safehands-pharos 1.4.0 → 2.6.0

package/dist/lib/pharos/ecosystem.d.ts

@@ -0,0 +1,52 @@
+import { type NetworkName, type PharosNetwork } from "../networks.js";
+import type { EvidenceSource } from "../analysis/types.js";
+export type EcosystemCategory = "oracle" | "cross_chain" | "indexing" | "wallet_infrastructure" | "custody_infrastructure" | "evm_wasm_interop" | "payment" | "rpc_provider" | "security" | "identity" | "unknown";
+export type EcosystemStatus = "implemented" | "experimental" | "roadmap" | "to_verify" | "not_implemented";
+export interface EcosystemAddress {
+    network: NetworkName;
+    chainId: number;
+    address: string;
+    label?: string;
+}
+export interface EcosystemEntry {
+    name: string;
+    category: EcosystemCategory;
+    /** Official addresses (only when present in the Phase 5A audit). */
+    addresses?: EcosystemAddress[];
+    officialDocsUrl?: string;
+    /** Provenance of the recognition data. */
+    source: EvidenceSource;
+    /** SafeHands' HONEST status — `implemented` only with code + tests. */
+    status: EcosystemStatus;
+    riskRelevance: string;
+    /** What SafeHands does (awareness/evidence) — never a direct integration claim. */
+    safehandsBehavior: string;
+    overclaimRisk: string;
+    /** Alternate names/aliases for provider-name hint matching. */
+    aliases?: string[];
+}
+/**
+ * The Pharos ecosystem providers SafeHands is aware of. Order is informational.
+ * `status` reflects SafeHands' implementation, NOT the provider's deployment:
+ * Pharos may have deployed Chainlink, but SafeHands has no Chainlink integration,
+ * so its status here is `roadmap` (awareness only).
+ */
+export declare const ECOSYSTEM_PROVIDERS: EcosystemEntry[];
+/** Look up an ecosystem provider by a known official address (any network). */
+export declare function lookupEcosystemByAddress(address: string): {
+    entry: EcosystemEntry;
+    network: NetworkName;
+    chainId: number;
+} | undefined;
+/** Look up an ecosystem provider by name/alias (case-insensitive). */
+export declare function lookupEcosystemByName(name: string): EcosystemEntry | undefined;
+/** Map a recognized canonical contract (Phase 5B) to an ecosystem entry, when applicable. */
+export declare function ecosystemForCanonical(address: string, network?: PharosNetwork): EcosystemEntry | undefined;
+export interface EcosystemRegistrySummary {
+    providers: number;
+    byCategory: Record<EcosystemCategory, number>;
+    byStatus: Record<EcosystemStatus, number>;
+}
+/** Secret-free registry summary for /infra/status and /public-config. */
+export declare function ecosystemRegistrySummary(): EcosystemRegistrySummary;
+//# sourceMappingURL=ecosystem.d.ts.map

package/dist/lib/pharos/ecosystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecosystem.d.ts","sourceRoot":"","sources":["../../../src/lib/pharos/ecosystem.ts"],"names":[],"mappings":"AAUA,OAAO,EAAoB,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAExF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,aAAa,GACb,UAAU,GACV,uBAAuB,GACvB,wBAAwB,GACxB,kBAAkB,GAClB,SAAS,GACT,cAAc,GACd,UAAU,GACV,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,iBAAiB,CAAC;AAE3G,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,oEAAoE;IACpE,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0CAA0C;IAC1C,MAAM,EAAE,cAAc,CAAC;IACvB,uEAAuE;IACvE,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAeD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,cAAc,EAuX/C,CAAC;AAaF,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAGtI;AAED,sEAAsE;AACtE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAM9E;AAED,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkC,GAAG,cAAc,GAAG,SAAS,CAO9H;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,yEAAyE;AACzE,wBAAgB,wBAAwB,IAAI,wBAAwB,CAQnE"}

package/dist/lib/pharos/ecosystem.js

@@ -0,0 +1,431 @@
+// ─── Pharos Ecosystem Registry (read-only, awareness-only) ─────────────
+// A registry of Pharos ecosystem providers SafeHands is AWARE of. It does NOT
+// integrate with, call, or hold keys for any of them. Each entry records what the
+// official Pharos docs say (Phase 5A audit) and SafeHands' honest status —
+// `implemented` is used ONLY where SafeHands has code + tests; everything SafeHands
+// merely recognizes is `roadmap` / `experimental` / `to_verify`. No addresses are
+// invented: only official addresses from the audit are included. Pure data — no RPC,
+// no keys, no external API calls.
+// ───────────────────────────────────────────────────────────────────────
+import { getActiveNetwork } from "../networks.js";
+import { canonicalContractEvidence } from "../analysis/contractIntel.js";
+const DOCS = {
+    chainlink: "https://docs.pharos.xyz/tooling-and-infrastructure/oracles/chainlink-pe",
+    crossChain: "https://docs.pharos.xyz/tooling-and-infrastructure/cross-chain",
+    goldsky: "https://docs.pharos.xyz/tooling-and-infrastructure/indexing/goldsky",
+    wallets: "https://docs.pharos.xyz/tooling-and-infrastructure/wallets",
+    wasm: "https://docs.pharos.xyz/developer-guide/interoperability/call-evm-from-wasm",
+    x402: "https://docs.pharos.xyz/developer-guide/x402",
+    zan: "https://docs.pharos.xyz/tooling-and-infrastructure/rpc/zan",
+};
+const BRIDGE_BEHAVIOR = "Bridge-like / cross-chain intent → REQUIRE_CONFIRMATION unless explicitly trusted by policy. SafeHands does NOT call this provider or any cross-chain API.";
+/**
+ * The Pharos ecosystem providers SafeHands is aware of. Order is informational.
+ * `status` reflects SafeHands' implementation, NOT the provider's deployment:
+ * Pharos may have deployed Chainlink, but SafeHands has no Chainlink integration,
+ * so its status here is `roadmap` (awareness only).
+ */
+export const ECOSYSTEM_PROVIDERS = [
+    {
+        name: "Chainlink Price Feeds (CRE)",
+        category: "oracle",
+        aliases: ["chainlink", "chainlink-pe", "chainlink price feed", "cre"],
+        addresses: [
+            { network: "pacific-mainnet", chainId: 1672, address: "0xc71f7d98d3d9a000Fdfe307fBdb9d94AbD56424B", label: "Chainlink price-feed cache (Pacific)" },
+            { network: "atlantic-testnet", chainId: 688689, address: "0x5456fD07A1622d33969f833d52aA5AD2c68C3Fa2", label: "Chainlink price-feed cache (Atlantic)" },
+        ],
+        officialDocsUrl: DOCS.chainlink,
+        source: "official_docs",
+        status: "roadmap",
+        riskRelevance: "Oracle price dependency: a contract that reads Chainlink feeds inherits oracle/price risk (staleness, manipulation).",
+        safehandsBehavior: "Recognize as Pharos-native oracle ecosystem (price-feed cache), evidence only. SafeHands does NOT query Chainlink feeds and has no direct oracle analyzer.",
+        overclaimRisk: "HIGH: Chainlink is Pharos-native; do NOT claim a Chainlink integration.",
+    },
+    {
+        name: "Chainlink CCIP",
+        category: "cross_chain",
+        aliases: ["ccip", "chainlink ccip"],
+        officialDocsUrl: DOCS.crossChain,
+        source: "official_docs",
+        status: "roadmap",
+        riskRelevance: "Cross-chain messaging/transfer: bridge/relayer trust and finality risk.",
+        safehandsBehavior: BRIDGE_BEHAVIOR,
+        overclaimRisk: "Do NOT claim a CCIP integration.",
+    },
+    {
+        name: "Circle CCTP",
+        category: "cross_chain",
+        aliases: ["cctp", "circle cctp"],
+        officialDocsUrl: DOCS.crossChain,
+        source: "official_docs",
+        status: "roadmap",
+        riskRelevance: "Cross-chain USDC transfer: bridge trust, attestation, and finality risk.",
+        safehandsBehavior: BRIDGE_BEHAVIOR,
+        overclaimRisk: "Do NOT claim a Circle/CCTP integration.",
+    },
+    {
+        name: "LayerZero",
+        category: "cross_chain",
+        aliases: ["layerzero", "lz"],
+        officialDocsUrl: DOCS.crossChain,
+        source: "official_docs",
+        status: "roadmap",
+        riskRelevance: "Cross-chain messaging: relayer/oracle trust and replay risk.",
+        safehandsBehavior: BRIDGE_BEHAVIOR,
+        overclaimRisk: "Do NOT claim a LayerZero integration.",
+    },
+    {
+        name: "LI.FI",
+        category: "cross_chain",
+        aliases: ["lifi", "li.fi", "li fi"],
+        officialDocsUrl: undefined,
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Bridge aggregation risk if present.",
+        safehandsBehavior: "NOT named on the official Pharos cross-chain page (Phase 5A). Treat any LI.FI-like bridge call as a generic cross-chain intent → REQUIRE_CONFIRMATION. No integration.",
+        overclaimRisk: "HIGH: do NOT list LI.FI as a Pharos/SafeHands integration without official confirmation.",
+    },
+    {
+        name: "Jumper",
+        category: "cross_chain",
+        aliases: ["jumper"],
+        officialDocsUrl: undefined,
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Bridge UI / aggregation risk if present.",
+        safehandsBehavior: "NOT named on the official Pharos cross-chain page (Phase 5A). Treat any Jumper-like bridge call as a generic cross-chain intent → REQUIRE_CONFIRMATION. No integration.",
+        overclaimRisk: "HIGH: do NOT list Jumper as a Pharos/SafeHands integration without official confirmation.",
+    },
+    {
+        name: "Goldsky",
+        category: "indexing",
+        aliases: ["goldsky", "subgraph", "mirror"],
+        officialDocsUrl: DOCS.goldsky,
+        source: "official_docs",
+        status: "implemented",
+        riskRelevance: "Indexing/data source: could enrich historical evidence; NOT an execution path.",
+        safehandsBehavior: "SafeHands MCP provides a native query_goldsky_subgraph tool, allowing AI agents to fetch real-time historical indexing data via GraphQL if a Goldsky endpoint is configured.",
+        overclaimRisk: "Do NOT claim a live Goldsky integration; indexing ≠ guardrail logic.",
+    },
+    {
+        name: "Safe (Safe MultiSig)",
+        category: "wallet_infrastructure",
+        aliases: ["safe", "gnosis safe", "safe multisig", "safel2"],
+        officialDocsUrl: DOCS.wallets,
+        source: "official_docs",
+        status: "experimental",
+        riskRelevance: "Smart-account / multisig treasury flows benefit from pre-sign checks (owners/threshold, batch contents).",
+        safehandsBehavior: "Recognize canonical Safe/SafeL2 addresses (Phase 5B) and decode Safe/MultiSend batches (experimental). SafeHands holds NO keys, never co-signs, and never custodies; pre-sign verdicts only.",
+        overclaimRisk: "Do NOT claim a Safe partnership or any custody capability.",
+    },
+    {
+        name: "Fordefi",
+        category: "custody_infrastructure",
+        aliases: ["fordefi"],
+        officialDocsUrl: DOCS.wallets,
+        source: "official_docs",
+        status: "roadmap",
+        riskRelevance: "MPC custody: treasury/custody flows carry external key-management risk.",
+        safehandsBehavior: "External MPC-custody awareness only. SafeHands holds NO keys and never creates/imports/exports/manages private keys; it surfaces pre-sign verdicts to custody UIs.",
+        overclaimRisk: "Do NOT claim a Fordefi partnership or custody capability.",
+    },
+    {
+        name: "Dora VM (EVM ↔ WASM interop)",
+        category: "evm_wasm_interop",
+        aliases: ["dora", "dora vm", "wasm", "stylus", "evm-wasm"],
+        officialDocsUrl: DOCS.wasm,
+        source: "official_docs",
+        status: "experimental",
+        riskRelevance: "WASM↔EVM interop calls can bypass naive EVM-only assumptions; relevant once analyzed.",
+        safehandsBehavior: "EVM analysis is implemented/aligned; EVM↔WASM interop is experimental (testnet examples; mainnet TO_VERIFY). A WASM-originated/interop intent → REQUIRE_CONFIRMATION. No WASM analyzer exists.",
+        overclaimRisk: "Do NOT claim WASM analysis support.",
+    },
+    {
+        name: "x402 payments",
+        category: "payment",
+        aliases: ["x402"],
+        officialDocsUrl: DOCS.x402,
+        source: "official_docs",
+        status: "implemented",
+        riskRelevance: "Payment-before-fetch for agents: URL/SSRF, amount, and token risk.",
+        safehandsBehavior: "Support for x402 is recognized primarily on Pharos Atlantic Testnet (Chain ID 688689). SafeHands never signs or settles a payment natively. x402 intents → REQUIRE_CONFIRMATION unless pre-authorized.",
+        overclaimRisk: "Do NOT claim mainnet x402 automatic settlement.",
+    },
+    {
+        name: "ZAN RPC",
+        category: "rpc_provider",
+        aliases: ["zan"],
+        officialDocsUrl: DOCS.zan,
+        source: "official_docs",
+        status: "implemented",
+        riskRelevance: "Optional read-only RPC provider; premium keys must never leak.",
+        safehandsBehavior: "Optional read-only RPC provider (Phase 5C). Read from env only; the URL/API key is never exposed (only a redacted provider name). Not required by default.",
+        overclaimRisk: "Do NOT hardcode/ship ZAN keys.",
+    },
+    {
+        name: "Public Pharos RPC",
+        category: "rpc_provider",
+        aliases: ["pharos-public", "public rpc", "rpc.pharos.xyz"],
+        officialDocsUrl: "https://docs.pharos.xyz/api-and-sdk/json-rpc-methods",
+        source: "official_docs",
+        status: "implemented",
+        riskRelevance: "Default read-only RPC for SafeHands checks.",
+        safehandsBehavior: "Default hosted read-only RPC; read methods only (Phase 5C whitelist). No keys required.",
+        overclaimRisk: "None.",
+    },
+    // ── Ecosystem awareness from the public Pharos ecosystem list ────────────
+    // Recognized by name only (no official docs URL / addresses bundled), so
+    // status/source are `to_verify`. SafeHands does NOT integrate with, call,
+    // hold keys for, or execute against any of these — awareness/pre-sign
+    // verdicts only. Everything stays read-only and fail-closed.
+    // Wallets
+    {
+        name: "OKX Wallet",
+        category: "wallet_infrastructure",
+        aliases: ["okx", "okx wallet"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Self-custody wallet UI; pre-sign checks (recipient, calldata, approvals) benefit the signer.",
+        safehandsBehavior: "Recognized Pharos-ecosystem wallet (awareness only). SafeHands holds no keys, never custodies or co-signs; pre-sign verdicts only.",
+        overclaimRisk: "Do NOT claim an OKX Wallet integration or partnership.",
+    },
+    {
+        name: "TopNod",
+        category: "wallet_infrastructure",
+        aliases: ["topnod"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Wallet UI; pre-sign checks benefit the signer.",
+        safehandsBehavior: "Recognized Pharos-ecosystem wallet (awareness only). SafeHands holds no keys and never custodies; pre-sign verdicts only.",
+        overclaimRisk: "Do NOT claim a TopNod integration or partnership.",
+    },
+    {
+        name: "OneKey",
+        category: "wallet_infrastructure",
+        aliases: ["onekey"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Hardware/self-custody wallet; pre-sign checks benefit the signer.",
+        safehandsBehavior: "Recognized Pharos-ecosystem wallet (awareness only). SafeHands holds no keys and never custodies; pre-sign verdicts only.",
+        overclaimRisk: "Do NOT claim a OneKey integration or partnership.",
+    },
+    {
+        name: "KuCoin Wallet",
+        category: "wallet_infrastructure",
+        aliases: ["kucoin", "kucoin wallet"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Self-custody wallet UI; pre-sign checks benefit the signer.",
+        safehandsBehavior: "Recognized Pharos-ecosystem wallet (awareness only). SafeHands holds no keys and never custodies; pre-sign verdicts only.",
+        overclaimRisk: "Do NOT claim a KuCoin Wallet integration or partnership.",
+    },
+    // Custody
+    {
+        name: "Anchorage",
+        category: "custody_infrastructure",
+        aliases: ["anchorage", "anchorage digital"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Institutional custody: treasury/custody flows carry external key-management risk.",
+        safehandsBehavior: "External custody awareness only. SafeHands holds no keys and never creates/imports/exports/manages private keys; it surfaces pre-sign verdicts to custody UIs.",
+        overclaimRisk: "Do NOT claim an Anchorage partnership or custody capability.",
+    },
+    // Payment
+    {
+        name: "Alchemy Pay",
+        category: "payment",
+        aliases: ["alchemy pay", "alchemypay"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Fiat on/off-ramp & payment rail: amount, token, and counterparty risk.",
+        safehandsBehavior: "Recognized Pharos-ecosystem payment rail (awareness only). Distinct from Alchemy (RPC). SafeHands never signs or settles a payment; payment intents → REQUIRE_CONFIRMATION.",
+        overclaimRisk: "Do NOT claim an Alchemy Pay integration or automatic settlement.",
+    },
+    // Oracle / RPC / indexer
+    {
+        name: "Supra",
+        category: "oracle",
+        aliases: ["supra", "supra oracle"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Oracle price dependency: a contract reading Supra feeds inherits oracle/price risk (staleness, manipulation).",
+        safehandsBehavior: "Recognized Pharos-ecosystem oracle (awareness only). SafeHands does NOT query Supra feeds and has no Supra analyzer.",
+        overclaimRisk: "Do NOT claim a Supra integration.",
+    },
+    {
+        name: "Alchemy",
+        category: "rpc_provider",
+        aliases: ["alchemy", "alchemy rpc"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Optional read-only RPC/data provider; premium keys must never leak.",
+        safehandsBehavior: "Recognized Pharos-ecosystem RPC provider (awareness only). Distinct from Alchemy Pay (payment). Not wired as a default provider; keys are never bundled.",
+        overclaimRisk: "Do NOT claim an Alchemy integration or ship Alchemy keys.",
+    },
+    {
+        name: "Nirvana",
+        category: "rpc_provider",
+        aliases: ["nirvana"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Optional read-only RPC/data provider; keys must never leak.",
+        safehandsBehavior: "Recognized Pharos-ecosystem RPC/data provider (awareness only). Not wired as a default provider; keys are never bundled.",
+        overclaimRisk: "Do NOT claim a Nirvana integration.",
+    },
+    {
+        name: "Hemera",
+        category: "indexing",
+        aliases: ["hemera"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Indexing/data source: could enrich historical evidence; NOT an execution path.",
+        safehandsBehavior: "Recognized Pharos-ecosystem indexer (awareness only). SafeHands does NOT query Hemera; indexing ≠ guardrail logic.",
+        overclaimRisk: "Do NOT claim a Hemera integration.",
+    },
+    // Security / compliance
+    {
+        name: "Trusta Labs",
+        category: "security",
+        aliases: ["trusta", "trusta labs"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "External security/reputation intel: could inform risk, not decide it.",
+        safehandsBehavior: "Recognized Pharos-ecosystem security provider (awareness only). SafeHands does NOT call Trusta Labs; its own verdicts remain the source of truth.",
+        overclaimRisk: "Do NOT claim a Trusta Labs integration, audit, or endorsement.",
+    },
+    {
+        name: "Hypernative",
+        category: "security",
+        aliases: ["hypernative"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "External threat-detection intel: could inform risk, not decide it.",
+        safehandsBehavior: "Recognized Pharos-ecosystem security provider (awareness only). SafeHands does NOT call Hypernative; its own verdicts remain the source of truth.",
+        overclaimRisk: "Do NOT claim a Hypernative integration or endorsement.",
+    },
+    {
+        name: "Zellic",
+        category: "security",
+        aliases: ["zellic"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Security audit firm: an audit is evidence about a contract, never a guarantee.",
+        safehandsBehavior: "Recognized Pharos-ecosystem audit firm (awareness only). SafeHands does NOT claim any Zellic audit of its own or others' contracts.",
+        overclaimRisk: "Do NOT claim a Zellic audit or endorsement.",
+    },
+    {
+        name: "ExVul Security",
+        category: "security",
+        aliases: ["exvul", "exvul security"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Security audit/monitoring firm: evidence about a contract, never a guarantee.",
+        safehandsBehavior: "Recognized Pharos-ecosystem security firm (awareness only). SafeHands does NOT call ExVul or claim an ExVul audit.",
+        overclaimRisk: "Do NOT claim an ExVul Security audit or endorsement.",
+    },
+    {
+        name: "OpenZeppelin",
+        category: "security",
+        aliases: ["openzeppelin", "oz"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Audit firm & contract libraries: recognizing an OZ pattern is not proof of safety.",
+        safehandsBehavior: "Recognized Pharos-ecosystem security firm/library (awareness only). SafeHands does NOT claim an OpenZeppelin audit; library usage alone never lowers risk.",
+        overclaimRisk: "Do NOT claim an OpenZeppelin audit, partnership, or endorsement.",
+    },
+    {
+        name: "TRM",
+        category: "security",
+        aliases: ["trm", "trm labs"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Compliance/AML screening intel: could inform risk, not decide it.",
+        safehandsBehavior: "Recognized Pharos-ecosystem compliance provider (awareness only). SafeHands does NOT call TRM; its own verdicts remain the source of truth.",
+        overclaimRisk: "Do NOT claim a TRM integration or compliance certification.",
+    },
+    // Identity / NFT / navigation
+    {
+        name: "PNS",
+        category: "identity",
+        aliases: ["pns", "pharos name service"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Name service: resolved names can be spoofed/homoglyphed; name ≠ address trust.",
+        safehandsBehavior: "Recognized Pharos-ecosystem naming service (awareness only). SafeHands does NOT resolve or trust names as identity; address verification remains required.",
+        overclaimRisk: "Do NOT claim a PNS integration or name-resolution capability.",
+    },
+    {
+        name: "ZNS Connect",
+        category: "identity",
+        aliases: ["zns", "zns connect"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Name service: resolved names can be spoofed/homoglyphed; name ≠ address trust.",
+        safehandsBehavior: "Recognized Pharos-ecosystem naming service (awareness only). SafeHands does NOT resolve or trust names as identity; address verification remains required.",
+        overclaimRisk: "Do NOT claim a ZNS Connect integration or name-resolution capability.",
+    },
+    {
+        name: "Grandline",
+        category: "identity",
+        aliases: ["grandline"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Identity/NFT app: recognizing the name grants no trust in its contracts.",
+        safehandsBehavior: "Recognized Pharos-ecosystem identity/NFT app (awareness only). SafeHands does NOT integrate; intents to its contracts fail closed without address verification.",
+        overclaimRisk: "Do NOT claim a Grandline integration or partnership.",
+    },
+    {
+        name: "Pharosverse",
+        category: "identity",
+        aliases: ["pharosverse"],
+        source: "to_verify",
+        status: "to_verify",
+        riskRelevance: "Ecosystem navigation/NFT hub: recognizing the name grants no trust in linked contracts.",
+        safehandsBehavior: "Recognized Pharos-ecosystem navigation/NFT hub (awareness only). SafeHands does NOT integrate; intents to linked contracts fail closed without address verification.",
+        overclaimRisk: "Do NOT claim a Pharosverse integration or partnership.",
+    },
+];
+/** Address index (lowercased) → { entry, network, chainId } for official addresses. */
+const ADDRESS_INDEX = (() => {
+    const m = new Map();
+    for (const entry of ECOSYSTEM_PROVIDERS) {
+        for (const a of entry.addresses ?? []) {
+            m.set(a.address.toLowerCase(), { entry, network: a.network, chainId: a.chainId });
+        }
+    }
+    return m;
+})();
+/** Look up an ecosystem provider by a known official address (any network). */
+export function lookupEcosystemByAddress(address) {
+    if (!address)
+        return undefined;
+    return ADDRESS_INDEX.get(address.toLowerCase());
+}
+/** Look up an ecosystem provider by name/alias (case-insensitive). */
+export function lookupEcosystemByName(name) {
+    const q = (name ?? "").trim().toLowerCase();
+    if (!q)
+        return undefined;
+    return ECOSYSTEM_PROVIDERS.find((e) => e.name.toLowerCase() === q || (e.aliases ?? []).some((a) => a.toLowerCase() === q));
+}
+/** Map a recognized canonical contract (Phase 5B) to an ecosystem entry, when applicable. */
+export function ecosystemForCanonical(address, network = getActiveNetwork()) {
+    const canonical = canonicalContractEvidence(address, network);
+    if (!canonical)
+        return undefined;
+    if (canonical.standard === "Safe" || canonical.standard === "SafeL2") {
+        return lookupEcosystemByName("safe");
+    }
+    return undefined;
+}
+/** Secret-free registry summary for /infra/status and /public-config. */
+export function ecosystemRegistrySummary() {
+    const byCategory = {};
+    const byStatus = {};
+    for (const e of ECOSYSTEM_PROVIDERS) {
+        byCategory[e.category] = (byCategory[e.category] ?? 0) + 1;
+        byStatus[e.status] = (byStatus[e.status] ?? 0) + 1;
+    }
+    return { providers: ECOSYSTEM_PROVIDERS.length, byCategory, byStatus };
+}
+//# sourceMappingURL=ecosystem.js.map

package/dist/lib/pharos/ecosystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecosystem.js","sourceRoot":"","sources":["../../../src/lib/pharos/ecosystem.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAC9E,kFAAkF;AAClF,2EAA2E;AAC3E,oFAAoF;AACpF,kFAAkF;AAClF,qFAAqF;AACrF,kCAAkC;AAClC,0EAA0E;AAE1E,OAAO,EAAE,gBAAgB,EAAwC,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AA2CzE,MAAM,IAAI,GAAG;IACX,SAAS,EAAE,yEAAyE;IACpF,UAAU,EAAE,gEAAgE;IAC5E,OAAO,EAAE,qEAAqE;IAC9E,OAAO,EAAE,4DAA4D;IACrE,IAAI,EAAE,6EAA6E;IACnF,IAAI,EAAE,8CAA8C;IACpD,GAAG,EAAE,4DAA4D;CACzD,CAAC;AAEX,MAAM,eAAe,GACnB,4JAA4J,CAAC;AAE/J;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqB;IACnD;QACE,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,sBAAsB,EAAE,KAAK,CAAC;QACrE,SAAS,EAAE;YACT,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,KAAK,EAAE,sCAAsC,EAAE;YACnJ,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,4CAA4C,EAAE,KAAK,EAAE,uCAAuC,EAAE;SACxJ;QACD,eAAe,EAAE,IAAI,CAAC,SAAS;QAC/B,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,sHAAsH;QACrI,iBAAiB,EACf,4JAA4J;QAC9J,aAAa,EAAE,yEAAyE;KACzF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC;QACnC,eAAe,EAAE,IAAI,CAAC,UAAU;QAChC,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,yEAAyE;QACxF,iBAAiB,EAAE,eAAe;QAClC,aAAa,EAAE,kCAAkC;KAClD;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;QAChC,eAAe,EAAE,IAAI,CAAC,UAAU;QAChC,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,0EAA0E;QACzF,iBAAiB,EAAE,eAAe;QAClC,aAAa,EAAE,yCAAyC;KACzD;IACD;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC;QAC5B,eAAe,EAAE,IAAI,CAAC,UAAU;QAChC,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,8DAA8D;QAC7E,iBAAiB,EAAE,eAAe;QAClC,aAAa,EAAE,uCAAuC;KACvD;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;QACnC,eAAe,EAAE,SAAS;QAC1B,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,qCAAqC;QACpD,iBAAiB,EACf,wKAAwK;QAC1K,aAAa,EAAE,0FAA0F;KAC1G;IACD;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,eAAe,EAAE,SAAS;QAC1B,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,0CAA0C;QACzD,iBAAiB,EACf,yKAAyK;QAC3K,aAAa,EAAE,2FAA2F;KAC3G;IACD;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;QAC1C,eAAe,EAAE,IAAI,CAAC,OAAO;QAC7B,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,aAAa;QACrB,aAAa,EAAE,gFAAgF;QAC/F,iBAAiB,EACf,8KAA8K;QAChL,aAAa,EAAE,sEAAsE;KACtF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,uBAAuB;QACjC,OAAO,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,CAAC;QAC3D,eAAe,EAAE,IAAI,CAAC,OAAO;QAC7B,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,cAAc;QACtB,aAAa,EAAE,0GAA0G;QACzH,iBAAiB,EACf,8LAA8L;QAChM,aAAa,EAAE,4DAA4D;KAC5E;IACD;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,wBAAwB;QAClC,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,eAAe,EAAE,IAAI,CAAC,OAAO;QAC7B,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,yEAAyE;QACxF,iBAAiB,EACf,oKAAoK;QACtK,aAAa,EAAE,2DAA2D;KAC3E;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;QAC1D,eAAe,EAAE,IAAI,CAAC,IAAI;QAC1B,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,cAAc;QACtB,aAAa,EAAE,uFAAuF;QACtG,iBAAiB,EACf,gMAAgM;QAClM,aAAa,EAAE,qCAAqC;KACrD;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,eAAe,EAAE,IAAI,CAAC,IAAI;QAC1B,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,aAAa;QACrB,aAAa,EAAE,oEAAoE;QACnF,iBAAiB,EACf,wMAAwM;QAC1M,aAAa,EAAE,iDAAiD;KACjE;IACD;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,eAAe,EAAE,IAAI,CAAC,GAAG;QACzB,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,aAAa;QACrB,aAAa,EAAE,gEAAgE;QAC/E,iBAAiB,EACf,4JAA4J;QAC9J,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,gBAAgB,CAAC;QAC1D,eAAe,EAAE,sDAAsD;QACvE,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,aAAa;QACrB,aAAa,EAAE,6CAA6C;QAC5D,iBAAiB,EAAE,yFAAyF;QAC5G,aAAa,EAAE,OAAO;KACvB;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,sEAAsE;IACtE,6DAA6D;IAE7D,UAAU;IACV;QACE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,uBAAuB;QACjC,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;QAC9B,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,8FAA8F;QAC7G,iBAAiB,EAAE,oIAAoI;QACvJ,aAAa,EAAE,wDAAwD;KACxE;IACD;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,uBAAuB;QACjC,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,gDAAgD;QAC/D,iBAAiB,EAAE,2HAA2H;QAC9I,aAAa,EAAE,mDAAmD;KACnE;IACD;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,uBAAuB;QACjC,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,mEAAmE;QAClF,iBAAiB,EAAE,2HAA2H;QAC9I,aAAa,EAAE,mDAAmD;KACnE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,uBAAuB;QACjC,OAAO,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC;QACpC,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,6DAA6D;QAC5E,iBAAiB,EAAE,2HAA2H;QAC9I,aAAa,EAAE,0DAA0D;KAC1E;IAED,UAAU;IACV;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,wBAAwB;QAClC,OAAO,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;QAC3C,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,mFAAmF;QAClG,iBAAiB,EAAE,gKAAgK;QACnL,aAAa,EAAE,8DAA8D;KAC9E;IAED,UAAU;IACV;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;QACtC,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,wEAAwE;QACvF,iBAAiB,EAAE,6KAA6K;QAChM,aAAa,EAAE,kEAAkE;KAClF;IAED,yBAAyB;IACzB;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;QAClC,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,+GAA+G;QAC9H,iBAAiB,EAAE,sHAAsH;QACzI,aAAa,EAAE,mCAAmC;KACnD;IACD;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;QACnC,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,qEAAqE;QACpF,iBAAiB,EAAE,0JAA0J;QAC7K,aAAa,EAAE,2DAA2D;KAC3E;IACD;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,6DAA6D;QAC5E,iBAAiB,EAAE,0HAA0H;QAC7I,aAAa,EAAE,qCAAqC;KACrD;IACD;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,gFAAgF;QAC/F,iBAAiB,EAAE,oHAAoH;QACvI,aAAa,EAAE,oCAAoC;KACpD;IAED,wBAAwB;IACxB;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;QAClC,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,uEAAuE;QACtF,iBAAiB,EAAE,mJAAmJ;QACtK,aAAa,EAAE,gEAAgE;KAChF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,aAAa,CAAC;QACxB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,oEAAoE;QACnF,iBAAiB,EAAE,mJAAmJ;QACtK,aAAa,EAAE,wDAAwD;KACxE;IACD;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,gFAAgF;QAC/F,iBAAiB,EAAE,qIAAqI;QACxJ,aAAa,EAAE,6CAA6C;KAC7D;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;QACpC,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,+EAA+E;QAC9F,iBAAiB,EAAE,oHAAoH;QACvI,aAAa,EAAE,sDAAsD;KACtE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC;QAC/B,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,oFAAoF;QACnG,iBAAiB,EAAE,4JAA4J;QAC/K,aAAa,EAAE,kEAAkE;KAClF;IACD;QACE,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;QAC5B,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,mEAAmE;QAClF,iBAAiB,EAAE,6IAA6I;QAChK,aAAa,EAAE,6DAA6D;KAC7E;IAED,8BAA8B;IAC9B;QACE,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,KAAK,EAAE,qBAAqB,CAAC;QACvC,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,gFAAgF;QAC/F,iBAAiB,EAAE,4JAA4J;QAC/K,aAAa,EAAE,+DAA+D;KAC/E;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC;QAC/B,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,gFAAgF;QAC/F,iBAAiB,EAAE,4JAA4J;QAC/K,aAAa,EAAE,uEAAuE;KACvF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,0EAA0E;QACzF,iBAAiB,EAAE,iKAAiK;QACpL,aAAa,EAAE,sDAAsD;KACtE;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,CAAC,aAAa,CAAC;QACxB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,yFAAyF;QACxG,iBAAiB,EAAE,sKAAsK;QACzL,aAAa,EAAE,wDAAwD;KACxE;CACF,CAAC;AAEF,uFAAuF;AACvF,MAAM,aAAa,GAAkF,CAAC,GAAG,EAAE;IACzG,MAAM,CAAC,GAAG,IAAI,GAAG,EAA4E,CAAC;IAC9F,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YACtC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC,EAAE,CAAC;AAEL,+EAA+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,mBAAmB,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAC1F,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,UAAyB,gBAAgB,EAAE;IAChG,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAQD,yEAAyE;AACzE,MAAM,UAAU,wBAAwB;IACtC,MAAM,UAAU,GAAG,EAAuC,CAAC;IAC3D,MAAM,QAAQ,GAAG,EAAqC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;QACpC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACzE,CAAC"}

package/dist/lib/pharos/ecosystemEvidence.d.ts

@@ -0,0 +1,53 @@
+import { type NetworkName, type PharosNetwork } from "../networks.js";
+import type { GuardianDecision } from "../guardian/decision.js";
+import type { EvidenceSource } from "../analysis/types.js";
+import { ECOSYSTEM_PROVIDERS, type EcosystemCategory, type EcosystemStatus } from "./ecosystem.js";
+export type EcosystemDecisionImpact = "REQUIRE_CONFIRMATION" | "none";
+export interface EcosystemEvidence {
+    category: EcosystemCategory;
+    providerName: string | null;
+    status: EcosystemStatus;
+    confidence: "high" | "medium" | "low";
+    source: EvidenceSource;
+    officialDocsUrl: string | null;
+    riskRelevance: string;
+    safehandsBehavior: string;
+    /** Recommendation only — applied escalate-only; NEVER downgrades a decision. */
+    recommendedDecisionImpact: EcosystemDecisionImpact;
+    network: NetworkName | null;
+    chainId: number | null;
+    address: string | null;
+}
+export interface EcosystemClassifyInput {
+    address?: string;
+    /** Provider name/alias hint (e.g. "LayerZero"). */
+    provider?: string;
+    /** Direct ecosystem category hint. */
+    category?: string;
+    network?: PharosNetwork;
+}
+/**
+ * Classify an ecosystem target. Priority: known official address → recognized
+ * canonical Safe → provider-name hint → category hint → unknown.
+ */
+export declare function classifyEcosystem(input: EcosystemClassifyInput): EcosystemEvidence;
+/** Minimal request shape (structurally compatible with AgentRequest / parsed API input). */
+export interface EcosystemRequestLike {
+    to?: string;
+    address?: string;
+    token?: string;
+    provider?: string;
+    ecosystemCategory?: string;
+    network?: string;
+}
+/** Classify ecosystem evidence for a request (address/target + optional hints). */
+export declare function ecosystemEvidenceForRequest(req: EcosystemRequestLike): EcosystemEvidence;
+/**
+ * Apply ecosystem evidence to a decision — ESCALATE-ONLY. Returns the more severe
+ * of the current decision and the evidence's recommended impact; it NEVER downgrades
+ * (a BLOCK stays BLOCK; an unlimited-approval BLOCK is never relaxed).
+ */
+export declare function applyEcosystemEscalation(decision: GuardianDecision, evidence: EcosystemEvidence): GuardianDecision;
+/** Re-export the registry for callers that want the full provider list. */
+export { ECOSYSTEM_PROVIDERS };
+//# sourceMappingURL=ecosystemEvidence.d.ts.map

package/dist/lib/pharos/ecosystemEvidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecosystemEvidence.d.ts","sourceRoot":"","sources":["../../../src/lib/pharos/ecosystemEvidence.ts"],"names":[],"mappings":"AAQA,OAAO,EAAwD,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5H,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EAInB,KAAK,iBAAiB,EAEtB,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,MAAM,CAAC;AAEtE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,MAAM,EAAE,cAAc,CAAC;IACvB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,yBAAyB,EAAE,uBAAuB,CAAC;IACnD,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AA0ED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,iBAAiB,CA+BlF;AAED,4FAA4F;AAC5F,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,mFAAmF;AACnF,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,oBAAoB,GAAG,iBAAiB,CAUxF;AAID;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,GAAG,gBAAgB,CAGlH;AAED,2EAA2E;AAC3E,OAAO,EAAE,mBAAmB,EAAE,CAAC"}