@alchemy/cli 0.7.2-alpha.21 → 0.7.2-alpha.29

package/dist/{chunk-5LCA2B6S.js → chunk-K6V3R7SH.js}

@@ -4,7 +4,7 @@ import {
   configDir,
   load,
   save
-} from "./chunk-BAZ4NGOD.js";
+} from "./chunk-JUCUKTP3.js";
 import {
   CLIError,
   ErrorCode,
@@ -29,11 +29,275 @@ import {
   parseBaseURLOverride,
   redactSensitiveText,
   verbose
-} from "./chunk-KLPWJFWP.js";
+} from "./chunk-2BALTY22.js";
 
 // src/lib/resolve.ts
 import { readFileSync as readFileSync2 } from "fs";
 
+// src/lib/networks.ts
+var TESTNET_TOKEN_RE = /(testnet|sepolia|holesky|hoodi|devnet|minato|amoy|fuji|saigon|cardona|aeneid|curtis|chiado|cassiopeia|blaze|ropsten|signet|mocha|fam|bepolia)$/i;
+var FAMILY_ALIASES = {
+  arb: "Arbitrum",
+  arbnova: "Arbitrum Nova",
+  avax: "Avalanche",
+  bnb: "BNB Smart Chain",
+  eth: "Ethereum",
+  opt: "OP Mainnet",
+  polygonzkevm: "Polygon zkEVM"
+};
+var NAME_ALIASES = {
+  arb: "Arbitrum",
+  avax: "Avalanche",
+  bnb: "BNB",
+  eth: "Ethereum",
+  opbnb: "opBNB",
+  opt: "OP Mainnet",
+  sui: "SUI",
+  xmtp: "XMTP",
+  zksync: "ZKsync"
+};
+var RPC_NETWORK_IDS = [
+  "abstract-mainnet",
+  "abstract-testnet",
+  "adi-mainnet",
+  "adi-testnet",
+  "alchemy-internal",
+  "alchemy-sepolia",
+  "alchemyarb-fam",
+  "alchemyarb-sepolia",
+  "alterscope-mainnet",
+  "anime-mainnet",
+  "anime-sepolia",
+  "apechain-curtis",
+  "apechain-mainnet",
+  "aptos-mainnet",
+  "aptos-testnet",
+  "arb-mainnet",
+  "arb-sepolia",
+  "arbnova-mainnet",
+  "arc-testnet",
+  "astar-mainnet",
+  "avax-fuji",
+  "avax-mainnet",
+  "base-mainnet",
+  "base-sepolia",
+  "berachain-bepolia",
+  "berachain-mainnet",
+  "bitcoin-mainnet",
+  "bitcoin-signet",
+  "bitcoin-testnet",
+  "blast-mainnet",
+  "blast-sepolia",
+  "bnb-mainnet",
+  "bnb-testnet",
+  "bob-mainnet",
+  "bob-sepolia",
+  "boba-mainnet",
+  "boba-sepolia",
+  "botanix-mainnet",
+  "botanix-testnet",
+  "celestiabridge-mainnet",
+  "celestiabridge-mocha",
+  "celo-mainnet",
+  "celo-sepolia",
+  "citrea-mainnet",
+  "citrea-testnet",
+  "clankermon-mainnet",
+  "commons-mainnet",
+  "crossfi-mainnet",
+  "crossfi-testnet",
+  "degen-mainnet",
+  "degen-sepolia",
+  "earnm-mainnet",
+  "earnm-sepolia",
+  "edge-mainnet",
+  "edge-testnet",
+  "eth-holesky",
+  "eth-holeskybeacon",
+  "eth-hoodi",
+  "eth-hoodibeacon",
+  "eth-mainnet",
+  "eth-mainnetbeacon",
+  "eth-sepolia",
+  "eth-sepoliabeacon",
+  "flow-mainnet",
+  "flow-testnet",
+  "frax-hoodi",
+  "frax-mainnet",
+  "galactica-cassiopeia",
+  "galactica-mainnet",
+  "gensyn-mainnet",
+  "gensyn-testnet",
+  "gnosis-chiado",
+  "gnosis-mainnet",
+  "humanity-mainnet",
+  "humanity-testnet",
+  "hyperliquid-mainnet",
+  "hyperliquid-testnet",
+  "ink-mainnet",
+  "ink-sepolia",
+  "lens-mainnet",
+  "lens-sepolia",
+  "linea-mainnet",
+  "linea-sepolia",
+  "mantle-mainnet",
+  "mantle-sepolia",
+  "megaeth-mainnet",
+  "megaeth-testnet",
+  "metis-mainnet",
+  "mode-mainnet",
+  "mode-sepolia",
+  "monad-mainnet",
+  "monad-testnet",
+  "moonbeam-mainnet",
+  "mythos-mainnet",
+  "opbnb-mainnet",
+  "opbnb-testnet",
+  "openloot-sepolia",
+  "opt-mainnet",
+  "opt-sepolia",
+  "plasma-mainnet",
+  "plasma-testnet",
+  "polygon-amoy",
+  "polygon-mainnet",
+  "polygonzkevm-cardona",
+  "polygonzkevm-mainnet",
+  "polynomial-mainnet",
+  "polynomial-sepolia",
+  "race-mainnet",
+  "race-sepolia",
+  "risa-testnet",
+  "rise-testnet",
+  "ronin-mainnet",
+  "ronin-saigon",
+  "rootstock-mainnet",
+  "rootstock-testnet",
+  "scroll-mainnet",
+  "scroll-sepolia",
+  "sei-mainnet",
+  "sei-testnet",
+  "settlus-mainnet",
+  "settlus-septestnet",
+  "shape-mainnet",
+  "shape-sepolia",
+  "solana-devnet",
+  "solana-mainnet",
+  "soneium-mainnet",
+  "soneium-minato",
+  "sonic-blaze",
+  "sonic-mainnet",
+  "sonic-testnet",
+  "stable-mainnet",
+  "stable-testnet",
+  "standard-mainnet",
+  "starknet-mainnet",
+  "starknet-sepolia",
+  "story-aeneid",
+  "story-mainnet",
+  "sui-mainnet",
+  "sui-testnet",
+  "superseed-mainnet",
+  "superseed-sepolia",
+  "synd-mainnet",
+  "syndicate-manchego",
+  "tea-sepolia",
+  "tempo-testnet",
+  "tron-mainnet",
+  "tron-testnet",
+  "unichain-mainnet",
+  "unichain-sepolia",
+  "unite-mainnet",
+  "unite-testnet",
+  "worldchain-mainnet",
+  "worldchain-sepolia",
+  "worldl3-devnet",
+  "worldmobile-devnet",
+  "worldmobile-testnet",
+  "worldmobilechain-mainnet",
+  "xmtp-mainnet",
+  "xmtp-ropsten",
+  "xprotocol-mainnet",
+  "zetachain-mainnet",
+  "zetachain-testnet",
+  "zksync-mainnet",
+  "zksync-sepolia",
+  "zora-mainnet",
+  "zora-sepolia"
+];
+function isTestnetNetwork(id) {
+  return TESTNET_TOKEN_RE.test(id);
+}
+function tokenToName(token) {
+  const alias = NAME_ALIASES[token];
+  if (alias) return alias;
+  return token.charAt(0).toUpperCase() + token.slice(1);
+}
+function toFamily(id) {
+  const [head] = id.split("-");
+  return FAMILY_ALIASES[head] ?? tokenToName(head);
+}
+function toDisplayName(id) {
+  return id.split("-").map((part) => tokenToName(part)).join(" ");
+}
+function toHttpsUrlTemplate(id) {
+  const domain = getBaseDomain();
+  if (id === "starknet-mainnet" || id === "starknet-sepolia") {
+    return `https://${id}.g.${domain}/starknet/version/rpc/v0_10/{apiKey}`;
+  }
+  return `https://${id}.g.${domain}/v2/{apiKey}`;
+}
+function getRPCNetworks() {
+  return RPC_NETWORK_IDS.map((id) => ({
+    id,
+    name: toDisplayName(id),
+    family: toFamily(id),
+    isTestnet: isTestnetNetwork(id),
+    httpsUrlTemplate: toHttpsUrlTemplate(id)
+  }));
+}
+function getRPCNetworkIds() {
+  return [...RPC_NETWORK_IDS];
+}
+var NATIVE_TOKEN_SYMBOLS = {
+  eth: "ETH",
+  arb: "ETH",
+  arbnova: "ETH",
+  opt: "ETH",
+  base: "ETH",
+  zksync: "ETH",
+  scroll: "ETH",
+  blast: "ETH",
+  linea: "ETH",
+  zora: "ETH",
+  shape: "ETH",
+  polygon: "POL",
+  polygonzkevm: "ETH",
+  bnb: "BNB",
+  opbnb: "BNB",
+  avax: "AVAX",
+  solana: "SOL",
+  starknet: "ETH",
+  fantom: "FTM",
+  metis: "METIS",
+  mantle: "MNT",
+  celo: "CELO",
+  gnosis: "xDAI",
+  frax: "frxETH",
+  worldchain: "ETH",
+  berachain: "BERA",
+  flow: "FLOW",
+  rootstock: "RBTC",
+  zetachain: "ZETA",
+  sui: "SUI"
+};
+function isSolanaNetwork(networkId) {
+  return networkId.startsWith("solana-");
+}
+function nativeTokenSymbol(networkId) {
+  const prefix = networkId.replace(/-(mainnet|testnet|sepolia|holesky|hoodi|devnet|amoy|fuji|cardona|saigon|chiado|signet|mocha|blaze|curtis|bepolia).*$/, "");
+  return NATIVE_TOKEN_SYMBOLS[prefix] ?? "ETH";
+}
+
 // src/lib/client.ts
 var Client = class _Client {
   apiKey;
@@ -49,6 +313,11 @@ var Client = class _Client {
     if (this.rpcBaseURLOverride()) {
       return;
     }
+    if (!getRPCNetworkIds().includes(network)) {
+      throw errInvalidArgs(
+        `Unknown network '${network}'. Run 'alchemy evm network list' to see available networks.`
+      );
+    }
     const domain = getBaseDomain();
     const hostname = `${network}.g.${domain}`;
     let parsed;
@@ -346,516 +615,252 @@ var X402Client = class _X402Client {
     if (!resp.ok) {
       const text = await resp.text().catch(() => "");
       throw errNetwork(`HTTP ${resp.status}: ${text}`);
-    }
-    return resp.json();
-  }
-  async doFetch(url, init) {
-    return fetchWithTimeout(url, init);
-  }
-  async parsePaymentError(resp) {
-    const text = await resp.text().catch(() => "");
-    try {
-      const body = JSON.parse(text);
-      const reason = body?.extensions?.paymentError?.info?.reason;
-      const message = body?.extensions?.paymentError?.info?.message;
-      const payer = body?.extensions?.paymentError?.info?.payer;
-      if (reason === "insufficient_funds") {
-        const network = body?.accepts?.[0]?.network;
-        const asset = body?.accepts?.[0]?.extra?.name ?? "USDC";
-        const networkLabel = network === "eip155:8453" ? "Base" : network ?? "the payment network";
-        return new CLIError(
-          ErrorCode.PAYMENT_REQUIRED,
-          `Insufficient ${asset} balance on ${networkLabel}. ${message ?? ""}`.trim(),
-          `Fund wallet ${payer ?? ""} with ${asset} on ${networkLabel} to use x402.`.trim()
-        );
-      }
-      return new CLIError(
-        ErrorCode.PAYMENT_REQUIRED,
-        `x402 payment failed: ${message || body?.error || text}`
-      );
-    } catch {
-      return new CLIError(
-        ErrorCode.PAYMENT_REQUIRED,
-        `x402 payment failed: ${text}`
-      );
-    }
-  }
-  async handleAuthAndPayment(resp, retries) {
-    if (resp.status === 401) {
-      const detail = await resp.text().catch(() => "");
-      if (detail.includes("MESSAGE_EXPIRED")) {
-        return retries.authRetry();
-      }
-      throw new CLIError(
-        ErrorCode.AUTH_REQUIRED,
-        `x402 authentication failed: ${detail || "unauthorized"}`,
-        "Check your wallet key and try again."
-      );
-    }
-    if (resp.status === 402) {
-      const paymentRequiredHeader = resp.headers.get("payment-required");
-      if (!paymentRequiredHeader) {
-        throw new CLIError(
-          ErrorCode.PAYMENT_REQUIRED,
-          "x402 payment required but no Payment-Required header received."
-        );
-      }
-      const paymentSignature = await createPayment({
-        privateKey: this.privateKey,
-        paymentRequiredHeader
-      });
-      return retries.paymentRetry(paymentSignature);
-    }
-    return resp;
-  }
-};
-
-// src/lib/admin-client.ts
-var STAGING_ADMIN_API_HOST = "admin-api.alchemypreview.com";
-var AdminClient = class _AdminClient {
-  static get ADMIN_API_HOST() {
-    return `admin-api.${getBaseDomain()}`;
-  }
-  // Test/debug only: used by mock E2E to route admin requests locally.
-  static ADMIN_API_BASE_URL_ENV = "ALCHEMY_ADMIN_API_BASE_URL";
-  credential;
-  constructor(credential) {
-    if (typeof credential === "string") {
-      this.validateAccessKey(credential);
-      this.credential = { type: "access_key", key: credential };
-    } else {
-      if (credential.type === "access_key") {
-        this.validateAccessKey(credential.key);
-      } else if (!credential.token.trim()) {
-        throw errAuthRequired();
-      }
-      this.credential = credential;
-    }
-  }
-  baseURL() {
-    const override = this.baseURLOverride();
-    if (override) return override.toString().replace(/\/$/, "");
-    return `https://admin-api.${getBaseDomain()}`;
-  }
-  allowedHosts() {
-    const hosts = /* @__PURE__ */ new Set([_AdminClient.ADMIN_API_HOST]);
-    const override = this.baseURLOverride();
-    if (override) hosts.add(override.hostname);
-    return hosts;
-  }
-  allowInsecureTransport(hostname) {
-    return isLocalhost(hostname);
-  }
-  baseURLOverride() {
-    return parseBaseURLOverride(_AdminClient.ADMIN_API_BASE_URL_ENV, {
-      allowedHostnames: [STAGING_ADMIN_API_HOST]
-    });
-  }
-  validateAccessKey(accessKey) {
-    if (!accessKey.trim() || /\s/.test(accessKey)) {
-      throw errInvalidAccessKey();
-    }
-  }
-  assertSafeRequestTarget(url) {
-    let parsed;
-    try {
-      parsed = new URL(url);
-    } catch {
-      throw errInvalidArgs("Invalid admin API URL.");
-    }
-    if (!this.allowedHosts().has(parsed.hostname)) {
-      throw errInvalidArgs(`Refusing to send credentials to unexpected host: ${parsed.hostname}`);
-    }
-    if (parsed.protocol !== "https:" && !this.allowInsecureTransport(parsed.hostname)) {
-      throw errInvalidArgs("Refusing to send credentials over non-HTTPS connection.");
-    }
-  }
-  async request(method, path, body) {
-    const url = `${this.baseURL()}${path}`;
-    debug(`${method} ${url}`);
-    this.assertSafeRequestTarget(url);
-    const resp = await fetchWithTimeout(url, {
-      method,
-      redirect: "error",
-      headers: {
-        Authorization: `Bearer ${this.credential.type === "access_key" ? this.credential.key : this.credential.token}`,
-        "Content-Type": "application/json",
-        Accept: "application/json"
-      },
-      ...body !== void 0 && { body: JSON.stringify(body) }
-    });
-    if (resp.status === 401) {
-      debug(`401 Unauthorized from ${url}`);
-      throw errInvalidAccessKey();
-    }
-    if (resp.status === 403) {
-      const detail = await resp.text().catch(() => "");
-      let reason;
-      try {
-        const parsed = JSON.parse(detail);
-        reason = parsed?.message || parsed?.error?.message || parsed?.error || void 0;
-      } catch {
-        reason = detail || void 0;
-      }
-      throw errAccessDenied(typeof reason === "string" ? reason : void 0);
-    }
-    if (resp.status === 404) {
-      const text = await resp.text().catch(() => "");
-      throw errNotFound(text || path);
-    }
-    if (resp.status === 429) throw errRateLimited();
-    if (!resp.ok) {
-      const text = await resp.text().catch(() => "");
-      throw errAdminAPI(resp.status, text);
-    }
-    return resp.json();
-  }
-  async listChains() {
-    const result = await this.request("GET", "/v1/chains");
-    const chains = (Array.isArray(result.data) ? result.data : void 0) ?? (!Array.isArray(result.data) ? result.data?.networks : void 0) ?? (!Array.isArray(result.data) ? result.data?.chains : void 0) ?? result.networks ?? result.chains;
-    if (!Array.isArray(chains)) {
-      throw errAdminAPI(200, "Unexpected response shape for /v1/chains.");
-    }
-    return chains;
-  }
-  async listApps(opts) {
-    const params = new URLSearchParams();
-    if (opts?.cursor) params.set("cursor", opts.cursor);
-    if (opts?.limit) params.set("limit", String(opts.limit));
-    const qs = params.toString();
-    const resp = await this.request(
-      "GET",
-      `/v1/apps${qs ? `?${qs}` : ""}`
-    );
-    return resp.data;
-  }
-  async listAllApps(opts) {
-    const apps = [];
-    const seenCursors = /* @__PURE__ */ new Set();
-    let cursor;
-    let pages = 0;
-    do {
-      const page = await this.listApps({
-        ...cursor && { cursor },
-        ...opts?.limit !== void 0 && { limit: opts.limit }
-      });
-      pages += 1;
-      apps.push(...page.apps);
-      cursor = page.cursor;
-      if (cursor && seenCursors.has(cursor)) break;
-      if (cursor) seenCursors.add(cursor);
-    } while (cursor);
-    return { apps, pages };
-  }
-  async getApp(id) {
-    const resp = await this.request("GET", `/v1/apps/${id}`);
-    return resp.data;
-  }
-  async createApp(opts) {
-    const resp = await this.request("POST", "/v1/apps", {
-      name: opts.name,
-      chainNetworks: opts.networks,
-      ...opts.description && { description: opts.description },
-      ...opts.products && { products: opts.products }
-    });
-    return resp.data;
-  }
-  async deleteApp(id) {
-    await this.request("DELETE", `/v1/apps/${id}`);
-  }
-  async updateApp(id, opts) {
-    const resp = await this.request("PATCH", `/v1/apps/${id}`, opts);
-    return resp.data;
-  }
-  async updateNetworkAllowlist(id, networks) {
-    const resp = await this.request("PUT", `/v1/apps/${id}/networks`, {
-      chainNetworks: networks
-    });
-    return resp.data;
-  }
-  async updateAddressAllowlist(id, addresses) {
-    const resp = await this.request("PUT", `/v1/apps/${id}/address-allowlist`, {
-      addressAllowlist: addresses
-    });
-    return resp.data;
-  }
-  async updateOriginAllowlist(id, origins) {
-    const resp = await this.request("PUT", `/v1/apps/${id}/origin-allowlist`, {
-      originAllowlist: origins
-    });
-    return resp.data;
+    }
+    return resp.json();
   }
-  async updateIpAllowlist(id, ips) {
-    const resp = await this.request("PUT", `/v1/apps/${id}/ip-allowlist`, {
-      ipAllowlist: ips
-    });
-    return resp.data;
+  async doFetch(url, init) {
+    return fetchWithTimeout(url, init);
   }
-};
-
-// src/lib/networks.ts
-var TESTNET_TOKEN_RE = /(testnet|sepolia|holesky|hoodi|devnet|minato|amoy|fuji|saigon|cardona|aeneid|curtis|chiado|cassiopeia|blaze|ropsten|signet|mocha|fam|bepolia)$/i;
-var FAMILY_ALIASES = {
-  arb: "Arbitrum",
-  arbnova: "Arbitrum Nova",
-  avax: "Avalanche",
-  bnb: "BNB Smart Chain",
-  eth: "Ethereum",
-  opt: "OP Mainnet",
-  polygonzkevm: "Polygon zkEVM"
-};
-var NAME_ALIASES = {
-  arb: "Arbitrum",
-  avax: "Avalanche",
-  bnb: "BNB",
-  eth: "Ethereum",
-  opbnb: "opBNB",
-  opt: "OP Mainnet",
-  sui: "SUI",
-  xmtp: "XMTP",
-  zksync: "ZKsync"
-};
-var RPC_NETWORK_IDS = [
-  "abstract-mainnet",
-  "abstract-testnet",
-  "adi-mainnet",
-  "adi-testnet",
-  "alchemy-internal",
-  "alchemy-sepolia",
-  "alchemyarb-fam",
-  "alchemyarb-sepolia",
-  "alterscope-mainnet",
-  "anime-mainnet",
-  "anime-sepolia",
-  "apechain-curtis",
-  "apechain-mainnet",
-  "aptos-mainnet",
-  "aptos-testnet",
-  "arb-mainnet",
-  "arb-sepolia",
-  "arbnova-mainnet",
-  "arc-testnet",
-  "astar-mainnet",
-  "avax-fuji",
-  "avax-mainnet",
-  "base-mainnet",
-  "base-sepolia",
-  "berachain-bepolia",
-  "berachain-mainnet",
-  "bitcoin-mainnet",
-  "bitcoin-signet",
-  "bitcoin-testnet",
-  "blast-mainnet",
-  "blast-sepolia",
-  "bnb-mainnet",
-  "bnb-testnet",
-  "bob-mainnet",
-  "bob-sepolia",
-  "boba-mainnet",
-  "boba-sepolia",
-  "botanix-mainnet",
-  "botanix-testnet",
-  "celestiabridge-mainnet",
-  "celestiabridge-mocha",
-  "celo-mainnet",
-  "celo-sepolia",
-  "citrea-mainnet",
-  "citrea-testnet",
-  "clankermon-mainnet",
-  "commons-mainnet",
-  "crossfi-mainnet",
-  "crossfi-testnet",
-  "degen-mainnet",
-  "degen-sepolia",
-  "earnm-mainnet",
-  "earnm-sepolia",
-  "edge-mainnet",
-  "edge-testnet",
-  "eth-holesky",
-  "eth-holeskybeacon",
-  "eth-hoodi",
-  "eth-hoodibeacon",
-  "eth-mainnet",
-  "eth-mainnetbeacon",
-  "eth-sepolia",
-  "eth-sepoliabeacon",
-  "flow-mainnet",
-  "flow-testnet",
-  "frax-hoodi",
-  "frax-mainnet",
-  "galactica-cassiopeia",
-  "galactica-mainnet",
-  "gensyn-mainnet",
-  "gensyn-testnet",
-  "gnosis-chiado",
-  "gnosis-mainnet",
-  "humanity-mainnet",
-  "humanity-testnet",
-  "hyperliquid-mainnet",
-  "hyperliquid-testnet",
-  "ink-mainnet",
-  "ink-sepolia",
-  "lens-mainnet",
-  "lens-sepolia",
-  "linea-mainnet",
-  "linea-sepolia",
-  "mantle-mainnet",
-  "mantle-sepolia",
-  "megaeth-mainnet",
-  "megaeth-testnet",
-  "metis-mainnet",
-  "mode-mainnet",
-  "mode-sepolia",
-  "monad-mainnet",
-  "monad-testnet",
-  "moonbeam-mainnet",
-  "mythos-mainnet",
-  "opbnb-mainnet",
-  "opbnb-testnet",
-  "openloot-sepolia",
-  "opt-mainnet",
-  "opt-sepolia",
-  "plasma-mainnet",
-  "plasma-testnet",
-  "polygon-amoy",
-  "polygon-mainnet",
-  "polygonzkevm-cardona",
-  "polygonzkevm-mainnet",
-  "polynomial-mainnet",
-  "polynomial-sepolia",
-  "race-mainnet",
-  "race-sepolia",
-  "risa-testnet",
-  "rise-testnet",
-  "ronin-mainnet",
-  "ronin-saigon",
-  "rootstock-mainnet",
-  "rootstock-testnet",
-  "scroll-mainnet",
-  "scroll-sepolia",
-  "sei-mainnet",
-  "sei-testnet",
-  "settlus-mainnet",
-  "settlus-septestnet",
-  "shape-mainnet",
-  "shape-sepolia",
-  "solana-devnet",
-  "solana-mainnet",
-  "soneium-mainnet",
-  "soneium-minato",
-  "sonic-blaze",
-  "sonic-mainnet",
-  "sonic-testnet",
-  "stable-mainnet",
-  "stable-testnet",
-  "standard-mainnet",
-  "starknet-mainnet",
-  "starknet-sepolia",
-  "story-aeneid",
-  "story-mainnet",
-  "sui-mainnet",
-  "sui-testnet",
-  "superseed-mainnet",
-  "superseed-sepolia",
-  "synd-mainnet",
-  "syndicate-manchego",
-  "tea-sepolia",
-  "tempo-testnet",
-  "tron-mainnet",
-  "tron-testnet",
-  "unichain-mainnet",
-  "unichain-sepolia",
-  "unite-mainnet",
-  "unite-testnet",
-  "worldchain-mainnet",
-  "worldchain-sepolia",
-  "worldl3-devnet",
-  "worldmobile-devnet",
-  "worldmobile-testnet",
-  "worldmobilechain-mainnet",
-  "xmtp-mainnet",
-  "xmtp-ropsten",
-  "xprotocol-mainnet",
-  "zetachain-mainnet",
-  "zetachain-testnet",
-  "zksync-mainnet",
-  "zksync-sepolia",
-  "zora-mainnet",
-  "zora-sepolia"
-];
-function isTestnetNetwork(id) {
-  return TESTNET_TOKEN_RE.test(id);
-}
-function tokenToName(token) {
-  const alias = NAME_ALIASES[token];
-  if (alias) return alias;
-  return token.charAt(0).toUpperCase() + token.slice(1);
-}
-function toFamily(id) {
-  const [head] = id.split("-");
-  return FAMILY_ALIASES[head] ?? tokenToName(head);
-}
-function toDisplayName(id) {
-  return id.split("-").map((part) => tokenToName(part)).join(" ");
-}
-function toHttpsUrlTemplate(id) {
-  const domain = getBaseDomain();
-  if (id === "starknet-mainnet" || id === "starknet-sepolia") {
-    return `https://${id}.g.${domain}/starknet/version/rpc/v0_10/{apiKey}`;
+  async parsePaymentError(resp) {
+    const text = await resp.text().catch(() => "");
+    try {
+      const body = JSON.parse(text);
+      const reason = body?.extensions?.paymentError?.info?.reason;
+      const message = body?.extensions?.paymentError?.info?.message;
+      const payer = body?.extensions?.paymentError?.info?.payer;
+      if (reason === "insufficient_funds") {
+        const network = body?.accepts?.[0]?.network;
+        const asset = body?.accepts?.[0]?.extra?.name ?? "USDC";
+        const networkLabel = network === "eip155:8453" ? "Base" : network ?? "the payment network";
+        return new CLIError(
+          ErrorCode.PAYMENT_REQUIRED,
+          `Insufficient ${asset} balance on ${networkLabel}. ${message ?? ""}`.trim(),
+          `Fund wallet ${payer ?? ""} with ${asset} on ${networkLabel} to use x402.`.trim()
+        );
+      }
+      return new CLIError(
+        ErrorCode.PAYMENT_REQUIRED,
+        `x402 payment failed: ${message || body?.error || text}`
+      );
+    } catch {
+      return new CLIError(
+        ErrorCode.PAYMENT_REQUIRED,
+        `x402 payment failed: ${text}`
+      );
+    }
+  }
+  async handleAuthAndPayment(resp, retries) {
+    if (resp.status === 401) {
+      const detail = await resp.text().catch(() => "");
+      if (detail.includes("MESSAGE_EXPIRED")) {
+        return retries.authRetry();
+      }
+      throw new CLIError(
+        ErrorCode.AUTH_REQUIRED,
+        `x402 authentication failed: ${detail || "unauthorized"}`,
+        "Check your wallet key and try again."
+      );
+    }
+    if (resp.status === 402) {
+      const paymentRequiredHeader = resp.headers.get("payment-required");
+      if (!paymentRequiredHeader) {
+        throw new CLIError(
+          ErrorCode.PAYMENT_REQUIRED,
+          "x402 payment required but no Payment-Required header received."
+        );
+      }
+      const paymentSignature = await createPayment({
+        privateKey: this.privateKey,
+        paymentRequiredHeader
+      });
+      return retries.paymentRetry(paymentSignature);
+    }
+    return resp;
+  }
+};
+
+// src/lib/admin-client.ts
+var STAGING_ADMIN_API_HOST = "admin-api.alchemypreview.com";
+var AdminClient = class _AdminClient {
+  static get ADMIN_API_HOST() {
+    return `admin-api.${getBaseDomain()}`;
+  }
+  // Test/debug only: used by mock E2E to route admin requests locally.
+  static ADMIN_API_BASE_URL_ENV = "ALCHEMY_ADMIN_API_BASE_URL";
+  credential;
+  constructor(credential) {
+    if (typeof credential === "string") {
+      this.validateAccessKey(credential);
+      this.credential = { type: "access_key", key: credential };
+    } else {
+      if (credential.type === "access_key") {
+        this.validateAccessKey(credential.key);
+      } else if (!credential.token.trim()) {
+        throw errAuthRequired();
+      }
+      this.credential = credential;
+    }
+  }
+  baseURL() {
+    const override = this.baseURLOverride();
+    if (override) return override.toString().replace(/\/$/, "");
+    return `https://admin-api.${getBaseDomain()}`;
+  }
+  allowedHosts() {
+    const hosts = /* @__PURE__ */ new Set([_AdminClient.ADMIN_API_HOST]);
+    const override = this.baseURLOverride();
+    if (override) hosts.add(override.hostname);
+    return hosts;
+  }
+  allowInsecureTransport(hostname) {
+    return isLocalhost(hostname);
+  }
+  baseURLOverride() {
+    return parseBaseURLOverride(_AdminClient.ADMIN_API_BASE_URL_ENV, {
+      allowedHostnames: [STAGING_ADMIN_API_HOST]
+    });
+  }
+  validateAccessKey(accessKey) {
+    if (!accessKey.trim() || /\s/.test(accessKey)) {
+      throw errInvalidAccessKey();
+    }
+  }
+  assertSafeRequestTarget(url) {
+    let parsed;
+    try {
+      parsed = new URL(url);
+    } catch {
+      throw errInvalidArgs("Invalid admin API URL.");
+    }
+    if (!this.allowedHosts().has(parsed.hostname)) {
+      throw errInvalidArgs(`Refusing to send credentials to unexpected host: ${parsed.hostname}`);
+    }
+    if (parsed.protocol !== "https:" && !this.allowInsecureTransport(parsed.hostname)) {
+      throw errInvalidArgs("Refusing to send credentials over non-HTTPS connection.");
+    }
+  }
+  async request(method, path, body) {
+    const url = `${this.baseURL()}${path}`;
+    debug(`${method} ${url}`);
+    this.assertSafeRequestTarget(url);
+    const resp = await fetchWithTimeout(url, {
+      method,
+      redirect: "error",
+      headers: {
+        Authorization: `Bearer ${this.credential.type === "access_key" ? this.credential.key : this.credential.token}`,
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      },
+      ...body !== void 0 && { body: JSON.stringify(body) }
+    });
+    if (resp.status === 401) {
+      debug(`401 Unauthorized from ${url}`);
+      throw errInvalidAccessKey();
+    }
+    if (resp.status === 403) {
+      const detail = await resp.text().catch(() => "");
+      let reason;
+      try {
+        const parsed = JSON.parse(detail);
+        reason = parsed?.message || parsed?.error?.message || parsed?.error || void 0;
+      } catch {
+        reason = detail || void 0;
+      }
+      throw errAccessDenied(typeof reason === "string" ? reason : void 0);
+    }
+    if (resp.status === 404) {
+      const text = await resp.text().catch(() => "");
+      throw errNotFound(text || path);
+    }
+    if (resp.status === 429) throw errRateLimited();
+    if (!resp.ok) {
+      const text = await resp.text().catch(() => "");
+      throw errAdminAPI(resp.status, text);
+    }
+    return resp.json();
+  }
+  async listChains() {
+    const result = await this.request("GET", "/v1/chains");
+    const chains = (Array.isArray(result.data) ? result.data : void 0) ?? (!Array.isArray(result.data) ? result.data?.networks : void 0) ?? (!Array.isArray(result.data) ? result.data?.chains : void 0) ?? result.networks ?? result.chains;
+    if (!Array.isArray(chains)) {
+      throw errAdminAPI(200, "Unexpected response shape for /v1/chains.");
+    }
+    return chains;
+  }
+  async listApps(opts) {
+    const params = new URLSearchParams();
+    if (opts?.cursor) params.set("cursor", opts.cursor);
+    if (opts?.limit) params.set("limit", String(opts.limit));
+    const qs = params.toString();
+    const resp = await this.request(
+      "GET",
+      `/v1/apps${qs ? `?${qs}` : ""}`
+    );
+    return resp.data;
+  }
+  async listAllApps(opts) {
+    const apps = [];
+    const seenCursors = /* @__PURE__ */ new Set();
+    let cursor;
+    let pages = 0;
+    do {
+      const page = await this.listApps({
+        ...cursor && { cursor },
+        ...opts?.limit !== void 0 && { limit: opts.limit }
+      });
+      pages += 1;
+      apps.push(...page.apps);
+      cursor = page.cursor;
+      if (cursor && seenCursors.has(cursor)) break;
+      if (cursor) seenCursors.add(cursor);
+    } while (cursor);
+    return { apps, pages };
+  }
+  async getApp(id) {
+    const resp = await this.request("GET", `/v1/apps/${id}`);
+    return resp.data;
+  }
+  async createApp(opts) {
+    const resp = await this.request("POST", "/v1/apps", {
+      name: opts.name,
+      chainNetworks: opts.networks,
+      ...opts.description && { description: opts.description },
+      ...opts.products && { products: opts.products }
+    });
+    return resp.data;
+  }
+  async deleteApp(id) {
+    await this.request("DELETE", `/v1/apps/${id}`);
+  }
+  async updateApp(id, opts) {
+    const resp = await this.request("PATCH", `/v1/apps/${id}`, opts);
+    return resp.data;
+  }
+  async updateNetworkAllowlist(id, networks) {
+    const resp = await this.request("PUT", `/v1/apps/${id}/networks`, {
+      chainNetworks: networks
+    });
+    return resp.data;
+  }
+  async updateAddressAllowlist(id, addresses) {
+    const resp = await this.request("PUT", `/v1/apps/${id}/address-allowlist`, {
+      addressAllowlist: addresses
+    });
+    return resp.data;
+  }
+  async updateOriginAllowlist(id, origins) {
+    const resp = await this.request("PUT", `/v1/apps/${id}/origin-allowlist`, {
+      originAllowlist: origins
+    });
+    return resp.data;
+  }
+  async updateIpAllowlist(id, ips) {
+    const resp = await this.request("PUT", `/v1/apps/${id}/ip-allowlist`, {
+      ipAllowlist: ips
+    });
+    return resp.data;
   }
-  return `https://${id}.g.${domain}/v2/{apiKey}`;
-}
-function getRPCNetworks() {
-  return RPC_NETWORK_IDS.map((id) => ({
-    id,
-    name: toDisplayName(id),
-    family: toFamily(id),
-    isTestnet: isTestnetNetwork(id),
-    httpsUrlTemplate: toHttpsUrlTemplate(id)
-  }));
-}
-function getRPCNetworkIds() {
-  return [...RPC_NETWORK_IDS];
-}
-var NATIVE_TOKEN_SYMBOLS = {
-  eth: "ETH",
-  arb: "ETH",
-  arbnova: "ETH",
-  opt: "ETH",
-  base: "ETH",
-  zksync: "ETH",
-  scroll: "ETH",
-  blast: "ETH",
-  linea: "ETH",
-  zora: "ETH",
-  shape: "ETH",
-  polygon: "POL",
-  polygonzkevm: "ETH",
-  bnb: "BNB",
-  opbnb: "BNB",
-  avax: "AVAX",
-  solana: "SOL",
-  starknet: "ETH",
-  fantom: "FTM",
-  metis: "METIS",
-  mantle: "MNT",
-  celo: "CELO",
-  gnosis: "xDAI",
-  frax: "frxETH",
-  worldchain: "ETH",
-  berachain: "BERA",
-  flow: "FLOW",
-  rootstock: "RBTC",
-  zetachain: "ZETA",
-  sui: "SUI"
 };
-function isSolanaNetwork(networkId) {
-  return networkId.startsWith("solana-");
-}
-function nativeTokenSymbol(networkId) {
-  const prefix = networkId.replace(/-(mainnet|testnet|sepolia|holesky|hoodi|devnet|amoy|fuji|cardona|saigon|chiado|signet|mocha|blaze|curtis|bepolia).*$/, "");
-  return NATIVE_TOKEN_SYMBOLS[prefix] ?? "ETH";
-}
 
 // src/lib/wallet-session.ts
 import { generateKeyPairSync, randomUUID } from "crypto";
@@ -1232,11 +1237,11 @@ function resolveWalletSession() {
 var resolveDelegatedSession = resolveWalletSession;
 
 export {
-  AdminClient,
   getRPCNetworks,
   getRPCNetworkIds,
   isSolanaNetwork,
   nativeTokenSymbol,
+  AdminClient,
   createPendingSession,
   loadSession,
   loadStoredSession,