safehands-pharos 1.5.0 → 2.8.0

package/dist/lib/analysis/x402.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.js","sourceRoot":"","sources":["../../../src/lib/analysis/x402.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,+EAA+E;AAC/E,6EAA6E;AAC7E,qEAAqE;AACrE,EAAE;AACF,gFAAgF;AAChF,qFAAqF;AACrF,2EAA2E;AAE3E,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,UAAU,EAAuB,MAAM,YAAY,CAAC;AAyB7D,MAAM,UAAU,WAAW,CAAC,KAAwB;IAClD,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,OAAO,CAAC;IAC7D,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,IAAI,0BAA0B,CAAC;IAEpF,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,iBAAiB;QACjB,mBAAmB;QACnB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IAE9E,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,MAAM,iBAAiB,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,MAAM,gBAAgB,GAAG,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC;IAErE,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,KAAK;QAAE,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAEvF,sFAAsF;IACtF,MAAM,QAAQ,GAAG,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAErF,OAAO,UAAU,CAAsB;QACrC,QAAQ,EAAE,MAAM;QAChB,QAAQ;QACR,gBAAgB,EAAE,MAAM,CAAC,QAAQ;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,qCAAqC,CAAC;QACjJ,QAAQ;QACR,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE;YACP,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,iBAAiB;YACjB,cAAc,EAAE,qBAAqB;YACrC,mBAAmB;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,UAAU;YACV,OAAO;YACP,iBAAiB;YACjB,gBAAgB;YAChB,kBAAkB,EAAE,IAAI;YACxB,uBAAuB,EAAE,IAAI;SAC9B;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/auditLog.d.ts

@@ -4,6 +4,7 @@ export interface AuditEntry {
     success: boolean;
     errorCode?: string;
     durationMs?: number;
+    [key: string]: unknown;
 }
 export declare function auditLog(entry: AuditEntry): void;
 //# sourceMappingURL=auditLog.d.ts.map

package/dist/lib/auditLog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auditLog.d.ts","sourceRoot":"","sources":["../../src/lib/auditLog.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAaD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAWhD"}
+{"version":3,"file":"auditLog.d.ts","sourceRoot":"","sources":["../../src/lib/auditLog.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAaD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAWhD"}

package/dist/lib/auditLog.js.map

@@ -1 +1 @@
-{"version":3,"file":"auditLog.js","sourceRoot":"","sources":["../../src/lib/auditLog.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,qDAAqD;AACrD,+CAA+C;AAC/C,uEAAuE;AACvE,2EAA2E;AAE3E,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAU/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;AAElD,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,MAAM,UAAU,QAAQ,CAAC,KAAiB;IACxC,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC"}
+{"version":3,"file":"auditLog.js","sourceRoot":"","sources":["../../src/lib/auditLog.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,qDAAqD;AACrD,+CAA+C;AAC/C,uEAAuE;AACvE,2EAA2E;AAE3E,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAW/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;AAElD,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,MAAM,UAAU,QAAQ,CAAC,KAAiB;IACxC,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC"}

package/dist/lib/config.d.ts

@@ -0,0 +1,77 @@
+import { type NetworkName, type PharosNetwork } from "./networks.js";
+export declare function writeToolsEnabled(): boolean;
+export declare function safeExecuteEnabled(): boolean;
+export declare function managedWalletEnabled(): boolean;
+export declare function publishRiskRecordsEnabled(): boolean;
+export interface SafetyGates {
+    WRITE_TOOLS_ENABLED: boolean;
+    SAFE_EXECUTE_ENABLED: boolean;
+    MANAGED_WALLET_ENABLED: boolean;
+    PUBLISH_RISK_RECORDS_ENABLED: boolean;
+}
+export declare function getGates(): SafetyGates;
+/** Read-only mode = no execution-related gate is enabled (the default). */
+export declare function isReadOnlyMode(): boolean;
+/**
+ * Execution is available only when writes are explicitly enabled AND the active
+ * network permits execution. Writes stay gated by WRITE_TOOLS_ENABLED (default
+ * false), so mainnet execution is never available by default.
+ */
+export declare function isExecutionAvailable(network?: PharosNetwork): boolean;
+export interface ActiveNetworkConfig {
+    network: NetworkName;
+    isMainnet: boolean;
+    readOnly: boolean;
+    executionAvailable: boolean;
+    gates: SafetyGates;
+}
+export declare function getActiveNetworkConfig(): ActiveNetworkConfig;
+export interface CapabilityFlags {
+    mainnetLive: boolean;
+    pharosPacificMainnet: boolean;
+    liveReadChecksAvailable: boolean;
+    guardianApiAvailable: boolean;
+    agentApiAvailable: boolean;
+    a2aAvailable: boolean;
+    pharosEvidenceAvailable: boolean;
+    rpcEvidenceAvailable: boolean;
+    gasEvidenceAvailable: boolean;
+    tokenRegistryEvidenceAvailable: boolean;
+    canonicalContractEvidenceAvailable: boolean;
+    ecosystemEvidenceAvailable: boolean;
+    x402PreflightAvailable: boolean;
+    railwayReady: boolean;
+    publicReadApiAvailable: boolean;
+    apiKeyAuthAvailable: boolean;
+    scopedApiKeysAvailable: boolean;
+    quotaControlsAvailable: boolean;
+    policyProfilesAvailable: boolean;
+    activityApiAvailable: boolean;
+    metricsApiAvailable: boolean;
+    structuredLoggingAvailable: boolean;
+    requestIdAvailable: boolean;
+    prepareTxAvailable: boolean;
+    riskRegistryReadAvailable: boolean;
+    riskRegistryPublishAvailable: boolean;
+    /** @deprecated Alias of riskRegistryPublishAvailable (historical name conflated read with publish). */
+    riskRegistryAvailable: boolean;
+    onchainAttestationAvailable: boolean;
+    attestedBroadcastRequired: boolean;
+    userSignedBroadcastAvailable: boolean;
+    localWalletHelperAvailable: boolean;
+    signingAvailable: boolean;
+    managedWalletAvailable: boolean;
+    autoExecutionAvailable: boolean;
+    onchainPublishingAvailable: boolean;
+    custodyAvailable: boolean;
+    premiumEndpointsAvailable: boolean;
+    x402PaidEndpointsAvailable: boolean;
+}
+/**
+ * Compute the honest capability flags. `true` ⇒ shipping read-only code exists;
+ * the write/sign/custody group is env-gated and reports `false` until the
+ * corresponding opt-in gates are explicitly enabled. Derives only from the network
+ * registry + env gate booleans — no secrets are emitted, no side effects.
+ */
+export declare function getCapabilityFlags(network?: PharosNetwork): CapabilityFlags;
+//# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAQvB,wBAAgB,iBAAiB,IAAI,OAAO,CAAwC;AACpF,wBAAgB,kBAAkB,IAAI,OAAO,CAAyC;AACtF,wBAAgB,oBAAoB,IAAI,OAAO,CAAsF;AACrI,wBAAgB,yBAAyB,IAAI,OAAO,CAAiD;AAErG,MAAM,WAAW,WAAW;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,sBAAsB,EAAE,OAAO,CAAC;IAChC,4BAA4B,EAAE,OAAO,CAAC;CACvC;AAED,wBAAgB,QAAQ,IAAI,WAAW,CAOtC;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,IAAI,OAAO,CAQxC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,aAAkC,GAAG,OAAO,CAEzF;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,KAAK,EAAE,WAAW,CAAC;CACpB;AAED,wBAAgB,sBAAsB,IAAI,mBAAmB,CAS5D;AAUD,MAAM,WAAW,eAAe;IAE9B,WAAW,EAAE,OAAO,CAAC;IACrB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,uBAAuB,EAAE,OAAO,CAAC;IACjC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,uBAAuB,EAAE,OAAO,CAAC;IACjC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,8BAA8B,EAAE,OAAO,CAAC;IACxC,kCAAkC,EAAE,OAAO,CAAC;IAC5C,0BAA0B,EAAE,OAAO,CAAC;IACpC,sBAAsB,EAAE,OAAO,CAAC;IAChC,YAAY,EAAE,OAAO,CAAC;IAEtB,sBAAsB,EAAE,OAAO,CAAC;IAChC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,sBAAsB,EAAE,OAAO,CAAC;IAChC,sBAAsB,EAAE,OAAO,CAAC;IAChC,uBAAuB,EAAE,OAAO,CAAC;IACjC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,0BAA0B,EAAE,OAAO,CAAC;IACpC,kBAAkB,EAAE,OAAO,CAAC;IAG5B,kBAAkB,EAAE,OAAO,CAAC;IAK5B,yBAAyB,EAAE,OAAO,CAAC;IACnC,4BAA4B,EAAE,OAAO,CAAC;IACtC,uGAAuG;IACvG,qBAAqB,EAAE,OAAO,CAAC;IAC/B,2BAA2B,EAAE,OAAO,CAAC;IACrC,yBAAyB,EAAE,OAAO,CAAC;IAEnC,4BAA4B,EAAE,OAAO,CAAC;IACtC,0BAA0B,EAAE,OAAO,CAAC;IACpC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sBAAsB,EAAE,OAAO,CAAC;IAChC,sBAAsB,EAAE,OAAO,CAAC;IAChC,0BAA0B,EAAE,OAAO,CAAC;IACpC,gBAAgB,EAAE,OAAO,CAAC;IAI1B,yBAAyB,EAAE,OAAO,CAAC;IACnC,0BAA0B,EAAE,OAAO,CAAC;CACrC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,aAAkC,GAAG,eAAe,CAqE/F"}

package/dist/lib/config.js

@@ -0,0 +1,120 @@
+// ─── SafeHands Typed Config & Safety Gates ─────────────────────────────
+// Read-only by default. All four execution-related gates default to false so a
+// hosted/default deployment performs read-only SafeHands checks only. Gates are
+// read dynamically from the environment so runtime changes (and tests) apply.
+// ────────────────────────────────────────────────────────────────────────
+import { getActiveNetwork, getActiveNetworkName, NETWORKS, } from "./networks.js";
+import { resolveSafeHandsRegistryAddress } from "./constants.js";
+function gate(name) {
+    return process.env[name] === "true";
+}
+// ── Safety gates (all default false) ───────────────────────────────────
+export function writeToolsEnabled() { return gate("WRITE_TOOLS_ENABLED"); }
+export function safeExecuteEnabled() { return gate("SAFE_EXECUTE_ENABLED"); }
+export function managedWalletEnabled() { return gate("MANAGED_WALLET_ENABLED") || gate("SAFEHANDS_ENABLE_MANAGED_WALLET"); }
+export function publishRiskRecordsEnabled() { return gate("PUBLISH_RISK_RECORDS_ENABLED"); }
+export function getGates() {
+    return {
+        WRITE_TOOLS_ENABLED: writeToolsEnabled(),
+        SAFE_EXECUTE_ENABLED: safeExecuteEnabled(),
+        MANAGED_WALLET_ENABLED: managedWalletEnabled(),
+        PUBLISH_RISK_RECORDS_ENABLED: publishRiskRecordsEnabled(),
+    };
+}
+/** Read-only mode = no execution-related gate is enabled (the default). */
+export function isReadOnlyMode() {
+    const g = getGates();
+    return !(g.WRITE_TOOLS_ENABLED ||
+        g.SAFE_EXECUTE_ENABLED ||
+        g.MANAGED_WALLET_ENABLED ||
+        g.PUBLISH_RISK_RECORDS_ENABLED);
+}
+/**
+ * Execution is available only when writes are explicitly enabled AND the active
+ * network permits execution. Writes stay gated by WRITE_TOOLS_ENABLED (default
+ * false), so mainnet execution is never available by default.
+ */
+export function isExecutionAvailable(network = getActiveNetwork()) {
+    return writeToolsEnabled() && network.executionAllowed;
+}
+export function getActiveNetworkConfig() {
+    const network = getActiveNetwork();
+    return {
+        network: getActiveNetworkName(),
+        isMainnet: network.isMainnet,
+        readOnly: isReadOnlyMode(),
+        executionAvailable: isExecutionAvailable(network),
+        gates: getGates(),
+    };
+}
+/**
+ * Compute the honest capability flags. `true` ⇒ shipping read-only code exists;
+ * the write/sign/custody group is env-gated and reports `false` until the
+ * corresponding opt-in gates are explicitly enabled. Derives only from the network
+ * registry + env gate booleans — no secrets are emitted, no side effects.
+ */
+export function getCapabilityFlags(network = getActiveNetwork()) {
+    const mainnet = NETWORKS["pacific-mainnet"];
+    // The product supports Pharos Pacific mainnet read checks (registered + read-only).
+    const mainnetReadable = mainnet.readOnlyChecks === true && mainnet.chainId === 1672;
+    void network; // flags are product-level; active network does not gate read availability
+    return {
+        // Implemented live
+        mainnetLive: mainnetReadable,
+        pharosPacificMainnet: mainnetReadable,
+        liveReadChecksAvailable: mainnetReadable,
+        guardianApiAvailable: true,
+        agentApiAvailable: true,
+        a2aAvailable: true,
+        pharosEvidenceAvailable: true,
+        rpcEvidenceAvailable: true,
+        gasEvidenceAvailable: true,
+        tokenRegistryEvidenceAvailable: true,
+        canonicalContractEvidenceAvailable: true,
+        ecosystemEvidenceAvailable: true,
+        x402PreflightAvailable: true,
+        // Server binds 0.0.0.0 on process.env.PORT (see api/server.ts) → deploy-ready.
+        railwayReady: true,
+        // Shipped read-only observability + public activity surface.
+        publicReadApiAvailable: true,
+        apiKeyAuthAvailable: true,
+        scopedApiKeysAvailable: true,
+        quotaControlsAvailable: true,
+        policyProfilesAvailable: true,
+        activityApiAvailable: true,
+        metricsApiAvailable: true,
+        structuredLoggingAvailable: true,
+        requestIdAvailable: true,
+        // — prepare-only UNSIGNED transactions (read-only; never signs/broadcasts).
+        prepareTxAvailable: true,
+        // Attestation / risk registry. Read is keyless (env override or the baked
+        // chainId-guarded Pacific default); publish additionally needs the attester key.
+        riskRegistryReadAvailable: !!resolveSafeHandsRegistryAddress(),
+        riskRegistryPublishAvailable: !!(process.env.SAFEHANDS_REGISTRY_ADDRESS || process.env.SAFEHANDS_RISK_REGISTRY_ADDRESS) &&
+            !!process.env.SAFEHANDS_ATTESTER_PRIVATE_KEY,
+        riskRegistryAvailable: !!(process.env.SAFEHANDS_REGISTRY_ADDRESS || process.env.SAFEHANDS_RISK_REGISTRY_ADDRESS) &&
+            !!process.env.SAFEHANDS_ATTESTER_PRIVATE_KEY,
+        // The legacy SAFEHANDS_RISK_REGISTRY_ADDRESS var aliases the REGISTRY contract
+        // only — it never points at the (different) attestation contract.
+        onchainAttestationAvailable: !!process.env.SAFEHANDS_ATTESTATION_ADDRESS && !!process.env.SAFEHANDS_ATTESTER_PRIVATE_KEY,
+        attestedBroadcastRequired: process.env.SAFEHANDS_ATTESTATION_REQUIRED === "true",
+        // Opt-in execution surfaces — honest, env-gated flags (all default OFF, so a
+        // hosted deployment reports read-only/no-custody until explicitly enabled).
+        userSignedBroadcastAvailable: process.env.SAFEHANDS_USER_SIGNED_BROADCAST_ENABLED === "true",
+        localWalletHelperAvailable: process.env.SAFEHANDS_LOCAL_WALLET_HELPER_ENABLED === "true",
+        managedWalletAvailable: process.env.WALLET_MODE === "managed-mainnet" && managedWalletEnabled(),
+        signingAvailable: writeToolsEnabled() &&
+            (process.env.WALLET_MODE === "managed-mainnet" || process.env.WALLET_MODE === "env" || !!process.env.PRIVATE_KEY),
+        autoExecutionAvailable: writeToolsEnabled() && process.env.WALLET_MODE === "managed-mainnet" && managedWalletEnabled(),
+        onchainPublishingAvailable: writeToolsEnabled() && !!process.env.SAFEHANDS_REGISTRY_ADDRESS,
+        custodyAvailable: process.env.WALLET_MODE === "managed-mainnet" && managedWalletEnabled(),
+        // Paid/premium endpoints are live when a receiver plus a facilitator are configured:
+        // either the zero-custody API gate (api/x402Gate.ts, external X402_FACILITATOR_URL —
+        // recommended) or the standalone local-facilitator server (x402Server.ts, private key).
+        premiumEndpointsAvailable: !!(process.env.X402_PAY_TO || process.env.WALLET_ADDRESS) &&
+            !!(process.env.X402_FACILITATOR_URL || process.env.X402_FACILITATOR_PRIVATE_KEY),
+        x402PaidEndpointsAvailable: !!(process.env.X402_PAY_TO || process.env.WALLET_ADDRESS) &&
+            !!(process.env.X402_FACILITATOR_URL || process.env.X402_FACILITATOR_PRIVATE_KEY),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,2EAA2E;AAE3E,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,QAAQ,GAGT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,+BAA+B,EAAE,MAAM,gBAAgB,CAAC;AAEjE,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC;AACtC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,KAAc,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;AACpF,MAAM,UAAU,kBAAkB,KAAc,OAAO,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;AACtF,MAAM,UAAU,oBAAoB,KAAc,OAAO,IAAI,CAAC,wBAAwB,CAAC,IAAI,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC;AACrI,MAAM,UAAU,yBAAyB,KAAc,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC;AASrG,MAAM,UAAU,QAAQ;IACtB,OAAO;QACL,mBAAmB,EAAE,iBAAiB,EAAE;QACxC,oBAAoB,EAAE,kBAAkB,EAAE;QAC1C,sBAAsB,EAAE,oBAAoB,EAAE;QAC9C,4BAA4B,EAAE,yBAAyB,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc;IAC5B,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,OAAO,CAAC,CACN,CAAC,CAAC,mBAAmB;QACrB,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,4BAA4B,CAC/B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAyB,gBAAgB,EAAE;IAC9E,OAAO,iBAAiB,EAAE,IAAI,OAAO,CAAC,gBAAgB,CAAC;AACzD,CAAC;AAUD,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,oBAAoB,EAAE;QAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,cAAc,EAAE;QAC1B,kBAAkB,EAAE,oBAAoB,CAAC,OAAO,CAAC;QACjD,KAAK,EAAE,QAAQ,EAAE;KAClB,CAAC;AACJ,CAAC;AAgED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAyB,gBAAgB,EAAE;IAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC5C,oFAAoF;IACpF,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;IACpF,KAAK,OAAO,CAAC,CAAC,0EAA0E;IACxF,OAAO;QACL,mBAAmB;QACnB,WAAW,EAAE,eAAe;QAC5B,oBAAoB,EAAE,eAAe;QACrC,uBAAuB,EAAE,eAAe;QACxC,oBAAoB,EAAE,IAAI;QAC1B,iBAAiB,EAAE,IAAI;QACvB,YAAY,EAAE,IAAI;QAClB,uBAAuB,EAAE,IAAI;QAC7B,oBAAoB,EAAE,IAAI;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,8BAA8B,EAAE,IAAI;QACpC,kCAAkC,EAAE,IAAI;QACxC,0BAA0B,EAAE,IAAI;QAChC,sBAAsB,EAAE,IAAI;QAC5B,+EAA+E;QAC/E,YAAY,EAAE,IAAI;QAClB,6DAA6D;QAC7D,sBAAsB,EAAE,IAAI;QAC5B,mBAAmB,EAAE,IAAI;QACzB,sBAAsB,EAAE,IAAI;QAC5B,sBAAsB,EAAE,IAAI;QAC5B,uBAAuB,EAAE,IAAI;QAC7B,oBAAoB,EAAE,IAAI;QAC1B,mBAAmB,EAAE,IAAI;QACzB,0BAA0B,EAAE,IAAI;QAChC,kBAAkB,EAAE,IAAI;QACxB,4EAA4E;QAC5E,kBAAkB,EAAE,IAAI;QACxB,0EAA0E;QAC1E,iFAAiF;QACjF,yBAAyB,EAAE,CAAC,CAAC,+BAA+B,EAAE;QAC9D,4BAA4B,EAC1B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;YACzF,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B;QAC9C,qBAAqB,EACnB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;YACzF,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B;QAC9C,+EAA+E;QAC/E,kEAAkE;QAClE,2BAA2B,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B;QACxH,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,MAAM;QAEhF,6EAA6E;QAC7E,4EAA4E;QAC5E,4BAA4B,EAAE,OAAO,CAAC,GAAG,CAAC,uCAAuC,KAAK,MAAM;QAC5F,0BAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,qCAAqC,KAAK,MAAM;QACxF,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,iBAAiB,IAAI,oBAAoB,EAAE;QAC/F,gBAAgB,EACd,iBAAiB,EAAE;YACnB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACnH,sBAAsB,EAAE,iBAAiB,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,iBAAiB,IAAI,oBAAoB,EAAE;QACtH,0BAA0B,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B;QAC3F,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,iBAAiB,IAAI,oBAAoB,EAAE;QACzF,qFAAqF;QACrF,qFAAqF;QACrF,wFAAwF;QACxF,yBAAyB,EACvB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YACzD,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;QAClF,0BAA0B,EACxB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YACzD,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;KACnF,CAAC;AACJ,CAAC"}