safehands-pharos 1.5.0 → 2.8.0

package/dist/lib/policy/actionPolicyEngine.js

@@ -1,9 +1,23 @@
 // ─── SafeHands Action Policy Engine ───────────────────────────────────
 // Reusable transaction safety firewall for AI agent actions on Pharos.
-// It is intentionally deterministic and testnet-only.
+// It is intentionally deterministic. Mainnet-first (Pharos Pacific, chain 1672).
 // ───────────────────────────────────────────────────────────────────────
 import { isAddress, parseUnits } from "viem";
-import { CHAIN_ID, PHAROS_ENVIRONMENT, IS_MAINNET, MAX_APPROVAL_AMOUNT_USDC, MAX_TX_AMOUNT_PHRS, MAX_X402_PAYMENT_USDC, USDC_ADDRESS, TEST_USDC_ADDRESS, } from "../constants.js";
+import { isDenylistedRecipient } from "../recipientSafety.js";
+import { CHAIN_ID, PHAROS_ENVIRONMENT, COUNTERPARTY_CRITICAL_THRESHOLD, RISK_BLOCK_THRESHOLD, activeX402AllowedTokenAddresses, PACIFIC_USDC_ADDRESS, PACIFIC_WPROS_ADDRESS, USDC_ADDRESS, WPROS_ADDRESS, isCanonicalInfrastructure, } from "../constants.js";
+import { getNetworkByChainId } from "../networks.js";
+import { resolvePriceableToken } from "../spendAccumulator.js";
+import { loadAgentPolicy, resolveEffectiveLimits } from "./agentPolicy.js";
+/** Projects a RiskAssessment into the policy-evidence shape. Single mapper — write tools must use this rather than hand-rolling the projection. */
+export function riskEvidenceFromAssessment(a) {
+    return {
+        score: a.riskScore,
+        degraded: a.degraded,
+        degradedReasons: a.degradedReasons,
+        counterpartyRisk: a.breakdown.counterpartyRisk,
+        swapProviderNotConfigured: a.swapProviderNotConfigured,
+    };
+}
 function numeric(value) {
     if (!value)
         return null;
@@ -33,28 +47,41 @@ export function isUnlimitedApprovalAmount(value) {
 function isSuspiciousUrl(rawUrl) {
     if (!rawUrl)
         return false;
-    if (process.env.ALLOW_LOCAL_X402_FETCH === "true")
-        return false;
+    let parsed;
     try {
-        const parsed = new URL(rawUrl);
-        const host = parsed.hostname.toLowerCase();
-        if (!["http:", "https:"].includes(parsed.protocol))
-            return true;
-        if (host === "localhost" || host.endsWith(".localhost"))
-            return true;
-        if (host === "127.0.0.1" || host.startsWith("127.") || host === "0.0.0.0")
-            return true;
-        if (host.startsWith("10.") || host.startsWith("192.168."))
-            return true;
-        if (/^172\.(1[6-9]|2\d|3[0-1])\./.test(host))
-            return true;
-        if (host === "[::1]" || host === "::1")
-            return true;
-        return false;
+        parsed = new URL(rawUrl);
     }
     catch {
         return true;
     }
+    const host = parsed.hostname.toLowerCase();
+    if (!["http:", "https:"].includes(parsed.protocol))
+        return true;
+    // ALLOW_LOCAL_X402_FETCH relaxes ONLY loopback, and only outside production.
+    // Cloud-metadata / private / link-local ranges are ALWAYS suspicious — the flag
+    // can no longer wave through 169.254.169.254 or RFC1918 hosts.
+    const isLoopback = host === "localhost" || host.endsWith(".localhost") ||
+        host === "127.0.0.1" || host.startsWith("127.") ||
+        host === "[::1]" || host === "::1";
+    const loopbackBypass = process.env.ALLOW_LOCAL_X402_FETCH === "true" &&
+        (process.env.NODE_ENV || "").toLowerCase() !== "production";
+    if (isLoopback)
+        return loopbackBypass ? false : true;
+    if (host === "0.0.0.0")
+        return true;
+    if (/^0\./.test(host))
+        return true;
+    if (host.startsWith("10.") || host.startsWith("192.168."))
+        return true;
+    if (/^172\.(1[6-9]|2\d|3[0-1])\./.test(host))
+        return true;
+    if (host.startsWith("169.254."))
+        return true;
+    if (host.startsWith("[fc") || host.startsWith("[fd") || host.startsWith("[fe80:"))
+        return true;
+    if (host.startsWith("fc") || host.startsWith("fd") || host.startsWith("fe80:"))
+        return true;
+    return false;
 }
 function classifyRisk(checks) {
     const fails = checks.filter((c) => c.status === "fail").length;
@@ -73,30 +100,40 @@ function classifyRisk(checks) {
 function defaultDecision(riskLevel, checks) {
     if (checks.some((c) => c.status === "fail"))
         return "BLOCK";
-    if (riskLevel === "MEDIUM")
-        return "REQUIRE_CONFIRMATION";
-    if (riskLevel === "UNKNOWN")
-        return "REQUIRE_TOKEN_REVIEW";
-    return "ALLOW";
+    if (riskLevel === "LOW")
+        return "ALLOW";
+    // classifyRisk only produces MEDIUM here (HIGH/CRITICAL imply a fail, caught
+    // above). Any other level, including a future UNKNOWN, lands here fail-closed
+    // rather than falling through to ALLOW.
+    return "REQUIRE_CONFIRMATION";
 }
 export function evaluateActionPolicy(input) {
     const environment = input.environment || PHAROS_ENVIRONMENT;
     const chainId = input.chainId ?? CHAIN_ID;
-    const isMainnet = input.isMainnet ?? IS_MAINNET;
+    const network = getNetworkByChainId(chainId);
+    const isMainnet = input.isMainnet ?? network?.isMainnet ?? false;
     const checks = [];
     const reasons = [];
     const requiredActions = [];
-    if (isMainnet) {
-        pushCheck(checks, "mainnet_guard", "fail", "Mainnet actions are blocked by SafeHands.", reasons, requiredActions, "Mainnet actions are not supported.", "Switch to Pharos Atlantic Testnet.");
+    const policy = input.agentPolicy ?? loadAgentPolicy(input.agentId);
+    const effectiveLimits = resolveEffectiveLimits(policy);
+    // Chain guard: only supported Pharos networks pass. Unknown chains (e.g.
+    // Ethereum mainnet, chain 1) are blocked. Pharos Pacific Mainnet (1672) is a
+    // supported network for read-only SafeHands checks.
+    if (!network) {
+        pushCheck(checks, "chain_id", "fail", `Chain ID ${chainId} is not a supported Pharos network.`, reasons, requiredActions, "Unsupported chain.", "Use Pharos Pacific Mainnet (1672) or Atlantic Testnet (688689).");
     }
     else {
-        pushCheck(checks, "mainnet_guard", "pass", "Action is not targeting mainnet.");
+        pushCheck(checks, "chain_id", "pass", `Chain ID is ${network.label} (${chainId}).`);
     }
-    if (chainId !== CHAIN_ID) {
-        pushCheck(checks, "chain_id", "fail", `Expected chain ID ${CHAIN_ID}, received ${chainId}.`, reasons, requiredActions, "Chain ID mismatch.", "Switch wallet/RPC to Pharos Atlantic Testnet.");
+    // Mainnet read-only SafeHands checks are allowed. Mainnet execution / write /
+    // payment is disabled by default and gated separately (WRITE_TOOLS_ENABLED and
+    // the network executionAllowed flag) — it is never live here.
+    if (isMainnet) {
+        pushCheck(checks, "mainnet_guard", "pass", `${network ? network.label : "Pharos mainnet"}: read-only SafeHands checks allowed; execution/write/payment is gated and disabled by default.`);
     }
     else {
-        pushCheck(checks, "chain_id", "pass", `Chain ID is Pharos Atlantic Testnet (${CHAIN_ID}).`);
+        pushCheck(checks, "mainnet_guard", "pass", "Action is not targeting mainnet.");
     }
     if (environment !== PHAROS_ENVIRONMENT) {
         pushCheck(checks, "environment", "warn", `Expected ${PHAROS_ENVIRONMENT}, received ${environment}.`, reasons, requiredActions, undefined, "Verify the runtime environment before execution.");
@@ -104,23 +141,48 @@ export function evaluateActionPolicy(input) {
     else {
         pushCheck(checks, "environment", "pass", `Environment is ${PHAROS_ENVIRONMENT}.`);
     }
-    if (input.requiresSigner && !input.signerAvailable) {
-        pushCheck(checks, "signer", "fail", "No signer is available for this write/payment action.", reasons, requiredActions, "No signer available.", "Configure WALLET_MODE=managed-testnet, X402_SIGNER_PRIVATE_KEY, or PRIVATE_KEY for testnet only.");
+    if (input.requiresSigner && input.signerAvailable === false) {
+        pushCheck(checks, "signer", "fail", "No signer is available for this write/payment action.", reasons, requiredActions, "No signer available.", "Configure WALLET_MODE=managed-mainnet, X402_SIGNER_PRIVATE_KEY, or PRIVATE_KEY for mainnet only.");
+    }
+    else if (input.requiresSigner && input.signerAvailable === undefined) {
+        pushCheck(checks, "signer_unknown", "warn", "Signer availability is unknown; a signer will be required for execution.", reasons, requiredActions, undefined, "Ensure a signer is available before executing this write/payment action.");
     }
     if (input.actionType === "send_payment") {
         const amount = numeric(input.amount);
-        if (amount !== null && amount > Number(MAX_TX_AMOUNT_PHRS)) {
-            pushCheck(checks, "payment_limit", "fail", `Payment ${amount} PHRS exceeds limit ${MAX_TX_AMOUNT_PHRS} PHRS.`, reasons, requiredActions, "Payment exceeds configured PHRS limit.", "Reduce amount or increase MAX_TX_AMOUNT_PHRS consciously for testnet.");
+        const paymentLimit = effectiveLimits.maxPaymentPROS;
+        if (amount !== null && amount > paymentLimit) {
+            pushCheck(checks, "payment_limit", "fail", `Payment ${amount} PROS exceeds limit ${paymentLimit} PROS (policy: ${policy.profile}).`, reasons, requiredActions, "Payment exceeds configured PROS limit.", "Reduce amount or adjust agent policy.");
         }
         else {
-            pushCheck(checks, "payment_limit", "pass", `Payment is within ${MAX_TX_AMOUNT_PHRS} PHRS limit.`);
+            pushCheck(checks, "payment_limit", "pass", `Payment is within ${paymentLimit} PROS limit (policy: ${policy.profile}).`);
+        }
+        const balance = numeric(input.walletBalancePhs);
+        if (amount !== null && balance !== null) {
+            if (amount > balance) {
+                pushCheck(checks, "funding_balance", "fail", `Insufficient PROS balance. Have ${balance}, need ${amount}.`, reasons, requiredActions, "Insufficient PROS balance.", "Fund the wallet before executing.");
+            }
+            else {
+                pushCheck(checks, "funding_balance", "pass", "Sufficient PROS balance for payment.");
+            }
         }
         if (input.recipient && !isAddress(input.recipient)) {
             pushCheck(checks, "recipient_address", "fail", "Recipient address is invalid.", reasons, requiredActions, "Invalid recipient address.", "Provide a valid EVM address.");
         }
+        else if (isDenylistedRecipient(input.recipient)) {
+            pushCheck(checks, "recipient_denylist", "fail", "Recipient is on the operator denylist (known-bad address).", reasons, requiredActions, "Recipient address is denylisted.", "Do not send to this address; it is flagged as known-bad by the operator.");
+        }
         else if (input.recipientVerified === false) {
             pushCheck(checks, "recipient_reputation", "warn", "Recipient is unverified.", reasons, requiredActions, undefined, "Verify recipient before sending funds.");
         }
+        else if (input.recipient && input.recipientVerified === undefined) {
+            // Fail-closed: recipientVerified is a caller CLAIM. When it is omitted, no
+            // verification happened — treat exactly like an unverified recipient instead
+            // of silently skipping the reputation check (truth-model rule 5).
+            pushCheck(checks, "recipient_reputation", "unknown", "Recipient verification was not asserted; the recipient is treated as an unverified claim.", reasons, requiredActions, undefined, "Verify the recipient against chain/registry evidence before sending funds.");
+        }
+        else if (input.recipient && input.recipientVerified === true) {
+            pushCheck(checks, "recipient_reputation", "pass", "Recipient verification asserted by the caller (caller-attested claim; not independently verified by SafeHands).");
+        }
     }
     if (input.actionType === "approve_token") {
         const unlimited = input.approvalUnlimited || isUnlimitedApprovalAmount(input.approvalAmount) || isUnlimitedApprovalAmount(input.amount);
@@ -129,11 +191,12 @@ export function evaluateActionPolicy(input) {
         }
         else {
             const approvalAmount = numeric(input.approvalAmount) ?? numeric(input.amount);
-            if (approvalAmount !== null && approvalAmount > Number(MAX_APPROVAL_AMOUNT_USDC)) {
-                pushCheck(checks, "approval_limit", "fail", `Approval ${approvalAmount} exceeds limit ${MAX_APPROVAL_AMOUNT_USDC}.`, reasons, requiredActions, "Approval exceeds configured limit.", "Reduce approval or increase MAX_APPROVAL_AMOUNT_USDC consciously for testnet.");
+            const approvalLimit = effectiveLimits.maxApprovalUSDC;
+            if (approvalAmount !== null && approvalAmount > approvalLimit) {
+                pushCheck(checks, "approval_limit", "fail", `Approval ${approvalAmount} exceeds limit ${approvalLimit} (policy: ${policy.profile}).`, reasons, requiredActions, "Approval exceeds configured limit.", "Reduce approval or adjust agent policy.");
             }
             else {
-                pushCheck(checks, "approval_limit", "pass", `Approval is within ${MAX_APPROVAL_AMOUNT_USDC} USDC-equivalent limit.`);
+                pushCheck(checks, "approval_limit", "pass", `Approval is within ${approvalLimit} USDC-equivalent limit (policy: ${policy.profile}).`);
             }
         }
         if (input.spender && !isAddress(input.spender)) {
@@ -142,11 +205,42 @@ export function evaluateActionPolicy(input) {
         else if (input.spenderVerified === false) {
             pushCheck(checks, "spender_reputation", "warn", "Spender is unverified.", reasons, requiredActions, undefined, "Verify spender contract before approving.");
         }
+        else if (input.spender && input.spenderVerified === undefined) {
+            // Fail-closed: same rule as recipientVerified — an omitted claim is not evidence.
+            pushCheck(checks, "spender_reputation", "unknown", "Spender verification was not asserted; the spender is treated as an unverified claim.", reasons, requiredActions, undefined, "Verify the spender contract against chain/registry evidence before approving.");
+        }
+        else if (input.spender && input.spenderVerified === true) {
+            pushCheck(checks, "spender_reputation", "pass", "Spender verification asserted by the caller (caller-attested claim; not independently verified by SafeHands).");
+        }
     }
     if (input.actionType === "execute_swap") {
         const amount = numeric(input.amount);
-        if (amount !== null && amount > Number(MAX_TX_AMOUNT_PHRS) && (input.tokenIn || "").toUpperCase() === "PHRS") {
-            pushCheck(checks, "swap_amount_limit", "fail", `Swap ${amount} PHRS exceeds limit ${MAX_TX_AMOUNT_PHRS} PHRS.`, reasons, requiredActions, "Swap exceeds configured PHRS limit.", "Reduce amount or increase MAX_TX_AMOUNT_PHRS consciously for testnet.");
+        const swapLimit = effectiveLimits.maxSwapPROS;
+        if (amount !== null && amount > swapLimit && (input.tokenIn || "").toUpperCase() === "PROS") {
+            pushCheck(checks, "swap_amount_limit", "fail", `Swap ${amount} PROS exceeds limit ${swapLimit} PROS (policy: ${policy.profile}).`, reasons, requiredActions, "Swap exceeds configured PROS limit.", "Reduce amount or adjust agent policy.");
+        }
+        // An input token that cannot be priced in USD contributes $0 to
+        // MAX_DAILY_SPEND_USD and has no per-transaction ceiling — the spend caps would
+        // silently not apply. Deny by default (fail → BLOCK, never confirmable).
+        if (input.tokenIn && resolvePriceableToken(input.tokenIn) === null) {
+            pushCheck(checks, "swap_notional_unpriceable", "fail", `Swap input token ${input.tokenIn} cannot be priced in USD, so the daily USD cap and per-transaction ceiling cannot bound this spend; denied by default.`, reasons, requiredActions, "Unpriceable input token would escape spend caps.", "Swap a priceable token (PROS, WPROS, USDC, USDT) or add the token to the price map before enabling it.");
+        }
+        const balance = numeric(input.walletBalancePhs);
+        if (amount !== null && balance !== null && (input.tokenIn || "").toUpperCase() === "PROS") {
+            if (amount > balance) {
+                pushCheck(checks, "funding_balance", "fail", `Insufficient PROS balance. Have ${balance}, need ${amount}.`, reasons, requiredActions, "Insufficient PROS balance.", "Fund the wallet before executing.");
+            }
+            else {
+                pushCheck(checks, "funding_balance", "pass", "Sufficient PROS balance for swap.");
+            }
+        }
+    }
+    if (input.actionType === "custom_contract_call" && input.targetContract) {
+        if (isCanonicalInfrastructure(input.targetContract, isMainnet)) {
+            pushCheck(checks, "canonical_contract", "pass", `Contract ${input.targetContract} is recognized as official Pharos canonical infrastructure.`);
+        }
+        else {
+            pushCheck(checks, "unknown_contract", "warn", `Contract ${input.targetContract} is not recognized as canonical Pharos infrastructure.`, reasons, requiredActions, undefined, "Review the contract interaction carefully before confirming.");
         }
     }
     if (input.actionType === "x402_pay_and_fetch") {
@@ -157,30 +251,91 @@ export function evaluateActionPolicy(input) {
             pushCheck(checks, "x402_url", "pass", "x402 URL passed static SSRF checks.");
         }
         const payment = numeric(input.paymentAmountUsdc);
-        if (payment !== null && payment > Number(MAX_X402_PAYMENT_USDC)) {
-            pushCheck(checks, "x402_payment_limit", "fail", `x402 payment ${payment} USDC exceeds limit ${MAX_X402_PAYMENT_USDC} USDC.`, reasons, requiredActions, "x402 payment exceeds configured limit.", "Reduce payment amount or increase MAX_X402_PAYMENT_USDC consciously for testnet.");
+        const x402Limit = effectiveLimits.maxX402PaymentUSDC;
+        if (payment !== null && payment > x402Limit) {
+            pushCheck(checks, "x402_payment_limit", "fail", `x402 payment ${payment} USDC exceeds limit ${x402Limit} USDC (policy: ${policy.profile}).`, reasons, requiredActions, "x402 payment exceeds configured limit.", "Reduce payment amount or adjust agent policy.");
         }
         else {
-            pushCheck(checks, "x402_payment_limit", "pass", `x402 payment is within ${MAX_X402_PAYMENT_USDC} USDC limit.`);
+            pushCheck(checks, "x402_payment_limit", "pass", `x402 payment is within ${x402Limit} USDC limit (policy: ${policy.profile}).`);
         }
-        if (input.paymentTokenAddress && input.paymentTokenAddress.toLowerCase() !== USDC_ADDRESS.toLowerCase()) {
-            const status = input.paymentTokenAddress.toLowerCase() === TEST_USDC_ADDRESS.toLowerCase() ? "warn" : "fail";
-            pushCheck(checks, "x402_payment_token", status, `Payment token ${input.paymentTokenAddress} is not canonical Circle USDC ${USDC_ADDRESS}.`, reasons, requiredActions, status === "fail" ? "x402 payment token is not canonical USDC." : undefined, "Use docs-verified Pharos testnet USDC or label the token as project-configured.");
+        const balance = numeric(input.walletBalancePhs);
+        if (payment !== null && balance !== null && (input.paymentTokenAddress || "").toLowerCase() === PACIFIC_USDC_ADDRESS.toLowerCase()) {
+            if (payment > balance) {
+                pushCheck(checks, "funding_balance_x402", "fail", `Insufficient USDC balance for x402 payment. Have ${balance}, need ${payment}.`, reasons, requiredActions, "Insufficient USDC balance.", "Fund the wallet with USDC.");
+            }
+            else {
+                pushCheck(checks, "funding_balance_x402", "pass", "Sufficient USDC balance for x402 payment.");
+            }
+        }
+        const allowedX402Tokens = activeX402AllowedTokenAddresses().map((a) => a.toLowerCase());
+        if (input.paymentTokenAddress && !allowedX402Tokens.includes(input.paymentTokenAddress.toLowerCase())) {
+            const mainnetMsg = `supported x402 payment tokens are Pacific USDC (${PACIFIC_USDC_ADDRESS}) or Pacific WPROS (${PACIFIC_WPROS_ADDRESS})`;
+            const testnetMsg = `supported x402 payment tokens are USDC (${USDC_ADDRESS}) or WPROS (${WPROS_ADDRESS})`;
+            pushCheck(checks, "x402_payment_token", "fail", `Payment token ${input.paymentTokenAddress} is not a supported x402 payment token; ${isMainnet ? mainnetMsg : testnetMsg}.`, reasons, requiredActions, "x402 payment token is not supported for this network.", isMainnet ? "Use Pacific USDC or Pacific WPROS for x402 payments." : "Use the active network USDC or WPROS token for x402 payments.");
+        }
+        else if (input.paymentTokenAddress) {
+            pushCheck(checks, "x402_payment_token", "pass", `Payment token ${input.paymentTokenAddress} is supported for x402 on ${isMainnet ? "Pharos Pacific Mainnet" : "the active Pharos network"}.`);
         }
     }
     const tokenStatus = input.tokenRegistryStatus;
     if (tokenStatus === "CUSTOM_NON_REGISTRY" || tokenStatus === "UNKNOWN") {
         pushCheck(checks, "token_registry", "warn", `Token registry status is ${tokenStatus}.`, reasons, requiredActions, undefined, "Review token contract before execution.");
     }
-    if (input.tokenSecurityStatus === "unavailable" || input.tokenSecurityStatus === "unknown") {
-        pushCheck(checks, "token_security_provider", "warn", "Token security provider is unavailable or unknown.", reasons, requiredActions, undefined, "Proceed only after manual token review.");
+    if (input.tokenSecurityStatus === "unavailable") {
+        // Intel is MISSING (provider outage / token not indexed) — nothing was
+        // reviewed. Distinct check name so the write-execution gate can fail closed on it
+        // (a caller confirmation cannot substitute for intel that never existed).
+        pushCheck(checks, "token_security_intel_missing", "unknown", "Token security intelligence is unavailable (provider outage or token not indexed); the token was NOT reviewed.", reasons, requiredActions, undefined, "Retry when the token-security provider is reachable, or verify the token independently before executing.");
+    }
+    else if (input.tokenSecurityStatus === "unknown") {
+        pushCheck(checks, "token_security_provider", "unknown", "Token security provider is unavailable or unknown.", reasons, requiredActions, undefined, "Proceed only after manual token review.");
+    }
+    // ─── Advisory risk-engine evidence (write paths) ─────────────────────
+    // The risk engine never gates execution itself: its output arrives here as
+    // evidence and these checks are where the score/degradation actually decide.
+    if (input.risk) {
+        const risk = input.risk;
+        if (risk.score > RISK_BLOCK_THRESHOLD) {
+            pushCheck(checks, "risk_score", "fail", `Weighted risk score ${risk.score}/100 exceeds the block threshold (${RISK_BLOCK_THRESHOLD}).`, reasons, requiredActions, `Risk score ${risk.score}/100 exceeds the block threshold (${RISK_BLOCK_THRESHOLD}).`, "Review the risk reasons and adjust the transaction parameters significantly before retrying.");
+        }
+        else {
+            pushCheck(checks, "risk_score", "pass", `Weighted risk score ${risk.score}/100 is within the block threshold (${RISK_BLOCK_THRESHOLD}).`);
+        }
+        if (typeof risk.counterpartyRisk === "number" && risk.counterpartyRisk >= COUNTERPARTY_CRITICAL_THRESHOLD) {
+            pushCheck(checks, "risk_counterparty", "fail", `Counterparty risk ${risk.counterpartyRisk}/100 is critical (≥ ${COUNTERPARTY_CRITICAL_THRESHOLD}): missing, invalid, or zero-address counterparty.`, reasons, requiredActions, "Critically risky counterparty (missing/invalid/zero recipient).", "Provide a valid, verified counterparty address.");
+        }
+        else if (typeof risk.counterpartyRisk === "number") {
+            pushCheck(checks, "risk_counterparty", "pass", `Counterparty risk ${risk.counterpartyRisk}/100 is below the critical threshold (${COUNTERPARTY_CRITICAL_THRESHOLD}).`);
+        }
+        if (risk.degraded) {
+            let detail = (risk.degradedReasons ?? []).join(" ") || "A critical risk signal could not be evaluated.";
+            if (risk.swapProviderNotConfigured && !detail.includes("SWAP_LIQUIDITY_NOT_CONFIGURED")) {
+                detail += " The swap liquidity provider is not configured for this chain (SWAP_LIQUIDITY_NOT_CONFIGURED), a permanent configuration state, not a transient outage.";
+            }
+            pushCheck(checks, "risk_degraded", "unknown", `Risk assessment is degraded: ${detail}`, reasons, requiredActions, undefined, "Re-invoke with confirm=true only after manually reviewing the degraded risk data.");
+            // Unknown-status checks do not populate `reasons`; surface the degradation
+            // detail there anyway so the CONFIRMATION_REQUIRED envelope explains itself
+            // (parity with the former tool-level degraded message).
+            reasons.push(`Risk assessment is degraded: ${detail}`);
+        }
+        else {
+            pushCheck(checks, "risk_degraded", "pass", "No critical risk signal was missing during assessment.");
+        }
     }
     const riskLevel = classifyRisk(checks);
     let decision = defaultDecision(riskLevel, checks);
-    if (checks.some((c) => c.name.includes("funding") && c.status === "fail"))
+    // Soft, recoverable signals must NEVER downgrade a hard BLOCK. Only remap when
+    // the block is *solely* a funding shortfall (fundable) or when no hard fail
+    // exists at all (token-security unresolved → review before proceeding).
+    const hardFails = checks.filter((c) => c.status === "fail");
+    const onlyFundingFails = hardFails.length > 0 && hardFails.every((c) => c.name.includes("funding"));
+    const hasTokenUnknown = checks.some((c) => c.name.includes("token") && c.status === "unknown");
+    if (decision === "BLOCK" && onlyFundingFails) {
         decision = "REQUIRE_FUNDING";
-    if (checks.some((c) => c.name.includes("token") && c.status === "unknown"))
+    }
+    else if (decision !== "BLOCK" && hasTokenUnknown) {
         decision = "REQUIRE_TOKEN_REVIEW";
+    }
     return {
         decision,
         riskLevel,
@@ -193,9 +348,15 @@ export function evaluateActionPolicy(input) {
         isMainnet,
     };
 }
+/** Network-aware phrase for explanations — never hardcodes a single network. */
+function networkPhrase(isMainnet) {
+    if (typeof isMainnet !== "boolean")
+        return "the Pharos network";
+    return isMainnet ? "Pharos Pacific Mainnet" : "Pharos Atlantic Testnet";
+}
 export function explainPolicyResult(result) {
     if (result.decision === "ALLOW") {
-        return "This action was allowed because it targets Pharos Atlantic Testnet, passed policy checks, and stayed within configured safety limits.";
+        return `This action was allowed because it targets ${networkPhrase(result.isMainnet)}, passed policy checks, and stayed within configured safety limits.`;
     }
     const reasonText = result.reasons.length > 0 ? result.reasons.join(" ") : "one or more safety checks failed or require review.";
     const actionText = result.requiredActions.length > 0 ? ` SafeHands recommends: ${result.requiredActions.join(" ")}` : "";

package/dist/lib/policy/actionPolicyEngine.js.map

@@ -1 +1 @@
-{"version":3,"file":"actionPolicyEngine.js","sourceRoot":"","sources":["../../../src/lib/policy/actionPolicyEngine.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,uEAAuE;AACvE,sDAAsD;AACtD,0EAA0E;AAE1E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,UAAU,EACV,wBAAwB,EACxB,kBAAkB,EAClB,qBAAqB,EAErB,YAAY,EACZ,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAqEzB,SAAS,OAAO,CAAC,KAAyB;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAChB,MAAqB,EACrB,IAAY,EACZ,MAA6B,EAC7B,OAAe,EACf,OAAkB,EAClB,eAA0B,EAC1B,MAAe,EACf,MAAe;IAEf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,eAAe,IAAI,MAAM;QAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAyB;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAA0B;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QACrE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvF,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACrE,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,SAA0B,EAAE,MAAqB;IACxE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5D,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,sBAAsB,CAAC;IAC1D,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC;IAC3D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC;IAChD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,2CAA2C,EAAE,OAAO,EAAE,eAAe,EAAE,oCAAoC,EAAE,oCAAoC,CAAC,CAAC;IAChM,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,QAAQ,cAAc,OAAO,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,+CAA+C,CAAC,CAAC;IAChM,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,wCAAwC,QAAQ,IAAI,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACvC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,kBAAkB,cAAc,WAAW,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,kDAAkD,CAAC,CAAC;IAChM,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,kBAAkB,GAAG,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACnD,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,uDAAuD,EAAE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,kGAAkG,CAAC,CAAC;IACrP,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3D,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,MAAM,uBAAuB,kBAAkB,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,wCAAwC,EAAE,uEAAuE,CAAC,CAAC;QAC9P,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,kBAAkB,cAAc,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,+BAA+B,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;QAC1K,CAAC;aAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,wCAAwC,CAAC,CAAC;QAC/J,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,IAAI,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxI,IAAI,SAAS,IAAI,KAAK,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACvD,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,2CAA2C,EAAE,OAAO,EAAE,eAAe,EAAE,+BAA+B,EAAE,gCAAgC,CAAC,CAAC;QACzL,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9E,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,GAAG,MAAM,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACjF,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,cAAc,kBAAkB,wBAAwB,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,oCAAoC,EAAE,+EAA+E,CAAC,CAAC;YACxQ,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,sBAAsB,wBAAwB,yBAAyB,CAAC,CAAC;YACvH,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,kCAAkC,CAAC,CAAC;QACxK,CAAC;aAAM,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;YAC3C,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,2CAA2C,CAAC,CAAC;QAC9J,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC7G,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,MAAM,uBAAuB,kBAAkB,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,qCAAqC,EAAE,uEAAuE,CAAC,CAAC;QAC5P,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAC9C,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,wCAAwC,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,sFAAsF,CAAC,CAAC;QACxO,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,qCAAqC,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAChE,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,gBAAgB,OAAO,uBAAuB,qBAAqB,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,wCAAwC,EAAE,kFAAkF,CAAC,CAAC;QACvR,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,0BAA0B,qBAAqB,cAAc,CAAC,CAAC;QACjH,CAAC;QAED,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;YACxG,MAAM,MAAM,GAAG,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7G,SAAS,CACP,MAAM,EACN,oBAAoB,EACpB,MAAM,EACN,iBAAiB,KAAK,CAAC,mBAAmB,iCAAiC,YAAY,GAAG,EAC1F,OAAO,EACP,eAAe,EACf,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,SAAS,EAC3E,iFAAiF,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC9C,IAAI,WAAW,KAAK,qBAAqB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,WAAW,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAC1K,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,aAAa,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC3F,SAAS,CAAC,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,oDAAoD,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAC7L,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAElD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,QAAQ,GAAG,iBAAiB,CAAC;IACxG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;QAAE,QAAQ,GAAG,sBAAsB,CAAC;IAE9G,OAAO;QACL,QAAQ;QACR,SAAS;QACT,aAAa,EAAE,QAAQ,KAAK,OAAO;QACnC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM;QACN,WAAW;QACX,OAAO;QACP,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,uIAAuI,CAAC;IACjJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,qDAAqD,CAAC;IAChI,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzH,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1G,OAAO,mBAAmB,IAAI,YAAY,UAAU,GAAG,UAAU,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"actionPolicyEngine.js","sourceRoot":"","sources":["../../../src/lib/policy/actionPolicyEngine.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,uEAAuE;AACvE,iFAAiF;AACjF,0EAA0E;AAE1E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,+BAA+B,EAC/B,oBAAoB,EACpB,+BAA+B,EAC/B,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAoB,MAAM,kBAAkB,CAAC;AAiD7F,mJAAmJ;AACnJ,MAAM,UAAU,0BAA0B,CAAC,CAAiB;IAC1D,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,SAAS;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,gBAAgB,EAAE,CAAC,CAAC,SAAS,CAAC,gBAAgB;QAC9C,yBAAyB,EAAE,CAAC,CAAC,yBAAyB;KACvD,CAAC;AACJ,CAAC;AA4DD,SAAS,OAAO,CAAC,KAAyB;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAChB,MAAqB,EACrB,IAAY,EACZ,MAA6B,EAC7B,OAAe,EACf,OAAkB,EAClB,eAA0B,EAC1B,MAAe,EACf,MAAe;IAEf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,eAAe,IAAI,MAAM;QAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAyB;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAA0B;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhE,6EAA6E;IAC7E,gFAAgF;IAChF,+DAA+D;IAC/D,MAAM,UAAU,GACd,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACnD,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAC/C,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC;IACrC,MAAM,cAAc,GAClB,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;QAC7C,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC;IAC9D,IAAI,UAAU;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAErD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACrE,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,SAA0B,EAAE,MAAqB;IACxE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5D,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC;IACxC,6EAA6E;IAC7E,8EAA8E;IAC9E,wCAAwC;IACxC,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC1C,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC;IACjE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAEvD,yEAAyE;IACzE,6EAA6E;IAC7E,oDAAoD;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,OAAO,qCAAqC,EAAE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,iEAAiE,CAAC,CAAC;IACrN,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC;IACtF,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,8DAA8D;IAC9D,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,iGAAiG,CAAC,CAAC;IAC7L,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACvC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,kBAAkB,cAAc,WAAW,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,kDAAkD,CAAC,CAAC;IAChM,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,kBAAkB,GAAG,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;QAC5D,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,uDAAuD,EAAE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,kGAAkG,CAAC,CAAC;IACrP,CAAC;SAAM,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,0EAA0E,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,0EAA0E,CAAC,CAAC;IAC3O,CAAC;IAEC,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC;QACpD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,YAAY,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,MAAM,uBAAuB,YAAY,kBAAkB,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,wCAAwC,EAAE,uCAAuC,CAAC,CAAC;QACpP,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,YAAY,wBAAwB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAC1H,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACxC,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,mCAAmC,OAAO,UAAU,MAAM,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,mCAAmC,CAAC,CAAC;YAC3M,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,sCAAsC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,+BAA+B,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;QAC1K,CAAC;aAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,4DAA4D,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,0EAA0E,CAAC,CAAC;QAC1P,CAAC;aAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,wCAAwC,CAAC,CAAC;QAC/J,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpE,2EAA2E;YAC3E,6EAA6E;YAC7E,kEAAkE;YAClE,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,2FAA2F,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,4EAA4E,CAAC,CAAC;QACvQ,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;YAC/D,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,iHAAiH,CAAC,CAAC;QACvK,CAAC;IACH,CAAC;IAEH,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,IAAI,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxI,IAAI,SAAS,IAAI,KAAK,CAAC,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACvD,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,2CAA2C,EAAE,OAAO,EAAE,eAAe,EAAE,+BAA+B,EAAE,gCAAgC,CAAC,CAAC;QACzL,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9E,MAAM,aAAa,GAAG,eAAe,CAAC,eAAe,CAAC;YACtD,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,GAAG,aAAa,EAAE,CAAC;gBAC9D,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,cAAc,kBAAkB,aAAa,aAAa,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,oCAAoC,EAAE,yCAAyC,CAAC,CAAC;YACnP,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,sBAAsB,aAAa,mCAAmC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACxI,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,6BAA6B,EAAE,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,kCAAkC,CAAC,CAAC;QACxK,CAAC;aAAM,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;YAC3C,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,2CAA2C,CAAC,CAAC;QAC9J,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAChE,kFAAkF;YAClF,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,uFAAuF,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,+EAA+E,CAAC,CAAC;QACpQ,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAC3D,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,+GAA+G,CAAC,CAAC;QACnK,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,CAAC;QAC9C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC5F,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,MAAM,uBAAuB,SAAS,kBAAkB,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,qCAAqC,EAAE,uCAAuC,CAAC,CAAC;QAC/O,CAAC;QAED,gEAAgE;QAChE,gFAAgF;QAChF,yEAAyE;QACzE,IAAI,KAAK,CAAC,OAAO,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YACnE,SAAS,CAAC,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,oBAAoB,KAAK,CAAC,OAAO,wHAAwH,EAAE,OAAO,EAAE,eAAe,EAAE,kDAAkD,EAAE,wGAAwG,CAAC,CAAC;QAC5Y,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC1F,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;gBACrB,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,mCAAmC,OAAO,UAAU,MAAM,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,mCAAmC,CAAC,CAAC;YAC3M,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,mCAAmC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,sBAAsB,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACxE,IAAI,yBAAyB,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;YAC/D,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY,KAAK,CAAC,cAAc,6DAA6D,CAAC,CAAC;QACjJ,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,KAAK,CAAC,cAAc,wDAAwD,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,8DAA8D,CAAC,CAAC;QAC/O,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAC9C,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,wCAAwC,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,sFAAsF,CAAC,CAAC;QACxO,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,qCAAqC,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,eAAe,CAAC,kBAAkB,CAAC;QACrD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC;YAC5C,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,gBAAgB,OAAO,uBAAuB,SAAS,kBAAkB,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,wCAAwC,EAAE,+CAA+C,CAAC,CAAC;QACpQ,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,0BAA0B,SAAS,wBAAwB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACjI,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,oBAAoB,CAAC,WAAW,EAAE,EAAE,CAAC;YACnI,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;gBACtB,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,oDAAoD,OAAO,UAAU,OAAO,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,4BAA4B,EAAE,4BAA4B,CAAC,CAAC;YAC3N,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,2CAA2C,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG,+BAA+B,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACxF,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACtG,MAAM,UAAU,GAAG,mDAAmD,oBAAoB,uBAAuB,qBAAqB,GAAG,CAAC;YAC1I,MAAM,UAAU,GAAG,2CAA2C,YAAY,eAAe,aAAa,GAAG,CAAC;YAC1G,SAAS,CACP,MAAM,EACN,oBAAoB,EACpB,MAAM,EACN,iBAAiB,KAAK,CAAC,mBAAmB,2CAA2C,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,EAC3H,OAAO,EACP,eAAe,EACf,uDAAuD,EACvD,SAAS,CAAC,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC,+DAA+D,CACrI,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACrC,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,KAAK,CAAC,mBAAmB,6BAA6B,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,2BAA2B,GAAG,CAAC,CAAC;QAChM,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC9C,IAAI,WAAW,KAAK,qBAAqB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,WAAW,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAC1K,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,aAAa,EAAE,CAAC;QAChD,uEAAuE;QACvE,kFAAkF;QAClF,0EAA0E;QAC1E,SAAS,CAAC,MAAM,EAAE,8BAA8B,EAAE,SAAS,EAAE,gHAAgH,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,0GAA0G,CAAC,CAAC;IAClU,CAAC;SAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACnD,SAAS,CAAC,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,oDAAoD,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAChM,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,IAAI,CAAC,KAAK,GAAG,oBAAoB,EAAE,CAAC;YACtC,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,uBAAuB,IAAI,CAAC,KAAK,qCAAqC,oBAAoB,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,IAAI,CAAC,KAAK,qCAAqC,oBAAoB,IAAI,EAAE,8FAA8F,CAAC,CAAC;QAC3V,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,uBAAuB,IAAI,CAAC,KAAK,uCAAuC,oBAAoB,IAAI,CAAC,CAAC;QAC5I,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,IAAI,+BAA+B,EAAE,CAAC;YAC1G,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,gBAAgB,uBAAuB,+BAA+B,oDAAoD,EAAE,OAAO,EAAE,eAAe,EAAE,iEAAiE,EAAE,iDAAiD,CAAC,CAAC;QACvV,CAAC;aAAM,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;YACrD,SAAS,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB,IAAI,CAAC,gBAAgB,yCAAyC,+BAA+B,IAAI,CAAC,CAAC;QACzK,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,gDAAgD,CAAC;YACxG,IAAI,IAAI,CAAC,yBAAyB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,yJAAyJ,CAAC;YACtK,CAAC;YACD,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,gCAAgC,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,mFAAmF,CAAC,CAAC;YAClN,2EAA2E;YAC3E,4EAA4E;YAC5E,wDAAwD;YACxD,OAAO,CAAC,IAAI,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,wDAAwD,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAElD,+EAA+E;IAC/E,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACpG,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC/F,IAAI,QAAQ,KAAK,OAAO,IAAI,gBAAgB,EAAE,CAAC;QAC7C,QAAQ,GAAG,iBAAiB,CAAC;IAC/B,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,IAAI,eAAe,EAAE,CAAC;QACnD,QAAQ,GAAG,sBAAsB,CAAC;IACpC,CAAC;IAED,OAAO;QACL,QAAQ;QACR,SAAS;QACT,aAAa,EAAE,QAAQ,KAAK,OAAO;QACnC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM;QACN,WAAW;QACX,OAAO;QACP,SAAS;KACV,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,aAAa,CAAC,SAAkB;IACvC,IAAI,OAAO,SAAS,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IAChE,OAAO,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,8CAA8C,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,qEAAqE,CAAC;IAC5J,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,qDAAqD,CAAC;IAChI,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzH,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1G,OAAO,mBAAmB,IAAI,YAAY,UAAU,GAAG,UAAU,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/policy/agentPolicy.d.ts

@@ -0,0 +1,29 @@
+export type PolicyProfile = "conservative" | "balanced" | "advanced" | "custom";
+export interface AgentPolicyLimits {
+    maxPaymentPROS: string;
+    maxSwapPROS: string;
+    maxDailySpendPROS: string;
+    maxX402PaymentUSDC: string;
+    maxApprovalUSDC: string;
+}
+export interface AgentPolicyFlags {
+    allowUnknownTokens: boolean;
+    allowCustomContractCalls: boolean;
+    requireConfirmationAboveRisk: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
+}
+export interface AgentPolicy {
+    profile: PolicyProfile;
+    limits: AgentPolicyLimits;
+    flags: AgentPolicyFlags;
+}
+export declare const POLICY_PROFILES: Record<Exclude<PolicyProfile, "custom">, AgentPolicy>;
+export declare function isSafeAgentId(agentId: string): boolean;
+export declare function loadAgentPolicy(agentId?: string): AgentPolicy;
+export declare function saveAgentPolicy(agentId: string, policy: AgentPolicy): void;
+export declare function resolveEffectiveLimits(policy: AgentPolicy): {
+    maxPaymentPROS: number;
+    maxSwapPROS: number;
+    maxX402PaymentUSDC: number;
+    maxApprovalUSDC: number;
+};
+//# sourceMappingURL=agentPolicy.d.ts.map

package/dist/lib/policy/agentPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentPolicy.d.ts","sourceRoot":"","sources":["../../../src/lib/policy/agentPolicy.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEhF,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wBAAwB,EAAE,OAAO,CAAC;IAClC,4BAA4B,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CACtE;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,WAAW,CA8CjF,CAAC;AAUF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEtD;AAqDD,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,CAsB7D;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI,CAI1E;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,GAClB;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAOtG"}

package/dist/lib/policy/agentPolicy.js

@@ -0,0 +1,154 @@
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+export const POLICY_PROFILES = {
+    conservative: {
+        profile: "conservative",
+        limits: {
+            maxPaymentPROS: "0.1",
+            maxSwapPROS: "1",
+            maxDailySpendPROS: "5",
+            maxX402PaymentUSDC: "0.01",
+            maxApprovalUSDC: "10",
+        },
+        flags: {
+            allowUnknownTokens: false,
+            allowCustomContractCalls: false,
+            requireConfirmationAboveRisk: "LOW",
+        },
+    },
+    balanced: {
+        profile: "balanced",
+        limits: {
+            maxPaymentPROS: "1",
+            maxSwapPROS: "10",
+            maxDailySpendPROS: "25",
+            maxX402PaymentUSDC: "0.1",
+            maxApprovalUSDC: "50",
+        },
+        flags: {
+            allowUnknownTokens: false,
+            allowCustomContractCalls: false,
+            requireConfirmationAboveRisk: "MEDIUM",
+        },
+    },
+    advanced: {
+        profile: "advanced",
+        limits: {
+            maxPaymentPROS: "100",
+            maxSwapPROS: "1000",
+            maxDailySpendPROS: "5000",
+            maxX402PaymentUSDC: "1",
+            maxApprovalUSDC: "500",
+        },
+        flags: {
+            allowUnknownTokens: true,
+            allowCustomContractCalls: true,
+            requireConfirmationAboveRisk: "HIGH",
+        },
+    },
+};
+function getPoliciesDir() {
+    const __dirname = dirname(fileURLToPath(import.meta.url));
+    return join(__dirname, "..", "..", "..", ".agents", "policies");
+}
+// agentId becomes a filename — it must NEVER be able to traverse out of the
+// policies directory. Reject path separators and `..` before it touches the FS.
+const SAFE_AGENT_ID = /^[A-Za-z0-9_.:-]+$/;
+export function isSafeAgentId(agentId) {
+    return SAFE_AGENT_ID.test(agentId) && !agentId.includes("..");
+}
+function policyPath(agentId) {
+    if (!isSafeAgentId(agentId)) {
+        throw new Error(`Invalid agentId '${agentId}': only letters, digits and _ . : - are allowed (no path separators or '..').`);
+    }
+    return join(getPoliciesDir(), `${agentId}.json`);
+}
+function validatePolicy(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const obj = raw;
+    const profile = obj.profile;
+    if (typeof profile !== "string")
+        return null;
+    if (!["conservative", "balanced", "advanced", "custom"].includes(profile))
+        return null;
+    const limits = obj.limits;
+    if (!limits || typeof limits !== "object")
+        return null;
+    const l = limits;
+    for (const key of ["maxPaymentPROS", "maxSwapPROS", "maxDailySpendPROS", "maxX402PaymentUSDC", "maxApprovalUSDC"]) {
+        if (typeof l[key] !== "string")
+            return null;
+        const n = Number(l[key]);
+        if (!Number.isFinite(n) || n < 0)
+            return null;
+    }
+    const flags = obj.flags;
+    if (!flags || typeof flags !== "object")
+        return null;
+    const f = flags;
+    if (typeof f.allowUnknownTokens !== "boolean")
+        return null;
+    if (typeof f.allowCustomContractCalls !== "boolean")
+        return null;
+    if (typeof f.requireConfirmationAboveRisk !== "string")
+        return null;
+    if (!["LOW", "MEDIUM", "HIGH", "CRITICAL"].includes(f.requireConfirmationAboveRisk))
+        return null;
+    return {
+        profile: profile,
+        limits: l,
+        flags: f,
+    };
+}
+/**
+ * Fail-closed fallback: a policy file that EXISTS but is malformed or
+ * invalid must never silently degrade to the more permissive `balanced`
+ * profile (a typo in a conservative custom policy would otherwise 10× the
+ * per-tx limits). Warn the operator and pin the most restrictive profile.
+ */
+function invalidPolicyFallback(label, path) {
+    console.warn(`[SafeHands policy] ${label} policy file exists but is malformed or invalid; falling back to the 'conservative' profile (fail-closed). Fix ${path} to restore the intended limits.`);
+    return POLICY_PROFILES.conservative;
+}
+export function loadAgentPolicy(agentId) {
+    if (agentId && isSafeAgentId(agentId)) {
+        const specific = policyPath(agentId);
+        if (existsSync(specific)) {
+            try {
+                const parsed = validatePolicy(JSON.parse(readFileSync(specific, "utf-8")));
+                if (parsed)
+                    return parsed;
+            }
+            catch { /* malformed JSON — fail closed below */ }
+            return invalidPolicyFallback(`Agent '${agentId}'`, specific);
+        }
+    }
+    const defaultPath = policyPath("default");
+    if (existsSync(defaultPath)) {
+        try {
+            const parsed = validatePolicy(JSON.parse(readFileSync(defaultPath, "utf-8")));
+            if (parsed)
+                return parsed;
+        }
+        catch { /* malformed JSON — fail closed below */ }
+        return invalidPolicyFallback("Default", defaultPath);
+    }
+    return POLICY_PROFILES.balanced;
+}
+export function saveAgentPolicy(agentId, policy) {
+    const dir = getPoliciesDir();
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    writeFileSync(policyPath(agentId), JSON.stringify(policy, null, 2), "utf-8");
+}
+export function resolveEffectiveLimits(policy) {
+    return {
+        maxPaymentPROS: Number(policy.limits.maxPaymentPROS),
+        maxSwapPROS: Number(policy.limits.maxSwapPROS),
+        maxX402PaymentUSDC: Number(policy.limits.maxX402PaymentUSDC),
+        maxApprovalUSDC: Number(policy.limits.maxApprovalUSDC),
+    };
+}
+//# sourceMappingURL=agentPolicy.js.map