![\"merrymen](\"web/public/merrymenlogo.png\")
\n\n \n
\n Website ·\n Docs ·\n X ·\n npm\n
\n\n# merrymen\n\n**Trading agents you never have to trust.** merrymen is a self-hosted band of\nagents for Robinhood Chain: your keys never leave your machine, and every cap\nyou set — per-trade, daily, ops/day, drawdown, key expiry — is enforced by your\naccount contract **on-chain**, not by promises. Inside that wall your band works\nSherwood 24/7 — trading Stock Tokens, farming yield, LPing — while you name your\nmerryman, chat with it and steer it from Telegram (it can even run your PC), and\nwatch every trade on a local dashboard.\n\n**The five promises:** your keys, your caps · bounded worst case · every trade\nsimulated first · fees only on profit above the high-water mark · an honest\nscoreboard.\n\n**The one rule of the house:** the model proposes, deterministic code disposes.\nNo model — the strategist, a Telegram message, a voice note — ever constructs\ncalldata, moves funds, or touches your PC without passing a closed, typed\ncommand set and the on-chain policy wall. This is the product; everything below\nis built on top of it.\n\n## Why merrymen — the moat\n\nAnyone can ship a trading agent, and platforms will ship their own. A\nfirst-party agent is **custodial by construction**: their servers, their keys,\ntheir discretion — the safety story is a terms-of-service. merrymen inverts it:\n\n- **Your machine.** The agent, its memory, and its ledger live in `~/.merrymen`.\n There is no server-side anything.\n- **Your keys.** Minted locally, backed up by you, never transmitted.\n- **The chain enforces the caps.** The session key's limits live in the account\n contract; even a fully compromised agent cannot spend past the wall.\n- **Verifiable, not claimed.** The dashboard links every address and cap to the\n block explorer, and its **prove the wall** button fires malicious intents\n (an oversized trade, a \"send everything to 0xevil\" transfer, an expired key)\n through the live policy so you can watch each one bounce.\n\nYou verify; it trades.\n\n---\n\n## The workflow, end to end\n\n1. **Install** it (one line — installs Node too if you need it).\n2. **`merrymen start`** — opens the dashboard at `localhost:3100` and looses the\n 24/7 worker.\n3. **Create your agent wallet** at `/grant` — no wallet to connect; merrymen\n mints the keys, you back them up, pick **testnet** (practice) or **mainnet**\n (real funds), and set the caps the account contract itself enforces.\n4. **Fund it** — on **mainnet**, send ETH (gas) + USDG (capital) to the account\n address. On **testnet**, gas from the faucet and nothing else: USDG sent there\n is never shown and never traded. The worker arms itself on its next tick, no\n restart.\n5. **(optional) Link Telegram** — chat with your merryman, give it a name, let it\n trade, report, alert, and control your PC — all inside the same walls.\n\nEverything lives in **`~/.merrymen`** (settings, grant, ledger, your strategies,\nyour merryman's soul). The install is disposable; upgrades never touch your data.\n\n**Ride in 2 minutes — paper mode.** Until you add a bundler key, your band trades\nin **paper mode**: approved intents fill at the *live* on-chain oracle prices\n(the Chainlink feeds Robinhood publishes for every stock token), recorded to the\nreal ledger as `PAPER` trades. The whole loop — the strategist, chat `/buy`, P&L,\npings, the journal — works with zero funds, zero faucet, zero Pimlico. Add a\nPimlico key and the same wall signs for real. Upgrade any time with\n`merrymen update` (stops the band, installs, restarts — no Windows file-lock).\n\n---\n\n## 1 · Install\n\nSelf-hosted, terminal-first. Install once, run from anywhere. No clone.\n\n**No Node yet? One line does everything** — installs Node if missing, then\nmerrymen, and puts it on PATH:\n\n```powershell\n# Windows (PowerShell)\nirm https://raw.githubusercontent.com/millw14/merrymen/main/install.ps1 | iex\n```\n```bash\n# macOS / Linux\ncurl -fsSL https://raw.githubusercontent.com/millw14/merrymen/main/install.sh | bash\n```\n\n**Already have Node 22.12+?**\n\n```bash\nnpm install -g merrymen # or: npm i -g github:millw14/merrymen\nmerrymen setup # checks node / npm / PATH, prints exact fixes\nmerrymen onboard # optional wizard: Pimlico key, strategy, basket (all skippable)\nmerrymen start # dashboard at localhost:3100 + the worker\n```\n\nRequires Node 22.12+. `merrymen setup` diagnoses the two things that trip people\nup — an old Node, and npm's global-bin folder missing from PATH.\n\n> **`merrymen: command not found`?** npm's global-bin folder isn't on PATH. Use\n> `npx merrymen start` (works everywhere), or add it once:\n> - **Windows:** `[Environment]::SetEnvironmentVariable(\"Path\", [Environment]::GetEnvironmentVariable(\"Path\",\"User\") + \";$env:APPDATA\\npm\", \"User\")` then reopen the terminal\n> - **macOS/Linux:** put `$(npm prefix -g)/bin` on your `PATH` (in `~/.zshrc` / `~/.bashrc`)\n\n> **Windows: `running scripts is disabled on this system` / `PSSecurityException`?**\n> PowerShell's default `Restricted` policy blocks npm's and merrymen's `.ps1`\n> shims. The installer now relaxes it for you; if you installed earlier, run once\n> (no admin, current user only): `Set-ExecutionPolicy -Scope CurrentUser RemoteSigned`.\n> Or just call `merrymen.cmd …` (or use cmd.exe / Git Bash) to skip the policy.\n\nThe dashboard binds to **localhost only** — it has no login and holds your\ntrading controls, so it isn't reachable from your network. To open it to a\ntrusted LAN (your phone on home WiFi), start with\n`MERRYMEN_HOST=0.0.0.0 merrymen start`.\n\n---\n\n## 2 · Create & fund your agent wallet\n\nOpen `localhost:3100/grant`. There's nothing to connect — merrymen generates a\nfresh account, shows you the owner key to **back up** (lose it and the funds are\ngone), and lets you fund it. **Pick your ground:**\n\n- **testnet · 46630** (default) — the sandbox. Free **gas** from the faucet, and\n the grant, the caps, the policy checks, the live prices and the journal all run\n for real. Two things don't: the token registry is mainnet-only, so **any USDG\n you send to testnet reads as 0 and is never used**, and the trading venues\n aren't deployed there, so swaps simulate and no-route by design. Send gas, not\n capital — paper mode is already trading a simulated book at live prices.\n- **mainnet · 4663** — **real funds.** Real USDG, real Stock Tokens, real\n execution. The page makes you acknowledge it first: keys are generated and\n stored **in plain text on your machine** (TEE custody is on the roadmap), so\n treat the account like a hot wallet — your caps are the seatbelt, start small.\n No faucet: send ETH (gas) + USDG (capital) from your own wallet or an exchange.\n\nThe caps you set — per-trade, daily, ops/day, drawdown breaker, key expiry — are\nenforced **by the account contract on every operation**, not by promises. The\nworker can tighten within them but can never widen them without a new signed\ngrant.\n\n> **Going live is one key.** To sign real trades, paste a free [Pimlico](https://dashboard.pimlico.io)\n> API key in `/settings` — merrymen builds the bundler URL for your wallet's chain\n> automatically, so it can never point at the wrong one. No key = **practice mode**:\n> real market, full policy + simulation, no signing. Advanced users can still supply\n> a full bundler URL (Alchemy or self-hosted) instead.\n\n---\n\n## 3 · Run it\n\n```bash\nmerrymen start # dashboard (localhost:3100) + the 24/7 worker\nmerrymen doctor # node / keys / RPC / bundler / grant / db diagnostics\nmerrymen status # heartbeat, grant, trades, equity\nmerrymen selftest # one policy-legal no-op through the full pipeline\nmerrymen kill # kill switch from the terminal (destroys the grant)\nmerrymen recover # sweep the account's funds to a wallet you control\n```\n\n> **Getting your funds back out.** The address you funded is an ERC-4337 **smart\n> account**, not a plain wallet — its owner key derives a *different* address, so\n> importing that key into MetaMask shows an empty wallet, not your funds (this\n> trips everyone up once). To move money out — including after a kill switch —\n> run **`merrymen recover`**: it rebuilds the account from your owner key (or a\n> backed-up key you paste) and sweeps every balance to any address you choose in\n> one signed op. It needs a bundler key, same as live trading.\n\n> **Getting a funded wallet back — without moving anything.** Killed the agent,\n> wiped the browser, or moved machines? Your smart-account address is derived from\n> the **owner key**, so the same key always reproduces the same account, funds and\n> all. Two ways back in:\n>\n> 1. **Still on the same browser?** `/grant` shows *\"this wallet isn't active\"* —\n> hit **re-arm this wallet**. One click, no key needed.\n> 2. **Fresh browser / new machine?** `/grant` → **restore a funded wallet** →\n> paste your owner key → **check this wallet** (it shows the derived address and\n> its balance so you can confirm it's the right one) → pick caps → restore. It\n> signs a brand-new session key on your existing account. **No funds move, no\n> gas is spent.**\n>\n> merrymen runs **one agent per install**. To run two funded wallets at once, give\n> each its own `MERRYMEN_HOME` (e.g. `MERRYMEN_HOME=~/.merrymen-b merrymen start`).\n\nThe worker's loop each tick: **grant sync → market safety (prices, pauses,\nsequencer) → strategy proposes → policy check → quote simulation → execute →\nrecord**. It re-reads `~/.merrymen/settings.json` every tick, so changes from the\ndashboard apply within one tick — connection changes re-arm the executor,\nstrategy changes rebuild in place; no restart. The dashboard shows live\npositions, the trade record (with simulation receipts), the event feed, and a\nkill switch; the public scoreboard is at `/scoreboard`.\n\n---\n\n## 4 · Chat with your merryman (Telegram)\n\nLink a bot and run the band from your phone — natural-language chat plus slash\ncommands, all inside the same permission walls. Telegram is a **control surface,\nnever a trade path**: every message is untrusted text that flows through the same\nparse → validate → policy wall → signed grant discipline as the strategist.\n\n```\n1. @BotFather → /newbot → copy the token\n2. localhost:3100/settings → Telegram → paste token, \"test connection\", enable\n3. Message your bot: /link (the one-time code shown in /settings)\n → you're now the owner; only allowlisted chats are obeyed\n```\n\nThere's an obvious **Chat on Telegram** button right on the dashboard (topbar +\na card) so you don't have to hunt for it.\n\nCommands work bare; with an Anthropic key, plain English does too (\"how are we\ndoing?\", \"pause everything\", \"send 20 USDG to 0x…\", \"ping me when QQQ hits 600\",\n\"why did you buy that?\"). Voice notes work as well.\n\n| command | does |\n|---|---|\n| `/status` `/positions` `/pnl` `/trades` | read the live book |\n| `/report` · `/brag` · `/why` | daily campfire report · shareable scorecard · explain the last trade |\n| `/buy ` `/sell ` | trade (passes the policy wall) |\n| `/transfer <0x…> ` | send USDG out — **always asks you to `/confirm`** |\n| `/alert > ` `/alerts` `/unalert ` | one-shot price alerts |\n| `/pause` `/resume` · `/strategy ` · `/cap ` | steer the worker (cap only tightens) |\n| `/name ` · `/soul` · `/remember ` | name it, see who it is, teach it about you |\n| `/kill` | destroy the grant, stand the band down |\n| `/help` | the full list |\n\n**It speaks first, too** (toggle in `/settings`): a ping the moment a trade lands\nor the wall turns one back; warnings when the grant nears expiry, drawdown nears\nthe breaker, or gas runs low; your price alerts; and a **daily campfire report**\nat the hour you pick.\n\n**Transfers are triple-guarded:** off by default · the grant's on-chain call\npolicy caps the amount · every transfer echoes the full recipient address and\nwaits for an explicit `/confirm` (90s). A prompt-injected \"send everything to\n0xevil\" can at worst produce a confirmation card you'll see and `/cancel`. (New\nwallets carry the transfer permission; a pre-transfer grant gets a \"re-create\nyour wallet\" reply instead.) Turn off all state-changing commands with the\n**control** toggle for read + chat only.\n\n### Remote control — your merryman runs your PC (OpenClaw-style)\n\nEnable the **remote control** section in `/settings` and your merryman can act on\nthe machine it runs on, from Telegram:\n\n| capability | what it does |\n|---|---|\n| 📸 screen · 👁️ vision | `/shot` a screenshot; ask \"what am I looking at? / read this error\" (Claude vision) |\n| 🚀 apps & web | `/open spotify`, `/open github.com` — allowlisted apps, any URL |\n| ⚙️ system | `/sys` info, volume, media keys, `/notify`, `/lock`, sleep/shutdown |\n| 📂 files · 📋 clipboard | `/ls`, `/get` inside one folder you pick; read/set the clipboard |\n| 🖥️ shell · ⌨️ keyboard | `/run` allowlisted commands; `/type`, `/key ctrl+s` |\n| 🎙️ voice · 👀 watchers | voice note → command; `/remind 20m …`, `/watch cpu>80`, `/watch file …`, `/watch proc …` |\n\n**The safety model is the point** — it's a hot wallet for your desktop:\n\n- **Off by default**, then **one capability at a time** — nothing runs unless you\n turned that group on. `/pc` shows what's enabled; the master switch off kills\n all of it instantly.\n- **Allowlists for the sharp edges**: shell runs *only* your exact pre-approved\n commands (chaining/redirects always refused); files are confined to one root\n (no `..` escape); apps to a name list.\n- **Confirm gate**: shell, keyboard, file-send, and power never fire until you\n reply `/confirm` to the exact action echoed back.\n- **Local + logged**: a chat message can only ever emit one command from a closed\n set — it can't invent a capability or smuggle a raw command past the allowlist.\n\nWindows is fully supported; macOS/Linux use the standard tools (`screencapture`,\n`open`, `pbcopy`, …) and say so where one isn't present. Voice needs an\nOpenAI-compatible transcription key (set it in the dashboard).\n\n### Your merryman has a soul\n\nEvery merryman is an individual with a name **you** give it — and it grows with\nyou. Its soul lives as plain markdown in **`~/.merrymen/soul/`** that it keeps up\nto date itself (read or edit it with any editor):\n\n| file | what it holds |\n|---|---|\n| `IDENTITY.md` | who it is — its name (`/name Will Scarlet`), born date |\n| `OWNER.md` | what it's learned about **you**, one dated line at a time |\n| `JOURNAL.md` | a first-person entry it writes at campfire time |\n\nThe longer you ride together, the closer the bond: *new companion* → *trusted\ncompanion* (a week) → *old friend* (a month) → *sworn brother-in-arms* (100\ndays), with milestone messages and a tone that warms to match. Memory is\n**context, never capability** — soul files flavor chat only; every command still\npasses the closed enum and the policy wall, and the memory sanitizer refuses\nanything address-, key-, or code-shaped, so a poisoned note can't smuggle a\nrecipient into a prompt.\n\n---\n\n## Strategies\n\nPick one in `/settings` (or `/strategy ` from Telegram; `MERRYMEN_STRATEGY`\nis the headless fallback):\n\n| name | what it does |\n|---|---|\n| `steady-basket` (default) | DCA a weighted stock basket per tick; idle cash sweeps to the Morpho vault; pulls cash back when short |\n| `weekend-gap` | Enter each leg when its Chainlink feed goes stale (market close), exit when it refreshes (open) — a strategy class that only exists on-chain |\n| `llm-strategist` | Claude proposes typed buy/sell/hold at decision windows; deterministic code validates and disposes — the model never sees an address or emits calldata. Needs an Anthropic key |\n| `even-keel` 🏹 | Keeps the basket at equal weight — trims winners, tops up laggards — to harvest mean reversion. **Merry Circle** (holder-only) |\n| `dip-hunter` 🏹 | Concentrates each tick on the basket token furthest below its rolling high. **Merry Circle** (holder-only) |\n\n### Write your own\n\nYour strategies live in **`~/.merrymen/strategies/`** — hot-reloaded on save,\ncrash-isolated, and incapable of exceeding the caps you signed (every intent\npasses shape validation → the policy wall → quote simulation → the on-chain\nsession key):\n\n```bash\nmerrymen strategy new my-bot # commented template in ~/.merrymen/strategies\n# edit it, select \"my-bot\" in /settings — done\n```\n\nDefault-export `{ name, tick(snapshot, ctx) }` — no imports needed; `ctx` injects\nthe verified registry (`ctx.tokenBySymbol.QQQ`, `ctx.CASH.USDG`,\n`ctx.UNISWAP.swapRouter02`, `ctx.usdg(10)`). See\n[strategies/README.md](./strategies/README.md) and\n[strategies/example-dip-buyer.mjs](./strategies/example-dip-buyer.mjs).\n\n### Adding your own tokens (memecoins)\n\nThe built-in registry is the issuer-backed stock tokens — curated, Chainlink-priced.\nAnything else on Robinhood Chain you add yourself in `/settings`: paste the symbol,\nthe contract address, and its decimals.\n\n**How they're priced.** There's no Chainlink feed for a memecoin, so merrymen reads\nthe Uniswap v3 pool — but a spot price on a thin pool is worth nothing: anyone with\nmoderate capital can push it for a block, and that number would feed your equity,\nyour P&L and your drawdown breaker. So:\n\n- **Valuation uses a 15-minute TWAP**, not spot. Moving it means holding the price\n away from the market for the whole window and eating the arbitrage.\n- **Two guards, both yours to set.** A minimum pool depth (default $25,000) and a\n maximum spot-vs-average gap (default 5%). Live pools on this chain run from ~$3k\n to ~$1.2M, so the default admits the deep end and refuses the rest.\n- **A refusal is the feature.** When a pool is too thin or is being pushed right\n now, the token stays *unpriced* and merrymen says why. Your agent keeps trading\n — you can always sell out — but equity, P&L and the breaker pause rather than\n running on a number nobody should trust.\n- **Most memecoins here price through WETH.** About three quarters of the chain's\n pools quote against WETH rather than USDG, so the route is usually two hops. Its\n depth is the *shallower* leg — a deep WETH/USDG pool doesn't make a $3k memecoin\n pool safe.\n\nAnything valued this way is marked **pool px** in the dashboard and in `/status`,\nbecause it isn't the same quality of claim as a Chainlink feed and shouldn't look\nlike one.\n\nThree explicit steps, and each one means something different:\n\n1. **Add it** in `/settings` — \"know about this.\" Your agent reads the balance,\n prices it, and shows it in your book. It does not trade it.\n2. **Select it in the basket** — \"trade this.\" Same act as picking a stock.\n3. **Re-sign at `/grant`** — the tradable list is baked into the session key you\n signed, so widening it takes a signature. That's the wall doing its job, not a\n bug. Free, instant, same wallet, same address, same funds, same caps.\n\nUntil step 3, `/settings`, `/grant` and the event feed all say plainly which\ntokens your key can't sell — you never find out from a reverted trade.\n\nMost memecoins here have no direct USDG pool, so swaps route through WETH\nautomatically (`USDG → WETH → TOKEN`). The router holds the middle leg, so this\nneeds no extra approval and no extra re-sign.\n\n### Keep it running\n\n```bash\nmerrymen service install\n```\n\nStarts your merryman when you log in, and brings it back after a reboot. On\nWindows it uses Task Scheduler where it can and the Startup folder where that\nwould need admin — a trading agent shouldn't be asking for elevation. macOS gets\na launchd agent, Linux a `systemd --user` unit with lingering enabled. All\nuser-scoped, all removed completely by `merrymen service uninstall`, and\n`merrymen doctor` tells you whether it's installed *and* whether it's actually\nrunning — those are different questions.\n\n**What it does not do: run while the computer is off.** Nothing does except a\nmachine that stays on. If you want that, it's your own always-on box — we're not\ngoing to hold your keys to do it for you.\n\nThe desktop app has the same thing as a tray toggle.\n\n### Never a position you can't exit\n\nBuying spends USDG, and every grant can approve USDG generically. **Selling needs\na per-token approval sealed into your signature.** So a token with a live pool but\nno approval buys fine and can never be sold — the exit reverts, with your money\ninside it.\n\nmerrymen refuses the buy. If your key can't sell something, it won't buy it, and\nit tells you which symbols and why. A missed trade is recoverable; a position with\nno way out is not. Re-sign at `/grant` to widen the list.\n\nThis is why the shipped allowlist is verified in **both directions** against live\npools — re-check it yourself any time:\n\n```bash\nnpx tsx scripts/probe-tradability.mts\n```\n\n---\n\n## $MERRYMEN — the Merry Circle\n\nmerrymen is **free and open to everyone**, whether you hold the token or not. Holding\n**$MERRYMEN** (on Robinhood Chain — [the token page](https://merrymen.dev/token)) just adds\nholder perks — it buys *access*, never the product. **Utility only: no price, no returns, no\nbuyback/burn.**\n\nPaste the wallet you hold $MERRYMEN in into the dashboard's **Merry Circle** panel (or set\n`holderAddress` in `/settings`). merrymen reads that balance **read-only** — it never asks for or\ntouches the wallet's keys — and sets your tier:\n\n| tier | hold | perk |\n|---|---|---|\n| 🌱 **Villager of Sherwood** | 10k+ | **10% off** the platform performance fee · badge · 1× roadmap vote |\n| 🏹 **Merry Man** | 100k+ | **25% off** · the bonus strategy pack (`even-keel`, `dip-hunter`) · 3× vote |\n| 👑 **Lord of Sherwood** | 1M+ | **50% off** — the lowest we offer · every bonus strategy · 10× vote |\n\nThe fee discount is real: merrymen's performance fee is only ever taken on profit above your\nhigh-water mark, and your tier lowers it in the **actual accrual** (shown live in the panel), not\njust in the copy. Holders also steer the roadmap — which tokens join the basket, which strategies\nship — weighted by tier ([governance](https://merrymen.dev/governance)). Thresholds live in\n[`packages/core/src/token.ts`](./packages/core/src/token.ts).\n\n---\n\n## For developers\n\n\nrepo layout · clone-dev · env vars · tests
\n\n### Layout\n- `packages/core` — chain constants, token registry, shared types. Every address\n is probed on-chain before it lands here.\n- `web` — Next.js dashboard: onboarding, the create-wallet/grant flow, live\n positions, trade record (simulation receipts), kill switch, scoreboard,\n settings + all APIs.\n- `worker` — Node runtime: grant sync → scheduler → strategy tick → policy check\n → simulate → execute → record; the Telegram bridge + PC-control layer; the\n backtest harness (`src/backtest.ts`) that runs real strategies through the real\n policy layer over synthetic prices.\n- `contracts` — the on-chain drawdown breaker: `BreakerRegistry` +\n `KernelBreakerPolicy` (Kernel v3 module type 5 — fails every UserOp once\n tripped). `npm test -w @merrymen/contracts`; deployment waits on a funded key.\n Until deployed, the breaker is worker-enforced.\n\n### Develop from a clone\n```bash\ngit clone https://github.com/millw14/merrymen && cd merrymen\nnpm install # prepare hook builds the dashboard\nnpm run onboard && npm start\n# or run halves separately: npm run dev:web · npm run dev:worker\nnpm run typecheck && npm test\n```\n\n### Configuration\nThe dashboard `/settings` is the source of truth (Anthropic/Rialto/Telegram keys,\nbundler + RPC URLs, strategy + every trading knob, the Telegram + PC-control\ntoggles and allowlists). Saved to `~/.merrymen/settings.json`; secrets are masked\nto their last 4 and never echo back to the browser. Precedence:\n**settings file > env var > default.** Env vars are the headless fallback:\n\n| var | default | meaning |\n|---|---|---|\n| `MERRYMEN_HOST` | `127.0.0.1` | dashboard bind host; set `0.0.0.0` for trusted-LAN access |\n| `MERRYMEN_BUNDLER_API_KEY` | — | Pimlico API key; the bundler URL is built for your grant's chain automatically |\n| `MERRYMEN_BUNDLER_URL` | — | advanced: full 4337 bundler RPC (overrides the key); without either, execution is stubbed |\n| `MERRYMEN_SWAP_VENUE` | `uniswap` | `uniswap` = full quote→swap via SwapRouter02; `rialto` = approval-only until API onboarding |\n| `MERRYMEN_SLIPPAGE_BPS` | `100` | max slippage vs the QuoterV2 simulation |\n| `MERRYMEN_GRANT_FILE` | `~/.merrymen/grant.json` | grant handoff written by the web app |\n| `MERRYMEN_STRATEGY` | `steady-basket` | strategy name (see table above) |\n| `MERRYMEN_PERF_FEE_BPS` | `1000` | performance fee on profit above the high-water mark (accrual-only) |\n| `MERRYMEN_BREAKER_ADDRESS` | — | deployed BreakerRegistry; a tripped breaker halts all intents |\n| `MERRYMEN_RIALTO_API_KEY` | — | Rialto integrator key; enables the full quote→swap leg |\n| `ANTHROPIC_API_KEY` | — | LLM strategist driver + Telegram natural-language chat + vision |\n| `MERRYMEN_TELEGRAM_BOT_TOKEN` | — | @BotFather token; enables the Telegram bridge (all other Telegram + PC-control settings live in `/settings`) |\n\n`npm test` covers the policy mirror, strategies, venue math (slippage, quote\nselection, calldata), the ERC-8056 invariant that a stock split is not a crash,\nand the Telegram + PC-control safety layer (allowlist enforcement, path-traversal\nrejection, capability gating, confirm-park, prompt-injection → no-op).\n\n\n","readmeFilename":"README.md"}