@oracle-agent/oracle 0.11.0 → 0.12.0

package/dist/nft-gas-war-guard.mjs

@@ -0,0 +1 @@
+var x=/^(0|[1-9][0-9]*)$/,l=class extends Error{constructor(t){super(`nft gas-war limit: ${t.reason}`),this.name="NftGasWarLimitError",this.verdict=t}};function n(e,t,{required:s=!0,allowZero:a=!1}={}){if(e==null||e===""){if(s)throw new Error(`${t} required`);return null}let i;if(typeof e=="bigint")i=e;else if(typeof e=="number"){if(!Number.isSafeInteger(e))throw new Error(`${t} must be a safe integer`);i=BigInt(e)}else if(typeof e=="string"){let r=e.trim();if(r.startsWith("0x")||r.startsWith("0X"))i=BigInt(r);else{if(!x.test(r))throw new Error(`${t} must be an integer wei string`);i=BigInt(r)}}else throw new Error(`${t} must be bigint, number, or integer string`);if(i<0n||!a&&i===0n)throw new Error(`${t} must be ${a?"non-negative":"positive"}`);return i}function G(e){let t=Number(e);if(!Number.isSafeInteger(t)||t<=0)throw new Error("chainId must be a positive integer");return t}function W(e={}){return e.maxFeePerGas!=null?n(e.maxFeePerGas,"maxFeePerGas"):e.gasPrice!=null?n(e.gasPrice,"gasPrice"):null}function P(e={}){try{let t=G(e.chainId??e.tx?.chainId),s=e.tx||e,a=e.policy||e,i=a.grant?.maxGasWei??e.grant?.maxGasWei,r=n(a.maxTotalGasWei??a.maxGasWei??i,"maxTotalGasWei"),f=n(s.gasLimit??s.gas,"gasLimit"),o=W(s);if(o==null)throw new Error("maxFeePerGas or gasPrice required");let m=n(a.maxFeePerGasWei,"maxFeePerGasWei",{required:!1}),c=n(a.maxPriorityFeePerGasWei,"maxPriorityFeePerGasWei",{required:!1}),u=s.maxPriorityFeePerGas==null?null:n(s.maxPriorityFeePerGas,"maxPriorityFeePerGas"),g=f*o;return g>r?{ok:!1,status:"BLOCK",reason:`total gas ${g} exceeds cap ${r}`,chainId:t,totalGasWei:g.toString(),maxTotalGasWei:r.toString()}:m!=null&&o>m?{ok:!1,status:"BLOCK",reason:`unit fee ${o} exceeds cap ${m}`,chainId:t,unitFeeWei:o.toString(),maxFeePerGasWei:m.toString(),totalGasWei:g.toString(),maxTotalGasWei:r.toString()}:u!=null&&c!=null&&u>c?{ok:!1,status:"BLOCK",reason:`priority fee ${u} exceeds cap ${c}`,chainId:t,priorityFeeWei:u.toString(),maxPriorityFeePerGasWei:c.toString(),totalGasWei:g.toString(),maxTotalGasWei:r.toString()}:{ok:!0,status:"PASS",reason:"gas envelope within NFT mint gas-war caps",chainId:t,totalGasWei:g.toString(),maxTotalGasWei:r.toString(),unitFeeWei:o.toString(),maxFeePerGasWei:m?.toString()??null,priorityFeeWei:u?.toString()??null,maxPriorityFeePerGasWei:c?.toString()??null}}catch(t){return{ok:!1,status:"BLOCK",reason:String(t?.message||t)}}}function F(e={}){let t=P(e);if(!t.ok)throw new l(t);return t}export{l as NftGasWarLimitError,F as assertNftMintGasWar,P as validateNftMintGasWar};

package/dist/onboarding/harness-configs.mjs

@@ -0,0 +1,4 @@
+var y="@oracle-agent/oracle";var m=["-y","--package",y,"oracle-data-mcp"],E=/(?:^|_)(?:PRIVATE_KEY|SECRET|TOKEN|PASSWORD|PASSPHRASE|MNEMONIC|SEED)(?:_|$)/i;function l(e,t){if(typeof e!="string"||!e.trim())throw new TypeError(`${t} must be a non-empty string`);if(/\r|\n|\0/.test(e))throw new TypeError(`${t} must be a single-line string`);return e.trim()}function f(e){let t=l(e,"url"),r;try{r=new URL(t)}catch{throw new TypeError("url must be a valid http(s) URL")}if(!/^https?:$/.test(r.protocol)||r.username||r.password)throw new TypeError("url must be a credential-free http(s) URL");for(let n of r.searchParams.keys())if(E.test(n)||/^(?:key|api[_-]?key|auth)$/i.test(n))throw new TypeError(`url must not contain secret-shaped query parameter: ${n}`);return r.href}function g(e){let t=l(e,"key");if(/^[A-Z][A-Z0-9_]*\s*=/.test(t)||/-----BEGIN [A-Z ]*PRIVATE KEY-----/.test(t))throw new TypeError("key must be an Oracle agent key, not an environment assignment or private key");if(/^(?:0x)?[0-9a-f]{64}$/i.test(t)||t.trim().split(/\s+/).length>=12)throw new TypeError("key looks like private signing material");return t}function d(e){let t=l(e,"label");if(!/^[a-z0-9][a-z0-9_-]{0,62}$/i.test(t))throw new TypeError("label must contain only letters, digits, underscores, and hyphens");if(E.test(t))throw new TypeError("label must not be a secret-shaped environment name");return t}function p(e){return`${JSON.stringify(e,null,2)}
+`}function a(e){return JSON.stringify(e)}function s(e){return JSON.stringify(e)}function h({url:e,key:t,label:r="oracle-data"}={}){let n=f(e),i=g(t),o=d(r),u={command:"npx",args:[...m],env:{ORACLE_DATA_URL:n,ORACLE_AGENT_KEY:i}},c={mcpServers:{[o]:u}};return{hermes:["mcp_servers:",`  ${o}:`,`    command: ${a("npx")}`,"    args:",...m.map(A=>`      - ${a(A)}`),"    env:",`      ORACLE_DATA_URL: ${a(n)}`,`      ORACLE_AGENT_KEY: ${a(i)}`,""].join(`
+`),claudeCode:p(c),codex:[`[mcp_servers.${s(o)}]`,`command = ${s("npx")}`,`args = [${m.map(s).join(", ")}]`,"",`[mcp_servers.${s(o)}.env]`,`ORACLE_DATA_URL = ${s(n)}`,`ORACLE_AGENT_KEY = ${s(i)}`,""].join(`
+`),cursor:p(c),genericMcp:p(c)}}var _=h;export{_ as createHarnessConfigs,h as emitHarnessConfigs};

package/dist/portfolio-risk.mjs

@@ -0,0 +1 @@
+var x=Object.freeze({assetHighPct:50,assetMediumPct:25,chainHighPct:75,venueHighPct:60,stablecoinHighPct:70}),L=new Set(["USDC","USDT","USDT0","DAI","FRAX","LUSD","TUSD","USDP","GUSD","PYUSD","USDE"]);function K(n){if(n===null||n===""||n===void 0)return null;let e=Number(n);return Number.isFinite(e)&&e>=0?e:null}function b(n){return Math.round((n+Number.EPSILON)*1e8)/1e8}function P(n,e){return e>0?b(n/e*100):null}function V(n){return n.address||n.owner||n.walletAddress||n.wallet?.address||null}function E(n){let e=Array.isArray(n)?n:Array.isArray(n?.entries)?n.entries:[],a=new Map;for(let s of e){if(!s?.address)continue;let l=String(s.address).toLowerCase();a.has(l)||a.set(l,s)}return a}function f(n,e,a={}){if(!e||typeof e!="object")return;let s=String(e.symbol??e.coin??e.name??e.collection??e.tokenId??"unknown"),l=K(e.usdValue??e.valueUsd??e.knownUsd??e.estimatedValueUsd??e.floorValueUsd),o=e.kind==="nft"||e.type==="nft"||e.collection||e.tokenId!=null?"nft":"fungible";n.push({symbol:s,usdValue:l,chain:String(e.chain??e.chainName??a.chain??"unknown"),venue:String(e.venue??e.protocol??e.platform??a.venue??"wallet"),address:e.address??a.address??null,kind:o,stablecoin:e.stablecoin===!0||L.has(s.toUpperCase())})}function T(n){let e=[],a=V(n);for(let s of n.assets||n.holdings||[])f(e,s,{address:a,chain:n.chain,venue:n.venue});for(let s of n.chains||[]){let l=s.chain??s.name??s.slug??(s.chainId!=null?String(s.chainId):s.family)??"unknown",o={address:s.address??a,chain:l,venue:s.venue};s.native&&(s.native.amount==null||Number(s.native.amount)!==0)&&f(e,{...s.native,symbol:s.native.symbol??s.symbol??l},o);for(let r of s.assets||s.fungibleTokens?.assets||[])f(e,r,o);for(let r of s.collectibles?.assets||s.nfts||[])f(e,{...r,kind:"nft"},o);for(let r of s.spot?.balances||[])f(e,r,{...o,venue:"Hyperliquid spot"});let p=K(s.perps?.accountValueUsd);p!=null&&f(e,{symbol:"perps account",usdValue:p},{...o,venue:"Hyperliquid perps"})}for(let s of n.inventory?.items||n.nfts?.items||[])f(e,{...s,kind:"nft"},{address:a,chain:s.chain??n.chain,venue:s.marketplace??n.venue});return e}function M(n,e){let a=V(n),s=n.chain??n.chainId??n.family??"*";return a?`${String(a).toLowerCase()}|${String(s).toLowerCase()}`:`snapshot:${e}`}function I(n,e,a){let s=new Map;for(let l of n){if(l.usdValue==null)continue;let o=l[e];s.set(o,(s.get(o)||0)+l.usdValue)}return[...s].map(([l,o])=>({name:l,knownUsd:b(o),percentOfKnown:P(o,a)})).sort((l,o)=>o.knownUsd-l.knownUsd||l.name.localeCompare(o.name))}function z(n={},e={}){let a=Array.isArray(n)?n:Array.isArray(n.snapshots)?n.snapshots:n.snapshot?[n.snapshot]:[],s=E(e.labels??e.addressBook??n.labels??n.addressBook),l={...x,...n.thresholds||{},...e.thresholds||{}},o=[],p=new Set,r=0;a.forEach((t,c)=>{if(!t||typeof t!="object")return;let O=M(t,c);p.has(O)?r+=1:(p.add(O),o.push(t))});let y=o.flatMap(T),m=y.filter(t=>t.usdValue!=null),C=y.filter(t=>t.usdValue==null),D=o.reduce((t,c)=>t+Number(c.valuation?.unpricedNonzeroItems||c.unpricedNonzeroItems||0),0),i=b(m.reduce((t,c)=>t+c.usdValue,0)),h=C.length+D,v=I(m,"chain",i),g=I(m,"venue",i),w=I(m,"symbol",i);for(let t of v)t.chain=t.name;for(let t of g)t.venue=t.name;for(let t of w)t.asset=t.name,t.symbol=t.name;let S=b(m.filter(t=>t.stablecoin).reduce((t,c)=>t+c.usdValue,0)),k=y.filter(t=>t.kind==="nft"),N=o.reduce((t,c)=>t+Number(c.valuation?.nftUnvaluedItems||0),0),U=k.filter(t=>t.usdValue==null).length+N,H=k.filter(t=>t.usdValue!=null).length,u=w[0]||null,A=u?u.percentOfKnown>=l.assetHighPct?"high":u.percentOfKnown>=l.assetMediumPct?"medium":"low":"unknown",d=[];h&&d.push(`${h} nonzero holding(s) have unknown USD value; they are excluded from totals and percentages.`),U&&d.push("NFT valuation coverage is partial; estimates are not executable bids and unvalued NFTs are not treated as zero."),r&&d.push(`${r} duplicate address/chain snapshot(s) were ignored.`),u&&A!=="low"&&d.push(`Asset concentration is ${A}: ${u.name} is ${u.percentOfKnown}% of known value.`),v[0]?.percentOfKnown>=l.chainHighPct&&d.push(`Chain concentration is high: ${v[0].name} is ${v[0].percentOfKnown}% of known value.`),g[0]?.percentOfKnown>=l.venueHighPct&&d.push(`Venue concentration is high: ${g[0].name} is ${g[0].percentOfKnown}% of known value.`);let $=o.map(V).filter(Boolean).map(t=>{let c=s.get(String(t).toLowerCase());return{address:t,label:c?.label??null,who:c?.who??null,role:c?.role??null}});return{totalKnownUsd:i,coverage:{complete:o.length>0&&h===0&&o.every(t=>t.valuation?.complete!==!1&&t.coverage?.complete!==!1),label:h===0&&o.length&&o.every(t=>t.valuation?.complete!==!1&&t.coverage?.complete!==!1)?"complete for the supplied snapshots":"known priced value only; portfolio coverage is partial or unverified",unknownUsd:h?null:0,pricedItemCount:m.length,unknownItemCount:h,snapshotCount:o.length,duplicatesIgnored:r},chainExposures:v,venueExposures:g,topAssets:w.slice(0,Math.max(1,Number(e.topAssets??n.topAssets??10))),concentrationRisk:{level:A,topAsset:u?.name??null,topAssetPercent:u?.percentOfKnown??null,thresholds:{mediumPct:l.assetMediumPct,highPct:l.assetHighPct}},stablecoinExposure:{knownUsd:S,percentOfKnown:P(S,i),high:i>0&&P(S,i)>=l.stablecoinHighPct},nftCoverage:{status:k.length||N?U?"partial":"valued":"not-observed",valuedItems:H,unvaluedItems:U,knownUsd:b(k.filter(t=>t.usdValue!=null).reduce((t,c)=>t+c.usdValue,0))},addresses:$,warnings:[...new Set(d)]}}var F=z;export{x as DEFAULT_RISK_THRESHOLDS,F as portfolioRiskSummary,z as summarizePortfolioRisk};

package/dist/prepare-envelope.mjs

@@ -0,0 +1 @@
+import{createHash as P,createHmac as l,timingSafeEqual as b}from"node:crypto";var R=2,m=300*1e3,S=(()=>{let r=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(r)&&r>0?r:1800*1e3})();function $(r){let e=r==null||r===""?m:Number(r);return!Number.isFinite(e)||e<0?m:Math.min(e,S)}function d(r){return r===null||typeof r!="object"?JSON.stringify(r):Array.isArray(r)?`[${r.map(d).join(",")}]`:`{${Object.keys(r).sort().map(n=>`${JSON.stringify(n)}:${d(r[n])}`).join(",")}}`}function M(r){let e=String(r?.ORACLE_STAMP_HMAC_SECRET||"").trim();return e.length>=16?e:""}function g(r=process.env){return M(process.env)||M(r)}function y(r=process.env){return String(process.env.ORACLE_STAMP_REQUIRE_MAC||"").trim()==="1"||String(r?.ORACLE_STAMP_REQUIRE_MAC||"").trim()==="1"}function C(r){let{oraclePrepared:e,prepareHash:n,prepareMac:o,note:i,...t}=r||{};return t}function _(r){let e=C(r);return P("sha256").update(d(e)).digest("hex")}function x(r,e=g()){return e?l("sha256",e).update(String(r)).digest("hex"):""}function H(r,e){try{let n=Buffer.from(String(r),"hex"),o=Buffer.from(String(e),"hex");return n.length===0||n.length!==o.length?!1:b(n,o)}catch{return!1}}function v(r,{provider:e,kind:n,env:o=process.env}={}){if(!r||typeof r!="object")throw new Error("stampPrepared: payload object required");let i={...r,provider:r.provider||e,kind:r.kind||n,requiresUserSignature:r.requiresUserSignature!==!1,signingReady:!1,broadcastReady:!1,executionReady:!1};if(!i.provider)throw new Error("stampPrepared: provider required");if(!i.kind)throw new Error("stampPrepared: kind required");let t=Date.now(),f=t+m,s={...i,preparedAt:t,expiresAt:f,prepareVersion:R},a=_(s),p=g(o),c=p?x(a,p):void 0,u={...s,oraclePrepared:!0,prepareHash:a};return c&&(u.prepareMac=c),u}function k(r,{maxAgeMs:e=m,nowMs:n=Date.now(),providers:o=null,kinds:i=null,label:t="operator",env:f=process.env}={}){if(!r||typeof r!="object")throw new Error(`${t}: prepared envelope object required`);if(r.oraclePrepared!==!0)throw new Error(`${t}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(r.prepareVersion)!==R)throw new Error(`${t}: unsupported prepareVersion ${r.prepareVersion}`);let h=_(r);if(String(r.prepareHash||"")!==h)throw new Error(`${t}: prepareHash mismatch \u2014 payload was altered after prepare`);let s=g(f),a=String(r.prepareMac||"");if(y(f)||a||s){if(!s)throw new Error(`${t}: prepareMac present or ORACLE_STAMP_REQUIRE_MAC=1 but ORACLE_STAMP_HMAC_SECRET missing in signer`);let w=x(h,s);if(!a||!H(a,w))throw new Error(`${t}: prepareMac mismatch \u2014 stamp not from trusted preparer`)}let p=Number(r.preparedAt),c=Number(r.expiresAt),u=$(e),E=n-p,A=c-p;if(!Number.isFinite(E)||!Number.isFinite(c)||!Number.isFinite(A)||E<0||A<=0||A>S||E>u||n>c)throw new Error(`${t}: prepare envelope expired or clock-skewed (ageMs=${E}, max=${u})`);if(o&&!new Set(o).has(r.provider))throw new Error(`${t}: provider ${r.provider} not allowed here`);if(i&&!new Set(i).has(r.kind))throw new Error(`${t}: kind ${r.kind} not allowed here`);return!0}export{S as PREPARE_HARD_MAX_AGE_MS,m as PREPARE_MAX_AGE_MS,R as PREPARE_VERSION,k as assertPreparedEnvelope,_ as computePrepareHash,x as computePrepareMac,C as prepareBodyForHash,$ as resolvePrepareMaxAgeMs,v as stampPrepared};

package/dist/public-control/policy-schema.mjs

@@ -0,0 +1 @@
+import{createHash as I}from"node:crypto";var w=1,p=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),O=Object.freeze(["read","simulate"]),x=1e4,A=1440*60,y=128,b=256,_=64,h=256,E=/^0x[0-9a-fA-F]{40}$/,R=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,T=/^[a-z][a-z0-9_-]*:\*$/,C=/^[A-Za-z0-9._:-]+$/,k=/^[A-Za-z0-9._:-]+$/,S=/^(0|[1-9][0-9]*)$/,m=class extends Error{constructor(s){let r=s.map(t=>`${t.field}: ${t.message}`);super(`invalid grant (${s.length} error${s.length===1?"":"s"}): ${r.join("; ")}`),this.name="GrantValidationError",this.errors=s}};function N(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function z(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let s=e.trim();return S.test(s)?s:null}return null}function c(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let s=e.trim();if(!S.test(s))return null;let r=Number(s);return Number.isSafeInteger(r)?r:null}return null}function G(e){let s=String(e).split(":")[0];return O.includes(s)}function j(e,s={}){let r=[],t=(n,i)=>r.push({field:n,message:i});if(!N(e))return t("grant","grant must be a plain object"),{ok:!1,errors:r,grant:null};for(let n of Object.keys(e))p.includes(n)||t(n,"unknown field is not allowed");for(let n of p)(!(n in e)||e[n]==null)&&t(n,"required field is missing");if(r.length)return{ok:!1,errors:r,grant:null};let o={},f=c(e.chainId);f==null||f<=0?t("chainId","must be a positive integer chain id"):o.chainId=f;for(let n of["agentAddress","accountAddress"]){let i=e[n];typeof i!="string"||!E.test(i.trim())?t(n,"must be a 0x-prefixed 20-byte hex address"):o[n]=i.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)t("actions","must be a non-empty array of action scopes");else if(e.actions.length>_)t("actions",`too many actions (max ${_})`);else{let n=[];for(let i of e.actions){let a=typeof i=="string"?i.trim():null;if(!a){t("actions","action entries must be non-empty strings");continue}if(a.includes("*")){s.allowWildcardActions===!0&&T.test(a)?n.push(a):t("actions",`broad wildcard action "${a}" is rejected (fail closed)`);continue}if(!R.test(a)){t("actions",`malformed action "${a}" (expected verb:resource)`);continue}n.push(a)}o.actions=[...new Set(n)].sort()}if(!Array.isArray(e.targets))t("targets","must be an array of contract addresses");else if(e.targets.length>h)t("targets",`too many targets (max ${h})`);else{let n=[];for(let i of e.targets){let a=typeof i=="string"?i.trim():null;if(!a||!E.test(a)){t("targets",`target "${i}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}n.push(a.toLowerCase())}if(o.targets=[...new Set(n)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let i=o.actions.filter(a=>!G(a));(i.length>0||o.actions.length===0)&&t("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${i.join(", ")||"no valid actions"})`)}}for(let n of["maxValueWei","maxGasWei"]){let i=z(e[n]);i==null?t(n,"must be a non-negative integer wei amount"):o[n]=i}let d=c(e.maxSlippageBps);d==null||d>x?t("maxSlippageBps",`must be an integer between 0 and ${x}`):o.maxSlippageBps=d;let $=864e10,l=c(e.expiresAt);if(l==null||l<=0)t("expiresAt","must be a positive unix-seconds timestamp");else if(l>$)t("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,s.now!=null){let n=c(s.now);n==null?t("expiresAt","opts.now must be a unix-seconds integer"):l<=n?t("expiresAt",`grant is expired (expiresAt ${l} <= now ${n})`):l-n>A&&t("expiresAt",`grant exceeds the hard 24-hour TTL (${A} seconds)`)}let u=typeof e.nonce=="string"?e.nonce.trim():c(e.nonce)!=null?String(c(e.nonce)):null;!u||u.length>y||!C.test(u)?t("nonce",`must be a non-empty string (max ${y} chars, [A-Za-z0-9._:-])`):o.nonce=u;let g=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!g||g.length>b||!k.test(g)?t("revocationKey",`must be a non-empty public identifier (max ${b} chars, [A-Za-z0-9._:-])`):o.revocationKey=g,r.length?{ok:!1,errors:r,grant:null}:{ok:!0,errors:[],grant:o}}function L(e,s={}){let{ok:r,errors:t,grant:o}=j(e,s);if(!r)throw new m(t);return o}function D(e,s={}){let r=L(e,s),o=Object.keys(r).sort().map(f=>`${JSON.stringify(f)}:${JSON.stringify(r[f])}`);return`{"version":${w},${o.join(",")}}`}function X(e,s={}){return I("sha256").update(D(e,s),"utf8").digest("hex")}function B(e,s){let r=c(s),t=c(N(e)?e.expiresAt:null);return r==null||t==null?!0:t<=r}export{w as GRANT_VERSION,m as GrantValidationError,_ as MAX_ACTIONS,A as MAX_GRANT_TTL_SECONDS,y as MAX_NONCE_LENGTH,b as MAX_REVOCATION_KEY_LENGTH,x as MAX_SLIPPAGE_BPS,h as MAX_TARGETS,O as READONLY_ACTION_VERBS,p as REQUIRED_FIELDS,D as canonicalizeGrant,X as grantId,B as isExpired,G as isReadonlyAction,L as normalizeGrant,j as validateGrant};

package/dist/router/index.mjs

@@ -0,0 +1,2 @@
+var Ze=Object.defineProperty;var O=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var et=(e,t)=>{for(var r in t)Ze(e,r,{get:t[r],enumerable:!0})};import{createHash as tt}from"node:crypto";function at(e){let t=String(e||"").toLowerCase();return ue.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function it(e){let t={};for(let[r,n]of Object.entries(e||{}))at(r)||(t[r]=n);return t}function st(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function ct(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function ut(e,t,r){let n={};for(let[s,d]of Object.entries(r||{}))n[s.toLowerCase()]=d;let o=Object.keys(n).filter(s=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(s)),i=[...new Set([...ue,...o])].sort().map(s=>`${s}=${n[s]??""}`).join(`
+`),a=tt("sha256").update(i).digest("hex").slice(0,32);return`${e} ${t} ${a}`}function lt(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,se):Math.min(250*2**e,se)+Math.floor(Math.random()*100)}async function dt(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:c}){let i=new AbortController,a=setTimeout(()=>i.abort(),c);try{let s=String(e),d={...n||{}};for(let p=0;p<=ce;p+=1){let l=await t(s,{method:r,headers:d,body:o,signal:i.signal,redirect:"manual"}),u=await l.text(),m=null;if(u)try{m=JSON.parse(u)}catch{m=null}if(ot.has(l.status)){if(r!=="GET"&&r!=="HEAD"){let h=new Error(`HTTP ${l.status} ${r} ${s} redirected non-idempotent request`);throw h.status=l.status,h.body=m??u.slice(0,300),h}if(p===ce)throw new Error(`HTTP redirect loop for ${e}`);let f=st(l.headers?.get?.("location"),s);ct(f,s)||(d=it(d)),s=f;continue}if(!l.ok){let f=new Error(`HTTP ${l.status} ${r} ${s}`);throw f.status=l.status,f.retryAfter=l.headers?.get?.("retry-after")??null,f.body=m??u.slice(0,300),f}return m??u}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(a)}}async function b(e,t={}){let r=t.fetchImpl||globalThis.fetch;if(typeof r!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let n=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),c={Accept:"application/json",...t.headers||{}},i=t.body;i!=null&&typeof i!="string"&&(c["Content-Type"]=c["Content-Type"]||"application/json",i=JSON.stringify(i));let a=Number.isInteger(t.retries)?Math.max(t.retries,0):nt,s=async()=>{let m;for(let f=0;f<=a;f++)try{return await dt(e,{fetchImpl:r,method:o,headers:c,body:i,timeoutMs:n})}catch(h){m=h;let w=h?.status,g=h?.name==="AbortError",L=new Set([408,425,429]),_=w!=null?L.has(w)||rt.has(w)&&ie.has(o):!g&&ie.has(o);if(f===a||!_)throw h;await pt(lt(f,h?.retryAfter))}throw m};if(!(t.dedupe!==!1&&o==="GET"&&i==null))return s();let p=ut(o,e,c),l=K.get(p);if(l)return l;let u=s().finally(()=>K.delete(p));return K.set(p,u),u}var rt,ie,nt,se,ue,ot,ce,K,pt,x=O(()=>{rt=new Set([408,425,429,500,502,503,504]),ie=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),nt=2,se=4e3,ue=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],ot=new Set([301,302,303,307,308]),ce=3;K=new Map;pt=e=>new Promise(t=>setTimeout(t,e))});import{readFileSync as mt}from"node:fs";import{homedir as ft}from"node:os";import{join as le}from"node:path";function ht(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let r=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return r?[r]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),t=ft();return[e,le(t,".config","oracle","exec.env"),le(t,".config","mad-desk","exec.env")].filter(Boolean)}function pe(e,t,r){let n=e??process.env[t]??process.env[r];if(!String(n||"").trim())for(let o of ht())try{let c=mt(o,"utf8"),i=c.match(new RegExp(`^${t}=(.*)$`,"m"))||c.match(new RegExp(`^${r}=(.*)$`,"m"));if(i&&(n=i[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${t} required for attestation. Set it in the environment, or place ${t}=<value> in ~/.config/oracle/exec.env`);return n}var de=O(()=>{});var me=O(()=>{});import{createHash as wt,createHmac as gt,timingSafeEqual as Br}from"node:crypto";function X(e){return Array.isArray(e)?`[${e.map(X).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${X(e[t])}`).join(",")}}`:JSON.stringify(e??null)}function bt(e,{required:t=!1}={}){try{return pe(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(r){if(t)throw r;return null}}function we(e){let{signature:t,...r}=e;return r}function ge(e,{secret:t}={}){let r=bt(t);return r?{...e,signature:gt("sha256",r).update(X(we(e))).digest("hex")}:e}function Et(e){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<10||t.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return wt("sha256").update(Buffer.from(t.slice(2),"hex")).digest("hex")}function R(e,{chainId:t,venue:r,data:n,secret:o}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");if(Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(String(e.venue).toLowerCase()!==String(r||"").toLowerCase())throw new Error("auto-slippage guard venue mismatch");return ge({...we(e),calldataHash:Et(n)},{secret:o})}function Y(e,t=0){let r=Number(e);return Number.isFinite(r)?r:t}function At(e){let t=e==null?fe:Number(e);if(!Number.isInteger(t)||t<0)throw new Error("auto-slippage cap must be a non-negative integer bps value");return Math.min(t,fe)}function S({liquidityUsd:e,priceChange5m:t=0,quoteAgeMs:r=0,crossChain:n=!1,requestedCapBps:o}={}){let c=Y(e,0),i=c>0?c>=25e4?5:c>=1e5?10:c>=5e4?20:c>=1e4?40:70:n?30:10,a=Math.min(60,Math.abs(Y(t,0))*2),s=Math.min(40,Math.floor(Math.max(0,Y(r,0))/5e3)*5),d=Math.max(25,Math.ceil(20+i+a+s)),p=At(o);return{mode:"auto",requiredBps:d,selectedBps:Math.min(d,p),capBps:p,executable:d<=p}}function yt({chainId:e,venue:t,quoteAmountOut:r,liquidityUsd:n,priceChange5m:o=0,quoteAgeMs:c=0,crossChain:i=!1,requestedCapBps:a,quotedAtMs:s=Date.now(),ttlMs:d=he,secret:p}={}){let l=BigInt(r??0);if(l<=0n)throw new Error("auto-slippage guard requires positive quoteAmountOut");let u=S({liquidityUsd:n,priceChange5m:o,quoteAgeMs:c,crossChain:i,requestedCapBps:a});if(!u.executable)throw new Error(`auto-slippage requires ${u.requiredBps} bps above hard/requested cap ${u.capBps}; route blocked`);let m=Number(s);if(!Number.isFinite(m))throw new Error("auto-slippage: quotedAtMs must be a finite number");let f=Math.min(3e4,Math.max(1e3,Number(d)||he)),h=l*BigInt(1e4-u.selectedBps),w=h/10000n;if(h%10000n!==0n&&(w+=1n),w>l&&(w=l),l>0n&&w<=0n)throw new Error(`auto-slippage: quote ${l} is too small to express a ${u.selectedBps} bps floor without rounding to zero`);let g=Number((l-w)*10000n/(l===0n?1n:l));if(g>u.capBps)throw new Error(`auto-slippage: realised floor implies ${g} bps, above cap ${u.capBps} \u2014 refusing to issue a guard weaker than advertised`);return ge({mode:"auto",chainId:Number(e),venue:String(t||"unknown"),quoteAmountOut:l.toString(),minAmountOut:w.toString(),requiredBps:u.requiredBps,selectedBps:u.selectedBps,capBps:u.capBps,quotedAtMs:m,expiresAtMs:m+f},{secret:p})}function E(e,{chainId:t,venue:r,amountOut:n,liquidityUsd:o,priceChange5m:c,crossChain:i,requestedCapBps:a,quotedAtMs:s=Date.now(),ttlMs:d}={}){let p=yt({chainId:t,venue:r,quoteAmountOut:n,liquidityUsd:o,priceChange5m:c,crossChain:i,requestedCapBps:a,quotedAtMs:s,ttlMs:d});return{...e,autoSlippage:p,amountOutMinimum:p.minAmountOut}}var fe,he,I=O(()=>{de();me();fe=100,he=2e4});function be(e){let t=String(e||"").trim();return/^0x[0-9a-fA-F]{40}$/.test(t)?t:T}var T,D=O(()=>{T="0x000000000000000000000000000000000000dEaD"});import{createHash as xt,createHmac as St,timingSafeEqual as Mr}from"node:crypto";function Q(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(Q).join(",")}]`:`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${Q(e[r])}`).join(",")}}`}function Ee(e){let t=String(e?.ORACLE_STAMP_HMAC_SECRET||"").trim();return t.length>=16?t:""}function Ae(e=process.env){return Ee(process.env)||Ee(e)}function vt(e){let{oraclePrepared:t,prepareHash:r,prepareMac:n,note:o,...c}=e||{};return c}function kt(e){let t=vt(e);return xt("sha256").update(Q(t)).digest("hex")}function _t(e,t=Ae()){return t?St("sha256",t).update(String(e)).digest("hex"):""}function C(e,{provider:t,kind:r,env:n=process.env}={}){if(!e||typeof e!="object")throw new Error("stampPrepared: payload object required");let o={...e,provider:e.provider||t,kind:e.kind||r,requiresUserSignature:e.requiresUserSignature!==!1,signingReady:!1,broadcastReady:!1,executionReady:!1};if(!o.provider)throw new Error("stampPrepared: provider required");if(!o.kind)throw new Error("stampPrepared: kind required");let c=Date.now(),i=c+Ct,s={...o,preparedAt:c,expiresAt:i,prepareVersion:It},d=kt(s),p=Ae(n),l=p?_t(d,p):void 0,u={...s,oraclePrepared:!0,prepareHash:d};return l&&(u.prepareMac=l),u}var It,Ct,Fr,v=O(()=>{It=2,Ct=300*1e3,Fr=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});var Z={};et(Z,{ACROSS_API:()=>je,HOP_API:()=>ze,RELAY_API:()=>Ge,acrossHealth:()=>pr,acrossSuggestedFees:()=>Ke,hopHealth:()=>dr,hopQuote:()=>Ye,relayHealth:()=>mr,relayPrepare:()=>fr,relayQuote:()=>J});async function pr(e={}){try{return{ok:!0,estimatedFillTimeSec:(await Ke({token:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",destinationToken:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",originChainId:1,destinationChainId:42161,amount:"1000000000000000"},e)).estimatedFillTimeSec}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function Ke(e={},t={}){let{token:r,destinationToken:n=r,originChainId:o,destinationChainId:c,amount:i}=e;if(!r||o==null||c==null||!i)throw new Error("acrossSuggestedFees requires token, originChainId, destinationChainId, amount");let a=new URLSearchParams({token:r,destinationToken:n,originChainId:String(o),destinationChainId:String(c),amount:String(i)}),s=(t.baseUrl||process.env.ACROSS_API_URL||je).replace(/\/$/,"");return b(`${s}/suggested-fees?${a}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3})}async function dr(e={}){try{let t=await Ye({amount:"1000000000000000",token:"ETH",fromChain:"ethereum",toChain:"arbitrum",slippage:.5},e);return{ok:!0,estimatedRecieved:t.estimatedRecieved||t.estimatedReceived}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function Ye(e={},t={}){let{amount:r,token:n="ETH",fromChain:o="ethereum",toChain:c="arbitrum"}=e;if(!r)throw new Error("hopQuote requires amount");let i=e.slippage==null?void 0:Math.round(Number(e.slippage)*100),a=S({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:o!==c,requestedCapBps:e.maxSlippageBps??e.slippageBps??i});if(!a.executable)throw new Error(`hop: route requires ${a.requiredBps} bps above cap ${a.capBps}`);let s=new URLSearchParams({amount:String(r),token:n,fromChain:o,toChain:c,slippage:String(a.selectedBps/100)}),d=(t.baseUrl||process.env.HOP_API_URL||ze).replace(/\/$/,""),p=await b(`${d}/quote?${s}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3}),l=p?.estimatedRecieved||p?.estimatedReceived;return l?E(p,{chainId:Number(e.originChainId||e.chainId||lr[o]||0),venue:p?.tx?.to||"hop",amountOut:l,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:o!==c,requestedCapBps:e.maxSlippageBps??e.slippageBps??i}):{...p,autoSlippagePolicy:a}}async function mr(e={}){try{let t=await J({user:T,originChainId:1,destinationChainId:8453,originCurrency:"0x0000000000000000000000000000000000000000",destinationCurrency:"0x0000000000000000000000000000000000000000",amount:"1000000000000000",tradeType:"EXACT_INPUT"},e);return{ok:!0,hasSteps:Array.isArray(t.steps),stepCount:t.steps?.length||0}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function J(e={},t={}){let{user:r=T,originChainId:n,destinationChainId:o,originCurrency:c="0x0000000000000000000000000000000000000000",destinationCurrency:i="0x0000000000000000000000000000000000000000",amount:a,tradeType:s="EXACT_INPUT"}=e;if(n==null||o==null||!a)throw new Error("relayQuote requires originChainId, destinationChainId, amount");let d=S({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(o),requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!d.executable)throw new Error(`relay: route requires ${d.requiredBps} bps above cap ${d.capBps}`);let p=(t.baseUrl||process.env.RELAY_API_URL||Ge).replace(/\/$/,""),l=await b(`${p}/quote`,{method:"POST",body:{user:r,originChainId:Number(n),destinationChainId:Number(o),originCurrency:c,destinationCurrency:i,amount:String(a),tradeType:s,slippageTolerance:String(d.selectedBps)},fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),u=l?.details?.currencyOut?.amount;return!u||!/^\d+$/.test(String(u))?{...l,autoSlippagePolicy:d}:E(l,{chainId:Number(n),venue:l?.steps?.[0]?.items?.[0]?.data?.to||"relay",amountOut:u,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(o),requestedCapBps:e.maxSlippageBps??e.slippageBps})}async function fr(e={},t={}){let r=await J(e,t),n=Number(e.originChainId),o=(r.steps||[]).flatMap(a=>(a.items||[]).filter(s=>s?.data?.to&&s?.data?.data).map(s=>({stepId:a.id,...s.data})));if(!o.length)throw new Error("relay: quote returned no executable transaction items");let c=String(r?.autoSlippage?.venue||"").toLowerCase();if(o.some(a=>String(a.to).toLowerCase()!==c))throw new Error("relay: route includes a separate approval/transaction that is not yet safely bound");let i=o.map(a=>({chainId:n,from:a.from||e.user,to:a.to,data:a.data,value:a.value??"0x0",...a.gasLimit!=null||a.gas!=null?{gasLimit:a.gasLimit??a.gas}:{},slippageGuard:R(r.autoSlippage,{chainId:n,venue:a.to,data:a.data})}));return C({provider:"relay",calldataReady:!0,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,chainId:n,quote:r,autoSlippage:r.autoSlippage,transactions:i},{provider:"relay",kind:"relay-tx"})}var je,ze,Ge,lr,ee=O(()=>{x();I();D();v();je="https://across.to/api",ze="https://api.hop.exchange/v1",Ge="https://api.relay.link",lr={ethereum:1,optimism:10,bsc:56,polygon:137,arbitrum:42161,avalanche:43114,base:8453}});var gr=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),br=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),Er=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});var y=Object.freeze({FULL:"FULL",NO_GAS:"NO_GAS",FAILED:"FAILED"}),ne={1:"coingecko:ethereum",10:"coingecko:ethereum",56:"coingecko:binancecoin",137:"coingecko:matic-network",8453:"coingecko:ethereum",42161:"coingecko:ethereum",43114:"coingecko:avalanche-2",999:"coingecko:ethereum"},$=e=>{try{return e==null||e===""?null:BigInt(String(e).split(".")[0])}catch{return null}};function re(e){let{source:t,amountOut:r,minOut:n=null,gasUsd:o=null,feeUsd:c=null,estimatedGas:i=null,error:a=null,executionReady:s=!1,meta:d={}}=e||{};if(a||r==null)return{source:t,quality:y.FAILED,amountOut:null,error:a||"no amountOut returned"};let p=$(r);return p==null||p<=0n?{source:t,quality:y.FAILED,amountOut:null,error:"non-positive amountOut"}:{source:t,quality:o==null?y.NO_GAS:y.FULL,amountOut:p.toString(),minOut:$(n)?.toString()??null,gasUsd:o,feeUsd:c,estimatedGas:i==null?null:String(i),executionReady:s,meta:d}}async function oe(e,t,{divisor:r=1000n}={}){let n=$(t);if(n==null||n<=0n)return null;let o=n/r>0n?n/r:1n;if(o>=n)return null;let c,i;try{[c,i]=await Promise.all([e(o),e(n)])}catch{return null}let a=$(c),s=$(i);if(a==null||s==null||a<=0n)return null;let d=Number(a)/Number(o),p=Number(s)/Number(n);return!Number.isFinite(d)||!Number.isFinite(p)||d<=0?null:{impactPct:(1-p/d)*100,probeAmountIn:o.toString(),probeAmountOut:a.toString(),fullAmountOut:s.toString()}}function ae(e,t,{maxImpactPct:r=25}={}){let n=[],o=[],c=(e.routes??[]).filter(a=>{let s=t?.[a.source];return s?s.impactPct>r?(n.push({source:a.source,impactPct:Number(s.impactPct.toFixed(2)),reason:`price impact ${s.impactPct.toFixed(1)}% exceeds ${r}% ceiling -- the venue cannot absorb this size near the quoted price`}),!1):!0:(o.push(a.source),!0)}),i=[...e.warnings??[]];return n.length&&i.push(`dropped ${n.length} route(s) on price impact: `+n.map(a=>`${a.source} (${a.impactPct}%)`).join(", ")),o.length&&i.push(`price impact NOT measured for: ${o.join(", ")}. These are unproven against thin liquidity, not proven safe.`),{...e,routes:c,best:c[0]??null,impactRejected:n,impactUnmeasured:o,warnings:i}}function G(e,{destPriceUsd:t=null,destDecimals:r=null}={}){let n=e.filter(l=>l.quality!==y.FAILED),o=e.filter(l=>l.quality===y.FAILED),c=t!=null&&t>0&&r!=null&&r>=0,i=n.map(l=>{let u=BigInt(l.amountOut),m=0n,f=!1;if(c){let w=(l.gasUsd??0)+(l.feeUsd??0);if(w>0){let g=w/t*10**r;Number.isFinite(g)&&g>=0&&(m=BigInt(Math.floor(g)),f=!0)}else l.gasUsd===0&&(f=!0)}let h=u>m?u-m:0n;return{...l,grossOut:u.toString(),netOut:h.toString(),costInDest:m.toString(),costAccounted:f}});i.sort((l,u)=>BigInt(u.netOut)>BigInt(l.netOut)?1:-1);let a=i.filter(l=>!l.costAccounted).map(l=>l.source),s=[];c?a.length&&s.push(`gas not reported by: ${a.join(", ")}. These are ranked on gross output and may be overstated relative to gas-measured routes.`):s.push("destination price/decimals unavailable: ranked on GROSS output. Gas is not included, so a cheap-looking route may cost more to execute.");let d=null,p=null;if(i.length>=2&&i[0].costAccounted&&i[1].costAccounted){let l=BigInt(i[0].netOut),u=BigInt(i[1].netOut);u>0n&&(d=Number((l-u)*10000n/u),p=`${i[0].source} vs ${i[1].source}`)}return{best:i[0]??null,routes:i,failed:o,improvementBps:d,spreadBasis:p,rankedOn:c?"net-of-cost":"gross",warnings:s}}async function U(e,{timeoutMs:t=12e3}={}){let r=(o,c)=>Promise.race([o,new Promise((i,a)=>setTimeout(()=>a(new Error(`${c}: timeout`)),t))]);return(await Promise.allSettled(e.map(o=>r(Promise.resolve().then(o.run),o.source)))).map((o,c)=>{let i=e[c].source;return o.status==="rejected"?re({source:i,error:String(o.reason?.message||o.reason)}):re({source:i,...o.value})})}x();I();D();v();var Ot="https://li.quest/v1";function Rt(e={}){return(e.baseUrl||process.env.LIFI_API_URL||Ot).replace(/\/$/,"")}var Tt="0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";async function W(e={},t={}){let{fromChain:r,toChain:n=r,fromToken:o=Tt,toToken:c,fromAmount:i,fromAddress:a=T}=e;if(r==null||!c||!i)throw new Error("lifiQuote requires fromChain, toToken, fromAmount");let s=new URLSearchParams({fromChain:String(r),toChain:String(n),fromToken:o,toToken:c,fromAmount:String(i),fromAddress:a}),d=S({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(r),requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!d.executable)throw new Error(`lifi: route requires ${d.requiredBps} bps above cap ${d.capBps}`);s.set("slippage",String(d.selectedBps/1e4));let p=await b(`${Rt(t)}/quote?${s}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),l=p?.estimate?.toAmount||p?.toAmount;if(!l)return{...p,autoSlippagePolicy:d};let u=p?.transactionRequest?.to||p?.estimate?.approvalAddress||"lifi",m=E(p,{chainId:Number(r),venue:u,amountOut:l,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(r),requestedCapBps:e.maxSlippageBps??e.slippageBps}),f=p?.estimate?.toAmountMin||p?.toAmountMin;if(f!=null&&BigInt(f)<BigInt(m.amountOutMinimum))throw new Error("lifi: provider transaction is under-protected versus bounded auto-slippage floor");return m}x();I();v();var Nt="https://api.paraswap.io",Bt=(e={})=>(e.baseUrl||process.env.PARASWAP_API_URL||Nt).replace(/\/$/,"");function ye(e,t){let r=String(e||"");if(!/^0x[0-9a-fA-F]{40}$/.test(r))throw new Error(`${t} must be a 20-byte token address`);return r.toLowerCase()}async function xe(e={},t={}){let r=Number(e.chainId||e.network||1);if(e.amount==null)throw new Error("amount required");let n=new URLSearchParams({srcToken:ye(e.srcToken,"srcToken"),destToken:ye(e.destToken,"destToken"),amount:String(e.amount),srcDecimals:String(Number(e.srcDecimals)),destDecimals:String(Number(e.destDecimals)),side:String(e.side||"SELL").toUpperCase(),network:String(r),version:String(e.version||"6.2")});e.includeDEXS&&n.set("includeDEXS",String(e.includeDEXS)),e.excludeDEXS&&n.set("excludeDEXS",String(e.excludeDEXS));let o=await b(`${Bt(t)}/prices?${n}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),c=o?.priceRoute?.destAmount;return c?{...E(o,{chainId:r,venue:o?.priceRoute?.contractAddress||"paraswap-quote",amountOut:c,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,quoteAgeMs:0,requestedCapBps:e.maxSlippageBps??e.slippageBps}),executionReady:!1,executionBlocker:"call prepare to bind the price route to a validated transaction"}:{...o,executionReady:!1}}x();I();var Se="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function M({provider:e,defaultUrl:t,hosts:r=[],url:n,strict:o=!1}){let i=(String(n??"").trim()||String(t)).replace(/\/$/,"");if(i===String(t).replace(/\/$/,""))return{baseUrl:i,trusted:!0,host:Ie(t)};let a;try{a=new URL(i)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(a.protocol!=="http:"&&a.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let s=a.host;if(!s)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Ie(t),...r]).has(s)){let p=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(s);return a.protocol==="http:"&&!p?{baseUrl:i,trusted:!1,host:s,reason:"plaintext http downgrade"}:{baseUrl:i,trusted:!0,host:s}}if(String(process.env[Se]||"")==="1")return{baseUrl:i,trusted:!1,host:s};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${s} (set ${Se}=1 to permit it)`);return{baseUrl:i,trusted:!1,host:s}}function Ie(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function F(e,t,r){let n={...e};if(!r)return n;for(let[o,c]of Object.entries(t||{}))c&&(n[o]=c);return n}v();var Pt="https://api.0x.org";function Ce(e={}){return M({provider:"zerox",defaultUrl:Pt,hosts:["api.0x.org"],url:e.baseUrl||process.env.ZEROX_API_URL})}function Lt(e={}){return Ce(e).baseUrl}function ve(e={}){return e.apiKey||process.env.ZEROX_API_KEY||process.env.OX_API_KEY||process.env["0X_API_KEY"]||""}function $t(e={}){return F({"0x-version":"v2",accept:"application/json"},{"0x-api-key":ve(e)},Ce(e).trusted)}async function ke(e={},t={}){if(!ve(t))throw new Error("ZEROX_API_KEY required for 0x");let{chainId:r=8453,sellToken:n,buyToken:o,sellAmount:c,taker:i}=e;if(!n||!o||!c)throw new Error("zeroxQuote requires sellToken, buyToken, sellAmount");let a=S({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!a.executable)throw new Error(`0x: route requires ${a.requiredBps} bps above cap ${a.capBps}`);let s=new URLSearchParams({chainId:String(r),sellToken:n,buyToken:o,sellAmount:String(c),slippageBps:String(a.selectedBps)});i&&s.set("taker",i);let d=await b(`${Lt(t)}/swap/allowance-holder/quote?${s}`,{headers:$t(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3}),p=d?.buyAmount||d?.grossBuyAmount;return p?E(d,{chainId:r,venue:d?.transaction?.to||d?.to||"0x",amountOut:p,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps}):{...d,autoSlippagePolicy:a}}x();I();v();var Ut="https://api.1inch.dev/swap/v6.0";function _e(e={}){return M({provider:"oneinch",defaultUrl:Ut,hosts:["api.1inch.dev"],url:e.baseUrl||process.env.ONEINCH_API_URL})}function Dt(e={}){return _e(e).baseUrl}function Oe(e={}){return e.apiKey||process.env.ONEINCH_API_KEY||process.env.ONE_INCH_API_KEY||""}function Mt(e={}){let t=Oe(e);return F({accept:"application/json"},{Authorization:t?`Bearer ${t}`:""},_e(e).trusted)}async function Re(e={},t={}){if(!Oe(t))throw new Error("ONEINCH_API_KEY required for 1inch");let r=Number(e.chainId??1),{src:n,dst:o,amount:c}=e;if(!n||!o||!c)throw new Error("oneinchQuote requires src, dst, amount");let i=new URLSearchParams({src:n,dst:o,amount:String(c)}),a=await b(`${Dt(t)}/${r}/quote?${i}`,{headers:Mt(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3});return a?.dstAmount?E(a,{chainId:r,venue:"1inch-quote",amountOut:a.dstAmount,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps}):a}x();I();import{TypedDataEncoder as hn,getAddress as wn,isAddress as gn}from"ethers";var ln=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"}),pn=Object.freeze({"evm:prepare":["ORACLE_EVM_ADDRESS","EVM_KEYSTORE_FILE","ORACLE_SIGNER_ADDRESS"],"evm:execute":["EVM_KEYSTORE_FILE","ORACLE_KEYSTORE_FILE"],"btc:execute":["BTC_WIF_FILE","ORACLE_BTC_WIF_FILE"],"solana:execute":["SOLANA_KEYPAIR_FILE","ORACLE_SOLANA_KEYPAIR_FILE"],"nft:buy":[],"nft:mint":[],"cow:submit":[]});D();v();var Ft={1:"https://api.cow.fi/mainnet/api/v1",100:"https://api.cow.fi/xdai/api/v1",42161:"https://api.cow.fi/arbitrum_one/api/v1",8453:"https://api.cow.fi/base/api/v1"},In=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),Cn=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"}),Te={1:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",8453:"0x4200000000000000000000000000000000000006",42161:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1"},Ht={1:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",8453:"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",42161:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831"},vn=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),kn=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});function qt(e,t={}){if(t.baseUrl)return t.baseUrl.replace(/\/$/,"");let r=Ft[Number(e)];if(!r)throw new Error(`cowswap: unsupported chainId ${e}`);return r}async function Ne(e={},t={}){let r=Number(e.chainId??1),n=be(e.from||e.owner),o=e.sellToken||Te[r],c=e.buyToken||Ht[r],i=String(e.sellAmountBeforeFee||e.sellAmount||"0");if(!o||!c||i==="0")throw new Error("cowQuote requires sellToken, buyToken, sellAmountBeforeFee");if(/eeeeeeee|native|^eth$/i.test(o)&&(o=Te[r],!o))throw new Error("no WETH mapping for chain");let a={sellToken:o,buyToken:c,from:n,receiver:e.receiver||n,sellAmountBeforeFee:i,kind:e.kind||"sell",signingScheme:e.signingScheme||"eip1271"},s=await b(`${qt(r,t)}/quote`,{method:"POST",body:a,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3}),d=s?.quote?.buyAmount||s?.buyAmount;return d?E(s,{chainId:r,venue:"cowswap-order",amountOut:d,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps}):s}import{Interface as De,getAddress as q,isAddress as Xt}from"ethers";x();var Be={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Vt=new Map(Object.values(Be).map(e=>[e.chainId,e]));function Pe(e){return Vt.get(Number(e))||null}function Le(e,t=process.env){let r=Pe(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}import{Interface as jt,getAddress as Pn}from"ethers";var Ln=new jt(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var zt={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Gt(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=Le(e,r);return n||zt[Number(e)]||null}var Kt=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Yt(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Kt.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}async function H(e,t,r=[],n={}){let o=String(t||"");Yt(o);let c=Gt(e,n);if(!c)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let a=await b(c,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:r},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3});if(a?.error){let s=new Error(a.error.message||JSON.stringify(a.error));throw s.code=a.error.code,s}return a.result}I();v();var N={1:{name:"ethereum",quoter:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",router:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",weth:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",usdc:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},8453:{name:"base",quoter:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",router:"0x2626664c2603336E57B271c5C0b26F421741e481",weth:"0x4200000000000000000000000000000000000006",usdc:"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"},42161:{name:"arbitrum",quoter:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",router:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",weth:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",usdc:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831"},4663:{name:"robinhood",quoter:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",router:"0xcaf681a66d020601342297493863e78c959e5cb2",weth:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",usdc:"0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168"},10:{name:"optimism",quoter:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",router:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",weth:"0x4200000000000000000000000000000000000006",usdc:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85"},56:{name:"bsc",quoter:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",router:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",weth:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",usdc:"0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d"},137:{name:"polygon",quoter:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",router:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",weth:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",usdc:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359"},43114:{name:"avalanche",quoter:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",router:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",weth:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",usdc:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"}},Qt=[100,500,3e3,1e4],$e=new De(["function quoteExactInputSingle((address tokenIn, address tokenOut, uint256 amountIn, uint24 fee, uint160 sqrtPriceLimitX96) params) returns (uint256 amountOut, uint160 sqrtPriceX96After, uint32 initializedTicksCrossed, uint256 gasEstimate)","function quoteExactInput(bytes path, uint256 amountIn) returns (uint256 amountOut, uint160[] sqrtPriceX96AfterList, uint32[] initializedTicksCrossedList, uint256 gasEstimate)"]),Hn=new De(["function exactInputSingle((address tokenIn,address tokenOut,uint24 fee,address recipient,uint256 amountIn,uint256 amountOutMinimum,uint160 sqrtPriceLimitX96) params) payable returns (uint256 amountOut)","function multicall(uint256 deadline,bytes[] data) payable returns (bytes[] results)"]),Wt="0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE",Jt="0x0000000000000000000000000000000000000000";function Zt(e){let t=Number(e),r=N[t];if(!r)throw new Error(`uniswap-v3: unsupported chainId ${e} (supported: ${Object.keys(N).join(", ")})`);return{chainId:t,...r}}function Ue(e,t){let r=N[Number(t)];if(!e||e===Wt||e===Jt||/^eth$/i.test(String(e)))return q(r.weth);let n=String(e);if(/^weth$/i.test(n))return q(r.weth);if(/^usdc$/i.test(n))return q(r.usdc);if(!Xt(n))throw new Error(`invalid token address: ${e}`);return q(n)}async function Me(e={},t={}){let{chainId:r,quoter:n,router:o}=Zt(e.chainId??8453),c=Ue(e.tokenIn||"WETH",r),i=Ue(e.tokenOut||N[r].usdc,r),a=BigInt(e.amountIn??0);if(a<=0n)throw new Error("amountIn required (raw base units)");let s=e.fee!=null?[Number(e.fee)]:e.tryFees===!1?[3e3]:[...Qt],d=[],p=null;for(let l of s){let u=$e.encodeFunctionData("quoteExactInputSingle",[{tokenIn:c,tokenOut:i,amountIn:a,fee:l,sqrtPriceLimitX96:0n}]);try{let m=await H(r,"eth_call",[{to:n,data:u},"latest"],t);if(!m||m==="0x"){d.push({fee:l,ok:!1,error:"empty result"});continue}let f=$e.decodeFunctionResult("quoteExactInputSingle",m),h={fee:l,ok:!0,amountOut:f[0].toString(),sqrtPriceX96After:f[1].toString(),initializedTicksCrossed:Number(f[2]),gasEstimate:f[3].toString()};d.push(h),(!p||BigInt(h.amountOut)>BigInt(p.amountOut))&&(p=h)}catch(m){d.push({fee:l,ok:!1,error:String(m.message||m).slice(0,160)})}}if(!p){let l=d.map(u=>`${u.fee}:${u.error||"fail"}`).join("; ");throw new Error(`uniswap-v3 quote failed chain=${r}: ${l}`)}return E({venue:"uniswap-v3",chainId:r,chain:N[r].name,quoter:n,tokenIn:c,tokenOut:i,amountIn:a.toString(),fee:p.fee,amountOut:p.amountOut,gasEstimate:p.gasEstimate,sqrtPriceX96After:p.sqrtPriceX96After,initializedTicksCrossed:p.initializedTicksCrossed,triedFees:d,best:!0},{chainId:r,venue:o,amountOut:p.amountOut,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps})}import{AbiCoder as er,Interface as qe,getAddress as A,isAddress as V,keccak256 as tr}from"ethers";I();v();var rr=er.defaultAbiCoder(),P="0x0000000000000000000000000000000000000000",B={1:{name:"ethereum",poolManager:"0x000000000004444c5dc75cB358380D2e3dE08A90",quoter:"0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203",stateView:"0x7ffe42c4a5deea5b0fec41c94c136cf115597227",universalRouter:"0x66a9893cc07d91d95644aedd05d03f95e1dba8af",weth:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",usdc:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},10:{name:"optimism",poolManager:"0x9a13f98cb987694c9f086b1f5eb990eea8264ec3",quoter:"0x1f3131a13296fb91c90870043742c3cdbff1a8d7",stateView:"0xc18a3169788f4f75a170290584eca6395c75ecdb",universalRouter:"0x851116d9223fabed8e56c0e6b8ad0c31d98b3507",weth:"0x4200000000000000000000000000000000000006",usdc:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85"},56:{name:"bsc",poolManager:"0x28e2ea090877bf75740558f6bfb36a5ffee9e9df",quoter:"0x9f75dd27d6664c475b90e105573e550ff69437b0",stateView:"0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4",universalRouter:"0x1906c1d672b88cd1b9ac7593301ca990f94eae07",weth:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",usdc:"0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d"},137:{name:"polygon",poolManager:"0x67366782805870060151383f4bbff9dab53e5cd6",quoter:"0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9",stateView:"0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a",universalRouter:"0x1095692a6237d83c6a72f3f5efedb9a670c49223",weth:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",usdc:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359"},8453:{name:"base",poolManager:"0x498581fF718922c3f8e6A244956aF099B2652b2b",quoter:"0x0d5e0f971ed27fbff6c2837bf31316121532048d",stateView:"0xa3c0c9b65bad0b08107aa264b0f3db444b867a71",universalRouter:"0x6ff5693b99212da76ad316178a184ab56d299b43",weth:"0x4200000000000000000000000000000000000006",usdc:"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"},42161:{name:"arbitrum",poolManager:"0x360e68faccca8ca495c1b759fd9eee466db9fb32",quoter:"0x3972c00f7ed4885e145823eb7c655375d275a1c5",stateView:"0x76fd297e2d437cd7f76d50f01afe6160f86e9990",universalRouter:"0xa51afafe0263b40edaef0df8781ea9aa03e381a3",weth:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",usdc:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831"},43114:{name:"avalanche",poolManager:"0x06380c0e0912312b5150364b9dc4542ba0dbbc85",quoter:"0xbe40675bb704506a3c2ccfb762dcfd1e979845c2",stateView:"0xc3c9e198c735a4b97e3e683f391ccbdd60b69286",universalRouter:"0x94b75331ae8d42c1b61065089b7d48fe14aa73b7",weth:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",usdc:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"},4663:{name:"robinhood",poolManager:"0x8366a39cc670b4001a1121b8f6a443a643e40951",quoter:"0x8dc178efb8111bb0973dd9d722ebeff267c98f94",stateView:"0xf3334192d15450cdd385c8b70e03f9a6bd9e673b",universalRouter:"0x8876789976dEcBfCbBbe364623C63652db8C0904",weth:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",usdc:"0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168"}},nr=[{fee:100,tickSpacing:1},{fee:500,tickSpacing:10},{fee:3e3,tickSpacing:60},{fee:1e4,tickSpacing:200},{fee:25e3,tickSpacing:8}],Fe=new qe(["function quoteExactInputSingle(((address currency0,address currency1,uint24 fee,int24 tickSpacing,address hooks) poolKey,bool zeroForOne,uint128 exactAmount,bytes hookData) params) returns (uint256 amountOut, uint256 gasEstimate)"]),Kn=new qe(["function execute(bytes commands,bytes[] inputs,uint256 deadline) payable"]);var or="0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";function ar(e){let t=Number(e),r=B[t];if(!r)throw new Error(`uniswap-v4: unsupported chainId ${e} (supported: ${Object.keys(B).join(", ")})`);return{chainId:t,...r}}function He(e,t){let r=B[Number(t)];if(!e||e===or||e===P||/^eth$/i.test(String(e)))return A(r.weth);let n=String(e);if(/^weth$/i.test(n))return A(r.weth);if(/^usdc$/i.test(n)||/^usdg$/i.test(n))return A(r.usdc);if(!V(n))throw new Error(`invalid token address: ${e}`);return A(n)}function ir({currency0:e,currency1:t,fee:r,tickSpacing:n,hooks:o=P}){let c=A(e),i=A(t);if(c.toLowerCase()===i.toLowerCase())throw new Error("poolKey currencies must differ");let[a,s]=c.toLowerCase()<i.toLowerCase()?[c,i]:[i,c],d=o&&V(o)?A(o):P;return tr(rr.encode(["address","address","uint24","int24","address"],[a,s,Number(r),Number(n),d]))}function sr({tokenIn:e,tokenOut:t,fee:r,tickSpacing:n,hooks:o=P}){let c=A(e),i=A(t),[a,s]=c.toLowerCase()<i.toLowerCase()?[c,i]:[i,c],d=c.toLowerCase()===a.toLowerCase();return{poolKey:{currency0:a,currency1:s,fee:Number(r),tickSpacing:Number(n),hooks:o&&V(o)?A(o):P},zeroForOne:d}}async function Ve(e={},t={}){let{chainId:r,quoter:n,poolManager:o,universalRouter:c}=ar(e.chainId??8453),i=He(e.tokenIn||"WETH",r),a=He(e.tokenOut||B[r].usdc,r),s=BigInt(e.amountIn??0);if(s<=0n)throw new Error("amountIn required (raw base units)");if(s>0xffffffffffffffffffffffffffffffffn)throw new Error("amountIn exceeds uint128");let d=e.fee!=null&&e.tickSpacing!=null?[{fee:Number(e.fee),tickSpacing:Number(e.tickSpacing)}]:e.tryTiers===!1?[{fee:500,tickSpacing:10}]:[...nr],p=e.hooks||P,l=[],u=null;for(let m of d){let{poolKey:f,zeroForOne:h}=sr({tokenIn:i,tokenOut:a,fee:m.fee,tickSpacing:m.tickSpacing,hooks:p}),w=Fe.encodeFunctionData("quoteExactInputSingle",[{poolKey:f,zeroForOne:h,exactAmount:s,hookData:"0x"}]);try{let g=await H(r,"eth_call",[{to:n,data:w},"latest"],t);if(!g||g==="0x"){l.push({...m,ok:!1,error:"empty result"});continue}let L=Fe.decodeFunctionResult("quoteExactInputSingle",g),_={fee:m.fee,tickSpacing:m.tickSpacing,ok:!0,amountOut:L[0].toString(),gasEstimate:L[1].toString(),poolKey:f,zeroForOne:h,poolId:ir({...f})};l.push(_),(!u||BigInt(_.amountOut)>BigInt(u.amountOut))&&(u=_)}catch(g){l.push({...m,ok:!1,error:String(g.message||g).slice(0,160)})}}if(!u){let m=l.map(f=>`${f.fee}/${f.tickSpacing}:${f.error||"fail"}`).join("; ");throw new Error(`uniswap-v4 quote failed chain=${r}: ${m}`)}return E({venue:"uniswap-v4",chainId:r,chain:B[r].name,poolManager:o,quoter:n,universalRouter:c||null,tokenIn:i,tokenOut:a,amountIn:s.toString(),fee:u.fee,tickSpacing:u.tickSpacing,hooks:u.poolKey.hooks,poolId:u.poolId,zeroForOne:u.zeroForOne,amountOut:u.amountOut,gasEstimate:u.gasEstimate,triedTiers:l,best:!0,executionReady:!1,prepareReady:typeof e.recipient=="string"&&V(e.recipient)&&e.slippageBps!=null},{chainId:r,venue:c||n,amountOut:u.amountOut,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps})}x();var cr="https://coins.llama.fi";function ur(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||cr).replace(/\/$/,"")}async function j(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let r=e.map(encodeURIComponent).join(",");return b(`${ur(t)}/prices/current/${r}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}var k=e=>{let t=Number(e);return Number.isFinite(t)?t:null};function z(e){if(!Array.isArray(e))return null;let t=0,r=!1;for(let n of e){let o=k(n?.amountUSD);o!=null&&(t+=o,r=!0)}return r?t:null}async function Xe(e,t={}){let r=ne[Number(e)];if(!r)return null;try{let n=await j([r],t);return k(n?.coins?.[r]?.price)}catch{return null}}function te({chainId:e,tokenIn:t,tokenOut:r,amountIn:n,taker:o,slippageBps:c,decimalsIn:i,decimalsOut:a,nativePriceUsd:s=null,destDecimalsPromise:d=null,opts:p={}}){let l=[];return l.push({source:"lifi",run:async()=>{let u=await W({fromChain:e,toChain:e,fromToken:t,toToken:r,fromAmount:n},p),m=u?.estimate??u?.[0]?.estimate;return{amountOut:m?.toAmount,minOut:m?.toAmountMin,gasUsd:z(m?.gasCosts),feeUsd:z(m?.feeCosts),meta:{tool:u?.tool??u?.toolDetails?.name}}}}),i!=null&&l.push({source:"paraswap",run:async()=>{let u=a??(await Promise.resolve(d))?.decimals;if(u==null)throw new Error("paraswap needs destination decimals; none supplied or resolvable");let f=(await xe({chainId:e,srcToken:t,destToken:r,amount:n,srcDecimals:i,destDecimals:u},p))?.priceRoute;return{amountOut:f?.destAmount,gasUsd:k(f?.gasCostUSD),meta:{bestRoute:f?.bestRoute?.[0]?.swaps?.[0]?.swapExchanges?.[0]?.exchange}}}}),process.env.ZEROX_API_KEY&&l.push({source:"0x",run:async()=>{let u=await ke({chainId:e,sellToken:t,buyToken:r,sellAmount:n,taker:o},p),m=null,f=u?.totalNetworkFee,h=await Promise.resolve(s);return f!=null&&h&&(m=Number(f)/1e18*h),{amountOut:u?.buyAmount,minOut:u?.minBuyAmount,gasUsd:m,meta:{source:u?.route?.fills?.[0]?.source}}}}),process.env.ONEINCH_API_KEY&&l.push({source:"1inch",run:async()=>{let u=await Re({chainId:e,src:t,dst:r,amount:n},p),m=null;return u?.gas!=null&&s&&(m=null),{amountOut:u?.dstAmount,gasUsd:m,meta:{gasUnits:u?.gas}}}}),l.push({source:"cow",run:async()=>{let u=await Ne({chainId:e,sellToken:t,buyToken:r,sellAmountBeforeFee:String(n),from:o},p),m=u?.quote??u,f=m?.feeAmount;return{amountOut:m?.buyAmount,gasUsd:0,meta:{intent:!0,feeAmountInSellToken:f,settlement:"solver-executed"}}}}),N[Number(e)]&&l.push({source:"uniswap-v3",run:async()=>{let u=await Me({chainId:e,tokenIn:t,tokenOut:r,amountIn:n},p);return{amountOut:u?.amountOut,minOut:u?.minOut??u?.amountOutMinimum??null,gasUsd:null,meta:{onchain:!0,fee:u?.fee,gasUnits:u?.gasEstimate,quoter:u?.quoter}}}}),B[Number(e)]&&l.push({source:"uniswap-v4",run:async()=>{let u=await Ve({chainId:e,tokenIn:t,tokenOut:r,amountIn:n,recipient:o,slippageBps:c},p);return{amountOut:u?.amountOut,minOut:u?.minOut??u?.amountOutMinimum??null,gasUsd:null,meta:{onchain:!0,venue:"uniswap-v4",fee:u?.fee,tickSpacing:u?.tickSpacing,poolId:u?.poolId,hooks:u?.hooks,gasUnits:u?.gasEstimate,quoter:u?.quoter,poolManager:u?.poolManager,prepareReady:u?.prepareReady===!0,executionReady:!1}}}}),l}function Qe({fromChainId:e,toChainId:t,tokenIn:r,tokenOut:n,amountIn:o,taker:c,opts:i={}}){let a=[];return a.push({source:"lifi",run:async()=>{let s=await W({fromChain:e,toChain:t,fromToken:r,toToken:n,fromAmount:o},i),d=s?.estimate??s?.[0]?.estimate;return{amountOut:d?.toAmount,minOut:d?.toAmountMin,gasUsd:z(d?.gasCosts),feeUsd:z(d?.feeCosts),meta:{tool:s?.tool??s?.toolDetails?.name,durationSeconds:k(d?.executionDuration)}}}}),a.push({source:"relay",run:async()=>{let{relayQuote:s}=await Promise.resolve().then(()=>(ee(),Z)),p=(await s({user:c,originChainId:e,destinationChainId:t,originCurrency:r,destinationCurrency:n,amount:String(o)},i))?.details;return{amountOut:p?.currencyOut?.amount,minOut:p?.currencyOut?.minimumAmount,gasUsd:k(p?.totalImpact?.usd)!=null?Math.abs(k(p.totalImpact.usd)):null,meta:{durationSeconds:k(p?.timeEstimate),rate:p?.rate}}}}),a.push({source:"across",run:async()=>{let{acrossSuggestedFees:s}=await Promise.resolve().then(()=>(ee(),Z)),d=await s({token:r,destinationToken:n,originChainId:e,destinationChainId:t,amount:String(o)},i),p=d?.totalRelayFee?.total,l=null;if(p!=null)try{let u=BigInt(String(o))-BigInt(String(p));u>0n&&(l=u.toString())}catch{}return{amountOut:l,gasUsd:null,meta:{derivedFromFees:!0,durationSeconds:k(d?.estimatedFillTimeSec),limits:d?.limits?{min:d.limits.minDeposit,max:d.limits.maxDeposit}:void 0}}}}),a}var hr={1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax"};async function We(e,t,r){let n=hr[Number(e)];if(!n)return{priceUsd:null,decimals:null};let o=`${n}:${t}`;try{let i=(await j([o],r))?.coins?.[o],a=Number(i?.price),s=Number(i?.decimals);return{priceUsd:Number.isFinite(a)?a:null,decimals:Number.isFinite(s)?s:null}}catch{return{priceUsd:null,decimals:null}}}async function wo(e,t={}){let{chainId:r,tokenIn:n,tokenOut:o,amountIn:c}=e;if(r==null||!n||!o||c==null)throw new Error("bestSwapRoute requires chainId, tokenIn, tokenOut, amountIn");let i=Xe(r,t),a=We(r,o,t),s=te({...e,nativePriceUsd:i,decimalsOut:e.decimalsOut,destDecimalsPromise:a,opts:t}),[d,p]=await Promise.all([U(s,{timeoutMs:t.timeoutMs??12e3}),a]);i.catch(()=>{});let l=G(d,{destPriceUsd:p.priceUsd,destDecimals:e.decimalsOut??p.decimals}),u=t.maxImpactPct===void 0?25:t.maxImpactPct;if(u!=null&&l.best){let m=l.best.source,h=await oe(async w=>{let g=te({...e,amountIn:w.toString(),nativePriceUsd:i,decimalsOut:e.decimalsOut,destDecimalsPromise:a,opts:t}).filter(_=>_.source===m);return g.length?(await U(g,{timeoutMs:t.timeoutMs??12e3}))?.[0]?.amountOut??null:null},c);if(h){let w=ae(l,{[m]:h},{maxImpactPct:u});return{kind:"swap",chainId:r,tokenIn:n,tokenOut:o,amountIn:String(c),...w,priceImpact:{[m]:Number(h.impactPct.toFixed(2))}}}}return{kind:"swap",chainId:r,tokenIn:n,tokenOut:o,amountIn:String(c),...l,sourcesTried:s.length,sourcesAnswered:d.filter(m=>m.quality!==y.FAILED).length,note:Je(l,s.length)}}async function go(e,t={}){let{fromChainId:r,toChainId:n,tokenIn:o,tokenOut:c,amountIn:i}=e;if(r==null||n==null||!o||!c||i==null)throw new Error("bestBridgeRoute requires fromChainId, toChainId, tokenIn, tokenOut, amountIn");if(Number(r)===Number(n))throw new Error("bestBridgeRoute is for cross-chain; use bestSwapRoute for same-chain");let a=We(n,c,t),s=Qe({...e,opts:t}),[d,p]=await Promise.all([U(s,{timeoutMs:t.timeoutMs??15e3}),a]),l=G(d,{destPriceUsd:p.priceUsd,destDecimals:e.decimalsOut??p.decimals}),u=l.routes.map(m=>({source:m.source,seconds:m.meta?.durationSeconds??null})).filter(m=>m.seconds!=null);return{kind:"bridge",fromChainId:r,toChainId:n,tokenIn:o,tokenOut:c,amountIn:String(i),...l,durations:u,sourcesTried:s.length,sourcesAnswered:d.filter(m=>m.quality!==y.FAILED).length,note:Je(l,s.length)}}function Je(e,t){if(!e.best)return"no source returned a usable route";let r=e.routes.length;return r===1?`only 1 of ${t} sources answered, so this is the ONLY route, not a proven best one. Treat it as unbenchmarked.`:e.improvementBps!=null?`best of ${r} routes, ranked on ${e.rankedOn}: ${(e.improvementBps/100).toFixed(2)}% better than the runner-up (${e.spreadBasis})`:`best of ${r} routes, ranked on ${e.rankedOn}. No spread quoted: the top routes report cost differently, so the margin is not comparable.`}export{y as QUALITY,go as bestBridgeRoute,wo as bestSwapRoute};

package/dist/scanner/index.mjs

@@ -0,0 +1,4 @@
+var C=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),b=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),f=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"}),oe=/^0x[0-9a-fA-F]{40}$/;function ie(e={}){let t=[],o=[];if(!e||typeof e!="object")return{ok:!1,errors:["definition must be an object"],warnings:o};if((!Number.isInteger(e.chainId)||e.chainId<=0)&&t.push("chainId must be a positive integer"),(typeof e.key!="string"||!/^[a-z][a-z0-9-]*$/.test(e.key||""))&&t.push('key must be a lowercase slug (e.g. "base")'),(typeof e.name!="string"||!e.name.trim())&&t.push("name is required"),!Array.isArray(e.rpcEnv)||e.rpcEnv.length===0)t.push("rpcEnv must list at least one environment variable name");else for(let r of e.rpcEnv)(typeof r!="string"||!/^[A-Z][A-Z0-9_]*$/.test(r))&&t.push(`rpcEnv entry "${r}" should be an UPPER_SNAKE env var name`);if(e.nativeCurrency){let r=e.nativeCurrency;(typeof r.symbol!="string"||!r.symbol)&&t.push("nativeCurrency.symbol is required when nativeCurrency is set"),Number.isInteger(r.decimals)||t.push("nativeCurrency.decimals must be an integer")}for(let[r,n]of(e.venues||[]).entries()){let i=`venues[${r}]`;if(!n||typeof n!="object"){t.push(`${i} must be an object`);continue}oe.test(n.address||"")||t.push(`${i}.address is not a valid 20-byte address`),/^0x0{40}$/.test(n.address||"")&&t.push(`${i}.address is the zero address -- placeholder left in place?`),n.kind||t.push(`${i}.kind is required (router|quoter|factory|...)`),n.verified?(n.verified.method||t.push(`${i}.verified.method is required`),n.verified.source||t.push(`${i}.verified.source is required`),n.verified.date||o.push(`${i}.verified.date missing -- add one so staleness is visible`)):t.push(`${i} must record verification: { verified: { method, source, date } }. An unverified venue stays blocked.`)}let a=e.capabilities||{};for(let r of Object.keys(a))C.includes(r)?typeof a[r]!="function"&&t.push(`capability "${r}" must be a function`):t.push(`unknown capability "${r}"`);return Object.keys(a).length===0&&o.push("scanner implements no capabilities -- it can only be registered, not used"),a.prepareUnsignedTx&&!a.quote&&o.push("prepareUnsignedTx without quote: no priced expectation to validate the built tx against"),a.prepareUnsignedTx&&!a.sellSimulation&&o.push("prepareUnsignedTx without sellSimulation: cannot prove an asset is exitable before buying"),{ok:t.length===0,errors:t,warnings:o}}function se(e){let{ok:t,errors:o,warnings:a}=ie(e);if(!t)throw new Error(`invalid scanner for ${e?.key??"<unknown>"}:
+  - ${o.join(`
+  - `)}`);let r=e.capabilities||{},n=C.filter(s=>typeof r[s]=="function"),i={key:e.key,chainId:e.chainId,name:e.name,rpcEnv:[...e.rpcEnv],nativeCurrency:e.nativeCurrency?{...e.nativeCurrency}:null,explorer:e.explorer||null,venues:(e.venues||[]).map(s=>({...s})),warnings:a,capabilities(){return{chainId:e.chainId,key:e.key,supported:[...n],unsupported:C.filter(s=>!n.includes(s))}},supports(s){return n.includes(s)}};for(let s of C)n.includes(s)?i[s]=async(...c)=>r[s](...c,{scanner:i}):i[s]=async()=>{throw new Error(`${e.key} (chain ${e.chainId}) does not implement "${s}". Supported: ${n.join(", ")||"none"}. An unimplemented capability is absent, not assumed -- implement it or treat this chain as fail-closed for that operation.`)};return Object.freeze(i)}var S=new Map;function k(e){let t=se(e);return S.set(t.chainId,t),t}function Pe(e){return S.get(Number(e))||null}function $e(){return[...S.values()]}function Fe(){S.clear()}function Ve(){let e={};for(let t of S.values())e[t.chainId]={key:t.key,name:t.name,...t.capabilities(),venueCount:t.venues.length,failClosed:t.venues.length===0};return{generatedAt:new Date().toISOString(),chainCount:S.size,capabilities:[...C],chains:e}}import{createHash as ce}from"node:crypto";var ue=new Set([408,425,429,500,502,503,504]),F=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),le=2,V=4e3,H=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],de=new Set([301,302,303,307,308]),D=3;function pe(e){let t=String(e||"").toLowerCase();return H.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function he(e){let t={};for(let[o,a]of Object.entries(e||{}))pe(o)||(t[o]=a);return t}function me(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let o=new URL(String(e),String(t));if(o.protocol!=="http:"&&o.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${o.protocol}`);return o.toString()}function fe(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var L=new Map;function be(e,t,o){let a={};for(let[c,l]of Object.entries(o||{}))a[c.toLowerCase()]=l;let r=Object.keys(a).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),i=[...new Set([...H,...r])].sort().map(c=>`${c}=${a[c]??""}`).join(`
+`),s=ce("sha256").update(i).digest("hex").slice(0,32);return`${e} ${t} ${s}`}function ve(e,t){let o=Number(t);return Number.isFinite(o)&&o>0?Math.min(o*1e3,V):Math.min(250*2**e,V)+Math.floor(Math.random()*100)}var ye=e=>new Promise(t=>setTimeout(t,e));async function ge(e,{fetchImpl:t,method:o,headers:a,body:r,timeoutMs:n}){let i=new AbortController,s=setTimeout(()=>i.abort(),n);try{let c=String(e),l={...a||{}};for(let d=0;d<=D;d+=1){let u=await t(c,{method:o,headers:l,body:r,signal:i.signal,redirect:"manual"}),m=await u.text(),h=null;if(m)try{h=JSON.parse(m)}catch{h=null}if(de.has(u.status)){if(o!=="GET"&&o!=="HEAD"){let v=new Error(`HTTP ${u.status} ${o} ${c} redirected non-idempotent request`);throw v.status=u.status,v.body=h??m.slice(0,300),v}if(d===D)throw new Error(`HTTP redirect loop for ${e}`);let p=me(u.headers?.get?.("location"),c);fe(p,c)||(l=he(l)),c=p;continue}if(!u.ok){let p=new Error(`HTTP ${u.status} ${o} ${c}`);throw p.status=u.status,p.retryAfter=u.headers?.get?.("retry-after")??null,p.body=h??m.slice(0,300),p}return h??m}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(s)}}async function _(e,t={}){let o=t.fetchImpl||globalThis.fetch;if(typeof o!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let a=t.timeoutMs??12e3,r=(t.method||"GET").toUpperCase(),n={Accept:"application/json",...t.headers||{}},i=t.body;i!=null&&typeof i!="string"&&(n["Content-Type"]=n["Content-Type"]||"application/json",i=JSON.stringify(i));let s=Number.isInteger(t.retries)?Math.max(t.retries,0):le,c=async()=>{let h;for(let p=0;p<=s;p++)try{return await ge(e,{fetchImpl:o,method:r,headers:n,body:i,timeoutMs:a})}catch(v){h=v;let y=v?.status,I=v?.name==="AbortError",x=new Set([408,425,429]),U=y!=null?x.has(y)||ue.has(y)&&F.has(r):!I&&F.has(r);if(p===s||!U)throw v;await ye(ve(p,v?.retryAfter))}throw h};if(!(t.dedupe!==!1&&r==="GET"&&i==null))return c();let d=be(r,e,n),u=L.get(d);if(u)return u;let m=c().finally(()=>L.delete(d));return L.set(d,m),m}var M={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},we=new Map(Object.values(M).map(e=>[e.chainId,e]));function j(e){return we.get(Number(e))||null}function K(e,t=process.env){let o=j(e);if(!o)return null;for(let a of o.rpcEnv){let r=(t[a]||"").trim();if(r)return r}return null}import{Interface as Ee,getAddress as Se}from"ethers";var W=new Ee(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function z(e,t){try{return Se(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}var Ie={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function xe(e,{rpcUrl:t,env:o=process.env}={}){if(t)return t;let a=K(e,o);return a||Ie[Number(e)]||null}var Ce=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Ae(e){let t=String(e||""),o=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Ce.test(o))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return o}async function w(e,t,o=[],a={}){let r=String(t||"");Ae(r);let n=xe(e,a);if(!n)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let s=await _(n,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:o},fetchImpl:a.fetchImpl,timeoutMs:a.timeoutMs??12e3});if(s?.error){let c=new Error(s.error.message||JSON.stringify(s.error));throw c.code=s.error.code,c}return s.result}async function G(e,t={}){let o=await w(e,"eth_blockNumber",[],t);return parseInt(o,16)}async function Y(e,t,o={}){if(!t)throw new Error("rpcGetBalance requires address");let a=await w(e,"eth_getBalance",[t,"latest"],o);return{chainId:Number(e),address:t,balanceWei:BigInt(a).toString(),balanceHex:a}}async function Q(e={},t={}){let o=Number(e.chainId??t.chainId??1),a=z(e.token||e.tokenAddress,"token"),r=z(e.account||e.owner||e.address,"account"),n=W.encodeFunctionData("balanceOf",[r]),i=await w(o,"eth_call",[{to:a,data:n},e.blockTag||"latest"],t),s=W.decodeFunctionResult("balanceOf",i),c=BigInt(s[0]);return{chainId:o,token:a,account:r,balance:c.toString(),balanceHex:`0x${c.toString(16)}`,blockTag:e.blockTag||"latest"}}var Ne="https://api.dexscreener.com";function _e(e={}){return(e.baseUrl||process.env.DEXSCREENER_API_URL||Ne).replace(/\/$/,"")}async function X(e,t={}){if(!e)throw new Error("tokenAddress required");return _(`${_e(t)}/latest/dex/tokens/${e}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3})}var q={getAmountsOut:"d06ca61f",swapExactTokensForTokens:"38ed1739",swapExactETHForTokens:"7ff36ab5"},g=e=>BigInt(e).toString(16).padStart(64,"0"),A=e=>e.slice(2).toLowerCase().padStart(64,"0");function Re(e,t){return`0x${q.getAmountsOut}`+g(e)+g(64)+g(t.length)+t.map(A).join("")}function Ue(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length<128)return null;let o=Number(BigInt(`0x${t.slice(64,128)}`));if(!Number.isFinite(o)||o<1||o>16)return null;let a=[];for(let r=0;r<o;r++){let n=128+r*64;if(t.length<n+64)return null;a.push(BigInt(`0x${t.slice(n,n+64)}`))}return a}function T(e,t="router"){return(e?.venues||[]).find(a=>a.kind===t)?.address??null}var B=100;function ke(e,t){let o=Number(t);if(!Number.isFinite(o)||o<0)throw new Error("slippageBps must be a non-negative number");if(o>B)throw new Error(`slippageBps ${o} exceeds the ${B} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(o))/10000n}function J(e){let{chainId:t,wrappedNative:o}=e;async function a(r,n,i,s){let c=await w(t,"eth_call",[{to:r,data:Re(n,i)},"latest"],s);return Ue(c?.result??c)}return{async quote({tokenIn:r,tokenOut:n,amountIn:i,path:s},c={}){let l=T(c.scanner);if(!l)return{chainId:t,evidence:b.UNAVAILABLE,reason:"no verified router configured for this chain; quoting stays fail-closed rather than guessing a venue address"};let d=s||[r,n];if(d.some(m=>!/^0x[0-9a-fA-F]{40}$/.test(m||"")))throw new Error("quote requires valid 20-byte addresses");let u=await a(l,i,d,c);return u?{chainId:t,router:l,path:d,amountIn:String(i),amountOut:u[u.length-1].toString(),hops:d.length-1,evidence:b.LIVE,note:"exact-input quote at current reserves; not a guaranteed fill"}:{chainId:t,router:l,path:d,evidence:b.UNKNOWN,reason:"router returned no amounts -- no pool for this path, or the call reverted"}},async sellSimulation({token:r,amountIn:n,base:i},s={}){let c=T(s.scanner),l=i||o;if(!c||!l)return{chainId:t,token:r,verdict:f.UNKNOWN,evidence:b.UNAVAILABLE,reason:c?"no wrappedNative configured for this chain, so no base asset to round-trip against":"no verified router configured for this chain"};let d=await a(c,n,[l,r],s);if(!d)return{chainId:t,token:r,verdict:f.FAIL,evidence:b.LIVE,leg:"buy",reason:"buy leg returned no amounts -- no route in"};let u=d[d.length-1];if(u===0n)return{chainId:t,token:r,verdict:f.FAIL,evidence:b.LIVE,leg:"buy",reason:"buy leg quotes zero output"};let m=await a(c,u,[r,l],s);if(!m)return{chainId:t,token:r,verdict:f.FAIL,evidence:b.LIVE,leg:"sell",bought:u.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let h=m[m.length-1],p=Number(h*10000n/BigInt(n)),v=f.PASS,y="round trip completes with expected fee/impact loss";return p<5e3?(v=f.FAIL,y=`round trip returns only ${(p/100).toFixed(2)}% -- punitive tax or no real liquidity`):p<9e3&&(v=f.CAUTION,y=`round trip returns ${(p/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,token:r,base:l,router:c,verdict:v,reason:y,amountIn:String(n),bought:u.toString(),returned:h.toString(),retentionBps:p,evidence:b.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:r,tokenOut:n,amountIn:i,recipient:s,slippageBps:c=50,deadlineSeconds:l=900,path:d},u={}){let m=u.scanner,h=T(m);if(!h)throw new Error(`chain ${t} has no verified router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!/^0x[0-9a-fA-F]{40}$/.test(s||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let p=d||[r,n],v=await this.quote({tokenIn:r,tokenOut:n,amountIn:i,path:p},u);if(v.evidence!==b.LIVE)throw new Error(`cannot prepare without a live quote (${v.evidence}: ${v.reason??"no reason given"})`);let y=ke(v.amountOut,c);if(y<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let I=BigInt(Math.floor(Date.now()/1e3)+Number(l)),x=o&&p[0].toLowerCase()===o.toLowerCase()&&u.useNative,U=x?`0x${q.swapExactETHForTokens}`+g(y)+g(128)+A(s)+g(I)+g(p.length)+p.map(A).join(""):`0x${q.swapExactTokensForTokens}`+g(i)+g(y)+g(160)+A(s)+g(I)+g(p.length)+p.map(A).join("");return{unsigned:!0,signedBy:"user-wallet",chainId:t,tx:{to:h,data:U,value:x?`0x${BigInt(i).toString(16)}`:"0x0"},guard:{quotedOut:v.amountOut,minOut:y.toString(),slippageBps:c,maxSlippageBps:B,deadline:I.toString()},requires:x?[]:[{step:"approve",token:p[0],spender:h,amount:String(i)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var Le=[100,500,3e3,1e4],Z={quoteExactInputSingle:"c6a5026a",exactInputSingle:"04e45aaf"},E=e=>BigInt(e).toString(16).padStart(64,"0"),N=e=>e.slice(2).toLowerCase().padStart(64,"0"),ee=/^0x[0-9a-fA-F]{40}$/,P=100;function Te(e,t){let o=Number(t);if(!Number.isFinite(o)||o<0)throw new Error("slippageBps must be a non-negative number");if(o>P)throw new Error(`slippageBps ${o} exceeds the ${P} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(o))/10000n}function O(e,t){return(e?.venues||[]).find(o=>o.kind===t)?.address??null}function te(e){let{chainId:t,wrappedNative:o}=e;async function a({quoter:n,tokenIn:i,tokenOut:s,amountIn:c,fee:l},d){let u=`0x${Z.quoteExactInputSingle}`+N(i)+N(s)+E(c)+E(l)+E(0),m=await w(t,"eth_call",[{to:n,data:u},"latest"],d).catch(()=>null),h=m?.result??m;if(!h||h==="0x"||h.length<66)return null;let p=BigInt(`0x${h.slice(2,66)}`);return p>0n?p:null}async function r({quoter:n,tokenIn:i,tokenOut:s,amountIn:c},l){let d=[],u=null;for(let m of Le){let h=await a({quoter:n,tokenIn:i,tokenOut:s,amountIn:c,fee:m},l);d.push({fee:m,amountOut:h?h.toString():null}),h&&(!u||h>u.amountOut)&&(u={fee:m,amountOut:h})}return{best:u,tried:d}}return{async quote({tokenIn:n,tokenOut:i,amountIn:s},c={}){let l=O(c.scanner,"quoter");if(!l)return{chainId:t,evidence:b.UNAVAILABLE,reason:"no verified quoter configured for this chain; quoting stays fail-closed rather than guessing a venue address"};for(let m of[n,i])if(!ee.test(m||""))throw new Error("quote requires valid 20-byte addresses");let{best:d,tried:u}=await r({quoter:l,tokenIn:n,tokenOut:i,amountIn:s},c);return d?{chainId:t,venue:"uniswap-v3",quoter:l,tokenIn:n,tokenOut:i,amountIn:String(s),amountOut:d.amountOut.toString(),fee:d.fee,triedFeeTiers:u,evidence:b.LIVE,note:"exact-input single-hop quote at current tick; not a guaranteed fill"}:{chainId:t,quoter:l,tokenIn:n,tokenOut:i,triedFeeTiers:u,evidence:b.UNKNOWN,reason:"no fee tier returned a quote -- no V3 pool for this pair, or no liquidity"}},async sellSimulation({token:n,amountIn:i,base:s},c={}){let l=O(c.scanner,"quoter"),d=s||o;if(!l||!d)return{chainId:t,token:n,verdict:f.UNKNOWN,evidence:b.UNAVAILABLE,reason:l?"no wrappedNative configured, so there is no base asset to round-trip against":"no verified quoter configured for this chain"};let u=await r({quoter:l,tokenIn:d,tokenOut:n,amountIn:i},c);if(!u.best)return{chainId:t,token:n,verdict:f.FAIL,evidence:b.LIVE,leg:"buy",reason:"no V3 pool priced the buy leg on any fee tier"};let m=await r({quoter:l,tokenIn:n,tokenOut:d,amountIn:u.best.amountOut},c);if(!m.best)return{chainId:t,token:n,verdict:f.FAIL,evidence:b.LIVE,leg:"sell",bought:u.best.amountOut.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let h=m.best.amountOut,p=Number(h*10000n/BigInt(i)),v=f.PASS,y="round trip completes with expected fee/impact loss";return p<5e3?(v=f.FAIL,y=`round trip returns only ${(p/100).toFixed(2)}% -- punitive tax or no real liquidity`):p<9e3&&(v=f.CAUTION,y=`round trip returns ${(p/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,venue:"uniswap-v3",token:n,base:d,verdict:v,reason:y,amountIn:String(i),bought:u.best.amountOut.toString(),returned:h.toString(),retentionBps:p,buyFee:u.best.fee,sellFee:m.best.fee,evidence:b.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:n,tokenOut:i,amountIn:s,recipient:c,slippageBps:l=50,fee:d},u={}){let m=O(u.scanner,"router");if(!m)throw new Error(`chain ${t} has no verified V3 router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!ee.test(c||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let h=await this.quote({tokenIn:n,tokenOut:i,amountIn:s},u);if(h.evidence!==b.LIVE)throw new Error(`cannot prepare without a live quote (${h.evidence}: ${h.reason??"no reason given"})`);let p=d??h.fee,v=Te(h.amountOut,l);if(v<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let y=`0x${Z.exactInputSingle}`+N(n)+N(i)+E(p)+N(c)+E(s)+E(v)+E(0);return{unsigned:!0,signedBy:"user-wallet",chainId:t,venue:"uniswap-v3",tx:{to:m,data:y,value:"0x0"},guard:{quotedOut:h.amountOut,minOut:v.toString(),slippageBps:l,maxSlippageBps:P,fee:p},requires:[{step:"approve",token:n,spender:m,amount:String(s)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var R={decimals:"0x313ce567",symbol:"0x95d89b41",name:"0x06fdde03",totalSupply:"0x18160ddd",owner:"0x8da5cb5b"};function ne(e){if(!e||e==="0x")return null;try{return BigInt(e)}catch{return null}}function re(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length>=128){let a=Number(BigInt(`0x${t.slice(64,128)}`));if(a>0&&a<=256&&t.length>=128+a*2){let r=t.slice(128,128+a*2),n=Buffer.from(r,"hex").toString("utf8").replace(/\0+$/,"");if(n)return n}}return Buffer.from(t.slice(0,64),"hex").toString("utf8").replace(/\0+$/,"")||null}function qe(e){let{chainId:t}=e;async function o(a,r,n){return w(t,"eth_call",[{to:a,data:r},"latest"],n)}return{async blockNumber(a={}){let r=await G(t,a);return{chainId:t,blockNumber:r?.blockNumber??r,evidence:b.LIVE}},async nativeBalance(a,r={}){let n=await Y(t,a,r);return{chainId:t,address:a,wei:n?.wei??n?.balance??null,symbol:e.nativeCurrency?.symbol??null,decimals:e.nativeCurrency?.decimals??18,evidence:b.LIVE}},async tokenBalance({token:a,owner:r},n={}){let i=await Q({chainId:t,token:a,owner:r},n);return{chainId:t,token:a,owner:r,raw:i?.balance??i,evidence:b.LIVE}},async resolveToken(a,r={}){if(!/^0x[0-9a-fA-F]{40}$/.test(a||""))return{chainId:t,token:a,evidence:b.UNKNOWN,error:"resolveToken needs a 20-byte address; symbol lookup is a market-data concern"};let[n,i,s,c]=await Promise.all([o(a,R.decimals,r).catch(()=>null),o(a,R.symbol,r).catch(()=>null),o(a,R.name,r).catch(()=>null),o(a,R.totalSupply,r).catch(()=>null)]),l=ne(n?.result??n),d=l!==null||i?.result||s?.result;return{chainId:t,address:a,decimals:l===null?null:Number(l),symbol:re(i?.result??i),name:re(s?.result??s),totalSupply:(ne(c?.result??c)??null)?.toString()??null,evidence:d?b.LIVE:b.UNKNOWN,warning:d?void 0:"no ERC-20 metadata returned -- may not be a token contract"}},async resolvePools(a,r={}){let n=e.dexscreenerSlug;if(!n)return{chainId:t,token:a,pools:[],evidence:b.UNAVAILABLE,reason:"no dexscreenerSlug configured for this chain; pool discovery is unavailable rather than guessed"};let i=await X(a,r).catch(()=>null),c=(i?.pairs||i?.data?.pairs||[]).filter(l=>String(l.chainId).toLowerCase()===String(n).toLowerCase()).map(l=>({pair:l.pairAddress,dex:l.dexId,base:l.baseToken?.address,quote:l.quoteToken?.address,liquidityUsd:l.liquidity?.usd??null,priceUsd:l.priceUsd??null,volume24hUsd:l.volume?.h24??null,createdAt:l.pairCreatedAt??null})).sort((l,d)=>(d.liquidityUsd??0)-(l.liquidityUsd??0));return{chainId:t,token:a,pools:c,evidence:c.length?b.LIVE:b.UNKNOWN}},async scanBlocks({fromBlock:a,toBlock:r,address:n,topics:i,chunkSize:s=2e3}={},c={}){if(!Number.isInteger(a)||!Number.isInteger(r))throw new Error("scanBlocks requires integer fromBlock and toBlock");if(r<a)throw new Error("toBlock must be >= fromBlock");let l=[],d=[];for(let u=a;u<=r;u+=s){let m=Math.min(u+s-1,r);d.push([u,m])}for(let[u,m]of d){let h={fromBlock:`0x${u.toString(16)}`,toBlock:`0x${m.toString(16)}`};n&&(h.address=n),i&&(h.topics=i);let p=await w(t,"eth_getLogs",[h],c).catch(v=>({error:String(v?.message||v)}));if(p?.error)return{chainId:t,fromBlock:a,toBlock:r,logs:l,complete:!1,failedAt:[u,m],error:p.error,evidence:b.UNKNOWN};for(let v of p?.result??p??[])l.push(v)}return{chainId:t,fromBlock:a,toBlock:r,logs:l,complete:!0,chunks:d.length,evidence:b.LIVE}},async scoreRisk(a,r={}){let n=[],i=f.PASS,s=d=>{let u={[f.PASS]:0,[f.CAUTION]:1,[f.UNKNOWN]:2,[f.FAIL]:3};u[d]>u[i]&&(i=d)},c=await this.resolveToken(a,r);c.evidence!==b.LIVE?(n.push({check:"erc20-metadata",result:f.UNKNOWN,detail:c.warning}),s(f.UNKNOWN)):n.push({check:"erc20-metadata",result:f.PASS,detail:`${c.symbol} / ${c.decimals}d`});let l=await this.resolvePools(a,r);if(l.evidence===b.UNAVAILABLE)n.push({check:"liquidity",result:f.UNKNOWN,detail:l.reason}),s(f.UNKNOWN);else if(!l.pools.length)n.push({check:"liquidity",result:f.FAIL,detail:"no pool with liquidity found"}),s(f.FAIL);else{let d=l.pools[0],u=d.liquidityUsd??0;u<5e3?(n.push({check:"liquidity",result:f.CAUTION,detail:`top pool only $${u}`}),s(f.CAUTION)):n.push({check:"liquidity",result:f.PASS,detail:`$${u} on ${d.dex}`}),d.createdAt&&Date.now()-d.createdAt<24*3600*1e3&&(n.push({check:"age",result:f.CAUTION,detail:"pool under 24h old"}),s(f.CAUTION))}if(typeof this.sellSimulation=="function"){let d=await this.sellSimulation({token:a,amountIn:(10n**16n).toString()},r).catch(u=>({verdict:f.UNKNOWN,reason:String(u?.message||u)}));n.push({check:"sellability",result:d.verdict,detail:d.retentionBps!=null?`round trip returns ${(d.retentionBps/100).toFixed(2)}% -- ${d.reason}`:d.reason}),s(d.verdict)}else n.push({check:"sellability",result:f.UNKNOWN,detail:"no verified router on this chain, so a round-trip sell simulation cannot run. Treat as unproven -- a buy path is not an exit path."}),s(f.UNKNOWN);return{chainId:t,token:a,verdict:i,checks:n,note:"Structural checks only. UNKNOWN is not PASS. A token is not tradeable until a sell simulation succeeds."}}}}function $(e){let o={...qe(e)},a=new Set((e.venues||[]).map(n=>n.kind));e.venueKind==="uniswap-v3"&&a.has("quoter")&&a.has("router")?Object.assign(o,te({chainId:e.chainId,wrappedNative:e.wrappedNative})):e.venueKind==="uniswap-v2"&&a.has("router")&&Object.assign(o,J({chainId:e.chainId,wrappedNative:e.wrappedNative}));let r={};for(let[n,i]of Object.entries(o))r[n]=i.bind(o);return{key:e.key,chainId:e.chainId,name:e.name,rpcEnv:e.rpcEnv,nativeCurrency:e.nativeCurrency,explorer:e.explorer,venues:e.venues||[],capabilities:r}}var ae=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venues:[]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venues:[]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venues:[]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);function Be(){return ae.map(e=>k($(e)))}function Oe(e){return k($(e))}export{ae as CHAIN_CONFIGS,b as EVIDENCE,f as RISK,C as SCANNER_CAPABILITIES,Fe as __clearScanners,se as createScanner,Pe as getScanner,$e as listScanners,Be as registerBuiltinScanners,Oe as registerCustomChain,k as registerScanner,Ve as scannerCoverage,ie as validateScanner};

package/dist/signals/index.mjs

@@ -0,0 +1 @@
+var T=Object.freeze(["wallet","pool","nft_floor","hl_flow","prediction_market"]),I=Object.freeze({wallets:"wallet",smart_wallet:"wallet",pools:"pool",new_pool:"pool",nft:"nft_floor",nft_floors:"nft_floor",hyperliquid:"hl_flow",prediction:"prediction_market",prediction_markets:"prediction_market"}),e=(l,n=0,o=1)=>Math.min(o,Math.max(n,l)),a=l=>Number.isFinite(Number(l))?Number(l):null,p=l=>Math.round(l*1e4)/1e4;function b(l){let n=String(l?.type??l?.surface??l?.kind??"").toLowerCase();return I[n]??n}function C(l,n){return String(l?.id??l?.signalId??l?.asset??l?.market??l?.pool??l?.collection??`${b(l)}:${n}`)}function u(l,n,o,t=!0){!t||o===null||!Number.isFinite(o)||l.push({feature:n,value:p(o)})}function L(l,n){let o=a(l.repeatBuys??l.repeat_buys??l.buyCount),t=a(l.walletWinRate??l.winRate);u(n,"repeat_buys",o===null?null:e((o-1)/4)*.38),u(n,"wallet_win_rate",t===null?null:(e(t)-.5)*.5)}function R(l,n){let o=a(l.ageHours??l.poolAgeHours),t=a(l.liquidityUsd??l.liquidity),i=l.liquidityLocked??l.locked;u(n,"pool_age",o===null?null:o<24?-.42:e(o/720)*.12),u(n,"liquidity",t===null?null:(e(Math.log10(Math.max(1,t))/7)-.5)*.28),u(n,"liquidity_lock",i==null?null:i?.12:-.28)}function F(l,n){let o=a(l.floorChange??l.floorChangePct),t=a(l.sales??l.saleCount);u(n,"floor_change",o===null?null:e(o,-1,1)*.35),u(n,"sales_depth",t===null?null:e(t/50)*.18)}function P(l,n){let o=a(l.flowImbalance??l.imbalance),t=a(l.fundingRate??l.funding);u(n,"flow_imbalance",o===null?null:e(o,-1,1)*.42),u(n,"funding",t===null?null:-e(t*100,-1,1)*.12)}function q(l,n){let o=a(l.marketProbability??l.marketPrice??l.probability),t=a(l.fairProbability??l.referenceProbability??l.fairValue);u(n,"probability_mispricing",o===null||t===null?null:e(t-o,-1,1)*.65);let i=a(l.liquidityUsd??l.liquidity);u(n,"market_liquidity",i===null?null:e(Math.log10(Math.max(1,i))/6)*.12)}var x=Object.freeze({wallet:L,pool:R,nft_floor:F,hl_flow:P,prediction_market:q});function D(l,n,o){let t=o.filter(r=>{let s=r?.signalId??r?.eventId??r?.id??r?.asset??r?.market;return s!=null&&String(s)===n});if(t.length===0)return null;let i=t.map(r=>a(r.return??r.markout??r.pnl??r.value)).filter(r=>r!==null);return i.length===0?null:i.reduce((r,s)=>r+s,0)/i.length}function E(l=[],n=[],o={}){if(!Array.isArray(l)||!Array.isArray(n))throw new TypeError("events and markouts must be arrays");let t=e(a(o.minimumCoverage)??.5);return l.map((i,r)=>{let s=b(i),g=C(i,r),_=x[s],d=[];_&&_(i,d);let O=s==="wallet"?2:s==="pool"?3:2,m=p(e(d.length/O)),k=d.reduce((A,S)=>A+S.value,0),c=D(i,g,n),y=c===null?0:e(c,-1,1)*.35;c!==null&&u(d,"shadow_markout",y);let w=p(e(.5+k+y)),N=c===null?.8:e(.85+c*.3,.35,1),h=p(e(m*N)),f=["COLD_INTELLIGENCE_ONLY","NO_HOT_EXECUTION"];return _||f.push("UNSUPPORTED_SIGNAL_TYPE"),m<t&&f.push("LOW_COVERAGE","NO_TRADE"),h<.5&&f.push("LOW_CONFIDENCE","NO_TRADE"),s==="pool"&&(a(i.ageHours??i.poolAgeHours)??1/0)<24&&f.push("NEW_POOL_RISK","NO_TRADE"),c!==null&&c<0&&f.push("NEGATIVE_MARKOUT"),{id:g,type:s,score:w,confidence:h,coverage:m,contributions:d,flags:[...new Set(f)],noTrade:f.includes("NO_TRADE"),executionAllowed:!1}}).sort((i,r)=>r.score-i.score||r.confidence-i.confidence||i.id.localeCompare(r.id))}function M(l={}){return Object.freeze({score(n,o=[],t={}){return E(n,o,{...l,...t})}})}export{T as SIGNAL_TYPES,M as createSignalsEngine,E as scoreSignals};

package/dist/watch-preferences.mjs

@@ -0,0 +1 @@
+var s=Object.freeze(["price","wallet","risk","execution","security","nft","governance","system"]),u=new Set(s);function n(e){if(!u.has(e))throw new TypeError(`Unknown watch category: ${String(e)}`);return e}function i(e={}){let r=e.subscribedCategories??[];if(!Array.isArray(r))throw new TypeError("subscribedCategories must be an array");return r}function c(){return{subscribedCategories:[]}}function f(e,r){n(r);let t=i(e);return t.includes(r)?{...e,subscribedCategories:[...t]}:{...e,subscribedCategories:[...t,r]}}function d(e,r){n(r);let t=i(e);return{...e,subscribedCategories:t.filter(o=>o!==r)}}function l({category:e,notify:r=!1,...t}={}){if(n(e),typeof r!="boolean")throw new TypeError("watch notify must be a boolean");return{...t,category:e,notify:r}}function a(e,r){return!(!r||r.notify!==!0||r.category!==e.category||e.watchId!==void 0&&r.id!==e.watchId)}function b(e,r=c(),t){if(!e||typeof e!="object")throw new TypeError("alert must be an object");return n(e.category),i(r).includes(e.category)?{deliver:!0,reason:"category-subscribed"}:a(e,t)?{deliver:!0,reason:"watch-opt-in"}:{deliver:!1,reason:"not-subscribed"}}function y(e,r,t){return b(e,r,t).deliver}export{s as WATCH_CATEGORIES,l as createWatch,c as defaultPreferences,b as evaluateAlert,y as shouldDeliverAlert,f as subscribe,d as unsubscribe};

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@oracle-agent/oracle",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Oracle: standalone prepare-only multichain agent control plane with optional Hermes integration. Policy-bounded intents for a user-signed wallet; the public package never takes your key.",
-  "license": "Apache-2.0",
+  "license": "BUSL-1.1",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -26,53 +26,31 @@
     "node": ">=20.19.0"
   },
   "bin": {
-    "oracle": "./bin/oracle.mjs",
-    "oracle-data": "./bin/desk-server.mjs",
-    "oracle-public": "./bin/oracle-public-server.mjs",
-    "oracle-data-mcp": "./bin/oracle-data-mcp.mjs",
-    "oracle-init": "./bin/oracle-init.mjs",
-    "oracle-upgrade": "./bin/oracle-upgrade.mjs",
-    "oracle-scan": "./bin/oracle-scan.mjs",
-    "oracle-route": "./bin/oracle-route.mjs"
+    "oracle": "./dist/bin/oracle.mjs",
+    "oracle-data": "./dist/bin/desk-server.mjs",
+    "oracle-public": "./dist/bin/oracle-public-server.mjs",
+    "oracle-data-mcp": "./dist/bin/oracle-data-mcp.mjs",
+    "oracle-init": "./dist/bin/oracle-init.mjs",
+    "oracle-upgrade": "./dist/bin/oracle-upgrade.mjs",
+    "oracle-scan": "./dist/bin/oracle-scan.mjs",
+    "oracle-route": "./dist/bin/oracle-route.mjs"
   },
   "exports": {
-    ".": "./src/index.mjs",
-    "./data": "./src/data/desk-data.mjs",
-    "./policy": "./src/public-control/policy-schema.mjs",
-    "./chains": "./src/chains.mjs",
-    "./scanner": "./src/scanner/index.mjs",
-    "./router": "./src/router/index.mjs",
-    "./action-semantics": "./src/action-semantics.mjs",
-    "./address-book": "./src/address-book.mjs",
-    "./nft-gas-war": "./src/nft-gas-war-guard.mjs",
-    "./prepare-envelope": "./src/prepare-envelope.mjs",
-    "./connect": "./src/onboarding/harness-configs.mjs",
-    "./receipts": "./src/action-receipts.mjs",
-    "./risk": "./src/portfolio-risk.mjs",
-    "./watch": "./src/watch-preferences.mjs",
-    "./signals": "./src/signals/index.mjs"
-  },
-  "scripts": {
-    "test": "ORACLE_TEST_ISOLATE_SECRETS=1 ORACLE_ROUTE_ATTESTATION_SECRET=oracle-unit-test-secret node --test test/*.test.mjs",
-    "test:boundary": "ORACLE_TEST_ISOLATE_SECRETS=1 ORACLE_ROUTE_ATTESTATION_SECRET=oracle-unit-test-secret node --test test/custody-boundary.test.mjs",
-    "e2e:solana-bitcoin": "node scripts/e2e-solana-bitcoin.mjs",
-    "e2e:hypercore-staking": "node scripts/e2e-hypercore-staking.mjs",
-    "start:data": "node bin/desk-server.mjs",
-    "start:public": "node bin/oracle-public-server.mjs",
-    "scan:public-apis": "node scripts/public-api-scan.mjs",
-    "health": "node -e \"import('./src/data/desk-data.mjs').then(m=>m.data.health().then(h=>console.log(JSON.stringify(h,null,2))))\"",
-    "init": "node bin/oracle-init.mjs",
-    "init:apply": "node bin/oracle-init.mjs --apply",
-    "scan": "node bin/oracle-scan.mjs",
-    "verify:venues": "node scripts/verify-v3-venues.mjs",
-    "route": "node bin/oracle-route.mjs",
-    "scan:secrets": "node scripts/secret-scan.mjs",
-    "test:count": "node scripts/check-test-count.mjs",
-    "test:count:update": "node scripts/check-test-count.mjs --update",
-    "test:protocol-templates": "RUN_PROTOCOL_TEMPLATE_TESTS=1 node --test test/protocol-templates.test.mjs",
-    "protocol:gate": "node scripts/protocol-template-gate.mjs",
-    "gate:docs": "node scripts/check-doc-drift.mjs",
-    "gate:release": "npm run gate:docs && node --test test/flag-polarity.test.mjs"
+    ".": "./dist/index.mjs",
+    "./data": "./dist/data/desk-data.mjs",
+    "./policy": "./dist/public-control/policy-schema.mjs",
+    "./chains": "./dist/chains.mjs",
+    "./scanner": "./dist/scanner/index.mjs",
+    "./router": "./dist/router/index.mjs",
+    "./action-semantics": "./dist/action-semantics.mjs",
+    "./address-book": "./dist/address-book.mjs",
+    "./nft-gas-war": "./dist/nft-gas-war-guard.mjs",
+    "./prepare-envelope": "./dist/prepare-envelope.mjs",
+    "./connect": "./dist/onboarding/harness-configs.mjs",
+    "./receipts": "./dist/action-receipts.mjs",
+    "./risk": "./dist/portfolio-risk.mjs",
+    "./watch": "./dist/watch-preferences.mjs",
+    "./signals": "./dist/signals/index.mjs"
   },
   "dependencies": {
     "@msgpack/msgpack": "^3.1.3",
@@ -83,28 +61,12 @@
     "viem": "^2.55.8"
   },
   "files": [
-    "bin/",
-    "src/",
-    "!src/**/__pycache__/**",
-    "profiles/",
-    "skills/",
-    "skins/",
-    "plugins/",
+    "dist/",
     "public/",
     "artifacts/",
     "README.md",
     "SETUP.md",
     "LICENSE",
-    "SECURITY.md",
-    "CONTRIBUTING.md",
-    "docs/",
-    "examples/",
-    "scripts/",
-    "protocols/templates/**/src/**",
-    "protocols/templates/**/test/**",
-    "protocols/templates/**/foundry.toml",
-    "protocols/templates/**/remappings.txt",
-    "protocols/templates/**/SECURITY.md",
-    "src/protocol-templates/**"
+    "SECURITY.md"
   ]
 }

package/public/oracle-splash/index.html

@@ -421,6 +421,12 @@ main{position:relative;z-index:2;padding-top:84px}
 .convert-pills span{font-family:var(--mono);font-size:10px;letter-spacing:.14em;text-transform:uppercase;border:1px solid rgba(124,196,255,.28);border-radius:999px;padding:8px 12px;color:var(--blue2)}
 .platform-beta{display:inline-flex;align-items:center;gap:10px;width:max-content;max-width:100%;font-family:var(--mono);font-size:11px;letter-spacing:.08em;color:var(--cool)}
 .platform-beta b{font-size:9px;letter-spacing:.16em;text-transform:uppercase;color:#071018;background:var(--blue2);border-radius:999px;padding:5px 8px}
+.cli-install{margin:0 0 22px;display:flex;flex-direction:column;gap:12px;align-items:flex-start}
+.cli-install-cmd{padding:16px 20px;border-radius:12px;border:1px solid rgba(124,196,255,.34);background:rgba(17,25,37,.9);max-width:100%;overflow-x:auto}
+.cli-install-cmd code{font-family:var(--mono);font-size:15px;letter-spacing:.02em;color:var(--blue2);white-space:nowrap}
+.cli-install-gate{display:flex;align-items:center;flex-wrap:wrap;gap:10px;font-family:var(--mono);font-size:11px;letter-spacing:.06em;color:var(--cool);margin:0;max-width:62ch;line-height:1.7}
+.cli-install-gate b{font-size:9px;letter-spacing:.16em;text-transform:uppercase;color:#071018;background:var(--blue2);border-radius:999px;padding:5px 8px;white-space:nowrap}
+.cli-install-gate a{color:var(--blue2);text-decoration:underline;text-underline-offset:3px}
 .cli-frame{border:1px solid var(--line);border-radius:16px;overflow:hidden;background:#0d1420;box-shadow:0 24px 60px rgba(0,0,0,.35)}
 .cli-frame img{display:block;width:100%;height:auto}
 .cli-cap{font-family:var(--mono);font-size:10px;letter-spacing:.16em;text-transform:uppercase;color:var(--mute);margin-top:10px;text-align:left}
@@ -763,6 +769,10 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
 <section class="section cli-section" id="cli">
  <p class="section-label rv">Oracle CLI</p>
  <h2 class="section-title rv">One surface. <em>Every chain.</em></h2>
+ <div class="cli-install rv">
+  <div class="cli-install-cmd"><code>npm i -g @oracle-agent/oracle</code></div>
+  <p class="cli-install-gate"><b>Locals Only access</b> Oracle unlocks when your agent wallet, or a wallet you import, holds a <a href="https://opensea.io/collection/locals-only-hyperevm" target="_blank" rel="noopener noreferrer">Locals Only</a> NFT.</p>
+ </div>
  <p class="section-lede rv">The real Oracle shell, isolated from desktop chrome. Pin the active surface with <code style="color:var(--blue2)">/chain hyperliquid</code>, switch models with <code style="color:var(--blue2)">/model</code>, then ask naturally.</p>
  <div class="convert-grid rv">
   <div>
@@ -779,7 +789,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
     <span>multichain routing</span>
     <span>self-custody</span>
    </div>
-   <p class="platform-beta"><b>Beta</b> Linux, Windows, and macOS apps are in beta.</p>
+   <p class="platform-beta"><b>Beta</b> Linux, Windows, and macOS desktop apps are in beta and not yet downloadable. The CLI runs on all three today.</p>
    <div class="cli-code">
     <div><b>oracle ›</b> /chain hyperliquid</div>
     <div><b>oracle ›</b> /chain show</div>

package/CONTRIBUTING.md

@@ -1,98 +0,0 @@
-# Contributing to Oracle
-
-Thanks for looking. Oracle is a control plane for money movement, so the review
-bar is about safety and honesty more than style.
-
-## Before you start
-
-Run the suite:
-
-```bash
-npm install
-npm test
-```
-
-391 tests, all green. If they aren't green on a clean checkout, that's a bug —
-please report it.
-
-## The one rule that matters
-
-**The public plane may never reach a private key or a house signer.**
-
-Oracle ships the data plane, the policy plane, and the control plane. It does not
-ship the executor. A PR that imports signer or keystore code into public modules
-will fail `test/custody-boundary.test.mjs`, and the fix is not to edit the
-forbidden list.
-
-If your feature seems to need a key, restructure it: build an unsigned
-transaction or a typed-data intent and hand it back to the caller to sign.
-
-## What we want
-
-- **Real bugs, fixed at the class level.** Reproduce it, point at the line, fix
-  every sibling call path — not just the one that was reported.
-- **New chains and providers.** This is the most useful contribution. See below.
-- **Honest capability tiers.** If a provider can only quote, mark it
-  `quote-only`. Do not mark it `prepare` because a prepare function exists but
-  was never validated against a live route.
-- **Tests that assert invariants**, not snapshots. `assert` that a minimum output
-  is enforced; don't freeze today's provider list into an equality check.
-- **Guards recomputed before signing.** A quote-time check that isn't re-verified
-  at broadcast is decoration.
-
-## What gets rejected
-
-- A signer, private key, or house-custody path in the public tree.
-- A destination allowlist that defaults to permissive, or an empty allowlist read
-  as "allow all."
-- Slippage widened past the 100 bps cap to make a trade go through. Block,
-  requote, or split instead.
-- A claim of execution support with no live prepare/simulate evidence.
-- Secrets in code, tests, fixtures, or docs — including a real wallet address as
-  a default `from` for quotes. Use `src/data/quote-placeholder.mjs`.
-- "It worked when I ran it" with no test.
-
-## Adding a provider
-
-1. Create `src/data/providers/<name>.mjs`.
-2. Export a `health()` plus the ops you actually implement.
-3. Register it in `src/data/catalog.mjs` with truthful `chainIds`, `auth`, `ops`,
-   and `execution` tier.
-4. Add a test with a mocked transport. Do not require a live network for CI.
-5. If it needs a key, the health check must report
-   `{ ok: false, configured: false }` rather than throwing.
-
-## Adding a chain
-
-1. Add an entry to `CHAINS` in `src/chains.mjs` with its `rpcEnv` names.
-2. Verify every router/venue address on-chain (`eth_getCode` must return real
-   bytecode) before adding it to `src/venues.mjs`.
-3. Comment each venue addition with how you verified it and when.
-4. An unverified chain stays fail-closed. That is a safe state, not a gap.
-
-Never allowlist a router you found only in a blog post or a model's answer. The
-destination allowlist is the highest-leverage control in the system.
-
-## Commits and PRs
-
-Conventional prefixes: `fix:`, `feat:`, `refactor:`, `docs:`, `test:`, `chore:`.
-
-In the PR body, state:
-
-- what broke or what's new
-- how you verified it (paste the real command output)
-- whether anything touches the custody boundary
-
-Small, reviewable PRs get merged. A 3000-line PR mixing a refactor with a policy
-change will sit.
-
-## Style
-
-- ES modules, Node 20+, no build step.
-- No new runtime dependency without a reason in the PR description.
-- Comments explain *why*, not *what*. If a line encodes a hard-won fact — a
-  provider's unit quirk, a revert cause — say so, and say how it was learned.
-
-## License
-
-Contributions are accepted under [Apache-2.0](LICENSE).