@alchemy/cli 0.7.2 → 0.7.4-alpha.37

package/dist/{chunk-5LCA2B6S.js → chunk-5HYOZ773.js}

@@ -4,7 +4,7 @@ import {
   configDir,
   load,
   save
-} from "./chunk-BAZ4NGOD.js";
+} from "./chunk-PX2YJ7XC.js";
 import {
   CLIError,
   ErrorCode,
@@ -29,11 +29,275 @@ import {
   parseBaseURLOverride,
   redactSensitiveText,
   verbose
-} from "./chunk-KLPWJFWP.js";
+} from "./chunk-MYHXAACL.js";
 
 // src/lib/resolve.ts
 import { readFileSync as readFileSync2 } from "fs";
 
+// src/lib/networks.ts
+var TESTNET_TOKEN_RE = /(testnet|sepolia|holesky|hoodi|devnet|minato|amoy|fuji|saigon|cardona|aeneid|curtis|chiado|cassiopeia|blaze|ropsten|signet|mocha|fam|bepolia)$/i;
+var FAMILY_ALIASES = {
+  arb: "Arbitrum",
+  arbnova: "Arbitrum Nova",
+  avax: "Avalanche",
+  bnb: "BNB Smart Chain",
+  eth: "Ethereum",
+  opt: "OP Mainnet",
+  polygonzkevm: "Polygon zkEVM"
+};
+var NAME_ALIASES = {
+  arb: "Arbitrum",
+  avax: "Avalanche",
+  bnb: "BNB",
+  eth: "Ethereum",
+  opbnb: "opBNB",
+  opt: "OP Mainnet",
+  sui: "SUI",
+  xmtp: "XMTP",
+  zksync: "ZKsync"
+};
+var RPC_NETWORK_IDS = [
+  "abstract-mainnet",
+  "abstract-testnet",
+  "adi-mainnet",
+  "adi-testnet",
+  "alchemy-internal",
+  "alchemy-sepolia",
+  "alchemyarb-fam",
+  "alchemyarb-sepolia",
+  "alterscope-mainnet",
+  "anime-mainnet",
+  "anime-sepolia",
+  "apechain-curtis",
+  "apechain-mainnet",
+  "aptos-mainnet",
+  "aptos-testnet",
+  "arb-mainnet",
+  "arb-sepolia",
+  "arbnova-mainnet",
+  "arc-testnet",
+  "astar-mainnet",
+  "avax-fuji",
+  "avax-mainnet",
+  "base-mainnet",
+  "base-sepolia",
+  "berachain-bepolia",
+  "berachain-mainnet",
+  "bitcoin-mainnet",
+  "bitcoin-signet",
+  "bitcoin-testnet",
+  "blast-mainnet",
+  "blast-sepolia",
+  "bnb-mainnet",
+  "bnb-testnet",
+  "bob-mainnet",
+  "bob-sepolia",
+  "boba-mainnet",
+  "boba-sepolia",
+  "botanix-mainnet",
+  "botanix-testnet",
+  "celestiabridge-mainnet",
+  "celestiabridge-mocha",
+  "celo-mainnet",
+  "celo-sepolia",
+  "citrea-mainnet",
+  "citrea-testnet",
+  "clankermon-mainnet",
+  "commons-mainnet",
+  "crossfi-mainnet",
+  "crossfi-testnet",
+  "degen-mainnet",
+  "degen-sepolia",
+  "earnm-mainnet",
+  "earnm-sepolia",
+  "edge-mainnet",
+  "edge-testnet",
+  "eth-holesky",
+  "eth-holeskybeacon",
+  "eth-hoodi",
+  "eth-hoodibeacon",
+  "eth-mainnet",
+  "eth-mainnetbeacon",
+  "eth-sepolia",
+  "eth-sepoliabeacon",
+  "flow-mainnet",
+  "flow-testnet",
+  "frax-hoodi",
+  "frax-mainnet",
+  "galactica-cassiopeia",
+  "galactica-mainnet",
+  "gensyn-mainnet",
+  "gensyn-testnet",
+  "gnosis-chiado",
+  "gnosis-mainnet",
+  "humanity-mainnet",
+  "humanity-testnet",
+  "hyperliquid-mainnet",
+  "hyperliquid-testnet",
+  "ink-mainnet",
+  "ink-sepolia",
+  "lens-mainnet",
+  "lens-sepolia",
+  "linea-mainnet",
+  "linea-sepolia",
+  "mantle-mainnet",
+  "mantle-sepolia",
+  "megaeth-mainnet",
+  "megaeth-testnet",
+  "metis-mainnet",
+  "mode-mainnet",
+  "mode-sepolia",
+  "monad-mainnet",
+  "monad-testnet",
+  "moonbeam-mainnet",
+  "mythos-mainnet",
+  "opbnb-mainnet",
+  "opbnb-testnet",
+  "openloot-sepolia",
+  "opt-mainnet",
+  "opt-sepolia",
+  "plasma-mainnet",
+  "plasma-testnet",
+  "polygon-amoy",
+  "polygon-mainnet",
+  "polygonzkevm-cardona",
+  "polygonzkevm-mainnet",
+  "polynomial-mainnet",
+  "polynomial-sepolia",
+  "race-mainnet",
+  "race-sepolia",
+  "risa-testnet",
+  "rise-testnet",
+  "ronin-mainnet",
+  "ronin-saigon",
+  "rootstock-mainnet",
+  "rootstock-testnet",
+  "scroll-mainnet",
+  "scroll-sepolia",
+  "sei-mainnet",
+  "sei-testnet",
+  "settlus-mainnet",
+  "settlus-septestnet",
+  "shape-mainnet",
+  "shape-sepolia",
+  "solana-devnet",
+  "solana-mainnet",
+  "soneium-mainnet",
+  "soneium-minato",
+  "sonic-blaze",
+  "sonic-mainnet",
+  "sonic-testnet",
+  "stable-mainnet",
+  "stable-testnet",
+  "standard-mainnet",
+  "starknet-mainnet",
+  "starknet-sepolia",
+  "story-aeneid",
+  "story-mainnet",
+  "sui-mainnet",
+  "sui-testnet",
+  "superseed-mainnet",
+  "superseed-sepolia",
+  "synd-mainnet",
+  "syndicate-manchego",
+  "tea-sepolia",
+  "tempo-testnet",
+  "tron-mainnet",
+  "tron-testnet",
+  "unichain-mainnet",
+  "unichain-sepolia",
+  "unite-mainnet",
+  "unite-testnet",
+  "worldchain-mainnet",
+  "worldchain-sepolia",
+  "worldl3-devnet",
+  "worldmobile-devnet",
+  "worldmobile-testnet",
+  "worldmobilechain-mainnet",
+  "xmtp-mainnet",
+  "xmtp-ropsten",
+  "xprotocol-mainnet",
+  "zetachain-mainnet",
+  "zetachain-testnet",
+  "zksync-mainnet",
+  "zksync-sepolia",
+  "zora-mainnet",
+  "zora-sepolia"
+];
+function isTestnetNetwork(id) {
+  return TESTNET_TOKEN_RE.test(id);
+}
+function tokenToName(token) {
+  const alias = NAME_ALIASES[token];
+  if (alias) return alias;
+  return token.charAt(0).toUpperCase() + token.slice(1);
+}
+function toFamily(id) {
+  const [head] = id.split("-");
+  return FAMILY_ALIASES[head] ?? tokenToName(head);
+}
+function toDisplayName(id) {
+  return id.split("-").map((part) => tokenToName(part)).join(" ");
+}
+function toHttpsUrlTemplate(id) {
+  const domain = getBaseDomain();
+  if (id === "starknet-mainnet" || id === "starknet-sepolia") {
+    return `https://${id}.g.${domain}/starknet/version/rpc/v0_10/{apiKey}`;
+  }
+  return `https://${id}.g.${domain}/v2/{apiKey}`;
+}
+function getRPCNetworks() {
+  return RPC_NETWORK_IDS.map((id) => ({
+    id,
+    name: toDisplayName(id),
+    family: toFamily(id),
+    isTestnet: isTestnetNetwork(id),
+    httpsUrlTemplate: toHttpsUrlTemplate(id)
+  }));
+}
+function getRPCNetworkIds() {
+  return [...RPC_NETWORK_IDS];
+}
+var NATIVE_TOKEN_SYMBOLS = {
+  eth: "ETH",
+  arb: "ETH",
+  arbnova: "ETH",
+  opt: "ETH",
+  base: "ETH",
+  zksync: "ETH",
+  scroll: "ETH",
+  blast: "ETH",
+  linea: "ETH",
+  zora: "ETH",
+  shape: "ETH",
+  polygon: "POL",
+  polygonzkevm: "ETH",
+  bnb: "BNB",
+  opbnb: "BNB",
+  avax: "AVAX",
+  solana: "SOL",
+  starknet: "ETH",
+  fantom: "FTM",
+  metis: "METIS",
+  mantle: "MNT",
+  celo: "CELO",
+  gnosis: "xDAI",
+  frax: "frxETH",
+  worldchain: "ETH",
+  berachain: "BERA",
+  flow: "FLOW",
+  rootstock: "RBTC",
+  zetachain: "ZETA",
+  sui: "SUI"
+};
+function isSolanaNetwork(networkId) {
+  return networkId.startsWith("solana-");
+}
+function nativeTokenSymbol(networkId) {
+  const prefix = networkId.replace(/-(mainnet|testnet|sepolia|holesky|hoodi|devnet|amoy|fuji|cardona|saigon|chiado|signet|mocha|blaze|curtis|bepolia).*$/, "");
+  return NATIVE_TOKEN_SYMBOLS[prefix] ?? "ETH";
+}
+
 // src/lib/client.ts
 var Client = class _Client {
   apiKey;
@@ -49,6 +313,11 @@ var Client = class _Client {
     if (this.rpcBaseURLOverride()) {
       return;
     }
+    if (!getRPCNetworkIds().includes(network)) {
+      throw errInvalidArgs(
+        `Unknown network '${network}'. Run 'alchemy evm network list' to see available networks.`
+      );
+    }
     const domain = getBaseDomain();
     const hostname = `${network}.g.${domain}`;
     let parsed;
@@ -376,486 +645,222 @@ var X402Client = class _X402Client {
     } catch {
       return new CLIError(
         ErrorCode.PAYMENT_REQUIRED,
-        `x402 payment failed: ${text}`
-      );
-    }
-  }
-  async handleAuthAndPayment(resp, retries) {
-    if (resp.status === 401) {
-      const detail = await resp.text().catch(() => "");
-      if (detail.includes("MESSAGE_EXPIRED")) {
-        return retries.authRetry();
-      }
-      throw new CLIError(
-        ErrorCode.AUTH_REQUIRED,
-        `x402 authentication failed: ${detail || "unauthorized"}`,
-        "Check your wallet key and try again."
-      );
-    }
-    if (resp.status === 402) {
-      const paymentRequiredHeader = resp.headers.get("payment-required");
-      if (!paymentRequiredHeader) {
-        throw new CLIError(
-          ErrorCode.PAYMENT_REQUIRED,
-          "x402 payment required but no Payment-Required header received."
-        );
-      }
-      const paymentSignature = await createPayment({
-        privateKey: this.privateKey,
-        paymentRequiredHeader
-      });
-      return retries.paymentRetry(paymentSignature);
-    }
-    return resp;
-  }
-};
-
-// src/lib/admin-client.ts
-var STAGING_ADMIN_API_HOST = "admin-api.alchemypreview.com";
-var AdminClient = class _AdminClient {
-  static get ADMIN_API_HOST() {
-    return `admin-api.${getBaseDomain()}`;
-  }
-  // Test/debug only: used by mock E2E to route admin requests locally.
-  static ADMIN_API_BASE_URL_ENV = "ALCHEMY_ADMIN_API_BASE_URL";
-  credential;
-  constructor(credential) {
-    if (typeof credential === "string") {
-      this.validateAccessKey(credential);
-      this.credential = { type: "access_key", key: credential };
-    } else {
-      if (credential.type === "access_key") {
-        this.validateAccessKey(credential.key);
-      } else if (!credential.token.trim()) {
-        throw errAuthRequired();
-      }
-      this.credential = credential;
-    }
-  }
-  baseURL() {
-    const override = this.baseURLOverride();
-    if (override) return override.toString().replace(/\/$/, "");
-    return `https://admin-api.${getBaseDomain()}`;
-  }
-  allowedHosts() {
-    const hosts = /* @__PURE__ */ new Set([_AdminClient.ADMIN_API_HOST]);
-    const override = this.baseURLOverride();
-    if (override) hosts.add(override.hostname);
-    return hosts;
-  }
-  allowInsecureTransport(hostname) {
-    return isLocalhost(hostname);
-  }
-  baseURLOverride() {
-    return parseBaseURLOverride(_AdminClient.ADMIN_API_BASE_URL_ENV, {
-      allowedHostnames: [STAGING_ADMIN_API_HOST]
-    });
-  }
-  validateAccessKey(accessKey) {
-    if (!accessKey.trim() || /\s/.test(accessKey)) {
-      throw errInvalidAccessKey();
-    }
-  }
-  assertSafeRequestTarget(url) {
-    let parsed;
-    try {
-      parsed = new URL(url);
-    } catch {
-      throw errInvalidArgs("Invalid admin API URL.");
-    }
-    if (!this.allowedHosts().has(parsed.hostname)) {
-      throw errInvalidArgs(`Refusing to send credentials to unexpected host: ${parsed.hostname}`);
-    }
-    if (parsed.protocol !== "https:" && !this.allowInsecureTransport(parsed.hostname)) {
-      throw errInvalidArgs("Refusing to send credentials over non-HTTPS connection.");
-    }
-  }
-  async request(method, path, body) {
-    const url = `${this.baseURL()}${path}`;
-    debug(`${method} ${url}`);
-    this.assertSafeRequestTarget(url);
-    const resp = await fetchWithTimeout(url, {
-      method,
-      redirect: "error",
-      headers: {
-        Authorization: `Bearer ${this.credential.type === "access_key" ? this.credential.key : this.credential.token}`,
-        "Content-Type": "application/json",
-        Accept: "application/json"
-      },
-      ...body !== void 0 && { body: JSON.stringify(body) }
-    });
-    if (resp.status === 401) {
-      debug(`401 Unauthorized from ${url}`);
-      throw errInvalidAccessKey();
-    }
-    if (resp.status === 403) {
-      const detail = await resp.text().catch(() => "");
-      let reason;
-      try {
-        const parsed = JSON.parse(detail);
-        reason = parsed?.message || parsed?.error?.message || parsed?.error || void 0;
-      } catch {
-        reason = detail || void 0;
-      }
-      throw errAccessDenied(typeof reason === "string" ? reason : void 0);
-    }
-    if (resp.status === 404) {
-      const text = await resp.text().catch(() => "");
-      throw errNotFound(text || path);
-    }
-    if (resp.status === 429) throw errRateLimited();
-    if (!resp.ok) {
-      const text = await resp.text().catch(() => "");
-      throw errAdminAPI(resp.status, text);
-    }
-    return resp.json();
-  }
-  async listChains() {
-    const result = await this.request("GET", "/v1/chains");
-    const chains = (Array.isArray(result.data) ? result.data : void 0) ?? (!Array.isArray(result.data) ? result.data?.networks : void 0) ?? (!Array.isArray(result.data) ? result.data?.chains : void 0) ?? result.networks ?? result.chains;
-    if (!Array.isArray(chains)) {
-      throw errAdminAPI(200, "Unexpected response shape for /v1/chains.");
-    }
-    return chains;
-  }
-  async listApps(opts) {
-    const params = new URLSearchParams();
-    if (opts?.cursor) params.set("cursor", opts.cursor);
-    if (opts?.limit) params.set("limit", String(opts.limit));
-    const qs = params.toString();
-    const resp = await this.request(
-      "GET",
-      `/v1/apps${qs ? `?${qs}` : ""}`
-    );
-    return resp.data;
-  }
-  async listAllApps(opts) {
-    const apps = [];
-    const seenCursors = /* @__PURE__ */ new Set();
-    let cursor;
-    let pages = 0;
-    do {
-      const page = await this.listApps({
-        ...cursor && { cursor },
-        ...opts?.limit !== void 0 && { limit: opts.limit }
-      });
-      pages += 1;
-      apps.push(...page.apps);
-      cursor = page.cursor;
-      if (cursor && seenCursors.has(cursor)) break;
-      if (cursor) seenCursors.add(cursor);
-    } while (cursor);
-    return { apps, pages };
-  }
-  async getApp(id) {
-    const resp = await this.request("GET", `/v1/apps/${id}`);
-    return resp.data;
-  }
-  async createApp(opts) {
-    const resp = await this.request("POST", "/v1/apps", {
-      name: opts.name,
-      chainNetworks: opts.networks,
-      ...opts.description && { description: opts.description },
-      ...opts.products && { products: opts.products }
-    });
-    return resp.data;
-  }
-  async deleteApp(id) {
-    await this.request("DELETE", `/v1/apps/${id}`);
-  }
-  async updateApp(id, opts) {
-    const resp = await this.request("PATCH", `/v1/apps/${id}`, opts);
-    return resp.data;
-  }
-  async updateNetworkAllowlist(id, networks) {
-    const resp = await this.request("PUT", `/v1/apps/${id}/networks`, {
-      chainNetworks: networks
-    });
-    return resp.data;
-  }
-  async updateAddressAllowlist(id, addresses) {
-    const resp = await this.request("PUT", `/v1/apps/${id}/address-allowlist`, {
-      addressAllowlist: addresses
-    });
-    return resp.data;
-  }
-  async updateOriginAllowlist(id, origins) {
-    const resp = await this.request("PUT", `/v1/apps/${id}/origin-allowlist`, {
-      originAllowlist: origins
-    });
-    return resp.data;
+        `x402 payment failed: ${text}`
+      );
+    }
   }
-  async updateIpAllowlist(id, ips) {
-    const resp = await this.request("PUT", `/v1/apps/${id}/ip-allowlist`, {
-      ipAllowlist: ips
-    });
-    return resp.data;
+  async handleAuthAndPayment(resp, retries) {
+    if (resp.status === 401) {
+      const detail = await resp.text().catch(() => "");
+      if (detail.includes("MESSAGE_EXPIRED")) {
+        return retries.authRetry();
+      }
+      throw new CLIError(
+        ErrorCode.AUTH_REQUIRED,
+        `x402 authentication failed: ${detail || "unauthorized"}`,
+        "Check your wallet key and try again."
+      );
+    }
+    if (resp.status === 402) {
+      const paymentRequiredHeader = resp.headers.get("payment-required");
+      if (!paymentRequiredHeader) {
+        throw new CLIError(
+          ErrorCode.PAYMENT_REQUIRED,
+          "x402 payment required but no Payment-Required header received."
+        );
+      }
+      const paymentSignature = await createPayment({
+        privateKey: this.privateKey,
+        paymentRequiredHeader
+      });
+      return retries.paymentRetry(paymentSignature);
+    }
+    return resp;
   }
 };
 
-// src/lib/networks.ts
-var TESTNET_TOKEN_RE = /(testnet|sepolia|holesky|hoodi|devnet|minato|amoy|fuji|saigon|cardona|aeneid|curtis|chiado|cassiopeia|blaze|ropsten|signet|mocha|fam|bepolia)$/i;
-var FAMILY_ALIASES = {
-  arb: "Arbitrum",
-  arbnova: "Arbitrum Nova",
-  avax: "Avalanche",
-  bnb: "BNB Smart Chain",
-  eth: "Ethereum",
-  opt: "OP Mainnet",
-  polygonzkevm: "Polygon zkEVM"
-};
-var NAME_ALIASES = {
-  arb: "Arbitrum",
-  avax: "Avalanche",
-  bnb: "BNB",
-  eth: "Ethereum",
-  opbnb: "opBNB",
-  opt: "OP Mainnet",
-  sui: "SUI",
-  xmtp: "XMTP",
-  zksync: "ZKsync"
-};
-var RPC_NETWORK_IDS = [
-  "abstract-mainnet",
-  "abstract-testnet",
-  "adi-mainnet",
-  "adi-testnet",
-  "alchemy-internal",
-  "alchemy-sepolia",
-  "alchemyarb-fam",
-  "alchemyarb-sepolia",
-  "alterscope-mainnet",
-  "anime-mainnet",
-  "anime-sepolia",
-  "apechain-curtis",
-  "apechain-mainnet",
-  "aptos-mainnet",
-  "aptos-testnet",
-  "arb-mainnet",
-  "arb-sepolia",
-  "arbnova-mainnet",
-  "arc-testnet",
-  "astar-mainnet",
-  "avax-fuji",
-  "avax-mainnet",
-  "base-mainnet",
-  "base-sepolia",
-  "berachain-bepolia",
-  "berachain-mainnet",
-  "bitcoin-mainnet",
-  "bitcoin-signet",
-  "bitcoin-testnet",
-  "blast-mainnet",
-  "blast-sepolia",
-  "bnb-mainnet",
-  "bnb-testnet",
-  "bob-mainnet",
-  "bob-sepolia",
-  "boba-mainnet",
-  "boba-sepolia",
-  "botanix-mainnet",
-  "botanix-testnet",
-  "celestiabridge-mainnet",
-  "celestiabridge-mocha",
-  "celo-mainnet",
-  "celo-sepolia",
-  "citrea-mainnet",
-  "citrea-testnet",
-  "clankermon-mainnet",
-  "commons-mainnet",
-  "crossfi-mainnet",
-  "crossfi-testnet",
-  "degen-mainnet",
-  "degen-sepolia",
-  "earnm-mainnet",
-  "earnm-sepolia",
-  "edge-mainnet",
-  "edge-testnet",
-  "eth-holesky",
-  "eth-holeskybeacon",
-  "eth-hoodi",
-  "eth-hoodibeacon",
-  "eth-mainnet",
-  "eth-mainnetbeacon",
-  "eth-sepolia",
-  "eth-sepoliabeacon",
-  "flow-mainnet",
-  "flow-testnet",
-  "frax-hoodi",
-  "frax-mainnet",
-  "galactica-cassiopeia",
-  "galactica-mainnet",
-  "gensyn-mainnet",
-  "gensyn-testnet",
-  "gnosis-chiado",
-  "gnosis-mainnet",
-  "humanity-mainnet",
-  "humanity-testnet",
-  "hyperliquid-mainnet",
-  "hyperliquid-testnet",
-  "ink-mainnet",
-  "ink-sepolia",
-  "lens-mainnet",
-  "lens-sepolia",
-  "linea-mainnet",
-  "linea-sepolia",
-  "mantle-mainnet",
-  "mantle-sepolia",
-  "megaeth-mainnet",
-  "megaeth-testnet",
-  "metis-mainnet",
-  "mode-mainnet",
-  "mode-sepolia",
-  "monad-mainnet",
-  "monad-testnet",
-  "moonbeam-mainnet",
-  "mythos-mainnet",
-  "opbnb-mainnet",
-  "opbnb-testnet",
-  "openloot-sepolia",
-  "opt-mainnet",
-  "opt-sepolia",
-  "plasma-mainnet",
-  "plasma-testnet",
-  "polygon-amoy",
-  "polygon-mainnet",
-  "polygonzkevm-cardona",
-  "polygonzkevm-mainnet",
-  "polynomial-mainnet",
-  "polynomial-sepolia",
-  "race-mainnet",
-  "race-sepolia",
-  "risa-testnet",
-  "rise-testnet",
-  "ronin-mainnet",
-  "ronin-saigon",
-  "rootstock-mainnet",
-  "rootstock-testnet",
-  "scroll-mainnet",
-  "scroll-sepolia",
-  "sei-mainnet",
-  "sei-testnet",
-  "settlus-mainnet",
-  "settlus-septestnet",
-  "shape-mainnet",
-  "shape-sepolia",
-  "solana-devnet",
-  "solana-mainnet",
-  "soneium-mainnet",
-  "soneium-minato",
-  "sonic-blaze",
-  "sonic-mainnet",
-  "sonic-testnet",
-  "stable-mainnet",
-  "stable-testnet",
-  "standard-mainnet",
-  "starknet-mainnet",
-  "starknet-sepolia",
-  "story-aeneid",
-  "story-mainnet",
-  "sui-mainnet",
-  "sui-testnet",
-  "superseed-mainnet",
-  "superseed-sepolia",
-  "synd-mainnet",
-  "syndicate-manchego",
-  "tea-sepolia",
-  "tempo-testnet",
-  "tron-mainnet",
-  "tron-testnet",
-  "unichain-mainnet",
-  "unichain-sepolia",
-  "unite-mainnet",
-  "unite-testnet",
-  "worldchain-mainnet",
-  "worldchain-sepolia",
-  "worldl3-devnet",
-  "worldmobile-devnet",
-  "worldmobile-testnet",
-  "worldmobilechain-mainnet",
-  "xmtp-mainnet",
-  "xmtp-ropsten",
-  "xprotocol-mainnet",
-  "zetachain-mainnet",
-  "zetachain-testnet",
-  "zksync-mainnet",
-  "zksync-sepolia",
-  "zora-mainnet",
-  "zora-sepolia"
-];
-function isTestnetNetwork(id) {
-  return TESTNET_TOKEN_RE.test(id);
-}
-function tokenToName(token) {
-  const alias = NAME_ALIASES[token];
-  if (alias) return alias;
-  return token.charAt(0).toUpperCase() + token.slice(1);
-}
-function toFamily(id) {
-  const [head] = id.split("-");
-  return FAMILY_ALIASES[head] ?? tokenToName(head);
-}
-function toDisplayName(id) {
-  return id.split("-").map((part) => tokenToName(part)).join(" ");
-}
-function toHttpsUrlTemplate(id) {
-  const domain = getBaseDomain();
-  if (id === "starknet-mainnet" || id === "starknet-sepolia") {
-    return `https://${id}.g.${domain}/starknet/version/rpc/v0_10/{apiKey}`;
+// src/lib/admin-client.ts
+var STAGING_ADMIN_API_HOST = "admin-api.alchemypreview.com";
+var AdminClient = class _AdminClient {
+  static get ADMIN_API_HOST() {
+    return `admin-api.${getBaseDomain()}`;
+  }
+  // Test/debug only: used by mock E2E to route admin requests locally.
+  static ADMIN_API_BASE_URL_ENV = "ALCHEMY_ADMIN_API_BASE_URL";
+  credential;
+  constructor(credential) {
+    if (typeof credential === "string") {
+      this.validateAccessKey(credential);
+      this.credential = { type: "access_key", key: credential };
+    } else {
+      if (credential.type === "access_key") {
+        this.validateAccessKey(credential.key);
+      } else if (!credential.token.trim()) {
+        throw errAuthRequired();
+      }
+      this.credential = credential;
+    }
+  }
+  baseURL() {
+    const override = this.baseURLOverride();
+    if (override) return override.toString().replace(/\/$/, "");
+    return `https://admin-api.${getBaseDomain()}`;
+  }
+  allowedHosts() {
+    const hosts = /* @__PURE__ */ new Set([_AdminClient.ADMIN_API_HOST]);
+    const override = this.baseURLOverride();
+    if (override) hosts.add(override.hostname);
+    return hosts;
+  }
+  allowInsecureTransport(hostname) {
+    return isLocalhost(hostname);
+  }
+  baseURLOverride() {
+    return parseBaseURLOverride(_AdminClient.ADMIN_API_BASE_URL_ENV, {
+      allowedHostnames: [STAGING_ADMIN_API_HOST]
+    });
+  }
+  validateAccessKey(accessKey) {
+    if (!accessKey.trim() || /\s/.test(accessKey)) {
+      throw errInvalidAccessKey();
+    }
+  }
+  assertSafeRequestTarget(url) {
+    let parsed;
+    try {
+      parsed = new URL(url);
+    } catch {
+      throw errInvalidArgs("Invalid admin API URL.");
+    }
+    if (!this.allowedHosts().has(parsed.hostname)) {
+      throw errInvalidArgs(`Refusing to send credentials to unexpected host: ${parsed.hostname}`);
+    }
+    if (parsed.protocol !== "https:" && !this.allowInsecureTransport(parsed.hostname)) {
+      throw errInvalidArgs("Refusing to send credentials over non-HTTPS connection.");
+    }
+  }
+  async request(method, path, body) {
+    const url = `${this.baseURL()}${path}`;
+    debug(`${method} ${url}`);
+    this.assertSafeRequestTarget(url);
+    const resp = await fetchWithTimeout(url, {
+      method,
+      redirect: "error",
+      headers: {
+        Authorization: `Bearer ${this.credential.type === "access_key" ? this.credential.key : this.credential.token}`,
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      },
+      ...body !== void 0 && { body: JSON.stringify(body) }
+    });
+    if (resp.status === 401) {
+      debug(`401 Unauthorized from ${url}`);
+      throw errInvalidAccessKey();
+    }
+    if (resp.status === 403) {
+      const detail = await resp.text().catch(() => "");
+      let reason;
+      try {
+        const parsed = JSON.parse(detail);
+        reason = parsed?.message || parsed?.error?.message || parsed?.error || void 0;
+      } catch {
+        reason = detail || void 0;
+      }
+      throw errAccessDenied(typeof reason === "string" ? reason : void 0);
+    }
+    if (resp.status === 404) {
+      const text = await resp.text().catch(() => "");
+      throw errNotFound(text || path);
+    }
+    if (resp.status === 429) throw errRateLimited();
+    if (!resp.ok) {
+      const text = await resp.text().catch(() => "");
+      throw errAdminAPI(resp.status, text);
+    }
+    return resp.json();
+  }
+  async listChains() {
+    const result = await this.request("GET", "/v1/chains");
+    const chains = (Array.isArray(result.data) ? result.data : void 0) ?? (!Array.isArray(result.data) ? result.data?.networks : void 0) ?? (!Array.isArray(result.data) ? result.data?.chains : void 0) ?? result.networks ?? result.chains;
+    if (!Array.isArray(chains)) {
+      throw errAdminAPI(200, "Unexpected response shape for /v1/chains.");
+    }
+    return chains;
+  }
+  async listApps(opts) {
+    const params = new URLSearchParams();
+    if (opts?.cursor) params.set("cursor", opts.cursor);
+    if (opts?.limit) params.set("limit", String(opts.limit));
+    const qs = params.toString();
+    const resp = await this.request(
+      "GET",
+      `/v1/apps${qs ? `?${qs}` : ""}`
+    );
+    return resp.data;
+  }
+  async listAllApps(opts) {
+    const apps = [];
+    const seenCursors = /* @__PURE__ */ new Set();
+    let cursor;
+    let pages = 0;
+    do {
+      const page = await this.listApps({
+        ...cursor && { cursor },
+        ...opts?.limit !== void 0 && { limit: opts.limit }
+      });
+      pages += 1;
+      apps.push(...page.apps);
+      cursor = page.cursor;
+      if (cursor && seenCursors.has(cursor)) break;
+      if (cursor) seenCursors.add(cursor);
+    } while (cursor);
+    return { apps, pages };
+  }
+  async getApp(id) {
+    const resp = await this.request("GET", `/v1/apps/${id}`);
+    return resp.data;
+  }
+  async createApp(opts) {
+    const resp = await this.request("POST", "/v1/apps", {
+      name: opts.name,
+      chainNetworks: opts.networks,
+      ...opts.description && { description: opts.description },
+      ...opts.products && { products: opts.products }
+    });
+    return resp.data;
+  }
+  async deleteApp(id) {
+    await this.request("DELETE", `/v1/apps/${id}`);
+  }
+  async updateApp(id, opts) {
+    const resp = await this.request("PATCH", `/v1/apps/${id}`, opts);
+    return resp.data;
+  }
+  async updateNetworkAllowlist(id, networks) {
+    const resp = await this.request("PUT", `/v1/apps/${id}/networks`, {
+      chainNetworks: networks
+    });
+    return resp.data;
+  }
+  async updateAddressAllowlist(id, addresses) {
+    const resp = await this.request("PUT", `/v1/apps/${id}/address-allowlist`, {
+      addressAllowlist: addresses
+    });
+    return resp.data;
+  }
+  async updateOriginAllowlist(id, origins) {
+    const resp = await this.request("PUT", `/v1/apps/${id}/origin-allowlist`, {
+      originAllowlist: origins
+    });
+    return resp.data;
+  }
+  async updateIpAllowlist(id, ips) {
+    const resp = await this.request("PUT", `/v1/apps/${id}/ip-allowlist`, {
+      ipAllowlist: ips
+    });
+    return resp.data;
   }
-  return `https://${id}.g.${domain}/v2/{apiKey}`;
-}
-function getRPCNetworks() {
-  return RPC_NETWORK_IDS.map((id) => ({
-    id,
-    name: toDisplayName(id),
-    family: toFamily(id),
-    isTestnet: isTestnetNetwork(id),
-    httpsUrlTemplate: toHttpsUrlTemplate(id)
-  }));
-}
-function getRPCNetworkIds() {
-  return [...RPC_NETWORK_IDS];
-}
-var NATIVE_TOKEN_SYMBOLS = {
-  eth: "ETH",
-  arb: "ETH",
-  arbnova: "ETH",
-  opt: "ETH",
-  base: "ETH",
-  zksync: "ETH",
-  scroll: "ETH",
-  blast: "ETH",
-  linea: "ETH",
-  zora: "ETH",
-  shape: "ETH",
-  polygon: "POL",
-  polygonzkevm: "ETH",
-  bnb: "BNB",
-  opbnb: "BNB",
-  avax: "AVAX",
-  solana: "SOL",
-  starknet: "ETH",
-  fantom: "FTM",
-  metis: "METIS",
-  mantle: "MNT",
-  celo: "CELO",
-  gnosis: "xDAI",
-  frax: "frxETH",
-  worldchain: "ETH",
-  berachain: "BERA",
-  flow: "FLOW",
-  rootstock: "RBTC",
-  zetachain: "ZETA",
-  sui: "SUI"
 };
-function isSolanaNetwork(networkId) {
-  return networkId.startsWith("solana-");
-}
-function nativeTokenSymbol(networkId) {
-  const prefix = networkId.replace(/-(mainnet|testnet|sepolia|holesky|hoodi|devnet|amoy|fuji|cardona|saigon|chiado|signet|mocha|blaze|curtis|bepolia).*$/, "");
-  return NATIVE_TOKEN_SYMBOLS[prefix] ?? "ETH";
-}
 
 // src/lib/wallet-session.ts
 import { generateKeyPairSync, randomUUID } from "crypto";
@@ -879,7 +884,20 @@ var walletSessionEnvironmentSchema = z.object({
   clientInstanceId: z.string().uuid().optional(),
   clientInstanceName: z.string().min(1).max(64).optional()
 }).strict();
+var chainWalletSessionSchema = z.object({
+  sessionId: z.string().uuid(),
+  status: z.enum(["pending", "approved", "revoked", "expired"]),
+  expiresAt: z.string().datetime(),
+  chainType: z.enum(["evm", "solana"]),
+  walletId: z.string().min(1).optional(),
+  walletAddress: z.string().min(1).optional(),
+  providerKeyQuorumId: z.string().min(1).optional(),
+  providerSignerId: z.string().min(1).optional(),
+  capabilities: walletSessionCapabilitiesSchema.optional()
+}).strict();
 var walletSessionSchema = z.object({
+  version: z.number().int().positive().optional(),
+  connectionRequestId: z.string().min(1).optional(),
   sessionId: z.string().uuid(),
   status: z.enum(["pending", "approved", "revoked", "expired"]),
   createdAt: z.string().datetime(),
@@ -898,7 +916,11 @@ var walletSessionSchema = z.object({
   chainType: z.string().min(1).optional(),
   backendBaseUrl: z.string().min(1).optional(),
   environment: walletSessionEnvironmentSchema.optional(),
-  capabilities: walletSessionCapabilitiesSchema.optional()
+  capabilities: walletSessionCapabilitiesSchema.optional(),
+  sessionsByChain: z.object({
+    evm: chainWalletSessionSchema.optional(),
+    solana: chainWalletSessionSchema.optional()
+  }).strict().optional()
 }).strict();
 function sessionPath() {
   return join(configDir(), SESSION_FILE);
@@ -906,7 +928,59 @@ function sessionPath() {
 function parseStoredSession(value) {
   const parsed = walletSessionSchema.safeParse(value);
   if (!parsed.success) return null;
-  return parsed.data;
+  return withLegacyChainSessions(parsed.data);
+}
+function withLegacyChainSessions(session) {
+  if (session.sessionsByChain) {
+    return withCompatibilityAliases(session);
+  }
+  const chainType = session.chainType === "solana" ? "solana" : "evm";
+  const walletId = chainType === "solana" ? session.solanaWalletId ?? session.walletId : session.evmWalletId ?? session.walletId;
+  const walletAddress = chainType === "solana" ? session.solanaAddress : session.evmAddress;
+  return withCompatibilityAliases({
+    ...session,
+    version: session.version ?? 1,
+    sessionsByChain: {
+      [chainType]: {
+        sessionId: session.sessionId,
+        status: session.status,
+        expiresAt: session.expiresAt,
+        chainType,
+        ...walletId ? { walletId } : {},
+        ...walletAddress ? { walletAddress } : {},
+        ...session.privyKeyQuorumId ? { providerKeyQuorumId: session.privyKeyQuorumId } : {},
+        ...session.privySignerId ? { providerSignerId: session.privySignerId } : {},
+        ...session.capabilities ? { capabilities: session.capabilities } : {}
+      }
+    }
+  });
+}
+function withCompatibilityAliases(session) {
+  const evm = session.sessionsByChain?.evm;
+  const solana = session.sessionsByChain?.solana;
+  const preferred = evm ?? solana;
+  if (!preferred) {
+    return session;
+  }
+  return {
+    ...session,
+    sessionId: preferred.sessionId,
+    status: preferred.status,
+    expiresAt: preferred.expiresAt,
+    walletId: evm?.walletId ?? solana?.walletId ?? session.walletId,
+    evmWalletId: evm?.walletId ?? session.evmWalletId,
+    evmAddress: evm?.walletAddress ?? session.evmAddress,
+    solanaWalletId: solana?.walletId ?? session.solanaWalletId,
+    solanaAddress: solana?.walletAddress ?? session.solanaAddress,
+    privyKeyQuorumId: evm?.providerKeyQuorumId ?? solana?.providerKeyQuorumId ?? session.privyKeyQuorumId,
+    privySignerId: evm?.providerSignerId ?? solana?.providerSignerId ?? session.privySignerId,
+    chainType: evm && solana ? "both" : preferred.chainType,
+    capabilities: {
+      ...evm?.capabilities ?? {},
+      ...solana?.capabilities ?? {},
+      ...session.capabilities ?? {}
+    }
+  };
 }
 function loadStoredSessionFromPath(path) {
   if (!existsSync(path)) return null;
@@ -920,13 +994,23 @@ function isExpired(session) {
   const expiresAt = new Date(session.expiresAt);
   return !Number.isNaN(expiresAt.getTime()) && expiresAt <= /* @__PURE__ */ new Date();
 }
+function isSessionLoadable(session) {
+  if (session.sessionsByChain) {
+    return Object.values(session.sessionsByChain).some((chainSession) => {
+      return Boolean(
+        chainSession && chainSession.status !== "revoked" && !isExpired(chainSession)
+      );
+    });
+  }
+  if (session.status === "revoked") return false;
+  return !isExpired(session);
+}
 function createFileWalletSessionStore(path = sessionPath()) {
   return {
     load() {
       const session = loadStoredSessionFromPath(path);
       if (!session) return null;
-      if (session.status === "revoked") return null;
-      if (isExpired(session)) return null;
+      if (!isSessionLoadable(session)) return null;
       return session;
     },
     loadRaw() {
@@ -970,6 +1054,7 @@ function createPendingSession() {
   const now = /* @__PURE__ */ new Date();
   const expiresAt = new Date(now.getTime() + SESSION_TTL_DAYS * 24 * 60 * 60 * 1e3);
   const session = {
+    version: 2,
     sessionId: randomUUID(),
     status: "pending",
     createdAt: now.toISOString(),
@@ -992,12 +1077,12 @@ function loadStoredSession() {
   return store.load();
 }
 function saveSession(session) {
-  getWalletSessionStore().save(session);
+  getWalletSessionStore().save(withCompatibilityAliases(session));
 }
 function updateSession(updates) {
   const session = loadSession();
   if (!session) return null;
-  const updated = { ...session, ...updates };
+  const updated = withCompatibilityAliases({ ...session, ...updates });
   saveSession(updated);
   return updated;
 }
@@ -1005,11 +1090,52 @@ function clearSession() {
   return getWalletSessionStore().clear();
 }
 function isSessionValid(session) {
+  if (session.sessionsByChain) {
+    return Object.values(session.sessionsByChain).some((chainSession) => {
+      return Boolean(chainSession && isChainSessionValid(chainSession));
+    });
+  }
+  if (session.status !== "approved") return false;
+  const expiresAt = new Date(session.expiresAt);
+  if (Number.isNaN(expiresAt.getTime())) return false;
+  return expiresAt > /* @__PURE__ */ new Date();
+}
+function isChainSessionValid(session) {
   if (session.status !== "approved") return false;
   const expiresAt = new Date(session.expiresAt);
   if (Number.isNaN(expiresAt.getTime())) return false;
   return expiresAt > /* @__PURE__ */ new Date();
 }
+function getWalletSessionByChain(session, chainType) {
+  const chainSession = session.sessionsByChain?.[chainType];
+  if (!chainSession) {
+    if (!isSessionValid(session)) return null;
+    if (chainType === "evm" && session.evmAddress) return session;
+    if (chainType === "solana" && session.solanaAddress) return session;
+    return null;
+  }
+  if (!isChainSessionValid(chainSession)) {
+    return null;
+  }
+  return withCompatibilityAliases({
+    ...session,
+    sessionId: chainSession.sessionId,
+    status: chainSession.status,
+    expiresAt: chainSession.expiresAt,
+    walletId: chainSession.walletId,
+    evmWalletId: chainType === "evm" ? chainSession.walletId : session.evmWalletId,
+    evmAddress: chainType === "evm" ? chainSession.walletAddress : session.evmAddress,
+    solanaWalletId: chainType === "solana" ? chainSession.walletId : session.solanaWalletId,
+    solanaAddress: chainType === "solana" ? chainSession.walletAddress : session.solanaAddress,
+    privyKeyQuorumId: chainSession.providerKeyQuorumId,
+    privySignerId: chainSession.providerSignerId,
+    chainType,
+    capabilities: chainSession.capabilities ?? session.capabilities,
+    sessionsByChain: {
+      [chainType]: chainSession
+    }
+  });
+}
 
 // src/lib/resolve.ts
 function getCommandOptions(program) {
@@ -1232,11 +1358,11 @@ function resolveWalletSession() {
 var resolveDelegatedSession = resolveWalletSession;
 
 export {
-  AdminClient,
   getRPCNetworks,
   getRPCNetworkIds,
   isSolanaNetwork,
   nativeTokenSymbol,
+  AdminClient,
   createPendingSession,
   loadSession,
   loadStoredSession,
@@ -1244,6 +1370,7 @@ export {
   updateSession,
   clearSession,
   isSessionValid,
+  getWalletSessionByChain,
   resolveAPIKey,
   resolveAccessKey,
   resolveNetwork,