v0.14.4

Highlights

• Pre-sign gate hardening — prepare_custom_call gains a value-exfil selector classifier (#659); setApprovalForAll on uncurated destinations now selector-decoded instead of opaque (#658); pair_ledger_* mandates per-address device verification in tool instructions (#660).
• preview_send enriched — surfaces pinned network fee + EIP-1559 baseFee/priorityFee breakdown so the agent can present total cost before pre-sign checks (#661).
• NFT floor-sweep — new get_nft_listings tool returns ranked floor candidates per collection (#657).
• Glama build repair (round 2) — .npmrc + pnpm.overrides make Glama's auto-generated pnpm Dockerfile build succeed alongside npm (#663). Companion to v0.14.3's project Dockerfile fix.
• Docs — codifies the per-protocol vs prepare_custom_call cutoff rule in CLAUDE.md (#662).

Included PRs

• #657 feat(nft): add get_nft_listings for ranked floor-sweep candidates
• #658 feat(decode): selector-only partial decode for setApprovalForAll on uncurated destinations
• #659 feat(custom-call): selector classifier for value-exfil patterns
• #660 feat(pair_ledger): mandate per-address device verification in instructions
• #661 feat(preview): surface pinned network fee + EIP-1559 breakdown at preview_send
• #662 docs(CLAUDE.md): codify per-protocol vs. prepare_custom_call cutoff rule
• #663 fix(deps): make Glama's pnpm build succeed alongside npm
• #664 chore(release): 0.14.4