safehands-pharos 1.4.0 → 2.6.0

package/dist/tools/tokenRegistryStatus.js

@@ -1,97 +1,127 @@
-// ─── Tool: token_registry_status ───────────────────────────────────────
-// Classify exact token addresses without silently replacing user input.
-// The official Pharos Skill Engine (pharos-skill-engine-0.1.0)
-// assets/tokens.json lists 0xE0BE... as USDC for atlantic-testnet.
-// ───────────────────────────────────────────────────────────────────────
-import { z } from "zod";
-import { getAddress, isAddress } from "viem";
-import { ok } from "../lib/toolResponse.js";
-import { TOKEN_REGISTRY, CIRCLE_USDC_ADDRESS, CHAIN_ID, PHAROS_ENVIRONMENT } from "../lib/constants.js";
-export const tokenRegistryStatusSchema = z.object({
-    token: z.string().optional().describe("Token symbol or exact contract address to classify"),
-    tokenAddress: z.string().optional().describe("Exact token contract address to classify"),
-});
-function deriveStatus(match) {
-    if (match.verificationStatus === "DOCS_VERIFIED_FROM_PHAROS_SKILL_ENGINE")
-        return "SKILL_ENGINE_CANONICAL_TOKEN";
-    if (match.verificationStatus === "CIRCLE_REFERENCED_USDC")
-        return "ALTERNATE_SOURCE_TOKEN";
-    return "CANONICAL_TESTNET_TOKEN";
-}
-export function classifyTokenRegistryStatus(token) {
-    const raw = token.trim();
-    const upper = raw.toUpperCase();
-    const bySymbol = TOKEN_REGISTRY[upper];
-    if (bySymbol) {
-        return {
-            input: token,
-            normalizedAddress: bySymbol.address,
-            symbol: bySymbol.symbol,
-            status: deriveStatus(bySymbol),
-            verificationStatus: bySymbol.verificationStatus || (bySymbol.isCanonical ? "PROJECT_CONFIGURED" : "UNVERIFIED_CONFIG_VALUE"),
-            docsSource: bySymbol.docsSource || "project constants",
-            chainId: CHAIN_ID,
-            environment: PHAROS_ENVIRONMENT,
-            isMainnet: false,
-        };
-    }
-    if (!isAddress(raw)) {
-        return {
-            input: token,
-            normalizedAddress: null,
-            symbol: null,
-            status: "INVALID_ADDRESS",
-            verificationStatus: "INVALID_ADDRESS",
-            docsSource: null,
-            chainId: CHAIN_ID,
-            environment: PHAROS_ENVIRONMENT,
-            isMainnet: false,
-        };
-    }
-    const checksum = getAddress(raw);
-    const entries = Object.values(TOKEN_REGISTRY);
-    const match = entries.find((t) => t.address.toLowerCase() === checksum.toLowerCase());
-    if (match) {
-        return {
-            input: token,
-            normalizedAddress: checksum,
-            symbol: match.symbol,
-            status: deriveStatus(match),
-            verificationStatus: match.verificationStatus || "PROJECT_CONFIGURED",
-            docsSource: match.docsSource || "project constants",
-            chainId: CHAIN_ID,
-            environment: PHAROS_ENVIRONMENT,
-            isMainnet: false,
-        };
-    }
-    // Check if it's the Circle USDC address directly (even if not primary)
-    if (checksum.toLowerCase() === CIRCLE_USDC_ADDRESS.toLowerCase()) {
-        return {
-            input: token,
-            normalizedAddress: checksum,
-            symbol: "CIRCLE_USDC",
-            status: "ALTERNATE_SOURCE_TOKEN",
-            verificationStatus: "CIRCLE_REFERENCED_USDC",
-            docsSource: "https://developers.circle.com/stablecoins/usdc-contract-addresses",
-            chainId: CHAIN_ID,
-            environment: PHAROS_ENVIRONMENT,
-            isMainnet: false,
-        };
-    }
-    return {
-        input: token,
-        normalizedAddress: checksum,
-        symbol: null,
-        status: "CUSTOM_NON_REGISTRY",
-        verificationStatus: "UNVERIFIED_CUSTOM_TOKEN",
-        docsSource: null,
-        chainId: CHAIN_ID,
-        environment: PHAROS_ENVIRONMENT,
-        isMainnet: false,
-    };
-}
-export async function handleTokenRegistryStatus(raw) {
-    const input = tokenRegistryStatusSchema.parse(raw);
-    return ok(classifyTokenRegistryStatus(input.tokenAddress || input.token || ""));
-}
+// ─── Tool: token_registry_status ───────────────────────────────────────
+// Classify exact token inputs against the active network token registry.
+// Pacific Mainnet uses PACIFIC_MAINNET_TOKEN_REGISTRY; Atlantic Testnet keeps
+// the legacy testnet registry for compatibility.
+// ───────────────────────────────────────────────────────────────────────
+import { z } from "zod";
+import { getAddress, isAddress } from "viem";
+import { ok } from "../lib/toolResponse.js";
+import { TOKEN_REGISTRY, CIRCLE_USDC_ADDRESS, CHAIN_ID, PHAROS_ENVIRONMENT, IS_MAINNET, PACIFIC_MAINNET_TOKEN_REGISTRY, } from "../lib/constants.js";
+import { getActiveNetwork } from "../lib/networks.js";
+import { fetchGoplusTokenIdentity } from "./checkTokenSecurity.js";
+export const tokenRegistryStatusSchema = z.object({
+    token: z.string().optional().describe("Token symbol or exact contract address to classify"),
+    tokenAddress: z.string().optional().describe("Exact token contract address to classify"),
+});
+function activeRegistry() {
+    return getActiveNetwork().isMainnet
+        ? PACIFIC_MAINNET_TOKEN_REGISTRY
+        : TOKEN_REGISTRY;
+}
+function deriveStatus(match) {
+    if (getActiveNetwork().isMainnet || match.isMainnet)
+        return "CANONICAL_MAINNET_TOKEN";
+    if (match.verificationStatus === "DOCS_VERIFIED_FROM_PHAROS_SKILL_ENGINE")
+        return "SKILL_ENGINE_CANONICAL_TOKEN";
+    if (match.verificationStatus === "CIRCLE_REFERENCED_USDC")
+        return "ALTERNATE_SOURCE_TOKEN";
+    return "CANONICAL_MAINNET_TOKEN";
+}
+function responseBase() {
+    return {
+        chainId: CHAIN_ID,
+        environment: PHAROS_ENVIRONMENT,
+        isMainnet: IS_MAINNET,
+    };
+}
+export function classifyTokenRegistryStatus(token) {
+    const raw = token.trim();
+    const upper = raw.toUpperCase();
+    const registry = activeRegistry();
+    const bySymbol = registry[upper];
+    if (bySymbol) {
+        return {
+            input: token,
+            normalizedAddress: bySymbol.address,
+            symbol: bySymbol.symbol,
+            status: deriveStatus(bySymbol),
+            verificationStatus: bySymbol.verificationStatus || (bySymbol.isCanonical ? "DOCS_VERIFIED" : "UNVERIFIED_CONFIG_VALUE"),
+            docsSource: bySymbol.docsSource || "active network token registry",
+            ...responseBase(),
+        };
+    }
+    if (!isAddress(raw)) {
+        return {
+            input: token,
+            normalizedAddress: null,
+            symbol: null,
+            status: (raw ? "UNKNOWN" : "INVALID_ADDRESS"),
+            verificationStatus: raw ? "UNKNOWN_SYMBOL" : "INVALID_ADDRESS",
+            docsSource: null,
+            ...responseBase(),
+        };
+    }
+    const checksum = getAddress(raw);
+    const entries = Object.values(registry);
+    const match = entries.find((t) => t.address.toLowerCase() === checksum.toLowerCase());
+    if (match) {
+        return {
+            input: token,
+            normalizedAddress: checksum,
+            symbol: match.symbol,
+            status: deriveStatus(match),
+            verificationStatus: match.verificationStatus || (getActiveNetwork().isMainnet ? "DOCS_VERIFIED" : "PROJECT_CONFIGURED"),
+            docsSource: match.docsSource || "active network token registry",
+            ...responseBase(),
+        };
+    }
+    // Atlantic-only alternate USDC recognition. On Pacific Mainnet this old
+    // address is intentionally treated as custom/non-registry.
+    if (!getActiveNetwork().isMainnet && checksum.toLowerCase() === CIRCLE_USDC_ADDRESS.toLowerCase()) {
+        return {
+            input: token,
+            normalizedAddress: checksum,
+            symbol: "CIRCLE_USDC",
+            status: "ALTERNATE_SOURCE_TOKEN",
+            verificationStatus: "CIRCLE_REFERENCED_USDC",
+            docsSource: "https://developers.circle.com/stablecoins/usdc-contract-addresses",
+            ...responseBase(),
+        };
+    }
+    return {
+        input: token,
+        normalizedAddress: checksum,
+        symbol: null,
+        status: "CUSTOM_NON_REGISTRY",
+        verificationStatus: "UNVERIFIED_CUSTOM_TOKEN",
+        docsSource: null,
+        ...responseBase(),
+    };
+}
+export async function handleTokenRegistryStatus(raw) {
+    const input = tokenRegistryStatusSchema.parse(raw);
+    const classification = classifyTokenRegistryStatus(input.tokenAddress || input.token || "");
+    // For custom/non-registry tokens, best-effort DISPLAY-ONLY identity enrichment.
+    // Purely additive: status/verificationStatus/symbol are never altered, metadata
+    // is never fed into policy or gates (those consume classifyTokenRegistryStatus
+    // directly), and a fetch failure leaves the response identical to before.
+    if (classification.status !== "CUSTOM_NON_REGISTRY" || !classification.normalizedAddress) {
+        return ok(classification);
+    }
+    const identity = await fetchGoplusTokenIdentity(classification.normalizedAddress);
+    if (!identity.tokenName && !identity.tokenSymbol) {
+        return ok(classification);
+    }
+    return ok({
+        ...classification,
+        tokenMetadata: {
+            tokenName: identity.tokenName,
+            tokenSymbol: identity.tokenSymbol,
+            source: "goplus_metadata",
+            verified: false,
+            displayOnly: true,
+            warning: "Untrusted display-only metadata reported by a third-party API. It does NOT verify this token's identity and does NOT imply the token is safe. The token remains UNVERIFIED_CUSTOM_TOKEN; anyone can deploy a token with any name/symbol.",
+        },
+    });
+}
 //# sourceMappingURL=tokenRegistryStatus.js.map

package/dist/tools/tokenRegistryStatus.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokenRegistryStatus.js","sourceRoot":"","sources":["../../src/tools/tokenRegistryStatus.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,wEAAwE;AACxE,+DAA+D;AAC/D,mEAAmE;AACnE,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAExG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC3F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CACzF,CAAC,CAAC;AAYH,SAAS,YAAY,CAAC,KAAU;IAC9B,IAAI,KAAK,CAAC,kBAAkB,KAAK,wCAAwC;QAAE,OAAO,8BAA8B,CAAC;IACjH,IAAI,KAAK,CAAC,kBAAkB,KAAK,wBAAwB;QAAE,OAAO,wBAAwB,CAAC;IAC3F,OAAO,yBAAyB,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAI,cAAsC,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,iBAAiB,EAAE,QAAQ,CAAC,OAAO;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC;YAC9B,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAC5H,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,mBAAmB;YACtD,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB;YAC/B,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,iBAA6C;YACrD,kBAAkB,EAAE,iBAAiB;YACrC,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB;YAC/B,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,cAAqC,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtF,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,iBAAiB,EAAE,QAAQ;YAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;YAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,oBAAoB;YACpE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,mBAAmB;YACnD,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB;YAC/B,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAAC,WAAW,EAAE,EAAE,CAAC;QACjE,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,iBAAiB,EAAE,QAAQ;YAC3B,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,wBAAoD;YAC5D,kBAAkB,EAAE,wBAAwB;YAC5C,UAAU,EAAE,mEAAmE;YAC/E,OAAO,EAAE,QAAQ;YACjB,WAAW,EAAE,kBAAkB;YAC/B,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,iBAAiB,EAAE,QAAQ;QAC3B,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,qBAAiD;QACzD,kBAAkB,EAAE,yBAAyB;QAC7C,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,KAAK;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAA6B;IAC3E,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC"}
+{"version":3,"file":"tokenRegistryStatus.js","sourceRoot":"","sources":["../../src/tools/tokenRegistryStatus.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yEAAyE;AACzE,8EAA8E;AAC9E,iDAAiD;AACjD,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,UAAU,EACV,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC3F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CACzF,CAAC,CAAC;AAwBH,SAAS,cAAc;IACrB,OAAO,gBAAgB,EAAE,CAAC,SAAS;QACjC,CAAC,CAAE,8BAA2E;QAC9E,CAAC,CAAE,cAA2D,CAAC;AACnE,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,IAAI,gBAAgB,EAAE,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,yBAAyB,CAAC;IACtF,IAAI,KAAK,CAAC,kBAAkB,KAAK,wCAAwC;QAAE,OAAO,8BAA8B,CAAC;IACjH,IAAI,KAAK,CAAC,kBAAkB,KAAK,wBAAwB;QAAE,OAAO,wBAAwB,CAAC;IAC3F,OAAO,yBAAyB,CAAC;AACnC,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,UAAU;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,iBAAiB,EAAE,QAAQ,CAAC,OAAO;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC;YAC9B,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,yBAAyB,CAAC;YACvH,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,+BAA+B;YAClE,GAAG,YAAY,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAA6B;YACzE,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB;YAC9D,UAAU,EAAE,IAAI;YAChB,GAAG,YAAY,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtF,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,iBAAiB,EAAE,QAAQ;YAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;YAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,CAAC,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC;YACvH,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,+BAA+B;YAC/D,GAAG,YAAY,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,2DAA2D;IAC3D,IAAI,CAAC,gBAAgB,EAAE,CAAC,SAAS,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAAC,WAAW,EAAE,EAAE,CAAC;QAClG,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,iBAAiB,EAAE,QAAQ;YAC3B,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,wBAAoD;YAC5D,kBAAkB,EAAE,wBAAwB;YAC5C,UAAU,EAAE,mEAAmE;YAC/E,GAAG,YAAY,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,iBAAiB,EAAE,QAAQ;QAC3B,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,qBAAiD;QACzD,kBAAkB,EAAE,yBAAyB;QAC7C,UAAU,EAAE,IAAI;QAChB,GAAG,YAAY,EAAE;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAA6B;IAC3E,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,2BAA2B,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAE5F,gFAAgF;IAChF,gFAAgF;IAChF,+EAA+E;IAC/E,0EAA0E;IAC1E,IAAI,cAAc,CAAC,MAAM,KAAK,qBAAqB,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAC;QACzF,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAClF,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC;QACR,GAAG,cAAc;QACjB,aAAa,EAAE;YACb,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,iBAAiB;YACzB,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,IAAI;YACjB,OAAO,EACL,0OAA0O;SAC7O;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/verifyRiskInclusion.d.ts

@@ -0,0 +1,59 @@
+import { z } from "zod";
+export declare const verifyRiskInclusionSchema: z.ZodObject<{
+    target: z.ZodString;
+    actionHash: z.ZodOptional<z.ZodString>;
+    verifyOnchain: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    target: string;
+    verifyOnchain: boolean;
+    actionHash?: string | undefined;
+}, {
+    target: string;
+    actionHash?: string | undefined;
+    verifyOnchain?: boolean | undefined;
+}>;
+export type VerifyRiskInclusionInput = z.input<typeof verifyRiskInclusionSchema>;
+export declare const verifyRiskInclusionTool: {
+    name: string;
+    description: string;
+    inputSchema: z.ZodObject<{
+        target: z.ZodString;
+        actionHash: z.ZodOptional<z.ZodString>;
+        verifyOnchain: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        target: string;
+        verifyOnchain: boolean;
+        actionHash?: string | undefined;
+    }, {
+        target: string;
+        actionHash?: string | undefined;
+        verifyOnchain?: boolean | undefined;
+    }>;
+};
+export declare function handleVerifyRiskInclusion(raw: VerifyRiskInclusionInput): Promise<import("../sdk.js").ToolFailure | import("../sdk.js").ToolSuccess<{
+    registryContract: string | null;
+    included: boolean;
+    configured: boolean;
+    committed: boolean;
+    onchainMerkleRoot: string | null;
+    dataURI: string | null;
+    found: boolean;
+    rootMatches: boolean;
+    verifiedLocal: boolean;
+    verifiedOnchain: boolean | null;
+    expired: boolean;
+    proof: string[] | null;
+    record: {
+        target: string;
+        actionHash: string;
+        score: number;
+        level: number;
+        recommendation: number;
+        policyVersionHash: string;
+        evidenceHash: string;
+        expiresAt: string;
+    } | null;
+    source: "onchain-view" | "local-only" | "unconfigured" | "not-committed" | "not-found" | "root-mismatch" | "error";
+    error?: string;
+}>>;
+//# sourceMappingURL=verifyRiskInclusion.d.ts.map

package/dist/tools/verifyRiskInclusion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyRiskInclusion.d.ts","sourceRoot":"","sources":["../../src/tools/verifyRiskInclusion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;EAIpC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEjF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;CAOnC,CAAC;AAEF,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;IA4B5E"}

package/dist/tools/verifyRiskInclusion.js

@@ -0,0 +1,40 @@
+import { z } from "zod";
+import { isAddress } from "viem";
+import { ok, fail } from "../lib/toolResponse.js";
+import { SAFEHANDS_REGISTRY_ADDRESS } from "../lib/constants.js";
+import { verifyRiskInclusion } from "../lib/riskInclusion.js";
+export const verifyRiskInclusionSchema = z.object({
+    target: z.string().describe("The address whose risk record you want to prove is included in the committed on-chain Merkle root."),
+    actionHash: z.string().optional().describe("Optional 32-byte action hash to disambiguate when a target has multiple records in the batch."),
+    verifyOnchain: z.boolean().optional().default(true).describe("If true (default), also verify the Merkle proof through the contract's verifyRiskRecord view for a trustless result."),
+});
+export const verifyRiskInclusionTool = {
+    name: "verify_risk_inclusion",
+    description: "Prove a target's SafeHands risk record is included in the currently committed on-chain Merkle root. " +
+        "Fetches the committed root + data-availability batch, rebuilds the Merkle proof, and verifies it both " +
+        "locally and (by default) through the SafeHandsRegistry.verifyRiskRecord view. Read-only, keyless, composable.",
+    inputSchema: verifyRiskInclusionSchema,
+};
+export async function handleVerifyRiskInclusion(raw) {
+    const input = verifyRiskInclusionSchema.parse(raw);
+    if (!isAddress(input.target)) {
+        return fail("VALIDATION_ERROR", "target is not a valid EVM address.", false, "verify_risk_inclusion");
+    }
+    try {
+        const result = await verifyRiskInclusion({ target: input.target, actionHash: input.actionHash }, { verifyOnchain: input.verifyOnchain });
+        return ok({
+            ...result,
+            registryContract: SAFEHANDS_REGISTRY_ADDRESS || null,
+            // A single, unambiguous verdict for callers that don't want to interpret the flags themselves.
+            included: Boolean(result.found &&
+                result.rootMatches &&
+                result.verifiedLocal &&
+                (result.verifiedOnchain === null || result.verifiedOnchain === true) &&
+                !result.expired),
+        });
+    }
+    catch (err) {
+        return fail("RISK_INCLUSION_FAILED", `Failed to verify risk inclusion: ${err.message}`, true, "verify_risk_inclusion");
+    }
+}
+//# sourceMappingURL=verifyRiskInclusion.js.map

package/dist/tools/verifyRiskInclusion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyRiskInclusion.js","sourceRoot":"","sources":["../../src/tools/verifyRiskInclusion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oGAAoG,CAAC;IACjI,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+FAA+F,CAAC;IAC3I,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sHAAsH,CAAC;CACrL,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,sGAAsG;QACtG,wGAAwG;QACxG,+GAA+G;IACjH,WAAW,EAAE,yBAAyB;CACvC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAA6B;IAC3E,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,kBAAkB,EAAE,oCAAoC,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACxG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EACtD,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CACvC,CAAC;QAEF,OAAO,EAAE,CAAC;YACR,GAAG,MAAM;YACT,gBAAgB,EAAE,0BAA0B,IAAI,IAAI;YACpD,+FAA+F;YAC/F,QAAQ,EAAE,OAAO,CACf,MAAM,CAAC,KAAK;gBACV,MAAM,CAAC,WAAW;gBAClB,MAAM,CAAC,aAAa;gBACpB,CAAC,MAAM,CAAC,eAAe,KAAK,IAAI,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;gBACpE,CAAC,MAAM,CAAC,OAAO,CAClB;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,uBAAuB,EAAE,oCAAqC,GAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACpI,CAAC;AACH,CAAC"}

package/dist/tools/x402PayAndFetch.d.ts

@@ -1,82 +1,88 @@
-import { z } from "zod";
-export declare const x402PayAndFetchSchema: z.ZodObject<{
-    url: z.ZodString;
-    method: z.ZodDefault<z.ZodOptional<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>>>;
-    body: z.ZodOptional<z.ZodString>;
-    rpcUrl: z.ZodOptional<z.ZodString>;
-    agentId: z.ZodOptional<z.ZodString>;
-    maxPaymentUsdc: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    url: string;
-    method: "GET" | "POST" | "PUT" | "DELETE";
-    maxPaymentUsdc: string;
-    body?: string | undefined;
-    agentId?: string | undefined;
-    rpcUrl?: string | undefined;
-}, {
-    url: string;
-    body?: string | undefined;
-    method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
-    agentId?: string | undefined;
-    rpcUrl?: string | undefined;
-    maxPaymentUsdc?: string | undefined;
-}>;
-export type X402PayAndFetchInput = z.input<typeof x402PayAndFetchSchema>;
-export declare const x402PayAndFetchTool: {
-    name: string;
-    description: string;
-    inputSchema: z.ZodObject<{
-        url: z.ZodString;
-        method: z.ZodDefault<z.ZodOptional<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>>>;
-        body: z.ZodOptional<z.ZodString>;
-        rpcUrl: z.ZodOptional<z.ZodString>;
-        agentId: z.ZodOptional<z.ZodString>;
-        maxPaymentUsdc: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        url: string;
-        method: "GET" | "POST" | "PUT" | "DELETE";
-        maxPaymentUsdc: string;
-        body?: string | undefined;
-        agentId?: string | undefined;
-        rpcUrl?: string | undefined;
-    }, {
-        url: string;
-        body?: string | undefined;
-        method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
-        agentId?: string | undefined;
-        rpcUrl?: string | undefined;
-        maxPaymentUsdc?: string | undefined;
-    }>;
-};
-export declare function handleX402PayAndFetch(raw: X402PayAndFetchInput): Promise<import("../lib/toolResponse.js").ToolFailure | import("../lib/toolResponse.js").ToolSuccess<{
-    status: number;
-    statusText: string;
-    data: unknown;
-    paymentExecuted: boolean;
-    paymentDetails: null;
-    chainId: number;
-    environment: string;
-    isMainnet: boolean;
-    policy: import("../lib/policy/actionPolicyEngine.js").ActionPolicyResult;
-    source: string;
-}> | import("../lib/toolResponse.js").ToolSuccess<{
-    status: number;
-    statusText: string;
-    data: unknown;
-    paymentExecuted: boolean;
-    paymentDetails: {
-        headerRedacted: boolean;
-        note: string;
-    } | null;
-    signerMode: import("../lib/signer/index.js").SignerMode;
-    walletAddress: `0x${string}`;
-    paymentToken: `0x${string}`;
-    maxPaymentUsdc: string;
-    chainId: number;
-    environment: string;
-    isMainnet: boolean;
-    policy: import("../lib/policy/actionPolicyEngine.js").ActionPolicyResult;
-    testnetPayment: boolean;
-    source: string;
-}>>;
+import { z } from "zod";
+export declare const x402PayAndFetchSchema: z.ZodObject<{
+    url: z.ZodString;
+    method: z.ZodDefault<z.ZodOptional<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>>>;
+    body: z.ZodOptional<z.ZodString>;
+    rpcUrl: z.ZodOptional<z.ZodString>;
+    agentId: z.ZodOptional<z.ZodString>;
+    maxPaymentUsdc: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    confirm: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strict", z.ZodTypeAny, {
+    method: "GET" | "POST" | "PUT" | "DELETE";
+    url: string;
+    confirm: boolean;
+    maxPaymentUsdc: string;
+    body?: string | undefined;
+    agentId?: string | undefined;
+    rpcUrl?: string | undefined;
+}, {
+    url: string;
+    body?: string | undefined;
+    method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
+    agentId?: string | undefined;
+    confirm?: boolean | undefined;
+    rpcUrl?: string | undefined;
+    maxPaymentUsdc?: string | undefined;
+}>;
+export type X402PayAndFetchInput = z.input<typeof x402PayAndFetchSchema>;
+export declare const x402PayAndFetchTool: {
+    name: string;
+    description: string;
+    inputSchema: z.ZodObject<{
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodOptional<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>>>;
+        body: z.ZodOptional<z.ZodString>;
+        rpcUrl: z.ZodOptional<z.ZodString>;
+        agentId: z.ZodOptional<z.ZodString>;
+        maxPaymentUsdc: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        confirm: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strict", z.ZodTypeAny, {
+        method: "GET" | "POST" | "PUT" | "DELETE";
+        url: string;
+        confirm: boolean;
+        maxPaymentUsdc: string;
+        body?: string | undefined;
+        agentId?: string | undefined;
+        rpcUrl?: string | undefined;
+    }, {
+        url: string;
+        body?: string | undefined;
+        method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
+        agentId?: string | undefined;
+        confirm?: boolean | undefined;
+        rpcUrl?: string | undefined;
+        maxPaymentUsdc?: string | undefined;
+    }>;
+};
+export declare function handleX402PayAndFetch(raw: X402PayAndFetchInput): Promise<import("../sdk.js").ToolFailure | import("../sdk.js").ToolSuccess<{
+    status: number;
+    statusText: string;
+    data: unknown;
+    paymentExecuted: boolean;
+    paymentDetails: null;
+    chainId: number;
+    environment: string;
+    isMainnet: boolean;
+    policy: import("../sdk.js").ActionPolicyResult;
+    source: string;
+}> | import("../sdk.js").ToolSuccess<{
+    status: number;
+    statusText: string;
+    data: unknown;
+    paymentExecuted: boolean;
+    paymentDetails: {
+        headerRedacted: boolean;
+        note: string;
+    } | null;
+    signerMode: import("../lib/signer/index.js").SignerMode;
+    walletAddress: `0x${string}`;
+    paymentToken: `0x${string}`;
+    maxPaymentUsdc: string;
+    chainId: number;
+    environment: string;
+    isMainnet: boolean;
+    policy: import("../sdk.js").ActionPolicyResult;
+    mainnetPayment: boolean;
+    source: string;
+}>>;
 //# sourceMappingURL=x402PayAndFetch.d.ts.map

package/dist/tools/x402PayAndFetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"x402PayAndFetch.d.ts","sourceRoot":"","sources":["../../src/tools/x402PayAndFetch.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;EAOhC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEzE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;CAM/B,CAAC;AA0BF,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6HpE"}
+{"version":3,"file":"x402PayAndFetch.d.ts","sourceRoot":"","sources":["../../src/tools/x402PayAndFetch.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;EAQvB,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEzE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAM/B,CAAC;AA+DF,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAkPpE"}