safehands-pharos 1.5.0 → 2.6.0

package/dist/agent/agentRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentRuntime.js","sourceRoot":"","sources":["../../src/agent/agentRuntime.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,wDAAwD;AACxD,2EAA2E;AAiB3E,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAA6C;IAC3E,KAAK,EAAE;QACL,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,6FAA6F;KAC9G;IACD,KAAK,EAAE;QACL,UAAU,EAAE,MAAM;QAClB,cAAc,EAAE,kEAAkE;KACnF;IACD,oBAAoB,EAAE;QACpB,UAAU,EAAE,mBAAmB;QAC/B,cAAc,EAAE,qFAAqF;KACtG;IACD,YAAY,EAAE;QACZ,UAAU,EAAE,4BAA4B;QACxC,cAAc,EAAE,+FAA+F;KAChH;CACF,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,QAA0B;IACtD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,gFAAgF;AAChF,iFAAiF"}

package/dist/agent/agentToolRouter.d.ts

@@ -0,0 +1,24 @@
+import type { ReadOnlyChainAccess, AnalyzerRiskLevel } from "../lib/analysis/index.js";
+import type { GuardianDecision } from "../lib/guardian/decision.js";
+import type { AgentIntent, AgentRequest } from "./agentIntentClassifier.js";
+import type { GuardianPolicy } from "./agentPolicyResolver.js";
+export interface RoutedResult {
+    /** Which capability handled the intent. */
+    tool: string;
+    decision: GuardianDecision;
+    riskLevel: AnalyzerRiskLevel;
+    reasons: string[];
+    warnings: string[];
+    /** The primary analyzer's details (read-only) — used by the policy step. */
+    primaryDetails: Record<string, unknown>;
+    /** Raw handler output kept as evidence. */
+    evidence: unknown;
+    experimental?: boolean;
+}
+export interface RouteOptions {
+    access?: ReadOnlyChainAccess;
+    policy?: GuardianPolicy;
+}
+/** Route a classified intent to its read-only handler. No execution. */
+export declare function routeIntent(intent: AgentIntent, req: AgentRequest, opts?: RouteOptions): Promise<RoutedResult>;
+//# sourceMappingURL=agentToolRouter.d.ts.map

package/dist/agent/agentToolRouter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentToolRouter.d.ts","sourceRoot":"","sources":["../../src/agent/agentToolRouter.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,WAAW,YAAY;IAC3B,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4EAA4E;IAC5E,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,2CAA2C;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AA0BD,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,wEAAwE;AACxE,wBAAsB,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAuExH"}

package/dist/agent/agentToolRouter.js

@@ -0,0 +1,89 @@
+// ─── SafeHands Agent — Tool Router (read-only) ────────────────
+// Routes a classified intent to the right EXISTING capability: the Phase 3
+// read-only route handlers (which wrap the Phase 2 analyzers). The router adds
+// no decision logic of its own and has no execution path. Read-only by
+// construction — it imports only read handlers and the policy snapshot.
+// ────────────────────────────────────────────────────────────────────────
+import { handleGuardianCheck, handleAnalyzeTx, handleAnalyzeContract, handleAnalyzeApproval, handleAnalyzeSafe, handleAnalyzeCalldata, handleAnalyzeX402, } from "../api/routes.js";
+import { explainPolicyResult } from "../lib/policy/actionPolicyEngine.js";
+function fromAnalyzer(tool, r) {
+    const primaryDetails = (r.details ?? r.analyzers?.[0]?.details ?? {});
+    return {
+        tool,
+        decision: r.decision,
+        riskLevel: r.riskLevel,
+        reasons: r.reasons ?? [],
+        warnings: r.warnings ?? [],
+        primaryDetails,
+        evidence: r,
+        experimental: r.experimental,
+    };
+}
+/** Route a classified intent to its read-only handler. No execution. */
+export async function routeIntent(intent, req, opts = {}) {
+    const { access, policy } = opts;
+    switch (intent) {
+        case "tx_hash_check":
+            return fromAnalyzer("analyze/tx", (await handleAnalyzeTx({ txHash: req.txHash, network: req.network, chainId: req.chainId }, access)));
+        case "contract_check":
+            return fromAnalyzer("analyze/contract", (await handleAnalyzeContract({ address: req.address ?? req.to, network: req.network, chainId: req.chainId }, access)));
+        case "erc20_approval":
+            return fromAnalyzer("analyze/approval", handleAnalyzeApproval({ data: req.data, token: req.token ?? req.to }));
+        case "permit2_approval":
+            // Permit2 approve(0x87517c45) is decoded by the calldata analyzer, not the
+            // ERC-20 approve decoder (which only understands 0x095ea7b3).
+            return fromAnalyzer("analyze/calldata", handleAnalyzeCalldata({ data: req.data, token: req.token ?? req.to }));
+        case "safe_transaction":
+            return fromAnalyzer("analyze/safe", (await handleAnalyzeSafe({ data: req.data })));
+        case "x402_payment_request":
+            return fromAnalyzer("analyze/x402", handleAnalyzeX402({
+                url: req.url,
+                paymentAmountUsdc: req.paymentAmountUsdc,
+                paymentTokenAddress: req.paymentTokenAddress,
+                payTo: req.payTo,
+                agentId: req.agentId,
+                chainId: req.chainId,
+            }));
+        case "native_transfer":
+        case "raw_transaction_intent":
+        case "unknown_contract_call":
+            return fromAnalyzer("guardian/check", (await handleGuardianCheck({ to: req.to, data: req.data, value: req.value, network: req.network, chainId: req.chainId }, access)));
+        case "policy_question":
+            return {
+                tool: "policy_snapshot",
+                decision: "ALLOW",
+                riskLevel: "LOW",
+                reasons: ["Informational: current SafeHands policy snapshot (no action evaluated)."],
+                warnings: [],
+                primaryDetails: {},
+                evidence: { policy: policy ?? null },
+            };
+        case "risk_explanation": {
+            // Wire to the shared explain-risk logic (the same explainPolicyResult used by
+            // the explain_risk skill) instead of a hardcoded string. No action is evaluated
+            // here, so this is an informational ALLOW; the human-readable explanation is
+            // produced by the real skill path. Pure + read-only — no execution.
+            const explanation = explainPolicyResult({
+                decision: "ALLOW",
+                riskLevel: "LOW",
+                safeToExecute: true,
+                reasons: [],
+                requiredActions: [],
+                checks: [],
+                environment: req.network ?? "pacific-mainnet",
+                chainId: req.chainId ?? 1672,
+                isMainnet: (req.network ?? "pacific-mainnet") === "pacific-mainnet",
+            });
+            return {
+                tool: "explain_risk",
+                decision: "ALLOW",
+                riskLevel: "LOW",
+                reasons: [explanation],
+                warnings: [],
+                primaryDetails: {},
+                evidence: { question: req.text ?? null, explanation, source: "explain_risk" },
+            };
+        }
+    }
+}
+//# sourceMappingURL=agentToolRouter.js.map

package/dist/agent/agentToolRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentToolRouter.js","sourceRoot":"","sources":["../../src/agent/agentToolRouter.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,2EAA2E;AAC3E,+EAA+E;AAC/E,uEAAuE;AACvE,wEAAwE;AACxE,2EAA2E;AAE3E,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AA8B1E,SAAS,YAAY,CAAC,IAAY,EAAE,CAAgB;IAClD,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAA4B,CAAC;IACjG,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;QAC1B,cAAc;QACd,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC;AACJ,CAAC;AAOD,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAmB,EAAE,GAAiB,EAAE,OAAqB,EAAE;IAC/F,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,eAAe;YAClB,OAAO,YAAY,CAAC,YAAY,EAAE,CAAC,MAAM,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAkB,CAAC,CAAC;QAC1J,KAAK,gBAAgB;YACnB,OAAO,YAAY,CAAC,kBAAkB,EAAE,CAAC,MAAM,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAkB,CAAC,CAAC;QAClL,KAAK,gBAAgB;YACnB,OAAO,YAAY,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,CAAkB,CAAC,CAAC;QAClI,KAAK,kBAAkB;YACrB,2EAA2E;YAC3E,8DAA8D;YAC9D,OAAO,YAAY,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,CAAkB,CAAC,CAAC;QAClI,KAAK,kBAAkB;YACrB,OAAO,YAAY,CAAC,cAAc,EAAE,CAAC,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAkB,CAAC,CAAC;QACtG,KAAK,sBAAsB;YACzB,OAAO,YAAY,CACjB,cAAc,EACd,iBAAiB,CAAC;gBAChB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;gBACxC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;gBAC5C,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAkB,CACpB,CAAC;QACJ,KAAK,iBAAiB,CAAC;QACvB,KAAK,wBAAwB,CAAC;QAC9B,KAAK,uBAAuB;YAC1B,OAAO,YAAY,CACjB,gBAAgB,EAChB,CAAC,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAkB,CACnJ,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO;gBACL,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,CAAC,yEAAyE,CAAC;gBACpF,QAAQ,EAAE,EAAE;gBACZ,cAAc,EAAE,EAAE;gBAClB,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE;aACrC,CAAC;QACJ,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,8EAA8E;YAC9E,gFAAgF;YAChF,6EAA6E;YAC7E,oEAAoE;YACpE,MAAM,WAAW,GAAG,mBAAmB,CAAC;gBACtC,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,IAAI;gBACnB,OAAO,EAAE,EAAE;gBACX,eAAe,EAAE,EAAE;gBACnB,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,GAAG,CAAC,OAAO,IAAI,iBAAiB;gBAC7C,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;gBAC5B,SAAS,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,iBAAiB,CAAC,KAAK,iBAAiB;aACpE,CAAC,CAAC;YACH,OAAO;gBACL,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,CAAC,WAAW,CAAC;gBACtB,QAAQ,EAAE,EAAE;gBACZ,cAAc,EAAE,EAAE;gBAClB,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE;aAC9E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/agent/guardianOperator.d.ts

@@ -0,0 +1,35 @@
+import { type GuardianAgentOptions } from "./SafeHandsGuardianAgent.js";
+import type { AgentRequest } from "./agentIntentClassifier.js";
+import type { AgentDecision } from "./agentDecisionFormatter.js";
+import { type Enrichment } from "./agentEnrich.js";
+import { type SafeHandsSafeExecuteInput } from "../tools/safehandsSafeExecute.js";
+export interface EnrichedDecision extends AgentDecision {
+    enrichment: Enrichment;
+}
+export interface OperateOptions {
+    /** Caller must explicitly opt in to execution (default: assess-only). */
+    execute?: boolean;
+    /** Which gated safe-execute path to run when executing. */
+    executePath?: SafeHandsSafeExecuteInput["path"];
+    /** Underlying tool input for the execution. */
+    action?: Record<string, unknown>;
+}
+export interface OperateResult {
+    decision: EnrichedDecision;
+    executed: boolean;
+    /** Raw result of the gated execution (when attempted). */
+    executionResult?: unknown;
+    /** The Agent-to-Agent obligation derived from the decision. */
+    obligation: string;
+    report: string;
+}
+export declare class GuardianOperator {
+    private readonly agent;
+    constructor(opts?: GuardianAgentOptions);
+    /** Read-only: the SafeHands verdict enriched with real on-chain + gas intel. */
+    assess(req: AgentRequest): Promise<EnrichedDecision>;
+    /** Full lifecycle. Executes only on ALLOW + explicit opt-in, via the gated path. */
+    operate(req: AgentRequest, opts?: OperateOptions): Promise<OperateResult>;
+}
+export declare function createGuardianOperator(opts?: GuardianAgentOptions): GuardianOperator;
+//# sourceMappingURL=guardianOperator.d.ts.map

package/dist/agent/guardianOperator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardianOperator.d.ts","sourceRoot":"","sources":["../../src/agent/guardianOperator.ts"],"names":[],"mappings":"AAeA,OAAO,EAA0B,KAAK,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAChG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAA8B,KAAK,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAE9G,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAChD,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,0DAA0D;IAC1D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;gBAEnC,IAAI,CAAC,EAAE,oBAAoB;IAIvC,gFAAgF;IAC1E,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAO1D,oFAAoF;IAC9E,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;CAmCpF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,gBAAgB,CAEpF"}

package/dist/agent/guardianOperator.js

@@ -0,0 +1,65 @@
+// ─── SafeHands Operator ───────────────────────────────────────
+// The "Complete Agent" for the Pharos Agent Arena. It wraps the read-only
+// SafeHands Agent and runs the full lifecycle:
+//
+//   Perceive → Enrich → Decide → (gated) Act → Attest → Report
+//
+// - The read-only verdict (Perceive/Enrich/Decide) never signs or writes.
+// - Act is OPT-IN and DELEGATED to the existing gated execution path
+//   (`safehands_safe_execute`), which enforces WRITE_TOOLS_ENABLED, the network
+//   executionAllowed flag, managed-wallet authorization, funding, and re-runs
+//   preflight. The Operator never bypasses a gate and holds no keys itself.
+// - The user-signed broadcast path attests every executed action on-chain to
+//   SafeHandsAttestation ("if SafeHands broadcasts it, SafeHands attests it").
+// ────────────────────────────────────────────────────────────────────────
+import { SafeHandsGuardianAgent } from "./SafeHandsGuardianAgent.js";
+import { enrich } from "./agentEnrich.js";
+import { handleSafeHandsSafeExecute } from "../tools/safehandsSafeExecute.js";
+export class GuardianOperator {
+    agent;
+    constructor(opts) {
+        this.agent = new SafeHandsGuardianAgent(opts);
+    }
+    /** Read-only: the SafeHands verdict enriched with real on-chain + gas intel. */
+    async assess(req) {
+        const decision = await this.agent.check(req);
+        const enrichment = await enrich(req);
+        const evidence = { ...decision.evidence, enrichment };
+        return { ...decision, evidence, enrichment };
+    }
+    /** Full lifecycle. Executes only on ALLOW + explicit opt-in, via the gated path. */
+    async operate(req, opts = {}) {
+        const decision = await this.assess(req);
+        const obligation = decision.callerObligation;
+        if (!opts.execute || decision.decision !== "ALLOW" || !opts.executePath) {
+            return {
+                decision,
+                executed: false,
+                obligation,
+                report: `${decision.summary} — caller obligation: ${obligation}. ${decision.nextStep}`,
+            };
+        }
+        // Delegate to the gated execution path (enforces every safety gate + attests).
+        const executionResult = await handleSafeHandsSafeExecute({
+            path: opts.executePath,
+            execute: true,
+            confirmExecution: true,
+            action: opts.action ?? {},
+        });
+        const executed = executionResult.success === true &&
+            executionResult.data?.executed === true;
+        return {
+            decision,
+            executed,
+            executionResult,
+            obligation,
+            report: executed
+                ? `Executed verified action via gated path; attested on-chain when broadcast. ${decision.summary}`
+                : `Execution gated/not completed — verdict ALLOW but a gate or runtime check stopped it. ${decision.summary}`,
+        };
+    }
+}
+export function createGuardianOperator(opts) {
+    return new GuardianOperator(opts);
+}
+//# sourceMappingURL=guardianOperator.js.map

package/dist/agent/guardianOperator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardianOperator.js","sourceRoot":"","sources":["../../src/agent/guardianOperator.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,0EAA0E;AAC1E,+CAA+C;AAC/C,EAAE;AACF,+DAA+D;AAC/D,EAAE;AACF,0EAA0E;AAC1E,qEAAqE;AACrE,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAE3E,OAAO,EAAE,sBAAsB,EAA6B,MAAM,6BAA6B,CAAC;AAGhG,OAAO,EAAE,MAAM,EAAmB,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAkC,MAAM,kCAAkC,CAAC;AAyB9G,MAAM,OAAO,gBAAgB;IACV,KAAK,CAAyB;IAE/C,YAAY,IAA2B;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,MAAM,CAAC,GAAiB;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,EAAE,GAAI,QAAQ,CAAC,QAAoC,EAAE,UAAU,EAAE,CAAC;QACnF,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC/C,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,OAAO,CAAC,GAAiB,EAAE,OAAuB,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QAE7C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACxE,OAAO;gBACL,QAAQ;gBACR,QAAQ,EAAE,KAAK;gBACf,UAAU;gBACV,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,yBAAyB,UAAU,KAAK,QAAQ,CAAC,QAAQ,EAAE;aACvF,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC;YACvD,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;SAC1B,CAAC,CAAC;QAEH,MAAM,QAAQ,GACZ,eAAe,CAAC,OAAO,KAAK,IAAI;YAC/B,eAAe,CAAC,IAAsC,EAAE,QAAQ,KAAK,IAAI,CAAC;QAE7E,OAAO;YACL,QAAQ;YACR,QAAQ;YACR,eAAe;YACf,UAAU;YACV,MAAM,EAAE,QAAQ;gBACd,CAAC,CAAC,8EAA8E,QAAQ,CAAC,OAAO,EAAE;gBAClG,CAAC,CAAC,yFAAyF,QAAQ,CAAC,OAAO,EAAE;SAChH,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,IAA2B;IAChE,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/agent/index.d.ts

@@ -0,0 +1,8 @@
+export * from "./agentIntentClassifier.js";
+export * from "./agentPolicyResolver.js";
+export * from "./agentToolRouter.js";
+export * from "./agentDecisionFormatter.js";
+export * from "./agentRuntime.js";
+export * from "./SafeHandsGuardianAgent.js";
+export * from "./agentEnrich.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/agent/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAOA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC"}

package/dist/agent/index.js

@@ -0,0 +1,14 @@
+// ─── SafeHands — Public Surface ───────────────────────────────
+// The read-only SafeHands Agent: decision contract + analyzers + read-only
+// handlers + the real-data Enrich step. No signer, no keys; execution is
+// delegated to the separately gated tools. (The former GuardianOperator
+// orchestrator class was removed as dead code — nothing consumed it.)
+// ────────────────────────────────────────────────────────────────────────
+export * from "./agentIntentClassifier.js";
+export * from "./agentPolicyResolver.js";
+export * from "./agentToolRouter.js";
+export * from "./agentDecisionFormatter.js";
+export * from "./agentRuntime.js";
+export * from "./SafeHandsGuardianAgent.js";
+export * from "./agentEnrich.js";
+//# sourceMappingURL=index.js.map

package/dist/agent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent/index.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,sEAAsE;AACtE,2EAA2E;AAE3E,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kBAAkB,CAAC"}

package/dist/api/activityRoutes.d.ts

@@ -0,0 +1,70 @@
+export declare function handleActivitySummary(): {
+    readOnly: true;
+    executionAvailable: boolean;
+    window: {
+        capacity: number;
+        size: number;
+    };
+    totals: {
+        recorded: number;
+        rateLimited: number;
+        byCaller: Record<import("../lib/observability/sanitize.js").CallerType, number>;
+        byAccessTier: Record<"anonymous" | "agent" | "a2a" | "api-key", number>;
+        byDecision: Record<"ALLOW" | "BLOCK" | "REQUIRE_CONFIRMATION" | "PREPARE_ONLY" | "NONE", number>;
+        byRisk: Record<"UNKNOWN" | "LOW" | "MEDIUM" | "HIGH" | "CRITICAL", number>;
+        byEndpoint: Record<string, number>;
+        byPolicyPreset: Record<string, number>;
+    };
+    lastActivityAt: string | null;
+    generatedAt: string;
+};
+export declare function handleActivityRecent(query: unknown): {
+    readOnly: true;
+    executionAvailable: boolean;
+    generatedAt: string;
+    limit: number;
+    count: number;
+    items: import("../lib/observability/sanitize.js").ActivityItem[];
+};
+export declare function handleMetricsPublic(): {
+    service: string;
+    version: string;
+    generatedAt: string;
+    network: import("../lib/networks.js").NetworkName;
+    chainId: number;
+    uptimeSeconds: number;
+    totalChecks: number;
+    totalAgentChecks: number;
+    totalA2AChecks: number;
+    totalBlocked: number;
+    totalRequireConfirmation: number;
+    totalPrepareOnly: number;
+    totalAllowed: number;
+    totalRateLimited: number;
+    rateLimitedByTier: Record<"anonymous" | "agent" | "a2a" | "api-key", number>;
+    ring: {
+        capacity: number;
+        size: number;
+    };
+    quota: {
+        windowSeconds: number;
+        tiers: Record<import("../lib/observability/quota.js").QuotaTier, number>;
+    };
+    mainnetLive: boolean;
+    railwayReady: boolean;
+    publicReadApiAvailable: boolean;
+    apiKeyAuthAvailable: boolean;
+    scopedApiKeysAvailable: boolean;
+    quotaControlsAvailable: boolean;
+    policyProfilesAvailable: boolean;
+    policyVersion: string;
+    policyPresets: import("../lib/policy/policyPresets.js").PolicyPreset[];
+    prepareTxAvailable: boolean;
+    signingAvailable: boolean;
+    userSignedBroadcastAvailable: boolean;
+    premiumEndpointsAvailable: boolean;
+    x402PaidEndpointsAvailable: boolean;
+    readOnly: boolean;
+    executionAvailable: boolean;
+};
+//# sourceMappingURL=activityRoutes.d.ts.map

package/dist/api/activityRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityRoutes.d.ts","sourceRoot":"","sources":["../../src/api/activityRoutes.ts"],"names":[],"mappings":"AAyCA,wBAAgB,qBAAqB;;;;;;;;;;;;;;;;;;;EAMpC;AAGD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO;;;;;;;EAUlD;AAID,wBAAgB,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyClC"}

package/dist/api/activityRoutes.js

@@ -0,0 +1,100 @@
+// ─── SafeHands API — Activity & Public Metrics (read-only) ────
+// Pure handlers for the public activity feed + aggregate metrics that power the
+// future SafeHands site. They read ONLY the in-memory activity store + the
+// honest capability flags. No signer, no wallet, no write path, no secrets.
+// server.ts wraps these in the standard ok() envelope.
+// ────────────────────────────────────────────────────────────────────────
+import { readFileSync } from "fs";
+import { fileURLToPath } from "url";
+import { dirname, join } from "path";
+import { activityStore } from "../lib/observability/activityStore.js";
+import { readOnlyMeta } from "./response.js";
+import { resolveQuotaConfig } from "./httpHardening.js";
+import { POLICY_VERSION, PRESET_NAMES } from "../lib/policy/policyPresets.js";
+import { getActiveNetwork, getActiveNetworkName } from "../lib/networks.js";
+import { getCapabilityFlags, isExecutionAvailable } from "../lib/config.js";
+const SERVICE = "SafeHands API";
+function readVersion() {
+    try {
+        const here = dirname(fileURLToPath(import.meta.url));
+        const pkg = JSON.parse(readFileSync(join(here, "..", "..", "package.json"), "utf-8"));
+        return typeof pkg.version === "string" ? pkg.version : "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
+const VERSION = readVersion();
+const RECENT_DEFAULT = 20;
+const RECENT_MAX = 100;
+function clampLimit(raw) {
+    const n = typeof raw === "string" ? parseInt(raw, 10) : typeof raw === "number" ? raw : NaN;
+    if (!Number.isFinite(n))
+        return RECENT_DEFAULT;
+    return Math.min(RECENT_MAX, Math.max(1, Math.floor(n)));
+}
+// ── GET /activity/summary ──────────────────────────────────────────────
+export function handleActivitySummary() {
+    return {
+        generatedAt: new Date().toISOString(),
+        ...activityStore.summary(),
+        ...readOnlyMeta(),
+    };
+}
+// ── GET /activity/recent?limit=N ───────────────────────────────────────
+export function handleActivityRecent(query) {
+    const limit = clampLimit(query && typeof query === "object" ? query.limit : undefined);
+    const items = activityStore.recent(limit);
+    return {
+        generatedAt: new Date().toISOString(),
+        limit,
+        count: items.length,
+        items,
+        ...readOnlyMeta(),
+    };
+}
+// ── GET /metrics/public ────────────────────────────────────────────────
+// Safe aggregate metrics only — no env, no payloads, no secrets, no memory dumps.
+export function handleMetricsPublic() {
+    const m = activityStore.metrics();
+    const caps = getCapabilityFlags();
+    const network = getActiveNetwork();
+    const quotaCfg = resolveQuotaConfig();
+    return {
+        service: SERVICE,
+        version: VERSION,
+        generatedAt: new Date().toISOString(),
+        network: getActiveNetworkName(),
+        chainId: network.chainId,
+        uptimeSeconds: m.uptimeSeconds,
+        totalChecks: m.totalChecks,
+        totalAgentChecks: m.totalAgentChecks,
+        totalA2AChecks: m.totalA2AChecks,
+        totalBlocked: m.totalBlocked,
+        totalRequireConfirmation: m.totalRequireConfirmation,
+        totalPrepareOnly: m.totalPrepareOnly,
+        totalAllowed: m.totalAllowed,
+        totalRateLimited: m.totalRateLimited,
+        rateLimitedByTier: m.rateLimitedByTier,
+        ring: m.ring,
+        // Safe quota config (limits + window only — NO keys/IPs/identifiers).
+        quota: { windowSeconds: Math.floor(quotaCfg.windowMs / 1000), tiers: quotaCfg.max },
+        mainnetLive: caps.mainnetLive,
+        railwayReady: caps.railwayReady,
+        publicReadApiAvailable: caps.publicReadApiAvailable,
+        apiKeyAuthAvailable: caps.apiKeyAuthAvailable,
+        scopedApiKeysAvailable: caps.scopedApiKeysAvailable,
+        quotaControlsAvailable: caps.quotaControlsAvailable,
+        policyProfilesAvailable: caps.policyProfilesAvailable,
+        policyVersion: POLICY_VERSION,
+        policyPresets: [...PRESET_NAMES],
+        prepareTxAvailable: caps.prepareTxAvailable,
+        signingAvailable: caps.signingAvailable,
+        userSignedBroadcastAvailable: caps.userSignedBroadcastAvailable,
+        premiumEndpointsAvailable: caps.premiumEndpointsAvailable,
+        x402PaidEndpointsAvailable: caps.x402PaidEndpointsAvailable,
+        readOnly: true,
+        executionAvailable: isExecutionAvailable(),
+    };
+}
+//# sourceMappingURL=activityRoutes.js.map

package/dist/api/activityRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityRoutes.js","sourceRoot":"","sources":["../../src/api/activityRoutes.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,gFAAgF;AAChF,2EAA2E;AAC3E,4EAA4E;AAC5E,uDAAuD;AACvD,2EAA2E;AAE3E,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,MAAM,OAAO,GAAG,eAAe,CAAC;AAEhC,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACtF,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AACD,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;AAE9B,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC;IAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,GAAG,aAAa,CAAC,OAAO,EAAE;QAC1B,GAAG,YAAY,EAAE;KAClB,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpH,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK;QACL,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,KAAK;QACL,GAAG,YAAY,EAAE;KAClB,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,kFAAkF;AAClF,MAAM,UAAU,mBAAmB;IACjC,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,OAAO,EAAE,oBAAoB,EAAE;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,wBAAwB,EAAE,CAAC,CAAC,wBAAwB;QACpD,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;QACtC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,sEAAsE;QACtE,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE;QACnF,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,aAAa,EAAE,cAAc;QAC7B,aAAa,EAAE,CAAC,GAAG,YAAY,CAAC;QAChC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,4BAA4B,EAAE,IAAI,CAAC,4BAA4B;QAC/D,yBAAyB,EAAE,IAAI,CAAC,yBAAyB;QACzD,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;QAC3D,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,oBAAoB,EAAE;KAC3C,CAAC;AACJ,CAAC"}

package/dist/api/agentRoutes.d.ts

@@ -0,0 +1,16 @@
+import type { GuardianPolicy } from "../agent/index.js";
+import type { ReadOnlyChainAccess } from "../lib/analysis/index.js";
+/** Sanitized policy + preset resolved by the caller (server.ts) — tighten-only. */
+export interface AgentRouteOptions {
+    policy?: Partial<GuardianPolicy>;
+    policyPreset?: string;
+}
+/** POST /agent/check — real SafeHands Agent decision for an intent payload. */
+export declare function handleAgentCheck(raw: unknown, access?: ReadOnlyChainAccess, opts?: AgentRouteOptions): Promise<import("../agent/agentDecisionFormatter.js").AgentDecision>;
+/**
+ * POST /agent/a2a/check — real SafeHands Agent decision plus the caller's
+ * obligation (ALLOW→proceed, BLOCK→stop, REQUIRE_CONFIRMATION→ask_user_or_admin,
+ * PREPARE_ONLY→prepare_handoff_no_execute).
+ */
+export declare function handleAgentA2ACheck(raw: unknown, access?: ReadOnlyChainAccess, opts?: AgentRouteOptions): Promise<import("../agent/SafeHandsGuardianAgent.js").AgentToAgentDecision>;
+//# sourceMappingURL=agentRoutes.d.ts.map

package/dist/api/agentRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentRoutes.d.ts","sourceRoot":"","sources":["../../src/api/agentRoutes.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAgB,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,+EAA+E;AAC/E,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,mBAAmB,EAAE,IAAI,GAAE,iBAAsB,uEAM9G;AAUD;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,mBAAmB,EAAE,IAAI,GAAE,iBAAsB,8EAejH"}

package/dist/api/agentRoutes.js

@@ -0,0 +1,37 @@
+// ─── SafeHands API — Agent Endpoints (read-only) ──────────────
+// Real HTTP handlers that delegate to the EXISTING SafeHandsGuardianAgent. No
+// decision logic is duplicated here, no static/demo output is returned — every
+// response is the agent's real verdict. Kept in a separate file so `routes.ts`
+// stays free of the agent import (the agent imports `routes.ts`).
+// ────────────────────────────────────────────────────────────────────────
+import { createGuardianAgent } from "../agent/index.js";
+/** POST /agent/check — real SafeHands Agent decision for an intent payload. */
+export async function handleAgentCheck(raw, access, opts = {}) {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new Error("Request body must be an object describing the action/intent.");
+    }
+    const agent = createGuardianAgent({ access, policy: opts.policy, policyPreset: opts.policyPreset });
+    return agent.check(raw);
+}
+/**
+ * POST /agent/a2a/check — real SafeHands Agent decision plus the caller's
+ * obligation (ALLOW→proceed, BLOCK→stop, REQUIRE_CONFIRMATION→ask_user_or_admin,
+ * PREPARE_ONLY→prepare_handoff_no_execute).
+ */
+export async function handleAgentA2ACheck(raw, access, opts = {}) {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new Error("Request body must be an object.");
+    }
+    const body = raw;
+    if (typeof body.callerAgent !== "string" || body.callerAgent.length === 0) {
+        throw new Error("callerAgent must be a non-empty string.");
+    }
+    const action = body.requestedAction ?? body.intent ?? body.action;
+    if (action === undefined || action === null || typeof action !== "object" || Array.isArray(action)) {
+        throw new Error("requestedAction (or intent) must be an object describing the action.");
+    }
+    // The caller policy is sanitized by the server (tighten-only) and passed via opts.
+    const agent = createGuardianAgent({ owner: "agent", policy: opts.policy, policyPreset: opts.policyPreset, access });
+    return agent.checkForAgent(body.callerAgent, action);
+}
+//# sourceMappingURL=agentRoutes.js.map

package/dist/api/agentRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentRoutes.js","sourceRoot":"","sources":["../../src/api/agentRoutes.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,kEAAkE;AAClE,2EAA2E;AAE3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAUxD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAY,EAAE,MAA4B,EAAE,OAA0B,EAAE;IAC7G,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACpG,OAAO,KAAK,CAAC,KAAK,CAAC,GAAmB,CAAC,CAAC;AAC1C,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAY,EAAE,MAA4B,EAAE,OAA0B,EAAE;IAChH,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,GAAc,CAAC;IAC5B,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAClE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,mFAAmF;IACnF,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACpH,OAAO,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,MAAsB,CAAC,CAAC;AACvE,CAAC"}

package/dist/api/broadcastRoutes.d.ts

@@ -0,0 +1,34 @@
+export declare function handleBroadcastSigned(raw: unknown): Promise<{
+    readOnly: true;
+    executionAvailable: boolean;
+    broadcastStatus: "success" | "verify_only_passed";
+    attestationStatus: string;
+    executionStatus: string;
+    message: string;
+    txHash: string | undefined;
+    preparedTransactionId: string;
+    preparedTransactionHash: string;
+    decision: string;
+    network: import("../lib/networks.js").NetworkName;
+    chainId: number;
+}>;
+export declare function handleGetBroadcastAttestationStatus(txHash: string): Promise<{
+    readOnly: true;
+    executionAvailable: boolean;
+    txHash: string;
+    status: string;
+    attestationStatus: string;
+    local: {
+        found: boolean;
+        record: import("../lib/pharos/attestationPublisher.js").PendingAttestation | null;
+    };
+    goldsky: import("../lib/goldsky.js").GoldskyLookupResult<import("../lib/goldsky.js").IndexedAttestationRecord>;
+    onchain: import("../lib/goldsky.js").OnchainAttestationLookup | {
+        source: string;
+        skipped: boolean;
+        reason: string;
+    };
+    lookupOrder: string[];
+    network: import("../lib/networks.js").NetworkName;
+}>;
+//# sourceMappingURL=broadcastRoutes.d.ts.map

package/dist/api/broadcastRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcastRoutes.d.ts","sourceRoot":"","sources":["../../src/api/broadcastRoutes.ts"],"names":[],"mappings":"AAUA,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,OAAO;;;;;;;;;;;;;GAkIvD;AAGD,wBAAsB,mCAAmC,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;GA4BvE"}