safehands-pharos 1.5.0 → 2.6.0

package/dist/lib/envLoader.js

@@ -18,27 +18,48 @@ try {
 catch {
     // No .env file — environment vars must be set externally (CI, shell, MCP host)
 }
-// 2. Auto-resolve wallet persistence so managed wallets survive restarts
-//    without requiring explicit config from the user.
-if (!process.env.WALLET_STORE_PATH) {
-    process.env.WALLET_STORE_PATH = "./.agents/wallets.json";
+// 1b. Backward-compatible env aliases for the full hosted deployment template.
+// Keep old variable names working while letting .env.example use clearer SAFEHANDS_* names.
+const aliases = [
+    ["SAFEHANDS_ENABLE_MANAGED_WALLET", "MANAGED_WALLET_ENABLED"],
+    ["SAFEHANDS_WALLET_ENCRYPTION_KEY", "WALLET_ENCRYPTION_KEY"],
+    ["SAFEHANDS_REGISTRY_ADDRESS", "SAFEHANDS_RISK_REGISTRY_ADDRESS"],
+    ["PHAROS_PACIFIC_RPC_URL", "PHAROS_RPC_URL"],
+];
+for (const [from, to] of aliases) {
+    if (process.env[from] && !process.env[to])
+        process.env[to] = process.env[from];
 }
-if (!process.env.WALLET_ENCRYPTION_KEY) {
-    const storePath = resolve(process.cwd(), process.env.WALLET_STORE_PATH);
-    const keyPath = join(dirname(storePath), ".key");
-    try {
-        if (existsSync(keyPath)) {
-            process.env.WALLET_ENCRYPTION_KEY = readFileSync(keyPath, "utf-8").trim();
+// 2. Demo mode now uses mainnet-first default as well.
+if (process.argv.includes("--demo") && !process.env.SAFEHANDS_NETWORK) {
+    process.env.SAFEHANDS_NETWORK = "pacific-mainnet";
+}
+// 3. Auto-resolve wallet persistence ONLY when managed wallets are explicitly
+//    enabled (WALLET_MODE=managed-mainnet AND MANAGED_WALLET_ENABLED=true), so
+//    managed wallets survive restarts. Read-only / preflight / hosted modes must
+//    never create .agents/wallets.json or .agents/.key just by importing modules
+//    (no key material on disk until managed wallets are actually enabled).
+if ((process.env.WALLET_MODE || "none") === "managed-mainnet" && process.env.MANAGED_WALLET_ENABLED === "true") {
+    if (!process.env.WALLET_STORE_PATH) {
+        process.env.WALLET_STORE_PATH = "./.agents/wallets.json";
+    }
+    if (!process.env.WALLET_ENCRYPTION_KEY) {
+        const storePath = resolve(process.cwd(), process.env.WALLET_STORE_PATH);
+        const keyPath = join(dirname(storePath), ".key");
+        try {
+            if (existsSync(keyPath)) {
+                process.env.WALLET_ENCRYPTION_KEY = readFileSync(keyPath, "utf-8").trim();
+            }
+            else {
+                mkdirSync(dirname(keyPath), { recursive: true });
+                const key = randomBytes(32).toString("hex");
+                writeFileSync(keyPath, key, { mode: 0o600 });
+                process.env.WALLET_ENCRYPTION_KEY = key;
+            }
         }
-        else {
-            mkdirSync(dirname(keyPath), { recursive: true });
-            const key = randomBytes(32).toString("hex");
-            writeFileSync(keyPath, key, { mode: 0o600 });
-            process.env.WALLET_ENCRYPTION_KEY = key;
+        catch {
+            // File ops failed (read-only FS, permission error) — fall back to in-memory behavior
         }
     }
-    catch {
-        // File ops failed (read-only FS, permission error) — fall back to in-memory behavior
-    }
 }
 //# sourceMappingURL=envLoader.js.map

package/dist/lib/envLoader.js.map

@@ -1 +1 @@
-{"version":3,"file":"envLoader.js","sourceRoot":"","sources":["../../src/lib/envLoader.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,sFAAsF;AACtF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,eAAe;AACf,IAAI,CAAC;IACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,+EAA+E;AACjF,CAAC;AAED,yEAAyE;AACzE,sDAAsD;AACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,wBAAwB,CAAC;AAC3D,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5C,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,GAAG,CAAC;QAC1C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qFAAqF;IACvF,CAAC;AACH,CAAC"}
+{"version":3,"file":"envLoader.js","sourceRoot":"","sources":["../../src/lib/envLoader.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,sFAAsF;AACtF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,eAAe;AACf,IAAI,CAAC;IACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,+EAA+E;AACjF,CAAC;AAGD,+EAA+E;AAC/E,4FAA4F;AAC5F,MAAM,OAAO,GAA4B;IACvC,CAAC,iCAAiC,EAAE,wBAAwB,CAAC;IAC7D,CAAC,iCAAiC,EAAE,uBAAuB,CAAC;IAC5D,CAAC,4BAA4B,EAAE,iCAAiC,CAAC;IACjE,CAAC,wBAAwB,EAAE,gBAAgB,CAAC;CAC7C,CAAC;AACF,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,uDAAuD;AACvD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;AACpD,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,iFAAiF;AACjF,iFAAiF;AACjF,2EAA2E;AAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM,EAAE,CAAC;IAC/G,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,wBAAwB,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC5C,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,GAAG,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;QACvF,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/goldsky.d.ts

@@ -0,0 +1,58 @@
+export interface GoldskyConfigStatus {
+    enabled: boolean;
+    configured: boolean;
+    endpointHost: string | null;
+    maxQueryLength: number;
+    timeoutMs: number;
+    allowedHosts: string[];
+    error?: string;
+}
+export interface IndexedAttestationRecord {
+    id?: string;
+    txHash?: string;
+    preparedTransactionHash?: string;
+    chainId?: string | number;
+    actionType?: string;
+    policyHash?: string;
+    metadataHash?: string;
+    agent?: string;
+    attester?: string;
+    blockNumber?: string | number;
+    blockTimestamp?: string | number;
+    transactionHash?: string;
+    raw: Record<string, unknown>;
+}
+export interface GoldskyLookupResult<T> {
+    source: "goldsky";
+    configured: boolean;
+    indexed: boolean;
+    entity: string | null;
+    endpointHost: string | null;
+    record: T | null;
+    triedEntities: string[];
+    errors: string[];
+}
+export interface OnchainAttestationLookup {
+    source: "contract";
+    configured: boolean;
+    onchainVerified: boolean;
+    address: string | null;
+    record: Record<string, unknown> | null;
+    error?: string;
+}
+export interface IndexedRiskRootRecord {
+    id?: string;
+    root?: string;
+    dataURI?: string;
+    operator?: string;
+    blockNumber?: string | number;
+    blockTimestamp?: string | number;
+    transactionHash?: string;
+    raw: Record<string, unknown>;
+}
+export declare function goldskyStatus(): GoldskyConfigStatus;
+export declare function goldskyGraphql<T = any>(query: string, variables?: Record<string, unknown>): Promise<T>;
+export declare function lookupAttestationInGoldsky(txHash: string): Promise<GoldskyLookupResult<IndexedAttestationRecord>>;
+export declare function lookupLatestRiskRootInGoldsky(): Promise<GoldskyLookupResult<IndexedRiskRootRecord>>;
+export declare function lookupAttestationOnchain(txHash: string): Promise<OnchainAttestationLookup>;
+//# sourceMappingURL=goldsky.d.ts.map

package/dist/lib/goldsky.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goldsky.d.ts","sourceRoot":"","sources":["../../src/lib/goldsky.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AA6ED,wBAAgB,aAAa,IAAI,mBAAmB,CAanD;AAgBD,wBAAsB,cAAc,CAAC,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAyBhH;AA6CD,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,CAAC,CAiCvH;AAED,wBAAsB,6BAA6B,IAAI,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CA8BzG;AAiBD,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAuBhG"}

package/dist/lib/goldsky.js

@@ -0,0 +1,275 @@
+import { createPublicClient, defineChain, http, isAddress, parseAbi } from "viem";
+import { fetchWithTimeoutAndRetry } from "./http.js";
+import { getActiveNetwork, resolveRpcUrl } from "./networks.js";
+import { resolveSafeHandsAttestationAddress } from "./constants.js";
+const ATTESTATION_ABI = parseAbi([
+    "function isAttested(bytes32 txHash) view returns (bool)",
+    "function getAttestation(bytes32 txHash) view returns ((bytes32 preparedTransactionHash, bytes32 txHash, uint256 chainId, bytes32 actionType, bytes32 policyHash, bytes32 metadataHash, address agent, address attester, uint64 timestamp))",
+    "function reputationOf(address agent) view returns (uint256 verifiedCount, uint64 lastAt)",
+]);
+function boolEnv(name, defaultValue = false) {
+    const raw = process.env[name];
+    if (raw === undefined || raw === "")
+        return defaultValue;
+    return raw === "true" || raw === "1" || raw.toLowerCase() === "yes";
+}
+function maxQueryLength() {
+    const raw = Number(process.env.GOLDSKY_MAX_QUERY_LENGTH || 8_000);
+    return Number.isFinite(raw) && raw > 0 ? raw : 8_000;
+}
+function timeoutMs() {
+    const raw = Number(process.env.GOLDSKY_TIMEOUT_MS || 10_000);
+    return Number.isFinite(raw) && raw > 0 ? raw : 10_000;
+}
+function configuredEndpoint() {
+    return process.env.GOLDSKY_SUBGRAPH_URL?.trim() || null;
+}
+function allowedHosts() {
+    return (process.env.GOLDSKY_ALLOWED_HOSTS || "")
+        .split(",")
+        .map((v) => v.trim().toLowerCase())
+        .filter(Boolean);
+}
+function endpointHost(endpoint) {
+    if (!endpoint)
+        return null;
+    try {
+        return new URL(endpoint).host;
+    }
+    catch {
+        return null;
+    }
+}
+function validateEndpoint(endpoint) {
+    let url;
+    try {
+        url = new URL(endpoint);
+    }
+    catch {
+        return "GOLDSKY_SUBGRAPH_URL is not a valid URL.";
+    }
+    if (url.protocol !== "https:" && !boolEnv("GOLDSKY_ALLOW_INSECURE_HTTP", false)) {
+        return "GOLDSKY_SUBGRAPH_URL must use https:// unless GOLDSKY_ALLOW_INSECURE_HTTP=true is set for local development.";
+    }
+    const host = url.hostname.toLowerCase();
+    const privateHost = host === "localhost" ||
+        host === "127.0.0.1" ||
+        host === "0.0.0.0" ||
+        host === "::1" ||
+        host.startsWith("10.") ||
+        host.startsWith("192.168.") ||
+        /^172\.(1[6-9]|2\d|3[01])\./.test(host);
+    if (privateHost && !boolEnv("GOLDSKY_ALLOW_PRIVATE_HOSTS", false)) {
+        return "GOLDSKY_SUBGRAPH_URL points to a private/local host. Set GOLDSKY_ALLOW_PRIVATE_HOSTS=true only for local development.";
+    }
+    const hosts = allowedHosts();
+    if (hosts.length > 0 && !hosts.includes(url.host.toLowerCase()) && !hosts.includes(host)) {
+        return `GOLDSKY_SUBGRAPH_URL host ${url.host} is not in GOLDSKY_ALLOWED_HOSTS.`;
+    }
+    return null;
+}
+export function goldskyStatus() {
+    const endpoint = configuredEndpoint();
+    const enabled = boolEnv("GOLDSKY_ENABLED", Boolean(endpoint));
+    const error = endpoint ? validateEndpoint(endpoint) ?? undefined : undefined;
+    return {
+        enabled,
+        configured: Boolean(endpoint) && !error,
+        endpointHost: endpointHost(endpoint),
+        maxQueryLength: maxQueryLength(),
+        timeoutMs: timeoutMs(),
+        allowedHosts: allowedHosts(),
+        error,
+    };
+}
+function isReadOnlyGraphql(query) {
+    if (query.length > maxQueryLength()) {
+        return `GraphQL query exceeds GOLDSKY_MAX_QUERY_LENGTH (${maxQueryLength()}).`;
+    }
+    const withoutComments = query.replace(/#[^\n\r]*/g, " ").trim().toLowerCase();
+    if (/^mutation\b/.test(withoutComments) || /\bmutation\b/.test(withoutComments)) {
+        return "Goldsky queries are read-only. mutation is not allowed.";
+    }
+    if (/^subscription\b/.test(withoutComments) || /\bsubscription\b/.test(withoutComments)) {
+        return "Goldsky queries are read-only. subscription is not allowed.";
+    }
+    return null;
+}
+export async function goldskyGraphql(query, variables = {}) {
+    const endpoint = configuredEndpoint();
+    if (!endpoint)
+        throw new Error("GOLDSKY_SUBGRAPH_URL is not configured.");
+    const endpointError = validateEndpoint(endpoint);
+    if (endpointError)
+        throw new Error(endpointError);
+    const queryError = isReadOnlyGraphql(query);
+    if (queryError)
+        throw new Error(queryError);
+    const response = await fetchWithTimeoutAndRetry(endpoint, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", Accept: "application/json" },
+        body: JSON.stringify({ query, variables }),
+        timeoutMs: timeoutMs(),
+        retries: 1,
+        retryDelayMs: 250,
+    });
+    const body = await response.json().catch(async () => ({ errors: [{ message: await response.text().catch(() => "Non-JSON response") }] }));
+    if (!response.ok) {
+        throw new Error(`Goldsky returned HTTP ${response.status}: ${JSON.stringify(body).slice(0, 500)}`);
+    }
+    if (Array.isArray(body.errors) && body.errors.length > 0) {
+        throw new Error(body.errors.map((e) => e?.message || String(e)).join("; "));
+    }
+    return body.data;
+}
+function bytes32Regex(value) {
+    return /^0x[a-fA-F0-9]{64}$/.test(value);
+}
+function entityListFromEnv(envName, defaults) {
+    const configured = (process.env[envName] || "")
+        .split(",")
+        .map((v) => v.trim())
+        .filter(Boolean);
+    return [...configured, ...defaults].filter((v, i, arr) => arr.indexOf(v) === i);
+}
+function normalizeAttestation(raw) {
+    return {
+        id: raw.id,
+        txHash: raw.txHash,
+        preparedTransactionHash: raw.preparedTransactionHash,
+        chainId: raw.chainId,
+        actionType: raw.actionType,
+        policyHash: raw.policyHash,
+        metadataHash: raw.metadataHash,
+        agent: raw.agent,
+        attester: raw.attester,
+        blockNumber: raw.blockNumber,
+        blockTimestamp: raw.blockTimestamp ?? raw.timestamp,
+        transactionHash: raw.transactionHash,
+        raw,
+    };
+}
+function normalizeRiskRoot(raw) {
+    return {
+        id: raw.id,
+        root: raw.root,
+        dataURI: raw.dataURI ?? raw.dataUri,
+        operator: raw.operator,
+        blockNumber: raw.blockNumber,
+        blockTimestamp: raw.blockTimestamp ?? raw.timestamp,
+        transactionHash: raw.transactionHash,
+        raw,
+    };
+}
+export async function lookupAttestationInGoldsky(txHash) {
+    const status = goldskyStatus();
+    const base = {
+        source: "goldsky",
+        configured: status.configured,
+        indexed: false,
+        entity: null,
+        endpointHost: status.endpointHost,
+        record: null,
+        triedEntities: [],
+        errors: [],
+    };
+    if (!status.enabled)
+        return { ...base, errors: ["Goldsky is disabled (GOLDSKY_ENABLED=false)."] };
+    if (!status.configured)
+        return { ...base, errors: [status.error || "GOLDSKY_SUBGRAPH_URL is not configured."] };
+    if (!bytes32Regex(txHash))
+        return { ...base, errors: ["txHash must be a 32-byte 0x-prefixed hex string."] };
+    const entities = entityListFromEnv("GOLDSKY_ATTESTATION_ENTITIES", ["safeHandsAttesteds", "attestations"]);
+    const hashField = process.env.GOLDSKY_ATTESTATION_TX_HASH_FIELD || "txHash";
+    for (const entity of entities) {
+        base.triedEntities.push(entity);
+        const query = `query SafeHandsAttestationByTxHash($txHash: Bytes!) {\n  ${entity}(first: 1, where: { ${hashField}: $txHash }) {\n    id\n    txHash\n    preparedTransactionHash\n    chainId\n    actionType\n    policyHash\n    metadataHash\n    attester\n    blockNumber\n    blockTimestamp\n    transactionHash\n  }\n}`;
+        try {
+            const data = await goldskyGraphql(query, { txHash: txHash.toLowerCase() });
+            const first = data?.[entity]?.[0];
+            if (first) {
+                return { ...base, indexed: true, entity, record: normalizeAttestation(first) };
+            }
+        }
+        catch (err) {
+            base.errors.push(`${entity}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    return base;
+}
+export async function lookupLatestRiskRootInGoldsky() {
+    const status = goldskyStatus();
+    const base = {
+        source: "goldsky",
+        configured: status.configured,
+        indexed: false,
+        entity: null,
+        endpointHost: status.endpointHost,
+        record: null,
+        triedEntities: [],
+        errors: [],
+    };
+    if (!status.enabled)
+        return { ...base, errors: ["Goldsky is disabled (GOLDSKY_ENABLED=false)."] };
+    if (!status.configured)
+        return { ...base, errors: [status.error || "GOLDSKY_SUBGRAPH_URL is not configured."] };
+    const entities = entityListFromEnv("GOLDSKY_RISK_ROOT_ENTITIES", ["riskRootCommitteds", "safeHandsRiskRootCommitteds"]);
+    for (const entity of entities) {
+        base.triedEntities.push(entity);
+        const query = `query SafeHandsLatestRiskRoot {\n  ${entity}(first: 1, orderBy: blockNumber, orderDirection: desc) {\n    id\n    root\n    dataURI\n    operator\n    blockNumber\n    blockTimestamp\n    transactionHash\n  }\n}`;
+        try {
+            const data = await goldskyGraphql(query);
+            const first = data?.[entity]?.[0];
+            if (first) {
+                return { ...base, indexed: true, entity, record: normalizeRiskRoot(first) };
+            }
+        }
+        catch (err) {
+            base.errors.push(`${entity}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    return base;
+}
+function attestationAddress() {
+    // Read-path: env override → Pacific-mainnet baked default → "" (chainId-guarded).
+    const raw = resolveSafeHandsAttestationAddress();
+    return isAddress(raw) ? raw : null;
+}
+function toJsonSafe(value) {
+    if (typeof value === "bigint")
+        return value.toString();
+    if (Array.isArray(value))
+        return value.map(toJsonSafe);
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, toJsonSafe(v)]));
+    }
+    return value;
+}
+export async function lookupAttestationOnchain(txHash) {
+    const address = attestationAddress();
+    if (!address)
+        return { source: "contract", configured: false, onchainVerified: false, address: null, record: null, error: "SAFEHANDS_ATTESTATION_ADDRESS is not configured." };
+    if (!bytes32Regex(txHash))
+        return { source: "contract", configured: true, onchainVerified: false, address, record: null, error: "txHash must be a 32-byte 0x-prefixed hex string." };
+    try {
+        const network = getActiveNetwork();
+        const rpcUrl = resolveRpcUrl(network);
+        const chain = defineChain({
+            id: network.chainId,
+            name: network.label,
+            nativeCurrency: { name: network.nativeToken, symbol: network.nativeToken, decimals: 18 },
+            rpcUrls: { default: { http: [rpcUrl] } },
+            testnet: !network.isMainnet,
+        });
+        const client = createPublicClient({ chain, transport: http(rpcUrl, { timeout: 10_000 }) });
+        const attested = await client.readContract({ address, abi: ATTESTATION_ABI, functionName: "isAttested", args: [txHash] });
+        if (!attested)
+            return { source: "contract", configured: true, onchainVerified: false, address, record: null };
+        const record = await client.readContract({ address, abi: ATTESTATION_ABI, functionName: "getAttestation", args: [txHash] });
+        return { source: "contract", configured: true, onchainVerified: true, address, record: toJsonSafe(record) };
+    }
+    catch (err) {
+        return { source: "contract", configured: true, onchainVerified: false, address, record: null, error: err instanceof Error ? err.message : String(err) };
+    }
+}
+//# sourceMappingURL=goldsky.js.map

package/dist/lib/goldsky.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goldsky.js","sourceRoot":"","sources":["../../src/lib/goldsky.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,gBAAgB,CAAC;AA2DpE,MAAM,eAAe,GAAG,QAAQ,CAAC;IAC/B,yDAAyD;IACzD,4OAA4O;IAC5O,0FAA0F;CAC3F,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,IAAY,EAAE,YAAY,GAAG,KAAK;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,YAAY,CAAC;IACzD,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACtE,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,KAAK,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AACvD,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AACxD,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;SAC7C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,QAAuB;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0CAA0C,CAAC;IACpD,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,8GAA8G,CAAC;IACxH,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,WAAW,GACf,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,KAAK;QACd,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,uHAAuH,CAAC;IACjI,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzF,OAAO,6BAA6B,GAAG,CAAC,IAAI,mCAAmC,CAAC;IAClF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,OAAO;QACL,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK;QACvC,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC;QACpC,cAAc,EAAE,cAAc,EAAE;QAChC,SAAS,EAAE,SAAS,EAAE;QACtB,YAAY,EAAE,YAAY,EAAE;QAC5B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,EAAE,CAAC;QACpC,OAAO,mDAAmD,cAAc,EAAE,IAAI,CAAC;IACjF,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9E,IAAI,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAChF,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACxF,OAAO,6DAA6D,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAU,KAAa,EAAE,YAAqC,EAAE;IAClG,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,QAAQ,EAAE;QACxD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC1C,SAAS,EAAE,SAAS,EAAE;QACtB,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,GAAG;KAClB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1I,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC,IAAS,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,QAAkB;IAC5D,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAC5C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,CAAC,GAAG,UAAU,EAAE,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAQ;IACpC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,SAAS;QACnD,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO;QACnC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,SAAS;QACnD,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAAc;IAC7D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAkD;QAC1D,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,EAAE;QACjB,MAAM,EAAE,EAAE;KACX,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,8CAA8C,CAAC,EAAE,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,yCAAyC,CAAC,EAAE,CAAC;IAChH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,kDAAkD,CAAC,EAAE,CAAC;IAE5G,MAAM,QAAQ,GAAG,iBAAiB,CAAC,8BAA8B,EAAE,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3G,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,QAAQ,CAAC;IAE5E,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,4DAA4D,MAAM,uBAAuB,SAAS,gNAAgN,CAAC;QACjU,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAwB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAClG,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YACjF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B;IACjD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAA+C;QACvD,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,EAAE;QACjB,MAAM,EAAE,EAAE;KACX,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,8CAA8C,CAAC,EAAE,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,yCAAyC,CAAC,EAAE,CAAC;IAEhH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,4BAA4B,EAAE,CAAC,oBAAoB,EAAE,6BAA6B,CAAC,CAAC,CAAC;IACxH,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,sCAAsC,MAAM,yKAAyK,CAAC;QACpO,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAwB,KAAK,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB;IACzB,kFAAkF;IAClF,MAAM,GAAG,GAAG,kCAAkC,EAAE,CAAC;IACjD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAqB,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAAc;IAC3D,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;IAC/K,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;IAErL,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,IAAI,EAAE,OAAO,CAAC,KAAK;YACnB,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;YACxF,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;YACxC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,MAAuB,CAAC,EAAE,CAAY,CAAC;QACtJ,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC9G,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,MAAuB,CAAC,EAAE,CAAC,CAAC;QAC7I,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAA4B,EAAE,CAAC;IACzI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1J,CAAC;AACH,CAAC"}

package/dist/lib/guardian/decision.d.ts

@@ -0,0 +1,23 @@
+export type GuardianDecision = "ALLOW" | "BLOCK" | "REQUIRE_CONFIRMATION" | "PREPARE_ONLY";
+export declare const GUARDIAN_DECISIONS: readonly GuardianDecision[];
+export interface MapEngineDecisionOptions {
+    /**
+     * When false, an otherwise-ALLOW action is returned as PREPARE_ONLY because
+     * this deployment cannot execute it (read-only / hosted mode, or execution
+     * gated/disabled on the active network). The caller must execute externally.
+     */
+    executionAvailable?: boolean;
+}
+/**
+ * Map an internal engine decision to the public four-value SafeHands contract.
+ *
+ *   ALLOW                 -> ALLOW  (or PREPARE_ONLY when execution is unavailable)
+ *   BLOCK                 -> BLOCK
+ *   WARN                  -> REQUIRE_CONFIRMATION
+ *   REQUIRE_CONFIRMATION  -> REQUIRE_CONFIRMATION
+ *   REQUIRE_TOKEN_REVIEW  -> REQUIRE_CONFIRMATION
+ *   REQUIRE_FUNDING       -> PREPARE_ONLY
+ *   (anything unknown)    -> REQUIRE_CONFIRMATION  (fail safe — never a silent ALLOW)
+ */
+export declare function mapEngineDecision(engineDecision: string, options?: MapEngineDecisionOptions): GuardianDecision;
+//# sourceMappingURL=decision.d.ts.map

package/dist/lib/guardian/decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../../../src/lib/guardian/decision.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,gBAAgB,GACxB,OAAO,GACP,OAAO,GACP,sBAAsB,GACtB,cAAc,CAAC;AAEnB,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EAKhD,CAAC;AAEX,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,wBAA6B,GACrC,gBAAgB,CAgBlB"}

package/dist/lib/guardian/decision.js

@@ -0,0 +1,40 @@
+// ─── SafeHands Decision Contract ──────────────────────────────
+// The public, four-value decision the SafeHands returns. The internal policy
+// engine keeps richer detail (reasons, checks, sub-status) for explanations,
+// but only these four values are exposed as the public decision.
+// ────────────────────────────────────────────────────────────────────────
+export const GUARDIAN_DECISIONS = [
+    "ALLOW",
+    "BLOCK",
+    "REQUIRE_CONFIRMATION",
+    "PREPARE_ONLY",
+];
+/**
+ * Map an internal engine decision to the public four-value SafeHands contract.
+ *
+ *   ALLOW                 -> ALLOW  (or PREPARE_ONLY when execution is unavailable)
+ *   BLOCK                 -> BLOCK
+ *   WARN                  -> REQUIRE_CONFIRMATION
+ *   REQUIRE_CONFIRMATION  -> REQUIRE_CONFIRMATION
+ *   REQUIRE_TOKEN_REVIEW  -> REQUIRE_CONFIRMATION
+ *   REQUIRE_FUNDING       -> PREPARE_ONLY
+ *   (anything unknown)    -> REQUIRE_CONFIRMATION  (fail safe — never a silent ALLOW)
+ */
+export function mapEngineDecision(engineDecision, options = {}) {
+    const executionAvailable = options.executionAvailable ?? true;
+    switch (engineDecision) {
+        case "ALLOW":
+            return executionAvailable ? "ALLOW" : "PREPARE_ONLY";
+        case "BLOCK":
+            return "BLOCK";
+        case "WARN":
+        case "REQUIRE_CONFIRMATION":
+        case "REQUIRE_TOKEN_REVIEW":
+            return "REQUIRE_CONFIRMATION";
+        case "REQUIRE_FUNDING":
+            return "PREPARE_ONLY";
+        default:
+            return "REQUIRE_CONFIRMATION";
+    }
+}
+//# sourceMappingURL=decision.js.map

package/dist/lib/guardian/decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision.js","sourceRoot":"","sources":["../../../src/lib/guardian/decision.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,6EAA6E;AAC7E,6EAA6E;AAC7E,iEAAiE;AACjE,2EAA2E;AAQ3E,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC7D,OAAO;IACP,OAAO;IACP,sBAAsB;IACtB,cAAc;CACN,CAAC;AAWX;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,cAAsB,EACtB,UAAoC,EAAE;IAEtC,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAC9D,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,OAAO;YACV,OAAO,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QACvD,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,sBAAsB,CAAC;QAC5B,KAAK,sBAAsB;YACzB,OAAO,sBAAsB,CAAC;QAChC,KAAK,iBAAiB;YACpB,OAAO,cAAc,CAAC;QACxB;YACE,OAAO,sBAAsB,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/lib/http.d.ts

@@ -9,7 +9,6 @@ export interface FetchWithRetryOptions extends RequestInit {
     retryDelayMs?: number;
 }
 export declare function fetchWithTimeoutAndRetry(url: string | URL, options?: FetchWithRetryOptions): Promise<Response>;
-export declare function redactSensitive(value: unknown): unknown;
 export declare function isBlockedIp(ip: string): boolean;
 export declare function assertSafeFetchUrl(rawUrl: string): Promise<void>;
 //# sourceMappingURL=http.d.ts.map

package/dist/lib/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/lib/http.ts"],"names":[],"mappings":"AAKA,qBAAa,SAAU,SAAQ,KAAK;aAGhB,MAAM,CAAC,EAAE,MAAM;aACf,UAAU,CAAC,EAAE,MAAM;gBAFnC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,UAAU,CAAC,EAAE,MAAM,YAAA;CAKtC;AAED,MAAM,WAAW,qBAAsB,SAAQ,WAAW;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAUD,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAIvD;AAeD,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CA4B/C;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BtE"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/lib/http.ts"],"names":[],"mappings":"AAOA,qBAAa,SAAU,SAAQ,KAAK;aAGhB,MAAM,CAAC,EAAE,MAAM;aACf,UAAU,CAAC,EAAE,MAAM;gBAFnC,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,UAAU,CAAC,EAAE,MAAM,YAAA;CAKtC;AAED,MAAM,WAAW,qBAAsB,SAAQ,WAAW;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAqED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,QAAQ,CAAC,CAsBnB;AAyMD,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CA4C/C;AAmED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBtE"}