feat: Add NEAR key management with transaction signing and policy engine

Cargo.toml

@@ -90,6 +90,13 @@ sha2 = "0.10"
 blake3 = "1"
 rand = "0.8"
 
+# NEAR key management (ed25519 signing, borsh serialization, base58 encoding)
+ed25519-dalek = { version = "2", features = ["rand_core", "zeroize"] }
+borsh = { version = "1", features = ["derive"] }
+bs58 = "0.5"
+argon2 = "0.5"
+zeroize = { version = "1", features = ["derive"] }
+
 # Docker sandbox
 bollard = "0.18"
 

src/agent/agent_loop.rs

@@ -21,6 +21,7 @@ use crate::context::JobContext;
 use crate::error::Error;
 use crate::extensions::ExtensionManager;
 use crate::history::Store;
+use crate::keys::KeyManager;
 use crate::llm::{ChatMessage, LlmProvider, Reasoning, ReasoningContext, RespondResult};
 use crate::safety::SafetyLayer;
 use crate::tools::ToolRegistry;
@@ -64,6 +65,7 @@ pub struct AgentDeps {
     pub tools: Arc<ToolRegistry>,
     pub workspace: Option<Arc<Workspace>>,
     pub extension_manager: Option<Arc<ExtensionManager>>,
+    pub key_manager: Option<Arc<KeyManager>>,
 }
 
 /// The main agent that coordinates all components.

src/channels/web/types.rs

@@ -318,6 +318,7 @@ impl WsServerMessage {
             SseEvent::Status { .. } => "status",
             SseEvent::ApprovalNeeded { .. } => "approval_needed",
             SseEvent::Error { .. } => "error",
+            SseEvent::ToolResult { .. } => "tool_result",
             SseEvent::Heartbeat => "heartbeat",
         };
         let data = serde_json::to_value(event).unwrap_or(serde_json::Value::Null);