safehands-pharos 1.5.0 → 2.8.0

package/dist/tools/safehandsPreflightCheck.js

@@ -2,17 +2,26 @@
 // Branded SafeHands transaction safety firewall preflight.
 // ───────────────────────────────────────────────────────────────────────
 import { z } from "zod";
-import { ok } from "../lib/toolResponse.js";
-import { CHAIN_ID, PHAROS_ENVIRONMENT, IS_MAINNET, X402_PAYMENT_TOKEN_ADDRESS } from "../lib/constants.js";
+import { fail, ok } from "../lib/toolResponse.js";
+import { CHAIN_ID, PHAROS_ENVIRONMENT, X402_PAYMENT_TOKEN_ADDRESS } from "../lib/constants.js";
 import { evaluateActionPolicy } from "../lib/policy/actionPolicyEngine.js";
+import { mapEngineDecision } from "../lib/guardian/decision.js";
+import { isExecutionAvailable } from "../lib/config.js";
 import { classifyTokenRegistryStatus } from "./tokenRegistryStatus.js";
+import { validatePositiveAmount, validateNonZeroAddress, validateAddress, validateTokenIdentifier, collectErrors } from "../lib/validation.js";
+import { assertSafeFetchUrl } from "../lib/http.js";
+const WRITE_ACTION_TYPES = new Set([
+    "send_payment", "approve_token", "execute_swap",
+    "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call",
+]);
 export const safehandsPreflightCheckSchema = z.object({
     actionType: z.enum(["send_payment", "approve_token", "execute_swap", "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call"]),
+    agentId: z.string().optional().describe("Agent identifier; selects the per-agent safety policy used for this preflight"),
     chainId: z.number().optional().default(CHAIN_ID),
     environment: z.string().optional().default(PHAROS_ENVIRONMENT),
-    isMainnet: z.boolean().optional().default(IS_MAINNET),
+    isMainnet: z.boolean().optional(),
     amount: z.string().optional(),
-    amountUnit: z.enum(["PHRS", "USDC", "USD", "TOKEN"]).optional(),
+    amountUnit: z.enum(["PROS", "USDC", "USD", "TOKEN"]).optional(),
     token: z.string().optional(),
     tokenAddress: z.string().optional(),
     tokenIn: z.string().optional(),
@@ -30,17 +39,135 @@ export const safehandsPreflightCheckSchema = z.object({
     recipientVerified: z.boolean().optional(),
     spenderVerified: z.boolean().optional(),
     requiresSigner: z.boolean().optional(),
-});
+    walletAddress: z.string().optional(),
+    score: z.number().optional(),
+    targetContract: z.string().optional(),
+    data: z.string().optional(),
+}).strict();
+function validateActionFields(input) {
+    const errors = [];
+    switch (input.actionType) {
+        case "send_payment":
+            errors.push(validatePositiveAmount(input.amount, "amount"));
+            errors.push(validateNonZeroAddress(input.recipient, "recipient"));
+            break;
+        case "approve_token":
+            if (!input.approvalAmount && !input.amount) {
+                errors.push("approvalAmount (or amount) is required for approve_token.");
+            }
+            if (!input.spender) {
+                errors.push("spender is required for approve_token.");
+            }
+            else {
+                errors.push(validateAddress(input.spender, "spender"));
+            }
+            if (!input.approvalToken && !input.tokenAddress && !input.token) {
+                errors.push("approvalToken (or tokenAddress/token) is required for approve_token.");
+            }
+            else {
+                const tokenValue = input.approvalToken || input.tokenAddress || input.token;
+                errors.push(validateTokenIdentifier(tokenValue, "approvalToken"));
+            }
+            break;
+        case "execute_swap":
+            errors.push(validatePositiveAmount(input.amount, "amount"));
+            if (!input.tokenIn) {
+                errors.push("tokenIn is required for execute_swap.");
+            }
+            else {
+                errors.push(validateTokenIdentifier(input.tokenIn, "tokenIn"));
+            }
+            if (!input.tokenOut) {
+                errors.push("tokenOut is required for execute_swap.");
+            }
+            else {
+                errors.push(validateTokenIdentifier(input.tokenOut, "tokenOut"));
+            }
+            break;
+        case "x402_pay_and_fetch":
+            if (!input.url) {
+                errors.push("url is required for x402_pay_and_fetch.");
+            }
+            if (input.paymentAmountUsdc) {
+                errors.push(validatePositiveAmount(input.paymentAmountUsdc, "paymentAmountUsdc"));
+            }
+            break;
+        case "publish_risk_score":
+            if (!input.walletAddress) {
+                errors.push("walletAddress is required for publish_risk_score.");
+            }
+            else {
+                errors.push(validateNonZeroAddress(input.walletAddress, "walletAddress"));
+            }
+            if (input.score === undefined || input.score === null) {
+                errors.push("score is required for publish_risk_score.");
+            }
+            else if (!Number.isFinite(input.score) || input.score < 0 || input.score > 100) {
+                errors.push("score must be between 0 and 100.");
+            }
+            break;
+        case "custom_contract_call":
+            if (!input.targetContract) {
+                errors.push("targetContract is required for custom_contract_call.");
+            }
+            else {
+                errors.push(validateAddress(input.targetContract, "targetContract"));
+            }
+            if (!input.data) {
+                errors.push("data is required for custom_contract_call.");
+            }
+            break;
+    }
+    return collectErrors(errors);
+}
 export async function handleSafeHandsPreflightCheck(raw) {
-    const input = safehandsPreflightCheckSchema.parse(raw);
+    let input;
+    try {
+        input = safehandsPreflightCheckSchema.parse(raw);
+    }
+    catch (err) {
+        const msg = err instanceof z.ZodError
+            ? err.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")
+            : String(err);
+        return fail("VALIDATION_ERROR", `Preflight input validation failed: ${msg}`, false, "safehands_preflight_check");
+    }
+    const fieldErrors = validateActionFields(input);
+    if (fieldErrors.length > 0) {
+        return fail("VALIDATION_ERROR", `Missing or invalid required fields for ${input.actionType}: ${fieldErrors.join(" ")}`, false, "safehands_preflight_check");
+    }
+    if (input.actionType === "x402_pay_and_fetch" && input.url) {
+        try {
+            await assertSafeFetchUrl(input.url);
+        }
+        catch (err) {
+            return fail("SSRF_BLOCKED", err instanceof Error ? err.message.replace(/^SSRF_BLOCKED:\s*/, "") : String(err), false, "safehands_preflight_check");
+        }
+    }
+    const isWriteAction = WRITE_ACTION_TYPES.has(input.actionType);
+    const effectiveRequiresSigner = input.requiresSigner ?? (isWriteAction && input.signerAvailable !== undefined ? true : input.requiresSigner);
     const tokenForRegistry = input.tokenAddress || input.token || input.tokenOut || input.tokenIn;
     const registry = tokenForRegistry ? classifyTokenRegistryStatus(tokenForRegistry) : null;
+    // Fail-closed on the token-security dimension: for token-trading/approval actions
+    // the caller must not be able to skip the honeypot/tax signal by simply omitting
+    // tokenSecurityStatus. Absent → treat as "unknown" so the engine routes to
+    // REQUIRE_TOKEN_REVIEW instead of silently reaching ALLOW.
+    const tokenSecurityStatus = input.tokenSecurityStatus ??
+        (input.actionType === "execute_swap" || input.actionType === "approve_token" ? "unknown" : undefined);
     const policy = evaluateActionPolicy({
         ...input,
+        requiresSigner: effectiveRequiresSigner,
         tokenRegistryStatus: registry?.status,
+        tokenSecurityStatus,
+    });
+    // Expose only the public four-value SafeHands decision; keep policy reasons,
+    // checks, and risk level for explanation.
+    const guardianDecision = mapEngineDecision(policy.decision, {
+        executionAvailable: isExecutionAvailable(),
     });
     return ok({
         ...policy,
+        decision: guardianDecision,
+        guardianDecision,
         tokenRegistry: registry,
         source: "safehands_preflight_check",
     });

package/dist/tools/safehandsPreflightCheck.js.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsPreflightCheck.js","sourceRoot":"","sources":["../../src/tools/safehandsPreflightCheck.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2DAA2D;AAC3D,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAEvE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IACzI,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9E,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,GAAiC;IACnF,MAAM,KAAK,GAAG,6BAA6B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC;IAC9F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzF,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,GAAG,KAAK;QACR,mBAAmB,EAAE,QAAQ,EAAE,MAAM;KACtC,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;QACR,GAAG,MAAM;QACT,aAAa,EAAE,QAAQ;QACvB,MAAM,EAAE,2BAA2B;KACpC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"safehandsPreflightCheck.js","sourceRoot":"","sources":["../../src/tools/safehandsPreflightCheck.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2DAA2D;AAC3D,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,eAAe,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC/I,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,cAAc,EAAE,eAAe,EAAE,cAAc;IAC/C,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB;CACnE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IACzI,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;IACxH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9E,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,SAAS,oBAAoB,CAAC,KAAoD;IAChF,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,cAAc;YACjB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;YAClE,MAAM;QAER,KAAK,eAAe;YAClB,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC5E,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;YACpE,CAAC;YACD,MAAM;QAER,KAAK,cAAc;YACjB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,MAAM;QAER,KAAK,oBAAoB;YACvB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,MAAM;QAER,KAAK,oBAAoB;YACvB,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC3D,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;gBACjF,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAClD,CAAC;YACD,MAAM;QAER,KAAK,sBAAsB;YACzB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM;IACV,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,GAAiC;IACnF,IAAI,KAAoD,CAAC;IACzD,IAAI,CAAC;QACH,KAAK,GAAG,6BAA6B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,QAAQ;YACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,kBAAkB,EAAE,sCAAsC,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CACT,kBAAkB,EAClB,0CAA0C,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EACtF,KAAK,EACL,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,KAAK,oBAAoB,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CACT,cAAc,EACd,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EACjF,KAAK,EACL,2BAA2B,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,uBAAuB,GAAG,KAAK,CAAC,cAAc,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAE7I,MAAM,gBAAgB,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC;IAC9F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzF,kFAAkF;IAClF,iFAAiF;IACjF,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,mBAAmB,GACvB,KAAK,CAAC,mBAAmB;QACzB,CAAC,KAAK,CAAC,UAAU,KAAK,cAAc,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAExG,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,GAAG,KAAK;QACR,cAAc,EAAE,uBAAuB;QACvC,mBAAmB,EAAE,QAAQ,EAAE,MAAM;QACrC,mBAAmB;KACpB,CAAC,CAAC;IAEH,6EAA6E;IAC7E,0CAA0C;IAC1C,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC1D,kBAAkB,EAAE,oBAAoB,EAAE;KAC3C,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;QACR,GAAG,MAAM;QACT,QAAQ,EAAE,gBAAgB;QAC1B,gBAAgB;QAChB,aAAa,EAAE,QAAQ;QACvB,MAAM,EAAE,2BAA2B;KACpC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/safehandsRiskReport.d.ts

@@ -2,11 +2,12 @@ import { z } from "zod";
 import { type ToolResponse } from "../lib/toolResponse.js";
 export declare const safehandsRiskReportSchema: z.ZodObject<{
     actionType: z.ZodEnum<["send_payment", "approve_token", "execute_swap", "x402_pay_and_fetch", "publish_risk_score", "custom_contract_call"]>;
+    agentId: z.ZodOptional<z.ZodString>;
     chainId: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     environment: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-    isMainnet: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    isMainnet: z.ZodOptional<z.ZodBoolean>;
     amount: z.ZodOptional<z.ZodString>;
-    amountUnit: z.ZodOptional<z.ZodEnum<["PHRS", "USDC", "USD", "TOKEN"]>>;
+    amountUnit: z.ZodOptional<z.ZodEnum<["PROS", "USDC", "USD", "TOKEN"]>>;
     token: z.ZodOptional<z.ZodString>;
     tokenAddress: z.ZodOptional<z.ZodString>;
     tokenIn: z.ZodOptional<z.ZodString>;
@@ -24,57 +25,71 @@ export declare const safehandsRiskReportSchema: z.ZodObject<{
     recipientVerified: z.ZodOptional<z.ZodBoolean>;
     spenderVerified: z.ZodOptional<z.ZodBoolean>;
     requiresSigner: z.ZodOptional<z.ZodBoolean>;
+    score: z.ZodOptional<z.ZodNumber>;
+    targetContract: z.ZodOptional<z.ZodString>;
+    data: z.ZodOptional<z.ZodString>;
 } & {
     includeChecks: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-}, "strip", z.ZodTypeAny, {
+    walletAddress: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    chainId: number;
     environment: string;
     actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
-    chainId: number;
-    isMainnet: boolean;
     paymentTokenAddress: string;
     includeChecks: boolean;
+    token?: string | undefined;
     spender?: string | undefined;
     amount?: string | undefined;
-    token?: string | undefined;
+    data?: string | undefined;
+    url?: string | undefined;
+    score?: number | undefined;
     tokenAddress?: string | undefined;
-    amountUnit?: "PHRS" | "USDC" | "USD" | "TOKEN" | undefined;
+    agentId?: string | undefined;
+    isMainnet?: boolean | undefined;
+    amountUnit?: "PROS" | "USDC" | "USD" | "TOKEN" | undefined;
     tokenIn?: string | undefined;
     tokenOut?: string | undefined;
     recipient?: string | undefined;
     approvalAmount?: string | undefined;
     approvalToken?: string | undefined;
     approvalUnlimited?: boolean | undefined;
-    url?: string | undefined;
     paymentAmountUsdc?: string | undefined;
     signerAvailable?: boolean | undefined;
-    tokenSecurityStatus?: "unknown" | "ok" | "unavailable" | undefined;
+    tokenSecurityStatus?: "ok" | "unavailable" | "unknown" | undefined;
     recipientVerified?: boolean | undefined;
     spenderVerified?: boolean | undefined;
     requiresSigner?: boolean | undefined;
+    walletAddress?: string | undefined;
+    targetContract?: string | undefined;
 }, {
     actionType: "send_payment" | "approve_token" | "execute_swap" | "x402_pay_and_fetch" | "publish_risk_score" | "custom_contract_call";
+    token?: string | undefined;
     spender?: string | undefined;
     amount?: string | undefined;
+    data?: string | undefined;
+    chainId?: number | undefined;
+    url?: string | undefined;
+    score?: number | undefined;
     environment?: string | undefined;
-    token?: string | undefined;
     tokenAddress?: string | undefined;
-    chainId?: number | undefined;
+    agentId?: string | undefined;
     isMainnet?: boolean | undefined;
-    amountUnit?: "PHRS" | "USDC" | "USD" | "TOKEN" | undefined;
+    amountUnit?: "PROS" | "USDC" | "USD" | "TOKEN" | undefined;
     tokenIn?: string | undefined;
     tokenOut?: string | undefined;
     recipient?: string | undefined;
     approvalAmount?: string | undefined;
     approvalToken?: string | undefined;
     approvalUnlimited?: boolean | undefined;
-    url?: string | undefined;
     paymentAmountUsdc?: string | undefined;
     paymentTokenAddress?: string | undefined;
     signerAvailable?: boolean | undefined;
-    tokenSecurityStatus?: "unknown" | "ok" | "unavailable" | undefined;
+    tokenSecurityStatus?: "ok" | "unavailable" | "unknown" | undefined;
     recipientVerified?: boolean | undefined;
     spenderVerified?: boolean | undefined;
     requiresSigner?: boolean | undefined;
+    walletAddress?: string | undefined;
+    targetContract?: string | undefined;
     includeChecks?: boolean | undefined;
 }>;
 export type SafeHandsRiskReportInput = z.input<typeof safehandsRiskReportSchema>;

package/dist/tools/safehandsRiskReport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsRiskReport.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAM,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI/D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEpC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEjF,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAkB7G"}
+{"version":3,"file":"safehandsRiskReport.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAM,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAK/D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGpC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAEjF,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAqC7G"}

package/dist/tools/safehandsRiskReport.js

@@ -1,17 +1,36 @@
-// ─── Tool: safehands_risk_report ───────────────────────────────────────
 import { z } from "zod";
+import { isAddress } from "viem";
 import { ok } from "../lib/toolResponse.js";
 import { explainPolicyResult } from "../lib/policy/actionPolicyEngine.js";
 import { handleSafeHandsPreflightCheck, safehandsPreflightCheckSchema } from "./safehandsPreflightCheck.js";
+import { queryRegistryForTarget } from "../lib/safeHandsRegistry.js";
 export const safehandsRiskReportSchema = safehandsPreflightCheckSchema.extend({
     includeChecks: z.boolean().optional().default(true),
+    walletAddress: z.string().optional(),
 });
 export async function handleSafeHandsRiskReport(raw) {
     const input = safehandsRiskReportSchema.parse(raw);
-    const preflight = await handleSafeHandsPreflightCheck(input);
+    // Delegate to the preflight core with only its recognized fields. The preflight
+    // schema is strict, so the risk-report-only key (includeChecks) must be stripped
+    // before delegation; it is still used below to shape the report.
+    const { includeChecks, ...preflightInput } = input;
+    const preflight = await handleSafeHandsPreflightCheck(preflightInput);
     if (!preflight.success)
         return preflight;
     const data = preflight.data;
+    let riskRegistry = null;
+    const walletAddr = input.walletAddress || input.recipient;
+    if (walletAddr && isAddress(walletAddr)) {
+        try {
+            riskRegistry = await queryRegistryForTarget(walletAddr);
+        }
+        catch {
+            riskRegistry = {
+                version: "safehands-registry",
+                error: "SafeHandsRegistry unavailable; local risk evaluation still completed.",
+            };
+        }
+    }
     return ok({
         decision: data.decision,
         riskLevel: data.riskLevel,
@@ -19,10 +38,11 @@ export async function handleSafeHandsRiskReport(raw) {
         summary: explainPolicyResult(data),
         reasons: data.reasons,
         requiredActions: data.requiredActions,
-        checks: input.includeChecks ? data.checks : undefined,
+        checks: includeChecks ? data.checks : undefined,
         environment: data.environment,
         chainId: data.chainId,
         isMainnet: data.isMainnet,
+        riskRegistry,
         source: "safehands_risk_report",
     });
 }

package/dist/tools/safehandsRiskReport.js.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsRiskReport.js","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAE5G,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC,MAAM,CAAC;IAC5E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACpD,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAA6B;IAC3E,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAW,CAAC;IACnC,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACrD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,uBAAuB;KAChC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"safehandsRiskReport.js","sourceRoot":"","sources":["../../src/tools/safehandsRiskReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,EAAE,EAAqB,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC5G,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC,MAAM,CAAC;IAC5E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAA6B;IAC3E,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,gFAAgF;IAChF,iFAAiF;IACjF,iEAAiE;IACjE,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,GAAG,KAAK,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,cAAc,CAAC,CAAC;IACtE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAW,CAAC;IAEnC,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,SAAS,CAAC;IAC1D,IAAI,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,sBAAsB,CAAC,UAA2B,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG;gBACb,OAAO,EAAE,oBAAoB;gBAC7B,KAAK,EAAE,uEAAuE;aAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC/C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY;QACZ,MAAM,EAAE,uBAAuB;KAChC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/safehandsSafeExecute.d.ts

@@ -5,7 +5,7 @@ export declare const safehandsSafeExecuteSchema: z.ZodObject<{
     execute: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     confirmExecution: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     action: z.ZodRecord<z.ZodString, z.ZodAny>;
-}, "strip", z.ZodTypeAny, {
+}, "strict", z.ZodTypeAny, {
     path: "safe_execute_send_payment" | "safe_execute_approve_token" | "safe_execute_swap" | "safe_x402_pay_and_fetch";
     execute: boolean;
     confirmExecution: boolean;

package/dist/tools/safehandsSafeExecute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsSafeExecute.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAQ/F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAKrC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAenF,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAyD/G"}
+{"version":3,"file":"safehandsSafeExecute.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsC,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAW/F,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAK5B,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAsBnF,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CA0J/G"}

package/dist/tools/safehandsSafeExecute.js

@@ -1,6 +1,3 @@
-// ─── Tool: safehands_safe_execute ──────────────────────────────────────
-// Guarded execution wrapper so AI agents cannot bypass preflight checks.
-// ───────────────────────────────────────────────────────────────────────
 import { z } from "zod";
 import { fail, ok, requireWriteToolsEnabled } from "../lib/toolResponse.js";
 import { getSigner, isSignerFailure } from "../lib/signer/index.js";
@@ -9,73 +6,159 @@ import { handleSendPayment } from "./sendPayment.js";
 import { handleApproveToken } from "./approveToken.js";
 import { handleExecuteSwap } from "./executeSwap.js";
 import { handleX402PayAndFetch } from "./x402PayAndFetch.js";
+import { REQUIRE_AUTHORIZED_AGENT_FOR_WRITE, CHAIN_ID } from "../lib/constants.js";
+import { checkManagedWalletAuthorization } from "../lib/safeHandsRegistry.js";
+import { publicClient } from "../lib/pharosClient.js";
 export const safehandsSafeExecuteSchema = z.object({
     path: z.enum(["safe_execute_send_payment", "safe_execute_approve_token", "safe_execute_swap", "safe_x402_pay_and_fetch"]),
     execute: z.boolean().optional().default(false).describe("Must be true to execute. false returns dry-run guarded report only."),
     confirmExecution: z.boolean().optional().default(false).describe("Additional explicit runtime confirmation."),
     action: z.record(z.any()).describe("Underlying tool input object"),
-});
+}).strict();
 function toPreflight(path, action, signerAvailable) {
+    const agentId = typeof action.agentId === "string" ? action.agentId : undefined;
     if (path === "safe_execute_send_payment") {
-        return { actionType: "send_payment", amount: String(action.amount || ""), amountUnit: "PHRS", recipient: String(action.toAddress || ""), recipientVerified: false, requiresSigner: true, signerAvailable };
+        return { actionType: "send_payment", agentId, amount: String(action.amount || ""), amountUnit: "PROS", recipient: String(action.toAddress || ""), recipientVerified: false, requiresSigner: true, signerAvailable };
     }
     if (path === "safe_execute_approve_token") {
-        return { actionType: "approve_token", approvalAmount: String(action.amount || ""), approvalToken: String(action.token || ""), approvalUnlimited: action.amount === "max", requiresSigner: true, signerAvailable };
+        return { actionType: "approve_token", agentId, approvalAmount: String(action.amount || ""), approvalToken: String(action.token || ""), approvalUnlimited: action.amount === "max", spender: String(action.spender || ""), requiresSigner: true, signerAvailable };
     }
     if (path === "safe_execute_swap") {
-        return { actionType: "execute_swap", amount: String(action.amountIn || ""), tokenIn: String(action.tokenIn || ""), tokenOut: String(action.tokenOut || ""), requiresSigner: true, signerAvailable };
+        return { actionType: "execute_swap", agentId, amount: String(action.amountIn || ""), tokenIn: String(action.tokenIn || ""), tokenOut: String(action.tokenOut || ""), requiresSigner: true, signerAvailable };
     }
-    return { actionType: "x402_pay_and_fetch", url: String(action.url || ""), paymentAmountUsdc: String(action.maxPaymentUsdc || "0.001"), requiresSigner: true, signerAvailable };
+    return { actionType: "x402_pay_and_fetch", agentId, url: String(action.url || ""), paymentAmountUsdc: String(action.maxPaymentUsdc || "0.001"), requiresSigner: true, signerAvailable };
+}
+function resolveMode(signerMode) {
+    if (signerMode === "managed-mainnet")
+        return "managed_execution";
+    if (signerMode === "env")
+        return "env_wallet";
+    return "unknown";
 }
 export async function handleSafeHandsSafeExecute(raw) {
-    const input = safehandsSafeExecuteSchema.parse(raw);
+    let input;
+    try {
+        input = safehandsSafeExecuteSchema.parse(raw);
+    }
+    catch (err) {
+        const msg = err instanceof z.ZodError
+            ? err.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")
+            : String(err);
+        return fail("VALIDATION_ERROR", `safe_execute input validation failed: ${msg}`, false, "safehands_safe_execute");
+    }
     const writeGuard = requireWriteToolsEnabled("safehands_safe_execute");
     if (writeGuard)
         return writeGuard;
-    // Resolve actual signer availability so the preflight report is truthful
+    // SAFE_EXECUTE_ENABLED is the documented second gate for the auto-execute path:
+    // WRITE_TOOLS_ENABLED opens writes; SAFE_EXECUTE_ENABLED specifically authorizes
+    // preflight→execute. Enforced here so it is not a decorative env var. Read-only
+    // preflight remains available via safehands_preflight_check (needs neither gate).
+    if (process.env.SAFE_EXECUTE_ENABLED !== "true") {
+        return fail("SAFE_EXECUTE_DISABLED", "safehands_safe_execute is disabled. Set SAFE_EXECUTE_ENABLED=true (in addition to WRITE_TOOLS_ENABLED=true) to enable the preflight→execute path. Read-only preflight is available via safehands_preflight_check.", false, "safehands_safe_execute");
+    }
     const purpose = input.path === "safe_x402_pay_and_fetch" ? "x402" : "write";
     const agentId = typeof input.action.agentId === "string" ? input.action.agentId : undefined;
     const signerResult = await getSigner(agentId, { purpose });
     const signerAvailable = !isSignerFailure(signerResult);
+    if (signerAvailable && signerResult.mode === "managed-mainnet" && REQUIRE_AUTHORIZED_AGENT_FOR_WRITE) {
+        const authCheck = await checkManagedWalletAuthorization(signerResult.address);
+        if (!authCheck.authorized) {
+            return fail(authCheck.errorCode || "AGENT_WALLET_NOT_AUTHORIZED", authCheck.errorMessage || "Managed wallet is not authorized in SafeHandsRegistry.", false, "safehands_safe_execute");
+        }
+        try {
+            const balance = await publicClient.getBalance({ address: signerResult.address });
+            if (balance === 0n) {
+                return ok({
+                    executed: false,
+                    decision: "REQUIRE_FUNDING",
+                    requiresFunding: true,
+                    walletAddress: signerResult.address,
+                    network: "Pharos Network",
+                    chainId: CHAIN_ID,
+                    mode: "managed_execution",
+                    source: "safehands_safe_execute",
+                });
+            }
+        }
+        catch {
+            // RPC failed — continue, let execution attempt surface the real error
+        }
+    }
     const preflight = await handleSafeHandsPreflightCheck(toPreflight(input.path, input.action, signerAvailable));
     if (!preflight.success)
         return preflight;
     const report = preflight.data;
+    const mode = signerAvailable ? resolveMode(signerResult.mode) : "unknown";
     if (report.decision === "BLOCK") {
         return ok({
             executed: false,
             blocked: true,
             safetyReport: report,
             executionResult: null,
+            mode,
             source: "safehands_safe_execute",
         });
     }
-    if (report.decision !== "ALLOW") {
-        return fail(report.decision === "REQUIRE_CONFIRMATION" ? "CONFIRMATION_REQUIRED" : "POLICY_BLOCKED", `SafeHands did not execute because policy decision is ${report.decision}.`, false, "safehands_safe_execute");
+    // PREPARE_ONLY = execution unavailable (read-only deployment) or a funding
+    // shortfall. Never auto-execute; hand back the guarded report.
+    if (report.decision === "PREPARE_ONLY") {
+        return ok({
+            executed: false,
+            prepareOnly: true,
+            decision: "PREPARE_ONLY",
+            safetyReport: report,
+            executionResult: null,
+            mode,
+            source: "safehands_safe_execute",
+        });
+    }
+    // ALLOW executes directly; REQUIRE_CONFIRMATION is executable only when the
+    // caller explicitly confirms (confirmExecution IS that confirmation). Any other
+    // value is a safety-net refusal.
+    const requiresConfirmation = report.decision === "REQUIRE_CONFIRMATION";
+    if (report.decision !== "ALLOW" && !requiresConfirmation) {
+        return fail("POLICY_BLOCKED", `SafeHands did not execute because policy decision is ${report.decision}.`, false, "safehands_safe_execute");
     }
     if (!input.execute || !input.confirmExecution) {
         return ok({
             executed: false,
             dryRun: true,
-            reason: "Set execute=true and confirmExecution=true to execute this allowed testnet action.",
+            requiresConfirmation,
+            reason: requiresConfirmation
+                ? "Policy is REQUIRE_CONFIRMATION. Set execute=true and confirmExecution=true to proceed after reviewing the safety report."
+                : "Set execute=true and confirmExecution=true to execute this allowed mainnet action.",
             safetyReport: report,
             executionResult: null,
+            mode,
             source: "safehands_safe_execute",
         });
     }
+    // Reaching here means the operator explicitly set execute=true + confirmExecution=true
+    // AND the gated preflight returned ALLOW or REQUIRE_CONFIRMATION. Pass confirm=true
+    // to the raw handler so its own (independent) confirmation gate does not re-block.
+    const confirmedAction = { ...input.action, confirm: true };
     let executionResult;
     if (input.path === "safe_execute_send_payment")
-        executionResult = await handleSendPayment(input.action);
+        executionResult = await handleSendPayment(confirmedAction);
     else if (input.path === "safe_execute_approve_token")
-        executionResult = await handleApproveToken(input.action);
+        executionResult = await handleApproveToken(confirmedAction);
     else if (input.path === "safe_execute_swap")
-        executionResult = await handleExecuteSwap(input.action);
+        executionResult = await handleExecuteSwap(confirmedAction);
     else
-        executionResult = await handleX402PayAndFetch(input.action);
+        executionResult = await handleX402PayAndFetch(confirmedAction);
+    const execFailed = executionResult &&
+        typeof executionResult === "object" &&
+        "success" in executionResult &&
+        executionResult.success === false;
+    if (execFailed) {
+        const execErr = executionResult;
+        return fail(execErr.error?.code || "EXECUTION_FAILED", execErr.error?.message || "Underlying execution returned success:false.", false, "safehands_safe_execute");
+    }
     return ok({
         executed: true,
         safetyReport: report,
         executionResult,
+        mode: signerAvailable ? resolveMode(signerResult.mode) : "unknown",
         source: "safehands_safe_execute",
     });
 }

package/dist/tools/safehandsSafeExecute.js.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsSafeExecute.js","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,yEAAyE;AACzE,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,wBAAwB,EAAqB,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;IACzH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAC9H,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC7G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACnE,CAAC,CAAC;AAIH,SAAS,WAAW,CAAC,IAAY,EAAE,MAA+B,EAAE,eAAwB;IAC1F,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAe,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC/N,CAAC;IACD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC1C,OAAO,EAAE,UAAU,EAAE,eAAwB,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC7N,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC/M,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,oBAA6B,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AAC1L,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAA8B;IAC7E,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,wBAAwB,CAAC,wBAAwB,CAAC,CAAC;IACtE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,yEAAyE;IACzE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAW,CAAC;IAErC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,IAAI,CACT,MAAM,CAAC,QAAQ,KAAK,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB,EACvF,wDAAwD,MAAM,CAAC,QAAQ,GAAG,EAC1E,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,oFAAoF;YAC5F,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,eAAwB,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;SAC1G,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B;QAAE,eAAe,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;SACjH,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;;QACvG,eAAe,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,MAAa,CAAC,CAAC;IAExE,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,MAAM;QACpB,eAAe;QACf,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"safehandsSafeExecute.js","sourceRoot":"","sources":["../../src/tools/safehandsSafeExecute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,wBAAwB,EAAqB,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kCAAkC,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;IACzH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAC9H,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IAC7G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACnE,CAAC,CAAC,MAAM,EAAE,CAAC;AAIZ,SAAS,WAAW,CAAC,IAAY,EAAE,MAA+B,EAAE,eAAwB;IAC1F,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAe,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACxO,CAAC;IACD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QAC1C,OAAO,EAAE,UAAU,EAAE,eAAwB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC7Q,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,OAAO,EAAE,UAAU,EAAE,cAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACxN,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,oBAA6B,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACnM,CAAC;AAED,SAAS,WAAW,CAAC,UAA8B;IACjD,IAAI,UAAU,KAAK,iBAAiB;QAAE,OAAO,mBAAmB,CAAC;IACjE,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,YAAY,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAA8B;IAC7E,IAAI,KAAiD,CAAC;IACtD,IAAI,CAAC;QACH,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,QAAQ;YACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,kBAAkB,EAAE,yCAAyC,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,wBAAwB,CAAC,CAAC;IACtE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,gFAAgF;IAChF,iFAAiF;IACjF,gFAAgF;IAChF,kFAAkF;IAClF,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,IAAI,CACT,uBAAuB,EACvB,mNAAmN,EACnN,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAEvD,IAAI,eAAe,IAAI,YAAY,CAAC,IAAI,KAAK,iBAAiB,IAAI,kCAAkC,EAAE,CAAC;QACrG,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAC1B,OAAO,IAAI,CACT,SAAS,CAAC,SAAS,IAAI,6BAA6B,EACpD,SAAS,CAAC,YAAY,IAAI,wDAAwD,EAClF,KAAK,EACL,wBAAwB,CACzB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;oBACR,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,iBAAiB;oBAC3B,eAAe,EAAE,IAAI;oBACrB,aAAa,EAAE,YAAY,CAAC,OAAO;oBACnC,OAAO,EAAE,gBAAgB;oBACzB,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,wBAAwB;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAC9G,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAW,CAAC;IAErC,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1E,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,gFAAgF;IAChF,iCAAiC;IACjC,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,KAAK,sBAAsB,CAAC;IACxE,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACzD,OAAO,IAAI,CACT,gBAAgB,EAChB,wDAAwD,MAAM,CAAC,QAAQ,GAAG,EAC1E,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;YACR,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,IAAI;YACZ,oBAAoB;YACpB,MAAM,EAAE,oBAAoB;gBAC1B,CAAC,CAAC,0HAA0H;gBAC5H,CAAC,CAAC,oFAAoF;YACxF,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI;YACrB,IAAI;YACJ,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,uFAAuF;IACvF,oFAAoF;IACpF,mFAAmF;IACnF,MAAM,eAAe,GAAG,EAAE,GAAI,KAAK,CAAC,MAAkC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxF,IAAI,eAAwB,CAAC;IAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,eAAsB,CAAC,CAAC;SAC7G,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B;QAAE,eAAe,GAAG,MAAM,kBAAkB,CAAC,eAAsB,CAAC,CAAC;SACpH,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,eAAe,GAAG,MAAM,iBAAiB,CAAC,eAAsB,CAAC,CAAC;;QAC1G,eAAe,GAAG,MAAM,qBAAqB,CAAC,eAAsB,CAAC,CAAC;IAE3E,MAAM,UAAU,GACd,eAAe;QACf,OAAO,eAAe,KAAK,QAAQ;QACnC,SAAS,IAAI,eAAe;QAC3B,eAAwC,CAAC,OAAO,KAAK,KAAK,CAAC;IAE9D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,eAAkE,CAAC;QACnF,OAAO,IAAI,CACT,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,kBAAkB,EACzC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,8CAA8C,EACxE,KAAK,EACL,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;QACR,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,MAAM;QACpB,eAAe;QACf,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM,EAAE,wBAAwB;KACjC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/safehandsWalletHealth.d.ts

@@ -11,5 +11,19 @@ export declare const safehandsWalletHealthSchema: z.ZodObject<{
     walletAddress?: string | undefined;
 }>;
 export type SafeHandsWalletHealthInput = z.input<typeof safehandsWalletHealthSchema>;
-export declare function handleSafeHandsWalletHealth(raw: SafeHandsWalletHealthInput): Promise<ToolResponse<unknown>>;
+/**
+ * Optional read seam for offline tests. Defaults to the live read-only RPC reads
+ * (PROS + USDC balances, SafeHandsRegistry authorization). These are READS only —
+ * there is no signing or write path here either way; injecting them performs no
+ * network I/O. The MCP path calls the handler with one argument, so default
+ * behavior is unchanged.
+ */
+export interface WalletHealthReaders {
+    readBalances?: (address: `0x${string}`) => Promise<{
+        pros: bigint;
+        usdc: bigint;
+    }>;
+    readAuthorization?: (address: `0x${string}`) => Promise<boolean>;
+}
+export declare function handleSafeHandsWalletHealth(raw: SafeHandsWalletHealthInput, readers?: WalletHealthReaders): Promise<ToolResponse<unknown>>;
 //# sourceMappingURL=safehandsWalletHealth.d.ts.map

package/dist/tools/safehandsWalletHealth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safehandsWalletHealth.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsWalletHealth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAmC,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI5F,eAAO,MAAM,2BAA2B;;;;;;;;;EAGtC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAErF,wBAAsB,2BAA2B,CAAC,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CA4FjH"}
+{"version":3,"file":"safehandsWalletHealth.d.ts","sourceRoot":"","sources":["../../src/tools/safehandsWalletHealth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAA6B,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAKtF,eAAO,MAAM,2BAA2B;;;;;;;;;EAGtC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAClE;AAED,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,0BAA0B,EAC/B,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CA4IhC"}