safehands-pharos 1.4.0 → 2.6.0

package/dist/tools/safehandsRiskReport.d.ts

@@ -1,82 +1,97 @@
-import { z } from "zod";
-import { type ToolResponse } from "../lib/toolResponse.js";
-export declare const safehandsRiskReportSchema: z.ZodObject<{
-    actionType: z.ZodEnum<["send_payment", "approve_token", "execute_swap", "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call"]>;
-    chainId: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-    environment: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-    isMainnet: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    amount: z.ZodOptional<z.ZodString>;
-    amountUnit: z.ZodOptional<z.ZodEnum<["PHRS", "USDC", "USD", "TOKEN"]>>;
-    token: z.ZodOptional<z.ZodString>;
-    tokenAddress: z.ZodOptional<z.ZodString>;
-    tokenIn: z.ZodOptional<z.ZodString>;
-    tokenOut: z.ZodOptional<z.ZodString>;
-    recipient: z.ZodOptional<z.ZodString>;
-    spender: z.ZodOptional<z.ZodString>;
-    approvalAmount: z.ZodOptional<z.ZodString>;
-    approvalToken: z.ZodOptional<z.ZodString>;
-    approvalUnlimited: z.ZodOptional<z.ZodBoolean>;
-    url: z.ZodOptional<z.ZodString>;
-    paymentAmountUsdc: z.ZodOptional<z.ZodString>;
-    paymentTokenAddress: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-    signerAvailable: z.ZodOptional<z.ZodBoolean>;
-    tokenSecurityStatus: z.ZodOptional<z.ZodEnum<["ok", "unavailable", "unknown"]>>;
-    recipientVerified: z.ZodOptional<z.ZodBoolean>;
-    spenderVerified: z.ZodOptional<z.ZodBoolean>;
-    requiresSigner: z.ZodOptional<z.ZodBoolean>;
-} & {
-    includeChecks: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-}, "strip", z.ZodTypeAny, {
-    environment: string;
-    actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
-    chainId: number;
-    isMainnet: boolean;
-    paymentTokenAddress: string;
-    includeChecks: boolean;
-    spender?: string | undefined;
-    amount?: string | undefined;
-    token?: string | undefined;
-    tokenAddress?: string | undefined;
-    amountUnit?: "PHRS" | "USDC" | "USD" | "TOKEN" | undefined;
-    tokenIn?: string | undefined;
-    tokenOut?: string | undefined;
-    recipient?: string | undefined;
-    approvalAmount?: string | undefined;
-    approvalToken?: string | undefined;
-    approvalUnlimited?: boolean | undefined;
-    url?: string | undefined;
-    paymentAmountUsdc?: string | undefined;
-    signerAvailable?: boolean | undefined;
-    tokenSecurityStatus?: "unknown" | "ok" | "unavailable" | undefined;
-    recipientVerified?: boolean | undefined;
-    spenderVerified?: boolean | undefined;
-    requiresSigner?: boolean | undefined;
-}, {
-    actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
-    spender?: string | undefined;
-    amount?: string | undefined;
-    environment?: string | undefined;
-    token?: string | undefined;
-    tokenAddress?: string | undefined;
-    chainId?: number | undefined;
-    isMainnet?: boolean | undefined;
-    amountUnit?: "PHRS" | "USDC" | "USD" | "TOKEN" | undefined;
-    tokenIn?: string | undefined;
-    tokenOut?: string | undefined;
-    recipient?: string | undefined;
-    approvalAmount?: string | undefined;
-    approvalToken?: string | undefined;
-    approvalUnlimited?: boolean | undefined;
-    url?: string | undefined;
-    paymentAmountUsdc?: string | undefined;
-    paymentTokenAddress?: string | undefined;
-    signerAvailable?: boolean | undefined;
-    tokenSecurityStatus?: "unknown" | "ok" | "unavailable" | undefined;
-    recipientVerified?: boolean | undefined;
-    spenderVerified?: boolean | undefined;
-    requiresSigner?: boolean | undefined;
-    includeChecks?: boolean | undefined;
-}>;
-export type SafeHandsRiskReportInput = z.input<typeof safehandsRiskReportSchema>;
-export declare function handleSafeHandsRiskReport(raw: SafeHandsRiskReportInput): Promise<ToolResponse<unknown>>;
+import { z } from "zod";
+import { type ToolResponse } from "../lib/toolResponse.js";
+export declare const safehandsRiskReportSchema: z.ZodObject<{
+    actionType: z.ZodEnum<["send_payment", "approve_token", "execute_swap", "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call"]>;
+    agentId: z.ZodOptional<z.ZodString>;
+    chainId: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    environment: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    isMainnet: z.ZodOptional<z.ZodBoolean>;
+    amount: z.ZodOptional<z.ZodString>;
+    amountUnit: z.ZodOptional<z.ZodEnum<["PROS", "USDC", "USD", "TOKEN"]>>;
+    token: z.ZodOptional<z.ZodString>;
+    tokenAddress: z.ZodOptional<z.ZodString>;
+    tokenIn: z.ZodOptional<z.ZodString>;
+    tokenOut: z.ZodOptional<z.ZodString>;
+    recipient: z.ZodOptional<z.ZodString>;
+    spender: z.ZodOptional<z.ZodString>;
+    approvalAmount: z.ZodOptional<z.ZodString>;
+    approvalToken: z.ZodOptional<z.ZodString>;
+    approvalUnlimited: z.ZodOptional<z.ZodBoolean>;
+    url: z.ZodOptional<z.ZodString>;
+    paymentAmountUsdc: z.ZodOptional<z.ZodString>;
+    paymentTokenAddress: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    signerAvailable: z.ZodOptional<z.ZodBoolean>;
+    tokenSecurityStatus: z.ZodOptional<z.ZodEnum<["ok", "unavailable", "unknown"]>>;
+    recipientVerified: z.ZodOptional<z.ZodBoolean>;
+    spenderVerified: z.ZodOptional<z.ZodBoolean>;
+    requiresSigner: z.ZodOptional<z.ZodBoolean>;
+    score: z.ZodOptional<z.ZodNumber>;
+    targetContract: z.ZodOptional<z.ZodString>;
+    data: z.ZodOptional<z.ZodString>;
+} & {
+    includeChecks: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    walletAddress: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    chainId: number;
+    environment: string;
+    actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
+    paymentTokenAddress: string;
+    includeChecks: boolean;
+    token?: string | undefined;
+    spender?: string | undefined;
+    amount?: string | undefined;
+    data?: string | undefined;
+    url?: string | undefined;
+    score?: number | undefined;
+    tokenAddress?: string | undefined;
+    agentId?: string | undefined;
+    isMainnet?: boolean | undefined;
+    amountUnit?: "PROS" | "USDC" | "USD" | "TOKEN" | undefined;
+    tokenIn?: string | undefined;
+    tokenOut?: string | undefined;
+    recipient?: string | undefined;
+    approvalAmount?: string | undefined;
+    approvalToken?: string | undefined;
+    approvalUnlimited?: boolean | undefined;
+    paymentAmountUsdc?: string | undefined;
+    signerAvailable?: boolean | undefined;
+    tokenSecurityStatus?: "ok" | "unavailable" | "unknown" | undefined;
+    recipientVerified?: boolean | undefined;
+    spenderVerified?: boolean | undefined;
+    requiresSigner?: boolean | undefined;
+    walletAddress?: string | undefined;
+    targetContract?: string | undefined;
+}, {
+    actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
+    token?: string | undefined;
+    spender?: string | undefined;
+    amount?: string | undefined;
+    data?: string | undefined;
+    chainId?: number | undefined;
+    url?: string | undefined;
+    score?: number | undefined;
+    environment?: string | undefined;
+    tokenAddress?: string | undefined;
+    agentId?: string | undefined;
+    isMainnet?: boolean | undefined;
+    amountUnit?: "PROS" | "USDC" | "USD" | "TOKEN" | undefined;
+    tokenIn?: string | undefined;
+    tokenOut?: string | undefined;
+    recipient?: string | undefined;
+    approvalAmount?: string | undefined;
+    approvalToken?: string | undefined;
+    approvalUnlimited?: boolean | undefined;
+    paymentAmountUsdc?: string | undefined;
+    paymentTokenAddress?: string | undefined;
+    signerAvailable?: boolean | undefined;
+    tokenSecurityStatus?: "ok" | "unavailable" | "unknown" | undefined;
+    recipientVerified?: boolean | undefined;
+    spenderVerified?: boolean | undefined;
+    requiresSigner?: boolean | undefined;
+    walletAddress?: string | undefined;
+    targetContract?: string | undefined;
+    includeChecks?: boolean | undefined;
+}>;
+export type SafeHandsRiskReportInput = z.input<typeof safehandsRiskReportSchema>;
+export declare function handleSafeHandsRiskReport(raw: SafeHandsRiskReportInput): Promise<ToolResponse<unknown>>;
 //# sourceMappingURL=safehandsRiskReport.d.ts.map

package/dist/tools/safehandsRiskReport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsRiskReport.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAM,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI/D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEpC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEjF,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAkB7G"}
+{"version":3,"file":"safehandsRiskReport.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAM,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAK/D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGpC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEjF,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAqC7G"}

package/dist/tools/safehandsRiskReport.js

@@ -1,29 +1,49 @@
-// ─── Tool: safehands_risk_report ───────────────────────────────────────
-import { z } from "zod";
-import { ok } from "../lib/toolResponse.js";
-import { explainPolicyResult } from "../lib/policy/actionPolicyEngine.js";
-import { handleSafeHandsPreflightCheck, safehandsPreflightCheckSchema } from "./safehandsPreflightCheck.js";
-export const safehandsRiskReportSchema = safehandsPreflightCheckSchema.extend({
-    includeChecks: z.boolean().optional().default(true),
-});
-export async function handleSafeHandsRiskReport(raw) {
-    const input = safehandsRiskReportSchema.parse(raw);
-    const preflight = await handleSafeHandsPreflightCheck(input);
-    if (!preflight.success)
-        return preflight;
-    const data = preflight.data;
-    return ok({
-        decision: data.decision,
-        riskLevel: data.riskLevel,
-        safeToExecute: data.safeToExecute,
-        summary: explainPolicyResult(data),
-        reasons: data.reasons,
-        requiredActions: data.requiredActions,
-        checks: input.includeChecks ? data.checks : undefined,
-        environment: data.environment,
-        chainId: data.chainId,
-        isMainnet: data.isMainnet,
-        source: "safehands_risk_report",
-    });
-}
+import { z } from "zod";
+import { isAddress } from "viem";
+import { ok } from "../lib/toolResponse.js";
+import { explainPolicyResult } from "../lib/policy/actionPolicyEngine.js";
+import { handleSafeHandsPreflightCheck, safehandsPreflightCheckSchema } from "./safehandsPreflightCheck.js";
+import { queryRegistryForTarget } from "../lib/safeHandsRegistry.js";
+export const safehandsRiskReportSchema = safehandsPreflightCheckSchema.extend({
+    includeChecks: z.boolean().optional().default(true),
+    walletAddress: z.string().optional(),
+});
+export async function handleSafeHandsRiskReport(raw) {
+    const input = safehandsRiskReportSchema.parse(raw);
+    // Delegate to the preflight core with only its recognized fields. The preflight
+    // schema is strict, so the risk-report-only key (includeChecks) must be stripped
+    // before delegation; it is still used below to shape the report.
+    const { includeChecks, ...preflightInput } = input;
+    const preflight = await handleSafeHandsPreflightCheck(preflightInput);
+    if (!preflight.success)
+        return preflight;
+    const data = preflight.data;
+    let riskRegistry = null;
+    const walletAddr = input.walletAddress || input.recipient;
+    if (walletAddr && isAddress(walletAddr)) {
+        try {
+            riskRegistry = await queryRegistryForTarget(walletAddr);
+        }
+        catch {
+            riskRegistry = {
+                version: "safehands-registry",
+                error: "SafeHandsRegistry unavailable; local risk evaluation still completed.",
+            };
+        }
+    }
+    return ok({
+        decision: data.decision,
+        riskLevel: data.riskLevel,
+        safeToExecute: data.safeToExecute,
+        summary: explainPolicyResult(data),
+        reasons: data.reasons,
+        requiredActions: data.requiredActions,
+        checks: includeChecks ? data.checks : undefined,
+        environment: data.environment,
+        chainId: data.chainId,
+        isMainnet: data.isMainnet,
+        riskRegistry,
+        source: "safehands_risk_report",
+    });
+}
 //# sourceMappingURL=safehandsRiskReport.js.map

package/dist/tools/safehandsRiskReport.js.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsRiskReport.js","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAE5G,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC,MAAM,CAAC;IAC5E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACpD,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAA6B;IAC3E,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAW,CAAC;IACnC,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACrD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,uBAAuB;KAChC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"safehandsRiskReport.js","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC5G,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC,MAAM,CAAC;IAC5E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAA6B;IAC3E,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,gFAAgF;IAChF,iFAAiF;IACjF,iEAAiE;IACjE,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,GAAG,KAAK,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,cAAc,CAAC,CAAC;IACtE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAW,CAAC;IAEnC,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,SAAS,CAAC;IAC1D,IAAI,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,sBAAsB,CAAC,UAA2B,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG;gBACb,OAAO,EAAE,oBAAoB;gBAC7B,KAAK,EAAE,uEAAuE;aAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC/C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY;QACZ,MAAM,EAAE,uBAAuB;KAChC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/safehandsSafeExecute.d.ts

@@ -1,21 +1,21 @@
-import { z } from "zod";
-import { type ToolResponse } from "../lib/toolResponse.js";
-export declare const safehandsSafeExecuteSchema: z.ZodObject<{
-    path: z.ZodEnum<["safe_execute_send_payment", "safe_execute_approve_token", "safe_execute_swap", "safe_x402_pay_and_fetch"]>;
-    execute: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    confirmExecution: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-    action: z.ZodRecord<z.ZodString, z.ZodAny>;
-}, "strip", z.ZodTypeAny, {
-    path: "safe_execute_send_payment" | "safe_execute_approve_token" | "safe_execute_swap" | "safe_x402_pay_and_fetch";
-    execute: boolean;
-    confirmExecution: boolean;
-    action: Record<string, any>;
-}, {
-    path: "safe_execute_send_payment" | "safe_execute_approve_token" | "safe_execute_swap" | "safe_x402_pay_and_fetch";
-    action: Record<string, any>;
-    execute?: boolean | undefined;
-    confirmExecution?: boolean | undefined;
-}>;
-export type SafeHandsSafeExecuteInput = z.input<typeof safehandsSafeExecuteSchema>;
-export declare function handleSafeHandsSafeExecute(raw: SafeHandsSafeExecuteInput): Promise<ToolResponse<unknown>>;
+import { z } from "zod";
+import { type ToolResponse } from "../lib/toolResponse.js";
+export declare const safehandsSafeExecuteSchema: z.ZodObject<{
+    path: z.ZodEnum<["safe_execute_send_payment", "safe_execute_approve_token", "safe_execute_swap", "safe_x402_pay_and_fetch"]>;
+    execute: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    confirmExecution: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    action: z.ZodRecord<z.ZodString, z.ZodAny>;
+}, "strict", z.ZodTypeAny, {
+    path: "safe_execute_send_payment" | "safe_execute_approve_token" | "safe_execute_swap" | "safe_x402_pay_and_fetch";
+    execute: boolean;
+    confirmExecution: boolean;
+    action: Record<string, any>;
+}, {
+    path: "safe_execute_send_payment" | "safe_execute_approve_token" | "safe_execute_swap" | "safe_x402_pay_and_fetch";
+    action: Record<string, any>;
+    execute?: boolean | undefined;
+    confirmExecution?: boolean | undefined;
+}>;
+export type SafeHandsSafeExecuteInput = z.input<typeof safehandsSafeExecuteSchema>;
+export declare function handleSafeHandsSafeExecute(raw: SafeHandsSafeExecuteInput): Promise<ToolResponse<unknown>>;
 //# sourceMappingURL=safehandsSafeExecute.d.ts.map

package/dist/tools/safehandsSafeExecute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsSafeExecute.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAQ/F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAKrC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAenF,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAyD/G"}
+{"version":3,"file":"safehandsSafeExecute.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAW/F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAK5B,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAsBnF,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CA0J/G"}

package/dist/tools/safehandsSafeExecute.js

@@ -1,82 +1,165 @@
-// ─── Tool: safehands_safe_execute ──────────────────────────────────────
-// Guarded execution wrapper so AI agents cannot bypass preflight checks.
-// ───────────────────────────────────────────────────────────────────────
-import { z } from "zod";
-import { fail, ok, requireWriteToolsEnabled } from "../lib/toolResponse.js";
-import { getSigner, isSignerFailure } from "../lib/signer/index.js";
-import { handleSafeHandsPreflightCheck } from "./safehandsPreflightCheck.js";
-import { handleSendPayment } from "./sendPayment.js";
-import { handleApproveToken } from "./approveToken.js";
-import { handleExecuteSwap } from "./executeSwap.js";
-import { handleX402PayAndFetch } from "./x402PayAndFetch.js";
-export const safehandsSafeExecuteSchema = z.object({
-    path: z.enum(["safe_execute_send_payment", "safe_execute_approve_token", "safe_execute_swap", "safe_x402_pay_and_fetch"]),
-    execute: z.boolean().optional().default(false).describe("Must be true to execute. false returns dry-run guarded report only."),
-    confirmExecution: z.boolean().optional().default(false).describe("Additional explicit runtime confirmation."),
-    action: z.record(z.any()).describe("Underlying tool input object"),
-});
-function toPreflight(path, action, signerAvailable) {
-    if (path === "safe_execute_send_payment") {
-        return { actionType: "send_payment", amount: String(action.amount || ""), amountUnit: "PHRS", recipient: String(action.toAddress || ""), recipientVerified: false, requiresSigner: true, signerAvailable };
-    }
-    if (path === "safe_execute_approve_token") {
-        return { actionType: "approve_token", approvalAmount: String(action.amount || ""), approvalToken: String(action.token || ""), approvalUnlimited: action.amount === "max", requiresSigner: true, signerAvailable };
-    }
-    if (path === "safe_execute_swap") {
-        return { actionType: "execute_swap", amount: String(action.amountIn || ""), tokenIn: String(action.tokenIn || ""), tokenOut: String(action.tokenOut || ""), requiresSigner: true, signerAvailable };
-    }
-    return { actionType: "x402_pay_and_fetch", url: String(action.url || ""), paymentAmountUsdc: String(action.maxPaymentUsdc || "0.001"), requiresSigner: true, signerAvailable };
-}
-export async function handleSafeHandsSafeExecute(raw) {
-    const input = safehandsSafeExecuteSchema.parse(raw);
-    const writeGuard = requireWriteToolsEnabled("safehands_safe_execute");
-    if (writeGuard)
-        return writeGuard;
-    // Resolve actual signer availability so the preflight report is truthful
-    const purpose = input.path === "safe_x402_pay_and_fetch" ? "x402" : "write";
-    const agentId = typeof input.action.agentId === "string" ? input.action.agentId : undefined;
-    const signerResult = await getSigner(agentId, { purpose });
-    const signerAvailable = !isSignerFailure(signerResult);
-    const preflight = await handleSafeHandsPreflightCheck(toPreflight(input.path, input.action, signerAvailable));
-    if (!preflight.success)
-        return preflight;
-    const report = preflight.data;
-    if (report.decision === "BLOCK") {
-        return ok({
-            executed: false,
-            blocked: true,
-            safetyReport: report,
-            executionResult: null,
-            source: "safehands_safe_execute",
-        });
-    }
-    if (report.decision !== "ALLOW") {
-        return fail(report.decision === "REQUIRE_CONFIRMATION" ? "CONFIRMATION_REQUIRED" : "POLICY_BLOCKED", `SafeHands did not execute because policy decision is ${report.decision}.`, false, "safehands_safe_execute");
-    }
-    if (!input.execute || !input.confirmExecution) {
-        return ok({
-            executed: false,
-            dryRun: true,
-            reason: "Set execute=true and confirmExecution=true to execute this allowed testnet action.",
-            safetyReport: report,
-            executionResult: null,
-            source: "safehands_safe_execute",
-        });
-    }
-    let executionResult;
-    if (input.path === "safe_execute_send_payment")
-        executionResult = await handleSendPayment(input.action);
-    else if (input.path === "safe_execute_approve_token")
-        executionResult = await handleApproveToken(input.action);
-    else if (input.path === "safe_execute_swap")
-        executionResult = await handleExecuteSwap(input.action);
-    else
-        executionResult = await handleX402PayAndFetch(input.action);
-    return ok({
-        executed: true,
-        safetyReport: report,
-        executionResult,
-        source: "safehands_safe_execute",
-    });
-}
+import { z } from "zod";
+import { fail, ok, requireWriteToolsEnabled } from "../lib/toolResponse.js";
+import { getSigner, isSignerFailure } from "../lib/signer/index.js";
+import { handleSafeHandsPreflightCheck } from "./safehandsPreflightCheck.js";
+import { handleSendPayment } from "./sendPayment.js";
+import { handleApproveToken } from "./approveToken.js";
+import { handleExecuteSwap } from "./executeSwap.js";
+import { handleX402PayAndFetch } from "./x402PayAndFetch.js";
+import { REQUIRE_AUTHORIZED_AGENT_FOR_WRITE, CHAIN_ID } from "../lib/constants.js";
+import { checkManagedWalletAuthorization } from "../lib/safeHandsRegistry.js";
+import { publicClient } from "../lib/pharosClient.js";
+export const safehandsSafeExecuteSchema = z.object({
+    path: z.enum(["safe_execute_send_payment", "safe_execute_approve_token", "safe_execute_swap", "safe_x402_pay_and_fetch"]),
+    execute: z.boolean().optional().default(false).describe("Must be true to execute. false returns dry-run guarded report only."),
+    confirmExecution: z.boolean().optional().default(false).describe("Additional explicit runtime confirmation."),
+    action: z.record(z.any()).describe("Underlying tool input object"),
+}).strict();
+function toPreflight(path, action, signerAvailable) {
+    const agentId = typeof action.agentId === "string" ? action.agentId : undefined;
+    if (path === "safe_execute_send_payment") {
+        return { actionType: "send_payment", agentId, amount: String(action.amount || ""), amountUnit: "PROS", recipient: String(action.toAddress || ""), recipientVerified: false, requiresSigner: true, signerAvailable };
+    }
+    if (path === "safe_execute_approve_token") {
+        return { actionType: "approve_token", agentId, approvalAmount: String(action.amount || ""), approvalToken: String(action.token || ""), approvalUnlimited: action.amount === "max", spender: String(action.spender || ""), requiresSigner: true, signerAvailable };
+    }
+    if (path === "safe_execute_swap") {
+        return { actionType: "execute_swap", agentId, amount: String(action.amountIn || ""), tokenIn: String(action.tokenIn || ""), tokenOut: String(action.tokenOut || ""), requiresSigner: true, signerAvailable };
+    }
+    return { actionType: "x402_pay_and_fetch", agentId, url: String(action.url || ""), paymentAmountUsdc: String(action.maxPaymentUsdc || "0.001"), requiresSigner: true, signerAvailable };
+}
+function resolveMode(signerMode) {
+    if (signerMode === "managed-mainnet")
+        return "managed_execution";
+    if (signerMode === "env")
+        return "env_wallet";
+    return "unknown";
+}
+export async function handleSafeHandsSafeExecute(raw) {
+    let input;
+    try {
+        input = safehandsSafeExecuteSchema.parse(raw);
+    }
+    catch (err) {
+        const msg = err instanceof z.ZodError
+            ? err.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")
+            : String(err);
+        return fail("VALIDATION_ERROR", `safe_execute input validation failed: ${msg}`, false, "safehands_safe_execute");
+    }
+    const writeGuard = requireWriteToolsEnabled("safehands_safe_execute");
+    if (writeGuard)
+        return writeGuard;
+    // SAFE_EXECUTE_ENABLED is the documented second gate for the auto-execute path:
+    // WRITE_TOOLS_ENABLED opens writes; SAFE_EXECUTE_ENABLED specifically authorizes
+    // preflight→execute. Enforced here so it is not a decorative env var. Read-only
+    // preflight remains available via safehands_preflight_check (needs neither gate).
+    if (process.env.SAFE_EXECUTE_ENABLED !== "true") {
+        return fail("SAFE_EXECUTE_DISABLED", "safehands_safe_execute is disabled. Set SAFE_EXECUTE_ENABLED=true (in addition to WRITE_TOOLS_ENABLED=true) to enable the preflight→execute path. Read-only preflight is available via safehands_preflight_check.", false, "safehands_safe_execute");
+    }
+    const purpose = input.path === "safe_x402_pay_and_fetch" ? "x402" : "write";
+    const agentId = typeof input.action.agentId === "string" ? input.action.agentId : undefined;
+    const signerResult = await getSigner(agentId, { purpose });
+    const signerAvailable = !isSignerFailure(signerResult);
+    if (signerAvailable && signerResult.mode === "managed-mainnet" && REQUIRE_AUTHORIZED_AGENT_FOR_WRITE) {
+        const authCheck = await checkManagedWalletAuthorization(signerResult.address);
+        if (!authCheck.authorized) {
+            return fail(authCheck.errorCode || "AGENT_WALLET_NOT_AUTHORIZED", authCheck.errorMessage || "Managed wallet is not authorized in SafeHandsRegistry.", false, "safehands_safe_execute");
+        }
+        try {
+            const balance = await publicClient.getBalance({ address: signerResult.address });
+            if (balance === 0n) {
+                return ok({
+                    executed: false,
+                    decision: "REQUIRE_FUNDING",
+                    requiresFunding: true,
+                    walletAddress: signerResult.address,
+                    network: "Pharos Network",
+                    chainId: CHAIN_ID,
+                    mode: "managed_execution",
+                    source: "safehands_safe_execute",
+                });
+            }
+        }
+        catch {
+            // RPC failed — continue, let execution attempt surface the real error
+        }
+    }
+    const preflight = await handleSafeHandsPreflightCheck(toPreflight(input.path, input.action, signerAvailable));
+    if (!preflight.success)
+        return preflight;
+    const report = preflight.data;
+    const mode = signerAvailable ? resolveMode(signerResult.mode) : "unknown";
+    if (report.decision === "BLOCK") {
+        return ok({
+            executed: false,
+            blocked: true,
+            safetyReport: report,
+            executionResult: null,
+            mode,
+            source: "safehands_safe_execute",
+        });
+    }
+    // PREPARE_ONLY = execution unavailable (read-only deployment) or a funding
+    // shortfall. Never auto-execute; hand back the guarded report.
+    if (report.decision === "PREPARE_ONLY") {
+        return ok({
+            executed: false,
+            prepareOnly: true,
+            decision: "PREPARE_ONLY",
+            safetyReport: report,
+            executionResult: null,
+            mode,
+            source: "safehands_safe_execute",
+        });
+    }
+    // ALLOW executes directly; REQUIRE_CONFIRMATION is executable only when the
+    // caller explicitly confirms (confirmExecution IS that confirmation). Any other
+    // value is a safety-net refusal.
+    const requiresConfirmation = report.decision === "REQUIRE_CONFIRMATION";
+    if (report.decision !== "ALLOW" && !requiresConfirmation) {
+        return fail("POLICY_BLOCKED", `SafeHands did not execute because policy decision is ${report.decision}.`, false, "safehands_safe_execute");
+    }
+    if (!input.execute || !input.confirmExecution) {
+        return ok({
+            executed: false,
+            dryRun: true,
+            requiresConfirmation,
+            reason: requiresConfirmation
+                ? "Policy is REQUIRE_CONFIRMATION. Set execute=true and confirmExecution=true to proceed after reviewing the safety report."
+                : "Set execute=true and confirmExecution=true to execute this allowed mainnet action.",
+            safetyReport: report,
+            executionResult: null,
+            mode,
+            source: "safehands_safe_execute",
+        });
+    }
+    // Reaching here means the operator explicitly set execute=true + confirmExecution=true
+    // AND the gated preflight returned ALLOW or REQUIRE_CONFIRMATION. Pass confirm=true
+    // to the raw handler so its own (independent) confirmation gate does not re-block.
+    const confirmedAction = { ...input.action, confirm: true };
+    let executionResult;
+    if (input.path === "safe_execute_send_payment")
+        executionResult = await handleSendPayment(confirmedAction);
+    else if (input.path === "safe_execute_approve_token")
+        executionResult = await handleApproveToken(confirmedAction);
+    else if (input.path === "safe_execute_swap")
+        executionResult = await handleExecuteSwap(confirmedAction);
+    else
+        executionResult = await handleX402PayAndFetch(confirmedAction);
+    const execFailed = executionResult &&
+        typeof executionResult === "object" &&
+        "success" in executionResult &&
+        executionResult.success === false;
+    if (execFailed) {
+        const execErr = executionResult;
+        return fail(execErr.error?.code || "EXECUTION_FAILED", execErr.error?.message || "Underlying execution returned success:false.", false, "safehands_safe_execute");
+    }
+    return ok({
+        executed: true,
+        safetyReport: report,
+        executionResult,
+        mode: signerAvailable ? resolveMode(signerResult.mode) : "unknown",
+        source: "safehands_safe_execute",
+    });
+}
 //# sourceMappingURL=safehandsSafeExecute.js.map

package/dist/tools/safehandsSafeExecute.js.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsSafeExecute.js","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yEAAyE;AACzE,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,wBAAwB,EAAqB,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;IACzH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAC9H,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC7G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACnE,CAAC,CAAC;AAIH,SAAS,WAAW,CAAC,IAAY,EAAE,MAA+B,EAAE,eAAwB;IAC1F,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAe,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC/N,CAAC;IACD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC1C,OAAO,EAAE,UAAU,EAAE,eAAwB,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC7N,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC/M,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,oBAA6B,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AAC1L,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAA8B;IAC7E,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,wBAAwB,CAAC,wBAAwB,CAAC,CAAC;IACtE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,yEAAyE;IACzE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAW,CAAC;IAErC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,IAAI,CACT,MAAM,CAAC,QAAQ,KAAK,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB,EACvF,wDAAwD,MAAM,CAAC,QAAQ,GAAG,EAC1E,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,oFAAoF;YAC5F,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,eAAwB,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;SAC1G,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B;QAAE,eAAe,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;SACjH,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;;QACvG,eAAe,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;IAExE,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,MAAM;QACpB,eAAe;QACf,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"safehandsSafeExecute.js","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,wBAAwB,EAAqB,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kCAAkC,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;IACzH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAC9H,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC7G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACnE,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,SAAS,WAAW,CAAC,IAAY,EAAE,MAA+B,EAAE,eAAwB;IAC1F,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAe,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACxO,CAAC;IACD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC1C,OAAO,EAAE,UAAU,EAAE,eAAwB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC7Q,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACxN,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,oBAA6B,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACnM,CAAC;AAED,SAAS,WAAW,CAAC,UAA8B;IACjD,IAAI,UAAU,KAAK,iBAAiB;QAAE,OAAO,mBAAmB,CAAC;IACjE,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,YAAY,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAA8B;IAC7E,IAAI,KAAiD,CAAC;IACtD,IAAI,CAAC;QACH,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,QAAQ;YACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,kBAAkB,EAAE,yCAAyC,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,wBAAwB,CAAC,CAAC;IACtE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,gFAAgF;IAChF,iFAAiF;IACjF,gFAAgF;IAChF,kFAAkF;IAClF,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,IAAI,CACT,uBAAuB,EACvB,mNAAmN,EACnN,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAEvD,IAAI,eAAe,IAAI,YAAY,CAAC,IAAI,KAAK,iBAAiB,IAAI,kCAAkC,EAAE,CAAC;QACrG,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC1B,OAAO,IAAI,CACT,SAAS,CAAC,SAAS,IAAI,6BAA6B,EACpD,SAAS,CAAC,YAAY,IAAI,wDAAwD,EAClF,KAAK,EACL,wBAAwB,CACzB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;oBACR,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,iBAAiB;oBAC3B,eAAe,EAAE,IAAI;oBACrB,aAAa,EAAE,YAAY,CAAC,OAAO;oBACnC,OAAO,EAAE,gBAAgB;oBACzB,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,wBAAwB;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAW,CAAC;IAErC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,gFAAgF;IAChF,iCAAiC;IACjC,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,KAAK,sBAAsB,CAAC;IACxE,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACzD,OAAO,IAAI,CACT,gBAAgB,EAChB,wDAAwD,MAAM,CAAC,QAAQ,GAAG,EAC1E,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI;YACZ,oBAAoB;YACpB,MAAM,EAAE,oBAAoB;gBAC1B,CAAC,CAAC,0HAA0H;gBAC5H,CAAC,CAAC,oFAAoF;YACxF,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,uFAAuF;IACvF,oFAAoF;IACpF,mFAAmF;IACnF,MAAM,eAAe,GAAG,EAAE,GAAI,KAAK,CAAC,MAAkC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxF,IAAI,eAAwB,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,eAAsB,CAAC,CAAC;SAC7G,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B;QAAE,eAAe,GAAG,MAAM,kBAAkB,CAAC,eAAsB,CAAC,CAAC;SACpH,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,eAAsB,CAAC,CAAC;;QAC1G,eAAe,GAAG,MAAM,qBAAqB,CAAC,eAAsB,CAAC,CAAC;IAE3E,MAAM,UAAU,GACd,eAAe;QACf,OAAO,eAAe,KAAK,QAAQ;QACnC,SAAS,IAAI,eAAe;QAC3B,eAAwC,CAAC,OAAO,KAAK,KAAK,CAAC;IAE9D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,eAAkE,CAAC;QACnF,OAAO,IAAI,CACT,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,kBAAkB,EACzC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,8CAA8C,EACxE,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,MAAM;QACpB,eAAe;QACf,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;AACL,CAAC"}