+    blockTimestamp?: string | number;
+    transactionHash?: string;
+    raw: Record<string, unknown>;
+}
+export interface GoldskyLookupResult<T> {
+    source: "goldsky";
+    configured: boolean;
+    indexed: boolean;
+    entity: string | null;
+    endpointHost: string | null;
+    record: T | null;
+    triedEntities: string[];
+    errors: string[];
+}
+export interface OnchainAttestationLookup {
+    source: "contract";
+    configured: boolean;
+    onchainVerified: boolean;
+    address: string | null;
+    record: Record<string, unknown> | null;
+    error?: string;
+}
+export interface IndexedRiskRootRecord {
+    id?: string;
+    root?: string;
+    dataURI?: string;
+    operator?: string;
+    blockNumber?: string | number;
+    blockTimestamp?: string | number;
+    transactionHash?: string;
+    raw: Record<string, unknown>;
+}
+export declare function goldskyStatus(): GoldskyConfigStatus;
+export declare function goldskyGraphql<T = any>(query: string, variables?: Record<string, unknown>): Promise<T>;
+export declare function lookupAttestationInGoldsky(txHash: string): Promise<GoldskyLookupResult<IndexedAttestationRecord>>;
+export declare function lookupLatestRiskRootInGoldsky(): Promise<GoldskyLookupResult<IndexedRiskRootRecord>>;
+export declare function lookupAttestationOnchain(txHash: string): Promise<OnchainAttestationLookup>;
+//# sourceMappingURL=goldsky.d.ts.map

package/dist/lib/goldsky.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goldsky.d.ts","sourceRoot":"","sources":["../../src/lib/goldsky.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AA6ED,wBAAgB,aAAa,IAAI,mBAAmB,CAanD;AAgBD,wBAAsB,cAAc,CAAC,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAyBhH;AA6CD,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,CAAC,CAiCvH;AAED,wBAAsB,6BAA6B,IAAI,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CA8BzG;AAiBD,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAuBhG"}

package/dist/lib/goldsky.js

@@ -0,0 +1,275 @@
+import { createPublicClient, defineChain, http, isAddress, parseAbi } from "viem";
+import { fetchWithTimeoutAndRetry } from "./http.js";
+import { getActiveNetwork, resolveRpcUrl } from "./networks.js";
+import { resolveSafeHandsAttestationAddress } from "./constants.js";
+const ATTESTATION_ABI = parseAbi([
+    "function isAttested(bytes32 txHash) view returns (bool)",
+    "function getAttestation(bytes32 txHash) view returns ((bytes32 preparedTransactionHash, bytes32 txHash, uint256 chainId, bytes32 actionType, bytes32 policyHash, bytes32 metadataHash, address agent, address attester, uint64 timestamp))",
+    "function reputationOf(address agent) view returns (uint256 verifiedCount, uint64 lastAt)",
+]);
+function boolEnv(name, defaultValue = false) {
+    const raw = process.env[name];
+    if (raw === undefined || raw === "")
+        return defaultValue;
+    return raw === "true" || raw === "1" || raw.toLowerCase() === "yes";
+}
+function maxQueryLength() {
+    const raw = Number(process.env.GOLDSKY_MAX_QUERY_LENGTH || 8_000);
+    return Number.isFinite(raw) && raw > 0 ? raw : 8_000;
+}
+function timeoutMs() {
+    const raw = Number(process.env.GOLDSKY_TIMEOUT_MS || 10_000);
+    return Number.isFinite(raw) && raw > 0 ? raw : 10_000;
+}
+function configuredEndpoint() {
+    return process.env.GOLDSKY_SUBGRAPH_URL?.trim() || null;
+}
+function allowedHosts() {
+    return (process.env.GOLDSKY_ALLOWED_HOSTS || "")
+        .split(",")
+        .map((v) => v.trim().toLowerCase())
+        .filter(Boolean);
+}
+function endpointHost(endpoint) {
+    if (!endpoint)
+        return null;
+    try {
+        return new URL(endpoint).host;
+    }
+    catch {
+        return null;
+    }
+}
+function validateEndpoint(endpoint) {
+    let url;
+    try {
+        url = new URL(endpoint);
+    }
+    catch {
+        return "GOLDSKY_SUBGRAPH_URL is not a valid URL.";
+    }
+    if (url.protocol !== "https:" && !boolEnv("GOLDSKY_ALLOW_INSECURE_HTTP", false)) {
+        return "GOLDSKY_SUBGRAPH_URL must use https:// unless GOLDSKY_ALLOW_INSECURE_HTTP=true is set for local development.";
+    }
+    const host = url.hostname.toLowerCase();
+    const privateHost = host === "localhost" ||
+        host === "127.0.0.1" ||
+        host === "0.0.0.0" ||
+        host === "::1" ||
+        host.startsWith("10.") ||
+        host.startsWith("192.168.") ||
+        /^172\.(1[6-9]|2\d|3[01])\./.test(host);
+    if (privateHost && !boolEnv("GOLDSKY_ALLOW_PRIVATE_HOSTS", false)) {
+        return "GOLDSKY_SUBGRAPH_URL points to a private/local host. Set GOLDSKY_ALLOW_PRIVATE_HOSTS=true only for local development.";
+    }
+    const hosts = allowedHosts();
+    if (hosts.length > 0 && !hosts.includes(url.host.toLowerCase()) && !hosts.includes(host)) {
+        return `GOLDSKY_SUBGRAPH_URL host ${url.host} is not in GOLDSKY_ALLOWED_HOSTS.`;
+    }
+    return null;
+}
+export function goldskyStatus() {
+    const endpoint = configuredEndpoint();
+    const enabled = boolEnv("GOLDSKY_ENABLED", Boolean(endpoint));
+    const error = endpoint ? validateEndpoint(endpoint) ?? undefined : undefined;
+    return {
+        enabled,
+        configured: Boolean(endpoint) && !error,
+        endpointHost: endpointHost(endpoint),
+        maxQueryLength: maxQueryLength(),
+        timeoutMs: timeoutMs(),
+        allowedHosts: allowedHosts(),
+        error,
+    };
+}
+function isReadOnlyGraphql(query) {
+    if (query.length > maxQueryLength()) {
+        return `GraphQL query exceeds GOLDSKY_MAX_QUERY_LENGTH (${maxQueryLength()}).`;
+    }
+    const withoutComments = query.replace(/#[^\n\r]*/g, " ").trim().toLowerCase();
+    if (/^mutation\b/.test(withoutComments) || /\bmutation\b/.test(withoutComments)) {
+        return "Goldsky queries are read-only. mutation is not allowed.";
+    }
+    if (/^subscription\b/.test(withoutComments) || /\bsubscription\b/.test(withoutComments)) {
+        return "Goldsky queries are read-only. subscription is not allowed.";
+    }
+    return null;
+}
+export async function goldskyGraphql(query, variables = {}) {
+    const endpoint = configuredEndpoint();
+    if (!endpoint)
+        throw new Error("GOLDSKY_SUBGRAPH_URL is not configured.");
+    const endpointError = validateEndpoint(endpoint);
+    if (endpointError)
+        throw new Error(endpointError);
+    const queryError = isReadOnlyGraphql(query);
+    if (queryError)
+        throw new Error(queryError);
+    const response = await fetchWithTimeoutAndRetry(endpoint, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", Accept: "application/json" },
+        body: JSON.stringify({ query, variables }),
+        timeoutMs: timeoutMs(),
+        retries: 1,
+        retryDelayMs: 250,
+    });
+    const body = await response.json().catch(async () => ({ errors: [{ message: await response.text().catch(() => "Non-JSON response") }] }));
+    if (!response.ok) {
+        throw new Error(`Goldsky returned HTTP ${response.status}: ${JSON.stringify(body).slice(0, 500)}`);
+    }
+    if (Array.isArray(body.errors) && body.errors.length > 0) {
+        throw new Error(body.errors.map((e) => e?.message || String(e)).join("; "));
+    }
+    return body.data;
+}
+function bytes32Regex(value) {
+    return /^0x[a-fA-F0-9]{64}$/.test(value);
+}
+function entityListFromEnv(envName, defaults) {
+    const configured = (process.env[envName] || "")
+        .split(",")
+        .map((v) => v.trim())
+        .filter(Boolean);
+    return [...configured, ...defaults].filter((v, i, arr) => arr.indexOf(v) === i);
+}
+function normalizeAttestation(raw) {
+    return {
+        id: raw.id,
+        txHash: raw.txHash,
+        preparedTransactionHash: raw.preparedTransactionHash,
+        chainId: raw.chainId,
+        actionType: raw.actionType,
+        policyHash: raw.policyHash,
+        metadataHash: raw.metadataHash,
+        agent: raw.agent,
+        attester: raw.attester,
+        blockNumber: raw.blockNumber,
+        blockTimestamp: raw.blockTimestamp ?? raw.timestamp,
+        transactionHash: raw.transactionHash,
+        raw,
+    };
+}
+function normalizeRiskRoot(raw) {
+    return {
+        id: raw.id,
+        root: raw.root,
+        dataURI: raw.dataURI ?? raw.dataUri,
+        operator: raw.operator,
+        blockNumber: raw.blockNumber,
+        blockTimestamp: raw.blockTimestamp ?? raw.timestamp,
+        transactionHash: raw.transactionHash,
+        raw,
+    };
+}
+export async function lookupAttestationInGoldsky(txHash) {
+    const status = goldskyStatus();
+    const base = {
+        source: "goldsky",
+        configured: status.configured,
+        indexed: false,
+        entity: null,
+        endpointHost: status.endpointHost,
+        record: null,
+        triedEntities: [],
+        errors: [],
+    };
+    if (!status.enabled)
+        return { ...base, errors: ["Goldsky is disabled (GOLDSKY_ENABLED=false)."] };
+    if (!status.configured)
+        return { ...base, errors: [status.error || "GOLDSKY_SUBGRAPH_URL is not configured."] };
+    if (!bytes32Regex(txHash))
+        return { ...base, errors: ["txHash must be a 32-byte 0x-prefixed hex string."] };
+    const entities = entityListFromEnv("GOLDSKY_ATTESTATION_ENTITIES", ["safeHandsAttesteds", "attestations"]);
+    const hashField = process.env.GOLDSKY_ATTESTATION_TX_HASH_FIELD || "txHash";
+    for (const entity of entities) {
+        base.triedEntities.push(entity);
+        const query = `query SafeHandsAttestationByTxHash($txHash: Bytes!) {\n  ${entity}(first: 1, where: { ${hashField}: $txHash }) {\n    id\n    txHash\n    preparedTransactionHash\n    chainId\n    actionType\n    policyHash\n    metadataHash\n    attester\n    blockNumber\n    blockTimestamp\n    transactionHash\n  }\n}`;
+        try {
+            const data = await goldskyGraphql(query, { txHash: txHash.toLowerCase() });
+            const first = data?.[entity]?.[0];
+            if (first) {
+                return { ...base, indexed: true, entity, record: normalizeAttestation(first) };
+            }
+        }
+        catch (err) {
+            base.errors.push(`${entity}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    return base;
+}
+export async function lookupLatestRiskRootInGoldsky() {
+    const status = goldskyStatus();
+    const base = {
+        source: "goldsky",
+        configured: status.configured,
+        indexed: false,
+        entity: null,
+        endpointHost: status.endpointHost,
+        record: null,
+        triedEntities: [],
+        errors: [],
+    };
+    if (!status.enabled)
+        return { ...base, errors: ["Goldsky is disabled (GOLDSKY_ENABLED=false)."] };
+    if (!status.configured)
+        return { ...base, errors: [status.error || "GOLDSKY_SUBGRAPH_URL is not configured."] };
+    const entities = entityListFromEnv("GOLDSKY_RISK_ROOT_ENTITIES", ["riskRootCommitteds", "safeHandsRiskRootCommitteds"]);
+    for (const entity of entities) {
+        base.triedEntities.push(entity);
+        const query = `query SafeHandsLatestRiskRoot {\n  ${entity}(first: 1, orderBy: blockNumber, orderDirection: desc) {\n    id\n    root\n    dataURI\n    operator\n    blockNumber\n    blockTimestamp\n    transactionHash\n  }\n}`;
+        try {
+            const data = await goldskyGraphql(query);
+            const first = data?.[entity]?.[0];
+            if (first) {
+                return { ...base, indexed: true, entity, record: normalizeRiskRoot(first) };
+            }
+        }
+        catch (err) {
+            base.errors.push(`${entity}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    return base;
+}
+function attestationAddress() {
+    // Read-path: env override → Pacific-mainnet baked default → "" (chainId-guarded).
+    const raw = resolveSafeHandsAttestationAddress();
+    return isAddress(raw) ? raw : null;
+}
+function toJsonSafe(value) {
+    if (typeof value === "bigint")
+        return value.toString();
+    if (Array.isArray(value))
+        return value.map(toJsonSafe);
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, toJsonSafe(v)]));
+    }
+    return value;
+}
+export async function lookupAttestationOnchain(txHash) {
+    const address = attestationAddress();
+    if (!address)
+        return { source: "contract", configured: false, onchainVerified: false, address: null, record: null, error: "SAFEHANDS_ATTESTATION_ADDRESS is not configured." };
+    if (!bytes32Regex(txHash))
+        return { source: "contract", configured: true, onchainVerified: false, address, record: null, error: "txHash must be a 32-byte 0x-prefixed hex string." };
+    try {
+        const network = getActiveNetwork();
+        const rpcUrl = resolveRpcUrl(network);
+        const chain = defineChain({
+            id: network.chainId,
+            name: network.label,
+            nativeCurrency: { name: network.nativeToken, symbol: network.nativeToken, decimals: 18 },
+            rpcUrls: { default: { http: [rpcUrl] } },
+            testnet: !network.isMainnet,
+        });
+        const client = createPublicClient({ chain, transport: http(rpcUrl, { timeout: 10_000 }) });
+        const attested = await client.readContract({ address, abi: ATTESTATION_ABI, functionName: "isAttested", args: [txHash] });
+        if (!attested)
+            return { source: "contract", configured: true, onchainVerified: false, address, record: null };
+        const record = await client.readContract({ address, abi: ATTESTATION_ABI, functionName: "getAttestation", args: [txHash] });
+        return { source: "contract", configured: true, onchainVerified: true, address, record: toJsonSafe(record) };
+    }
+    catch (err) {
+        return { source: "contract", configured: true, onchainVerified: false, address, record: null, error: err instanceof Error ? err.message : String(err) };
+    }
+}
+//# sourceMappingURL=goldsky.js.map

package/dist/lib/goldsky.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goldsky.js","sourceRoot":"","sources":["../../src/lib/goldsky.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AA2DpE,MAAM,eAAe,GAAG,QAAQ,CAAC;IAC/B,yDAAyD;IACzD,4OAA4O;IAC5O,0FAA0F;CAC3F,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,IAAY,EAAE,YAAY,GAAG,KAAK;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,YAAY,CAAC;IACzD,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACtE,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,KAAK,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AACvD,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AACxD,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;SAC7C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,QAAuB;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0CAA0C,CAAC;IACpD,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,8GAA8G,CAAC;IACxH,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,WAAW,GACf,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,KAAK;QACd,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,uHAAuH,CAAC;IACjI,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzF,OAAO,6BAA6B,GAAG,CAAC,IAAI,mCAAmC,CAAC;IAClF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,OAAO;QACL,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK;QACvC,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC;QACpC,cAAc,EAAE,cAAc,EAAE;QAChC,SAAS,EAAE,SAAS,EAAE;QACtB,YAAY,EAAE,YAAY,EAAE;QAC5B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,EAAE,CAAC;QACpC,OAAO,mDAAmD,cAAc,EAAE,IAAI,CAAC;IACjF,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9E,IAAI,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAChF,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACxF,OAAO,6DAA6D,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAU,KAAa,EAAE,YAAqC,EAAE;IAClG,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE;QACxD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC1C,SAAS,EAAE,SAAS,EAAE;QACtB,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,GAAG;KAClB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1I,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC,IAAS,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAkB;IAC5D,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAC5C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,CAAC,GAAG,UAAU,EAAE,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAQ;IACpC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,SAAS;QACnD,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO;QACnC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,SAAS;QACnD,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAAc;IAC7D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAkD;QAC1D,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,EAAE;QACjB,MAAM,EAAE,EAAE;KACX,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,8CAA8C,CAAC,EAAE,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,yCAAyC,CAAC,EAAE,CAAC;IAChH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,kDAAkD,CAAC,EAAE,CAAC;IAE5G,MAAM,QAAQ,GAAG,iBAAiB,CAAC,8BAA8B,EAAE,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3G,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,QAAQ,CAAC;IAE5E,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,4DAA4D,MAAM,uBAAuB,SAAS,gNAAgN,CAAC;QACjU,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAwB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAClG,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YACjF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B;IACjD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAA+C;QACvD,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,EAAE;QACjB,MAAM,EAAE,EAAE;KACX,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,8CAA8C,CAAC,EAAE,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,yCAAyC,CAAC,EAAE,CAAC;IAEhH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,4BAA4B,EAAE,CAAC,oBAAoB,EAAE,6BAA6B,CAAC,CAAC,CAAC;IACxH,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,sCAAsC,MAAM,yKAAyK,CAAC;QACpO,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAwB,KAAK,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB;IACzB,kFAAkF;IAClF,MAAM,GAAG,GAAG,kCAAkC,EAAE,CAAC;IACjD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAqB,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAc;IAC3D,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;IAC/K,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;IAErL,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,IAAI,EAAE,OAAO,CAAC,KAAK;YACnB,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;YACxF,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;YACxC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,MAAuB,CAAC,EAAE,CAAY,CAAC;QACtJ,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC9G,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,MAAuB,CAAC,EAAE,CAAC,CAAC;QAC7I,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAA4B,EAAE,CAAC;IACzI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1J,CAAC;AACH,CAAC"}

package/dist/lib/guardian/decision.d.ts

@@ -0,0 +1,23 @@
+export type GuardianDecision = "ALLOW" | "BLOCK" | "REQUIRE_CONFIRMATION" | "PREPARE_ONLY";
+export declare const GUARDIAN_DECISIONS: readonly GuardianDecision[];
+export interface MapEngineDecisionOptions {
+    /**
+     * When false, an otherwise-ALLOW action is returned as PREPARE_ONLY because
+     * this deployment cannot execute it (read-only / hosted mode, or execution
+     * gated/disabled on the active network). The caller must execute externally.
+     */
+    executionAvailable?: boolean;
+}
+/**
+ * Map an internal engine decision to the public four-value SafeHands contract.
+ *
+ *   ALLOW                 -> ALLOW  (or PREPARE_ONLY when execution is unavailable)
+ *   BLOCK                 -> BLOCK
+ *   WARN                  -> REQUIRE_CONFIRMATION
+ *   REQUIRE_CONFIRMATION  -> REQUIRE_CONFIRMATION
+ *   REQUIRE_TOKEN_REVIEW  -> REQUIRE_CONFIRMATION
+ *   REQUIRE_FUNDING       -> PREPARE_ONLY
+ *   (anything unknown)    -> REQUIRE_CONFIRMATION  (fail safe — never a silent ALLOW)
+ */
+export declare function mapEngineDecision(engineDecision: string, options?: MapEngineDecisionOptions): GuardianDecision;
+//# sourceMappingURL=decision.d.ts.map