safehands-pharos 1.5.0 → 2.6.0

package/dist/tools/approveToken.js

@@ -1,55 +1,111 @@
 // ─── Tool: approve_token ───────────────────────────────────────────────
-// Approves ERC-20 token spending for DODO swap router.
+// Approves ERC-20 token spending for an EXPLICIT, caller-provided spender.
+// There is no default spender: the former DODO_APPROVE_ADDRESS default silently
+// approved a testnet-provenance address on mainnet while stamping
+// spenderVerified:true — a fabricated claim. Spender verification now comes
+// only from the ecosystem registry (addressTrustEvidence); anything else is an
+// unverified claim and the policy engine requires explicit confirmation.
 // ────────────────────────────────────────────────────────────────────────
 import { z } from "zod";
+import { isAddress } from "viem";
 import { publicClient, createPharosWalletClientFromAccount, getExplorerUrl } from "../lib/pharosClient.js";
-import { DODO_APPROVE_ADDRESS, USDC_ADDRESS, USDT_ADDRESS, ERC20_ABI, MAX_APPROVAL_AMOUNT_USDC, CHAIN_ID, PHAROS_ENVIRONMENT } from "../lib/constants.js";
-import { resolveTokenDecimals, toWei } from "../lib/dodoApi.js";
+import { ERC20_ABI, MAX_APPROVAL_AMOUNT_USDC, CHAIN_ID, PHAROS_ENVIRONMENT, IS_MAINNET, activeTokenMap, activeTokenDecimals } from "../lib/constants.js";
+import { addressTrustEvidence } from "../lib/ecosystemRegistry.js";
+import { toWei } from "../lib/dodoApi.js";
 import { fail, ok, classifyExternalError } from "../lib/toolResponse.js";
-import { getSigner, isSignerFailure } from "../lib/signer/index.js";
+import { requireManagedExecutionReady, isManagedExecutionFailure } from "../lib/managedExecution.js";
 import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
+import { enforceWriteDecision } from "../lib/policy/writeExecutionGate.js";
+import { evaluateTokenSecurityGate } from "./checkTokenSecurity.js";
+import { validatePositiveAmount } from "../lib/validation.js";
 export const approveTokenSchema = z.object({
     token: z.enum(["USDC", "USDT"]).describe("ERC-20 token to approve"),
     amount: z.string().describe("Human-readable amount to approve, or 'max' for unlimited"),
-    agentId: z.string().optional().describe("Managed testnet wallet agentId when WALLET_MODE=managed-testnet"),
-});
+    spender: z.string().describe("EXPLICIT spender contract address to approve (0x…). There is no default spender; SafeHands never picks one for you. Verification is derived from the ecosystem registry; unverified spenders require confirm=true."),
+    agentId: z.string().optional().describe("Managed wallet agentId when WALLET_MODE=managed-mainnet"),
+    confirm: z.boolean().optional().default(false).describe("Explicit acknowledgement to proceed when SafeHands returns REQUIRE_CONFIRMATION / REQUIRE_TOKEN_REVIEW. Hard BLOCK / honeypot / unlimited / over-limit are never overridable."),
+}).strict();
 export const approveTokenTool = {
     name: "approve_token",
-    description: "Approve ERC-20 token spending for FaroSwap (DODO) router. Required before swapping non-native tokens.",
+    description: "Approve ERC-20 token spending for an explicit spender address you provide. Spender trust is derived from the SafeHands ecosystem registry (never asserted blindly); approvals to unverified spenders require explicit confirmation, and unlimited approvals are blocked by default. Gated by WRITE_TOOLS_ENABLED.",
     inputSchema: approveTokenSchema,
 };
+function resolveApprovalToken(symbol) {
+    const map = activeTokenMap();
+    const decimals = activeTokenDecimals();
+    const tokenAddress = map[symbol];
+    if (!tokenAddress) {
+        return null;
+    }
+    return {
+        tokenAddress,
+        decimals: decimals[symbol] ?? decimals[tokenAddress.toLowerCase()] ?? 18,
+    };
+}
 export async function handleApproveToken(raw) {
-    if (process.env.WRITE_TOOLS_ENABLED !== "true") {
-        return fail("WRITE_TOOLS_DISABLED", "approve_token is disabled by default. Set WRITE_TOOLS_ENABLED=true only for trusted testnet execution.", false, "approve_token");
+    let input;
+    try {
+        input = approveTokenSchema.parse(raw);
+    }
+    catch (err) {
+        const msg = err instanceof z.ZodError
+            ? err.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")
+            : String(err);
+        return fail("VALIDATION_ERROR", `approve_token input validation failed: ${msg}`, false, "approve_token");
+    }
+    if (input.amount !== "max") {
+        const amtErr = validatePositiveAmount(input.amount, "amount");
+        if (amtErr)
+            return fail("VALIDATION_ERROR", amtErr, false, "approve_token");
+    }
+    if (!isAddress(input.spender)) {
+        return fail("VALIDATION_ERROR", `spender must be a valid EVM address (got "${input.spender}").`, false, "approve_token");
+    }
+    const spender = input.spender;
+    // Registry-derived trust — the ONLY source of a spenderVerified assertion.
+    // Not verified ⇒ pass undefined so the policy engine treats the spender as an
+    // unverified claim (spender_reputation: unknown → REQUIRE_CONFIRMATION).
+    const spenderEvidence = addressTrustEvidence(spender, CHAIN_ID);
+    const resolved = resolveApprovalToken(input.token);
+    if (!resolved) {
+        return fail("UNSUPPORTED_TOKEN", `${input.token} is not configured for ${PHAROS_ENVIRONMENT} (${CHAIN_ID}). Use a supported active-network token such as USDC, or add a verified ${input.token} address before approving.`, false, "approve_token");
     }
-    const input = approveTokenSchema.parse(raw);
-    const signer = await getSigner(input.agentId);
-    if (isSignerFailure(signer)) {
-        return fail(signer.error.code, signer.error.message, false, "approve_token");
+    const gate = await requireManagedExecutionReady("approve_token", input.agentId);
+    if (isManagedExecutionFailure(gate))
+        return gate;
+    const { signer } = gate;
+    // Consult token-security (GoPlus) on the token being approved. Honeypot /
+    // extreme-tax → hard block; flagged/unavailable → REQUIRE_TOKEN_REVIEW.
+    const sec = await evaluateTokenSecurityGate(resolved.tokenAddress);
+    if (sec.verdict === "block") {
+        return fail("TOKEN_SECURITY_BLOCKED", `Approval blocked: ${sec.detail ?? "token failed security review"} ${sec.flags.join("; ")}`.trim(), false, "approve_token");
     }
     const policy = evaluateActionPolicy({
         actionType: "approve_token",
+        agentId: input.agentId,
         approvalAmount: input.amount,
         approvalToken: input.token,
         approvalUnlimited: input.amount === "max",
-        spender: DODO_APPROVE_ADDRESS,
-        spenderVerified: true,
+        tokenSecurityStatus: sec.policyStatus,
+        spender,
+        spenderVerified: spenderEvidence.verifiedCanonical ? true : undefined,
         chainId: CHAIN_ID,
         environment: PHAROS_ENVIRONMENT,
-        isMainnet: false,
+        isMainnet: IS_MAINNET,
         signerAvailable: true,
         requiresSigner: true,
         allowUnlimitedApproval: process.env.ALLOW_UNLIMITED_APPROVAL === "true",
     });
-    if (policy.decision === "BLOCK") {
-        const code = input.amount === "max" ? "UNLIMITED_APPROVAL_BLOCKED" : "POLICY_BLOCKED";
-        return fail(code, policy.reasons.join(" ") || "Approval blocked by SafeHands policy.", false, "approve_token");
+    if (policy.decision === "BLOCK" && input.amount === "max") {
+        return fail("UNLIMITED_APPROVAL_BLOCKED", policy.reasons.join(" ") || "Unlimited approval blocked by SafeHands policy.", false, "approve_token");
     }
+    const approvalGate = enforceWriteDecision(policy, { confirmed: input.confirm === true, toolName: "approve_token" });
+    if (approvalGate)
+        return approvalGate;
     if (input.amount !== "max" && Number(input.amount) > Number(MAX_APPROVAL_AMOUNT_USDC)) {
-        return fail("APPROVAL_LIMIT_EXCEEDED", `Approval amount exceeds configured testnet limit (${MAX_APPROVAL_AMOUNT_USDC}).`, false, "approve_token");
+        return fail("APPROVAL_LIMIT_EXCEEDED", `Approval amount exceeds the operator ceiling MAX_APPROVAL_AMOUNT_USDC (${MAX_APPROVAL_AMOUNT_USDC}), which bounds all agent policies. Raise MAX_APPROVAL_AMOUNT_USDC to allow larger mainnet approvals.`, false, "approve_token");
     }
-    const tokenAddress = input.token === "USDC" ? USDC_ADDRESS : USDT_ADDRESS;
-    const decimals = resolveTokenDecimals(input.token);
+    const { tokenAddress, decimals } = resolved;
     const approveAmount = input.amount === "max"
         ? 2n ** 256n - 1n
         : BigInt(toWei(input.amount, decimals));
@@ -59,7 +115,7 @@ export async function handleApproveToken(raw) {
             address: tokenAddress,
             abi: ERC20_ABI,
             functionName: "approve",
-            args: [DODO_APPROVE_ADDRESS, approveAmount],
+            args: [spender, approveAmount],
         });
         const receipt = await publicClient.waitForTransactionReceipt({ hash: txHash });
         if (receipt.status !== "success") {
@@ -71,7 +127,18 @@ export async function handleApproveToken(raw) {
             token: input.token,
             tokenAddress,
             approvedAmount: input.amount === "max" ? "unlimited" : input.amount,
-            spender: DODO_APPROVE_ADDRESS,
+            spender,
+            spenderVerified: spenderEvidence.verifiedCanonical,
+            spenderRegistryEvidence: spenderEvidence.recognized || spenderEvidence.note
+                ? {
+                    recognized: spenderEvidence.recognized,
+                    verifiedCanonical: spenderEvidence.verifiedCanonical,
+                    label: spenderEvidence.contractLabel,
+                    item: spenderEvidence.itemId,
+                    verificationStatus: spenderEvidence.verificationStatus,
+                    note: spenderEvidence.note,
+                }
+                : null,
             signerMode: signer.mode,
             walletAddress: signer.address,
             gasUsed: receipt.gasUsed.toString(),

package/dist/tools/approveToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"approveToken.js","sourceRoot":"","sources":["../../src/tools/approveToken.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,uDAAuD;AACvD,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,mCAAmC,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,wBAAwB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC1J,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,EAAE,EAA4B,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACvF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;CAC3G,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,uGAAuG;IACzG,WAAW,EAAE,kBAAkB;CAChC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAsB;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,EAAE,CAAC;QAC/C,OAAO,IAAI,CACT,sBAAsB,EACtB,wGAAwG,EACxG,KAAK,EACL,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,UAAU,EAAE,eAAe;QAC3B,cAAc,EAAE,KAAK,CAAC,MAAM;QAC5B,aAAa,EAAE,KAAK,CAAC,KAAK;QAC1B,iBAAiB,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK;QACzC,OAAO,EAAE,oBAAoB;QAC7B,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,KAAK;QAChB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,IAAI;QACpB,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,MAAM;KACxE,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACtF,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,uCAAuC,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IACjH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC,yBAAyB,EAAE,qDAAqD,wBAAwB,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IACpJ,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAEnD,MAAM,aAAa,GACjB,KAAK,CAAC,MAAM,KAAK,KAAK;QACpB,CAAC,CAAC,EAAE,IAAI,IAAI,GAAG,EAAE;QACjB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mCAAmC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;YACxC,OAAO,EAAE,YAAY;YACrB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,oBAAoB,EAAE,aAAa,CAAC;SAC5C,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,aAAa,EAAE,4DAA4D,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;QACnH,CAAC;QAED,OAAO,EAAE,CAAC;YACR,MAAM;YACN,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC;YACnC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY;YACZ,cAAc,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;YACnE,OAAO,EAAE,oBAAoB;YAC7B,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;YACnC,MAAM;YACN,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,qBAAqB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}
+{"version":3,"file":"approveToken.js","sourceRoot":"","sources":["../../src/tools/approveToken.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,gFAAgF;AAChF,kEAAkE;AAClE,4EAA4E;AAC5E,+EAA+E;AAC/E,yEAAyE;AACzE,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,mCAAmC,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC3G,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACzJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACvF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oNAAoN,CAAC;IAClP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;IAClG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,+KAA+K,CAAC;CACzO,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,mTAAmT;IACrT,WAAW,EAAE,kBAAkB;CAChC,CAAC;AAEF,SAAS,oBAAoB,CAAC,MAAuB;IACnD,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,YAAY;QACZ,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;KACzE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAsB;IAC7D,IAAI,KAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,QAAQ;YACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,kBAAkB,EAAE,0CAA0C,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC3G,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,kBAAkB,EAAE,6CAA6C,KAAK,CAAC,OAAO,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAwB,CAAC;IAC/C,2EAA2E;IAC3E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEhE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CACT,mBAAmB,EACnB,GAAG,KAAK,CAAC,KAAK,0BAA0B,kBAAkB,KAAK,QAAQ,2EAA2E,KAAK,CAAC,KAAK,4BAA4B,EACzL,KAAK,EACL,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChF,IAAI,yBAAyB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnE,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,wBAAwB,EAAE,qBAAqB,GAAG,CAAC,MAAM,IAAI,8BAA8B,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IACpK,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,UAAU,EAAE,eAAe;QAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,MAAM;QAC5B,aAAa,EAAE,KAAK,CAAC,KAAK;QAC1B,iBAAiB,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK;QACzC,mBAAmB,EAAE,GAAG,CAAC,YAAY;QACrC,OAAO;QACP,eAAe,EAAE,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACrE,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,UAAU;QACrB,eAAe,EAAE,IAAI;QACrB,cAAc,EAAE,IAAI;QACpB,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,MAAM;KACxE,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,4BAA4B,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,iDAAiD,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IACnJ,CAAC;IACD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IACpH,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC,yBAAyB,EAAE,0EAA0E,wBAAwB,uGAAuG,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC5Q,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAC5C,MAAM,aAAa,GACjB,KAAK,CAAC,MAAM,KAAK,KAAK;QACpB,CAAC,CAAC,EAAE,IAAI,IAAI,GAAG,EAAE;QACjB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mCAAmC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;YACxC,OAAO,EAAE,YAAY;YACrB,GAAG,EAAE,SAAS;YACd,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;SAC/B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE/E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,aAAa,EAAE,4DAA4D,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;QACnH,CAAC;QAED,OAAO,EAAE,CAAC;YACR,MAAM;YACN,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC;YACnC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY;YACZ,cAAc,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;YACnE,OAAO;YACP,eAAe,EAAE,eAAe,CAAC,iBAAiB;YAClD,uBAAuB,EAAE,eAAe,CAAC,UAAU,IAAI,eAAe,CAAC,IAAI;gBACzE,CAAC,CAAC;oBACE,UAAU,EAAE,eAAe,CAAC,UAAU;oBACtC,iBAAiB,EAAE,eAAe,CAAC,iBAAiB;oBACpD,KAAK,EAAE,eAAe,CAAC,aAAa;oBACpC,IAAI,EAAE,eAAe,CAAC,MAAM;oBAC5B,kBAAkB,EAAE,eAAe,CAAC,kBAAkB;oBACtD,IAAI,EAAE,eAAe,CAAC,IAAI;iBAC3B;gBACH,CAAC,CAAC,IAAI;YACR,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE;YACnC,MAAM;YACN,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,qBAAqB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/tools/assessRisk.d.ts

@@ -1,5 +1,6 @@
 import { z } from "zod";
 import { type RiskAssessment } from "../lib/riskEngine.js";
+import { type ToolResponse } from "../lib/toolResponse.js";
 export declare const assessRiskSchema: z.ZodObject<{
     action: z.ZodEnum<["swap", "transfer"]>;
     tokenIn: z.ZodOptional<z.ZodString>;
@@ -8,39 +9,28 @@ export declare const assessRiskSchema: z.ZodObject<{
     toAddress: z.ZodOptional<z.ZodString>;
     walletAddress: z.ZodString;
     agentId: z.ZodOptional<z.ZodString>;
-    autoPublish: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     privateKey: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
+}, "strict", z.ZodTypeAny, {
     amount: string;
     walletAddress: string;
     action: "transfer" | "swap";
-    autoPublish: boolean;
-    tokenIn?: string | undefined;
-    tokenOut?: string | undefined;
     privateKey?: string | undefined;
     agentId?: string | undefined;
+    tokenIn?: string | undefined;
+    tokenOut?: string | undefined;
     toAddress?: string | undefined;
 }, {
     amount: string;
     walletAddress: string;
     action: "transfer" | "swap";
-    tokenIn?: string | undefined;
-    tokenOut?: string | undefined;
     privateKey?: string | undefined;
     agentId?: string | undefined;
+    tokenIn?: string | undefined;
+    tokenOut?: string | undefined;
     toAddress?: string | undefined;
-    autoPublish?: boolean | undefined;
 }>;
 export type AssessRiskInput = z.input<typeof assessRiskSchema>;
-export interface AssessRiskResult extends RiskAssessment {
-    registryPublish?: {
-        published: boolean;
-        txHash?: string;
-        explorerUrl?: string;
-        error?: string;
-        signerMode?: string;
-    };
-}
+export type AssessRiskResult = RiskAssessment;
 export declare const assessRiskTool: {
     name: string;
     description: string;
@@ -52,29 +42,26 @@ export declare const assessRiskTool: {
         toAddress: z.ZodOptional<z.ZodString>;
         walletAddress: z.ZodString;
         agentId: z.ZodOptional<z.ZodString>;
-        autoPublish: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
         privateKey: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
+    }, "strict", z.ZodTypeAny, {
         amount: string;
         walletAddress: string;
         action: "transfer" | "swap";
-        autoPublish: boolean;
-        tokenIn?: string | undefined;
-        tokenOut?: string | undefined;
         privateKey?: string | undefined;
         agentId?: string | undefined;
+        tokenIn?: string | undefined;
+        tokenOut?: string | undefined;
         toAddress?: string | undefined;
     }, {
         amount: string;
         walletAddress: string;
         action: "transfer" | "swap";
-        tokenIn?: string | undefined;
-        tokenOut?: string | undefined;
         privateKey?: string | undefined;
         agentId?: string | undefined;
+        tokenIn?: string | undefined;
+        tokenOut?: string | undefined;
         toAddress?: string | undefined;
-        autoPublish?: boolean | undefined;
     }>;
 };
-export declare function handleAssessRisk(raw: AssessRiskInput): Promise<AssessRiskResult>;
+export declare function handleAssessRisk(raw: AssessRiskInput): Promise<ToolResponse<AssessRiskResult>>;
 //# sourceMappingURL=assessRisk.d.ts.map

package/dist/tools/assessRisk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessRisk.d.ts","sourceRoot":"","sources":["../../src/tools/assessRisk.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAMvE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU3B,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/D,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,eAAe,CAAC,EAAE;QAChB,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAM1B,CAAC;AAEF,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmFtF"}
+{"version":3,"file":"assessRisk.d.ts","sourceRoot":"","sources":["../../src/tools/assessRisk.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGrE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;EASlB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAE9C,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAM1B,CAAC;AAEF,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAsCpG"}

package/dist/tools/assessRisk.js

@@ -1,13 +1,12 @@
 // ─── Tool: assess_risk ─────────────────────────────────────────────────
-// Core risk assessment tool. Optional on-chain publishing uses SignerProvider
-// and never accepts or returns raw private keys.
+// Core risk assessment tool. Risk scoring / analysis ONLY — it never writes
+// to any registry. To publish an attestation on-chain, use publish_risk_score
+// (SafeHandsRegistry, gated by WRITE_TOOLS_ENABLED + signer + authorization).
 // ────────────────────────────────────────────────────────────────────────
 import { z } from "zod";
 import { assessRisk } from "../lib/riskEngine.js";
-import { createPharosWalletClientFromAccount, publicClient, getExplorerUrl } from "../lib/pharosClient.js";
-import { RISK_REGISTRY_ADDRESS, RISK_REGISTRY_ABI } from "../lib/constants.js";
-import { getSigner, isSignerFailure } from "../lib/signer/index.js";
-import { requireWriteToolsEnabled } from "../lib/toolResponse.js";
+import { fail, ok } from "../lib/toolResponse.js";
+import { validatePositiveAmount, validateAddress } from "../lib/validation.js";
 export const assessRiskSchema = z.object({
     action: z.enum(["swap", "transfer"]),
     tokenIn: z.string().optional(),
@@ -15,23 +14,42 @@ export const assessRiskSchema = z.object({
     amount: z.string(),
     toAddress: z.string().optional(),
     walletAddress: z.string(),
-    agentId: z.string().optional().describe("Managed testnet wallet agentId for optional registry publishing"),
-    autoPublish: z.boolean().optional().default(false).describe("If true, publish to RiskRegistry through SignerProvider when write tools are enabled"),
-    privateKey: z.string().optional().describe("Deprecated and ignored. Use SignerProvider via WALLET_MODE/agentId instead."),
-});
+    agentId: z.string().optional().describe("Optional agent identifier (informational only; assess_risk does not execute or publish)"),
+    privateKey: z.string().optional().describe("Deprecated and ignored. assess_risk never signs or publishes. Use publish_risk_score for on-chain attestation."),
+}).strict();
 export const assessRiskTool = {
     name: "assess_risk",
     description: "Evaluate risk of a planned on-chain action (swap or transfer). Returns 0-100 risk score with 5-dimension breakdown. " +
-        "Optional RiskRegistry publishing uses SignerProvider when autoPublish=true.",
+        "Scoring and analysis only; does not publish on-chain. Use publish_risk_score to attest a result to SafeHandsRegistry.",
     inputSchema: assessRiskSchema,
 };
 export async function handleAssessRisk(raw) {
-    const input = assessRiskSchema.parse(raw);
+    let input;
+    try {
+        input = assessRiskSchema.parse(raw);
+    }
+    catch (err) {
+        const msg = err instanceof z.ZodError
+            ? err.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")
+            : String(err);
+        return fail("VALIDATION_ERROR", `assess_risk input validation failed: ${msg}`, false, "assess_risk");
+    }
+    const amtErr = validatePositiveAmount(input.amount, "amount");
+    if (amtErr)
+        return fail("VALIDATION_ERROR", amtErr, false, "assess_risk");
+    const addrErr = validateAddress(input.walletAddress, "walletAddress");
+    if (addrErr)
+        return fail("VALIDATION_ERROR", addrErr, false, "assess_risk");
     if (input.action === "swap" && (!input.tokenIn || !input.tokenOut)) {
-        throw new Error("Swap action requires both tokenIn and tokenOut");
+        return fail("VALIDATION_ERROR", "Swap action requires both tokenIn and tokenOut.", false, "assess_risk");
     }
-    if (input.action === "transfer" && !input.toAddress) {
-        throw new Error("Transfer action requires toAddress");
+    if (input.action === "transfer") {
+        if (!input.toAddress) {
+            return fail("VALIDATION_ERROR", "Transfer action requires toAddress.", false, "assess_risk");
+        }
+        const toErr = validateAddress(input.toAddress, "toAddress");
+        if (toErr)
+            return fail("VALIDATION_ERROR", toErr, false, "assess_risk");
     }
     const assessment = await assessRisk({
         action: input.action,
@@ -41,65 +59,6 @@ export async function handleAssessRisk(raw) {
         toAddress: input.toAddress,
         walletAddress: input.walletAddress,
     });
-    const result = { ...assessment };
-    const wantsPublish = input.autoPublish || Boolean(input.privateKey);
-    if (wantsPublish) {
-        if (input.privateKey) {
-            result.registryPublish = {
-                published: false,
-                error: "Direct privateKey input is deprecated and ignored. Use WALLET_MODE=managed-testnet with agentId or WALLET_MODE=env through SignerProvider.",
-            };
-            return result;
-        }
-        const writeGuard = requireWriteToolsEnabled("assess_risk_auto_publish");
-        if (writeGuard) {
-            result.registryPublish = { published: false, error: `${writeGuard.error.code}: ${writeGuard.error.message}` };
-            return result;
-        }
-        const signer = await getSigner(input.agentId);
-        if (isSignerFailure(signer)) {
-            result.registryPublish = { published: false, error: `${signer.error.code}: ${signer.error.message}` };
-            return result;
-        }
-        try {
-            const wallet = createPharosWalletClientFromAccount(signer.account);
-            const txHash = await wallet.writeContract({
-                address: RISK_REGISTRY_ADDRESS,
-                abi: RISK_REGISTRY_ABI,
-                functionName: "publish",
-                args: [
-                    input.walletAddress,
-                    BigInt(assessment.riskScore),
-                    assessment.riskLevel,
-                    assessment.recommendation,
-                ],
-            });
-            const receipt = await publicClient.waitForTransactionReceipt({ hash: txHash });
-            if (receipt.status !== "success") {
-                result.registryPublish = {
-                    published: false,
-                    txHash,
-                    explorerUrl: getExplorerUrl(txHash),
-                    error: "TX_REVERTED: transaction was mined but reverted. Ensure the calling wallet is authorized via RiskRegistry.setAuthorizedAgent() by the contract owner.",
-                    signerMode: signer.mode,
-                };
-            }
-            else {
-                result.registryPublish = {
-                    published: true,
-                    txHash,
-                    explorerUrl: getExplorerUrl(txHash),
-                    signerMode: signer.mode,
-                };
-            }
-        }
-        catch (err) {
-            result.registryPublish = {
-                published: false,
-                error: `Registry publish failed: ${err.message}`,
-            };
-        }
-    }
-    return result;
+    return ok(assessment);
 }
 //# sourceMappingURL=assessRisk.js.map

package/dist/tools/assessRisk.js.map

@@ -1 +1 @@
-{"version":3,"file":"assessRisk.js","sourceRoot":"","sources":["../../src/tools/assessRisk.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAC9E,iDAAiD;AACjD,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAuB,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,mCAAmC,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC3G,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAElE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC1G,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,sFAAsF,CAAC;IACnJ,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;CAC1H,CAAC,CAAC;AAcH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,sHAAsH;QACtH,6EAA6E;IAC/E,WAAW,EAAE,gBAAgB;CAC9B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAoB;IACzD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAqB,EAAE,GAAG,UAAU,EAAE,CAAC;IAEnD,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,CAAC,eAAe,GAAG;gBACvB,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,4IAA4I;aACpJ,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,0BAA0B,CAAC,CAAC;QACxE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,eAAe,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9G,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,eAAe,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACtG,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mCAAmC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;gBACxC,OAAO,EAAE,qBAAqB;gBAC9B,GAAG,EAAE,iBAAiB;gBACtB,YAAY,EAAE,SAAS;gBACvB,IAAI,EAAE;oBACJ,KAAK,CAAC,aAA8B;oBACpC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;oBAC5B,UAAU,CAAC,SAAS;oBACpB,UAAU,CAAC,cAAc;iBAC1B;aACF,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAE/E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,CAAC,eAAe,GAAG;oBACvB,SAAS,EAAE,KAAK;oBAChB,MAAM;oBACN,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC;oBACnC,KAAK,EAAE,uJAAuJ;oBAC9J,UAAU,EAAE,MAAM,CAAC,IAAI;iBACxB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,eAAe,GAAG;oBACvB,SAAS,EAAE,IAAI;oBACf,MAAM;oBACN,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC;oBACnC,UAAU,EAAE,MAAM,CAAC,IAAI;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,eAAe,GAAG;gBACvB,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE;aAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"assessRisk.js","sourceRoot":"","sources":["../../src/tools/assessRisk.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAuB,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yFAAyF,CAAC;IAClI,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gHAAgH,CAAC;CAC7J,CAAC,CAAC,MAAM,EAAE,CAAC;AAMZ,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,sHAAsH;QACtH,uHAAuH;IACzH,WAAW,EAAE,gBAAgB;CAC9B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAoB;IACzD,IAAI,KAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,QAAQ;YACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,kBAAkB,EAAE,wCAAwC,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IACvG,CAAC;IAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAE1E,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACtE,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAE5E,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC,kBAAkB,EAAE,iDAAiD,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,kBAAkB,EAAE,qCAAqC,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC5D,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;AACxB,CAAC"}

package/dist/tools/checkAllowance.d.ts

@@ -30,15 +30,21 @@ export declare const checkAllowanceTool: {
         amount?: string | undefined;
     }>;
 };
-export declare function handleCheckAllowance(raw: CheckAllowanceInput): Promise<import("../lib/toolResponse.js").ToolSuccess<{
+export declare function handleCheckAllowance(raw: CheckAllowanceInput): Promise<import("../sdk.js").ToolFailure | import("../sdk.js").ToolSuccess<{
     token: "USDC" | "USDT";
-    tokenAddress: "0xE7E84B8B4f39C507499c40B4ac199B050e2882d5" | "0xE0BE08c77f415F577A1B3A9aD7a1Df1479564ec8";
-    walletAddress: string;
+    tokenAddress: `0x${string}`;
+    walletAddress: `0x${string}`;
     spender: "0x4Cf317b8918FbE8A890c01eDAb7d548555Ac2cE9";
+    spenderRecognition: {
+        recognized: boolean;
+        label: string;
+    };
     allowance: string;
     allowanceRaw: string;
     isApproved: boolean;
     needsApproval: boolean;
     approvalNote: string;
+    chainId: number;
+    environment: string;
 }>>;
 //# sourceMappingURL=checkAllowance.d.ts.map

package/dist/tools/checkAllowance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkAllowance.d.ts","sourceRoot":"","sources":["../../src/tools/checkAllowance.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;EAI/B,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;CAK9B,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,mBAAmB;;;;;;;;;;IAyClE"}
+{"version":3,"file":"checkAllowance.d.ts","sourceRoot":"","sources":["../../src/tools/checkAllowance.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;EAI/B,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;CAK9B,CAAC;AAaF,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,mBAAmB;;;;;;;;;;;;;;;;IA2DlE"}

package/dist/tools/checkAllowance.js

@@ -3,9 +3,10 @@
 // ────────────────────────────────────────────────────────────────────────
 import { z } from "zod";
 import { publicClient } from "../lib/pharosClient.js";
-import { DODO_APPROVE_ADDRESS, USDC_ADDRESS, USDT_ADDRESS, ERC20_ABI, } from "../lib/constants.js";
-import { formatUnits, parseUnits } from "viem";
-import { ok } from "../lib/toolResponse.js";
+import { DODO_APPROVE_ADDRESS, ERC20_ABI, CHAIN_ID, PHAROS_ENVIRONMENT, activeTokenMap, activeTokenDecimals, } from "../lib/constants.js";
+import { formatUnits, isAddress, parseUnits } from "viem";
+import { ok, fail } from "../lib/toolResponse.js";
+import { lookupCanonical } from "../lib/analysis/contractIntel.js";
 export const checkAllowanceSchema = z.object({
     walletAddress: z.string().describe("Wallet address to check allowance for"),
     token: z.enum(["USDC", "USDT"]).describe("ERC-20 token to check"),
@@ -16,11 +17,28 @@ export const checkAllowanceTool = {
     description: "Check ERC-20 token allowance granted to DODO_APPROVE_ADDRESS for swaps. Returns current allowance and whether approval is needed.",
     inputSchema: checkAllowanceSchema,
 };
+function resolveAllowanceToken(symbol) {
+    const map = activeTokenMap();
+    const decimalsMap = activeTokenDecimals();
+    const tokenAddress = map[symbol];
+    if (!tokenAddress)
+        return null;
+    return {
+        tokenAddress,
+        decimals: decimalsMap[symbol] ?? decimalsMap[tokenAddress.toLowerCase()] ?? 18,
+    };
+}
 export async function handleCheckAllowance(raw) {
     const input = checkAllowanceSchema.parse(raw);
+    if (!isAddress(input.walletAddress)) {
+        return fail("INVALID_WALLET_ADDRESS", `Invalid wallet address: ${input.walletAddress}`, false, "check_allowance");
+    }
+    const resolved = resolveAllowanceToken(input.token);
+    if (!resolved) {
+        return fail("UNSUPPORTED_TOKEN", `${input.token} is not configured for ${PHAROS_ENVIRONMENT} (${CHAIN_ID}). No allowance query was made against a fallback/testnet address.`, false, "check_allowance");
+    }
     const walletAddr = input.walletAddress;
-    const tokenAddress = input.token === "USDC" ? USDC_ADDRESS : USDT_ADDRESS;
-    const decimals = 6;
+    const { tokenAddress, decimals } = resolved;
     const allowanceRaw = (await publicClient.readContract({
         address: tokenAddress,
         abi: ERC20_ABI,
@@ -42,16 +60,20 @@ export async function handleCheckAllowance(raw) {
         needsApproval = !isApproved;
         approvalNote = "Heuristic (no amount provided): any nonzero allowance counts as approved. Pass 'amount' for an exact check.";
     }
+    const spenderCanonical = lookupCanonical(DODO_APPROVE_ADDRESS);
     return ok({
         token: input.token,
         tokenAddress,
         walletAddress: input.walletAddress,
         spender: DODO_APPROVE_ADDRESS,
+        spenderRecognition: { recognized: Boolean(spenderCanonical), label: spenderCanonical?.label ?? "DODO/FaroSwap approve proxy (project-configured allowlist target; not registry-verified)" },
         allowance: allowanceFormatted,
         allowanceRaw: allowanceRaw.toString(),
         isApproved,
         needsApproval,
         approvalNote,
+        chainId: CHAIN_ID,
+        environment: PHAROS_ENVIRONMENT,
     });
 }
 //# sourceMappingURL=checkAllowance.js.map

package/dist/tools/checkAllowance.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkAllowance.js","sourceRoot":"","sources":["../../src/tools/checkAllowance.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0DAA0D;AAC1D,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAE,EAAE,EAAQ,MAAM,wBAAwB,CAAC;AAElD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC3E,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACjE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4JAA4J,CAAC;CACrM,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,mIAAmI;IACrI,WAAW,EAAE,oBAAoB;CAClC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAwB;IACjE,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,aAA8B,CAAC;IACxD,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,CAAC;IAEnB,MAAM,YAAY,GAAG,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC;QACpD,OAAO,EAAE,YAAY;QACrB,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,WAAW;QACzB,IAAI,EAAE,CAAC,UAAU,EAAE,oBAAoB,CAAC;KACzC,CAAC,CAAW,CAAC;IAEd,MAAM,kBAAkB,GAAG,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAE/D,IAAI,UAAmB,CAAC;IACxB,IAAI,aAAsB,CAAC;IAC3B,IAAI,YAAoB,CAAC;IAEzB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,UAAU,GAAG,YAAY,IAAI,WAAW,CAAC;QACzC,aAAa,GAAG,CAAC,UAAU,CAAC;QAC5B,YAAY,GAAG,2BAA2B,kBAAkB,gBAAgB,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7F,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,YAAY,GAAG,EAAE,CAAC;QAC/B,aAAa,GAAG,CAAC,UAAU,CAAC;QAC5B,YAAY,GAAG,6GAA6G,CAAC;IAC/H,CAAC;IAED,OAAO,EAAE,CAAC;QACR,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY;QACZ,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,oBAAoB;QAC7B,SAAS,EAAE,kBAAkB;QAC7B,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;QACrC,UAAU;QACV,aAAa;QACb,YAAY;KACb,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"checkAllowance.js","sourceRoot":"","sources":["../../src/tools/checkAllowance.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0DAA0D;AAC1D,2EAA2E;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,kBAAkB,EAClB,cAAc,EACd,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAEnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC3E,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACjE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4JAA4J,CAAC;CACrM,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,mIAAmI;IACrI,WAAW,EAAE,oBAAoB;CAClC,CAAC;AAEF,SAAS,qBAAqB,CAAC,MAAuB;IACpD,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO;QACL,YAAY;QACZ,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;KAC/E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAwB;IACjE,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,wBAAwB,EAAE,2BAA2B,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACpH,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CACT,mBAAmB,EACnB,GAAG,KAAK,CAAC,KAAK,0BAA0B,kBAAkB,KAAK,QAAQ,oEAAoE,EAC3I,KAAK,EACL,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,aAA8B,CAAC;IACxD,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAE5C,MAAM,YAAY,GAAG,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC;QACpD,OAAO,EAAE,YAAY;QACrB,GAAG,EAAE,SAAS;QACd,YAAY,EAAE,WAAW;QACzB,IAAI,EAAE,CAAC,UAAU,EAAE,oBAAoB,CAAC;KACzC,CAAC,CAAW,CAAC;IAEd,MAAM,kBAAkB,GAAG,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAE/D,IAAI,UAAmB,CAAC;IACxB,IAAI,aAAsB,CAAC;IAC3B,IAAI,YAAoB,CAAC;IAEzB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,UAAU,GAAG,YAAY,IAAI,WAAW,CAAC;QACzC,aAAa,GAAG,CAAC,UAAU,CAAC;QAC5B,YAAY,GAAG,2BAA2B,kBAAkB,gBAAgB,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7F,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,YAAY,GAAG,EAAE,CAAC;QAC/B,aAAa,GAAG,CAAC,UAAU,CAAC;QAC5B,YAAY,GAAG,6GAA6G,CAAC;IAC/H,CAAC;IAED,MAAM,gBAAgB,GAAG,eAAe,CAAC,oBAAoB,CAAC,CAAC;IAE/D,OAAO,EAAE,CAAC;QACR,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY;QACZ,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,oBAAoB;QAC7B,kBAAkB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,IAAI,0FAA0F,EAAE;QAC3L,SAAS,EAAE,kBAAkB;QAC7B,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;QACrC,UAAU;QACV,aAAa;QACb,YAAY;QACZ,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;KAChC,CAAC,CAAC;AACL,CAAC"}