@oracle-agent/oracle 0.11.0 → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (308) hide show
  1. package/LICENSE +115 -201
  2. package/README.md +66 -84
  3. package/SECURITY.md +37 -12
  4. package/SETUP.md +207 -272
  5. package/dist/action-receipts.mjs +1 -0
  6. package/dist/action-semantics.mjs +1 -0
  7. package/dist/address-book.mjs +2 -0
  8. package/dist/bin/desk-server.mjs +14 -0
  9. package/dist/bin/oracle-data-mcp.mjs +8 -0
  10. package/dist/bin/oracle-init.mjs +24 -0
  11. package/dist/bin/oracle-public-server.mjs +5 -0
  12. package/dist/bin/oracle-route.mjs +22 -0
  13. package/dist/bin/oracle-scan.mjs +18 -0
  14. package/dist/bin/oracle-upgrade.mjs +21 -0
  15. package/dist/bin/oracle.mjs +68 -0
  16. package/dist/chains.mjs +1 -0
  17. package/dist/cli/commands/auth.mjs +16 -0
  18. package/dist/cli/commands/bootstrap.mjs +18 -0
  19. package/dist/cli/commands/chain.mjs +21 -0
  20. package/dist/cli/commands/chat.mjs +35 -0
  21. package/dist/cli/commands/credential.mjs +1 -0
  22. package/dist/cli/commands/data-mcp.mjs +2 -0
  23. package/dist/cli/commands/data.mjs +12 -0
  24. package/dist/cli/commands/doctor.mjs +5 -0
  25. package/dist/cli/commands/gate.mjs +13 -0
  26. package/dist/cli/commands/help.mjs +1 -0
  27. package/dist/cli/commands/init.mjs +3 -0
  28. package/dist/cli/commands/mcp.mjs +33 -0
  29. package/dist/cli/commands/model.mjs +44 -0
  30. package/dist/cli/commands/prepare.mjs +2 -0
  31. package/dist/cli/commands/public.mjs +3 -0
  32. package/dist/cli/commands/route.mjs +2 -0
  33. package/dist/cli/commands/runner.mjs +1 -0
  34. package/dist/cli/commands/scan.mjs +2 -0
  35. package/dist/cli/commands/setup.mjs +34 -0
  36. package/dist/cli/commands/sign.mjs +4 -0
  37. package/dist/cli/commands/signer.mjs +1 -0
  38. package/dist/cli/commands/upgrade.mjs +2 -0
  39. package/dist/cli/commands/vault.mjs +1 -0
  40. package/dist/cli/commands/version.mjs +2 -0
  41. package/dist/data/desk-data.mjs +12 -0
  42. package/dist/index.mjs +17 -0
  43. package/dist/nft-gas-war-guard.mjs +1 -0
  44. package/dist/onboarding/harness-configs.mjs +4 -0
  45. package/dist/portfolio-risk.mjs +1 -0
  46. package/dist/prepare-envelope.mjs +1 -0
  47. package/dist/public-control/policy-schema.mjs +1 -0
  48. package/dist/router/index.mjs +2 -0
  49. package/dist/scanner/index.mjs +4 -0
  50. package/dist/signals/index.mjs +1 -0
  51. package/dist/watch-preferences.mjs +1 -0
  52. package/package.json +27 -65
  53. package/public/oracle-splash/index.html +11 -1
  54. package/CONTRIBUTING.md +0 -98
  55. package/bin/desk-server.mjs +0 -440
  56. package/bin/oracle-data-mcp.mjs +0 -1019
  57. package/bin/oracle-init.mjs +0 -496
  58. package/bin/oracle-public-server.mjs +0 -36
  59. package/bin/oracle-route.mjs +0 -254
  60. package/bin/oracle-scan.mjs +0 -192
  61. package/bin/oracle-upgrade.mjs +0 -42
  62. package/bin/oracle.mjs +0 -33
  63. package/docs/adding-a-chain.md +0 -229
  64. package/docs/architecture.md +0 -138
  65. package/docs/cli.md +0 -47
  66. package/docs/connectors.md +0 -13
  67. package/docs/oracle-pack-standard.md +0 -29
  68. package/docs/profiles.md +0 -151
  69. package/docs/public-surface.md +0 -133
  70. package/examples/add-a-chain.mjs +0 -65
  71. package/examples/oracle-pack-template.mjs +0 -38
  72. package/examples/research-a-token.mjs +0 -70
  73. package/plugins/oracle-owner-gate/__init__.py +0 -227
  74. package/plugins/oracle-owner-gate/plugin.yaml +0 -9
  75. package/profiles/_template/SOUL.md +0 -54
  76. package/profiles/_template/profile.json +0 -22
  77. package/profiles/bitcoin-agent/SOUL.md +0 -31
  78. package/profiles/bitcoin-agent/profile.json +0 -32
  79. package/profiles/hyperliquid-agent/SOUL.md +0 -34
  80. package/profiles/hyperliquid-agent/profile.json +0 -37
  81. package/profiles/oracle/SOUL.md +0 -107
  82. package/profiles/oracle/profile.json +0 -39
  83. package/profiles/polymarket-agent/SOUL.md +0 -35
  84. package/profiles/polymarket-agent/profile.json +0 -34
  85. package/profiles/profile.schema.json +0 -90
  86. package/profiles/protocol-builder/SOUL.md +0 -57
  87. package/profiles/protocol-builder/profile.json +0 -39
  88. package/profiles/robinhood-agent/SOUL.md +0 -53
  89. package/profiles/robinhood-agent/profile.json +0 -40
  90. package/profiles/solana-agent/SOUL.md +0 -37
  91. package/profiles/solana-agent/profile.json +0 -37
  92. package/profiles/stable-agent/SOUL.md +0 -43
  93. package/profiles/stable-agent/profile.json +0 -37
  94. package/protocols/templates/safe-erc20/SECURITY.md +0 -16
  95. package/protocols/templates/safe-erc20/foundry.toml +0 -12
  96. package/protocols/templates/safe-erc20/remappings.txt +0 -2
  97. package/protocols/templates/safe-erc20/src/SafeERC20.sol +0 -53
  98. package/protocols/templates/safe-erc20/test/SafeERC20.t.sol +0 -72
  99. package/scripts/adversarial-bench.mjs +0 -114
  100. package/scripts/build-inscription.py +0 -230
  101. package/scripts/check-doc-drift.mjs +0 -123
  102. package/scripts/check-test-count.mjs +0 -105
  103. package/scripts/e2e-hl-markets.mjs +0 -21
  104. package/scripts/e2e-hl-perps.mjs +0 -48
  105. package/scripts/e2e-hypercore-staking.mjs +0 -128
  106. package/scripts/e2e-solana-bitcoin.mjs +0 -183
  107. package/scripts/protocol-template-gate.mjs +0 -15
  108. package/scripts/public-api-scan.mjs +0 -23
  109. package/scripts/secret-scan.mjs +0 -181
  110. package/scripts/verify-v3-venues.mjs +0 -192
  111. package/skills/balance/SKILL.md +0 -176
  112. package/skills/oracle-action-semantics/SKILL.md +0 -40
  113. package/skills/oracle-best-execution/SKILL.md +0 -127
  114. package/skills/oracle-bitcoin/SKILL.md +0 -53
  115. package/skills/oracle-chain-graphs-telegram-cards/SKILL.md +0 -59
  116. package/skills/oracle-chat/SKILL.md +0 -61
  117. package/skills/oracle-chat/chain.SKILL.md +0 -31
  118. package/skills/oracle-chat/setup.SKILL.md +0 -37
  119. package/skills/oracle-circuit-breaker/SKILL.md +0 -51
  120. package/skills/oracle-contract-research/SKILL.md +0 -55
  121. package/skills/oracle-desk/SKILL.md +0 -58
  122. package/skills/oracle-dex-launch/SKILL.md +0 -38
  123. package/skills/oracle-grants/SKILL.md +0 -69
  124. package/skills/oracle-hypercore-staking/SKILL.md +0 -57
  125. package/skills/oracle-hyperliquid/SKILL.md +0 -56
  126. package/skills/oracle-meme-token-sniper/SKILL.md +0 -73
  127. package/skills/oracle-multichain-nft-launch/SKILL.md +0 -338
  128. package/skills/oracle-multichain-token-launch/SKILL.md +0 -300
  129. package/skills/oracle-nft-gacha-launch/SKILL.md +0 -48
  130. package/skills/oracle-nft-mint-gas-war/SKILL.md +0 -63
  131. package/skills/oracle-polymarket/SKILL.md +0 -60
  132. package/skills/oracle-protocol-builder/SKILL.md +0 -59
  133. package/skills/oracle-protocol-security/SKILL.md +0 -60
  134. package/skills/oracle-public-product/SKILL.md +0 -44
  135. package/skills/oracle-receipts/SKILL.md +0 -52
  136. package/skills/oracle-rfq-tokenized-assets/SKILL.md +0 -69
  137. package/skills/oracle-smart-wallet-scanner/SKILL.md +0 -49
  138. package/skills/oracle-solana/SKILL.md +0 -65
  139. package/skills/oracle-solana-nft/SKILL.md +0 -54
  140. package/skills/oracle-token-research/SKILL.md +0 -67
  141. package/skins/oracle.yaml +0 -56
  142. package/src/action-receipts.mjs +0 -265
  143. package/src/action-semantics.mjs +0 -62
  144. package/src/address-book.mjs +0 -208
  145. package/src/agent-auth.mjs +0 -206
  146. package/src/approval-guard.mjs +0 -282
  147. package/src/attestation-secret.mjs +0 -88
  148. package/src/audit-log.mjs +0 -196
  149. package/src/auth/oauth.mjs +0 -672
  150. package/src/auto-slippage.mjs +0 -378
  151. package/src/capability-posture.mjs +0 -125
  152. package/src/chains.mjs +0 -62
  153. package/src/cli/chain-catalog.mjs +0 -215
  154. package/src/cli/chain-state.mjs +0 -74
  155. package/src/cli/commands/auth.mjs +0 -193
  156. package/src/cli/commands/bootstrap.mjs +0 -87
  157. package/src/cli/commands/chain.mjs +0 -143
  158. package/src/cli/commands/chat.mjs +0 -434
  159. package/src/cli/commands/credential.mjs +0 -9
  160. package/src/cli/commands/data-mcp.mjs +0 -18
  161. package/src/cli/commands/data.mjs +0 -75
  162. package/src/cli/commands/doctor.mjs +0 -136
  163. package/src/cli/commands/help.mjs +0 -7
  164. package/src/cli/commands/init.mjs +0 -27
  165. package/src/cli/commands/mcp.mjs +0 -142
  166. package/src/cli/commands/model.mjs +0 -99
  167. package/src/cli/commands/prepare.mjs +0 -12
  168. package/src/cli/commands/public.mjs +0 -20
  169. package/src/cli/commands/route.mjs +0 -12
  170. package/src/cli/commands/runner.mjs +0 -9
  171. package/src/cli/commands/scan.mjs +0 -12
  172. package/src/cli/commands/setup.mjs +0 -275
  173. package/src/cli/commands/sign.mjs +0 -21
  174. package/src/cli/commands/signer.mjs +0 -9
  175. package/src/cli/commands/upgrade.mjs +0 -12
  176. package/src/cli/commands/vault.mjs +0 -9
  177. package/src/cli/commands/version.mjs +0 -22
  178. package/src/cli/first-run.mjs +0 -23
  179. package/src/cli/kernel.mjs +0 -239
  180. package/src/cli/mcp-targets/chatgpt.mjs +0 -51
  181. package/src/cli/mcp-targets/claude-code.mjs +0 -39
  182. package/src/cli/mcp-targets/claude-desktop.mjs +0 -24
  183. package/src/cli/mcp-targets/codex.mjs +0 -41
  184. package/src/cli/mcp-targets/shared.mjs +0 -61
  185. package/src/cli/messaging-platforms.mjs +0 -209
  186. package/src/cli/model-config.mjs +0 -70
  187. package/src/cli/operator-dispatch.mjs +0 -258
  188. package/src/cli/oracle-harness.py +0 -415
  189. package/src/cli/paths.mjs +0 -83
  190. package/src/cli/runtime.mjs +0 -351
  191. package/src/cli/setup-state.mjs +0 -168
  192. package/src/cli/spawn-child.mjs +0 -43
  193. package/src/data/catalog.mjs +0 -585
  194. package/src/data/desk-data.mjs +0 -695
  195. package/src/data/http.mjs +0 -253
  196. package/src/data/provider-endpoint.mjs +0 -94
  197. package/src/data/providers/aerodrome.mjs +0 -245
  198. package/src/data/providers/balancer.mjs +0 -209
  199. package/src/data/providers/bitcoin-esplora.mjs +0 -216
  200. package/src/data/providers/bitcoin-meta.mjs +0 -378
  201. package/src/data/providers/blockscout.mjs +0 -14
  202. package/src/data/providers/bridges.mjs +0 -242
  203. package/src/data/providers/cowswap.mjs +0 -415
  204. package/src/data/providers/curve.mjs +0 -201
  205. package/src/data/providers/defillama.mjs +0 -88
  206. package/src/data/providers/dexscreener.mjs +0 -43
  207. package/src/data/providers/evm-rpc.mjs +0 -225
  208. package/src/data/providers/geckoterminal.mjs +0 -34
  209. package/src/data/providers/gmx.mjs +0 -496
  210. package/src/data/providers/hl-assets.mjs +0 -165
  211. package/src/data/providers/hl-info.mjs +0 -108
  212. package/src/data/providers/hl-markets.mjs +0 -210
  213. package/src/data/providers/hl-outcome.mjs +0 -61
  214. package/src/data/providers/hl-perps.mjs +0 -387
  215. package/src/data/providers/hl-staking.mjs +0 -353
  216. package/src/data/providers/hl-ws.mjs +0 -119
  217. package/src/data/providers/hyperevm-dex.mjs +0 -49
  218. package/src/data/providers/jupiter-venues.mjs +0 -119
  219. package/src/data/providers/jupiter.mjs +0 -315
  220. package/src/data/providers/lifi.mjs +0 -151
  221. package/src/data/providers/magiceden-sol.mjs +0 -406
  222. package/src/data/providers/morpho.mjs +0 -177
  223. package/src/data/providers/nft-gallery.mjs +0 -163
  224. package/src/data/providers/nft-portfolio.mjs +0 -494
  225. package/src/data/providers/odos.mjs +0 -156
  226. package/src/data/providers/oneinch.mjs +0 -174
  227. package/src/data/providers/opensea-multichain.mjs +0 -136
  228. package/src/data/providers/opensea-nft.mjs +0 -371
  229. package/src/data/providers/paraswap.mjs +0 -118
  230. package/src/data/providers/pendle.mjs +0 -188
  231. package/src/data/providers/poly-clob.mjs +0 -283
  232. package/src/data/providers/poly-public.mjs +0 -96
  233. package/src/data/providers/poly-ws.mjs +0 -103
  234. package/src/data/providers/portfolio-history.mjs +0 -394
  235. package/src/data/providers/portfolio.mjs +0 -594
  236. package/src/data/providers/rfq.mjs +0 -15
  237. package/src/data/providers/rh-agent.mjs +0 -59
  238. package/src/data/providers/satflow.mjs +0 -341
  239. package/src/data/providers/signed-material-guard.mjs +0 -108
  240. package/src/data/providers/solana-rpc.mjs +0 -197
  241. package/src/data/providers/uniswap-v3.mjs +0 -349
  242. package/src/data/providers/uniswap-v4.mjs +0 -414
  243. package/src/data/providers/zerox.mjs +0 -167
  244. package/src/data/public-api-scan.mjs +0 -61
  245. package/src/data/quote-placeholder.mjs +0 -31
  246. package/src/exact-integer.mjs +0 -72
  247. package/src/exec-policy.mjs +0 -455
  248. package/src/flags.mjs +0 -15
  249. package/src/fresh-window.mjs +0 -76
  250. package/src/gmx-attestation.mjs +0 -176
  251. package/src/index.mjs +0 -100
  252. package/src/nft-gas-war-guard.mjs +0 -139
  253. package/src/onboarding/agent-keys.mjs +0 -161
  254. package/src/onboarding/harness-configs.mjs +0 -102
  255. package/src/onboarding/index.mjs +0 -18
  256. package/src/onboarding/tiers.mjs +0 -139
  257. package/src/oracle-env.mjs +0 -47
  258. package/src/portfolio-risk.mjs +0 -170
  259. package/src/prepare-envelope.mjs +0 -204
  260. package/src/profile-upgrade.mjs +0 -277
  261. package/src/protocol-execution.mjs +0 -84
  262. package/src/protocol-templates/gate.mjs +0 -179
  263. package/src/protocol-templates/prepare-deploy.mjs +0 -81
  264. package/src/public-api/buzz-integration.mjs +0 -256
  265. package/src/public-api/connect-agent.mjs +0 -416
  266. package/src/public-api/grants.mjs +0 -142
  267. package/src/public-api/http.mjs +0 -389
  268. package/src/public-control/aa-adapter.mjs +0 -402
  269. package/src/public-control/build-registry.mjs +0 -227
  270. package/src/public-control/bundler-client.mjs +0 -357
  271. package/src/public-control/grant-indexer.mjs +0 -296
  272. package/src/public-control/policy-render.mjs +0 -69
  273. package/src/public-control/policy-schema.mjs +0 -318
  274. package/src/public-control/runtime-config.mjs +0 -275
  275. package/src/public-control/session-key-model.mjs +0 -374
  276. package/src/public-control/session-orchestrator.mjs +0 -412
  277. package/src/rfq/intent.mjs +0 -180
  278. package/src/rfq/sources.mjs +0 -181
  279. package/src/route-attestation.mjs +0 -132
  280. package/src/router/best-execution.mjs +0 -326
  281. package/src/router/index.mjs +0 -226
  282. package/src/router/prepare-bridge.mjs +0 -289
  283. package/src/router/prepare-route.mjs +0 -398
  284. package/src/router/proposal.mjs +0 -311
  285. package/src/router/risk-classifier.mjs +0 -119
  286. package/src/router/route-sources.mjs +0 -364
  287. package/src/scanner/chains.config.mjs +0 -430
  288. package/src/scanner/contract.mjs +0 -270
  289. package/src/scanner/evm-scanner.mjs +0 -394
  290. package/src/scanner/index.mjs +0 -9
  291. package/src/scanner/v2-venue.mjs +0 -335
  292. package/src/scanner/v3-venue.mjs +0 -290
  293. package/src/scopes.mjs +0 -44
  294. package/src/sell-simulation.mjs +0 -167
  295. package/src/signals/engine.mjs +0 -146
  296. package/src/signals/index.mjs +0 -1
  297. package/src/token-transfer-guard.mjs +0 -188
  298. package/src/tui/app.mjs +0 -438
  299. package/src/tui/backend.mjs +0 -145
  300. package/src/tui/format.mjs +0 -272
  301. package/src/tui/gateway-client.mjs +0 -177
  302. package/src/tui/input.mjs +0 -501
  303. package/src/tui/renderer.mjs +0 -443
  304. package/src/tui/standalone-client.mjs +0 -666
  305. package/src/tui/theme.mjs +0 -81
  306. package/src/vault-attestation.mjs +0 -146
  307. package/src/venues.mjs +0 -206
  308. package/src/watch-preferences.mjs +0 -85
@@ -1,163 +0,0 @@
1
- // Raster-only NFT contact sheets returned as SVG image content.
2
-
3
- import { timed } from "../http.mjs";
4
-
5
- const ALLOWED_IMAGE_HOSTS = Object.freeze([
6
- "i.seadn.io",
7
- "openseauserdata.com",
8
- "arweave.net",
9
- "ipfs.io",
10
- "nftstorage.link",
11
- "dweb.link",
12
- "cloudflare-ipfs.com",
13
- "ordinals.com",
14
- "ordinals.g.com",
15
- "cdn.helius-rpc.com",
16
- "shdw-drive.genesysgo.net",
17
- ]);
18
-
19
- const RASTER_MIME = new Set(["image/jpeg", "image/png", "image/webp"]);
20
-
21
- function allowedHost(hostname) {
22
- const host = String(hostname || "").toLowerCase();
23
- return ALLOWED_IMAGE_HOSTS.some((allowed) => host === allowed || host.endsWith(`.${allowed}`));
24
- }
25
-
26
- function gatewayUrl(value) {
27
- const text = String(value || "").trim();
28
- if (text.startsWith("ipfs://")) return `https://ipfs.io/ipfs/${text.slice(7).replace(/^ipfs\//, "")}`;
29
- if (text.startsWith("ar://")) return `https://arweave.net/${text.slice(5)}`;
30
- return text;
31
- }
32
-
33
- function safeImageUrl(value) {
34
- const text = gatewayUrl(value);
35
- let url;
36
- try {
37
- url = new URL(text);
38
- } catch {
39
- return null;
40
- }
41
- if (url.protocol !== "https:" || url.username || url.password || !allowedHost(url.hostname)) return null;
42
- return url;
43
- }
44
-
45
- async function fetchRaster(value, opts = {}) {
46
- const fetchImpl = opts.fetchImpl || globalThis.fetch;
47
- if (typeof fetchImpl !== "function") throw new Error("gallery fetch unavailable");
48
- let url = safeImageUrl(value);
49
- if (!url) throw new Error("image host is not on the raster gallery allowlist");
50
- const maxBytes = Math.min(Math.max(Number(opts.maxImageBytes ?? 1_500_000), 50_000), 4_000_000);
51
-
52
- for (let redirect = 0; redirect <= 3; redirect += 1) {
53
- const attempt = await timed(() => fetchImpl(url.toString(), {
54
- method: "GET",
55
- redirect: "manual",
56
- headers: { accept: "image/jpeg,image/png,image/webp" },
57
- signal: AbortSignal.timeout(opts.timeoutMs ?? 12_000),
58
- }));
59
- if (!attempt.ok) throw new Error(attempt.error);
60
- const response = attempt.data;
61
- if (response.status >= 300 && response.status < 400) {
62
- const location = response.headers?.get?.("location");
63
- if (!location) throw new Error("image redirect missing location");
64
- const next = safeImageUrl(new URL(location, url).toString());
65
- if (!next) throw new Error("image redirect left the host allowlist");
66
- url = next;
67
- continue;
68
- }
69
- if (!response.ok) throw new Error(`image HTTP ${response.status}`);
70
- const mimeType = String(response.headers?.get?.("content-type") || "").split(";", 1)[0].toLowerCase();
71
- if (!RASTER_MIME.has(mimeType)) throw new Error(`unsafe or unsupported image type ${mimeType || "unknown"}`);
72
- const length = Number(response.headers?.get?.("content-length") || 0);
73
- if (length > maxBytes) throw new Error("image exceeds gallery byte cap");
74
- const bytes = Buffer.from(await response.arrayBuffer());
75
- if (!bytes.length || bytes.length > maxBytes) throw new Error("image exceeds gallery byte cap");
76
- return { mimeType, data: bytes.toString("base64"), sourceUrl: url.toString(), bytes: bytes.length };
77
- }
78
- throw new Error("too many image redirects");
79
- }
80
-
81
- function xml(value) {
82
- return String(value ?? "")
83
- .replaceAll("&", "&amp;")
84
- .replaceAll("<", "&lt;")
85
- .replaceAll(">", "&gt;")
86
- .replaceAll('"', "&quot;")
87
- .replaceAll("'", "&apos;");
88
- }
89
-
90
- function label(item, index) {
91
- return item.name || item.collection || item.tokenId || `NFT ${index + 1}`;
92
- }
93
-
94
- export async function nftGallery(args = {}, opts = {}) {
95
- const allItems = Array.isArray(args.items) ? args.items : [];
96
- if (!allItems.length) throw new Error("nft gallery requires inventory items");
97
- const pageSize = Math.min(Math.max(Number(args.pageSize ?? 12) || 12, 1), 12);
98
- const page = Math.max(Number(args.page ?? 1) || 1, 1);
99
- const totalPages = Math.max(Math.ceil(allItems.length / pageSize), 1);
100
- if (page > totalPages) throw new Error(`nft gallery page ${page} exceeds ${totalPages}`);
101
- const items = allItems.slice((page - 1) * pageSize, page * pageSize);
102
- const loaded = [];
103
- let totalBytes = 0;
104
- const maxTotalBytes = Math.min(Math.max(Number(args.maxTotalBytes ?? 8_000_000), 250_000), 12_000_000);
105
-
106
- for (const item of items) {
107
- if (totalBytes >= maxTotalBytes) {
108
- loaded.push({ item, image: null, error: "gallery page byte cap reached" });
109
- continue;
110
- }
111
- try {
112
- const image = await fetchRaster(item.imageUrl || item.originalImageUrl, {
113
- ...opts,
114
- maxImageBytes: Math.min(Number(args.maxImageBytes ?? 1_500_000), maxTotalBytes - totalBytes),
115
- });
116
- totalBytes += image.bytes;
117
- loaded.push({ item, image, error: null });
118
- } catch (error) {
119
- loaded.push({ item, image: null, error: String(error?.message || error).slice(0, 180) });
120
- }
121
- }
122
-
123
- const columns = 3;
124
- const tileWidth = 340;
125
- const tileHeight = 400;
126
- const headerHeight = 76;
127
- const rows = Math.ceil(items.length / columns);
128
- const width = columns * tileWidth;
129
- const height = headerHeight + rows * tileHeight;
130
- const body = loaded.map(({ item, image, error }, index) => {
131
- const column = index % columns;
132
- const row = Math.floor(index / columns);
133
- const x = column * tileWidth;
134
- const y = headerHeight + row * tileHeight;
135
- const art = image
136
- ? `<image x="${x + 14}" y="${y + 14}" width="312" height="312" preserveAspectRatio="xMidYMid slice" href="data:${image.mimeType};base64,${image.data}"/>`
137
- : `<rect x="${x + 14}" y="${y + 14}" width="312" height="312" rx="14" fill="#151820"/><text x="${x + 170}" y="${y + 165}" text-anchor="middle" fill="#76808f" font-size="16">image unavailable</text>`;
138
- const title = xml(label(item, index).slice(0, 34));
139
- const chain = xml(item.chain || "unknown chain");
140
- return `${art}<text x="${x + 16}" y="${y + 350}" fill="#f3f5f7" font-size="17" font-weight="600">${title}</text><text x="${x + 16}" y="${y + 376}" fill="#8d98a8" font-size="13">${chain}${error ? " · placeholder" : ""}</text>`;
141
- }).join("");
142
- const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="${width}" height="${height}" viewBox="0 0 ${width} ${height}"><rect width="100%" height="100%" fill="#090b10"/><text x="24" y="34" fill="#ffffff" font-size="24" font-weight="700">NFT INVENTORY</text><text x="24" y="58" fill="#8d98a8" font-size="14">page ${page} of ${totalPages} · ${allItems.length} assets · generated ${xml(new Date().toISOString())}</text>${body}</svg>`;
143
-
144
- return {
145
- provider: "nft-portfolio",
146
- operation: "gallery",
147
- mimeType: "image/svg+xml",
148
- dataBase64: Buffer.from(svg).toString("base64"),
149
- page,
150
- pageSize,
151
- totalPages,
152
- totalItems: allItems.length,
153
- renderedItems: loaded.filter((row) => row.image).length,
154
- placeholders: loaded.filter((row) => !row.image).map((row) => ({
155
- assetKey: row.item.assetKey || null,
156
- name: row.item.name || null,
157
- sourceUrl: row.item.imageUrl || null,
158
- error: row.error,
159
- })),
160
- rasterOnly: true,
161
- externalScripts: false,
162
- };
163
- }
@@ -1,494 +0,0 @@
1
- // Read-only NFT inventory and valuation coverage across configured wallet families.
2
-
3
- import { mapLimit, timed } from "../http.mjs";
4
- import { resolvePortfolioAddresses } from "./portfolio.mjs";
5
- import { openseaAccountNfts, openseaAccountPnl, openseaPrepareList } from "./opensea-nft.mjs";
6
- import { satflowWalletContents, satflowPrepareList } from "./satflow.mjs";
7
- import { btcInscriptions } from "./bitcoin-meta.mjs";
8
- import { magicEdenSolPrepareList } from "./magiceden-sol.mjs";
9
- import { nftGallery } from "./nft-gallery.mjs";
10
-
11
- export const OPENSEA_WALLET_CHAINS = Object.freeze([
12
- { chain: "ethereum", chainId: 1, family: "evm" },
13
- { chain: "optimism", chainId: 10, family: "evm" },
14
- { chain: "polygon", chainId: 137, family: "evm" },
15
- { chain: "stablechain", chainId: 988, family: "evm" },
16
- { chain: "hyperevm", chainId: 999, family: "evm" },
17
- { chain: "abstract", chainId: 2741, family: "evm" },
18
- { chain: "robinhood", chainId: 4663, family: "evm" },
19
- { chain: "base", chainId: 8453, family: "evm" },
20
- { chain: "arbitrum", chainId: 42161, family: "evm" },
21
- { chain: "avalanche", chainId: 43114, family: "evm" },
22
- { chain: "hyperliquid", chainId: null, family: "hyperliquid" },
23
- ]);
24
-
25
- const KNOWN_UNSUPPORTED = Object.freeze([
26
- { family: "evm", chain: "bsc", chainId: 56, reason: "OpenSea account inventory does not support BSC" },
27
- { family: "cosmos", reason: "requires a chain-specific bech32 address and NFT indexer" },
28
- { family: "sui", reason: "owner inventory adapter not installed" },
29
- { family: "aptos", reason: "owner inventory adapter not installed" },
30
- ]);
31
-
32
- function childOpts(opts = {}, key) {
33
- return {
34
- fetchImpl: opts.fetchImpl,
35
- timeoutMs: opts.timeoutMs,
36
- ...(opts[key] || {}),
37
- };
38
- }
39
-
40
- async function safe(label, fn) {
41
- const result = await timed(fn);
42
- return result.ok
43
- ? { ok: true, data: result.data }
44
- : { ok: false, error: `${label}: ${result.error}`.slice(0, 300) };
45
- }
46
-
47
- function rowsFromSatflow(contents) {
48
- if (Array.isArray(contents)) return contents;
49
- for (const key of ["items", "results", "ordinals", "inscriptions", "data"]) {
50
- if (Array.isArray(contents?.[key])) return contents[key];
51
- }
52
- return [];
53
- }
54
-
55
- function normalizeSatflowItem(raw = {}, owner) {
56
- const inscriptionId = raw.inscription_id || raw.inscriptionId || raw.id || raw.inscription || null;
57
- return {
58
- chain: "bitcoin",
59
- family: "bitcoin",
60
- owner,
61
- contract: null,
62
- tokenId: inscriptionId == null ? null : String(inscriptionId),
63
- tokenStandard: "ordinal",
64
- collection: raw.collection_slug || raw.collectionSlug || raw.collection?.slug || raw.collection || null,
65
- name: raw.name || raw.meta?.name || (inscriptionId ? `Inscription ${inscriptionId}` : "Bitcoin inscription"),
66
- description: raw.description || raw.meta?.description || null,
67
- imageUrl: raw.image_url || raw.imageUrl || raw.content_url || raw.contentUrl || raw.thumbnail || null,
68
- originalImageUrl: raw.content_url || raw.contentUrl || raw.image_url || raw.imageUrl || null,
69
- animationUrl: null,
70
- metadataUrl: raw.metadata_url || raw.metadataUrl || null,
71
- marketplaceUrl: raw.marketplace_url || raw.marketplaceUrl || null,
72
- estimatedValueUsd: raw.estimated_value_usd != null && Number.isFinite(Number(raw.estimated_value_usd))
73
- ? Number(raw.estimated_value_usd)
74
- : null,
75
- estimatedValueSats: (raw.floor_price_sats ?? raw.price_sats) != null && Number.isFinite(Number(raw.floor_price_sats ?? raw.price_sats))
76
- ? Number(raw.floor_price_sats ?? raw.price_sats)
77
- : null,
78
- spam: false,
79
- disabled: false,
80
- nsfw: false,
81
- listed: raw.listed === true || raw.is_listed === true,
82
- listingId: raw.listing_id || raw.listingId || null,
83
- traits: Array.isArray(raw.traits) ? raw.traits : [],
84
- updatedAt: raw.updated_at || raw.updatedAt || null,
85
- acquisitionCost: null,
86
- itemPnl: {
87
- status: "unavailable",
88
- reason: "Satflow wallet inventory does not expose trustworthy acquisition cost",
89
- },
90
- listingAdapter: "satflow",
91
- source: "satflow-wallet-contents",
92
- };
93
- }
94
-
95
- function normalizeFallbackInscription(id, owner) {
96
- return {
97
- chain: "bitcoin",
98
- family: "bitcoin",
99
- owner,
100
- contract: null,
101
- tokenId: String(id),
102
- tokenStandard: "ordinal",
103
- collection: null,
104
- name: `Inscription ${id}`,
105
- description: null,
106
- imageUrl: null,
107
- originalImageUrl: null,
108
- animationUrl: null,
109
- metadataUrl: null,
110
- marketplaceUrl: null,
111
- estimatedValueUsd: null,
112
- spam: false,
113
- disabled: false,
114
- nsfw: false,
115
- traits: [],
116
- updatedAt: null,
117
- acquisitionCost: null,
118
- itemPnl: { status: "unavailable", reason: "address indexer returned no acquisition or valuation data" },
119
- listingAdapter: "satflow",
120
- source: "bitcoin-meta-address-indexer",
121
- };
122
- }
123
-
124
- export function nftAssetKey(item = {}) {
125
- return [item.chain || "unknown", item.contract || "native", item.tokenId || "unknown"].join(":").toLowerCase();
126
- }
127
-
128
- function costBasisMap(input) {
129
- const out = new Map();
130
- if (Array.isArray(input)) {
131
- for (const row of input) {
132
- if (row?.assetKey) out.set(String(row.assetKey).toLowerCase(), row);
133
- }
134
- return out;
135
- }
136
- if (input && typeof input === "object") {
137
- for (const [key, value] of Object.entries(input)) out.set(key.toLowerCase(), value);
138
- }
139
- return out;
140
- }
141
-
142
- function applyCostBasis(item, basis) {
143
- const key = nftAssetKey(item);
144
- const row = basis.get(key);
145
- const current = item.estimatedValueUsd == null ? null : Number(item.estimatedValueUsd);
146
- if (!row) return { ...item, assetKey: key };
147
- const cost = Number(row.costUsd);
148
- const fees = Number(row.feesUsd ?? 0);
149
- if (!Number.isFinite(cost) || cost < 0 || !Number.isFinite(fees) || fees < 0) {
150
- return {
151
- ...item,
152
- assetKey: key,
153
- acquisitionCost: null,
154
- itemPnl: { status: "unavailable", reason: "invalid user-supplied cost basis" },
155
- };
156
- }
157
- const totalCostUsd = Math.round((cost + fees) * 100) / 100;
158
- if (!Number.isFinite(current)) {
159
- return {
160
- ...item,
161
- assetKey: key,
162
- acquisitionCost: {
163
- costUsd: cost,
164
- feesUsd: fees,
165
- totalCostUsd,
166
- acquiredAt: row.acquiredAt || null,
167
- source: row.source || "user-supplied",
168
- },
169
- itemPnl: { status: "unavailable", reason: "current NFT valuation is unavailable" },
170
- };
171
- }
172
- return {
173
- ...item,
174
- assetKey: key,
175
- acquisitionCost: {
176
- costUsd: cost,
177
- feesUsd: fees,
178
- totalCostUsd,
179
- acquiredAt: row.acquiredAt || null,
180
- source: row.source || "user-supplied",
181
- },
182
- itemPnl: {
183
- status: "estimated",
184
- methodology: "provider estimated current value minus supplied USD acquisition cost and fees",
185
- unrealizedUsd: Math.round((current - totalCostUsd) * 100) / 100,
186
- currentValueUsd: current,
187
- totalCostUsd,
188
- realizedUsd: null,
189
- },
190
- };
191
- }
192
-
193
- function dedupe(items) {
194
- const map = new Map();
195
- for (const item of items) {
196
- const key = nftAssetKey(item);
197
- if (!map.has(key)) map.set(key, item);
198
- }
199
- return [...map.values()];
200
- }
201
-
202
- function pnlSummary(items, accountPnl) {
203
- const known = items.filter((item) => item.itemPnl?.status === "estimated");
204
- const unknown = items.length - known.length;
205
- const knownUnrealizedUsd = Math.round(
206
- known.reduce((sum, item) => sum + Number(item.itemPnl.unrealizedUsd || 0), 0) * 100,
207
- ) / 100;
208
- return {
209
- nftItemPnl: {
210
- status: unknown === 0 && items.length ? "estimated-complete-for-held-items" : known.length ? "partial" : "unavailable",
211
- methodology: "Only items with explicit acquisition cost and provider estimated current value are included",
212
- knownUnrealizedUsd,
213
- knownItems: known.length,
214
- unknownItems: unknown,
215
- realizedUsd: null,
216
- warning: "Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete.",
217
- },
218
- providerAccountPnl: accountPnl,
219
- };
220
- }
221
-
222
- /** One normalized owner NFT inventory with per-chain partial failure reporting. */
223
- export async function nftHealth() {
224
- return {
225
- ok: true,
226
- provider: "nft-portfolio",
227
- readOnly: true,
228
- marketplaces: ["opensea", "magiceden-sol", "satflow"],
229
- listingExecution: "prepare-only",
230
- };
231
- }
232
-
233
- export async function nftInventory(args = {}, opts = {}) {
234
- const generatedAt = new Date().toISOString();
235
- const addresses = resolvePortfolioAddresses(args, opts.env || process.env);
236
- const selected = Array.isArray(args.chains) && args.chains.length
237
- ? new Set(args.chains.map((value) => String(value).toLowerCase()))
238
- : null;
239
- const openSeaChains = OPENSEA_WALLET_CHAINS.filter((row) => !selected || selected.has(row.chain));
240
- const coverage = [];
241
- const items = [];
242
- const openseaOpts = childOpts(opts, "opensea");
243
-
244
- const evmRows = addresses.evm
245
- ? openSeaChains.filter((row) => row.family !== "solana")
246
- : [];
247
- const evmResults = await mapLimit(evmRows, 4, async (row) => ({
248
- row,
249
- result: await safe(
250
- `opensea-${row.chain}`,
251
- () => openseaAccountNfts({
252
- chain: row.chain,
253
- address: addresses.evm,
254
- pageSize: args.pageSize,
255
- maxPages: args.maxPages,
256
- }, openseaOpts),
257
- opts.timeoutMs ?? 35_000,
258
- ),
259
- }));
260
-
261
- for (const { row, result } of evmResults) {
262
- if (result.ok) {
263
- const rows = result.data.nfts.map((item) => ({
264
- ...item,
265
- family: row.family,
266
- chainId: row.chainId,
267
- listingAdapter: "opensea",
268
- source: "opensea-account-inventory",
269
- }));
270
- items.push(...rows);
271
- coverage.push({
272
- family: row.family,
273
- chain: row.chain,
274
- chainId: row.chainId,
275
- status: result.data.complete ? "ok" : "partial",
276
- count: rows.length,
277
- complete: result.data.complete,
278
- next: result.data.next,
279
- source: "opensea",
280
- });
281
- } else {
282
- coverage.push({ family: row.family, chain: row.chain, chainId: row.chainId, status: "unavailable", error: result.error, source: "opensea" });
283
- }
284
- }
285
-
286
- if (!addresses.evm) {
287
- for (const row of openSeaChains.filter((item) => item.family !== "solana")) {
288
- coverage.push({ family: row.family, chain: row.chain, chainId: row.chainId, status: "not-configured", reason: "EVM address missing" });
289
- }
290
- }
291
-
292
- if (addresses.solana && (!selected || selected.has("solana"))) {
293
- const result = await safe(
294
- "opensea-solana",
295
- () => openseaAccountNfts({
296
- chain: "solana",
297
- address: addresses.solana,
298
- pageSize: args.pageSize,
299
- maxPages: args.maxPages,
300
- }, openseaOpts),
301
- opts.timeoutMs ?? 35_000,
302
- );
303
- if (result.ok) {
304
- const rows = result.data.nfts.map((item) => ({
305
- ...item,
306
- family: "solana",
307
- chainId: null,
308
- listingAdapter: null,
309
- source: "opensea-account-inventory",
310
- }));
311
- items.push(...rows);
312
- coverage.push({ family: "solana", chain: "solana", status: result.data.complete ? "ok" : "partial", count: rows.length, complete: result.data.complete, next: result.data.next, source: "opensea" });
313
- } else {
314
- coverage.push({ family: "solana", chain: "solana", status: "unavailable", error: result.error, source: "opensea" });
315
- }
316
- } else if (!selected || selected.has("solana")) {
317
- coverage.push({ family: "solana", chain: "solana", status: "not-configured", reason: "Solana address missing" });
318
- }
319
-
320
- if (addresses.bitcoin && (!selected || selected.has("bitcoin"))) {
321
- const satflow = await safe(
322
- "satflow-wallet-contents",
323
- () => satflowWalletContents({ address: addresses.bitcoin, type: "ordinals", limit: args.bitcoinLimit ?? 100, offset: 0 }, childOpts(opts, "satflow")),
324
- opts.timeoutMs ?? 35_000,
325
- );
326
- if (satflow.ok) {
327
- const rows = rowsFromSatflow(satflow.data.contents).map((item) => normalizeSatflowItem(item, addresses.bitcoin));
328
- items.push(...rows);
329
- const complete = rows.length < Number(args.bitcoinLimit ?? 100);
330
- coverage.push({ family: "bitcoin", chain: "bitcoin", status: complete ? "ok" : "partial", count: rows.length, complete, source: "satflow" });
331
- } else {
332
- const fallback = await safe(
333
- "bitcoin-meta-inscriptions",
334
- () => btcInscriptions({ address: addresses.bitcoin }, childOpts(opts, "bitcoinMeta")),
335
- opts.timeoutMs ?? 35_000,
336
- );
337
- const ids = fallback.ok && fallback.data?.ok && Array.isArray(fallback.data.inscriptions)
338
- ? fallback.data.inscriptions
339
- : [];
340
- items.push(...ids.map((id) => normalizeFallbackInscription(id, addresses.bitcoin)));
341
- coverage.push({
342
- family: "bitcoin",
343
- chain: "bitcoin",
344
- status: ids.length ? "partial" : "unavailable",
345
- count: ids.length,
346
- complete: false,
347
- source: ids.length ? "bitcoin-meta" : "satflow",
348
- error: ids.length ? "Satflow unavailable; fallback has IDs only" : satflow.error,
349
- });
350
- }
351
- } else if (!selected || selected.has("bitcoin")) {
352
- coverage.push({ family: "bitcoin", chain: "bitcoin", status: "not-configured", reason: "Bitcoin address missing" });
353
- }
354
-
355
- const accountPnl = [];
356
- if (args.includePnl !== false) {
357
- for (const address of [...new Set([addresses.evm, addresses.solana].filter(Boolean))]) {
358
- const result = await safe(
359
- `opensea-pnl-${address}`,
360
- () => openseaAccountPnl({ address }, openseaOpts),
361
- opts.timeoutMs ?? 35_000,
362
- );
363
- accountPnl.push(result.ok
364
- ? { status: "ok", ...result.data }
365
- : { status: "unavailable", address, source: "opensea-indexed-account-pnl", error: result.error });
366
- }
367
- }
368
-
369
- const basis = costBasisMap(args.costBasis);
370
- const normalized = dedupe(items).map((item) => applyCostBasis(item, basis));
371
- const visible = normalized.filter((item) => !item.spam);
372
- const flagged = normalized.filter((item) => item.spam);
373
- const estimated = visible.filter((item) =>
374
- item.estimatedValueUsd != null && Number.isFinite(Number(item.estimatedValueUsd)),
375
- );
376
- const estimatedCurrentValueUsd = Math.round(
377
- estimated.reduce((sum, item) => sum + Number(item.estimatedValueUsd), 0) * 100,
378
- ) / 100;
379
- const missingValueItems = visible.length - estimated.length;
380
- const failedCoverage = coverage.filter((row) => row.status !== "ok" || row.complete === false);
381
-
382
- return {
383
- provider: "nft-portfolio",
384
- operation: "inventory",
385
- readOnly: true,
386
- generatedAt,
387
- addresses,
388
- coverage,
389
- unsupported: KNOWN_UNSUPPORTED,
390
- inventory: {
391
- count: normalized.length,
392
- visibleCount: visible.length,
393
- flaggedCount: flagged.length,
394
- items: normalized,
395
- visibleItems: visible,
396
- flaggedItems: flagged,
397
- },
398
- valuation: {
399
- estimatedCurrentValueUsd,
400
- valuedItems: estimated.length,
401
- unvaluedItems: missingValueItems,
402
- complete: missingValueItems === 0 && failedCoverage.length === 0,
403
- methodology: "Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid.",
404
- },
405
- pnl: pnlSummary(visible, accountPnl),
406
- listingCoverage: {
407
- opensea: "EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",
408
- satflow: "Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",
409
- solana: "Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",
410
- unsupported: "Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed",
411
- },
412
- metadataSafety: {
413
- imagesAreUntrusted: true,
414
- animationAndHtmlNotRendered: true,
415
- galleryRasterOnly: true,
416
- missingImagesUsePlaceholders: true,
417
- },
418
- };
419
- }
420
-
421
- function futureUnixSeconds(value, label) {
422
- const raw = typeof value === "number" ? value * 1000 : Date.parse(String(value || ""));
423
- if (!Number.isFinite(raw)) throw new Error(`${label} must be an ISO 8601 timestamp or Unix seconds`);
424
- const seconds = Math.floor(raw / 1000);
425
- if (seconds <= Math.floor(Date.now() / 1000)) throw new Error(`${label} must be in the future`);
426
- return seconds;
427
- }
428
-
429
- function positiveSats(value) {
430
- const text = String(value ?? "").trim();
431
- if (!/^[1-9]\d*$/.test(text)) throw new Error("Bitcoin NFT list priceSats must be a positive integer");
432
- return text;
433
- }
434
-
435
- export async function nftPrepareList(args = {}, opts = {}) {
436
- if (args.userConfirmed !== true) {
437
- throw new Error("NFT listing preparation requires userConfirmed=true after reviewing asset, marketplace, price, currency, fees, royalties, and expiry");
438
- }
439
- const marketplace = String(args.marketplace || "").trim().toLowerCase();
440
- if (marketplace === "opensea") {
441
- return openseaPrepareList(args, childOpts(opts, "opensea"));
442
- }
443
- if (marketplace === "magiceden" || marketplace === "magiceden-sol") {
444
- const expiry = futureUnixSeconds(args.expiry ?? args.endTime, "Solana NFT listing expiry");
445
- return magicEdenSolPrepareList({ ...args, expiry }, childOpts(opts, "magiceden"));
446
- }
447
- if (marketplace === "satflow") {
448
- const expiry = futureUnixSeconds(args.expiry ?? args.endTime ?? args.expiresAt, "Bitcoin NFT listing expiry");
449
- return satflowPrepareList({
450
- inscription_id: args.inscriptionId || args.tokenId,
451
- runes_output: args.runesOutput,
452
- ord_address: args.ordAddress || args.seller,
453
- receive_address: args.receiveAddress,
454
- price: positiveSats(args.priceSats ?? args.price),
455
- tap_key: args.tapKey,
456
- collection_slug: args.collectionSlug || args.collection,
457
- expires_at: expiry,
458
- }, childOpts(opts, "satflow"));
459
- }
460
- throw new Error(`unsupported NFT marketplace: ${marketplace || "<missing>"}`);
461
- }
462
-
463
- export async function nftPnl(args = {}, opts = {}) {
464
- const inventory = await nftInventory({ ...args, includePnl: true }, opts);
465
- return {
466
- provider: "nft-portfolio",
467
- operation: "pnl",
468
- readOnly: true,
469
- generatedAt: inventory.generatedAt,
470
- addresses: inventory.addresses,
471
- coverage: inventory.coverage,
472
- unsupported: inventory.unsupported,
473
- valuation: inventory.valuation,
474
- pnl: inventory.pnl,
475
- };
476
- }
477
-
478
- export async function nftPortfolioGallery(args = {}, opts = {}) {
479
- let items = Array.isArray(args.items) ? args.items : null;
480
- let inventory = null;
481
- if (!items) {
482
- inventory = await nftInventory({ ...args, includePnl: false }, opts);
483
- items = inventory.inventory.visibleItems;
484
- }
485
- const gallery = await nftGallery({ ...args, items }, childOpts(opts, "gallery"));
486
- return {
487
- ...gallery,
488
- inventorySummary: inventory ? {
489
- visibleCount: inventory.inventory.visibleCount,
490
- flaggedCount: inventory.inventory.flaggedCount,
491
- coverage: inventory.coverage,
492
- } : null,
493
- };
494
- }