safehands-pharos 1.4.0 → 2.6.0

package/dist/tools/queryRiskRegistry.js

@@ -1,56 +1,60 @@
-// ─── Tool: query_risk_registry ─────────────────────────────────────────
-// Queries the on-chain RiskRegistry for a wallet's published risk score.
-// Read-only — no private key needed.
-// ────────────────────────────────────────────────────────────────────────
-import { z } from "zod";
-import { publicClient } from "../lib/pharosClient.js";
-import { RISK_REGISTRY_ADDRESS, RISK_REGISTRY_ABI } from "../lib/constants.js";
-import { ok, fail } from "../lib/toolResponse.js";
-export const queryRiskRegistrySchema = z.object({
-    walletAddress: z.string().describe("Wallet address to query risk score for"),
-});
-export const queryRiskRegistryTool = {
-    name: "query_risk_registry",
-    description: "Query the on-chain RiskRegistry for a wallet's published risk score. " +
-        "Read-only, no private key needed. Returns score, level, recommendation, timestamp, and assessor.",
-    inputSchema: queryRiskRegistrySchema,
-};
-export async function handleQueryRiskRegistry(raw) {
-    const input = queryRiskRegistrySchema.parse(raw);
-    try {
-        const result = (await publicClient.readContract({
-            address: RISK_REGISTRY_ADDRESS,
-            abi: RISK_REGISTRY_ABI,
-            functionName: "query",
-            args: [input.walletAddress],
-        }));
-        const score = Number(result.score);
-        const timestamp = Number(result.timestamp);
-        // Check if record exists (timestamp will be 0 if never published)
-        if (timestamp === 0) {
-            return ok({
-                walletAddress: input.walletAddress,
-                found: false,
-                record: null,
-                registryContract: RISK_REGISTRY_ADDRESS,
-                message: "No risk score published for this wallet",
-            });
-        }
-        return ok({
-            walletAddress: input.walletAddress,
-            found: true,
-            record: {
-                score,
-                riskLevel: result.riskLevel,
-                recommendation: result.recommendation,
-                timestamp: new Date(timestamp * 1000).toISOString(),
-                assessedBy: result.assessedBy,
-            },
-            registryContract: RISK_REGISTRY_ADDRESS,
-        });
-    }
-    catch (err) {
-        return fail("REGISTRY_QUERY_FAILED", `Failed to query registry: ${err.message}`, true, "query_risk_registry");
-    }
-}
+import { z } from "zod";
+import { isAddress } from "viem";
+import { ok, fail } from "../lib/toolResponse.js";
+import { SAFEHANDS_REGISTRY_ADDRESS } from "../lib/constants.js";
+import { queryRegistryForTarget } from "../lib/safeHandsRegistry.js";
+export const queryRiskRegistrySchema = z.object({
+    walletAddress: z.string().describe("Wallet address to query risk records for"),
+});
+export const queryRiskRegistryTool = {
+    name: "query_risk_registry",
+    description: "Query the on-chain SafeHandsRegistry for a wallet's risk record, risk score, and authorization status. " +
+        "Read-only, no private key needed.",
+    inputSchema: queryRiskRegistrySchema,
+};
+export async function handleQueryRiskRegistry(raw) {
+    const input = queryRiskRegistrySchema.parse(raw);
+    if (!isAddress(input.walletAddress)) {
+        return fail("VALIDATION_ERROR", "walletAddress is not a valid EVM address.", false, "query_risk_registry");
+    }
+    try {
+        const result = await queryRegistryForTarget(input.walletAddress);
+        if (result.error) {
+            return ok({
+                walletAddress: input.walletAddress,
+                found: false,
+                currentMerkleRoot: null,
+                currentDataURI: null,
+                registry: "safehands-registry",
+                registryContract: SAFEHANDS_REGISTRY_ADDRESS || null,
+                rpcError: result.error,
+                message: "SafeHandsRegistry query failed or registry not configured.",
+            });
+        }
+        if (!result.hasRiskRecord) {
+            return ok({
+                walletAddress: input.walletAddress,
+                found: false,
+                currentMerkleRoot: null,
+                currentDataURI: null,
+                authorized: result.authorized,
+                registry: "safehands-registry",
+                registryContract: SAFEHANDS_REGISTRY_ADDRESS || null,
+                message: "No on-chain Merkle Root found.",
+            });
+        }
+        return ok({
+            walletAddress: input.walletAddress,
+            found: true,
+            currentMerkleRoot: result.currentMerkleRoot,
+            currentDataURI: result.currentDataURI,
+            authorized: result.authorized,
+            registry: "safehands-registry",
+            registryContract: SAFEHANDS_REGISTRY_ADDRESS || null,
+        });
+    }
+    catch (err) {
+        return fail("REGISTRY_QUERY_FAILED", `Failed to query registry: ${err.message}`, true, "query_risk_registry");
+    }
+}
 //# sourceMappingURL=queryRiskRegistry.js.map

package/dist/tools/queryRiskRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"queryRiskRegistry.js","sourceRoot":"","sources":["../../src/tools/queryRiskRegistry.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yEAAyE;AACzE,qCAAqC;AACrC,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAkB,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAElD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CAC7E,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,uEAAuE;QACvE,kGAAkG;IACpG,WAAW,EAAE,uBAAuB;CACrC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAA2B;IACvE,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC;YAC9C,OAAO,EAAE,qBAAqB;YAC9B,GAAG,EAAE,iBAAiB;YACtB,YAAY,EAAE,OAAO;YACrB,IAAI,EAAE,CAAC,KAAK,CAAC,aAA8B,CAAC;SAC7C,CAAC,CAMD,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE3C,kEAAkE;QAClE,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;gBACR,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,IAAI;gBACZ,gBAAgB,EAAE,qBAAqB;gBACvC,OAAO,EAAE,yCAAyC;aACnD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;YACR,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,KAAK,EAAE,IAAI;YACX,MAAM,EAAE;gBACN,KAAK;gBACL,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;gBACnD,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;YACD,gBAAgB,EAAE,qBAAqB;SACxC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,uBAAuB,EAAE,6BAA8B,GAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC3H,CAAC;AACH,CAAC"}
+{"version":3,"file":"queryRiskRegistry.js","sourceRoot":"","sources":["../../src/tools/queryRiskRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CAC/E,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,yGAAyG;QACzG,mCAAmC;IACrC,WAAW,EAAE,uBAAuB;CACrC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAA2B;IACvE,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,kBAAkB,EAAE,2CAA2C,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,aAA8B,CAAC,CAAC;QAElF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;gBACR,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,KAAK,EAAE,KAAK;gBACZ,iBAAiB,EAAE,IAAI;gBACvB,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,oBAAoB;gBAC9B,gBAAgB,EAAE,0BAA0B,IAAI,IAAI;gBACpD,QAAQ,EAAE,MAAM,CAAC,KAAK;gBACtB,OAAO,EAAE,4DAA4D;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;gBACR,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,KAAK,EAAE,KAAK;gBACZ,iBAAiB,EAAE,IAAI;gBACvB,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,oBAAoB;gBAC9B,gBAAgB,EAAE,0BAA0B,IAAI,IAAI;gBACpD,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;YACR,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,KAAK,EAAE,IAAI;YACX,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,oBAAoB;YAC9B,gBAAgB,EAAE,0BAA0B,IAAI,IAAI;SACrD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,uBAAuB,EAAE,6BAA8B,GAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC3H,CAAC;AACH,CAAC"}

package/dist/tools/safehandsPreflightCheck.d.ts

@@ -1,78 +1,93 @@
-import { z } from "zod";
-import { type ToolResponse } from "../lib/toolResponse.js";
-export declare const safehandsPreflightCheckSchema: z.ZodObject<{
-    actionType: z.ZodEnum<["send_payment", "approve_token", "execute_swap", "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call"]>;
-    chainId: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-    environment: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-    isMainnet: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    amount: z.ZodOptional<z.ZodString>;
-    amountUnit: z.ZodOptional<z.ZodEnum<["PHRS", "USDC", "USD", "TOKEN"]>>;
-    token: z.ZodOptional<z.ZodString>;
-    tokenAddress: z.ZodOptional<z.ZodString>;
-    tokenIn: z.ZodOptional<z.ZodString>;
-    tokenOut: z.ZodOptional<z.ZodString>;
-    recipient: z.ZodOptional<z.ZodString>;
-    spender: z.ZodOptional<z.ZodString>;
-    approvalAmount: z.ZodOptional<z.ZodString>;
-    approvalToken: z.ZodOptional<z.ZodString>;
-    approvalUnlimited: z.ZodOptional<z.ZodBoolean>;
-    url: z.ZodOptional<z.ZodString>;
-    paymentAmountUsdc: z.ZodOptional<z.ZodString>;
-    paymentTokenAddress: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-    signerAvailable: z.ZodOptional<z.ZodBoolean>;
-    tokenSecurityStatus: z.ZodOptional<z.ZodEnum<["ok", "unavailable", "unknown"]>>;
-    recipientVerified: z.ZodOptional<z.ZodBoolean>;
-    spenderVerified: z.ZodOptional<z.ZodBoolean>;
-    requiresSigner: z.ZodOptional<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-    environment: string;
-    actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
-    chainId: number;
-    isMainnet: boolean;
-    paymentTokenAddress: string;
-    spender?: string | undefined;
-    amount?: string | undefined;
-    token?: string | undefined;
-    tokenAddress?: string | undefined;
-    amountUnit?: "PHRS" | "USDC" | "USD" | "TOKEN" | undefined;
-    tokenIn?: string | undefined;
-    tokenOut?: string | undefined;
-    recipient?: string | undefined;
-    approvalAmount?: string | undefined;
-    approvalToken?: string | undefined;
-    approvalUnlimited?: boolean | undefined;
-    url?: string | undefined;
-    paymentAmountUsdc?: string | undefined;
-    signerAvailable?: boolean | undefined;
-    tokenSecurityStatus?: "unknown" | "ok" | "unavailable" | undefined;
-    recipientVerified?: boolean | undefined;
-    spenderVerified?: boolean | undefined;
-    requiresSigner?: boolean | undefined;
-}, {
-    actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
-    spender?: string | undefined;
-    amount?: string | undefined;
-    environment?: string | undefined;
-    token?: string | undefined;
-    tokenAddress?: string | undefined;
-    chainId?: number | undefined;
-    isMainnet?: boolean | undefined;
-    amountUnit?: "PHRS" | "USDC" | "USD" | "TOKEN" | undefined;
-    tokenIn?: string | undefined;
-    tokenOut?: string | undefined;
-    recipient?: string | undefined;
-    approvalAmount?: string | undefined;
-    approvalToken?: string | undefined;
-    approvalUnlimited?: boolean | undefined;
-    url?: string | undefined;
-    paymentAmountUsdc?: string | undefined;
-    paymentTokenAddress?: string | undefined;
-    signerAvailable?: boolean | undefined;
-    tokenSecurityStatus?: "unknown" | "ok" | "unavailable" | undefined;
-    recipientVerified?: boolean | undefined;
-    spenderVerified?: boolean | undefined;
-    requiresSigner?: boolean | undefined;
-}>;
-export type SafeHandsPreflightCheckInput = z.input<typeof safehandsPreflightCheckSchema>;
-export declare function handleSafeHandsPreflightCheck(raw: SafeHandsPreflightCheckInput): Promise<ToolResponse<unknown>>;
+import { z } from "zod";
+import { type ToolResponse } from "../lib/toolResponse.js";
+export declare const safehandsPreflightCheckSchema: z.ZodObject<{
+    actionType: z.ZodEnum<["send_payment", "approve_token", "execute_swap", "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call"]>;
+    agentId: z.ZodOptional<z.ZodString>;
+    chainId: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    environment: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    isMainnet: z.ZodOptional<z.ZodBoolean>;
+    amount: z.ZodOptional<z.ZodString>;
+    amountUnit: z.ZodOptional<z.ZodEnum<["PROS", "USDC", "USD", "TOKEN"]>>;
+    token: z.ZodOptional<z.ZodString>;
+    tokenAddress: z.ZodOptional<z.ZodString>;
+    tokenIn: z.ZodOptional<z.ZodString>;
+    tokenOut: z.ZodOptional<z.ZodString>;
+    recipient: z.ZodOptional<z.ZodString>;
+    spender: z.ZodOptional<z.ZodString>;
+    approvalAmount: z.ZodOptional<z.ZodString>;
+    approvalToken: z.ZodOptional<z.ZodString>;
+    approvalUnlimited: z.ZodOptional<z.ZodBoolean>;
+    url: z.ZodOptional<z.ZodString>;
+    paymentAmountUsdc: z.ZodOptional<z.ZodString>;
+    paymentTokenAddress: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    signerAvailable: z.ZodOptional<z.ZodBoolean>;
+    tokenSecurityStatus: z.ZodOptional<z.ZodEnum<["ok", "unavailable", "unknown"]>>;
+    recipientVerified: z.ZodOptional<z.ZodBoolean>;
+    spenderVerified: z.ZodOptional<z.ZodBoolean>;
+    requiresSigner: z.ZodOptional<z.ZodBoolean>;
+    walletAddress: z.ZodOptional<z.ZodString>;
+    score: z.ZodOptional<z.ZodNumber>;
+    targetContract: z.ZodOptional<z.ZodString>;
+    data: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    chainId: number;
+    environment: string;
+    actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
+    paymentTokenAddress: string;
+    token?: string | undefined;
+    spender?: string | undefined;
+    amount?: string | undefined;
+    data?: string | undefined;
+    url?: string | undefined;
+    score?: number | undefined;
+    tokenAddress?: string | undefined;
+    agentId?: string | undefined;
+    isMainnet?: boolean | undefined;
+    amountUnit?: "PROS" | "USDC" | "USD" | "TOKEN" | undefined;
+    tokenIn?: string | undefined;
+    tokenOut?: string | undefined;
+    recipient?: string | undefined;
+    approvalAmount?: string | undefined;
+    approvalToken?: string | undefined;
+    approvalUnlimited?: boolean | undefined;
+    paymentAmountUsdc?: string | undefined;
+    signerAvailable?: boolean | undefined;
+    tokenSecurityStatus?: "ok" | "unavailable" | "unknown" | undefined;
+    recipientVerified?: boolean | undefined;
+    spenderVerified?: boolean | undefined;
+    requiresSigner?: boolean | undefined;
+    walletAddress?: string | undefined;
+    targetContract?: string | undefined;
+}, {
+    actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
+    token?: string | undefined;
+    spender?: string | undefined;
+    amount?: string | undefined;
+    data?: string | undefined;
+    chainId?: number | undefined;
+    url?: string | undefined;
+    score?: number | undefined;
+    environment?: string | undefined;
+    tokenAddress?: string | undefined;
+    agentId?: string | undefined;
+    isMainnet?: boolean | undefined;
+    amountUnit?: "PROS" | "USDC" | "USD" | "TOKEN" | undefined;
+    tokenIn?: string | undefined;
+    tokenOut?: string | undefined;
+    recipient?: string | undefined;
+    approvalAmount?: string | undefined;
+    approvalToken?: string | undefined;
+    approvalUnlimited?: boolean | undefined;
+    paymentAmountUsdc?: string | undefined;
+    paymentTokenAddress?: string | undefined;
+    signerAvailable?: boolean | undefined;
+    tokenSecurityStatus?: "ok" | "unavailable" | "unknown" | undefined;
+    recipientVerified?: boolean | undefined;
+    spenderVerified?: boolean | undefined;
+    requiresSigner?: boolean | undefined;
+    walletAddress?: string | undefined;
+    targetContract?: string | undefined;
+}>;
+export type SafeHandsPreflightCheckInput = z.input<typeof safehandsPreflightCheckSchema>;
+export declare function handleSafeHandsPreflightCheck(raw: SafeHandsPreflightCheckInput): Promise<ToolResponse<unknown>>;
 //# sourceMappingURL=safehandsPreflightCheck.d.ts.map

package/dist/tools/safehandsPreflightCheck.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsPreflightCheck.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsPreflightCheck.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAM,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAK/D,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBxC,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEzF,wBAAsB,6BAA6B,CAAC,GAAG,EAAE,4BAA4B,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAerH"}
+{"version":3,"file":"safehandsPreflightCheck.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsPreflightCheck.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAcrE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6B/B,CAAC;AAEZ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AA+EzF,wBAAsB,6BAA6B,CAAC,GAAG,EAAE,4BAA4B,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAoErH"}

package/dist/tools/safehandsPreflightCheck.js

@@ -1,48 +1,175 @@
-// ─── Tool: safehands_preflight_check ───────────────────────────────────
-// Branded SafeHands transaction safety firewall preflight.
-// ───────────────────────────────────────────────────────────────────────
-import { z } from "zod";
-import { ok } from "../lib/toolResponse.js";
-import { CHAIN_ID, PHAROS_ENVIRONMENT, IS_MAINNET, X402_PAYMENT_TOKEN_ADDRESS } from "../lib/constants.js";
-import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
-import { classifyTokenRegistryStatus } from "./tokenRegistryStatus.js";
-export const safehandsPreflightCheckSchema = z.object({
-    actionType: z.enum(["send_payment", "approve_token", "execute_swap", "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call"]),
-    chainId: z.number().optional().default(CHAIN_ID),
-    environment: z.string().optional().default(PHAROS_ENVIRONMENT),
-    isMainnet: z.boolean().optional().default(IS_MAINNET),
-    amount: z.string().optional(),
-    amountUnit: z.enum(["PHRS", "USDC", "USD", "TOKEN"]).optional(),
-    token: z.string().optional(),
-    tokenAddress: z.string().optional(),
-    tokenIn: z.string().optional(),
-    tokenOut: z.string().optional(),
-    recipient: z.string().optional(),
-    spender: z.string().optional(),
-    approvalAmount: z.string().optional(),
-    approvalToken: z.string().optional(),
-    approvalUnlimited: z.boolean().optional(),
-    url: z.string().optional(),
-    paymentAmountUsdc: z.string().optional(),
-    paymentTokenAddress: z.string().optional().default(X402_PAYMENT_TOKEN_ADDRESS),
-    signerAvailable: z.boolean().optional(),
-    tokenSecurityStatus: z.enum(["ok", "unavailable", "unknown"]).optional(),
-    recipientVerified: z.boolean().optional(),
-    spenderVerified: z.boolean().optional(),
-    requiresSigner: z.boolean().optional(),
-});
-export async function handleSafeHandsPreflightCheck(raw) {
-    const input = safehandsPreflightCheckSchema.parse(raw);
-    const tokenForRegistry = input.tokenAddress || input.token || input.tokenOut || input.tokenIn;
-    const registry = tokenForRegistry ? classifyTokenRegistryStatus(tokenForRegistry) : null;
-    const policy = evaluateActionPolicy({
-        ...input,
-        tokenRegistryStatus: registry?.status,
-    });
-    return ok({
-        ...policy,
-        tokenRegistry: registry,
-        source: "safehands_preflight_check",
-    });
-}
+// ─── Tool: safehands_preflight_check ───────────────────────────────────
+// Branded SafeHands transaction safety firewall preflight.
+// ───────────────────────────────────────────────────────────────────────
+import { z } from "zod";
+import { fail, ok } from "../lib/toolResponse.js";
+import { CHAIN_ID, PHAROS_ENVIRONMENT, X402_PAYMENT_TOKEN_ADDRESS } from "../lib/constants.js";
+import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
+import { mapEngineDecision } from "../lib/guardian/decision.js";
+import { isExecutionAvailable } from "../lib/config.js";
+import { classifyTokenRegistryStatus } from "./tokenRegistryStatus.js";
+import { validatePositiveAmount, validateNonZeroAddress, validateAddress, validateTokenIdentifier, collectErrors } from "../lib/validation.js";
+import { assertSafeFetchUrl } from "../lib/http.js";
+const WRITE_ACTION_TYPES = new Set([
+    "send_payment", "approve_token", "execute_swap",
+    "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call",
+]);
+export const safehandsPreflightCheckSchema = z.object({
+    actionType: z.enum(["send_payment", "approve_token", "execute_swap", "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call"]),
+    agentId: z.string().optional().describe("Agent identifier; selects the per-agent safety policy used for this preflight"),
+    chainId: z.number().optional().default(CHAIN_ID),
+    environment: z.string().optional().default(PHAROS_ENVIRONMENT),
+    isMainnet: z.boolean().optional(),
+    amount: z.string().optional(),
+    amountUnit: z.enum(["PROS", "USDC", "USD", "TOKEN"]).optional(),
+    token: z.string().optional(),
+    tokenAddress: z.string().optional(),
+    tokenIn: z.string().optional(),
+    tokenOut: z.string().optional(),
+    recipient: z.string().optional(),
+    spender: z.string().optional(),
+    approvalAmount: z.string().optional(),
+    approvalToken: z.string().optional(),
+    approvalUnlimited: z.boolean().optional(),
+    url: z.string().optional(),
+    paymentAmountUsdc: z.string().optional(),
+    paymentTokenAddress: z.string().optional().default(X402_PAYMENT_TOKEN_ADDRESS),
+    signerAvailable: z.boolean().optional(),
+    tokenSecurityStatus: z.enum(["ok", "unavailable", "unknown"]).optional(),
+    recipientVerified: z.boolean().optional(),
+    spenderVerified: z.boolean().optional(),
+    requiresSigner: z.boolean().optional(),
+    walletAddress: z.string().optional(),
+    score: z.number().optional(),
+    targetContract: z.string().optional(),
+    data: z.string().optional(),
+}).strict();
+function validateActionFields(input) {
+    const errors = [];
+    switch (input.actionType) {
+        case "send_payment":
+            errors.push(validatePositiveAmount(input.amount, "amount"));
+            errors.push(validateNonZeroAddress(input.recipient, "recipient"));
+            break;
+        case "approve_token":
+            if (!input.approvalAmount && !input.amount) {
+                errors.push("approvalAmount (or amount) is required for approve_token.");
+            }
+            if (!input.spender) {
+                errors.push("spender is required for approve_token.");
+            }
+            else {
+                errors.push(validateAddress(input.spender, "spender"));
+            }
+            if (!input.approvalToken && !input.tokenAddress && !input.token) {
+                errors.push("approvalToken (or tokenAddress/token) is required for approve_token.");
+            }
+            else {
+                const tokenValue = input.approvalToken || input.tokenAddress || input.token;
+                errors.push(validateTokenIdentifier(tokenValue, "approvalToken"));
+            }
+            break;
+        case "execute_swap":
+            errors.push(validatePositiveAmount(input.amount, "amount"));
+            if (!input.tokenIn) {
+                errors.push("tokenIn is required for execute_swap.");
+            }
+            else {
+                errors.push(validateTokenIdentifier(input.tokenIn, "tokenIn"));
+            }
+            if (!input.tokenOut) {
+                errors.push("tokenOut is required for execute_swap.");
+            }
+            else {
+                errors.push(validateTokenIdentifier(input.tokenOut, "tokenOut"));
+            }
+            break;
+        case "x402_pay_and_fetch":
+            if (!input.url) {
+                errors.push("url is required for x402_pay_and_fetch.");
+            }
+            if (input.paymentAmountUsdc) {
+                errors.push(validatePositiveAmount(input.paymentAmountUsdc, "paymentAmountUsdc"));
+            }
+            break;
+        case "publish_risk_score":
+            if (!input.walletAddress) {
+                errors.push("walletAddress is required for publish_risk_score.");
+            }
+            else {
+                errors.push(validateNonZeroAddress(input.walletAddress, "walletAddress"));
+            }
+            if (input.score === undefined || input.score === null) {
+                errors.push("score is required for publish_risk_score.");
+            }
+            else if (!Number.isFinite(input.score) || input.score < 0 || input.score > 100) {
+                errors.push("score must be between 0 and 100.");
+            }
+            break;
+        case "custom_contract_call":
+            if (!input.targetContract) {
+                errors.push("targetContract is required for custom_contract_call.");
+            }
+            else {
+                errors.push(validateAddress(input.targetContract, "targetContract"));
+            }
+            if (!input.data) {
+                errors.push("data is required for custom_contract_call.");
+            }
+            break;
+    }
+    return collectErrors(errors);
+}
+export async function handleSafeHandsPreflightCheck(raw) {
+    let input;
+    try {
+        input = safehandsPreflightCheckSchema.parse(raw);
+    }
+    catch (err) {
+        const msg = err instanceof z.ZodError
+            ? err.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")
+            : String(err);
+        return fail("VALIDATION_ERROR", `Preflight input validation failed: ${msg}`, false, "safehands_preflight_check");
+    }
+    const fieldErrors = validateActionFields(input);
+    if (fieldErrors.length > 0) {
+        return fail("VALIDATION_ERROR", `Missing or invalid required fields for ${input.actionType}: ${fieldErrors.join(" ")}`, false, "safehands_preflight_check");
+    }
+    if (input.actionType === "x402_pay_and_fetch" && input.url) {
+        try {
+            await assertSafeFetchUrl(input.url);
+        }
+        catch (err) {
+            return fail("SSRF_BLOCKED", err instanceof Error ? err.message.replace(/^SSRF_BLOCKED:\s*/, "") : String(err), false, "safehands_preflight_check");
+        }
+    }
+    const isWriteAction = WRITE_ACTION_TYPES.has(input.actionType);
+    const effectiveRequiresSigner = input.requiresSigner ?? (isWriteAction && input.signerAvailable !== undefined ? true : input.requiresSigner);
+    const tokenForRegistry = input.tokenAddress || input.token || input.tokenOut || input.tokenIn;
+    const registry = tokenForRegistry ? classifyTokenRegistryStatus(tokenForRegistry) : null;
+    // Fail-closed on the token-security dimension: for token-trading/approval actions
+    // the caller must not be able to skip the honeypot/tax signal by simply omitting
+    // tokenSecurityStatus. Absent → treat as "unknown" so the engine routes to
+    // REQUIRE_TOKEN_REVIEW instead of silently reaching ALLOW.
+    const tokenSecurityStatus = input.tokenSecurityStatus ??
+        (input.actionType === "execute_swap" || input.actionType === "approve_token" ? "unknown" : undefined);
+    const policy = evaluateActionPolicy({
+        ...input,
+        requiresSigner: effectiveRequiresSigner,
+        tokenRegistryStatus: registry?.status,
+        tokenSecurityStatus,
+    });
+    // Expose only the public four-value SafeHands decision; keep policy reasons,
+    // checks, and risk level for explanation.
+    const guardianDecision = mapEngineDecision(policy.decision, {
+        executionAvailable: isExecutionAvailable(),
+    });
+    return ok({
+        ...policy,
+        decision: guardianDecision,
+        guardianDecision,
+        tokenRegistry: registry,
+        source: "safehands_preflight_check",
+    });
+}
 //# sourceMappingURL=safehandsPreflightCheck.js.map

package/dist/tools/safehandsPreflightCheck.js.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsPreflightCheck.js","sourceRoot":"","sources":["../../src/tools/safehandsPreflightCheck.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2DAA2D;AAC3D,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAEvE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IACzI,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9E,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,GAAiC;IACnF,MAAM,KAAK,GAAG,6BAA6B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC;IAC9F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzF,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,GAAG,KAAK;QACR,mBAAmB,EAAE,QAAQ,EAAE,MAAM;KACtC,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;QACR,GAAG,MAAM;QACT,aAAa,EAAE,QAAQ;QACvB,MAAM,EAAE,2BAA2B;KACpC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"safehandsPreflightCheck.js","sourceRoot":"","sources":["../../src/tools/safehandsPreflightCheck.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2DAA2D;AAC3D,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,eAAe,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC/I,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,cAAc,EAAE,eAAe,EAAE,cAAc;IAC/C,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB;CACnE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IACzI,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;IACxH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9E,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,SAAS,oBAAoB,CAAC,KAAoD;IAChF,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,cAAc;YACjB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;YAClE,MAAM;QAER,KAAK,eAAe;YAClB,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC5E,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;YACpE,CAAC;YACD,MAAM;QAER,KAAK,cAAc;YACjB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,MAAM;QAER,KAAK,oBAAoB;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,MAAM;QAER,KAAK,oBAAoB;YACvB,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC3D,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;gBACjF,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAClD,CAAC;YACD,MAAM;QAER,KAAK,sBAAsB;YACzB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM;IACV,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,GAAiC;IACnF,IAAI,KAAoD,CAAC;IACzD,IAAI,CAAC;QACH,KAAK,GAAG,6BAA6B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,QAAQ;YACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,kBAAkB,EAAE,sCAAsC,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CACT,kBAAkB,EAClB,0CAA0C,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EACtF,KAAK,EACL,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,oBAAoB,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CACT,cAAc,EACd,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EACjF,KAAK,EACL,2BAA2B,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,uBAAuB,GAAG,KAAK,CAAC,cAAc,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAE7I,MAAM,gBAAgB,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC;IAC9F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzF,kFAAkF;IAClF,iFAAiF;IACjF,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,mBAAmB,GACvB,KAAK,CAAC,mBAAmB;QACzB,CAAC,KAAK,CAAC,UAAU,KAAK,cAAc,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAExG,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,GAAG,KAAK;QACR,cAAc,EAAE,uBAAuB;QACvC,mBAAmB,EAAE,QAAQ,EAAE,MAAM;QACrC,mBAAmB;KACpB,CAAC,CAAC;IAEH,6EAA6E;IAC7E,0CAA0C;IAC1C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC1D,kBAAkB,EAAE,oBAAoB,EAAE;KAC3C,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;QACR,GAAG,MAAM;QACT,QAAQ,EAAE,gBAAgB;QAC1B,gBAAgB;QAChB,aAAa,EAAE,QAAQ;QACvB,MAAM,EAAE,2BAA2B;KACpC,CAAC,CAAC;AACL,CAAC"}