swoosh

Multi-file checklist for adding a new SwooshPermission case. Use when adding a permission, exposing a new capability that needs firewall gating, or wiring a new Scout source / tool family / API surface that requires its own grant. Encodes the enum + profile grants + docs + tool wiring + test path so nothing is forgotten.

Interact with Jupiter Lend Protocol. Read-only SDK (@jup-ag/lend-read) for querying liquidity pools, lending markets (jlTokens), and vaults. Write SDK (@jup-ag/lend) for lending (deposit/withdraw) and vault operations (deposit collateral, borrow, repay, manage positions).

Migration guide from Jupiter Metis (v1) or Ultra to Swap API v2. Use when migrating existing Jupiter swap integrations, updating base URLs, or transitioning from quote+swap-instructions to the unified build endpoint.

Use when a user mentions Jupiter token verification, VRFD eligibility, paying 1000 JUP to verify a token, submitting a verification request, or updating metadata via the Jupiter express verification flow.

Use Bags for Solana token launch planning, agent authentication, launch intent creation, and launch transaction creation through the official Bags API.

Use Flap for BNB Chain token trading, wallet and bot integrations, token-launcher flows, VaultPortal launches, deployed contract references, and Blink-style surfaces.

Use Four.meme for BNB Chain meme token launches, protocol integration, TokenManager and helper contract flows, tax-token planning, and PancakeSwap graduation context.

Use PumpPortal for Solana token creation, Pump.fun and PumpSwap trading flows, Lightning API execution planning, Local API transaction building, and live data subscriptions.

Use Pay for wallet-approved paid API calls, HTTP 402/x402/MPP providers, paid Solana or EVM RPC, live research APIs, and current data tasks where the agent should discover providers before spending.

Multi-file checklist for adding a new SwooshTool. Use when adding a tool, registering a new tool family, exposing a new agent capability, or wiring crypto/file/git/MCP tool implementations. Encodes the registrar + permission + audit + test path so nothing is forgotten.

How to triage and apply a batch of CodeRabbit review findings efficiently. Use when the user mentions "coderabbit", "code review findings", "21 findings", "fix the review", or wants to apply a batch of PR review comments. Encodes the severity-first, file-grouped order this repo uses (see recent passes of 21 findings).

Start swooshd and verify the iPhone pairing path is live. Use when starting the daemon, debugging "iOS can't reach Mac", verifying the bearer token, or checking that ActantDB came up correctly. Encodes the token-resolution order, the deny-all fallback, and the smoke-test curl.

Diagnose stdio MCP transport failures and hangs in Swoosh. Use when an MCP child process hangs, when SwooshMCP tests deadlock, when "Test run with N tests passed" prints but the runner never exits, or when stdio MCP tools fail to round-trip. Encodes the cooperative-pool deadlock pattern fixed in e087609.

Replay a SwooshFlow workflow run to debug non-determinism, tool failures, or audit divergence. Use when a workflow produced unexpected output, when "the same input gave a different result", or when investigating a /why response that points at a flow trace.

How to run the Swoosh test suite efficiently. Use when running swift test, narrowing to a single target, debugging a "hang at 100% passed" runner, or asked "did I break X". Encodes the multi-filter hang limitation, the cooperative-pool deadlock pattern fixed in e087609, and expected walltimes.

The 8 engineering rules that gate any change touching prompts, tools, permissions, audit, secrets, or crypto. Use when touching PromptBuilder, SwooshFirewall, SwooshTools, SwooshToolsets, SwooshScout, SwooshSecrets, AgentToolLoop, or any /api/* route. Encodes the privacy boundary, the humanOnly invariant, and the crypto-input ban.

How to regenerate the Xcode project from project.yml and which build command to use for each target. Use when editing project.yml, adding a target, changing signing/entitlements, building the menu-bar app, the widget extension, or the iOS app. Encodes simulator vs device flags and the GY5597YK9P signing setup.

Keep the Mac daemon and iPhone client boundary clean when changing Swoosh iOS support.

Review Swoosh tool, permission, prompt, and daemon API changes for safety regressions.

Verify Swoosh package, XcodeGen, and platform-specific build health before finalizing work.