1"""
2Wallet Tool Wrappers — BaseTool classes for Agent framework.
3Delegates to /app/tools/wallet core functions for single-source-of-truth maintenance.
4"""
5 
6import logging
7import os
8import time
9from core.tool import BaseTool, ToolContext, ToolResult
10 
11# ── Import core wallet functions from /app/tools/wallet ─────────────────────
12from tools.wallet import (
13    _is_fly_machine,
14    _wallet_request,
15    _get_wallet_addresses,
16    _validate_and_clean_rules,
17    DEBANK_CHAIN_MAP,
18)
19from core.http_client import proxied_get
20 
21logger = logging.getLogger(__name__)
22 
23EVM_CHAINS = list(DEBANK_CHAIN_MAP.keys())
24 
25 
26def _fly_check():
27    if not _is_fly_machine():
28        return ToolResult(success=False, error="Not running on a Fly Machine — wallet unavailable")
29    return None
30 
31 
32def _proxied_get_with_retry(url, params=None, headers=None, timeout=30, max_retries=3):
33    """proxied_get with retry on timeout / 429 / 5xx."""
34    import requests
35    last_exc = None
36    for attempt in range(max_retries):
37        try:
38            resp = proxied_get(url, params=params, headers=headers, timeout=timeout)
39            if resp.status_code == 429 or resp.status_code >= 500:
40                if attempt < max_retries - 1:
41                    time.sleep(1 * (attempt + 1))
42                    continue
43            resp.raise_for_status()
44            return resp
45        except (requests.exceptions.Timeout, requests.exceptions.ConnectionError) as e:
46            last_exc = e
47            if attempt < max_retries - 1:
48                time.sleep(1)
49        except requests.exceptions.HTTPError:
50            raise
51        except Exception as e:
52            last_exc = e
53            break
54    raise last_exc or Exception("Max retries exceeded")
55 
56 
57# ── Info ─────────────────────────────────────────────────────────────────────
58 
59class WalletInfoTool(BaseTool):
60    @property
61    def name(self): return "wallet_info"
62    @property
63    def description(self): return "Get all on-chain wallet addresses for this agent (one per chain)."
64    @property
65    def parameters(self): return {"type": "object", "properties": {}}
66 
67    async def execute(self, ctx: ToolContext, **kw) -> ToolResult:
68        if err := _fly_check(): return err
69        try:
70            return ToolResult(success=True, output=await _wallet_request("GET", "/agent/wallet"))
71        except Exception as e:
72            return ToolResult(success=False, error=str(e))
73 
74 
75# ── EVM Balance ──────────────────────────────────────────────────────────────
76 
77class WalletBalanceTool(BaseTool):
78    @property
79    def name(self): return "wallet_balance"
80    @property
81    def description(self): return """Get EVM wallet balance on a specific chain. Omit 'asset' to discover ALL tokens.
82Chains: ethereum, base, arbitrum, optimism, polygon, linea.
83Use wallet_get_all_balances for all chains at once."""
84    @property
85    def parameters(self): return {
86        "type": "object",
87        "properties": {
88            "chain": {"type": "string", "enum": EVM_CHAINS, "description": "Required. Blockchain network."},
89            "address": {"type": "string", "description": "EVM address (0x...). Omit for own wallet."},
90            "asset": {"type": "string", "description": "Asset filter. Omit for ALL tokens."},
91        },
92        "required": ["chain"],
93    }
94 
95    async def execute(self, ctx: ToolContext, chain="", address="", asset="", **kw) -> ToolResult:
96        if not chain or chain not in EVM_CHAINS:
97            return ToolResult(success=False, error=f"'chain' required. One of: {', '.join(EVM_CHAINS)}")
98 
99        debank_key = os.environ.get("DEBANK_API_KEY", "")
100        if debank_key:
101            evm_address = address
102            if not evm_address:
103                if err := _fly_check(): return err
104                try:
105                    addrs = await _get_wallet_addresses()
106                    evm_address = addrs.get("evm", "")
107                except Exception as e:
108                    return ToolResult(success=False, error=f"Failed to get wallet address: {e}")
109            if not evm_address:
110                return ToolResult(success=False, error="Could not determine EVM wallet address")
111 
112            debank_chain_id = DEBANK_CHAIN_MAP.get(chain)
113            try:
114                resp = _proxied_get_with_retry(
115                    "https://pro-openapi.debank.com/v1/user/token_list",
116                    params={"id": evm_address, "chain_id": debank_chain_id, "is_all": "false"},
117                    headers={"AccessKey": debank_key},
118                )
119                return ToolResult(success=True, output={
120                    "address": evm_address, "chain": chain, "tokens": resp.json(), "source": "debank",
121                })
122            except Exception as e:
123                return ToolResult(success=False, error=f"DeBank request failed: {e}")
124        else:
125            if err := _fly_check(): return err
126            try:
127                params = [f"chain_type=ethereum&chain={chain}"]
128                if asset: params.append(f"asset={asset}")
129                data = await _wallet_request("GET", f"/agent/balance?{'&'.join(params)}")
130                return ToolResult(success=True, output=data)
131            except Exception as e:
132                return ToolResult(success=False, error=str(e))
133 
134 
135# ── Solana Balance ───────────────────────────────────────────────────────────
136 
137class WalletSolBalanceTool(BaseTool):
138    @property
139    def name(self): return "wallet_sol_balance"
140    @property
141    def description(self): return "Get Solana wallet balance. Omit 'asset' to discover ALL SPL tokens."
142    @property
143    def parameters(self): return {
144        "type": "object",
145        "properties": {
146            "address": {"type": "string", "description": "Solana address. Omit for own wallet."},
147            "asset": {"type": "string", "description": "Asset filter. Omit for ALL tokens."},
148        },
149    }
150 
151    async def execute(self, ctx: ToolContext, address="", asset="", **kw) -> ToolResult:
152        birdeye_key = os.environ.get("BIRDEYE_API_KEY", "")
153        if birdeye_key:
154            sol_address = address
155            if not sol_address:
156                if err := _fly_check(): return err
157                try:
158                    addrs = await _get_wallet_addresses()
159                    sol_address = addrs.get("sol", "")
160                except Exception as e:
161                    return ToolResult(success=False, error=f"Failed to get wallet address: {e}")
162            if not sol_address:
163                return ToolResult(success=False, error="Could not determine Solana wallet address")
164            try:
165                resp = _proxied_get_with_retry(
166                    "https://public-api.birdeye.so/wallet/v2/net-worth",
167                    params={"wallet": sol_address},
168                    headers={"X-API-KEY": birdeye_key, "x-chain": "solana", "accept": "application/json"},
169                )
170                return ToolResult(success=True, output={"address": sol_address, "source": "birdeye", "data": resp.json()})
171            except Exception as e:
172                return ToolResult(success=False, error=f"Birdeye request failed: {e}")
173        else:
174            if err := _fly_check(): return err
175            try:
176                params = ["chain_type=solana"]
177                if asset: params.append(f"asset={asset}")
178                data = await _wallet_request("GET", f"/agent/balance?{'&'.join(params)}")
179                return ToolResult(success=True, output=data)
180            except Exception as e:
181                return ToolResult(success=False, error=str(e))
182 
183 
184# ── All Balances ─────────────────────────────────────────────────────────────
185 
186class WalletGetAllBalancesTool(BaseTool):
187    @property
188    def name(self): return "wallet_get_all_balances"
189    @property
190    def description(self): return "Get complete balance snapshot across ALL chains (EVM + Solana) with USD values."
191    @property
192    def parameters(self): return {
193        "type": "object",
194        "properties": {
195            "evm_address": {"type": "string", "description": "EVM address (0x...). Omit for own."},
196            "sol_address": {"type": "string", "description": "Solana address. Omit for own."},
197        },
198    }
199 
200    async def execute(self, ctx: ToolContext, evm_address="", sol_address="", **kw) -> ToolResult:
201        import asyncio
202        if not evm_address or not sol_address:
203            if _is_fly_machine():
204                try:
205                    addrs = await _get_wallet_addresses()
206                    evm_address = evm_address or addrs.get("evm", "")
207                    sol_address = sol_address or addrs.get("sol", "")
208                except Exception:
209                    pass
210 
211        result = {}
212        errors = []
213        evm_usd = 0.0
214        sol_usd = 0.0
215 
216        async def _fetch_evm():
217            nonlocal evm_usd
218            if not evm_address: return
219            debank_key = os.environ.get("DEBANK_API_KEY", "")
220            if not debank_key:
221                errors.append("No DEBANK_API_KEY"); return
222            try:
223                resp = _proxied_get_with_retry(
224                    "https://pro-openapi.debank.com/v1/user/all_token_list",
225                    params={"id": evm_address, "is_all": "true"},
226                    headers={"AccessKey": debank_key},
227                )
228                tokens = resp.json()
229                by_chain = {}
230                for t in tokens:
231                    c = t.get("chain", "unknown")
232                    if c not in by_chain:
233                        by_chain[c] = {"tokens": [], "total_usd": 0.0}
234                    usd = t.get("price", 0) * t.get("amount", 0)
235                    by_chain[c]["tokens"].append(t)
236                    by_chain[c]["total_usd"] = round(by_chain[c]["total_usd"] + usd, 2)
237                    evm_usd += usd
238                result["evm"] = {"address": evm_address, "chains": by_chain, "total_usd": round(evm_usd, 2), "source": "debank"}
239            except Exception as e:
240                errors.append(f"DeBank: {e}")
241 
242        async def _fetch_sol():
243            nonlocal sol_usd
244            if not sol_address: return
245            birdeye_key = os.environ.get("BIRDEYE_API_KEY", "")
246            if not birdeye_key:
247                errors.append("No BIRDEYE_API_KEY"); return
248            try:
249                resp = _proxied_get_with_retry(
250                    "https://public-api.birdeye.so/wallet/v2/net-worth",
251                    params={"wallet": sol_address},
252                    headers={"X-API-KEY": birdeye_key, "x-chain": "solana", "accept": "application/json"},
253                )
254                data = resp.json()
255                sol_usd = data.get("data", {}).get("totalUsd", 0)
256                result["solana"] = {"address": sol_address, "source": "birdeye", "data": data, "total_usd": round(sol_usd, 2)}
257            except Exception as e:
258                errors.append(f"Birdeye: {e}")
259 
260        await asyncio.gather(_fetch_evm(), _fetch_sol())
261        result["total_usd_value"] = round(evm_usd + sol_usd, 2)
262        if errors: result["errors"] = errors
263        has_data = "evm" in result or "solana" in result
264        if not has_data and errors:
265            return ToolResult(success=False, error="All balance queries failed: " + "; ".join(errors))
266        return ToolResult(success=True, output=result)
267 
268 
269 
270# ── EVM Transfer ─────────────────────────────────────────────────────────────
271 
272class WalletTransferTool(BaseTool):
273    @property
274    def name(self): return "wallet_transfer"
275    @property
276    def description(self): return """Sign and BROADCAST an EVM transaction. Gas is sponsored by default (falls back to user-paid if unavailable). Set sponsor=false to pay gas from wallet balance.
277Use '0' amount for contract calls. Policy-gated if enabled."""
278    @property
279    def parameters(self): return {
280        "type": "object",
281        "properties": {
282            "to": {"type": "string", "description": "Target address (0x...)"},
283            "amount": {"type": "string", "description": "Amount in wei"},
284            "chain_id": {"type": "integer", "description": "Chain ID (default: 1)"},
285            "data": {"type": "string", "description": "Hex calldata for contract calls"},
286            "gas_limit": {"type": "string"}, "gas_price": {"type": "string"},
287            "max_fee_per_gas": {"type": "string"}, "max_priority_fee_per_gas": {"type": "string"},
288            "nonce": {"type": "string"}, "tx_type": {"type": "integer", "description": "0=legacy, 2=EIP-1559"},
289            "sponsor": {"type": "boolean", "description": "Gas sponsorship: true=platform pays gas, false=user pays gas from wallet. Omit for auto (try sponsor, fallback to user-paid)."},
290        },
291        "required": ["to", "amount"],
292    }
293 
294    async def execute(self, ctx: ToolContext, to="", amount="", chain_id=1, data="",
295                      gas_limit="", gas_price="", max_fee_per_gas="", max_priority_fee_per_gas="",
296                      nonce="", tx_type=None, sponsor=None, **kw) -> ToolResult:
297        if err := _fly_check(): return err
298        if not to or not amount:
299            return ToolResult(success=False, error="'to' and 'amount' required")
300        body = {"to": to, "amount": amount, "chain_id": chain_id}
301        if data: body["data"] = data
302        if gas_limit: body["gas_limit"] = gas_limit
303        if gas_price: body["gas_price"] = gas_price
304        if max_fee_per_gas: body["max_fee_per_gas"] = max_fee_per_gas
305        if max_priority_fee_per_gas: body["max_priority_fee_per_gas"] = max_priority_fee_per_gas
306        if nonce: body["nonce"] = nonce
307        if tx_type is not None: body["tx_type"] = tx_type
308        if sponsor is not None: body["sponsor"] = sponsor
309        try:
310            return ToolResult(success=True, output=await _wallet_request("POST", "/agent/transfer", body))
311        except Exception as e:
312            msg = str(e)
313            if "policy" in msg.lower():
314                return ToolResult(success=False, error=f"Policy violation: {msg}")
315            return ToolResult(success=False, error=msg)
316 
317 
318# ── EVM Sign Transaction ────────────────────────────────────────────────────
319 
320class WalletSignTransactionTool(BaseTool):
321    @property
322    def name(self): return "wallet_sign_transaction"
323    @property
324    def description(self): return "Sign an EVM transaction WITHOUT broadcasting. Returns signed tx data."
325    @property
326    def parameters(self): return {
327        "type": "object",
328        "properties": {
329            "to": {"type": "string"}, "amount": {"type": "string"},
330            "chain_id": {"type": "integer"}, "data": {"type": "string"},
331            "gas_limit": {"type": "string"}, "gas_price": {"type": "string"},
332            "max_fee_per_gas": {"type": "string"}, "max_priority_fee_per_gas": {"type": "string"},
333            "nonce": {"type": "string"}, "tx_type": {"type": "integer"},
334        },
335        "required": ["to", "amount"],
336    }
337 
338    async def execute(self, ctx: ToolContext, to="", amount="", chain_id=1, data="",
339                      gas_limit="", gas_price="", max_fee_per_gas="", max_priority_fee_per_gas="",
340                      nonce="", tx_type=None, **kw) -> ToolResult:
341        if err := _fly_check(): return err
342        if not to: return ToolResult(success=False, error="'to' required")
343        body = {"to": to, "amount": amount, "chain_id": chain_id}
344        if data: body["data"] = data
345        if gas_limit: body["gas_limit"] = gas_limit
346        if gas_price: body["gas_price"] = gas_price
347        if max_fee_per_gas: body["max_fee_per_gas"] = max_fee_per_gas
348        if max_priority_fee_per_gas: body["max_priority_fee_per_gas"] = max_priority_fee_per_gas
349        if nonce: body["nonce"] = nonce
350        if tx_type is not None: body["tx_type"] = tx_type
351        try:
352            return ToolResult(success=True, output=await _wallet_request("POST", "/agent/sign-transaction", body))
353        except Exception as e:
354            return ToolResult(success=False, error=str(e))
355 
356 
357# ── EVM Sign Message ────────────────────────────────────────────────────────
358 
359class WalletSignTool(BaseTool):
360    @property
361    def name(self): return "wallet_sign"
362    @property
363    def description(self): return "Sign a message (EIP-191 personal_sign). Proves wallet ownership."
364    @property
365    def parameters(self): return {
366        "type": "object",
367        "properties": {"message": {"type": "string", "description": "Message to sign"}},
368        "required": ["message"],
369    }
370 
371    async def execute(self, ctx: ToolContext, message="", **kw) -> ToolResult:
372        if err := _fly_check(): return err
373        if not message: return ToolResult(success=False, error="'message' required")
374        try:
375            return ToolResult(success=True, output=await _wallet_request("POST", "/agent/sign", {"message": message}))
376        except Exception as e:
377            return ToolResult(success=False, error=str(e))
378 
379 
380# ── EVM Sign Typed Data ─────────────────────────────────────────────────────
381 
382class WalletSignTypedDataTool(BaseTool):
383    @property
384    def name(self): return "wallet_sign_typed_data"
385    @property
386    def description(self): return "Sign EIP-712 structured data (permits, orders, etc.)."
387    @property
388    def parameters(self): return {
389        "type": "object",
390        "properties": {
391            "domain": {"type": "object", "description": "EIP-712 domain separator"},
392            "types": {"type": "object", "description": "Type definitions"},
393            "primaryType": {"type": "string", "description": "Primary type name"},
394            "message": {"type": "object", "description": "Data to sign"},
395        },
396        "required": ["domain", "types", "primaryType", "message"],
397    }
398 
399    async def execute(self, ctx: ToolContext, domain=None, types=None,
400                      primaryType="", message=None, **kw) -> ToolResult:
401        if err := _fly_check(): return err
402        if not all([domain, types, primaryType, message]):
403            return ToolResult(success=False, error="All params required: domain, types, primaryType, message")
404        try:
405            return ToolResult(success=True, output=await _wallet_request("POST", "/agent/sign-typed-data", {
406                "domain": domain, "types": types, "primaryType": primaryType, "message": message,
407            }))
408        except Exception as e:
409            return ToolResult(success=False, error=str(e))
410 
411 
412# ── EVM Transactions ────────────────────────────────────────────────────────
413 
414class WalletTransactionsTool(BaseTool):
415    @property
416    def name(self): return "wallet_transactions"
417    @property
418    def description(self): return "Get recent EVM transaction history."
419    @property
420    def parameters(self): return {
421        "type": "object",
422        "properties": {
423            "chain": {"type": "string"}, "asset": {"type": "string"},
424            "limit": {"type": "integer", "description": "Max 100"},
425        },
426    }
427 
428    async def execute(self, ctx: ToolContext, chain="ethereum", asset="eth", limit=20, **kw) -> ToolResult:
429        if err := _fly_check(): return err
430        try:
431            qs = f"?chain_type=ethereum&chain={chain}&asset={asset}&limit={limit}"
432            return ToolResult(success=True, output=await _wallet_request("GET", f"/agent/transactions{qs}"))
433        except Exception as e:
434            return ToolResult(success=False, error=str(e))
435 
436 
437# ── Solana Transfer ──────────────────────────────────────────────────────────
438 
439class WalletSolTransferTool(BaseTool):
440    @property
441    def name(self): return "wallet_sol_transfer"
442    @property
443    def description(self): return "Sign and BROADCAST a Solana transaction. User pays gas (SOL required for fees). Policy-gated if enabled."
444    @property
445    def parameters(self): return {
446        "type": "object",
447        "properties": {
448            "transaction": {"type": "string", "description": "Base64-encoded Solana tx"},
449            "caip2": {"type": "string", "description": "CAIP-2 chain ID (default: mainnet)"},
450        },
451        "required": ["transaction"],
452    }
453 
454    async def execute(self, ctx: ToolContext, transaction="", caip2="solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp", **kw) -> ToolResult:
455        if err := _fly_check(): return err
456        if not transaction: return ToolResult(success=False, error="'transaction' required")
457        try:
458            return ToolResult(success=True, output=await _wallet_request("POST", "/agent/sol/transfer", {
459                "transaction": transaction, "caip2": caip2,
460            }))
461        except Exception as e:
462            msg = str(e)
463            if "policy" in msg.lower():
464                return ToolResult(success=False, error=f"Policy violation: {msg}")
465            return ToolResult(success=False, error=msg)
466 
467 
468# ── Solana Sign Transaction ─────────────────────────────────────────────────
469 
470class WalletSolSignTransactionTool(BaseTool):
471    @property
472    def name(self): return "wallet_sol_sign_transaction"
473    @property
474    def description(self): return "Sign a Solana transaction WITHOUT broadcasting."
475    @property
476    def parameters(self): return {
477        "type": "object",
478        "properties": {"transaction": {"type": "string", "description": "Base64-encoded Solana tx"}},
479        "required": ["transaction"],
480    }
481 
482    async def execute(self, ctx: ToolContext, transaction="", **kw) -> ToolResult:
483        if err := _fly_check(): return err
484        if not transaction: return ToolResult(success=False, error="'transaction' required")
485        try:
486            return ToolResult(success=True, output=await _wallet_request("POST", "/agent/sol/sign-transaction", {
487                "transaction": transaction,
488            }))
489        except Exception as e:
490            return ToolResult(success=False, error=str(e))
491 
492 
493# ── Solana Sign Message ─────────────────────────────────────────────────────
494 
495class WalletSolSignTool(BaseTool):
496    @property
497    def name(self): return "wallet_sol_sign"
498    @property
499    def description(self): return "Sign a message with Solana wallet (base64)."
500    @property
501    def parameters(self): return {
502        "type": "object",
503        "properties": {"message": {"type": "string", "description": "Base64-encoded message"}},
504        "required": ["message"],
505    }
506 
507    async def execute(self, ctx: ToolContext, message="", **kw) -> ToolResult:
508        if err := _fly_check(): return err
509        if not message: return ToolResult(success=False, error="'message' required")
510        try:
511            return ToolResult(success=True, output=await _wallet_request("POST", "/agent/sol/sign", {"message": message}))
512        except Exception as e:
513            return ToolResult(success=False, error=str(e))
514 
515 
516# ── Solana Transactions ──────────────────────────────────────────────────────
517 
518class WalletSolTransactionsTool(BaseTool):
519    @property
520    def name(self): return "wallet_sol_transactions"
521    @property
522    def description(self): return "Get recent Solana transaction history."
523    @property
524    def parameters(self): return {
525        "type": "object",
526        "properties": {
527            "chain": {"type": "string"}, "asset": {"type": "string"},
528            "limit": {"type": "integer"},
529        },
530    }
531 
532    async def execute(self, ctx: ToolContext, chain="solana", asset="sol", limit=20, **kw) -> ToolResult:
533        if err := _fly_check(): return err
534        try:
535            qs = f"?chain_type=solana&chain={chain}&asset={asset}&limit={limit}"
536            return ToolResult(success=True, output=await _wallet_request("GET", f"/agent/transactions{qs}"))
537        except Exception as e:
538            return ToolResult(success=False, error=str(e))
539 
540 
541# ── Get Policy ───────────────────────────────────────────────────────────────
542 
543class WalletGetPolicyTool(BaseTool):
544    @property
545    def name(self): return "wallet_get_policy"
546    @property
547    def description(self): return """Get wallet policy status.
548- enabled=false → allow-all (default)
549- enabled=true, rules=[] → deny-all
550- enabled=true, rules=[...] → rules enforced"""
551    @property
552    def parameters(self): return {
553        "type": "object",
554        "properties": {
555            "chain_type": {"type": "string", "enum": ["ethereum", "solana"], "default": "ethereum"},
556        },
557    }
558 
559    async def execute(self, ctx: ToolContext, chain_type="ethereum", **kw) -> ToolResult:
560        if err := _fly_check(): return err
561        try:
562            return ToolResult(success=True, output=await _wallet_request("GET", f"/agent/policy?chain_type={chain_type}"))
563        except Exception as e:
564            return ToolResult(success=False, error=str(e))
565 
566 
567# ── Propose Policy ───────────────────────────────────────────────────────────
568 
569class WalletProposePolicyTool(BaseTool):
570    @property
571    def name(self): return "wallet_propose_policy"
572    @property
573    def description(self): return """Propose a wallet policy update. Sends action_request to frontend for user confirmation.
574For both EVM and Solana, call TWICE (once per chain_type)."""
575    @property
576    def parameters(self): return {
577        "type": "object",
578        "properties": {
579            "chain_type": {"type": "string", "enum": ["ethereum", "solana"]},
580            "rules": {"type": "array", "description": "Privy policy rule objects", "items": {
581                "type": "object",
582                "properties": {
583                    "name": {"type": "string"}, "method": {"type": "string"},
584                    "conditions": {"type": "array", "items": {"type": "object"}},
585                    "action": {"type": "string", "enum": ["ALLOW", "DENY"]},
586                },
587            }},
588            "title": {"type": "string", "description": "Short title (shown in UI)"},
589            "description": {"type": "string", "description": "What this policy does"},
590        },
591        "required": ["chain_type", "rules", "title", "description"],
592    }
593 
594    async def execute(self, ctx: ToolContext, chain_type="", rules=None,
595                      title="", description="", **kw) -> ToolResult:
596        if not chain_type or chain_type not in ("ethereum", "solana"):
597            return ToolResult(success=False, error="chain_type must be 'ethereum' or 'solana'")
598        if rules is None:
599            return ToolResult(success=False, error="'rules' required")
600        if not title:
601            return ToolResult(success=False, error="'title' required")
602 
603        # Use system validation function
604        cleaned_rules, validation_errors = _validate_and_clean_rules(rules, chain_type)
605        if validation_errors:
606            return ToolResult(
607                success=False,
608                error="Rule validation failed:\n" + "\n".join(f"- {e}" for e in validation_errors),
609            )
610 
611        # Truncate names to Privy limit
612        for rule in cleaned_rules:
613            if isinstance(rule, dict) and "name" in rule and len(rule["name"]) > 50:
614                rule["name"] = rule["name"][:50]
615 
616        container_id = os.environ.get("FLY_MACHINE_ID", "") or os.environ.get("FLY_ALLOC_ID", "") or "local-dev"
617        action_id = f"act_{int(time.time())}_{os.urandom(4).hex()}"
618 
619        payload = {
620            "container_id": container_id,
621            "chain_type": chain_type,
622            "rules": cleaned_rules,
623        }
624 
625        streaming = getattr(ctx, "streaming", None)
626        if streaming:
627            streaming.action_request(
628                action_id=action_id,
629                action="update_wallet_policy",
630                title=title,
631                description=description or title,
632                payload=payload,
633                require_signature=True,
634            )
635            return ToolResult(success=True, output={
636                "status": "action_request_sent",
637                "action_id": action_id,
638                "message": f"Policy proposal sent. Chain: {chain_type}, Rules: {len(cleaned_rules)}.",
639            })
640        else:
641            return ToolResult(
642                success=False,
643                error="Streaming context not available — cannot send action_request.",
644            )
645