safehands-pharos 1.5.0 → 2.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.agents/policies/default.json +15 -0
- package/.env.example +81 -64
- package/README.md +301 -444
- package/SECURITY.md +112 -0
- package/SKILL.md +59 -0
- package/contracts/SafeHandsAttestation.sol +182 -0
- package/contracts/SafeHandsRegistry.sol +149 -0
- package/dist/agent/SafeHandsGuardianAgent.d.ts +39 -0
- package/dist/agent/SafeHandsGuardianAgent.d.ts.map +1 -0
- package/dist/agent/SafeHandsGuardianAgent.js +98 -0
- package/dist/agent/SafeHandsGuardianAgent.js.map +1 -0
- package/dist/agent/agentDecisionFormatter.d.ts +43 -0
- package/dist/agent/agentDecisionFormatter.d.ts.map +1 -0
- package/dist/agent/agentDecisionFormatter.js +96 -0
- package/dist/agent/agentDecisionFormatter.js.map +1 -0
- package/dist/agent/agentEnrich.d.ts +28 -0
- package/dist/agent/agentEnrich.d.ts.map +1 -0
- package/dist/agent/agentEnrich.js +99 -0
- package/dist/agent/agentEnrich.js.map +1 -0
- package/dist/agent/agentIntentClassifier.d.ts +44 -0
- package/dist/agent/agentIntentClassifier.d.ts.map +1 -0
- package/dist/agent/agentIntentClassifier.js +77 -0
- package/dist/agent/agentIntentClassifier.js.map +1 -0
- package/dist/agent/agentPolicyResolver.d.ts +44 -0
- package/dist/agent/agentPolicyResolver.d.ts.map +1 -0
- package/dist/agent/agentPolicyResolver.js +94 -0
- package/dist/agent/agentPolicyResolver.js.map +1 -0
- package/dist/agent/agentRuntime.d.ts +12 -0
- package/dist/agent/agentRuntime.d.ts.map +1 -0
- package/dist/agent/agentRuntime.js +31 -0
- package/dist/agent/agentRuntime.js.map +1 -0
- package/dist/agent/agentToolRouter.d.ts +24 -0
- package/dist/agent/agentToolRouter.d.ts.map +1 -0
- package/dist/agent/agentToolRouter.js +89 -0
- package/dist/agent/agentToolRouter.js.map +1 -0
- package/dist/agent/guardianOperator.d.ts +35 -0
- package/dist/agent/guardianOperator.d.ts.map +1 -0
- package/dist/agent/guardianOperator.js +65 -0
- package/dist/agent/guardianOperator.js.map +1 -0
- package/dist/agent/index.d.ts +8 -0
- package/dist/agent/index.d.ts.map +1 -0
- package/dist/agent/index.js +14 -0
- package/dist/agent/index.js.map +1 -0
- package/dist/api/activityRoutes.d.ts +70 -0
- package/dist/api/activityRoutes.d.ts.map +1 -0
- package/dist/api/activityRoutes.js +100 -0
- package/dist/api/activityRoutes.js.map +1 -0
- package/dist/api/agentRoutes.d.ts +16 -0
- package/dist/api/agentRoutes.d.ts.map +1 -0
- package/dist/api/agentRoutes.js +37 -0
- package/dist/api/agentRoutes.js.map +1 -0
- package/dist/api/broadcastRoutes.d.ts +34 -0
- package/dist/api/broadcastRoutes.d.ts.map +1 -0
- package/dist/api/broadcastRoutes.js +147 -0
- package/dist/api/broadcastRoutes.js.map +1 -0
- package/dist/api/consolePage.d.ts +2 -0
- package/dist/api/consolePage.d.ts.map +1 -0
- package/dist/api/consolePage.js +206 -0
- package/dist/api/consolePage.js.map +1 -0
- package/dist/api/httpHardening.d.ts +75 -0
- package/dist/api/httpHardening.d.ts.map +1 -0
- package/dist/api/httpHardening.js +122 -0
- package/dist/api/httpHardening.js.map +1 -0
- package/dist/api/indexerRoutes.d.ts +46 -0
- package/dist/api/indexerRoutes.d.ts.map +1 -0
- package/dist/api/indexerRoutes.js +75 -0
- package/dist/api/indexerRoutes.js.map +1 -0
- package/dist/api/paidRoutes.d.ts +8 -0
- package/dist/api/paidRoutes.d.ts.map +1 -0
- package/dist/api/paidRoutes.js +175 -0
- package/dist/api/paidRoutes.js.map +1 -0
- package/dist/api/prepareRoutes.d.ts +58 -0
- package/dist/api/prepareRoutes.d.ts.map +1 -0
- package/dist/api/prepareRoutes.js +90 -0
- package/dist/api/prepareRoutes.js.map +1 -0
- package/dist/api/response.d.ts +39 -0
- package/dist/api/response.d.ts.map +1 -0
- package/dist/api/response.js +53 -0
- package/dist/api/response.js.map +1 -0
- package/dist/api/routes.d.ts +175 -0
- package/dist/api/routes.d.ts.map +1 -0
- package/dist/api/routes.js +276 -0
- package/dist/api/routes.js.map +1 -0
- package/dist/api/schemas.d.ts +147 -0
- package/dist/api/schemas.d.ts.map +1 -0
- package/dist/api/schemas.js +81 -0
- package/dist/api/schemas.js.map +1 -0
- package/dist/api/server.d.ts +11 -0
- package/dist/api/server.d.ts.map +1 -0
- package/dist/api/server.js +505 -0
- package/dist/api/server.js.map +1 -0
- package/dist/api/toolRoutes.d.ts +14 -0
- package/dist/api/toolRoutes.d.ts.map +1 -0
- package/dist/api/toolRoutes.js +138 -0
- package/dist/api/toolRoutes.js.map +1 -0
- package/dist/api/walletPrepareRoutes.d.ts +74 -0
- package/dist/api/walletPrepareRoutes.d.ts.map +1 -0
- package/dist/api/walletPrepareRoutes.js +127 -0
- package/dist/api/walletPrepareRoutes.js.map +1 -0
- package/dist/api/x402Gate.d.ts +51 -0
- package/dist/api/x402Gate.d.ts.map +1 -0
- package/dist/api/x402Gate.js +184 -0
- package/dist/api/x402Gate.js.map +1 -0
- package/dist/cli.d.ts +1 -1
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +29 -1
- package/dist/cli.js.map +1 -1
- package/dist/data/ecosystemRegistry.data.d.ts +3 -0
- package/dist/data/ecosystemRegistry.data.d.ts.map +1 -0
- package/dist/data/ecosystemRegistry.data.js +582 -0
- package/dist/data/ecosystemRegistry.data.js.map +1 -0
- package/dist/demo.d.ts +0 -0
- package/dist/demo.d.ts.map +1 -1
- package/dist/demo.js +43 -8
- package/dist/demo.js.map +1 -1
- package/dist/index.d.ts +0 -0
- package/dist/index.d.ts.map +0 -0
- package/dist/index.js +212 -135
- package/dist/index.js.map +1 -1
- package/dist/init.d.ts +0 -0
- package/dist/init.d.ts.map +1 -1
- package/dist/init.js +72 -10
- package/dist/init.js.map +1 -1
- package/dist/lib/analysis/approval.d.ts +29 -0
- package/dist/lib/analysis/approval.d.ts.map +1 -0
- package/dist/lib/analysis/approval.js +162 -0
- package/dist/lib/analysis/approval.js.map +1 -0
- package/dist/lib/analysis/calldata.d.ts +60 -0
- package/dist/lib/analysis/calldata.d.ts.map +1 -0
- package/dist/lib/analysis/calldata.js +349 -0
- package/dist/lib/analysis/calldata.js.map +1 -0
- package/dist/lib/analysis/contractIntel.d.ts +65 -0
- package/dist/lib/analysis/contractIntel.d.ts.map +1 -0
- package/dist/lib/analysis/contractIntel.js +320 -0
- package/dist/lib/analysis/contractIntel.js.map +1 -0
- package/dist/lib/analysis/evm.d.ts +42 -0
- package/dist/lib/analysis/evm.d.ts.map +1 -0
- package/dist/lib/analysis/evm.js +185 -0
- package/dist/lib/analysis/evm.js.map +1 -0
- package/dist/lib/analysis/gas.d.ts +4 -0
- package/dist/lib/analysis/gas.d.ts.map +1 -0
- package/dist/lib/analysis/gas.js +13 -0
- package/dist/lib/analysis/gas.js.map +1 -0
- package/dist/lib/analysis/index.d.ts +11 -0
- package/dist/lib/analysis/index.d.ts.map +1 -0
- package/dist/lib/analysis/index.js +16 -0
- package/dist/lib/analysis/index.js.map +1 -0
- package/dist/lib/analysis/pharosTokens.d.ts +31 -0
- package/dist/lib/analysis/pharosTokens.d.ts.map +1 -0
- package/dist/lib/analysis/pharosTokens.js +78 -0
- package/dist/lib/analysis/pharosTokens.js.map +1 -0
- package/dist/lib/analysis/safeTx.d.ts +27 -0
- package/dist/lib/analysis/safeTx.d.ts.map +1 -0
- package/dist/lib/analysis/safeTx.js +118 -0
- package/dist/lib/analysis/safeTx.js.map +1 -0
- package/dist/lib/analysis/token.d.ts +21 -0
- package/dist/lib/analysis/token.d.ts.map +1 -0
- package/dist/lib/analysis/token.js +151 -0
- package/dist/lib/analysis/token.js.map +1 -0
- package/dist/lib/analysis/types.d.ts +49 -0
- package/dist/lib/analysis/types.d.ts.map +1 -0
- package/dist/lib/analysis/types.js +10 -0
- package/dist/lib/analysis/types.js.map +1 -0
- package/dist/lib/analysis/x402.d.ts +24 -0
- package/dist/lib/analysis/x402.d.ts.map +1 -0
- package/dist/lib/analysis/x402.js +60 -0
- package/dist/lib/analysis/x402.js.map +1 -0
- package/dist/lib/auditLog.d.ts +1 -0
- package/dist/lib/auditLog.d.ts.map +1 -1
- package/dist/lib/auditLog.js +0 -0
- package/dist/lib/auditLog.js.map +1 -1
- package/dist/lib/config.d.ts +77 -0
- package/dist/lib/config.d.ts.map +1 -0
- package/dist/lib/config.js +120 -0
- package/dist/lib/config.js.map +1 -0
- package/dist/lib/constants.d.ts +246 -97
- package/dist/lib/constants.d.ts.map +1 -1
- package/dist/lib/constants.js +334 -127
- package/dist/lib/constants.js.map +1 -1
- package/dist/lib/dodoApi.d.ts +26 -3
- package/dist/lib/dodoApi.d.ts.map +1 -1
- package/dist/lib/dodoApi.js +80 -17
- package/dist/lib/dodoApi.js.map +1 -1
- package/dist/lib/ecosystemRegistry.d.ts +116 -0
- package/dist/lib/ecosystemRegistry.d.ts.map +1 -0
- package/dist/lib/ecosystemRegistry.js +178 -0
- package/dist/lib/ecosystemRegistry.js.map +1 -0
- package/dist/lib/envLoader.d.ts +0 -0
- package/dist/lib/envLoader.d.ts.map +0 -0
- package/dist/lib/envLoader.js +39 -18
- package/dist/lib/envLoader.js.map +1 -1
- package/dist/lib/goldsky.d.ts +58 -0
- package/dist/lib/goldsky.d.ts.map +1 -0
- package/dist/lib/goldsky.js +275 -0
- package/dist/lib/goldsky.js.map +1 -0
- package/dist/lib/guardian/decision.d.ts +23 -0
- package/dist/lib/guardian/decision.d.ts.map +1 -0
- package/dist/lib/guardian/decision.js +40 -0
- package/dist/lib/guardian/decision.js.map +1 -0
- package/dist/lib/http.d.ts +0 -1
- package/dist/lib/http.d.ts.map +1 -1
- package/dist/lib/http.js +297 -32
- package/dist/lib/http.js.map +1 -1
- package/dist/lib/managedExecution.d.ts +19 -0
- package/dist/lib/managedExecution.d.ts.map +1 -0
- package/dist/lib/managedExecution.js +64 -0
- package/dist/lib/managedExecution.js.map +1 -0
- package/dist/lib/merkleBatcher.d.ts +23 -0
- package/dist/lib/merkleBatcher.d.ts.map +1 -0
- package/dist/lib/merkleBatcher.js +62 -0
- package/dist/lib/merkleBatcher.js.map +1 -0
- package/dist/lib/networks.d.ts +48 -0
- package/dist/lib/networks.d.ts.map +1 -0
- package/dist/lib/networks.js +103 -0
- package/dist/lib/networks.js.map +1 -0
- package/dist/lib/observability/accessContext.d.ts +29 -0
- package/dist/lib/observability/accessContext.d.ts.map +1 -0
- package/dist/lib/observability/accessContext.js +50 -0
- package/dist/lib/observability/accessContext.js.map +1 -0
- package/dist/lib/observability/activityStore.d.ts +70 -0
- package/dist/lib/observability/activityStore.d.ts.map +1 -0
- package/dist/lib/observability/activityStore.js +149 -0
- package/dist/lib/observability/activityStore.js.map +1 -0
- package/dist/lib/observability/apiKey.d.ts +55 -0
- package/dist/lib/observability/apiKey.d.ts.map +1 -0
- package/dist/lib/observability/apiKey.js +141 -0
- package/dist/lib/observability/apiKey.js.map +1 -0
- package/dist/lib/observability/logger.d.ts +30 -0
- package/dist/lib/observability/logger.d.ts.map +1 -0
- package/dist/lib/observability/logger.js +30 -0
- package/dist/lib/observability/logger.js.map +1 -0
- package/dist/lib/observability/quota.d.ts +33 -0
- package/dist/lib/observability/quota.d.ts.map +1 -0
- package/dist/lib/observability/quota.js +49 -0
- package/dist/lib/observability/quota.js.map +1 -0
- package/dist/lib/observability/requestId.d.ts +8 -0
- package/dist/lib/observability/requestId.d.ts.map +1 -0
- package/dist/lib/observability/requestId.js +24 -0
- package/dist/lib/observability/requestId.js.map +1 -0
- package/dist/lib/observability/sanitize.d.ts +77 -0
- package/dist/lib/observability/sanitize.d.ts.map +1 -0
- package/dist/lib/observability/sanitize.js +228 -0
- package/dist/lib/observability/sanitize.js.map +1 -0
- package/dist/lib/observability/scopes.d.ts +20 -0
- package/dist/lib/observability/scopes.d.ts.map +1 -0
- package/dist/lib/observability/scopes.js +77 -0
- package/dist/lib/observability/scopes.js.map +1 -0
- package/dist/lib/okxDexApi.d.ts +106 -0
- package/dist/lib/okxDexApi.d.ts.map +1 -0
- package/dist/lib/okxDexApi.js +221 -0
- package/dist/lib/okxDexApi.js.map +1 -0
- package/dist/lib/persistentJsonStore.d.ts +5 -0
- package/dist/lib/persistentJsonStore.d.ts.map +1 -0
- package/dist/lib/persistentJsonStore.js +39 -0
- package/dist/lib/persistentJsonStore.js.map +1 -0
- package/dist/lib/pharos/attestationPublisher.d.ts +50 -0
- package/dist/lib/pharos/attestationPublisher.d.ts.map +1 -0
- package/dist/lib/pharos/attestationPublisher.js +262 -0
- package/dist/lib/pharos/attestationPublisher.js.map +1 -0
- package/dist/lib/pharos/ecosystem.d.ts +52 -0
- package/dist/lib/pharos/ecosystem.d.ts.map +1 -0
- package/dist/lib/pharos/ecosystem.js +431 -0
- package/dist/lib/pharos/ecosystem.js.map +1 -0
- package/dist/lib/pharos/ecosystemEvidence.d.ts +53 -0
- package/dist/lib/pharos/ecosystemEvidence.d.ts.map +1 -0
- package/dist/lib/pharos/ecosystemEvidence.js +133 -0
- package/dist/lib/pharos/ecosystemEvidence.js.map +1 -0
- package/dist/lib/pharos/rpc.d.ts +44 -0
- package/dist/lib/pharos/rpc.d.ts.map +1 -0
- package/dist/lib/pharos/rpc.js +90 -0
- package/dist/lib/pharos/rpc.js.map +1 -0
- package/dist/lib/pharos/rpcEvidence.d.ts +49 -0
- package/dist/lib/pharos/rpcEvidence.d.ts.map +1 -0
- package/dist/lib/pharos/rpcEvidence.js +46 -0
- package/dist/lib/pharos/rpcEvidence.js.map +1 -0
- package/dist/lib/pharos/rpcMethods.d.ts +46 -0
- package/dist/lib/pharos/rpcMethods.d.ts.map +1 -0
- package/dist/lib/pharos/rpcMethods.js +176 -0
- package/dist/lib/pharos/rpcMethods.js.map +1 -0
- package/dist/lib/pharos/spvVerifier.d.ts +47 -0
- package/dist/lib/pharos/spvVerifier.d.ts.map +1 -0
- package/dist/lib/pharos/spvVerifier.js +105 -0
- package/dist/lib/pharos/spvVerifier.js.map +1 -0
- package/dist/lib/pharos/userSignedBroadcaster.d.ts +10 -0
- package/dist/lib/pharos/userSignedBroadcaster.d.ts.map +1 -0
- package/dist/lib/pharos/userSignedBroadcaster.js +50 -0
- package/dist/lib/pharos/userSignedBroadcaster.js.map +1 -0
- package/dist/lib/pharosClient.d.ts +5 -10
- package/dist/lib/pharosClient.d.ts.map +1 -1
- package/dist/lib/pharosClient.js +9 -16
- package/dist/lib/pharosClient.js.map +1 -1
- package/dist/lib/policy/actionPolicyEngine.d.ts +37 -1
- package/dist/lib/policy/actionPolicyEngine.d.ts.map +1 -1
- package/dist/lib/policy/actionPolicyEngine.js +213 -52
- package/dist/lib/policy/actionPolicyEngine.js.map +1 -1
- package/dist/lib/policy/agentPolicy.d.ts +29 -0
- package/dist/lib/policy/agentPolicy.d.ts.map +1 -0
- package/dist/lib/policy/agentPolicy.js +154 -0
- package/dist/lib/policy/agentPolicy.js.map +1 -0
- package/dist/lib/policy/policyPresets.d.ts +30 -0
- package/dist/lib/policy/policyPresets.d.ts.map +1 -0
- package/dist/lib/policy/policyPresets.js +124 -0
- package/dist/lib/policy/policyPresets.js.map +1 -0
- package/dist/lib/policy/writeExecutionGate.d.ts +23 -0
- package/dist/lib/policy/writeExecutionGate.d.ts.map +1 -0
- package/dist/lib/policy/writeExecutionGate.js +65 -0
- package/dist/lib/policy/writeExecutionGate.js.map +1 -0
- package/dist/lib/preparedTxStore.d.ts +21 -0
- package/dist/lib/preparedTxStore.d.ts.map +1 -0
- package/dist/lib/preparedTxStore.js +90 -0
- package/dist/lib/preparedTxStore.js.map +1 -0
- package/dist/lib/price/chainlinkPushProvider.d.ts +34 -0
- package/dist/lib/price/chainlinkPushProvider.d.ts.map +1 -0
- package/dist/lib/price/chainlinkPushProvider.js +36 -0
- package/dist/lib/price/chainlinkPushProvider.js.map +1 -0
- package/dist/lib/price/feedRegistry.d.ts +26 -0
- package/dist/lib/price/feedRegistry.d.ts.map +1 -0
- package/dist/lib/price/feedRegistry.js +67 -0
- package/dist/lib/price/feedRegistry.js.map +1 -0
- package/dist/lib/price/priceResolver.d.ts +35 -0
- package/dist/lib/price/priceResolver.d.ts.map +1 -0
- package/dist/lib/price/priceResolver.js +246 -0
- package/dist/lib/price/priceResolver.js.map +1 -0
- package/dist/lib/price/supraProvider.d.ts +9 -0
- package/dist/lib/price/supraProvider.d.ts.map +1 -0
- package/dist/lib/price/supraProvider.js +17 -0
- package/dist/lib/price/supraProvider.js.map +1 -0
- package/dist/lib/price/types.d.ts +67 -0
- package/dist/lib/price/types.d.ts.map +1 -0
- package/dist/lib/price/types.js +7 -0
- package/dist/lib/price/types.js.map +1 -0
- package/dist/lib/productionGuards.d.ts +16 -0
- package/dist/lib/productionGuards.d.ts.map +1 -0
- package/dist/lib/productionGuards.js +93 -0
- package/dist/lib/productionGuards.js.map +1 -0
- package/dist/lib/recipientSafety.d.ts +5 -0
- package/dist/lib/recipientSafety.d.ts.map +1 -0
- package/dist/lib/recipientSafety.js +28 -0
- package/dist/lib/recipientSafety.js.map +1 -0
- package/dist/lib/riskEngine.d.ts +19 -0
- package/dist/lib/riskEngine.d.ts.map +1 -1
- package/dist/lib/riskEngine.js +94 -36
- package/dist/lib/riskEngine.js.map +1 -1
- package/dist/lib/riskInclusion.d.ts +72 -0
- package/dist/lib/riskInclusion.d.ts.map +1 -0
- package/dist/lib/riskInclusion.js +252 -0
- package/dist/lib/riskInclusion.js.map +1 -0
- package/dist/lib/safeHandsRegistry.d.ts +32 -0
- package/dist/lib/safeHandsRegistry.d.ts.map +1 -0
- package/dist/lib/safeHandsRegistry.js +151 -0
- package/dist/lib/safeHandsRegistry.js.map +1 -0
- package/dist/lib/signer/index.d.ts +3 -3
- package/dist/lib/signer/index.d.ts.map +1 -1
- package/dist/lib/signer/index.js +33 -11
- package/dist/lib/signer/index.js.map +1 -1
- package/dist/lib/spendAccumulator.d.ts +24 -1
- package/dist/lib/spendAccumulator.d.ts.map +1 -1
- package/dist/lib/spendAccumulator.js +76 -6
- package/dist/lib/spendAccumulator.js.map +1 -1
- package/dist/lib/toolResponse.d.ts +6 -1
- package/dist/lib/toolResponse.d.ts.map +1 -1
- package/dist/lib/toolResponse.js +13 -9
- package/dist/lib/toolResponse.js.map +1 -1
- package/dist/lib/validation.d.ts +7 -0
- package/dist/lib/validation.d.ts.map +1 -0
- package/dist/lib/validation.js +62 -0
- package/dist/lib/validation.js.map +1 -0
- package/dist/lib/wallet/index.d.ts +8 -12
- package/dist/lib/wallet/index.d.ts.map +1 -1
- package/dist/lib/wallet/index.js +48 -35
- package/dist/lib/wallet/index.js.map +1 -1
- package/dist/lib/x402ReplayStore.d.ts +6 -0
- package/dist/lib/x402ReplayStore.d.ts.map +1 -0
- package/dist/lib/x402ReplayStore.js +79 -0
- package/dist/lib/x402ReplayStore.js.map +1 -0
- package/dist/safehands.zip +0 -0
- package/dist/sdk.d.ts +14 -0
- package/dist/sdk.d.ts.map +1 -0
- package/dist/sdk.js +25 -0
- package/dist/sdk.js.map +1 -0
- package/dist/tools/approveToken.d.ts +31 -10
- package/dist/tools/approveToken.d.ts.map +1 -1
- package/dist/tools/approveToken.js +91 -24
- package/dist/tools/approveToken.js.map +1 -1
- package/dist/tools/assessRisk.d.ts +13 -26
- package/dist/tools/assessRisk.d.ts.map +1 -1
- package/dist/tools/assessRisk.js +34 -75
- package/dist/tools/assessRisk.js.map +1 -1
- package/dist/tools/checkAllowance.d.ts +9 -3
- package/dist/tools/checkAllowance.d.ts.map +1 -1
- package/dist/tools/checkAllowance.js +27 -5
- package/dist/tools/checkAllowance.js.map +1 -1
- package/dist/tools/checkTokenSecurity.d.ts +62 -5
- package/dist/tools/checkTokenSecurity.d.ts.map +1 -1
- package/dist/tools/checkTokenSecurity.js +166 -21
- package/dist/tools/checkTokenSecurity.js.map +1 -1
- package/dist/tools/createAgentWallet.d.ts +4 -2
- package/dist/tools/createAgentWallet.d.ts.map +1 -1
- package/dist/tools/createAgentWallet.js +36 -31
- package/dist/tools/createAgentWallet.js.map +1 -1
- package/dist/tools/estimateGas.d.ts +7 -2
- package/dist/tools/estimateGas.d.ts.map +1 -1
- package/dist/tools/estimateGas.js +16 -10
- package/dist/tools/estimateGas.js.map +1 -1
- package/dist/tools/executeSwap.d.ts +56 -8
- package/dist/tools/executeSwap.d.ts.map +1 -1
- package/dist/tools/executeSwap.js +194 -46
- package/dist/tools/executeSwap.js.map +1 -1
- package/dist/tools/explainRisk.d.ts +9 -9
- package/dist/tools/explainRisk.d.ts.map +1 -1
- package/dist/tools/explainRisk.js +5 -4
- package/dist/tools/explainRisk.js.map +1 -1
- package/dist/tools/getAgentPolicy.d.ts +15 -0
- package/dist/tools/getAgentPolicy.d.ts.map +1 -0
- package/dist/tools/getAgentPolicy.js +16 -0
- package/dist/tools/getAgentPolicy.js.map +1 -0
- package/dist/tools/getAgentReputation.d.ts +31 -0
- package/dist/tools/getAgentReputation.d.ts.map +1 -0
- package/dist/tools/getAgentReputation.js +44 -0
- package/dist/tools/getAgentReputation.js.map +1 -0
- package/dist/tools/getAgentWallet.d.ts +1 -1
- package/dist/tools/getAgentWallet.d.ts.map +1 -1
- package/dist/tools/getAgentWallet.js +11 -1
- package/dist/tools/getAgentWallet.js.map +1 -1
- package/dist/tools/getAgentWalletBalance.d.ts +1 -1
- package/dist/tools/getAgentWalletBalance.d.ts.map +1 -1
- package/dist/tools/getAgentWalletBalance.js +58 -26
- package/dist/tools/getAgentWalletBalance.js.map +1 -1
- package/dist/tools/getExecutionHistory.d.ts +1 -1
- package/dist/tools/getExecutionHistory.d.ts.map +1 -1
- package/dist/tools/getExecutionHistory.js +13 -19
- package/dist/tools/getExecutionHistory.js.map +1 -1
- package/dist/tools/getGasPrice.d.ts +3 -3
- package/dist/tools/getGasPrice.d.ts.map +0 -0
- package/dist/tools/getGasPrice.js +7 -7
- package/dist/tools/getGasPrice.js.map +1 -1
- package/dist/tools/getPoolInfo.d.ts +17 -17
- package/dist/tools/getPoolInfo.d.ts.map +1 -1
- package/dist/tools/getPoolInfo.js +14 -9
- package/dist/tools/getPoolInfo.js.map +1 -1
- package/dist/tools/getSpvProof.d.ts +24 -0
- package/dist/tools/getSpvProof.d.ts.map +1 -0
- package/dist/tools/getSpvProof.js +64 -0
- package/dist/tools/getSpvProof.js.map +1 -0
- package/dist/tools/getTokenPrice.d.ts +28 -85
- package/dist/tools/getTokenPrice.d.ts.map +1 -1
- package/dist/tools/getTokenPrice.js +87 -94
- package/dist/tools/getTokenPrice.js.map +1 -1
- package/dist/tools/getTransactionStatus.d.ts +2 -2
- package/dist/tools/getTransactionStatus.d.ts.map +0 -0
- package/dist/tools/getTransactionStatus.js +0 -0
- package/dist/tools/getTransactionStatus.js.map +0 -0
- package/dist/tools/getWalletBalance.d.ts +38 -3
- package/dist/tools/getWalletBalance.d.ts.map +1 -1
- package/dist/tools/getWalletBalance.js +92 -52
- package/dist/tools/getWalletBalance.js.map +1 -1
- package/dist/tools/publishRiskScore.d.ts +36 -14
- package/dist/tools/publishRiskScore.d.ts.map +1 -1
- package/dist/tools/publishRiskScore.js +80 -32
- package/dist/tools/publishRiskScore.js.map +1 -1
- package/dist/tools/queryGoldsky.d.ts +20 -0
- package/dist/tools/queryGoldsky.d.ts.map +1 -0
- package/dist/tools/queryGoldsky.js +29 -0
- package/dist/tools/queryGoldsky.js.map +1 -0
- package/dist/tools/queryRiskRegistry.d.ts +14 -14
- package/dist/tools/queryRiskRegistry.d.ts.map +1 -1
- package/dist/tools/queryRiskRegistry.js +34 -30
- package/dist/tools/queryRiskRegistry.js.map +1 -1
- package/dist/tools/safehandsPreflightCheck.d.ts +29 -14
- package/dist/tools/safehandsPreflightCheck.d.ts.map +1 -1
- package/dist/tools/safehandsPreflightCheck.js +133 -6
- package/dist/tools/safehandsPreflightCheck.js.map +1 -1
- package/dist/tools/safehandsRiskReport.d.ts +29 -14
- package/dist/tools/safehandsRiskReport.d.ts.map +1 -1
- package/dist/tools/safehandsRiskReport.js +23 -3
- package/dist/tools/safehandsRiskReport.js.map +1 -1
- package/dist/tools/safehandsSafeExecute.d.ts +1 -1
- package/dist/tools/safehandsSafeExecute.d.ts.map +1 -1
- package/dist/tools/safehandsSafeExecute.js +100 -17
- package/dist/tools/safehandsSafeExecute.js.map +1 -1
- package/dist/tools/safehandsWalletHealth.d.ts +15 -1
- package/dist/tools/safehandsWalletHealth.d.ts.map +1 -1
- package/dist/tools/safehandsWalletHealth.js +67 -25
- package/dist/tools/safehandsWalletHealth.js.map +1 -1
- package/dist/tools/safehandsX402Preflight.d.ts +3 -3
- package/dist/tools/safehandsX402Preflight.d.ts.map +1 -1
- package/dist/tools/safehandsX402Preflight.js +24 -3
- package/dist/tools/safehandsX402Preflight.js.map +1 -1
- package/dist/tools/sendPayment.d.ts +10 -4
- package/dist/tools/sendPayment.d.ts.map +1 -1
- package/dist/tools/sendPayment.js +63 -36
- package/dist/tools/sendPayment.js.map +1 -1
- package/dist/tools/setAgentPolicy.d.ts +75 -0
- package/dist/tools/setAgentPolicy.d.ts.map +1 -0
- package/dist/tools/setAgentPolicy.js +80 -0
- package/dist/tools/setAgentPolicy.js.map +1 -0
- package/dist/tools/simulateTransaction.d.ts +7 -3
- package/dist/tools/simulateTransaction.d.ts.map +1 -1
- package/dist/tools/simulateTransaction.js +42 -9
- package/dist/tools/simulateTransaction.js.map +1 -1
- package/dist/tools/tokenRegistryStatus.d.ts +25 -5
- package/dist/tools/tokenRegistryStatus.d.ts.map +1 -1
- package/dist/tools/tokenRegistryStatus.js +61 -31
- package/dist/tools/tokenRegistryStatus.js.map +1 -1
- package/dist/tools/verifyRiskInclusion.d.ts +59 -0
- package/dist/tools/verifyRiskInclusion.d.ts.map +1 -0
- package/dist/tools/verifyRiskInclusion.js +40 -0
- package/dist/tools/verifyRiskInclusion.js.map +1 -0
- package/dist/tools/x402PayAndFetch.d.ts +15 -9
- package/dist/tools/x402PayAndFetch.d.ts.map +1 -1
- package/dist/tools/x402PayAndFetch.js +163 -20
- package/dist/tools/x402PayAndFetch.js.map +1 -1
- package/dist/worker.d.ts +3 -0
- package/dist/worker.d.ts.map +1 -0
- package/dist/worker.js +39 -0
- package/dist/worker.js.map +1 -0
- package/dist/x402Server.d.ts +1 -1
- package/dist/x402Server.d.ts.map +1 -1
- package/dist/x402Server.js +144 -35
- package/dist/x402Server.js.map +1 -1
- package/docs/REVIEWER_QUICKSTART.md +113 -0
- package/docs/SAFEHANDS_REVIEWER_DEMO_SCRIPT.md +228 -0
- package/package.json +130 -73
- package/contracts/RiskRegistry.json +0 -223
- package/contracts/RiskRegistry.sol +0 -58
- package/dist/lib/testDodoLive.d.ts +0 -2
- package/dist/lib/testDodoLive.d.ts.map +0 -1
- package/dist/lib/testDodoLive.js +0 -105
- package/dist/lib/testDodoLive.js.map +0 -1
- package/dist/lib/testLiveSafehands.d.ts +0 -2
- package/dist/lib/testLiveSafehands.d.ts.map +0 -1
- package/dist/lib/testLiveSafehands.js +0 -93
- package/dist/lib/testLiveSafehands.js.map +0 -1
- package/dist/lib/testRpc.d.ts +0 -2
- package/dist/lib/testRpc.d.ts.map +0 -1
- package/dist/lib/testRpc.js +0 -30
- package/dist/lib/testRpc.js.map +0 -1
- package/dist/lib/testRpcLive.d.ts +0 -2
- package/dist/lib/testRpcLive.d.ts.map +0 -1
- package/dist/lib/testRpcLive.js +0 -89
- package/dist/lib/testRpcLive.js.map +0 -1
- package/dist/lib/testTools.d.ts +0 -2
- package/dist/lib/testTools.d.ts.map +0 -1
- package/dist/lib/testTools.js +0 -397
- package/dist/lib/testTools.js.map +0 -1
- package/dist/lib/testX402Live.d.ts +0 -2
- package/dist/lib/testX402Live.d.ts.map +0 -1
- package/dist/lib/testX402Live.js +0 -160
- package/dist/lib/testX402Live.js.map +0 -1
- package/dist/scripts/checkDeploy.d.ts +0 -2
- package/dist/scripts/checkDeploy.d.ts.map +0 -1
- package/dist/scripts/checkDeploy.js +0 -25
- package/dist/scripts/checkDeploy.js.map +0 -1
- package/dist/scripts/deployRegistry.d.ts +0 -2
- package/dist/scripts/deployRegistry.d.ts.map +0 -1
- package/dist/scripts/deployRegistry.js +0 -101
- package/dist/scripts/deployRegistry.js.map +0 -1
- package/dist/scripts/testRegistry.d.ts +0 -2
- package/dist/scripts/testRegistry.d.ts.map +0 -1
- package/dist/scripts/testRegistry.js +0 -44
- package/dist/scripts/testRegistry.js.map +0 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safehandsRiskReport.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"safehandsRiskReport.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAM,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAK/D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGpC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEjF,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAqC7G"}
|
|
@@ -1,17 +1,36 @@
|
|
|
1
|
-
// ─── Tool: safehands_risk_report ───────────────────────────────────────
|
|
2
1
|
import { z } from "zod";
|
|
2
|
+
import { isAddress } from "viem";
|
|
3
3
|
import { ok } from "../lib/toolResponse.js";
|
|
4
4
|
import { explainPolicyResult } from "../lib/policy/actionPolicyEngine.js";
|
|
5
5
|
import { handleSafeHandsPreflightCheck, safehandsPreflightCheckSchema } from "./safehandsPreflightCheck.js";
|
|
6
|
+
import { queryRegistryForTarget } from "../lib/safeHandsRegistry.js";
|
|
6
7
|
export const safehandsRiskReportSchema = safehandsPreflightCheckSchema.extend({
|
|
7
8
|
includeChecks: z.boolean().optional().default(true),
|
|
9
|
+
walletAddress: z.string().optional(),
|
|
8
10
|
});
|
|
9
11
|
export async function handleSafeHandsRiskReport(raw) {
|
|
10
12
|
const input = safehandsRiskReportSchema.parse(raw);
|
|
11
|
-
|
|
13
|
+
// Delegate to the preflight core with only its recognized fields. The preflight
|
|
14
|
+
// schema is strict, so the risk-report-only key (includeChecks) must be stripped
|
|
15
|
+
// before delegation; it is still used below to shape the report.
|
|
16
|
+
const { includeChecks, ...preflightInput } = input;
|
|
17
|
+
const preflight = await handleSafeHandsPreflightCheck(preflightInput);
|
|
12
18
|
if (!preflight.success)
|
|
13
19
|
return preflight;
|
|
14
20
|
const data = preflight.data;
|
|
21
|
+
let riskRegistry = null;
|
|
22
|
+
const walletAddr = input.walletAddress || input.recipient;
|
|
23
|
+
if (walletAddr && isAddress(walletAddr)) {
|
|
24
|
+
try {
|
|
25
|
+
riskRegistry = await queryRegistryForTarget(walletAddr);
|
|
26
|
+
}
|
|
27
|
+
catch {
|
|
28
|
+
riskRegistry = {
|
|
29
|
+
version: "safehands-registry",
|
|
30
|
+
error: "SafeHandsRegistry unavailable; local risk evaluation still completed.",
|
|
31
|
+
};
|
|
32
|
+
}
|
|
33
|
+
}
|
|
15
34
|
return ok({
|
|
16
35
|
decision: data.decision,
|
|
17
36
|
riskLevel: data.riskLevel,
|
|
@@ -19,10 +38,11 @@ export async function handleSafeHandsRiskReport(raw) {
|
|
|
19
38
|
summary: explainPolicyResult(data),
|
|
20
39
|
reasons: data.reasons,
|
|
21
40
|
requiredActions: data.requiredActions,
|
|
22
|
-
checks:
|
|
41
|
+
checks: includeChecks ? data.checks : undefined,
|
|
23
42
|
environment: data.environment,
|
|
24
43
|
chainId: data.chainId,
|
|
25
44
|
isMainnet: data.isMainnet,
|
|
45
|
+
riskRegistry,
|
|
26
46
|
source: "safehands_risk_report",
|
|
27
47
|
});
|
|
28
48
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safehandsRiskReport.js","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAAA,
|
|
1
|
+
{"version":3,"file":"safehandsRiskReport.js","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC5G,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC,MAAM,CAAC;IAC5E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAA6B;IAC3E,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,gFAAgF;IAChF,iFAAiF;IACjF,iEAAiE;IACjE,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,GAAG,KAAK,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,cAAc,CAAC,CAAC;IACtE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAW,CAAC;IAEnC,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,SAAS,CAAC;IAC1D,IAAI,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,sBAAsB,CAAC,UAA2B,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG;gBACb,OAAO,EAAE,oBAAoB;gBAC7B,KAAK,EAAE,uEAAuE;aAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC/C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY;QACZ,MAAM,EAAE,uBAAuB;KAChC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -5,7 +5,7 @@ export declare const safehandsSafeExecuteSchema: z.ZodObject<{
|
|
|
5
5
|
execute: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
|
|
6
6
|
confirmExecution: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
|
|
7
7
|
action: z.ZodRecord<z.ZodString, z.ZodAny>;
|
|
8
|
-
}, "
|
|
8
|
+
}, "strict", z.ZodTypeAny, {
|
|
9
9
|
path: "safe_execute_send_payment" | "safe_execute_approve_token" | "safe_execute_swap" | "safe_x402_pay_and_fetch";
|
|
10
10
|
execute: boolean;
|
|
11
11
|
confirmExecution: boolean;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safehandsSafeExecute.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"safehandsSafeExecute.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAW/F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAK5B,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAsBnF,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CA0J/G"}
|
|
@@ -1,6 +1,3 @@
|
|
|
1
|
-
// ─── Tool: safehands_safe_execute ──────────────────────────────────────
|
|
2
|
-
// Guarded execution wrapper so AI agents cannot bypass preflight checks.
|
|
3
|
-
// ───────────────────────────────────────────────────────────────────────
|
|
4
1
|
import { z } from "zod";
|
|
5
2
|
import { fail, ok, requireWriteToolsEnabled } from "../lib/toolResponse.js";
|
|
6
3
|
import { getSigner, isSignerFailure } from "../lib/signer/index.js";
|
|
@@ -9,73 +6,159 @@ import { handleSendPayment } from "./sendPayment.js";
|
|
|
9
6
|
import { handleApproveToken } from "./approveToken.js";
|
|
10
7
|
import { handleExecuteSwap } from "./executeSwap.js";
|
|
11
8
|
import { handleX402PayAndFetch } from "./x402PayAndFetch.js";
|
|
9
|
+
import { REQUIRE_AUTHORIZED_AGENT_FOR_WRITE, CHAIN_ID } from "../lib/constants.js";
|
|
10
|
+
import { checkManagedWalletAuthorization } from "../lib/safeHandsRegistry.js";
|
|
11
|
+
import { publicClient } from "../lib/pharosClient.js";
|
|
12
12
|
export const safehandsSafeExecuteSchema = z.object({
|
|
13
13
|
path: z.enum(["safe_execute_send_payment", "safe_execute_approve_token", "safe_execute_swap", "safe_x402_pay_and_fetch"]),
|
|
14
14
|
execute: z.boolean().optional().default(false).describe("Must be true to execute. false returns dry-run guarded report only."),
|
|
15
15
|
confirmExecution: z.boolean().optional().default(false).describe("Additional explicit runtime confirmation."),
|
|
16
16
|
action: z.record(z.any()).describe("Underlying tool input object"),
|
|
17
|
-
});
|
|
17
|
+
}).strict();
|
|
18
18
|
function toPreflight(path, action, signerAvailable) {
|
|
19
|
+
const agentId = typeof action.agentId === "string" ? action.agentId : undefined;
|
|
19
20
|
if (path === "safe_execute_send_payment") {
|
|
20
|
-
return { actionType: "send_payment", amount: String(action.amount || ""), amountUnit: "
|
|
21
|
+
return { actionType: "send_payment", agentId, amount: String(action.amount || ""), amountUnit: "PROS", recipient: String(action.toAddress || ""), recipientVerified: false, requiresSigner: true, signerAvailable };
|
|
21
22
|
}
|
|
22
23
|
if (path === "safe_execute_approve_token") {
|
|
23
|
-
return { actionType: "approve_token", approvalAmount: String(action.amount || ""), approvalToken: String(action.token || ""), approvalUnlimited: action.amount === "max", requiresSigner: true, signerAvailable };
|
|
24
|
+
return { actionType: "approve_token", agentId, approvalAmount: String(action.amount || ""), approvalToken: String(action.token || ""), approvalUnlimited: action.amount === "max", spender: String(action.spender || ""), requiresSigner: true, signerAvailable };
|
|
24
25
|
}
|
|
25
26
|
if (path === "safe_execute_swap") {
|
|
26
|
-
return { actionType: "execute_swap", amount: String(action.amountIn || ""), tokenIn: String(action.tokenIn || ""), tokenOut: String(action.tokenOut || ""), requiresSigner: true, signerAvailable };
|
|
27
|
+
return { actionType: "execute_swap", agentId, amount: String(action.amountIn || ""), tokenIn: String(action.tokenIn || ""), tokenOut: String(action.tokenOut || ""), requiresSigner: true, signerAvailable };
|
|
27
28
|
}
|
|
28
|
-
return { actionType: "x402_pay_and_fetch", url: String(action.url || ""), paymentAmountUsdc: String(action.maxPaymentUsdc || "0.001"), requiresSigner: true, signerAvailable };
|
|
29
|
+
return { actionType: "x402_pay_and_fetch", agentId, url: String(action.url || ""), paymentAmountUsdc: String(action.maxPaymentUsdc || "0.001"), requiresSigner: true, signerAvailable };
|
|
30
|
+
}
|
|
31
|
+
function resolveMode(signerMode) {
|
|
32
|
+
if (signerMode === "managed-mainnet")
|
|
33
|
+
return "managed_execution";
|
|
34
|
+
if (signerMode === "env")
|
|
35
|
+
return "env_wallet";
|
|
36
|
+
return "unknown";
|
|
29
37
|
}
|
|
30
38
|
export async function handleSafeHandsSafeExecute(raw) {
|
|
31
|
-
|
|
39
|
+
let input;
|
|
40
|
+
try {
|
|
41
|
+
input = safehandsSafeExecuteSchema.parse(raw);
|
|
42
|
+
}
|
|
43
|
+
catch (err) {
|
|
44
|
+
const msg = err instanceof z.ZodError
|
|
45
|
+
? err.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")
|
|
46
|
+
: String(err);
|
|
47
|
+
return fail("VALIDATION_ERROR", `safe_execute input validation failed: ${msg}`, false, "safehands_safe_execute");
|
|
48
|
+
}
|
|
32
49
|
const writeGuard = requireWriteToolsEnabled("safehands_safe_execute");
|
|
33
50
|
if (writeGuard)
|
|
34
51
|
return writeGuard;
|
|
35
|
-
//
|
|
52
|
+
// SAFE_EXECUTE_ENABLED is the documented second gate for the auto-execute path:
|
|
53
|
+
// WRITE_TOOLS_ENABLED opens writes; SAFE_EXECUTE_ENABLED specifically authorizes
|
|
54
|
+
// preflight→execute. Enforced here so it is not a decorative env var. Read-only
|
|
55
|
+
// preflight remains available via safehands_preflight_check (needs neither gate).
|
|
56
|
+
if (process.env.SAFE_EXECUTE_ENABLED !== "true") {
|
|
57
|
+
return fail("SAFE_EXECUTE_DISABLED", "safehands_safe_execute is disabled. Set SAFE_EXECUTE_ENABLED=true (in addition to WRITE_TOOLS_ENABLED=true) to enable the preflight→execute path. Read-only preflight is available via safehands_preflight_check.", false, "safehands_safe_execute");
|
|
58
|
+
}
|
|
36
59
|
const purpose = input.path === "safe_x402_pay_and_fetch" ? "x402" : "write";
|
|
37
60
|
const agentId = typeof input.action.agentId === "string" ? input.action.agentId : undefined;
|
|
38
61
|
const signerResult = await getSigner(agentId, { purpose });
|
|
39
62
|
const signerAvailable = !isSignerFailure(signerResult);
|
|
63
|
+
if (signerAvailable && signerResult.mode === "managed-mainnet" && REQUIRE_AUTHORIZED_AGENT_FOR_WRITE) {
|
|
64
|
+
const authCheck = await checkManagedWalletAuthorization(signerResult.address);
|
|
65
|
+
if (!authCheck.authorized) {
|
|
66
|
+
return fail(authCheck.errorCode || "AGENT_WALLET_NOT_AUTHORIZED", authCheck.errorMessage || "Managed wallet is not authorized in SafeHandsRegistry.", false, "safehands_safe_execute");
|
|
67
|
+
}
|
|
68
|
+
try {
|
|
69
|
+
const balance = await publicClient.getBalance({ address: signerResult.address });
|
|
70
|
+
if (balance === 0n) {
|
|
71
|
+
return ok({
|
|
72
|
+
executed: false,
|
|
73
|
+
decision: "REQUIRE_FUNDING",
|
|
74
|
+
requiresFunding: true,
|
|
75
|
+
walletAddress: signerResult.address,
|
|
76
|
+
network: "Pharos Network",
|
|
77
|
+
chainId: CHAIN_ID,
|
|
78
|
+
mode: "managed_execution",
|
|
79
|
+
source: "safehands_safe_execute",
|
|
80
|
+
});
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
catch {
|
|
84
|
+
// RPC failed — continue, let execution attempt surface the real error
|
|
85
|
+
}
|
|
86
|
+
}
|
|
40
87
|
const preflight = await handleSafeHandsPreflightCheck(toPreflight(input.path, input.action, signerAvailable));
|
|
41
88
|
if (!preflight.success)
|
|
42
89
|
return preflight;
|
|
43
90
|
const report = preflight.data;
|
|
91
|
+
const mode = signerAvailable ? resolveMode(signerResult.mode) : "unknown";
|
|
44
92
|
if (report.decision === "BLOCK") {
|
|
45
93
|
return ok({
|
|
46
94
|
executed: false,
|
|
47
95
|
blocked: true,
|
|
48
96
|
safetyReport: report,
|
|
49
97
|
executionResult: null,
|
|
98
|
+
mode,
|
|
50
99
|
source: "safehands_safe_execute",
|
|
51
100
|
});
|
|
52
101
|
}
|
|
53
|
-
|
|
54
|
-
|
|
102
|
+
// PREPARE_ONLY = execution unavailable (read-only deployment) or a funding
|
|
103
|
+
// shortfall. Never auto-execute; hand back the guarded report.
|
|
104
|
+
if (report.decision === "PREPARE_ONLY") {
|
|
105
|
+
return ok({
|
|
106
|
+
executed: false,
|
|
107
|
+
prepareOnly: true,
|
|
108
|
+
decision: "PREPARE_ONLY",
|
|
109
|
+
safetyReport: report,
|
|
110
|
+
executionResult: null,
|
|
111
|
+
mode,
|
|
112
|
+
source: "safehands_safe_execute",
|
|
113
|
+
});
|
|
114
|
+
}
|
|
115
|
+
// ALLOW executes directly; REQUIRE_CONFIRMATION is executable only when the
|
|
116
|
+
// caller explicitly confirms (confirmExecution IS that confirmation). Any other
|
|
117
|
+
// value is a safety-net refusal.
|
|
118
|
+
const requiresConfirmation = report.decision === "REQUIRE_CONFIRMATION";
|
|
119
|
+
if (report.decision !== "ALLOW" && !requiresConfirmation) {
|
|
120
|
+
return fail("POLICY_BLOCKED", `SafeHands did not execute because policy decision is ${report.decision}.`, false, "safehands_safe_execute");
|
|
55
121
|
}
|
|
56
122
|
if (!input.execute || !input.confirmExecution) {
|
|
57
123
|
return ok({
|
|
58
124
|
executed: false,
|
|
59
125
|
dryRun: true,
|
|
60
|
-
|
|
126
|
+
requiresConfirmation,
|
|
127
|
+
reason: requiresConfirmation
|
|
128
|
+
? "Policy is REQUIRE_CONFIRMATION. Set execute=true and confirmExecution=true to proceed after reviewing the safety report."
|
|
129
|
+
: "Set execute=true and confirmExecution=true to execute this allowed mainnet action.",
|
|
61
130
|
safetyReport: report,
|
|
62
131
|
executionResult: null,
|
|
132
|
+
mode,
|
|
63
133
|
source: "safehands_safe_execute",
|
|
64
134
|
});
|
|
65
135
|
}
|
|
136
|
+
// Reaching here means the operator explicitly set execute=true + confirmExecution=true
|
|
137
|
+
// AND the gated preflight returned ALLOW or REQUIRE_CONFIRMATION. Pass confirm=true
|
|
138
|
+
// to the raw handler so its own (independent) confirmation gate does not re-block.
|
|
139
|
+
const confirmedAction = { ...input.action, confirm: true };
|
|
66
140
|
let executionResult;
|
|
67
141
|
if (input.path === "safe_execute_send_payment")
|
|
68
|
-
executionResult = await handleSendPayment(
|
|
142
|
+
executionResult = await handleSendPayment(confirmedAction);
|
|
69
143
|
else if (input.path === "safe_execute_approve_token")
|
|
70
|
-
executionResult = await handleApproveToken(
|
|
144
|
+
executionResult = await handleApproveToken(confirmedAction);
|
|
71
145
|
else if (input.path === "safe_execute_swap")
|
|
72
|
-
executionResult = await handleExecuteSwap(
|
|
146
|
+
executionResult = await handleExecuteSwap(confirmedAction);
|
|
73
147
|
else
|
|
74
|
-
executionResult = await handleX402PayAndFetch(
|
|
148
|
+
executionResult = await handleX402PayAndFetch(confirmedAction);
|
|
149
|
+
const execFailed = executionResult &&
|
|
150
|
+
typeof executionResult === "object" &&
|
|
151
|
+
"success" in executionResult &&
|
|
152
|
+
executionResult.success === false;
|
|
153
|
+
if (execFailed) {
|
|
154
|
+
const execErr = executionResult;
|
|
155
|
+
return fail(execErr.error?.code || "EXECUTION_FAILED", execErr.error?.message || "Underlying execution returned success:false.", false, "safehands_safe_execute");
|
|
156
|
+
}
|
|
75
157
|
return ok({
|
|
76
158
|
executed: true,
|
|
77
159
|
safetyReport: report,
|
|
78
160
|
executionResult,
|
|
161
|
+
mode: signerAvailable ? resolveMode(signerResult.mode) : "unknown",
|
|
79
162
|
source: "safehands_safe_execute",
|
|
80
163
|
});
|
|
81
164
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safehandsSafeExecute.js","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,
|
|
1
|
+
{"version":3,"file":"safehandsSafeExecute.js","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,wBAAwB,EAAqB,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kCAAkC,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;IACzH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAC9H,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC7G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACnE,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,SAAS,WAAW,CAAC,IAAY,EAAE,MAA+B,EAAE,eAAwB;IAC1F,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAe,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACxO,CAAC;IACD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC1C,OAAO,EAAE,UAAU,EAAE,eAAwB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC7Q,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACxN,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,oBAA6B,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACnM,CAAC;AAED,SAAS,WAAW,CAAC,UAA8B;IACjD,IAAI,UAAU,KAAK,iBAAiB;QAAE,OAAO,mBAAmB,CAAC;IACjE,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,YAAY,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAA8B;IAC7E,IAAI,KAAiD,CAAC;IACtD,IAAI,CAAC;QACH,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,QAAQ;YACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,kBAAkB,EAAE,yCAAyC,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,wBAAwB,CAAC,CAAC;IACtE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,gFAAgF;IAChF,iFAAiF;IACjF,gFAAgF;IAChF,kFAAkF;IAClF,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,IAAI,CACT,uBAAuB,EACvB,mNAAmN,EACnN,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAEvD,IAAI,eAAe,IAAI,YAAY,CAAC,IAAI,KAAK,iBAAiB,IAAI,kCAAkC,EAAE,CAAC;QACrG,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC1B,OAAO,IAAI,CACT,SAAS,CAAC,SAAS,IAAI,6BAA6B,EACpD,SAAS,CAAC,YAAY,IAAI,wDAAwD,EAClF,KAAK,EACL,wBAAwB,CACzB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;oBACR,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,iBAAiB;oBAC3B,eAAe,EAAE,IAAI;oBACrB,aAAa,EAAE,YAAY,CAAC,OAAO;oBACnC,OAAO,EAAE,gBAAgB;oBACzB,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,wBAAwB;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAW,CAAC;IAErC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,gFAAgF;IAChF,iCAAiC;IACjC,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,KAAK,sBAAsB,CAAC;IACxE,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACzD,OAAO,IAAI,CACT,gBAAgB,EAChB,wDAAwD,MAAM,CAAC,QAAQ,GAAG,EAC1E,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI;YACZ,oBAAoB;YACpB,MAAM,EAAE,oBAAoB;gBAC1B,CAAC,CAAC,0HAA0H;gBAC5H,CAAC,CAAC,oFAAoF;YACxF,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,uFAAuF;IACvF,oFAAoF;IACpF,mFAAmF;IACnF,MAAM,eAAe,GAAG,EAAE,GAAI,KAAK,CAAC,MAAkC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxF,IAAI,eAAwB,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,eAAsB,CAAC,CAAC;SAC7G,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B;QAAE,eAAe,GAAG,MAAM,kBAAkB,CAAC,eAAsB,CAAC,CAAC;SACpH,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,eAAsB,CAAC,CAAC;;QAC1G,eAAe,GAAG,MAAM,qBAAqB,CAAC,eAAsB,CAAC,CAAC;IAE3E,MAAM,UAAU,GACd,eAAe;QACf,OAAO,eAAe,KAAK,QAAQ;QACnC,SAAS,IAAI,eAAe;QAC3B,eAAwC,CAAC,OAAO,KAAK,KAAK,CAAC;IAE9D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,eAAkE,CAAC;QACnF,OAAO,IAAI,CACT,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,kBAAkB,EACzC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,8CAA8C,EACxE,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,MAAM;QACpB,eAAe;QACf,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -11,5 +11,19 @@ export declare const safehandsWalletHealthSchema: z.ZodObject<{
|
|
|
11
11
|
walletAddress?: string | undefined;
|
|
12
12
|
}>;
|
|
13
13
|
export type SafeHandsWalletHealthInput = z.input<typeof safehandsWalletHealthSchema>;
|
|
14
|
-
|
|
14
|
+
/**
|
|
15
|
+
* Optional read seam for offline tests. Defaults to the live read-only RPC reads
|
|
16
|
+
* (PROS + USDC balances, SafeHandsRegistry authorization). These are READS only —
|
|
17
|
+
* there is no signing or write path here either way; injecting them performs no
|
|
18
|
+
* network I/O. The MCP path calls the handler with one argument, so default
|
|
19
|
+
* behavior is unchanged.
|
|
20
|
+
*/
|
|
21
|
+
export interface WalletHealthReaders {
|
|
22
|
+
readBalances?: (address: `0x${string}`) => Promise<{
|
|
23
|
+
pros: bigint;
|
|
24
|
+
usdc: bigint;
|
|
25
|
+
}>;
|
|
26
|
+
readAuthorization?: (address: `0x${string}`) => Promise<boolean>;
|
|
27
|
+
}
|
|
28
|
+
export declare function handleSafeHandsWalletHealth(raw: SafeHandsWalletHealthInput, readers?: WalletHealthReaders): Promise<ToolResponse<unknown>>;
|
|
15
29
|
//# sourceMappingURL=safehandsWalletHealth.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safehandsWalletHealth.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsWalletHealth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,
|
|
1
|
+
{"version":3,"file":"safehandsWalletHealth.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsWalletHealth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAA6B,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAKtF,eAAO,MAAM,2BAA2B;;;;;;;;;EAGtC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAClE;AAED,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,0BAA0B,EAC/B,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CA4IhC"}
|
|
@@ -1,21 +1,23 @@
|
|
|
1
1
|
// ─── Tool: safehands_wallet_health ─────────────────────────────────────
|
|
2
|
-
// Checks whether an AI agent wallet is ready for guarded
|
|
2
|
+
// Checks whether an AI agent wallet is ready for guarded mainnet actions.
|
|
3
3
|
// ───────────────────────────────────────────────────────────────────────
|
|
4
4
|
import { z } from "zod";
|
|
5
5
|
import { formatEther, formatUnits } from "viem";
|
|
6
6
|
import { publicClient } from "../lib/pharosClient.js";
|
|
7
|
-
import { ERC20_ABI,
|
|
7
|
+
import { ERC20_ABI, activeUsdcAddress, CHAIN_ID, PHAROS_ENVIRONMENT, IS_MAINNET, MAX_X402_PAYMENT_USDC, SAFEHANDS_REGISTRY_ADDRESS, REQUIRE_AUTHORIZED_AGENT_FOR_WRITE } from "../lib/constants.js";
|
|
8
8
|
import { ok, classifyExternalError } from "../lib/toolResponse.js";
|
|
9
9
|
import { getSigner, isSignerFailure } from "../lib/signer/index.js";
|
|
10
10
|
import { walletStore } from "../lib/wallet/index.js";
|
|
11
|
+
import { isAgentAuthorized } from "../lib/safeHandsRegistry.js";
|
|
11
12
|
export const safehandsWalletHealthSchema = z.object({
|
|
12
|
-
agentId: z.string().optional().describe("Managed
|
|
13
|
+
agentId: z.string().optional().describe("Managed wallet agentId"),
|
|
13
14
|
walletAddress: z.string().optional().describe("Explicit wallet address for read-only health checks"),
|
|
14
15
|
});
|
|
15
|
-
export async function handleSafeHandsWalletHealth(raw) {
|
|
16
|
+
export async function handleSafeHandsWalletHealth(raw, readers = {}) {
|
|
16
17
|
const input = safehandsWalletHealthSchema.parse(raw);
|
|
17
|
-
const
|
|
18
|
-
const
|
|
18
|
+
const effectiveAgentId = input.agentId || (process.env.WALLET_MODE === "managed-mainnet" ? "default" : undefined);
|
|
19
|
+
const managedWallet = effectiveAgentId ? await walletStore.get(effectiveAgentId) : null;
|
|
20
|
+
const signer = await getSigner(effectiveAgentId);
|
|
19
21
|
const signerAvailable = !isSignerFailure(signer);
|
|
20
22
|
const address = signerAvailable ? signer.address : (input.walletAddress || managedWallet?.address);
|
|
21
23
|
const base = {
|
|
@@ -40,46 +42,86 @@ export async function handleSafeHandsWalletHealth(raw) {
|
|
|
40
42
|
canPayX402: false,
|
|
41
43
|
canExecuteWrites: false,
|
|
42
44
|
},
|
|
43
|
-
requiredActions: [
|
|
45
|
+
requiredActions: [
|
|
46
|
+
"Create a managed mainnet wallet (set WALLET_MODE=managed-mainnet; auto-creates on next startup) or provide WALLET_MODE=env with a testnet PRIVATE_KEY.",
|
|
47
|
+
"Fund your wallet with PROS on Pharos Pacific Mainnet",
|
|
48
|
+
],
|
|
44
49
|
source: "safehands_wallet_health",
|
|
45
50
|
});
|
|
46
51
|
}
|
|
47
52
|
try {
|
|
48
|
-
const
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
53
|
+
const { pros: prosRaw, usdc: usdcRaw } = readers.readBalances
|
|
54
|
+
? await readers.readBalances(address)
|
|
55
|
+
: await (async () => {
|
|
56
|
+
const [p, u] = await Promise.all([
|
|
57
|
+
publicClient.getBalance({ address: address }),
|
|
58
|
+
publicClient.readContract({
|
|
59
|
+
address: activeUsdcAddress(),
|
|
60
|
+
abi: ERC20_ABI,
|
|
61
|
+
functionName: "balanceOf",
|
|
62
|
+
args: [address],
|
|
63
|
+
}),
|
|
64
|
+
]);
|
|
65
|
+
return { pros: p, usdc: u };
|
|
66
|
+
})();
|
|
67
|
+
const pros = formatEther(prosRaw);
|
|
58
68
|
const usdc = formatUnits(usdcRaw, 6);
|
|
59
|
-
const canPayGas = parseFloat(
|
|
69
|
+
const canPayGas = parseFloat(pros) > 0.001;
|
|
60
70
|
const canPayX402 = parseFloat(usdc) >= Number(MAX_X402_PAYMENT_USDC);
|
|
61
|
-
const
|
|
71
|
+
const writeToolsEnabled = process.env.WRITE_TOOLS_ENABLED === "true";
|
|
72
|
+
let safeHandsRegistry;
|
|
73
|
+
try {
|
|
74
|
+
const authorized = readers.readAuthorization
|
|
75
|
+
? await readers.readAuthorization(address)
|
|
76
|
+
: await isAgentAuthorized(address);
|
|
77
|
+
safeHandsRegistry = { authorized, address: SAFEHANDS_REGISTRY_ADDRESS };
|
|
78
|
+
}
|
|
79
|
+
catch {
|
|
80
|
+
safeHandsRegistry = { authorized: false, address: SAFEHANDS_REGISTRY_ADDRESS, error: "SafeHandsRegistry query failed" };
|
|
81
|
+
}
|
|
82
|
+
// Managed-mainnet wallets must be authorized in SafeHandsRegistry before they
|
|
83
|
+
// can execute writes. env-mode wallets do not require registry authorization.
|
|
84
|
+
const authorizationRequired = signerAvailable && signer.mode === "managed-mainnet" && REQUIRE_AUTHORIZED_AGENT_FOR_WRITE;
|
|
85
|
+
const riskRegistryAuthorized = safeHandsRegistry.authorized === true;
|
|
86
|
+
const authorizationSatisfied = !authorizationRequired || riskRegistryAuthorized;
|
|
87
|
+
const canExecuteWrites = signerAvailable && canPayGas && writeToolsEnabled && authorizationSatisfied;
|
|
88
|
+
// REQUIRE_AUTHORIZATION surfaces the one remaining blocker when a funded,
|
|
89
|
+
// write-enabled managed wallet is simply not yet authorized in SafeHandsRegistry.
|
|
90
|
+
const needsAuthorizationOnly = signerAvailable && writeToolsEnabled && canPayGas && authorizationRequired && !riskRegistryAuthorized;
|
|
91
|
+
const status = canExecuteWrites
|
|
92
|
+
? "READY"
|
|
93
|
+
: needsAuthorizationOnly
|
|
94
|
+
? "REQUIRE_AUTHORIZATION"
|
|
95
|
+
: signerAvailable
|
|
96
|
+
? "DEGRADED"
|
|
97
|
+
: "NOT_READY";
|
|
62
98
|
return ok({
|
|
63
99
|
...base,
|
|
64
|
-
status
|
|
100
|
+
status,
|
|
65
101
|
balances: {
|
|
66
|
-
|
|
67
|
-
USDC: { value: usdc, unit: "USDC", decimals: 6, tokenAddress:
|
|
102
|
+
PROS: { value: pros, unit: "PROS", decimals: 18 },
|
|
103
|
+
USDC: { value: usdc, unit: "USDC", decimals: 6, tokenAddress: activeUsdcAddress() },
|
|
68
104
|
},
|
|
69
105
|
readiness: {
|
|
70
106
|
canReadBalances: true,
|
|
71
107
|
canPayGas,
|
|
72
108
|
canPayX402,
|
|
73
109
|
canExecuteWrites,
|
|
110
|
+
authorizationRequired,
|
|
111
|
+
riskRegistryAuthorized,
|
|
74
112
|
},
|
|
113
|
+
safeHandsRegistry,
|
|
75
114
|
dailySpendStatus: {
|
|
76
115
|
implemented: false,
|
|
77
116
|
note: "Daily spend accounting is config-ready but not persisted in this MVP.",
|
|
78
117
|
},
|
|
79
118
|
requiredActions: [
|
|
80
|
-
...(canPayGas ? [] : ["Fund wallet with
|
|
81
|
-
...(canPayX402 ? [] : [`Fund wallet with at least ${MAX_X402_PAYMENT_USDC}
|
|
82
|
-
...(
|
|
119
|
+
...(canPayGas ? [] : ["Fund wallet with PROS for gas: Mainnet (no faucet)"]),
|
|
120
|
+
...(canPayX402 ? [] : [`Fund wallet with at least ${MAX_X402_PAYMENT_USDC} USDC for x402 payments.`]),
|
|
121
|
+
...(writeToolsEnabled ? [] : ["Set WRITE_TOOLS_ENABLED=true only when intentionally executing trusted mainnet actions."]),
|
|
122
|
+
...(authorizationRequired && !riskRegistryAuthorized
|
|
123
|
+
? [`Authorize this managed wallet in SafeHandsRegistry: the contract owner must call setAuthorizedAgent(${address}, true), or set AUTO_AUTHORIZE_AGENT_WALLET=true with RISK_REGISTRY_OWNER_PRIVATE_KEY.`]
|
|
124
|
+
: []),
|
|
83
125
|
],
|
|
84
126
|
source: "safehands_wallet_health",
|
|
85
127
|
});
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safehandsWalletHealth.js","sourceRoot":"","sources":["../../src/tools/safehandsWalletHealth.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,
|
|
1
|
+
{"version":3,"file":"safehandsWalletHealth.js","sourceRoot":"","sources":["../../src/tools/safehandsWalletHealth.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,MAAM,qBAAqB,CAAC;AACpM,OAAO,EAAE,EAAE,EAAE,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;CACrG,CAAC,CAAC;AAgBH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAA+B,EAC/B,UAA+B,EAAE;IAEjC,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClH,MAAM,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,aAAa,EAAE,OAAO,CAAC,CAAC;IAEnG,MAAM,IAAI,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM;QAC7C,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM;QAC7D,eAAe;QACf,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAChD,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QAClD,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAAC;QAC3C,OAAO,EAAE,OAAO,IAAI,IAAI;KACzB,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;YACR,GAAG,IAAI;YACP,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE;gBACT,eAAe,EAAE,KAAK;gBACtB,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,KAAK;gBACjB,gBAAgB,EAAE,KAAK;aACxB;YACD,eAAe,EAAE;gBACf,wJAAwJ;gBACxJ,sDAAsD;aACvD;YACD,MAAM,EAAE,yBAAyB;SAClC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,YAAY;YAC3D,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,OAAwB,CAAC;YACtD,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;gBAChB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAC/B,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,OAAwB,EAAE,CAAC;oBAC9D,YAAY,CAAC,YAAY,CAAC;wBACxB,OAAO,EAAE,iBAAiB,EAAE;wBAC5B,GAAG,EAAE,SAAS;wBACd,YAAY,EAAE,WAAW;wBACzB,IAAI,EAAE,CAAC,OAAwB,CAAC;qBACjC,CAAoB;iBACtB,CAAC,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9B,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACrE,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,CAAC;QAErE,IAAI,iBAAuF,CAAC;QAC5F,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB;gBAC1C,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAwB,CAAC;gBAC3D,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAwB,CAAC,CAAC;YACtD,iBAAiB,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;QAC1H,CAAC;QAED,8EAA8E;QAC9E,8EAA8E;QAC9E,MAAM,qBAAqB,GACzB,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,kCAAkC,CAAC;QAC7F,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,UAAU,KAAK,IAAI,CAAC;QACrE,MAAM,sBAAsB,GAAG,CAAC,qBAAqB,IAAI,sBAAsB,CAAC;QAEhF,MAAM,gBAAgB,GACpB,eAAe,IAAI,SAAS,IAAI,iBAAiB,IAAI,sBAAsB,CAAC;QAE9E,0EAA0E;QAC1E,kFAAkF;QAClF,MAAM,sBAAsB,GAC1B,eAAe,IAAI,iBAAiB,IAAI,SAAS,IAAI,qBAAqB,IAAI,CAAC,sBAAsB,CAAC;QAExG,MAAM,MAAM,GAAG,gBAAgB;YAC7B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,sBAAsB;gBACtB,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,eAAe;oBACf,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,WAAW,CAAC;QAEpB,OAAO,EAAE,CAAC;YACR,GAAG,IAAI;YACP,MAAM;YACN,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACjD,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,EAAE;aACpF;YACD,SAAS,EAAE;gBACT,eAAe,EAAE,IAAI;gBACrB,SAAS;gBACT,UAAU;gBACV,gBAAgB;gBAChB,qBAAqB;gBACrB,sBAAsB;aACvB;YACD,iBAAiB;YACjB,gBAAgB,EAAE;gBAChB,WAAW,EAAE,KAAK;gBAClB,IAAI,EAAE,uEAAuE;aAC9E;YACD,eAAe,EAAE;gBACf,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC;gBAC5E,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,6BAA6B,qBAAqB,0BAA0B,CAAC,CAAC;gBACrG,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,yFAAyF,CAAC,CAAC;gBACzH,GAAG,CAAC,qBAAqB,IAAI,CAAC,sBAAsB;oBAClD,CAAC,CAAC,CAAC,uGAAuG,OAAO,wFAAwF,CAAC;oBAC1M,CAAC,CAAC,EAAE,CAAC;aACR;YACD,MAAM,EAAE,yBAAyB;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,qBAAqB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,EAAE,CAAC;YACR,GAAG,IAAI;YACP,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE;gBACT,eAAe,EAAE,KAAK;gBACtB,SAAS,EAAE,SAAS;gBACpB,UAAU,EAAE,SAAS;gBACrB,gBAAgB,EAAE,KAAK;aACxB;YACD,QAAQ,EAAE,GAAG,CAAC,KAAK;YACnB,eAAe,EAAE,CAAC,6DAA6D,CAAC;YAChF,MAAM,EAAE,yBAAyB;SAClC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}
|
|
@@ -8,18 +8,18 @@ export declare const safehandsX402PreflightSchema: z.ZodObject<{
|
|
|
8
8
|
agentId: z.ZodOptional<z.ZodString>;
|
|
9
9
|
probeEndpoint: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
|
|
10
10
|
}, "strip", z.ZodTypeAny, {
|
|
11
|
+
method: "GET" | "POST" | "PUT" | "DELETE";
|
|
11
12
|
url: string;
|
|
12
13
|
paymentAmountUsdc: string;
|
|
13
14
|
paymentTokenAddress: string;
|
|
14
|
-
method: "GET" | "POST" | "PUT" | "DELETE";
|
|
15
15
|
probeEndpoint: boolean;
|
|
16
16
|
agentId?: string | undefined;
|
|
17
17
|
}, {
|
|
18
18
|
url: string;
|
|
19
|
-
paymentAmountUsdc?: string | undefined;
|
|
20
|
-
paymentTokenAddress?: string | undefined;
|
|
21
19
|
method?: "GET" | "POST" | "PUT" | "DELETE" | undefined;
|
|
22
20
|
agentId?: string | undefined;
|
|
21
|
+
paymentAmountUsdc?: string | undefined;
|
|
22
|
+
paymentTokenAddress?: string | undefined;
|
|
23
23
|
probeEndpoint?: boolean | undefined;
|
|
24
24
|
}>;
|
|
25
25
|
export type SafeHandsX402PreflightInput = z.input<typeof safehandsX402PreflightSchema>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safehandsX402Preflight.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsX402Preflight.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;
|
|
1
|
+
{"version":3,"file":"safehandsX402Preflight.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsX402Preflight.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAUrE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;EAOvC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEvF,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CA+EnH"}
|
|
@@ -4,9 +4,13 @@
|
|
|
4
4
|
import { z } from "zod";
|
|
5
5
|
import { ok, fail } from "../lib/toolResponse.js";
|
|
6
6
|
import { assertSafeFetchUrl, fetchWithTimeoutAndRetry } from "../lib/http.js";
|
|
7
|
-
import { CHAIN_ID, PHAROS_ENVIRONMENT, MAX_X402_PAYMENT_USDC, X402_PAYMENT_TOKEN_ADDRESS } from "../lib/constants.js";
|
|
7
|
+
import { CHAIN_ID, PHAROS_ENVIRONMENT, MAX_X402_PAYMENT_USDC, X402_PAYMENT_TOKEN_ADDRESS, IS_MAINNET } from "../lib/constants.js";
|
|
8
8
|
import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
|
|
9
|
+
import { mapEngineDecision } from "../lib/guardian/decision.js";
|
|
10
|
+
import { isExecutionAvailable } from "../lib/config.js";
|
|
11
|
+
import { analyzeX402 } from "../lib/analysis/x402.js";
|
|
9
12
|
import { getSigner, isSignerFailure } from "../lib/signer/index.js";
|
|
13
|
+
import { isValidPositiveAmount } from "../lib/validation.js";
|
|
10
14
|
export const safehandsX402PreflightSchema = z.object({
|
|
11
15
|
url: z.string(),
|
|
12
16
|
method: z.enum(["GET", "POST", "PUT", "DELETE"]).optional().default("GET"),
|
|
@@ -17,6 +21,9 @@ export const safehandsX402PreflightSchema = z.object({
|
|
|
17
21
|
});
|
|
18
22
|
export async function handleSafeHandsX402Preflight(raw) {
|
|
19
23
|
const input = safehandsX402PreflightSchema.parse(raw);
|
|
24
|
+
if (!isValidPositiveAmount(input.paymentAmountUsdc)) {
|
|
25
|
+
return fail("VALIDATION_ERROR", `paymentAmountUsdc must be a valid positive number (got "${input.paymentAmountUsdc}").`, false, "safehands_x402_preflight");
|
|
26
|
+
}
|
|
20
27
|
try {
|
|
21
28
|
await assertSafeFetchUrl(input.url);
|
|
22
29
|
}
|
|
@@ -39,6 +46,7 @@ export async function handleSafeHandsX402Preflight(raw) {
|
|
|
39
46
|
const signerAvailable = !isSignerFailure(signer);
|
|
40
47
|
const policy = evaluateActionPolicy({
|
|
41
48
|
actionType: "x402_pay_and_fetch",
|
|
49
|
+
agentId: input.agentId,
|
|
42
50
|
url: input.url,
|
|
43
51
|
paymentAmountUsdc: input.paymentAmountUsdc,
|
|
44
52
|
paymentTokenAddress: input.paymentTokenAddress,
|
|
@@ -46,10 +54,22 @@ export async function handleSafeHandsX402Preflight(raw) {
|
|
|
46
54
|
requiresSigner: paymentRequired === true,
|
|
47
55
|
chainId: CHAIN_ID,
|
|
48
56
|
environment: PHAROS_ENVIRONMENT,
|
|
49
|
-
isMainnet:
|
|
57
|
+
isMainnet: IS_MAINNET,
|
|
58
|
+
});
|
|
59
|
+
const analysis = analyzeX402({
|
|
60
|
+
url: input.url,
|
|
61
|
+
paymentAmountUsdc: input.paymentAmountUsdc,
|
|
62
|
+
paymentTokenAddress: input.paymentTokenAddress,
|
|
63
|
+
agentId: input.agentId,
|
|
64
|
+
chainId: CHAIN_ID,
|
|
65
|
+
});
|
|
66
|
+
const guardianDecision = mapEngineDecision(policy.decision, {
|
|
67
|
+
executionAvailable: isExecutionAvailable(),
|
|
50
68
|
});
|
|
51
69
|
return ok({
|
|
52
70
|
...policy,
|
|
71
|
+
decision: guardianDecision,
|
|
72
|
+
guardianDecision,
|
|
53
73
|
url: input.url,
|
|
54
74
|
method: input.method,
|
|
55
75
|
paymentAmountUsdc: input.paymentAmountUsdc,
|
|
@@ -59,7 +79,8 @@ export async function handleSafeHandsX402Preflight(raw) {
|
|
|
59
79
|
signerMode: signerAvailable ? signer.mode : null,
|
|
60
80
|
signerError: signerAvailable ? null : signer.error,
|
|
61
81
|
probe: { enabled: input.probeEndpoint, status: detectedStatus, paymentRequired },
|
|
62
|
-
|
|
82
|
+
mainnetPayment: true,
|
|
83
|
+
analysis,
|
|
63
84
|
source: "safehands_x402_preflight",
|
|
64
85
|
});
|
|
65
86
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"safehandsX402Preflight.js","sourceRoot":"","sources":["../../src/tools/safehandsX402Preflight.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,uEAAuE;AACvE,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAqB,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;
|
|
1
|
+
{"version":3,"file":"safehandsX402Preflight.js","sourceRoot":"","sources":["../../src/tools/safehandsX402Preflight.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,uEAAuE;AACvE,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAqB,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAClI,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACzD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrD,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,GAAgC;IACjF,MAAM,KAAK,GAAG,4BAA4B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEtD,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CACT,kBAAkB,EAClB,2DAA2D,KAAK,CAAC,iBAAiB,KAAK,EACvF,KAAK,EACL,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CACT,cAAc,EACd,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EACjF,KAAK,EACL,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,eAAe,GAAwB,SAAS,CAAC;IACrD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9G,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC;YAC5B,eAAe,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,eAAe,GAAG,SAAS,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,eAAe;QACf,cAAc,EAAE,eAAe,KAAK,IAAI;QACxC,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,UAAU;KACtB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC3B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,QAAQ;KAClB,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC1D,kBAAkB,EAAE,oBAAoB,EAAE;KAC3C,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;QACR,GAAG,MAAM;QACT,QAAQ,EAAE,gBAAgB;QAC1B,gBAAgB;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,cAAc,EAAE,qBAAqB;QACrC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,eAAe;QACf,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAChD,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QAClD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE;QAChF,cAAc,EAAE,IAAI;QACpB,QAAQ;QACR,MAAM,EAAE,0BAA0B;KACnC,CAAC,CAAC;AACL,CAAC"}
|